@vrtmrz/livesync-commonlib 0.1.32 → 0.1.34

package/docs/proven-in-use.md

@@ -16,7 +16,11 @@ The unreleased 0.1.30 packed candidate adds encryption of Hidden File Sync and C
 
 Additional real-CouchDB integration tests exercise Fast Fetch admission before local reset, generation 12 acceptance, and generation 13 retrieval with plaintext and encrypted internal Metadata together. A real-Obsidian migration scenario enables the preference through the settings UI without Rebuild, verifies that unchanged Metadata retains its original revision while rewritten entries are encrypted with stable IDs, and checks a second device's mismatch rejection and restoration after alignment. After turning the preference OFF, Fast Fetch still retrieves both representations and their Chunks with matching content; the remote feature declaration remains. These checks use the local packed candidate with LiveSync 1.0.32.
 
-For optional independent ID derivation, Commonlib's focused tests cover deterministic Chunk and document IDs, legacy mode, remote document sampling, and transport admission. The focused `/settings` entry also formats a saved key as a versioned recovery code and imports it without deriving a different key; an ordinary source still uses the password KDF. Real CouchDB and Object Storage integration tests exercise direct-access rejection before a control-document change and Journal acceptance or rejection against an encrypted milestone proof. The first Journal milestone written by setup or Rebuild carries that proof before a transfer begins. A locally packed candidate based on Commonlib 0.1.31 has also passed LiveSync 1.0.32's real-Obsidian CouchDB two-Vault and onboarding workflows, a real-Obsidian Object Storage upload with keyed IDs and an encrypted milestone proof, and a CLI P2P transfer and mismatched-key rejection using Setup URIs. The published 0.1.31 package does not contain this feature; mobile timing and a released-package consumer run remain outstanding.
+Optional independent ID derivation uses a saved secret for encrypted Chunk IDs and obfuscated document IDs. The unreleased Chunk update replaces the algorithm from `0.1.32`, published with the `next` tag, while retaining `idDerivationVersion: 1`, recovery codes, and settings. It hashes exact Chunk text with xxHash64 before HMAC-SHA-256 with a separate Chunk key. Preparation is shared per manager and current key; tests cover concurrent use, key changes, E2EE suspension, teardown, and retry after failure. Document IDs and agreement proofs retain their existing HMAC messages. Chunk collision resistance is bounded by the 64-bit prehash.
+
+The updated Commonlib passes its complete Unit suite, type check, and isolated packed-package consumer checks. Real CouchDB and Object Storage Integration tests cover matching keys, direct-access rejection before control-document changes, Journal agreement, and differing Chunk keys when paths remain visible. LiveSync 1.0.32's Unit suite and build checks pass with the local packed candidate. Real Obsidian two-Vault checks cover matching-key synchronisation, incompatible document key rejection, and differing Chunk keys with visible paths. Its Review Harness exercises the actual calculation and copied report. Measurements use desktop Obsidian; native mobile timing and a complete Rebuild remain unmeasured for this construction.
+
+The focused `/hashing` entry exposes the same `HashManager` used by database writes. Package checks exercise its types, a fixed ID vector through the installed Node module, and browser bundling. The Review Harness consumes that entry without importing the package's internal files. Earlier real-Obsidian onboarding, encrypted Journal upload, and CLI P2P Setup URI checks used the predecessor full-content-HMAC construction; they establish those integration paths but do not measure the updated algorithm. The local candidate is prepared as `0.1.33` for the `next` tag; registry publication remains separate from this evidence.
 
 Regression tests also preserve each device's ID version and key through ordinary Tweak alignment, reject incompatible document ID modes separately from adoptable tweaks, and complete legacy P2P configuration imports without inheriting the receiving device's key. Direct-access admission checks cover both a different saved key and a legacy caller against keyed document IDs.
 
@@ -34,7 +38,9 @@ The equal-time scan test uses real in-memory PouchDB to verify that a missing re
 
 Commonlib's chunk-reachability tests use real PouchDB revision trees. They verify that an ordinary superseded revision releases its unique chunks, a chunk shared by current files remains reachable, live conflict branches and their nearest available shared ancestor remain protected, and losing-branch ancestry becomes eligible after resolution. They also replicate a collected chunk deletion to another PouchDB database and verify that writing the same content can recreate and replicate the content-addressed chunk. Self-hosted LiveSync owns the CouchDB-specific Garbage Collection V3 workflow, including device checks, confirmation, deletion, push-only replication, and remote compaction.
 
-Commonlib's injected CouchDB tests verify that a mixed remote chunk batch preserves available documents when another requested ID is absent. Its chunk-delivery tests separately verify that available chunks reach local storage and only absent IDs are marked unavailable. Self-hosted LiveSync supplies the real CouchDB connection and start-up composition, so device-specific replication timing remains downstream integration evidence rather than Commonlib unit coverage.
+Commonlib's injected CouchDB tests verify that a mixed remote chunk batch preserves available documents when another requested ID is absent. Its chunk-delivery tests separately verify local persistence, an autonomous two-second retry after the first successful omission, and per-identifier backoff capped at ten seconds while finite replication is active. Backoff retains bounded remote activity but releases physical concurrency. Eligible retries can share batches without resetting their individual stages. Finite completion expedites a local recheck and, if needed, a final remote probe; a pre-completion in-flight lookup cannot replace that probe. Overlapping-request tests verify that earlier requests cannot release or report unavailability for replacement claims and that concurrent fetches preserve the configured interval across retry waits. Self-hosted LiveSync supplies the real CouchDB connection and start-up composition, so device-specific replication timing remains downstream integration evidence rather than Commonlib unit coverage.
+
+The compatibility pending-Chunk counter follows those accepted identifiers, including queueing and retry delays. A separate atomic snapshot classifies them as initial or retrying without changing the total used for lifecycle deferral. Focused tests verify duplicate-request deduplication, partial completion, runner rejection, inactivity expiry, teardown, replacement claims, and independent fetcher contributions. The visible status indicators remain a downstream host responsibility.
 
 Commonlib's injected remote-service tests verify that an owning operation can abort a pending CouchDB request, that closing the flat connection interrupts a response body which is already being consumed, that repeated closure closes PouchDB once, and that a bounded request does not fall back into the non-abortable native adapter. Its one-shot replicator tests verify deadline expiry, distinct timeout reporting, cleanup before release of the shared attempt, later invocation, successful ownership transfer, and the unchanged native-request boundary. Self-hosted LiveSync still supplies the actual Obsidian fetch adapters and real CouchDB environment; confirmation on the reporter's platform remains downstream evidence rather than a Commonlib guarantee.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vrtmrz/livesync-commonlib",
-  "version": "0.1.32",
+  "version": "0.1.34",
   "description": "Shared data, storage, and replication primitives for Self-hosted LiveSync clients.",
   "type": "module",
   "types": "./dist/index.d.ts",
@@ -47,6 +47,11 @@
       "import": "./dist/context.js",
       "default": "./dist/context.js"
     },
+    "./hashing": {
+      "types": "./dist/hashing.d.ts",
+      "import": "./dist/hashing.js",
+      "default": "./dist/hashing.js"
+    },
     "./node": {
       "types": "./dist/platform/node/index.d.ts",
       "import": "./dist/platform/node/index.js",
@@ -638,6 +643,9 @@
       "context": [
         "dist/context.d.ts"
       ],
+      "hashing": [
+        "dist/hashing.d.ts"
+      ],
       "node": [
         "dist/platform/node/index.d.ts"
       ],