harnery 0.35.0 → 0.36.0

package/dist/core/events/legacy-storage/inventory.js

@@ -0,0 +1,40 @@
+import { createHash } from "node:crypto";
+import { createReadStream } from "node:fs";
+import { lstat, readdir, realpath } from "node:fs/promises";
+import { join, relative, resolve } from "node:path";
+const LEGACY_ACTIVE_NAME = ["events", "ndjson"].join(".");
+/** Enumerate all root events*.ndjson* frozen-history candidates, including manual variants. */
+export async function inventoryLegacyV1Segments(coordRoot) {
+    const harnery = resolve(coordRoot, ".harnery");
+    const stat = await lstat(harnery);
+    if (!stat.isDirectory() || stat.isSymbolicLink())
+        throw new Error("legacy_v1_inventory_root_invalid");
+    const rootReal = await realpath(harnery);
+    const result = [];
+    for (const name of (await readdir(harnery)).sort()) {
+        if (!/^events.*\.ndjson(?:\.gz)?$/.test(name) || name === LEGACY_ACTIVE_NAME)
+            continue;
+        const path = join(harnery, name);
+        const entryStat = await lstat(path);
+        if (!entryStat.isFile() || entryStat.isSymbolicLink()) {
+            throw new Error(`legacy_v1_inventory_segment_invalid:${name}`);
+        }
+        const pathReal = await realpath(path);
+        if (relative(rootReal, pathReal).startsWith(".."))
+            throw new Error("legacy_v1_inventory_escape");
+        result.push({
+            filename: name,
+            path,
+            bytes: entryStat.size,
+            digest: await hashFile(path),
+            compressed: name.endsWith(".gz"),
+        });
+    }
+    return result;
+}
+async function hashFile(path) {
+    const hash = createHash("sha256");
+    for await (const current of createReadStream(path))
+        hash.update(current);
+    return `sha256:${hash.digest("hex")}`;
+}

package/dist/core/events/legacy-storage/manifest.d.ts

@@ -0,0 +1,23 @@
+export interface LegacyV1SegmentManifest {
+    format: "harnery-legacy-v1-segment";
+    format_version: 1;
+    segment_id: `v1s_${string}`;
+    source: {
+        filename: string;
+        bytes: number;
+        digest: `sha256:${string}`;
+        row_count: number;
+        minimum_recorded_at: string | null;
+        maximum_recorded_at: string | null;
+    };
+    payload: {
+        algorithm: "gzip";
+        path: string;
+        bytes: number;
+        digest: `sha256:${string}`;
+    };
+    minimum_harnery_version: string;
+    created_at: string;
+}
+export declare function validateLegacyV1SegmentManifest(value: unknown): LegacyV1SegmentManifest;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/core/events/legacy-storage/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../../src/core/events/legacy-storage/manifest.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,2BAA2B,CAAC;IACpC,cAAc,EAAE,CAAC,CAAC;IAClB,UAAU,EAAE,OAAO,MAAM,EAAE,CAAC;IAC5B,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,UAAU,MAAM,EAAE,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;QACnC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;KACpC,CAAC;IACF,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,UAAU,MAAM,EAAE,CAAC;KAC5B,CAAC;IACF,uBAAuB,EAAE,MAAM,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CAmEvF"}

package/dist/core/events/legacy-storage/manifest.js

@@ -0,0 +1,108 @@
+export function validateLegacyV1SegmentManifest(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw new Error("legacy_v1_manifest_invalid");
+    }
+    const manifest = value;
+    exact(manifest, [
+        "format",
+        "format_version",
+        "segment_id",
+        "source",
+        "payload",
+        "minimum_harnery_version",
+        "created_at",
+    ]);
+    if (manifest.format !== "harnery-legacy-v1-segment" || manifest.format_version !== 1) {
+        throw new Error("legacy_v1_manifest_version_unsupported");
+    }
+    const segmentId = text(manifest.segment_id);
+    if (!/^v1s_[0-9a-f]{32}$/.test(segmentId))
+        throw new Error("legacy_v1_segment_id_invalid");
+    const source = object(manifest.source);
+    exact(source, [
+        "filename",
+        "bytes",
+        "digest",
+        "row_count",
+        "minimum_recorded_at",
+        "maximum_recorded_at",
+    ]);
+    const filename = text(source.filename);
+    if (!/^events.+\.ndjson$/.test(filename) || filename.includes("/") || filename.includes("\\")) {
+        throw new Error("legacy_v1_source_filename_invalid");
+    }
+    const minimum = nullableTimestamp(source.minimum_recorded_at);
+    const maximum = nullableTimestamp(source.maximum_recorded_at);
+    if ((minimum === null) !== (maximum === null) || (minimum && maximum && minimum > maximum)) {
+        throw new Error("legacy_v1_manifest_time_range_invalid");
+    }
+    const payload = object(manifest.payload);
+    exact(payload, ["algorithm", "path", "bytes", "digest"]);
+    if (payload.algorithm !== "gzip" || payload.path !== `${segmentId}.ndjson.gz`) {
+        throw new Error("legacy_v1_payload_contract_invalid");
+    }
+    const version = text(manifest.minimum_harnery_version);
+    if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(version)) {
+        throw new Error("legacy_v1_minimum_version_invalid");
+    }
+    return {
+        format: "harnery-legacy-v1-segment",
+        format_version: 1,
+        segment_id: segmentId,
+        source: {
+            filename,
+            bytes: integer(source.bytes),
+            digest: digest(source.digest),
+            row_count: integer(source.row_count),
+            minimum_recorded_at: minimum,
+            maximum_recorded_at: maximum,
+        },
+        payload: {
+            algorithm: "gzip",
+            path: text(payload.path),
+            bytes: integer(payload.bytes),
+            digest: digest(payload.digest),
+        },
+        minimum_harnery_version: version,
+        created_at: timestamp(manifest.created_at),
+    };
+}
+function object(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw new Error("legacy_v1_manifest_object_invalid");
+    }
+    return value;
+}
+function exact(value, keys) {
+    if (Object.keys(value).sort().join("\0") !== [...keys].sort().join("\0")) {
+        throw new Error("legacy_v1_manifest_unknown_field");
+    }
+}
+function text(value) {
+    if (typeof value !== "string")
+        throw new Error("legacy_v1_manifest_string_invalid");
+    return value;
+}
+function integer(value) {
+    if (!Number.isSafeInteger(value) || value < 0) {
+        throw new Error("legacy_v1_manifest_integer_invalid");
+    }
+    return value;
+}
+function digest(value) {
+    const result = text(value);
+    if (!/^sha256:[0-9a-f]{64}$/.test(result))
+        throw new Error("legacy_v1_manifest_digest_invalid");
+    return result;
+}
+function timestamp(value) {
+    const result = text(value);
+    if (!/^\d{4}-\d\d-\d\dT\d\d:\d\d:\d\d\.\d{3}Z$/.test(result) ||
+        !Number.isFinite(Date.parse(result))) {
+        throw new Error("legacy_v1_manifest_timestamp_invalid");
+    }
+    return result;
+}
+function nullableTimestamp(value) {
+    return value === null ? null : timestamp(value);
+}

package/dist/core/events/legacy-storage/reader.d.ts

@@ -0,0 +1,15 @@
+export interface LegacyV1LogicalRow {
+    row_number: number;
+    bytes: Buffer;
+}
+export interface LegacyV1ReaderLimits {
+    max_manifest_bytes?: number;
+    max_payload_bytes?: number;
+    max_decompressed_bytes?: number;
+    max_row_bytes?: number;
+    max_rows?: number;
+    fault?: (boundary: "after_source_digest", path: string) => void;
+}
+/** Stream rows from one loose sealed segment or one manifest-bound gzip canary. */
+export declare function streamLegacyV1Rows(sourcePath: string, limits?: LegacyV1ReaderLimits): AsyncGenerator<LegacyV1LogicalRow>;
+//# sourceMappingURL=reader.d.ts.map

package/dist/core/events/legacy-storage/reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reader.d.ts","sourceRoot":"","sources":["../../../../src/core/events/legacy-storage/reader.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACnC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACjE;AAUD,mFAAmF;AACnF,wBAAuB,kBAAkB,CACvC,UAAU,EAAE,MAAM,EAClB,MAAM,GAAE,oBAAyB,GAChC,cAAc,CAAC,kBAAkB,CAAC,CAyFpC"}

package/dist/core/events/legacy-storage/reader.js

@@ -0,0 +1,154 @@
+import { createHash } from "node:crypto";
+import { constants, createReadStream } from "node:fs";
+import { lstat, open, realpath } from "node:fs/promises";
+import { dirname, isAbsolute, relative, resolve } from "node:path";
+import { createGunzip } from "node:zlib";
+import { validateLegacyV1SegmentManifest } from "./manifest.js";
+const DEFAULTS = {
+    max_manifest_bytes: 1024 * 1024,
+    max_payload_bytes: 8 * 1024 * 1024 * 1024,
+    max_decompressed_bytes: 16 * 1024 * 1024 * 1024,
+    max_row_bytes: 64 * 1024 * 1024,
+    max_rows: 20_000_000,
+};
+/** Stream rows from one loose sealed segment or one manifest-bound gzip canary. */
+export async function* streamLegacyV1Rows(sourcePath, limits = {}) {
+    const bounded = { ...DEFAULTS, ...limits };
+    const source = resolve(sourcePath);
+    let input = source;
+    let expectedRows;
+    let expectedSourceBytes;
+    let expectedSourceDigest;
+    let expectedPayloadBytes;
+    let expectedPayloadDigest;
+    let containmentRoot;
+    if (source.endsWith(".manifest.json")) {
+        const manifestHandle = await openStableRegularFile(source, undefined, "manifest");
+        let manifest;
+        try {
+            const stat = await manifestHandle.stat();
+            if (stat.size > bounded.max_manifest_bytes)
+                throw new Error("legacy_v1_manifest_too_large");
+            manifest = validateLegacyV1SegmentManifest(JSON.parse(await manifestHandle.readFile("utf8")));
+        }
+        finally {
+            await manifestHandle.close();
+        }
+        const directory = await realpath(dirname(source));
+        containmentRoot = directory;
+        input = resolve(directory, manifest.payload.path);
+        expectedRows = manifest.source.row_count;
+        expectedSourceBytes = manifest.source.bytes;
+        expectedSourceDigest = manifest.source.digest;
+        expectedPayloadBytes = manifest.payload.bytes;
+        expectedPayloadDigest = manifest.payload.digest;
+    }
+    const compressed = source.endsWith(".manifest.json") || source.endsWith(".gz");
+    const kind = source.endsWith(".manifest.json") ? "payload" : "segment";
+    const inputHandle = await openStableRegularFile(input, containmentRoot, kind);
+    try {
+        const inputStat = await inputHandle.stat();
+        if (source.endsWith(".manifest.json")) {
+            if (inputStat.size !== expectedPayloadBytes)
+                throw new Error("legacy_v1_payload_length_mismatch");
+            if (inputStat.size > bounded.max_payload_bytes)
+                throw new Error("legacy_v1_payload_too_large");
+            if ((await hashHandle(input, inputHandle)) !== expectedPayloadDigest) {
+                throw new Error("legacy_v1_payload_digest_mismatch");
+            }
+        }
+        limits.fault?.("after_source_digest", input);
+        const file = createReadStream(input, { fd: inputHandle.fd, autoClose: false, start: 0 });
+        const stream = compressed ? file.pipe(createGunzip()) : file;
+        let pending = Buffer.alloc(0);
+        let rows = 0;
+        let decompressed = 0;
+        const sourceHash = createHash("sha256");
+        for await (const current of stream) {
+            const chunk = current;
+            decompressed += chunk.length;
+            sourceHash.update(chunk);
+            if (decompressed > bounded.max_decompressed_bytes) {
+                throw new Error("legacy_v1_decompression_bound_exceeded");
+            }
+            pending = pending.length === 0 ? chunk : Buffer.concat([pending, chunk]);
+            if (pending.length > bounded.max_row_bytes && !pending.includes(0x0a)) {
+                throw new Error("legacy_v1_row_bound_exceeded");
+            }
+            let newline = pending.indexOf(0x0a);
+            while (newline >= 0) {
+                const row = pending.subarray(0, newline);
+                pending = pending.subarray(newline + 1);
+                if (row.length === 0)
+                    throw new Error("legacy_v1_empty_row");
+                if (row.length > bounded.max_row_bytes)
+                    throw new Error("legacy_v1_row_bound_exceeded");
+                rows += 1;
+                if (rows > bounded.max_rows)
+                    throw new Error("legacy_v1_row_count_bound_exceeded");
+                yield { row_number: rows, bytes: Buffer.from(row) };
+                newline = pending.indexOf(0x0a);
+            }
+        }
+        if (pending.length !== 0)
+            throw new Error("legacy_v1_segment_unterminated_or_truncated");
+        if (expectedRows !== undefined && rows !== expectedRows)
+            throw new Error("legacy_v1_row_count_mismatch");
+        if (expectedSourceBytes !== undefined && decompressed !== expectedSourceBytes) {
+            throw new Error("legacy_v1_source_length_mismatch");
+        }
+        const digest = `sha256:${sourceHash.digest("hex")}`;
+        if (expectedSourceDigest !== undefined && digest !== expectedSourceDigest) {
+            throw new Error("legacy_v1_source_digest_mismatch");
+        }
+    }
+    finally {
+        await inputHandle.close();
+    }
+}
+async function hashHandle(path, handle) {
+    const hash = createHash("sha256");
+    const stream = createReadStream(path, { fd: handle.fd, autoClose: false, start: 0 });
+    for await (const current of stream)
+        hash.update(current);
+    return `sha256:${hash.digest("hex")}`;
+}
+async function openStableRegularFile(path, containmentRoot, kind) {
+    const before = await lstat(path);
+    if (!before.isFile() || before.isSymbolicLink())
+        throw new Error(`legacy_v1_${kind}_not_regular`);
+    const beforeReal = await realpath(path);
+    if (containmentRoot)
+        assertContained(containmentRoot, beforeReal);
+    const handle = await open(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+    try {
+        const opened = await handle.stat();
+        const after = await lstat(path);
+        const afterReal = await realpath(path);
+        if (!opened.isFile() ||
+            !after.isFile() ||
+            after.isSymbolicLink() ||
+            opened.dev !== before.dev ||
+            opened.ino !== before.ino ||
+            opened.dev !== after.dev ||
+            opened.ino !== after.ino ||
+            beforeReal !== afterReal)
+            throw new Error(`legacy_v1_${kind}_changed_during_open`);
+        if (containmentRoot)
+            assertContained(containmentRoot, afterReal);
+        return handle;
+    }
+    catch (error) {
+        await handle.close();
+        throw error;
+    }
+}
+function assertContained(root, candidate) {
+    const path = relative(root, candidate);
+    if (path === "" ||
+        (path !== ".." &&
+            !path.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) &&
+            !isAbsolute(path)))
+        return;
+    throw new Error("legacy_v1_payload_escape");
+}

package/dist/core/events/v3/authority-outbox.d.ts

@@ -1,4 +1,8 @@
 import type { EventV3 } from "./contract.js";
+export interface AuthorityEpochFenceV3 {
+    /** Genesis id of the epoch the transaction's event was produced for. */
+    expectedGenesisId?: `gex_${string}`;
+}
 export type AuthorityMutationV3 = {
     kind: "task.transition";
     state: "set" | "cleared";
@@ -69,10 +73,11 @@ export declare function prepareAuthorityTransactionV3(coordRoot: string, input:
 /** Build and validate an authority transaction without touching durable state. */
 export declare function buildAuthorityTransactionV3(input: PrepareAuthorityTransactionV3Input): AuthorityTransactionV3;
 /** Publish an already-built transaction exactly, preserving its pre-minted event. */
-export declare function publishAuthorityTransactionV3(coordRoot: string, transaction: AuthorityTransactionV3): AuthorityTransactionV3;
+export declare function publishAuthorityTransactionV3(coordRoot: string, transaction: AuthorityTransactionV3, fence?: AuthorityEpochFenceV3): AuthorityTransactionV3;
 /** Apply or recognize the desired state, durably submit its event, then leave a hash-only receipt. */
-export declare function reconcileAuthorityTransactionV3(coordRoot: string, transactionId: string, reconciler: AuthorityReconcilerV3): AuthorityReceiptV3;
+export declare function reconcileAuthorityTransactionV3(coordRoot: string, transactionId: string, reconciler: AuthorityReconcilerV3, fence?: AuthorityEpochFenceV3): AuthorityReceiptV3;
 export declare function listPendingAuthorityTransactionsV3(coordRoot: string): AuthorityTransactionV3[];
+export declare function authorityRecoveryIntentPathV3(coordRoot: string, transactionId: string): string;
 export declare function readAuthorityTransactionV3(path: string): AuthorityTransactionV3;
 export declare function readAuthorityReceiptV3(path: string): AuthorityReceiptV3;
 //# sourceMappingURL=authority-outbox.d.ts.map

package/dist/core/events/v3/authority-outbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authority-outbox.d.ts","sourceRoot":"","sources":["../../../../src/core/events/v3/authority-outbox.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAU7C,MAAM,MAAM,mBAAmB,GAC3B;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC;IACzB,gBAAgB,CAAC,EAAE,UAAU,MAAM,EAAE,CAAC;CACvC,GACD;IACE,IAAI,EAAE,sBAAsB,CAAC;IAC7B,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GACD;IACE,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,UAAU,GAAG,UAAU,CAAC;IACnC,kBAAkB,EAAE,UAAU,MAAM,EAAE,CAAC;IACvC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B,GACD;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB,GACD;IACE,IAAI,EAAE,kBAAkB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,UAAU,GAAG,QAAQ,GAAG,UAAU,CAAC;CAC7C,GACD;IACE,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EACL,YAAY,GACZ,UAAU,GACV,UAAU,GACV,gBAAgB,GAChB,YAAY,GACZ,WAAW,CAAC;CACjB,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EACH,WAAW,GACX,QAAQ,GACR,WAAW,GACX,WAAW,GACX,QAAQ,GACR,aAAa,GACb,SAAS,CAAC;CACf,CAAC;AAEN,MAAM,WAAW,kCAAkC;IACjD,cAAc,CAAC,EAAE,OAAO,MAAM,EAAE,CAAC;IACjC,2BAA2B,EAAE,UAAU,MAAM,EAAE,CAAC;IAChD,oBAAoB,EAAE,UAAU,MAAM,EAAE,CAAC;IACzC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,wCAAwC,CAAC;IACjD,cAAc,EAAE,CAAC,CAAC;IAClB,cAAc,EAAE,OAAO,MAAM,EAAE,CAAC;IAChC,2BAA2B,EAAE,UAAU,MAAM,EAAE,CAAC;IAChD,oBAAoB,EAAE,UAAU,MAAM,EAAE,CAAC;IACzC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,oCAAoC,CAAC;IAC7C,cAAc,EAAE,CAAC,CAAC;IAClB,cAAc,EAAE,OAAO,MAAM,EAAE,CAAC;IAChC,kBAAkB,EAAE,UAAU,MAAM,EAAE,CAAC;IACvC,oBAAoB,EAAE,UAAU,MAAM,EAAE,CAAC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,UAAU,MAAM,EAAE,CAAC;IACrC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,MAAM,UAAU,MAAM,EAAE,CAAC;IAC1C,KAAK,EAAE,CAAC,QAAQ,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,KAAK,IAAI,CAAC;IACtE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wFAAwF;AACxF,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,kCAAkC,GACxC,sBAAsB,CAExB;AAED,kFAAkF;AAClF,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,kCAAkC,GACxC,sBAAsB,CAgBxB;AAED,qFAAqF;AACrF,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,sBAAsB,GAClC,sBAAsB,CAoBxB;AAED,sGAAsG;AACtG,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,qBAAqB,GAChC,kBAAkB,CAsCpB;AAED,wBAAgB,kCAAkC,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,EAAE,CAO9F;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,sBAAsB,CAa/E;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAavE"}
+{"version":3,"file":"authority-outbox.d.ts","sourceRoot":"","sources":["../../../../src/core/events/v3/authority-outbox.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAK7C,MAAM,WAAW,qBAAqB;IACpC,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,OAAO,MAAM,EAAE,CAAC;CACrC;AAQD,MAAM,MAAM,mBAAmB,GAC3B;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC;IACzB,gBAAgB,CAAC,EAAE,UAAU,MAAM,EAAE,CAAC;CACvC,GACD;IACE,IAAI,EAAE,sBAAsB,CAAC;IAC7B,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GACD;IACE,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,UAAU,GAAG,UAAU,CAAC;IACnC,kBAAkB,EAAE,UAAU,MAAM,EAAE,CAAC;IACvC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B,GACD;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB,GACD;IACE,IAAI,EAAE,kBAAkB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,UAAU,GAAG,QAAQ,GAAG,UAAU,CAAC;CAC7C,GACD;IACE,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EACL,YAAY,GACZ,UAAU,GACV,UAAU,GACV,gBAAgB,GAChB,YAAY,GACZ,WAAW,CAAC;CACjB,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EACH,WAAW,GACX,QAAQ,GACR,WAAW,GACX,WAAW,GACX,QAAQ,GACR,aAAa,GACb,SAAS,CAAC;CACf,CAAC;AAEN,MAAM,WAAW,kCAAkC;IACjD,cAAc,CAAC,EAAE,OAAO,MAAM,EAAE,CAAC;IACjC,2BAA2B,EAAE,UAAU,MAAM,EAAE,CAAC;IAChD,oBAAoB,EAAE,UAAU,MAAM,EAAE,CAAC;IACzC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,wCAAwC,CAAC;IACjD,cAAc,EAAE,CAAC,CAAC;IAClB,cAAc,EAAE,OAAO,MAAM,EAAE,CAAC;IAChC,2BAA2B,EAAE,UAAU,MAAM,EAAE,CAAC;IAChD,oBAAoB,EAAE,UAAU,MAAM,EAAE,CAAC;IACzC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,oCAAoC,CAAC;IAC7C,cAAc,EAAE,CAAC,CAAC;IAClB,cAAc,EAAE,OAAO,MAAM,EAAE,CAAC;IAChC,kBAAkB,EAAE,UAAU,MAAM,EAAE,CAAC;IACvC,oBAAoB,EAAE,UAAU,MAAM,EAAE,CAAC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,UAAU,MAAM,EAAE,CAAC;IACrC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,MAAM,UAAU,MAAM,EAAE,CAAC;IAC1C,KAAK,EAAE,CAAC,QAAQ,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,KAAK,IAAI,CAAC;IACtE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wFAAwF;AACxF,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,kCAAkC,GACxC,sBAAsB,CAExB;AAED,kFAAkF;AAClF,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,kCAAkC,GACxC,sBAAsB,CAgBxB;AAED,qFAAqF;AACrF,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,sBAAsB,EACnC,KAAK,GAAE,qBAA0B,GAChC,sBAAsB,CAuBxB;AAED,sGAAsG;AACtG,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,qBAAqB,EACjC,KAAK,GAAE,qBAA0B,GAChC,kBAAkB,CA2CpB;AAED,wBAAgB,kCAAkC,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,EAAE,CAO9F;AAED,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAG9F;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,sBAAsB,CAa/E;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAavE"}

package/dist/core/events/v3/authority-outbox.js

@@ -3,6 +3,7 @@ import { closeSync, existsSync, fsyncSync, linkSync, openSync, readdirSync, read
 import { join } from "node:path";
 import { fsyncParentDirectory } from "../../workflow/durable-record.js";
 import { canonicalJsonV3, sha256V3 } from "./canonical.js";
+import { liveGenesisIdV3 } from "./control.js";
 import { assertEventV3 } from "./validate.js";
 import { ensureEventV3Layout, eventV3Paths, writeEventV3 } from "./writer.js";
 const SHA256_PATTERN = /^sha256:[a-f0-9]{64}$/;
@@ -33,9 +34,12 @@ export function buildAuthorityTransactionV3(input) {
     return transaction;
 }
 /** Publish an already-built transaction exactly, preserving its pre-minted event. */
-export function publishAuthorityTransactionV3(coordRoot, transaction) {
+export function publishAuthorityTransactionV3(coordRoot, transaction, fence = {}) {
     validateTransaction(transaction);
     const paths = ensureEventV3Layout(coordRoot);
+    if (fence.expectedGenesisId && liveGenesisIdV3(coordRoot) !== fence.expectedGenesisId) {
+        throw new Error("authority transaction epoch was replaced before publication");
+    }
     const readyPath = authorityReadyPath(paths.authorityOutbox, transaction.transaction_id);
     const serialized = `${canonicalJsonV3(transaction)}\n`;
     if (existsSync(readyPath)) {
@@ -57,7 +61,7 @@ export function publishAuthorityTransactionV3(coordRoot, transaction) {
     return transaction;
 }
 /** Apply or recognize the desired state, durably submit its event, then leave a hash-only receipt. */
-export function reconcileAuthorityTransactionV3(coordRoot, transactionId, reconciler) {
+export function reconcileAuthorityTransactionV3(coordRoot, transactionId, reconciler, fence = {}) {
     assertTransactionId(transactionId);
     const paths = ensureEventV3Layout(coordRoot);
     const committedPath = authorityCommittedPath(paths.authorityOutbox, transactionId);
@@ -77,7 +81,12 @@ export function reconcileAuthorityTransactionV3(coordRoot, transactionId, reconc
     }
     const event = JSON.parse(transaction.event_row);
     assertEventV3(event);
-    writeEventV3(coordRoot, event);
+    const durability = writeEventV3(coordRoot, event, {
+        ...(fence.expectedGenesisId ? { expectedGenesisId: fence.expectedGenesisId } : {}),
+    });
+    if (durability.state === "epoch_replaced") {
+        throw new Error("authority transaction epoch was replaced before its event committed");
+    }
     const receipt = {
         format: "harnery-event-v3-authority-receipt",
         format_version: 1,
@@ -109,6 +118,10 @@ export function listPendingAuthorityTransactionsV3(coordRoot) {
         .sort()
         .map((name) => readAuthorityTransactionV3(join(outbox, name)));
 }
+export function authorityRecoveryIntentPathV3(coordRoot, transactionId) {
+    assertTransactionId(transactionId);
+    return join(eventV3Paths(coordRoot).root, "authority-recoveries", `${transactionId}.ready.json`);
+}
 export function readAuthorityTransactionV3(path) {
     const serialized = readFileSync(path, "utf8");
     let parsed;