ignotum 0.0.16 → 0.0.17

package/dist/runtime/{router-BSBI1oN1.js → router-C1eC9yy5.js}

@@ -1,6 +1,7 @@
-import { A as RuntimeFileMetadata, B as makeFileValue, D as encodeTransportObject, E as decodeTransportValue, F as fileIdOf, G as InvocationId, H as AppId, I as fileLimits, J as TableId, K as SessionEpoch, L as fileMimeTypes, N as fileFormats, P as fileGrantUrlOf, R as grantFileValue, U as GeneratedId, W as IdAlphabet, Y as VersionId, _ as Result$1, a as SessionResponse, d as sessionPath, f as sessionRequestsPath, i as SessionRequest, j as RuntimeFileOccurrence, k as FileId, l as developmentSelectionKey, n as SessionOutcome, o as SessionState, p as initial, q as SubscriptionId, r as SessionRedirect, t as DevelopmentSelection, x as pending, y as failureFromWire, z as isFileValue } from "./id--1m0NuUL.js";
-import { a as ActivationGeneration, i as WireSuccess, l as DataHistoryId, n as WireFailure, o as AppStateRevision, r as WireResult, t as FunctionAddress, u as InvocationKey } from "./sync-DzUwA8W9.js";
-import { a as RouteDefinition, d as RecoveryIdentity, f as RecoverySessionId, l as appDefinitionLimits, n as getRouteDefinition, p as sameExecutionSelection, r as LayoutDefinition, u as ExecutionSelection } from "./routes-Ce8TVP-T.js";
+import { a as IdAlphabet, c as SessionEpoch, d as VersionId, f as defineId, i as GeneratedId, l as SubscriptionId, o as InvocationId, r as AppId, u as TableId } from "./artifact-BB5qzoa6.js";
+import { A as encodeTransportObject, B as fileMimeTypes, C as sameSelection, G as ActivationGeneration, H as isFileValue, I as fileFormats, J as InvocationKey, K as AppStateRevision, L as fileGrantUrlOf, M as FileId, N as RuntimeFileMetadata, P as RuntimeFileOccurrence, R as fileIdOf, S as endpointUrl, U as makeFileValue, V as grantFileValue, _ as failureFromWire, a as SessionResponse, d as sessionPath, f as sessionRequestsPath, h as Result$1, i as SessionRequest, k as decodeTransportValue, l as developmentSelectionKey, n as SessionOutcome, o as SessionState, q as DataHistoryId, r as SessionRedirect, t as DevelopmentSelection, w as initial, x as ServingSelection, y as pending, z as fileLimits } from "./id-BrEnxY-r.js";
+import { i as WireSuccess, n as WireFailure, r as WireResult, t as FunctionAddress } from "./sync-BwgS19Xy.js";
+import { a as RouteDefinition, l as appDefinitionLimits, n as getRouteDefinition, r as LayoutDefinition } from "./routes-DnU39R7c.js";
 import { Array as Array$1, Cause, Context, DateTime, Deferred, Effect, ErrorReporter, Layer, ManagedRuntime, Option, Predicate, Schema, Semaphore, String as String$1 } from "effect";
 import { customAlphabet } from "nanoid";
 import { FetchHttpClient, HttpClient, HttpClientRequest, HttpClientResponse } from "effect/unstable/http";
@@ -14,7 +15,7 @@ const encodeJson = (value) => {
 };
 const encodeCanonicalJson = (value) => encodeJson(Schema.decodeSync(Schema.Json)(value));
 //#endregion
-//#region src/client/errors.ts
+//#region ../platform/dist/versions/1/browser/errors.js
 /** @effect-diagnostics globalConsole:skip-file */
 var ConnectionUnavailable = class extends Schema.TaggedError()("ConnectionUnavailable", {
 	cause: Schema.optional(Schema.Defect()),
@@ -74,7 +75,7 @@ var IdGenerator = class IdGenerator extends Context.Service()("@ignotum/shared/i
 	});
 };
 //#endregion
-//#region src/client/files.ts
+//#region ../platform/dist/versions/1/browser/files.js
 const Files = { url: (file) => {
 	const url = fileGrantUrlOf(file);
 	if (url === void 0) throw new Error("This FileValue has no active query grant.");
@@ -212,7 +213,7 @@ const uploadPreparedFiles = Effect.fn("uploadPreparedFiles")(function* (nativeFi
 	});
 });
 //#endregion
-//#region src/client/id.ts
+//#region ../platform/dist/versions/1/browser/id.js
 var IdRequestError = class extends Schema.TaggedError()("IdRequestError", { message: Schema.String }) {};
 const outcomeKey = "ignotum.id.outcome";
 const selectionJson = Schema.fromJsonString(DevelopmentSelection);
@@ -385,282 +386,195 @@ var BrowserSession = class BrowserSession extends Context.Service()("ignotum/cli
 	})).pipe(Layer.provide(FetchHttpClient.layer));
 };
 //#endregion
-//#region ../contracts/dist/runtime/index.js
-const IndexIdentity = Schema.String.pipe(Schema.brand("ignotum/runtime/IndexIdentity"));
-const EncodedIndexKey = Schema.String.check(Schema.isPattern(/^(?:[0-9a-f]{2})*$/)).pipe(Schema.brand("ignotum/runtime/EncodedIndexKey"));
-Schema.Union([
-	Schema.Boolean,
-	Schema.Finite,
-	Schema.String
-]);
-Schema.String.pipe(Schema.brand("ignotum/hosted/QueryKey"));
-const TableDependency = Schema.Struct({
-	type: Schema.Literal("Table"),
-	tableId: TableId
-});
-const DocumentDependency = Schema.Struct({
-	type: Schema.Literal("Document"),
-	tableId: TableId,
-	id: GeneratedId
-});
-const IndexRangeDependency = Schema.Struct({
-	type: Schema.Literal("IndexRange"),
-	tableId: TableId,
-	index: IndexIdentity,
-	lower: Schema.optional(EncodedIndexKey),
-	upper: Schema.optional(EncodedIndexKey)
-});
-const IndexPointInvalidation = Schema.Struct({
-	type: Schema.Literal("IndexPoint"),
-	tableId: TableId,
-	index: IndexIdentity,
-	key: EncodedIndexKey
-});
-const IdDependency = Schema.Struct({ type: Schema.Literal("Id") });
-const ReadDependency = Schema.Union([
-	IdDependency,
-	TableDependency,
-	DocumentDependency,
-	IndexRangeDependency
-]);
-const WriteInvalidation = Schema.Union([
-	TableDependency,
-	DocumentDependency,
-	IndexPointInvalidation
-]);
-Schema.Union([ReadDependency, IndexPointInvalidation]);
-const DependencySet = Schema.Array(ReadDependency);
-const InvalidationSet = Schema.Array(WriteInvalidation);
-const RuntimeQueryResult = Schema.Struct({
-	type: Schema.Literal("Query"),
-	result: WireResult,
-	dependencies: DependencySet,
-	observedRevision: AppStateRevision,
-	files: Schema.optional(Schema.Array(RuntimeFileOccurrence))
-});
-const FileReferenceAdded = Schema.Struct({
-	type: Schema.Literal("AddReference"),
-	file: RuntimeFileMetadata,
-	tableId: TableId,
-	documentId: GeneratedId
-});
-const FileReferenceRemoved = Schema.Struct({
-	type: Schema.Literal("RemoveReference"),
-	fileId: FileId,
-	tableId: TableId,
-	documentId: GeneratedId
-});
-const FileReferenceEffect = Schema.Union([FileReferenceAdded, FileReferenceRemoved]);
-const FileEffectBatch = Schema.Struct({
-	id: InvocationId,
-	dataHistoryId: Schema.optional(DataHistoryId),
-	committedRevision: AppStateRevision,
-	effects: Schema.Array(FileReferenceEffect)
-});
-Schema.Struct({ appId: AppId });
-Schema.Struct({ batches: Schema.Array(FileEffectBatch) });
-Schema.Struct({
-	appId: AppId,
+//#region ../contracts/dist/execution.js
+const strict = (fields) => Schema.Struct(fields).annotate({ parseOptions: { onExcessProperty: "error" } });
+/** Browser recovery scope only; reconciliation must verify the owning session separately. */
+const RecoverySessionId = defineId("rec", "ignotum/platform/RecoverySessionId");
+const RecoveryIdentity = strict({
 	invocationId: InvocationId,
-	acknowledgedAt: Schema.Int,
-	dataHistoryId: DataHistoryId
-});
-Schema.Struct({ completed: Schema.Literal(true) });
-const RuntimeMutationSuccess = Schema.Struct({
-	type: Schema.Literal("Mutation"),
-	result: WireSuccess,
-	invalidations: InvalidationSet,
-	committedRevision: AppStateRevision,
-	fileEffects: Schema.optional(FileEffectBatch)
-});
-const RuntimeMutationFailure = Schema.Struct({
-	type: Schema.Literal("Mutation"),
-	result: WireFailure
-});
-const RuntimeMutationResult = Schema.Union([RuntimeMutationSuccess, RuntimeMutationFailure]);
-Schema.Union([RuntimeQueryResult, RuntimeMutationResult]);
-const RuntimeRecoveryOwner = Schema.Struct({
-	clientSessionId: RecoverySessionId,
-	sessionEpoch: Schema.NullOr(Schema.String)
+	originalSelection: ServingSelection
 });
-Schema.Struct({
-	appId: AppId,
-	identity: RecoveryIdentity,
-	owner: RuntimeRecoveryOwner
-});
-const RuntimeMutationOutcome = Schema.Union([
-	Schema.Struct({
-		type: Schema.Literal("Settled"),
-		result: RuntimeMutationResult
-	}),
-	Schema.Struct({ type: Schema.Literal("Interrupted") }),
-	Schema.Struct({ type: Schema.Literal("Pending") }),
-	Schema.Struct({ type: Schema.Literal("Uncertain") })
-]);
-const InvocationBase = {
-	appId: AppId,
-	versionId: VersionId,
-	generation: ActivationGeneration,
-	selection: Schema.optional(ExecutionSelection),
-	invocationKey: InvocationKey,
-	function: FunctionAddress,
-	args: Schema.Json,
-	identity: Schema.optional(SessionState)
+const RecoveryLimits = {
+	maxOperations: 1024,
+	maxRetentionMs: 6048e5
 };
-const QueryInvocation = Schema.Struct({
-	...InvocationBase,
-	type: Schema.Literal("Query")
-});
-const MutationInvocation = Schema.Struct({
-	...InvocationBase,
-	type: Schema.Literal("Mutation"),
-	invocationId: InvocationId,
-	recoveryOwner: Schema.optional(RuntimeRecoveryOwner),
-	files: Schema.optional(Schema.Array(RuntimeFileOccurrence))
-});
-Schema.Union([QueryInvocation, MutationInvocation]);
-Schema.Struct({
-	appId: AppId,
-	expectedRevision: AppStateRevision
-});
-Schema.Struct({ currentRevision: AppStateRevision });
-var RuntimeVersionUnavailable = class extends Schema.TaggedError()("RuntimeVersionUnavailable", {
-	versionId: VersionId,
-	message: Schema.String
-}) {};
-const RuntimeInvocationRejectionCode = Schema.Literals([
-	"SessionExpired",
-	"FunctionUnavailable",
-	"InvalidArguments",
-	"InvocationIdConflict",
-	"ResourceLimitExceeded",
-	"UnknownFunction",
-	"WrongFunctionKind"
-]);
-var RuntimeInvocationRejected = class extends Schema.TaggedError()("RuntimeInvocationRejected", {
-	code: RuntimeInvocationRejectionCode,
-	invocationKey: InvocationKey,
-	message: Schema.String
-}) {};
-var RuntimeInvocationUnavailable = class extends Schema.TaggedError()("RuntimeInvocationUnavailable", {
-	invocationKey: InvocationKey,
-	message: Schema.String
-}) {};
-Schema.TaggedError()("RuntimeRevisionRejected", {
+const RecoveryRecordV1 = strict({
+	formatVersion: Schema.Literal(1),
 	appId: AppId,
-	message: Schema.String
-});
-Schema.Union([
-	RuntimeVersionUnavailable,
-	RuntimeInvocationRejected,
-	RuntimeInvocationUnavailable
-]);
+	clientSessionId: RecoverySessionId,
+	recordedAt: Schema.Natural,
+	expiresAt: Schema.Natural,
+	operations: Schema.Array(RecoveryIdentity).check(Schema.isMaxLength(RecoveryLimits.maxOperations))
+}).check(Schema.makeFilter((record) => {
+	const issues = [];
+	if (record.expiresAt <= record.recordedAt || record.expiresAt - record.recordedAt > RecoveryLimits.maxRetentionMs) issues.push({
+		path: ["expiresAt"],
+		issue: "Recovery retention must be positive and bounded"
+	});
+	if (record.operations.some((operation) => operation.originalSelection.appId !== record.appId)) issues.push({
+		path: ["operations"],
+		issue: "Recovery operations must belong to the record's app"
+	});
+	const identities = record.operations.map((operation) => `${operation.originalSelection.dataHistoryId}/${operation.invocationId}`);
+	if (new Set(identities).size !== identities.length) issues.push({
+		path: ["operations"],
+		issue: "Recovery operation identities must be unique within a data history"
+	});
+	return issues;
+})).annotate({ parseOptions: { onExcessProperty: "error" } });
+initial(RecoveryRecordV1);
 //#endregion
-//#region ../contracts/dist/managed-sync.js
-const managedSyncPath = "/_ignotum/v2/sync";
-const managedSelectionPath = "/_ignotum/v2/selection";
-const ManagedSelectionResponse = Schema.Struct({
-	protocolVersion: Schema.Literal(1),
-	selection: ExecutionSelection
-});
-const ManagedClientMessage = Schema.Union([
-	Schema.Struct({
-		type: Schema.Literal("Connect"),
-		protocolVersion: Schema.Natural,
-		selection: ExecutionSelection,
-		clientSessionId: RecoverySessionId
-	}),
-	Schema.Struct({
-		type: Schema.Literal("Prepare"),
-		invocationId: InvocationId,
-		function: FunctionAddress,
-		args: Schema.Json,
-		files: Schema.Array(FileId).check(Schema.isMaxLength(fileLimits.filesPerMutation))
-	}),
-	Schema.Struct({
-		type: Schema.Literal("Invoke"),
-		invocationId: InvocationId,
-		function: FunctionAddress,
-		args: Schema.Json
-	}),
-	Schema.Struct({
-		type: Schema.Literal("RecoverMutation"),
-		id: Schema.String.check(Schema.isMaxLength(128)),
-		identity: RecoveryIdentity
-	}),
-	Schema.Struct({
-		type: Schema.Literal("Subscribe"),
-		id: SubscriptionId,
-		function: FunctionAddress,
-		args: Schema.Json
-	}),
-	Schema.Struct({
-		type: Schema.Literal("Unsubscribe"),
-		id: SubscriptionId
-	})
-]);
-/** Decode this envelope before the normal server protocol, including on unsupported versions. */
-const ManagedUpgradeRequired = Schema.Struct({
-	type: Schema.Literal("UpgradeRequired"),
-	selection: ExecutionSelection
+//#region ../platform/dist/versions/1/browser/recovery-journal.js
+const RecoveryJournalLimits = {
+	maxEntries: 100,
+	retentionMs: 864e5,
+	maxBytes: 65536
+};
+const RecoveryEntry = Schema.Struct({
+	identity: RecoveryIdentity,
+	recordedAt: Schema.Natural,
+	expiresAt: Schema.Natural,
+	state: Schema.Literals([
+		"pending",
+		"settled",
+		"interrupted",
+		"uncertain"
+	])
 });
-const ManagedServerMessage = Schema.Union([
-	ManagedUpgradeRequired,
-	Schema.Struct({
-		type: Schema.Literal("Handshake"),
-		protocolVersion: Schema.Literal(1),
-		selection: ExecutionSelection,
-		session: SessionState,
-		serverTime: Schema.Finite
-	}),
-	Schema.Struct({
-		type: Schema.Literal("Preparation"),
-		invocationId: InvocationId,
-		uploads: Schema.Array(Schema.Struct({
-			id: FileId,
-			url: Schema.optional(Schema.String)
-		}))
-	}),
-	Schema.Struct({
-		type: Schema.Literal("MutationOutcome"),
-		id: Schema.String,
-		identity: RecoveryIdentity,
-		outcome: RuntimeMutationOutcome
-	}),
-	Schema.Struct({
-		type: Schema.Literal("QuerySnapshot"),
-		selection: ExecutionSelection,
-		id: SubscriptionId,
-		result: RuntimeQueryResult,
-		files: Schema.optional(Schema.Array(Schema.Struct({
-			id: FileId,
-			url: Schema.String
-		})))
-	}),
-	Schema.Struct({
-		type: Schema.Literal("Error"),
-		id: Schema.optional(Schema.String),
-		code: Schema.Literals([
-			"PlatformUpgrading",
-			"SessionExpired",
-			"InvalidMessage",
-			"Unavailable",
-			"InvalidArguments",
-			"InvocationIdConflict",
-			"ResourceLimitExceeded"
-		]),
-		message: Schema.String
-	})
-]);
+const RecoveryJournalV1 = Schema.Struct({
+	formatVersion: Schema.Literal(1),
+	appId: AppId,
+	sessionEpoch: Schema.String,
+	clientSessionId: RecoverySessionId,
+	entries: Schema.Array(RecoveryEntry).check(Schema.isMaxLength(RecoveryJournalLimits.maxEntries))
+}).check(Schema.makeFilter((record) => {
+	const keys = record.entries.map((entry) => identityKey(entry.identity));
+	return new Set(keys).size === keys.length && record.entries.every((entry) => entry.identity.originalSelection.appId === record.appId && entry.expiresAt > entry.recordedAt && entry.expiresAt - entry.recordedAt <= RecoveryJournalLimits.retentionMs);
+})).annotate({ parseOptions: { onExcessProperty: "error" } });
+const RecoveryJournalRecord = initial(RecoveryJournalV1);
+const identityKey = (identity) => `${identity.originalSelection.dataHistoryId}/${identity.invocationId}`;
+const bytes = (value) => new TextEncoder().encode(value).byteLength;
+/** sessionStorage isolates tabs. A cloned tab may look up copied identities, never replay them. */
+var RecoveryJournal = class {
+	options;
+	storageKey;
+	clientSessionId;
+	constructor(options) {
+		this.options = options;
+		this.storageKey = `ignotum:recovery:${options.appId}`;
+		this.clientSessionId = options.clientSessionId;
+	}
+	storage() {
+		const storage = this.options.storage;
+		return storage === void 0 ? globalThis.sessionStorage : Predicate.isFunction(storage) ? storage() : storage;
+	}
+	now() {
+		return this.options.now?.() ?? DateTime.toEpochMillis(DateTime.nowUnsafe());
+	}
+	snapshot(entries, issues) {
+		return {
+			clientSessionId: this.clientSessionId,
+			entries,
+			issues
+		};
+	}
+	read() {
+		let raw;
+		try {
+			raw = this.storage().getItem(this.storageKey);
+		} catch {
+			return this.snapshot([], ["denied"]);
+		}
+		if (raw === null) return this.snapshot([], []);
+		if (bytes(raw) > RecoveryJournalLimits.maxBytes) return this.discard("full");
+		const parsed = Schema.decodeUnknownOption(Schema.fromJsonString(RecoveryJournalRecord))(raw);
+		if (parsed._tag === "None" || parsed.value.appId !== this.options.appId) return this.discard("corrupt");
+		if (parsed.value.sessionEpoch !== this.options.sessionEpoch) return this.discard("session-changed");
+		this.clientSessionId = parsed.value.clientSessionId;
+		const now = this.now();
+		const entries = parsed.value.entries.filter((entry) => entry.expiresAt > now && entry.recordedAt <= now);
+		const issues = entries.length === parsed.value.entries.length ? [] : ["expired"];
+		return issues.length === 0 ? this.snapshot(entries, issues) : this.persist(entries, issues);
+	}
+	discard(issue) {
+		try {
+			this.storage().removeItem(this.storageKey);
+			return this.snapshot([], [issue]);
+		} catch {
+			return this.snapshot([], [issue, "denied"]);
+		}
+	}
+	persist(entries, issues) {
+		const record = {
+			formatVersion: 1,
+			appId: this.options.appId,
+			sessionEpoch: this.options.sessionEpoch,
+			clientSessionId: this.clientSessionId,
+			entries
+		};
+		const encoded = Schema.encodeOption(Schema.fromJsonString(RecoveryJournalRecord))(record);
+		if (encoded._tag === "None") return this.snapshot(entries, [...issues, "corrupt"]);
+		if (bytes(encoded.value) > RecoveryJournalLimits.maxBytes) return this.snapshot(entries, [...issues, "full"]);
+		try {
+			this.storage().setItem(this.storageKey, encoded.value);
+			return this.snapshot(entries, issues);
+		} catch (error) {
+			return this.snapshot(entries, [...issues, error instanceof DOMException && error.name === "QuotaExceededError" ? "full" : "denied"]);
+		}
+	}
+	/** Call before abandoning the page; any issue means durable recovery is not proven. */
+	write(identities) {
+		const current = this.read();
+		if (current.issues.includes("denied")) return current;
+		const entries = new Map(current.entries.map((entry) => [identityKey(entry.identity), entry]));
+		const now = this.now();
+		for (const identity of identities) {
+			if (identity.originalSelection.appId !== this.options.appId) return this.snapshot(current.entries, [...current.issues, "corrupt"]);
+			const key = identityKey(identity);
+			if (!entries.has(key)) entries.set(key, {
+				identity: {
+					invocationId: identity.invocationId,
+					originalSelection: identity.originalSelection
+				},
+				recordedAt: now,
+				expiresAt: now + RecoveryJournalLimits.retentionMs,
+				state: "pending"
+			});
+		}
+		if (entries.size > RecoveryJournalLimits.maxEntries) return this.snapshot(current.entries, [...current.issues, "full"]);
+		return this.persist([...entries.values()], current.issues);
+	}
+	reconcile(identity, state) {
+		const current = this.read();
+		if (current.issues.includes("denied")) return current;
+		return this.persist(current.entries.map((entry) => identityKey(entry.identity) === identityKey(identity) ? {
+			...entry,
+			state
+		} : entry), current.issues);
+	}
+	remove(identity) {
+		const current = this.read();
+		if (current.issues.includes("denied")) return current;
+		return this.persist(current.entries.filter((entry) => identityKey(entry.identity) !== identityKey(identity)), current.issues);
+	}
+	clear() {
+		try {
+			this.storage().removeItem(this.storageKey);
+			return this.snapshot([], []);
+		} catch {
+			return this.snapshot([], ["denied"]);
+		}
+	}
+};
 //#endregion
-//#region src/client/managed-upgrade.ts
+//#region ../platform/dist/versions/1/browser/managed-upgrade.js
 const TabStateV1 = Schema.Struct({
 	formatVersion: Schema.Literal(1),
 	appId: AppId,
 	clientSessionId: RecoverySessionId,
 	attempts: Schema.Natural.check(Schema.isLessThanOrEqualTo(3)),
 	attemptedAt: Schema.Natural,
-	target: Schema.NullOr(ExecutionSelection),
+	target: Schema.NullOr(ServingSelection),
 	uncertainStorage: Schema.Boolean
 }).annotate({ parseOptions: { onExcessProperty: "error" } });
 const TabState = initial(TabStateV1);
@@ -687,7 +601,7 @@ var ManagedUpgrade = class {
 		this.selection = selection;
 		this.browser = browser;
 		this.callbacks = callbacks;
-		this.key = `ignotum.managed.tab.${selection.appId}`;
+		this.key = `ignotum.v3.tab.${selection.appId}`;
 		this.tab = {
 			formatVersion: 1,
 			appId: selection.appId,
@@ -839,7 +753,7 @@ var ManagedUpgrade = class {
 			if (!response.ok) throw new Error("The updated app document is temporarily unavailable.");
 			await response.body?.cancel();
 			if (this.disposed) return;
-			const attempts = fresh !== void 0 && this.tab.target !== null && !sameExecutionSelection(this.tab.target, fresh) ? 0 : this.tab.attempts;
+			const attempts = fresh !== void 0 && this.tab.target !== null && !sameSelection(this.tab.target, fresh) ? 0 : this.tab.attempts;
 			if (attempts >= 2) throw new Error("The app update could not load a consistent release. Try again when the connection or release is available.");
 			this.tab = {
 				...this.tab,
@@ -883,7 +797,7 @@ var ManagedUpgrade = class {
 		if (this.obsolete || this.disposed) return false;
 		try {
 			const fresh = await this.callbacks.freshSelection();
-			if (fresh === void 0 || !sameExecutionSelection(this.selection, fresh)) {
+			if (fresh === void 0 || !sameSelection(this.selection, fresh)) {
 				this.require(fresh);
 				return false;
 			}
@@ -900,150 +814,279 @@ var ManagedUpgrade = class {
 	}
 };
 //#endregion
-//#region src/client/recovery-journal.ts
-const RecoveryJournalLimits = {
-	maxEntries: 100,
-	retentionMs: 864e5,
-	maxBytes: 65536
-};
-const RecoveryEntry = Schema.Struct({
-	identity: RecoveryIdentity,
-	recordedAt: Schema.Natural,
-	expiresAt: Schema.Natural,
-	state: Schema.Literals([
-		"pending",
-		"settled",
-		"interrupted",
-		"uncertain"
-	])
+//#region ../contracts/dist/runtime/index.js
+const IndexIdentity = Schema.String.pipe(Schema.brand("ignotum/runtime/IndexIdentity"));
+const EncodedIndexKey = Schema.String.check(Schema.isPattern(/^(?:[0-9a-f]{2})*$/)).pipe(Schema.brand("ignotum/runtime/EncodedIndexKey"));
+Schema.Union([
+	Schema.Boolean,
+	Schema.Finite,
+	Schema.String
+]);
+Schema.String.pipe(Schema.brand("ignotum/hosted/QueryKey"));
+const TableDependency = Schema.Struct({
+	type: Schema.Literal("Table"),
+	tableId: TableId
 });
-const RecoveryJournalV1 = Schema.Struct({
-	formatVersion: Schema.Literal(1),
+const DocumentDependency = Schema.Struct({
+	type: Schema.Literal("Document"),
+	tableId: TableId,
+	id: GeneratedId
+});
+const IndexRangeDependency = Schema.Struct({
+	type: Schema.Literal("IndexRange"),
+	tableId: TableId,
+	index: IndexIdentity,
+	lower: Schema.optional(EncodedIndexKey),
+	upper: Schema.optional(EncodedIndexKey)
+});
+const IndexPointInvalidation = Schema.Struct({
+	type: Schema.Literal("IndexPoint"),
+	tableId: TableId,
+	index: IndexIdentity,
+	key: EncodedIndexKey
+});
+const IdDependency = Schema.Struct({ type: Schema.Literal("Id") });
+const ReadDependency = Schema.Union([
+	IdDependency,
+	TableDependency,
+	DocumentDependency,
+	IndexRangeDependency
+]);
+const WriteInvalidation = Schema.Union([
+	TableDependency,
+	DocumentDependency,
+	IndexPointInvalidation
+]);
+Schema.Union([ReadDependency, IndexPointInvalidation]);
+const DependencySet = Schema.Array(ReadDependency);
+const InvalidationSet = Schema.Array(WriteInvalidation);
+const RuntimeQueryResult = Schema.Struct({
+	type: Schema.Literal("Query"),
+	result: WireResult,
+	dependencies: DependencySet,
+	observedRevision: AppStateRevision,
+	files: Schema.optional(Schema.Array(RuntimeFileOccurrence))
+});
+const FileReferenceAdded = Schema.Struct({
+	type: Schema.Literal("AddReference"),
+	file: RuntimeFileMetadata,
+	tableId: TableId,
+	documentId: GeneratedId
+});
+const FileReferenceRemoved = Schema.Struct({
+	type: Schema.Literal("RemoveReference"),
+	fileId: FileId,
+	tableId: TableId,
+	documentId: GeneratedId
+});
+const FileReferenceEffect = Schema.Union([FileReferenceAdded, FileReferenceRemoved]);
+const FileEffectBatch = Schema.Struct({
+	id: InvocationId,
+	dataHistoryId: Schema.optional(DataHistoryId),
+	committedRevision: AppStateRevision,
+	effects: Schema.Array(FileReferenceEffect)
+});
+Schema.Struct({ appId: AppId });
+Schema.Struct({ batches: Schema.Array(FileEffectBatch) });
+Schema.Struct({
 	appId: AppId,
-	sessionEpoch: Schema.String,
-	clientSessionId: RecoverySessionId,
-	entries: Schema.Array(RecoveryEntry).check(Schema.isMaxLength(RecoveryJournalLimits.maxEntries))
-}).check(Schema.makeFilter((record) => {
-	const keys = record.entries.map((entry) => identityKey(entry.identity));
-	return new Set(keys).size === keys.length && record.entries.every((entry) => entry.identity.originalSelection.appId === record.appId && entry.expiresAt > entry.recordedAt && entry.expiresAt - entry.recordedAt <= RecoveryJournalLimits.retentionMs);
-})).annotate({ parseOptions: { onExcessProperty: "error" } });
-const RecoveryJournalRecord = initial(RecoveryJournalV1);
-const identityKey = (identity) => `${identity.originalSelection.dataHistoryId}/${identity.invocationId}`;
-const bytes = (value) => new TextEncoder().encode(value).byteLength;
-/** sessionStorage isolates tabs. A cloned tab may look up copied identities, never replay them. */
-var RecoveryJournal = class {
-	options;
-	storageKey;
-	clientSessionId;
-	constructor(options) {
-		this.options = options;
-		this.storageKey = `ignotum:recovery:${options.appId}`;
-		this.clientSessionId = options.clientSessionId;
-	}
-	storage() {
-		const storage = this.options.storage;
-		return storage === void 0 ? globalThis.sessionStorage : Predicate.isFunction(storage) ? storage() : storage;
-	}
-	now() {
-		return this.options.now?.() ?? DateTime.toEpochMillis(DateTime.nowUnsafe());
-	}
-	snapshot(entries, issues) {
-		return {
-			clientSessionId: this.clientSessionId,
-			entries,
-			issues
-		};
-	}
-	read() {
-		let raw;
-		try {
-			raw = this.storage().getItem(this.storageKey);
-		} catch {
-			return this.snapshot([], ["denied"]);
-		}
-		if (raw === null) return this.snapshot([], []);
-		if (bytes(raw) > RecoveryJournalLimits.maxBytes) return this.discard("full");
-		const parsed = Schema.decodeUnknownOption(Schema.fromJsonString(RecoveryJournalRecord))(raw);
-		if (parsed._tag === "None" || parsed.value.appId !== this.options.appId) return this.discard("corrupt");
-		if (parsed.value.sessionEpoch !== this.options.sessionEpoch) return this.discard("session-changed");
-		this.clientSessionId = parsed.value.clientSessionId;
-		const now = this.now();
-		const entries = parsed.value.entries.filter((entry) => entry.expiresAt > now && entry.recordedAt <= now);
-		const issues = entries.length === parsed.value.entries.length ? [] : ["expired"];
-		return issues.length === 0 ? this.snapshot(entries, issues) : this.persist(entries, issues);
-	}
-	discard(issue) {
-		try {
-			this.storage().removeItem(this.storageKey);
-			return this.snapshot([], [issue]);
-		} catch {
-			return this.snapshot([], [issue, "denied"]);
-		}
-	}
-	persist(entries, issues) {
-		const record = {
-			formatVersion: 1,
-			appId: this.options.appId,
-			sessionEpoch: this.options.sessionEpoch,
-			clientSessionId: this.clientSessionId,
-			entries
-		};
-		const encoded = Schema.encodeOption(Schema.fromJsonString(RecoveryJournalRecord))(record);
-		if (encoded._tag === "None") return this.snapshot(entries, [...issues, "corrupt"]);
-		if (bytes(encoded.value) > RecoveryJournalLimits.maxBytes) return this.snapshot(entries, [...issues, "full"]);
-		try {
-			this.storage().setItem(this.storageKey, encoded.value);
-			return this.snapshot(entries, issues);
-		} catch (error) {
-			return this.snapshot(entries, [...issues, error instanceof DOMException && error.name === "QuotaExceededError" ? "full" : "denied"]);
-		}
-	}
-	/** Call before abandoning the page; any issue means durable recovery is not proven. */
-	write(identities) {
-		const current = this.read();
-		if (current.issues.includes("denied")) return current;
-		const entries = new Map(current.entries.map((entry) => [identityKey(entry.identity), entry]));
-		const now = this.now();
-		for (const identity of identities) {
-			if (identity.originalSelection.appId !== this.options.appId) return this.snapshot(current.entries, [...current.issues, "corrupt"]);
-			const key = identityKey(identity);
-			if (!entries.has(key)) entries.set(key, {
-				identity: {
-					invocationId: identity.invocationId,
-					originalSelection: identity.originalSelection
-				},
-				recordedAt: now,
-				expiresAt: now + RecoveryJournalLimits.retentionMs,
-				state: "pending"
-			});
-		}
-		if (entries.size > RecoveryJournalLimits.maxEntries) return this.snapshot(current.entries, [...current.issues, "full"]);
-		return this.persist([...entries.values()], current.issues);
-	}
-	reconcile(identity, state) {
-		const current = this.read();
-		if (current.issues.includes("denied")) return current;
-		return this.persist(current.entries.map((entry) => identityKey(entry.identity) === identityKey(identity) ? {
-			...entry,
-			state
-		} : entry), current.issues);
-	}
-	remove(identity) {
-		const current = this.read();
-		if (current.issues.includes("denied")) return current;
-		return this.persist(current.entries.filter((entry) => identityKey(entry.identity) !== identityKey(identity)), current.issues);
-	}
-	clear() {
-		try {
-			this.storage().removeItem(this.storageKey);
-			return this.snapshot([], []);
-		} catch {
-			return this.snapshot([], ["denied"]);
-		}
-	}
+	invocationId: InvocationId,
+	acknowledgedAt: Schema.Int,
+	dataHistoryId: DataHistoryId
+});
+Schema.Struct({ completed: Schema.Literal(true) });
+const RuntimeMutationSuccess = Schema.Struct({
+	type: Schema.Literal("Mutation"),
+	result: WireSuccess,
+	invalidations: InvalidationSet,
+	committedRevision: AppStateRevision,
+	fileEffects: Schema.optional(FileEffectBatch)
+});
+const RuntimeMutationFailure = Schema.Struct({
+	type: Schema.Literal("Mutation"),
+	result: WireFailure
+});
+const RuntimeMutationResult = Schema.Union([RuntimeMutationSuccess, RuntimeMutationFailure]);
+Schema.Union([RuntimeQueryResult, RuntimeMutationResult]);
+const RuntimeRecoveryOwner = Schema.Struct({
+	clientSessionId: RecoverySessionId,
+	sessionEpoch: Schema.NullOr(Schema.String)
+});
+Schema.Struct({
+	appId: AppId,
+	identity: RecoveryIdentity,
+	owner: RuntimeRecoveryOwner
+});
+const RuntimeMutationOutcome = Schema.Union([
+	Schema.Struct({
+		type: Schema.Literal("Settled"),
+		result: RuntimeMutationResult
+	}),
+	Schema.Struct({ type: Schema.Literal("Interrupted") }),
+	Schema.Struct({ type: Schema.Literal("Pending") }),
+	Schema.Struct({ type: Schema.Literal("Uncertain") })
+]);
+const InvocationBase = {
+	appId: AppId,
+	versionId: VersionId,
+	generation: ActivationGeneration,
+	selection: Schema.optional(ServingSelection),
+	invocationKey: InvocationKey,
+	function: FunctionAddress,
+	args: Schema.Json,
+	identity: Schema.optional(SessionState)
 };
+const QueryInvocation = Schema.Struct({
+	...InvocationBase,
+	type: Schema.Literal("Query")
+});
+const MutationInvocation = Schema.Struct({
+	...InvocationBase,
+	type: Schema.Literal("Mutation"),
+	invocationId: InvocationId,
+	recoveryOwner: Schema.optional(RuntimeRecoveryOwner),
+	files: Schema.optional(Schema.Array(RuntimeFileOccurrence))
+});
+Schema.Union([QueryInvocation, MutationInvocation]);
+Schema.Struct({
+	appId: AppId,
+	expectedRevision: AppStateRevision
+});
+Schema.Struct({ currentRevision: AppStateRevision });
+var RuntimeVersionUnavailable = class extends Schema.TaggedError()("RuntimeVersionUnavailable", {
+	versionId: VersionId,
+	message: Schema.String
+}) {};
+const RuntimeInvocationRejectionCode = Schema.Literals([
+	"SessionExpired",
+	"FunctionUnavailable",
+	"InvalidArguments",
+	"InvocationIdConflict",
+	"ResourceLimitExceeded",
+	"UnknownFunction",
+	"WrongFunctionKind"
+]);
+var RuntimeInvocationRejected = class extends Schema.TaggedError()("RuntimeInvocationRejected", {
+	code: RuntimeInvocationRejectionCode,
+	invocationKey: InvocationKey,
+	message: Schema.String
+}) {};
+var RuntimeInvocationUnavailable = class extends Schema.TaggedError()("RuntimeInvocationUnavailable", {
+	invocationKey: InvocationKey,
+	message: Schema.String
+}) {};
+Schema.TaggedError()("RuntimeRevisionRejected", {
+	appId: AppId,
+	message: Schema.String
+});
+Schema.Union([
+	RuntimeVersionUnavailable,
+	RuntimeInvocationRejected,
+	RuntimeInvocationUnavailable
+]);
+//#endregion
+//#region ../contracts/dist/managed-sync.js
+const platformRevision = {
+	major: 1,
+	minor: 0
+};
+const managedSyncPath = endpointUrl(platformRevision, "sync");
+const managedSelectionPath = endpointUrl(platformRevision, "selection");
+const ManagedSelectionResponse = Schema.Struct({
+	protocolVersion: Schema.Literal(1),
+	selection: ServingSelection
+});
+const ManagedClientMessage = Schema.Union([
+	Schema.Struct({
+		type: Schema.Literal("Connect"),
+		protocolVersion: Schema.Natural,
+		selection: ServingSelection,
+		clientSessionId: RecoverySessionId
+	}),
+	Schema.Struct({
+		type: Schema.Literal("Prepare"),
+		invocationId: InvocationId,
+		function: FunctionAddress,
+		args: Schema.Json,
+		files: Schema.Array(FileId).check(Schema.isMaxLength(fileLimits.filesPerMutation))
+	}),
+	Schema.Struct({
+		type: Schema.Literal("Invoke"),
+		invocationId: InvocationId,
+		function: FunctionAddress,
+		args: Schema.Json
+	}),
+	Schema.Struct({
+		type: Schema.Literal("RecoverMutation"),
+		id: Schema.String.check(Schema.isMaxLength(128)),
+		identity: RecoveryIdentity
+	}),
+	Schema.Struct({
+		type: Schema.Literal("Subscribe"),
+		id: SubscriptionId,
+		function: FunctionAddress,
+		args: Schema.Json
+	}),
+	Schema.Struct({
+		type: Schema.Literal("Unsubscribe"),
+		id: SubscriptionId
+	})
+]);
+/** Decode this envelope before the normal server protocol, including on unsupported versions. */
+const ManagedUpgradeRequired = Schema.Struct({
+	type: Schema.Literal("UpgradeRequired"),
+	selection: ServingSelection
+});
+const ManagedServerMessage = Schema.Union([
+	ManagedUpgradeRequired,
+	Schema.Struct({
+		type: Schema.Literal("Handshake"),
+		protocolVersion: Schema.Literal(1),
+		selection: ServingSelection,
+		session: SessionState,
+		serverTime: Schema.Finite
+	}),
+	Schema.Struct({
+		type: Schema.Literal("Preparation"),
+		invocationId: InvocationId,
+		uploads: Schema.Array(Schema.Struct({
+			id: FileId,
+			url: Schema.optional(Schema.String)
+		}))
+	}),
+	Schema.Struct({
+		type: Schema.Literal("MutationOutcome"),
+		id: Schema.String,
+		identity: RecoveryIdentity,
+		outcome: RuntimeMutationOutcome
+	}),
+	Schema.Struct({
+		type: Schema.Literal("QuerySnapshot"),
+		selection: ServingSelection,
+		id: SubscriptionId,
+		result: RuntimeQueryResult,
+		files: Schema.optional(Schema.Array(Schema.Struct({
+			id: FileId,
+			url: Schema.String
+		})))
+	}),
+	Schema.Struct({
+		type: Schema.Literal("Error"),
+		id: Schema.optional(Schema.String),
+		code: Schema.Literals([
+			"PlatformUpgrading",
+			"SessionExpired",
+			"InvalidMessage",
+			"Unavailable",
+			"InvalidArguments",
+			"InvocationIdConflict",
+			"ResourceLimitExceeded"
+		]),
+		message: Schema.String
+	})
+]);
 //#endregion
-//#region src/client/managed-client.ts
+//#region ../platform/dist/versions/1/browser/managed-client.js
 const issueMessage = (issue) => {
 	switch (issue) {
 		case "denied": return "Browser storage is unavailable. Some previous mutation outcomes may be unknown.";
@@ -1249,7 +1292,7 @@ var ManagedBrowserClient = class {
 			return;
 		}
 		if (message.type === "Handshake") {
-			if (!sameExecutionSelection(this.selection, message.selection)) {
+			if (!sameSelection(this.selection, message.selection)) {
 				this.upgrade.require(message.selection);
 				return;
 			}
@@ -1322,7 +1365,7 @@ var ManagedBrowserClient = class {
 			}
 			case "QuerySnapshot": {
 				if (!this.canSend()) return;
-				if (!sameExecutionSelection(this.selection, message.selection)) {
+				if (!sameSelection(this.selection, message.selection)) {
 					this.upgrade.require(message.selection);
 					return;
 				}
@@ -1331,7 +1374,7 @@ var ManagedBrowserClient = class {
 				return;
 			}
 			case "MutationOutcome":
-				if (!sameExecutionSelection(message.identity.originalSelection, this.selection) && !this.recovery.has(message.id)) return;
+				if (!sameSelection(message.identity.originalSelection, this.selection) && !this.recovery.has(message.id)) return;
 				this.outcome(message.id, message.identity, message.outcome);
 				return;
 			case "Error":
@@ -1405,7 +1448,7 @@ var ManagedBrowserClient = class {
 		const pending = this.pending.get(identity.invocationId);
 		if (recovery === void 0 && pending === void 0) return;
 		const expected = recovery ?? pending.identity;
-		if (expected.invocationId !== identity.invocationId || !sameExecutionSelection(expected.originalSelection, identity.originalSelection)) return;
+		if (expected.invocationId !== identity.invocationId || !sameSelection(expected.originalSelection, identity.originalSelection)) return;
 		this.recovery.delete(id);
 		const timeout = this.recoveryTimeouts.get(id);
 		if (timeout !== void 0) {
@@ -1575,7 +1618,7 @@ var ManagedBrowserClient = class {
 	}
 };
 //#endregion
-//#region src/client/sync.ts
+//#region ../platform/dist/versions/1/browser/sync.js
 const queryKey = (functionAddress, args) => encodeCanonicalJson([functionAddress, args]);
 const subscribeMessage = (entry) => ({
 	type: "Subscribe",
@@ -2170,7 +2213,7 @@ const buildUrl = Effect.fn("Routing.buildUrl")(function* (input, values = {}) {
 	return `/${segments.join("/")}${search === "" ? "" : `?${search}`}${hash}`;
 });
 //#endregion
-//#region src/client/router.ts
+//#region ../platform/dist/versions/1/browser/router.js
 const RouterContext = createContext(void 0);
 const useRouter = () => {
 	const router = useContext(RouterContext);
@@ -2374,4 +2417,4 @@ function Redirect(props) {
 //#endregion
 export { Files as C, BrowserSession as S, matchPattern as _, url as a, syncClientInternals as b, useMatch as c, useRoute as d, useRouterSnapshot as f, matchDirectory as g, compilePatterns as h, RouterContext as i, useNavigate as l, parseLocation as m, NavLink as n, useBlocker as o, decodeRouteInputs as p, Redirect as r, useLocation as s, Link as t, useNavigation as u, SyncClient as v, ClientInfrastructureError as w, syncRuntime as x, mountManagedSync as y };
 
-//# sourceMappingURL=router-BSBI1oN1.js.map
+//# sourceMappingURL=router-C1eC9yy5.js.map