Module restore 

Checked content-only historical restoration. The caller owns authorization and commit.

Structs

ContentProjection

Immutable semantic content backed by a flat private arena. Child indices are meaningful only inside this projection and are never CRDT object identities.

HistoryMapEntries

HistoryMapField

HistoryMapOverlay

HistoryRestoreRoot

HistoryRestoreSchema

HistoryRootSelector

PreparedContentRestore

Enums

HistoryMembership

HistoryRestoreNode

HistoryRootPattern

Declarative family captures are nonempty UTF-8 strings without control characters. Their byte length is in 1..=max_capture_bytes (maximum 256). Affixes are ASCII, at most 256 bytes each; the nonempty prefix contains . or :. Keys with the fixed affixes but invalid captures fail content validation.

PreservedOnCreate

RestoreError

RestoreOutcome

RestoreValueType

ScalarType

Functions

apply_prepared_content_restore

Apply to the live document’s pending transaction; the caller commits once. An unchanged target leaves no pending operations and needs no action entry. The host must refresh cached content object handles after a changed result.

prepare_content_restore

Prepare exact content restoration without mutating or committing the input.

prepare_external_content_import

Prepare a content-only import from an independently owned document. Both exact frontiers must still match the reviewed values. Authorization, identity discontinuity, archive verification and the final commit belong to the caller. Source operations are used only in a disposable read model; the destination receives newly authored values through the ordinary checked restore writer.