@cleocode/core 2026.10.1 → 2026.10.2

package/dist/store/migration-runner.js

@@ -0,0 +1,493 @@
+/**
+ * The bracketed migration runner (journal spec §2.3a rules 1–3; T12774,
+ * T12781, T12785, T12786, T12795, T12796, T12797, T12809).
+ *
+ * Drizzle's `migrateSync` runs every pending migration in ONE transaction of
+ * its own, with `PRAGMA foreign_keys` left ON (the PRAGMA is a no-op inside a
+ * transaction). A table rebuild's `DROP TABLE` therefore cascade-deletes
+ * child rows, and nothing can run inside its transaction. This runner keeps
+ * drizzle's journal byte-for-byte and replaces the transaction discipline:
+ *
+ * - **Journal-identical (R5-3).** Pending migrations are selected by NAME
+ *   (drizzle's `getMigrationsToRun`), each row is written with the RAW file's
+ *   sha256, `created_at = folderMillis`, `name` and `applied_at`, exactly as
+ *   `migrateSync` writes it. `reconcileJournal` and drizzle's own
+ *   `upgradeSyncIfNeeded` run inside the leading bracket, in today's order.
+ *   Statements run one per `prepare()`, as drizzle's session does.
+ * - **One bracket per migration FILE (R6-6).** Each file gets its own
+ *   `BEGIN IMMEDIATE … COMMIT` and its own journal row.
+ * - **FK discipline (A, NEW-1, R5-2, R5-4, NEW-6).** `foreign_keys` is turned
+ *   OFF before `BEGIN` only for a file that rebuilds a table. For such a file
+ *   the runner snapshots the FK violations of its scope (rebuilt and
+ *   DML-touched tables plus their FK children) as a rowid-free multiset,
+ *   re-checks after the statements, and rolls back on any NEW violation.
+ *   Pre-existing orphans never block a migration. `finally` restores
+ *   `foreign_keys`, reads it back and asserts no transaction is open.
+ * - **Recovery kept.** A duplicate-column or table-exists error re-runs
+ *   `reconcileJournal` once and retries, as `migrateWithRetry` does; a BUSY
+ *   error retries the whole bracket with backoff, never mid-bracket.
+ * - **Hooks (D4, NEW-8).** `beforeMigrations` runs before the first bracket
+ *   (the sealer's pending work and the repair diff for suspect tables, S3);
+ *   `suspendCapture` / `reinstallCapture` run inside each bracket around the
+ *   statements (the capture triggers, S2); `afterMigration` runs after each
+ *   commit (the `chash` re-baseline, S3). All are optional.
+ *
+ * Drizzle is pinned to {@link PINNED_DRIZZLE_VERSION}; a test fails when the
+ * installed version differs, so an upgrade must re-run the parity suite.
+ *
+ * @task T12796
+ * @task T12809
+ * @module store/migration-runner
+ */
+import { basename } from 'node:path';
+import { readMigrationFiles } from 'drizzle-orm/migrator';
+import { getMigrationsToRun } from 'drizzle-orm/migrator.utils';
+import { sql } from 'drizzle-orm/sql';
+import { upgradeSyncIfNeeded } from 'drizzle-orm/up-migrations/sqlite';
+import { getLogger } from '../logger.js';
+import { isDuplicateColumnError, isTableAlreadyExistsError, reconcileJournal, sanitizeMigrationStatements, } from './migration-manager.js';
+import { isSqliteBusy } from './with-retry.js';
+import { assertNoPendingMigrationsForWorktreeBuild } from './worktree-build-guard.js';
+/** The drizzle-orm version the runner's journal parity was proven against. */
+export const PINNED_DRIZZLE_VERSION = '1.0.0-rc.4';
+/** The journal table drizzle uses by default. */
+export const MIGRATIONS_TABLE = '__drizzle_migrations';
+const MAX_BUSY_RETRIES = 5;
+const BUSY_BASE_DELAY_MS = 100;
+const BUSY_MAX_DELAY_MS = 2000;
+/**
+ * Legacy lineages the runner refuses by folder name (cleo-dev ruling on the
+ * S2 runner scope, 2026-09-30). They keep `migrateWithRetry` in their own
+ * binders (`sqlite.ts`, `memory-sqlite.ts`, `nexus-sqlite.ts`,
+ * `conduit-sqlite.ts`, …); only the consolidated `cleo.db` lineages run
+ * bracketed.
+ */
+export const LEGACY_LINEAGES = new Set([
+    'drizzle-tasks',
+    'drizzle-brain',
+    'drizzle-nexus',
+    'drizzle-conduit',
+    'drizzle-agent-registry',
+    'drizzle-skills',
+    'drizzle-telemetry',
+    'drizzle-signaldock',
+]);
+/** A legacy lineage was handed to the runner. */
+export class LegacyLineageRefusedError extends Error {
+    lineage;
+    code = 'E_MIGRATION_RUNNER_LEGACY_LINEAGE';
+    constructor(lineage) {
+        super(`The bracketed migration runner runs only the consolidated cleo.db lineages; refusing legacy lineage ${lineage}`);
+        this.lineage = lineage;
+        this.name = 'LegacyLineageRefusedError';
+    }
+}
+/** A migration file that introduced a foreign-key violation (rolled back). */
+export class MigrationForeignKeyError extends Error {
+    migration;
+    violations;
+    code = 'E_MIGRATION_FK_VIOLATION';
+    constructor(migration, violations) {
+        super(`Migration ${migration} would leave ${violations.length} new foreign-key violation(s); ` +
+            `rolled back. First: ${violations.slice(0, 3).join('; ')}`);
+        this.migration = migration;
+        this.violations = violations;
+        this.name = 'MigrationForeignKeyError';
+    }
+}
+/** `foreign_keys` could not be restored on a handle after a bracket. */
+export class ForeignKeysNotRestoredError extends Error {
+    code = 'E_STORE_FK_OFF';
+    constructor(expected, actual) {
+        super(`PRAGMA foreign_keys is ${actual} after a migration bracket; expected ${expected}`);
+        this.name = 'ForeignKeysNotRestoredError';
+    }
+}
+const IDENT = String.raw `[\`"[]?(\w+)[\`"\]]?`;
+/** Strip `--` comments so prose never looks like DDL. */
+function code(stmt) {
+    return stmt.replace(/--[^\n]*/g, '');
+}
+/**
+ * The tables a migration file rebuilds or drops: `CREATE TABLE __new_x`
+ * (→ `x`), `DROP TABLE x`, `ALTER TABLE x RENAME TO y` (→ `x`, `y`).
+ * Empty for a file that rebuilds nothing.
+ */
+export function rebuiltTables(statements) {
+    const out = new Set();
+    const final = (t) => t.replace(/^__new_/, '');
+    for (const s of statements.map(code)) {
+        for (const m of s.matchAll(new RegExp(String.raw `\bCREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?${IDENT}`, 'gi'))) {
+            if (m[1].startsWith('__new_'))
+                out.add(final(m[1]));
+        }
+        for (const m of s.matchAll(new RegExp(String.raw `\bDROP\s+TABLE\s+(?:IF\s+EXISTS\s+)?${IDENT}`, 'gi'))) {
+            out.add(final(m[1]));
+        }
+        for (const m of s.matchAll(new RegExp(String.raw `\bALTER\s+TABLE\s+${IDENT}\s+RENAME\s+TO\s+${IDENT}`, 'gi'))) {
+            out.add(final(m[1]));
+            out.add(final(m[2]));
+        }
+    }
+    return [...out].sort();
+}
+/**
+ * Where each table a migration file renames ends up: every `ALTER TABLE a RENAME TO b`, in statement
+ * order and composed, so `a → b` then `b → c` gives `a → c` (T13027). Unrenamed tables are absent.
+ */
+export function renamedTables(statements) {
+    const out = new Map();
+    // Anchored: only a statement that IS the rename counts, never text inside a
+    // string literal or another statement's body.
+    const rename = new RegExp(String.raw `^\s*ALTER\s+TABLE\s+${IDENT}\s+RENAME\s+TO\s+${IDENT}\s*;?\s*$`, 'i');
+    for (const s of statements.map(code)) {
+        const m = rename.exec(s);
+        if (!m)
+            continue;
+        const from = m[1];
+        const to = m[2];
+        const original = [...out.entries()].find(([, now]) => now === from)?.[0] ?? from;
+        out.set(original, to);
+    }
+    return out;
+}
+/** The tables a migration's DML writes (INSERT / UPDATE / DELETE / REPLACE). */
+export function dmlTables(statements) {
+    const out = new Set();
+    for (const s of statements.map(code)) {
+        for (const m of s.matchAll(new RegExp(String.raw `\b(?:INSERT(?:\s+OR\s+\w+)?\s+INTO|REPLACE\s+INTO|UPDATE(?:\s+OR\s+\w+)?|DELETE\s+FROM)\s+${IDENT}`, 'gi'))) {
+            out.add(m[1].replace(/^__new_/, ''));
+        }
+    }
+    return [...out].sort();
+}
+function listTables(db) {
+    return db
+        .prepare("SELECT name FROM main.sqlite_master WHERE type = 'table' AND name NOT LIKE 'sqlite_%' ORDER BY name")
+        .all().map((r) => r.name);
+}
+function foreignKeys(db, table) {
+    return db.prepare(`PRAGMA main.foreign_key_list("${table}")`).all();
+}
+/**
+ * The FK scope of a rebuild file: the given tables plus every table with a
+ * foreign key to one of them (children), restricted to tables that exist.
+ */
+export function foreignKeyScope(db, tables) {
+    const all = listTables(db);
+    const existing = new Set(all);
+    const scope = new Set(tables.filter((t) => existing.has(t)));
+    const parents = new Set(tables);
+    for (const t of all) {
+        if (foreignKeys(db, t).some((fk) => parents.has(fk.table)))
+            scope.add(t);
+    }
+    return [...scope].sort();
+}
+/** SQLite's affinity for a declared column type (§3.1 of the datatype doc). */
+function affinity(declared) {
+    const t = declared.toUpperCase();
+    if (t.includes('INT'))
+        return 'INTEGER';
+    if (/CHAR|CLOB|TEXT/.test(t))
+        return 'TEXT';
+    if (t === '' || t.includes('BLOB'))
+        return 'BLOB';
+    if (/REAL|FLOA|DOUB/.test(t))
+        return 'REAL';
+    return 'NUMERIC';
+}
+/**
+ * The foreign-key violations of `tables`, as a multiset keyed by rowid-free
+ * identity (R5-2): (table, the child's primary-key values normalized by
+ * column affinity — or the whole row for a table without a declared PK,
+ * parent table, the child's FK values). Duplicates count.
+ *
+ * FK column NAMES are not part of the key: a rebuild may rename an FK column
+ * while the violation stays the same row and value (T13027). Two orphaned
+ * FKs of one row with equal values are still counted twice.
+ */
+export function foreignKeyViolations(db, tables) {
+    const out = new Map();
+    for (const table of tables) {
+        const rows = db.prepare(`PRAGMA main.foreign_key_check("${table}")`).all();
+        if (rows.length === 0)
+            continue;
+        const cols = db.prepare(`PRAGMA main.table_info("${table}")`).all();
+        const pkCols = cols.filter((c) => c.pk > 0).sort((a, b) => a.pk - b.pk);
+        const keyCols = pkCols.length > 0 ? pkCols : cols;
+        const fks = foreignKeys(db, table);
+        const seenNoRowid = new Set();
+        const enc = (c, alias) => {
+            const a = affinity(c.type);
+            const ref = `${alias}"${c.name}"`;
+            return a === 'BLOB' ? `quote(${ref})` : `quote(CAST(${ref} AS ${a}))`;
+        };
+        const keySql = (alias) => `json_array(${keyCols.map((c) => enc(c, alias)).join(', ')})`;
+        for (const v of rows) {
+            const fkCols = fks.filter((f) => f.id === v.fkid).sort((a, b) => a.seq - b.seq);
+            const fkSql = (alias) => `json_array(${fkCols.map((f) => `quote(${alias}"${f.from}")`).join(', ')})`;
+            let identities;
+            if (v.rowid !== null && v.rowid !== undefined) {
+                identities = db
+                    .prepare(`SELECT ${keySql('')} AS k, ${fkSql('')} AS f FROM main."${table}" WHERE rowid = ?`)
+                    .all(v.rowid);
+            }
+            else {
+                // WITHOUT ROWID: no rowid to point at; list this FK's violating rows.
+                const parentPk = db.prepare(`PRAGMA main.table_info("${v.parent}")`).all()
+                    .filter((c) => c.pk > 0)
+                    .sort((a, b) => a.pk - b.pk)
+                    .map((c) => c.name);
+                const match = fkCols
+                    .map((f, i) => `p."${f.to ?? parentPk[i] ?? f.from}" = c."${f.from}"`)
+                    .join(' AND ');
+                identities = db
+                    .prepare(`SELECT ${keySql('c.')} AS k, ${fkSql('c.')} AS f FROM main."${table}" c ` +
+                    `WHERE ${fkCols.map((f) => `c."${f.from}" IS NOT NULL`).join(' AND ')} ` +
+                    `AND NOT EXISTS (SELECT 1 FROM main."${v.parent}" p WHERE ${match})`)
+                    .all();
+                // foreign_key_check lists one row per violation; this query lists them
+                // all at once, so take it for the first report of this FK only.
+                if (seenNoRowid.has(v.fkid))
+                    identities = [];
+                seenNoRowid.add(v.fkid);
+            }
+            for (const id of identities) {
+                const key = JSON.stringify([table, id.k, v.parent, id.f]);
+                out.set(key, (out.get(key) ?? 0) + 1);
+            }
+        }
+    }
+    return out;
+}
+/**
+ * A before-snapshot re-keyed to the names its tables have after a file's
+ * renames (T13027): child and parent tables move through `renames` when the
+ * new name exists afterwards. A table renamed away and dropped (`x → __old_x`
+ * in a rebuild) keeps its name, since its rows now live under the old name.
+ */
+export function renameViolations(before, renames, exists) {
+    if (renames.size === 0)
+        return before;
+    const to = (t) => {
+        const r = renames.get(t);
+        return r !== undefined && exists(r) ? r : t;
+    };
+    const out = new Map();
+    for (const [k, n] of before) {
+        const [table, pk, parent, values] = JSON.parse(k);
+        const key = JSON.stringify([to(table), pk, to(parent), values]);
+        out.set(key, (out.get(key) ?? 0) + n);
+    }
+    return out;
+}
+/** Keys whose count in `after` exceeds their count in `before`. */
+export function newViolations(before, after) {
+    const out = [];
+    for (const [k, n] of after) {
+        const extra = n - (before.get(k) ?? 0);
+        for (let i = 0; i < extra; i++)
+            out.push(k);
+    }
+    return out;
+}
+function sleepMs(ms) {
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, Math.round(ms));
+}
+/** Run `fn`, retrying the whole thing on SQLITE_BUSY with backoff. */
+function withBusyRetry(fn) {
+    for (let attempt = 1;; attempt++) {
+        try {
+            return fn();
+        }
+        catch (err) {
+            if (!isSqliteBusy(err) || attempt >= MAX_BUSY_RETRIES)
+                throw err;
+            sleepMs(Math.min(BUSY_BASE_DELAY_MS * 2 ** (attempt - 1) * (1 + Math.random() * 0.5), BUSY_MAX_DELAY_MS));
+        }
+    }
+}
+function readForeignKeys(db) {
+    return Number(db.prepare('PRAGMA foreign_keys').get().foreign_keys);
+}
+/**
+ * The leading bracket of a lineage: reconcile (when configured), then
+ * drizzle's journal-format upgrade, then create the journal table on a new
+ * store. Returns the names already journaled.
+ */
+function leadingBracket(nativeDb, 
+// biome-ignore lint/suspicious/noExplicitAny: drizzle's session type is generic over the schema
+db, lineage, migrations) {
+    withBusyRetry(() => {
+        nativeDb.exec('BEGIN IMMEDIATE');
+        try {
+            if (lineage.reconcile) {
+                reconcileJournal(nativeDb, lineage.folder, lineage.reconcile.existenceTable, lineage.reconcile.logSubsystem, lineage.reconcile.siblings ?? []);
+            }
+            // Drizzle's own upgrade, with its inner transaction folded into ours.
+            const session = db._.session;
+            const inBracket = new Proxy(session, {
+                get(target, prop, receiver) {
+                    if (prop === 'transaction')
+                        return (fn) => fn(receiver);
+                    return Reflect.get(target, prop, receiver);
+                },
+            });
+            const { newDb } = upgradeSyncIfNeeded(MIGRATIONS_TABLE, inBracket, migrations);
+            if (newDb) {
+                session.run(sql `
+			CREATE TABLE IF NOT EXISTS ${sql.identifier(MIGRATIONS_TABLE)} (
+				id INTEGER PRIMARY KEY,
+				hash text NOT NULL,
+				created_at numeric,
+				name text,
+				applied_at TEXT
+			)`);
+            }
+            nativeDb.exec('COMMIT');
+        }
+        catch (err) {
+            if (nativeDb.isTransaction)
+                nativeDb.exec('ROLLBACK');
+            throw err;
+        }
+    });
+}
+function journalRows(nativeDb) {
+    return nativeDb
+        .prepare(`SELECT id, hash, created_at, name FROM main."${MIGRATIONS_TABLE}"`)
+        .all();
+}
+/**
+ * Apply one migration file in its own bracket. Returns whether it ran with
+ * foreign keys off.
+ */
+function migrationBracket(nativeDb, migration, hooks) {
+    const statements = migration.sql;
+    const rebuilt = rebuiltTables(statements);
+    const rebuild = rebuilt.length > 0;
+    const prev = readForeignKeys(nativeDb);
+    let failure;
+    let committed = false;
+    try {
+        if (rebuild)
+            nativeDb.exec('PRAGMA foreign_keys = OFF');
+        nativeDb.exec('BEGIN IMMEDIATE');
+        const scopeTables = [...rebuilt, ...dmlTables(statements)];
+        const before = rebuild
+            ? foreignKeyViolations(nativeDb, foreignKeyScope(nativeDb, scopeTables))
+            : new Map();
+        hooks.suspendCapture?.(nativeDb);
+        for (const stmt of statements)
+            nativeDb.prepare(stmt).run();
+        nativeDb
+            .prepare(`INSERT INTO main."${MIGRATIONS_TABLE}" ("hash", "created_at", "name", "applied_at") values(?, ?, ?, ?)`)
+            .run(migration.hash, migration.folderMillis, migration.name ?? null, new Date().toISOString());
+        if (rebuild) {
+            // Re-scope after the statements: the rebuild may have created tables.
+            const after = foreignKeyViolations(nativeDb, foreignKeyScope(nativeDb, scopeTables));
+            // A renamed table keeps its pre-existing orphans: compare under the new names (T13027).
+            const live = new Set(listTables(nativeDb));
+            const renamed = renameViolations(before, renamedTables(statements), (t) => live.has(t));
+            const added = newViolations(renamed, after);
+            // @sync-invariant none:local-only a migration that adds FK violations is refused locally before commit; schema, not synced rows
+            if (added.length > 0)
+                throw new MigrationForeignKeyError(migration.name ?? '', added);
+        }
+        hooks.reinstallCapture?.(nativeDb);
+        nativeDb.exec('COMMIT');
+        committed = true;
+    }
+    catch (err) {
+        failure = err;
+    }
+    // NEW-6: never leave a pooled handle inside a transaction or with FK off.
+    if (nativeDb.isTransaction)
+        nativeDb.exec('ROLLBACK');
+    nativeDb.exec(`PRAGMA foreign_keys = ${prev}`);
+    const now = readForeignKeys(nativeDb);
+    if (now !== prev || nativeDb.isTransaction) {
+        // @sync-invariant none:local-only the migration runner restores this handle's FK mode; local schema pass
+        throw Object.assign(new ForeignKeysNotRestoredError(prev, now), { cause: failure });
+    }
+    if (!committed)
+        throw failure;
+    return rebuild;
+}
+/**
+ * Apply every pending migration of each lineage, in order, with the journal
+ * `migrateSync` would leave, one bracket per file.
+ *
+ * @param nativeDb - The store handle.
+ * @param db - The drizzle wrapper of `nativeDb` (for drizzle's journal upgrade).
+ * @param lineages - The lineages sharing the journal, in apply order.
+ * @param hooks - Optional D4 hooks.
+ */
+export function runBracketedMigrations(nativeDb, 
+// biome-ignore lint/suspicious/noExplicitAny: drizzle's session type is generic over the schema
+db, lineages, hooks = {}) {
+    const applied = [];
+    const rebuilds = [];
+    let hooked = false;
+    for (const lineage of lineages) {
+        const name = basename(lineage.folder.replace(/[\\/]+$/, ''));
+        // @sync-invariant none:local-only refuses a retired migration lineage on this store; local schema pass
+        if (LEGACY_LINEAGES.has(name))
+            throw new LegacyLineageRefusedError(name);
+    }
+    for (const lineage of lineages) {
+        const raw = readMigrationFiles({ migrationsFolder: lineage.folder });
+        // T12687: a worktree build never applies its migrations to a foreign store.
+        assertNoPendingMigrationsForWorktreeBuild(nativeDb, raw);
+        const migrations = sanitizeMigrationStatements(raw);
+        let reconciledDuplicate = false;
+        let reconciledExists = false;
+        leadingBracket(nativeDb, db, lineage, migrations);
+        for (;;) {
+            const pending = getMigrationsToRun({
+                localMigrations: migrations,
+                dbMigrations: journalRows(nativeDb),
+            });
+            if (pending.length === 0)
+                break;
+            if (!hooked) {
+                hooks.beforeMigrations?.(nativeDb);
+                hooked = true;
+            }
+            const next = pending[0];
+            try {
+                const rebuild = withBusyRetry(() => migrationBracket(nativeDb, next, hooks));
+                applied.push(next.name ?? '');
+                if (rebuild)
+                    rebuilds.push(next.name ?? '');
+                hooks.afterMigration?.(nativeDb, { name: next.name ?? '', hash: next.hash });
+            }
+            catch (err) {
+                const dup = isDuplicateColumnError(err) && !reconciledDuplicate;
+                const exists = isTableAlreadyExistsError(err) && !reconciledExists;
+                if (lineage.reconcile && (dup || exists)) {
+                    if (dup)
+                        reconciledDuplicate = true;
+                    if (exists)
+                        reconciledExists = true;
+                    getLogger(lineage.reconcile.logSubsystem).warn({ migration: next.name, message: err.message }, 'Migration hit an already-applied DDL target; reconciling the journal and retrying');
+                    leadingBracket(nativeDb, db, lineage, migrations);
+                    continue;
+                }
+                throw err;
+            }
+        }
+    }
+    return { applied, rebuilds };
+}
+/**
+ * Same as {@link runBracketedMigrations} for one lineage, in the shape the
+ * callers of `reconcileJournal` + `migrateWithRetry` use today.
+ */
+export function migrateBracketed(
+// biome-ignore lint/suspicious/noExplicitAny: drizzle's session type is generic over the schema
+db, nativeDb, migrationsFolder, existenceTable, logSubsystem, siblings = [], hooks = {}) {
+    return runBracketedMigrations(nativeDb, db, [{ folder: migrationsFolder, reconcile: { existenceTable, logSubsystem, siblings } }], hooks);
+}
+//# sourceMappingURL=migration-runner.js.map

package/dist/store/migration-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-runner.js","sourceRoot":"","sources":["../../src/store/migration-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAGrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,yCAAyC,EAAE,MAAM,2BAA2B,CAAC;AAEtF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,sBAAsB,GAAG,YAAY,CAAC;AAEnD,iDAAiD;AACjD,MAAM,CAAC,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AAEvD,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAyB/B;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IAC1D,eAAe;IACf,eAAe;IACf,eAAe;IACf,iBAAiB;IACjB,wBAAwB;IACxB,gBAAgB;IAChB,mBAAmB;IACnB,oBAAoB;CACrB,CAAC,CAAC;AAEH,iDAAiD;AACjD,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAG7B;IAFZ,IAAI,GAAG,mCAAmC,CAAC;IAEpD,YAAqB,OAAe;QAClC,KAAK,CACH,uGAAuG,OAAO,EAAE,CACjH,CAAC;QAHiB,YAAO,GAAP,OAAO,CAAQ;QAIlC,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAUD,8EAA8E;AAC9E,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAItC;IACA;IAJF,IAAI,GAAG,0BAA0B,CAAC;IAE3C,YACW,SAAiB,EACjB,UAA6B;QAEtC,KAAK,CACH,aAAa,SAAS,gBAAgB,UAAU,CAAC,MAAM,iCAAiC;YACtF,uBAAuB,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7D,CAAC;QANO,cAAS,GAAT,SAAS,CAAQ;QACjB,eAAU,GAAV,UAAU,CAAmB;QAMtC,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAC3C,IAAI,GAAG,gBAAgB,CAAC;IAEjC,YAAY,QAAgB,EAAE,MAAc;QAC1C,KAAK,CAAC,0BAA0B,MAAM,wCAAwC,QAAQ,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAA,sBAAsB,CAAC;AAE/C,yDAAyD;AACzD,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,UAA6B;IACzD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CACxB,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,+CAA+C,KAAK,EAAE,EAAE,IAAI,CAAC,CACnF,EAAE,CAAC;YACF,IAAK,CAAC,CAAC,CAAC,CAAY,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CACxB,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,uCAAuC,KAAK,EAAE,EAAE,IAAI,CAAC,CAC3E,EAAE,CAAC;YACF,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CACxB,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,qBAAqB,KAAK,oBAAoB,KAAK,EAAE,EAAE,IAAI,CAAC,CAClF,EAAE,CAAC;YACF,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC;YAC/B,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,UAA6B;IACzD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,4EAA4E;IAC5E,8CAA8C;IAC9C,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,MAAM,CAAC,GAAG,CAAA,uBAAuB,KAAK,oBAAoB,KAAK,WAAW,EAC1E,GAAG,CACJ,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAW,CAAC;QAC5B,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAW,CAAC;QAC1B,MAAM,QAAQ,GAAG,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QACjF,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,SAAS,CAAC,UAA6B;IACrD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CACxB,IAAI,MAAM,CACR,MAAM,CAAC,GAAG,CAAA,6FAA6F,KAAK,EAAE,EAC9G,IAAI,CACL,CACF,EAAE,CAAC;YACF,GAAG,CAAC,GAAG,CAAE,CAAC,CAAC,CAAC,CAAY,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,EAAgB;IAClC,OACE,EAAE;SACC,OAAO,CACN,qGAAqG,CACtG;SACA,GAAG,EACP,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAUD,SAAS,WAAW,CAAC,EAAgB,EAAE,KAAa;IAClD,OAAO,EAAE,CAAC,OAAO,CAAC,iCAAiC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAwB,CAAC;AAC5F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,EAAgB,EAAE,MAAyB;IACzE,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,IAAI,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,QAAgB;IAChC,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAClD,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5C,OAAO,SAAS,CAAC;AACnB,CAAC;AAQD;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,EAAgB,EAChB,MAAyB;IAEzB,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,kCAAkC,KAAK,IAAI,CAAC,CAAC,GAAG,EAKtE,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,2BAA2B,KAAK,IAAI,CAAC,CAAC,GAAG,EAA0B,CAAC;QAC5F,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QAClD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACnC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;QACtC,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,KAAa,EAAE,EAAE;YACxC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3B,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC;YAClC,OAAO,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;QACxE,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,cAAc,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAChG,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YAChF,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAC9B,cAAc,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAC9E,IAAI,UAA2C,CAAC;YAChD,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC9C,UAAU,GAAG,EAAE;qBACZ,OAAO,CACN,UAAU,MAAM,CAAC,EAAE,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC,oBAAoB,KAAK,mBAAmB,CACpF;qBACA,GAAG,CAAC,CAAC,CAAC,KAAK,CAAoC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,sEAAsE;gBACtE,MAAM,QAAQ,GACZ,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,EACxD;qBACE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;qBACvB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;qBAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtB,MAAM,KAAK,GAAG,MAAM;qBACjB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,GAAG,CAAC;qBACrE,IAAI,CAAC,OAAO,CAAC,CAAC;gBACjB,UAAU,GAAG,EAAE;qBACZ,OAAO,CACN,UAAU,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,oBAAoB,KAAK,MAAM;oBACxE,SAAS,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG;oBACxE,uCAAuC,CAAC,CAAC,MAAM,aAAa,KAAK,GAAG,CACvE;qBACA,GAAG,EAAqC,CAAC;gBAC5C,uEAAuE;gBACvE,gEAAgE;gBAChE,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;oBAAE,UAAU,GAAG,EAAE,CAAC;gBAC7C,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YACD,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;gBAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1D,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAA2B,EAC3B,OAAoC,EACpC,MAAkC;IAElC,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACtC,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE;QACvB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzB,OAAO,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAqC,CAAC;QACtF,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAChE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,MAA2B,EAAE,KAA0B;IACnF,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,OAAO,CAAC,EAAU;IACzB,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,sEAAsE;AACtE,SAAS,aAAa,CAAI,EAAW;IACnC,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,OAAO,EAAE,EAAE,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,OAAO,IAAI,gBAAgB;gBAAE,MAAM,GAAG,CAAC;YACjE,OAAO,CACL,IAAI,CAAC,GAAG,CACN,kBAAkB,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,EACnE,iBAAiB,CAClB,CACF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,EAAgB;IACvC,OAAO,MAAM,CAAE,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAA+B,CAAC,YAAY,CAAC,CAAC;AACpG,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CACrB,QAAsB;AACtB,gGAAgG;AAChG,EAA2B,EAC3B,OAAyB,EACzB,UAA2B;IAE3B,aAAa,CAAC,GAAG,EAAE;QACjB,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,gBAAgB,CACd,QAAQ,EACR,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,SAAS,CAAC,cAAc,EAChC,OAAO,CAAC,SAAS,CAAC,YAAY,EAC9B,OAAO,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CACjC,CAAC;YACJ,CAAC;YACD,sEAAsE;YACtE,MAAM,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7B,MAAM,SAAS,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE;gBACnC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ;oBACxB,IAAI,IAAI,KAAK,aAAa;wBAAE,OAAO,CAAC,EAA4B,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;oBAClF,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC7C,CAAC;aACF,CAAC,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,mBAAmB,CAAC,gBAAgB,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YAC/E,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,GAAG,CAAA;gCACS,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC;;;;;;KAM3D,CAAC,CAAC;YACD,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,aAAa;gBAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACtD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAUD,SAAS,WAAW,CAAC,QAAsB;IACzC,OAAO,QAAQ;SACZ,OAAO,CAAC,gDAAgD,gBAAgB,GAAG,CAAC;SAC5E,GAAG,EAA6B,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CACvB,QAAsB,EACtB,SAAwB,EACxB,KAA4B;IAE5B,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC;IACjC,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,OAAgB,CAAC;IACrB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,IAAI,OAAO;YAAE,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxD,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjC,MAAM,WAAW,GAAG,CAAC,GAAG,OAAO,EAAE,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,OAAO;YACpB,CAAC,CAAC,oBAAoB,CAAC,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YACxE,CAAC,CAAC,IAAI,GAAG,EAAkB,CAAC;QAC9B,KAAK,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,UAAU;YAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;QAC5D,QAAQ;aACL,OAAO,CACN,qBAAqB,gBAAgB,mEAAmE,CACzG;aACA,GAAG,CACF,SAAS,CAAC,IAAI,EACd,SAAS,CAAC,YAAY,EACtB,SAAS,CAAC,IAAI,IAAI,IAAI,EACtB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CACzB,CAAC;QACJ,IAAI,OAAO,EAAE,CAAC;YACZ,sEAAsE;YACtE,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;YACrF,wFAAwF;YACxF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACxF,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5C,gIAAgI;YAChI,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,wBAAwB,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QACxF,CAAC;QACD,KAAK,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxB,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,GAAG,GAAG,CAAC;IAChB,CAAC;IACD,0EAA0E;IAC1E,IAAI,QAAQ,CAAC,aAAa;QAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtD,QAAQ,CAAC,IAAI,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,GAAG,KAAK,IAAI,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC3C,yGAAyG;QACzG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,2BAA2B,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,SAAS;QAAE,MAAM,OAAO,CAAC;IAC9B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAsB;AACtB,gGAAgG;AAChG,EAA2B,EAC3B,QAAqC,EACrC,QAA+B,EAAE;IAEjC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7D,uGAAuG;QACvG,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACrE,4EAA4E;QAC5E,yCAAyC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;QACpD,IAAI,mBAAmB,GAAG,KAAK,CAAC;QAChC,IAAI,gBAAgB,GAAG,KAAK,CAAC;QAC7B,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAClD,SAAS,CAAC;YACR,MAAM,OAAO,GAAG,kBAAkB,CAAC;gBACjC,eAAe,EAAE,UAAU;gBAC3B,YAAY,EAAE,WAAW,CAAC,QAAQ,CAAC;aACpC,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM;YAChC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,KAAK,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,CAAC;gBACnC,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAkB,CAAC;YACzC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC7E,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBAC9B,IAAI,OAAO;oBAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBAC5C,KAAK,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC;gBAChE,MAAM,MAAM,GAAG,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBACnE,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC;oBACzC,IAAI,GAAG;wBAAE,mBAAmB,GAAG,IAAI,CAAC;oBACpC,IAAI,MAAM;wBAAE,gBAAgB,GAAG,IAAI,CAAC;oBACpC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,IAAI,CAC5C,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAG,GAAa,CAAC,OAAO,EAAE,EACzD,mFAAmF,CACpF,CAAC;oBACF,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;oBAClD,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB;AAC9B,gGAAgG;AAChG,EAA2B,EAC3B,QAAsB,EACtB,gBAAwB,EACxB,cAAsB,EACtB,YAAoB,EACpB,WAA8B,EAAE,EAChC,QAA+B,EAAE;IAEjC,OAAO,sBAAsB,CAC3B,QAAQ,EACR,EAAE,EACF,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,CAAC,EACrF,KAAK,CACN,CAAC;AACJ,CAAC"}

package/dist/store/portable-bundle-import.d.ts

@@ -22,7 +22,7 @@
  * @epic T12317
  * @module store/portable-bundle-import
  */
-import type { PortableImportResult, PortableImportSectionResult } from '@cleocode/contracts';
+import type { PortableBundleManifest, PortableImportResult, PortableImportSectionResult } from '@cleocode/contracts';
 /** One `--map <old>=<new>` prefix rewrite. */
 export interface PathMapping {
     /** Old absolute prefix. */
@@ -67,6 +67,20 @@ export interface ImportPortableBundleInput {
      * projectId and new root; returns the registry outcome.
      */
     registerProject?: (projectId: string | null, newRoot: string) => Promise<NonNullable<PortableImportSectionResult['registry']>>;
+    /**
+     * Called after the staged bundle is extracted and its integrity verified,
+     * before anything is placed (T12336). A throw aborts the import with
+     * nothing activated: the cloud vault checks the snapshot's per-table counts
+     * and hashes here.
+     */
+    onStaged?: (extractDir: string, manifest: PortableBundleManifest) => void | Promise<void>;
+    /**
+     * Plain files this machine keeps, by path in their section (T13005): `keep`
+     * leaves the destination's copy where it has one (the bundle's is placed
+     * only where it has none); `skip` never places the bundle's copy. Every
+     * other file is placed. The cloud vault keeps machine-local files this way.
+     */
+    machineLocalFile?: (relPath: string) => 'keep' | 'skip' | null;
 }
 /**
  * Parse `--map` values (`<old>=<new>`).

package/dist/store/portable-bundle-import.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"portable-bundle-import.d.ts","sourceRoot":"","sources":["../../src/store/portable-bundle-import.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAMH,OAAO,KAAK,EAIV,oBAAoB,EACpB,2BAA2B,EAK5B,MAAM,qBAAqB,CAAC;AA2B7B,8CAA8C;AAC9C,MAAM,WAAW,WAAW;IAC1B,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,2BAA2B;IAC3B,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,8CAA8C;AAC9C,MAAM,WAAW,yBAAyB;IACxC,mBAAmB;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,wCAAwC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,IAAI,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;IAC9B,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,iGAAiG;IACjG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAChB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,OAAO,EAAE,MAAM,KACZ,OAAO,CAAC,WAAW,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;CACpE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,WAAW,EAAE,CAW1E;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,WAAW,EAAE,GAAG,MAAM,CAQxF;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,GAAG,SAAS,CAAC,CAqC7F;AAgVD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,oBAAoB,CAAC,CA0M/B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,WAAW,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC,CAAC,CAkB/D"}
+{"version":3,"file":"portable-bundle-import.d.ts","sourceRoot":"","sources":["../../src/store/portable-bundle-import.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAMH,OAAO,KAAK,EAGV,sBAAsB,EACtB,oBAAoB,EACpB,2BAA2B,EAK5B,MAAM,qBAAqB,CAAC;AA4B7B,8CAA8C;AAC9C,MAAM,WAAW,WAAW;IAC1B,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,2BAA2B;IAC3B,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,8CAA8C;AAC9C,MAAM,WAAW,yBAAyB;IACxC,mBAAmB;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,wCAAwC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,IAAI,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;IAC9B,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,iGAAiG;IACjG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAChB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,OAAO,EAAE,MAAM,KACZ,OAAO,CAAC,WAAW,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACnE;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,sBAAsB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1F;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CAChE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,WAAW,EAAE,CAW1E;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,WAAW,EAAE,GAAG,MAAM,CAQxF;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,GAAG,SAAS,CAAC,CAqC7F;AA8VD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,oBAAoB,CAAC,CAkN/B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,WAAW,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC,CAAC,CAkB/D"}

package/dist/store/portable-bundle-import.js

@@ -33,6 +33,7 @@ import { reentryFor, unsealCredentials } from './credential-transfer.js';
 import { allSections, computeManifestHash, PortableBundleError } from './portable-bundle.js';
 import { isUnderRoot, relocateDatabase, relocatePath, relocateProjectFiles, } from './portable-bundle-relocate.js';
 import { countRows, integrityCheck, KEY_COUNT_TABLES, sha256File } from './portable-bundle-scan.js';
+import { ensureTriggerSuspendTableAtPath } from './sync/trigger-suspend-at-path.js';
 import { installSchemaWriteGuard } from './worktree-build-guard.js';
 import { assertOwnerStoreRewriteConfirmed } from './worktree-isolation-guard.js';
 const _require = createRequire(import.meta.url);
@@ -251,11 +252,17 @@ function relocateRegistryRows(stagedGlobalDb, moves) {
     }
     return outcomes;
 }
-function placeSection(stagingDir, plan) {
+function placeSection(stagingDir, plan, machineLocalFile) {
     fs.mkdirSync(plan.destDir, { recursive: true });
+    const kept = [];
     for (const f of plan.section.files) {
         const src = path.join(stagingDir, f.bundlePath);
         const dst = path.join(plan.destDir, f.relPath);
+        const local = machineLocalFile?.(f.relPath) ?? null;
+        if (local === 'skip' || (local === 'keep' && fs.existsSync(dst))) {
+            kept.push(f.relPath);
+            continue;
+        }
         fs.mkdirSync(path.dirname(dst), { recursive: true });
         fs.copyFileSync(src, dst);
         fs.chmodSync(dst, fs.statSync(src).mode & 0o777);
@@ -277,7 +284,11 @@ function placeSection(stagingDir, plan) {
         fs.rmSync(dst, { force: true });
         fs.symlinkSync(link.target, dst);
     }
-    return { files: plan.section.files.length, dbs: plan.section.databases.length };
+    return {
+        files: plan.section.files.length - kept.length,
+        dbs: plan.section.databases.length,
+        kept,
+    };
 }
 /**
  * Re-encrypt one section's sealed credentials under the TARGET home's keys.
@@ -420,6 +431,8 @@ export async function importPortableBundle(input) {
             fs.rmSync(tarPath, { force: true });
         // ----- 2. verify ------------------------------------------------------
         const manifest = await verifyStaged(extractDir);
+        if (input.onStaged)
+            await input.onStaged(extractDir, manifest);
         // ----- 3. plan + pre-check -------------------------------------------
         const plans = planPlacements(manifest, input, cleoHome, configHome);
         if (input.force !== true)
@@ -471,9 +484,16 @@ export async function importPortableBundle(input) {
         // ----- 5. place + 6. verify counts ------------------------------------
         const sections = [];
         for (const plan of plans) {
-            const written = placeSection(extractDir, plan);
+            const written = placeSection(extractDir, plan, input.machineLocalFile);
             const counts = compareCounts(plan);
-            const hashes = await compareHashes(plan, rewrittenEntries(plan, relocations, registryOutcomes));
+            const hashes = await compareHashes(plan, new Set([...rewrittenEntries(plan, relocations, registryOutcomes), ...written.kept]));
+            // T12819: a placed project store gets cleo_trigger_suspend, after the
+            // count and hash checks (they compare the bundle's own tables).
+            for (const d of plan.section.databases) {
+                if (path.basename(d.relPath) === 'cleo.db') {
+                    ensureTriggerSuspendTableAtPath(path.join(plan.destDir, d.relPath));
+                }
+            }
             const result = {
                 kind: plan.kind,
                 originalRoot: plan.section.originalRoot,