@cleocode/core 2026.10.1 → 2026.10.2

package/dist/store/sync/fk-orphans.d.ts

@@ -0,0 +1,133 @@
+/**
+ * The bounded `fk_orphans` repair (journal spec §3.5 Rule 4 (a)(3), §2.3a
+ * rule 2; C3 T12821, D3 T12826; T12986, S3c).
+ *
+ * An orphan is a sync-set row whose foreign key names a parent row this store
+ * does not have. The repair never deletes user data (C3), and it first asks
+ * whether the orphan is only LOCAL damage, by looking the missing parent up
+ * in the merged stream state (D3):
+ *
+ * - **live elsewhere**: the parent is restored locally (checkpoint bundle or
+ *   its latest ops), with capture suspended, so nothing is emitted: every
+ *   other replica already agrees. No conflict.
+ * - **tombstoned**: a `delete-with-live-children` conflict naming the
+ *   children; nothing changes.
+ * - **unknown** (never seen): re-parent to the deterministic sentinel where
+ *   the column defines one, else NULL where the column is nullable, else
+ *   report. A conflict record is written in every case. The writes are an
+ *   ordinary `repair` frame: captured, sealed, sent, so every replica
+ *   converges.
+ *
+ * Before `row_identity_synced` exists there is no merged state: the repair is
+ * report-only and writes nothing (D3(d)).
+ *
+ * The merged-state lookup, the restore and the conflict store belong to S4/S5
+ * and T12344, so they are injected ({@link FkOrphanRepairSeams}).
+ *
+ * The sentinel (D3(a)(b)): the parent-type matrix has no single task type
+ * that may parent every other (saga→epic, epic→task|subtask, task→subtask),
+ * so the sentinel is a root-level `epic` and parents orphaned tasks and
+ * subtasks; an orphaned epic, saga or other type becomes a root (NULL), which
+ * the matrix allows. Its uid is the natural uid over
+ * `(project, tasks_tasks, 'fk-orphan-sentinel')`, its display id and every
+ * column are constants, so replicas that create it independently write the
+ * same row.
+ *
+ * @module store/sync/fk-orphans
+ * @task T12986
+ * @epic T12323
+ */
+import type { DatabaseSync } from 'node:sqlite';
+import type { TableScope } from '@cleocode/contracts';
+/** A local key value (SQLite TEXT or INTEGER). */
+export type KeyValue = string | number;
+/** One orphaned row: a foreign key naming a parent this store lacks. */
+export interface FkOrphan {
+    /** The child table. */
+    readonly table: string;
+    readonly rowid: number | null;
+    /** The child's uid, when its table has one. */
+    readonly uid: string | null;
+    /** The child's foreign-key column. */
+    readonly column: string;
+    readonly parentTable: string;
+    readonly parentColumn: string;
+    /** The missing parent's local key. */
+    readonly parentKey: KeyValue;
+}
+/**
+ * Every single-column foreign-key violation in the store, read-only: the
+ * doctor's `fk_orphans` finding. Composite keys and WITHOUT ROWID children
+ * are listed with `rowid: null` where SQLite gives none.
+ */
+export declare function findFkOrphans(db: DatabaseSync): FkOrphan[];
+/** Display id of the tasks sentinel (matches `T\d{3,}`; allocation never reaches 0). */
+export declare const FK_ORPHAN_SENTINEL_ID = "T000";
+/** The tasks sentinel's uid: the natural uid over (project, tasks_tasks, 'fk-orphan-sentinel'). */
+export declare const FK_ORPHAN_SENTINEL_UID: string;
+/** The missing parent in the merged stream state. */
+export type ParentState = {
+    readonly state: 'live';
+    readonly uid: string;
+} | {
+    readonly state: 'tombstoned';
+    readonly uid: string;
+} | {
+    readonly state: 'unknown';
+};
+/** A conflict record for the owner (T12344's store backs it). */
+export interface FkOrphanConflict {
+    readonly kind: 'fk-orphan' | 'delete-with-live-children';
+    readonly parent: {
+        readonly table: string;
+        readonly column: string;
+        readonly key: KeyValue;
+        readonly uid: string | null;
+    };
+    readonly children: ReadonlyArray<{
+        readonly table: string;
+        readonly column: string;
+        readonly uid: string | null;
+    }>;
+    /** What the repair did: re-parented to the sentinel, NULLed, reported, or nothing. */
+    readonly resolution: 'sentinel' | 'null' | 'report' | 'none';
+}
+/** The stream-side services the repair needs (S4/S5, T12344). */
+export interface FkOrphanRepairSeams {
+    /** The parent in the merged state: row meta, tombstones, folds, latest verified checkpoint. */
+    readonly parentState: (table: string, column: string, key: KeyValue) => ParentState;
+    /**
+     * Restore a parent that is live elsewhere, from the checkpoint bundle or a
+     * pull of its latest ops. Called inside a transaction with capture
+     * suspended, so the restore emits nothing.
+     */
+    readonly restoreParent: (db: DatabaseSync, table: string, uid: string) => void;
+    /**
+     * Persist a conflict record. For a repair that writes (sentinel, NULL),
+     * it is called inside the repair's transaction, before the commit: a throw
+     * rolls the repair back, so no repair lands without its record (D3,
+     * T13044). It must not open its own transaction.
+     */
+    readonly recordConflict: (conflict: FkOrphanConflict) => void;
+}
+/** What happened to one orphan. */
+export type FkOrphanOutcome = 'restored' | 'conflict' | 'sentinel' | 'nulled' | 'reported';
+/** What {@link repairFkOrphans} did. */
+export interface FkOrphanRepairReport {
+    /** `report-only` before `row_identity_synced` exists (nothing written). */
+    readonly mode: 'report-only' | 'repair';
+    readonly orphans: ReadonlyArray<FkOrphan & {
+        readonly outcome: FkOrphanOutcome;
+    }>;
+    readonly sentinelCreated: boolean;
+}
+/**
+ * Repair up to `budget` sync-set orphans (C3, D3). Never deletes a row.
+ *
+ * Orphans of tables outside the sync set, or whose parent is outside it, are
+ * reported only: no stream state describes them.
+ */
+export declare function repairFkOrphans(db: DatabaseSync, scope: TableScope, seams: FkOrphanRepairSeams, opts?: {
+    readonly budget?: number;
+}): FkOrphanRepairReport;
+//# sourceMappingURL=fk-orphans.d.ts.map

package/dist/store/sync/fk-orphans.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fk-orphans.d.ts","sourceRoot":"","sources":["../../../src/store/sync/fk-orphans.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAatD,kDAAkD;AAClD,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;AAEvC,wEAAwE;AACxE,MAAM,WAAW,QAAQ;IACvB,uBAAuB;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,+CAA+C;IAC/C,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,sCAAsC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,sCAAsC;IACtC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,YAAY,GAAG,QAAQ,EAAE,CA6C1D;AAoCD,wFAAwF;AACxF,eAAO,MAAM,qBAAqB,SAAS,CAAC;AAE5C,mGAAmG;AACnG,eAAO,MAAM,sBAAsB,QAEjC,CAAC;AAuDH,qDAAqD;AACrD,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAC;AAElC,iEAAiE;AACjE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,2BAA2B,CAAC;IACzD,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;QACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;IACF,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;QAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC,CAAC;IACH,sFAAsF;IACtF,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC;CAC9D;AAED,iEAAiE;AACjE,MAAM,WAAW,mBAAmB;IAClC,+FAA+F;IAC/F,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,KAAK,WAAW,CAAC;IACpF;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/E;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,IAAI,CAAC;CAC/D;AAED,mCAAmC;AACnC,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,GAAG,UAAU,CAAC;AAE3F,wCAAwC;AACxC,MAAM,WAAW,oBAAoB;IACnC,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,QAAQ,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,QAAQ,GAAG;QAAE,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IAClF,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;CACnC;AAmBD;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,mBAAmB,EAC1B,IAAI,GAAE;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GACtC,oBAAoB,CAmHtB"}

package/dist/store/sync/fk-orphans.js

@@ -0,0 +1,265 @@
+/**
+ * The bounded `fk_orphans` repair (journal spec §3.5 Rule 4 (a)(3), §2.3a
+ * rule 2; C3 T12821, D3 T12826; T12986, S3c).
+ *
+ * An orphan is a sync-set row whose foreign key names a parent row this store
+ * does not have. The repair never deletes user data (C3), and it first asks
+ * whether the orphan is only LOCAL damage, by looking the missing parent up
+ * in the merged stream state (D3):
+ *
+ * - **live elsewhere**: the parent is restored locally (checkpoint bundle or
+ *   its latest ops), with capture suspended, so nothing is emitted: every
+ *   other replica already agrees. No conflict.
+ * - **tombstoned**: a `delete-with-live-children` conflict naming the
+ *   children; nothing changes.
+ * - **unknown** (never seen): re-parent to the deterministic sentinel where
+ *   the column defines one, else NULL where the column is nullable, else
+ *   report. A conflict record is written in every case. The writes are an
+ *   ordinary `repair` frame: captured, sealed, sent, so every replica
+ *   converges.
+ *
+ * Before `row_identity_synced` exists there is no merged state: the repair is
+ * report-only and writes nothing (D3(d)).
+ *
+ * The merged-state lookup, the restore and the conflict store belong to S4/S5
+ * and T12344, so they are injected ({@link FkOrphanRepairSeams}).
+ *
+ * The sentinel (D3(a)(b)): the parent-type matrix has no single task type
+ * that may parent every other (saga→epic, epic→task|subtask, task→subtask),
+ * so the sentinel is a root-level `epic` and parents orphaned tasks and
+ * subtasks; an orphaned epic, saga or other type becomes a root (NULL), which
+ * the matrix allows. Its uid is the natural uid over
+ * `(project, tasks_tasks, 'fk-orphan-sentinel')`, its display id and every
+ * column are constants, so replicas that create it independently write the
+ * same row.
+ *
+ * @module store/sync/fk-orphans
+ * @task T12986
+ * @epic T12323
+ */
+import { naturalRowUid, ROW_IDENTITY_META_TABLE, ROW_IDENTITY_SYNCED_KEY, } from '../row-identity.js';
+import { finishCaptureFrame, openCaptureFrame, syncSetTables } from './capture.js';
+import { withImmediateTransaction } from './clock-store.js';
+import { hasTable } from './schema.js';
+import { withTriggersSuspended } from './trigger-classes.js';
+const q = (id) => `"${id.replaceAll('"', '""')}"`;
+/**
+ * Every single-column foreign-key violation in the store, read-only: the
+ * doctor's `fk_orphans` finding. Composite keys and WITHOUT ROWID children
+ * are listed with `rowid: null` where SQLite gives none.
+ */
+export function findFkOrphans(db) {
+    const rows = db.prepare('PRAGMA main.foreign_key_check').all();
+    const out = [];
+    const fks = new Map();
+    for (const r of rows) {
+        let list = fks.get(r.table);
+        if (!list) {
+            list = db.prepare(`PRAGMA main.foreign_key_list(${q(r.table)})`).all();
+            fks.set(r.table, list);
+        }
+        const cols = list.filter((f) => f.id === r.fkid);
+        if (cols.length !== 1 || r.rowid === null)
+            continue; // composite or no rowid: report via doctor only
+        const fk = cols[0];
+        const parentColumn = fk.to ?? primaryKey(db, fk.table);
+        if (parentColumn === null)
+            continue;
+        const child = db
+            .prepare(`SELECT ${q(fk.from)} AS k${hasColumn(db, r.table, 'uid') ? ', uid' : ''} FROM ${q(r.table)} WHERE rowid = ?`)
+            .get(r.rowid);
+        if (!child || child.k === null)
+            continue;
+        out.push({
+            table: r.table,
+            rowid: r.rowid,
+            uid: child.uid ?? null,
+            column: fk.from,
+            parentTable: fk.table,
+            parentColumn,
+            parentKey: child.k,
+        });
+    }
+    return out;
+}
+function primaryKey(db, table) {
+    const pk = db.prepare(`PRAGMA main.table_info(${q(table)})`).all().filter((c) => c.pk > 0);
+    return pk.length === 1 ? pk[0].name : null;
+}
+function hasColumn(db, table, column) {
+    return db.prepare(`PRAGMA main.table_info(${q(table)})`).all().some((c) => c.name === column);
+}
+function nullable(db, table, column) {
+    const c = db.prepare(`PRAGMA main.table_info(${q(table)})`).all().find((x) => x.name === column);
+    return c !== undefined && c.notnull === 0;
+}
+/** Display id of the tasks sentinel (matches `T\d{3,}`; allocation never reaches 0). */
+export const FK_ORPHAN_SENTINEL_ID = 'T000';
+/** The tasks sentinel's uid: the natural uid over (project, tasks_tasks, 'fk-orphan-sentinel'). */
+export const FK_ORPHAN_SENTINEL_UID = naturalRowUid('project', 'tasks_tasks', [
+    'fk-orphan-sentinel',
+]);
+const SENTINEL = {
+    project: {
+        table: 'tasks_tasks',
+        children: {
+            // The matrix lets an epic parent tasks and subtasks only.
+            'tasks_tasks.parent_id': (db, rowid) => {
+                const row = db.prepare('SELECT type FROM tasks_tasks WHERE rowid = ?').get(rowid);
+                return row?.type === 'task' || row?.type === 'subtask';
+            },
+        },
+    },
+    global: null,
+};
+/** Constant column values of the sentinel row: every replica writes the same row. */
+const SENTINEL_ROW = {
+    id: FK_ORPHAN_SENTINEL_ID,
+    title: 'Orphaned work (fk_orphans repair)',
+    description: 'Created by the fk_orphans repair: tasks and subtasks whose parent was never seen on any replica were moved here. Re-parent them and delete this epic when it is empty.',
+    type: 'epic',
+    status: 'pending',
+    priority: 'low',
+    uid: FK_ORPHAN_SENTINEL_UID,
+    birth_fp: FK_ORPHAN_SENTINEL_UID,
+    created_at: '1970-01-01T00:00:00.000Z',
+    updated_at: '1970-01-01T00:00:00.000Z',
+};
+/**
+ * Create the sentinel when absent, inside the caller's transaction and
+ * capture frame (an ordinary op). Returns false when a different row holds
+ * its display id, so the caller falls back to NULL or report.
+ */
+function ensureSentinel(db, policy) {
+    const t = policy.table;
+    const held = db.prepare(`SELECT uid FROM ${q(t)} WHERE id = ?`).get(FK_ORPHAN_SENTINEL_ID);
+    if (held)
+        return held.uid === FK_ORPHAN_SENTINEL_UID;
+    const cols = Object.keys(SENTINEL_ROW).filter((c) => hasColumn(db, t, c));
+    db.prepare(`INSERT INTO ${q(t)} (${cols.map(q).join(', ')}) VALUES (${cols.map(() => '?').join(', ')})`).run(...cols.map((c) => SENTINEL_ROW[c]));
+    return true;
+}
+function synced(db) {
+    if (!hasTable(db, ROW_IDENTITY_META_TABLE))
+        return false;
+    return (db
+        .prepare(`SELECT 1 FROM ${q(ROW_IDENTITY_META_TABLE)} WHERE key = ?`)
+        .get(ROW_IDENTITY_SYNCED_KEY) !== undefined);
+}
+function parentExists(db, o) {
+    return (db
+        .prepare(`SELECT 1 FROM ${q(o.parentTable)} WHERE ${q(o.parentColumn)} = ?`)
+        .get(o.parentKey) !== undefined);
+}
+/**
+ * Repair up to `budget` sync-set orphans (C3, D3). Never deletes a row.
+ *
+ * Orphans of tables outside the sync set, or whose parent is outside it, are
+ * reported only: no stream state describes them.
+ */
+export function repairFkOrphans(db, scope, seams, opts = {}) {
+    const budget = Math.max(1, opts.budget ?? 100);
+    const all = findFkOrphans(db).slice(0, budget);
+    if (!synced(db)) {
+        return {
+            mode: 'report-only',
+            orphans: all.map((o) => ({ ...o, outcome: 'reported' })),
+            sentinelCreated: false,
+        };
+    }
+    const syncSet = new Set(syncSetTables(scope));
+    const policy = SENTINEL[scope];
+    const out = [];
+    let sentinelCreated = false;
+    // One lookup per missing parent.
+    const groups = new Map();
+    for (const o of all) {
+        if (!syncSet.has(o.table) || !syncSet.has(o.parentTable)) {
+            out.push({ ...o, outcome: 'reported' });
+            continue;
+        }
+        const k = JSON.stringify([o.parentTable, o.parentColumn, o.parentKey]);
+        const g = groups.get(k);
+        if (g)
+            g.push(o);
+        else
+            groups.set(k, [o]);
+    }
+    for (const children of groups.values()) {
+        const first = children[0];
+        const parent = seams.parentState(first.parentTable, first.parentColumn, first.parentKey);
+        const conflictOf = (kind, resolution, kids) => ({
+            kind,
+            parent: {
+                table: first.parentTable,
+                column: first.parentColumn,
+                key: first.parentKey,
+                uid: parent.state === 'unknown' ? null : parent.uid,
+            },
+            children: kids.map((c) => ({ table: c.table, column: c.column, uid: c.uid })),
+            resolution,
+        });
+        if (parent.state === 'live') {
+            // Local damage: every other replica has the parent. Restore, emit nothing.
+            withImmediateTransaction(db, () => withTriggersSuspended(db, ['capture'], 'forward', () => seams.restoreParent(db, first.parentTable, parent.uid)));
+            if (parentExists(db, first)) {
+                for (const c of children)
+                    out.push({ ...c, outcome: 'restored' });
+            }
+            else {
+                seams.recordConflict(conflictOf('fk-orphan', 'report', children));
+                for (const c of children)
+                    out.push({ ...c, outcome: 'reported' });
+            }
+            continue;
+        }
+        if (parent.state === 'tombstoned') {
+            seams.recordConflict(conflictOf('delete-with-live-children', 'none', children));
+            for (const c of children)
+                out.push({ ...c, outcome: 'conflict' });
+            continue;
+        }
+        // Never seen anywhere: sentinel, else NULL, else report; always a conflict.
+        const done = [];
+        withImmediateTransaction(db, () => {
+            const frame = openCaptureFrame(db, 'repair', 'fk_orphans');
+            for (const c of children) {
+                const may = policy?.children[`${c.table}.${c.column}`];
+                if (policy &&
+                    c.parentTable === policy.table &&
+                    c.rowid !== null &&
+                    may?.(db, c.rowid) === true) {
+                    const existed = db
+                        .prepare(`SELECT 1 FROM ${q(policy.table)} WHERE id = ?`)
+                        .get(FK_ORPHAN_SENTINEL_ID) !== undefined;
+                    if (ensureSentinel(db, policy)) {
+                        if (!existed)
+                            sentinelCreated = true;
+                        db.prepare(`UPDATE ${q(c.table)} SET ${q(c.column)} = ? WHERE rowid = ?`).run(FK_ORPHAN_SENTINEL_ID, c.rowid);
+                        done.push({ ...c, outcome: 'sentinel' });
+                        continue;
+                    }
+                }
+                if (c.rowid !== null && nullable(db, c.table, c.column)) {
+                    db.prepare(`UPDATE ${q(c.table)} SET ${q(c.column)} = NULL WHERE rowid = ?`).run(c.rowid);
+                    done.push({ ...c, outcome: 'nulled' });
+                    continue;
+                }
+                done.push({ ...c, outcome: 'reported' });
+            }
+            // D3: every case writes its conflict record, in the same transaction as
+            // the repair, so a failed record (or a crash) never leaves a repair
+            // without one (T13044).
+            for (const resolution of ['sentinel', 'null', 'report']) {
+                const outcome = resolution === 'null' ? 'nulled' : resolution === 'report' ? 'reported' : 'sentinel';
+                const kids = done.filter((d) => d.outcome === outcome);
+                if (kids.length > 0)
+                    seams.recordConflict(conflictOf('fk-orphan', resolution, kids));
+            }
+            finishCaptureFrame(db, frame);
+        });
+        out.push(...done);
+    }
+    return { mode: 'repair', orphans: out, sentinelCreated };
+}
+//# sourceMappingURL=fk-orphans.js.map

package/dist/store/sync/fk-orphans.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fk-orphans.js","sourceRoot":"","sources":["../../../src/store/sync/fk-orphans.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAIH,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,CAAC,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;AAoBlE;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,EAAgB;IAC5C,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC,GAAG,EAK1D,CAAC;IACH,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,GAAG,EAGhB,CAAC;IACJ,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAKlE,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;YAAE,SAAS,CAAC,gDAAgD;QACrG,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAuD,CAAC;QACzE,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,IAAI,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,YAAY,KAAK,IAAI;YAAE,SAAS;QACpC,MAAM,KAAK,GAAG,EAAE;aACb,OAAO,CACN,UAAU,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAC9G;aACA,GAAG,CAAC,CAAC,CAAC,KAAK,CAA4D,CAAC;QAC3E,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,KAAK,IAAI;YAAE,SAAS;QACzC,GAAG,CAAC,IAAI,CAAC;YACP,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI;YACtB,MAAM,EAAE,EAAE,CAAC,IAAI;YACf,WAAW,EAAE,EAAE,CAAC,KAAK;YACrB,YAAY;YACZ,SAAS,EAAE,KAAK,CAAC,CAAC;SACnB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,EAAgB,EAAE,KAAa;IACjD,MAAM,EAAE,GACN,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EACtD,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACnE,CAAC;AAED,SAAS,SAAS,CAAC,EAAgB,EAAE,KAAa,EAAE,MAAc;IAChE,OAAQ,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAA8B,CAAC,IAAI,CAC9F,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CACzB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,EAAgB,EAAE,KAAa,EAAE,MAAc;IAC/D,MAAM,CAAC,GACL,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAItD,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC;AAC5C,CAAC;AAaD,wFAAwF;AACxF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAE5C,mGAAmG;AACnG,MAAM,CAAC,MAAM,sBAAsB,GAAG,aAAa,CAAC,SAAS,EAAE,aAAa,EAAE;IAC5E,oBAAoB;CACrB,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAwD;IACpE,OAAO,EAAE;QACP,KAAK,EAAE,aAAa;QACpB,QAAQ,EAAE;YACR,0DAA0D;YAC1D,uBAAuB,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE;gBACrC,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,KAAK,CAEnE,CAAC;gBACd,OAAO,GAAG,EAAE,IAAI,KAAK,MAAM,IAAI,GAAG,EAAE,IAAI,KAAK,SAAS,CAAC;YACzD,CAAC;SACF;KACF;IACD,MAAM,EAAE,IAAI;CACb,CAAC;AAEF,qFAAqF;AACrF,MAAM,YAAY,GAAuC;IACvD,EAAE,EAAE,qBAAqB;IACzB,KAAK,EAAE,mCAAmC;IAC1C,WAAW,EACT,wKAAwK;IAC1K,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,SAAS;IACjB,QAAQ,EAAE,KAAK;IACf,GAAG,EAAE,sBAAsB;IAC3B,QAAQ,EAAE,sBAAsB;IAChC,UAAU,EAAE,0BAA0B;IACtC,UAAU,EAAE,0BAA0B;CACvC,CAAC;AAEF;;;;GAIG;AACH,SAAS,cAAc,CAAC,EAAgB,EAAE,MAAsB;IAC9D,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;IACvB,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAE5E,CAAC;IACd,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,GAAG,KAAK,sBAAsB,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1E,EAAE,CAAC,OAAO,CACR,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC7F,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAa,CAAC,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC;AA4DD,SAAS,MAAM,CAAC,EAAgB;IAC9B,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,uBAAuB,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,OAAO,CACL,EAAE;SACC,OAAO,CAAC,iBAAiB,CAAC,CAAC,uBAAuB,CAAC,gBAAgB,CAAC;SACpE,GAAG,CAAC,uBAAuB,CAAC,KAAK,SAAS,CAC9C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,EAAgB,EAAE,CAAW;IACjD,OAAO,CACL,EAAE;SACC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;SAC3E,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,SAAS,CAClC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,EAAgB,EAChB,KAAiB,EACjB,KAA0B,EAC1B,OAAqC,EAAE;IAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QAChB,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,UAAmB,EAAE,CAAC,CAAC;YACjE,eAAe,EAAE,KAAK;SACvB,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAmD,EAAE,CAAC;IAC/D,IAAI,eAAe,GAAG,KAAK,CAAC;IAE5B,iCAAiC;IACjC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;YACxC,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC;YAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;YACZ,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAa,CAAC;QACtC,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACzF,MAAM,UAAU,GAAG,CACjB,IAA8B,EAC9B,UAA0C,EAC1C,IAAyB,EACP,EAAE,CAAC,CAAC;YACtB,IAAI;YACJ,MAAM,EAAE;gBACN,KAAK,EAAE,KAAK,CAAC,WAAW;gBACxB,MAAM,EAAE,KAAK,CAAC,YAAY;gBAC1B,GAAG,EAAE,KAAK,CAAC,SAAS;gBACpB,GAAG,EAAE,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG;aACpD;YACD,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7E,UAAU;SACX,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC5B,2EAA2E;YAC3E,wBAAwB,CAAC,EAAE,EAAE,GAAG,EAAE,CAChC,qBAAqB,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CACrD,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CACvD,CACF,CAAC;YACF,IAAI,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC5B,KAAK,MAAM,CAAC,IAAI,QAAQ;oBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAClE,KAAK,MAAM,CAAC,IAAI,QAAQ;oBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;YAClC,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,2BAA2B,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;YAChF,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;YAClE,SAAS;QACX,CAAC;QAED,4EAA4E;QAC5E,MAAM,IAAI,GAAmD,EAAE,CAAC;QAChE,wBAAwB,CAAC,EAAE,EAAE,GAAG,EAAE;YAChC,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC3D,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBACvD,IACE,MAAM;oBACN,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,KAAK;oBAC9B,CAAC,CAAC,KAAK,KAAK,IAAI;oBAChB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,EAC3B,CAAC;oBACD,MAAM,OAAO,GACX,EAAE;yBACC,OAAO,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC;yBACxD,GAAG,CAAC,qBAAqB,CAAC,KAAK,SAAS,CAAC;oBAC9C,IAAI,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;wBAC/B,IAAI,CAAC,OAAO;4BAAE,eAAe,GAAG,IAAI,CAAC;wBACrC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAC3E,qBAAqB,EACrB,CAAC,CAAC,KAAK,CACR,CAAC;wBACF,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;wBACzC,SAAS;oBACX,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;oBACxD,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;oBAC1F,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;oBACvC,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;YAC3C,CAAC;YACD,wEAAwE;YACxE,oEAAoE;YACpE,wBAAwB;YACxB,KAAK,MAAM,UAAU,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAU,EAAE,CAAC;gBACjE,MAAM,OAAO,GACX,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;gBACvF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;gBACvD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;oBAAE,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;YACvF,CAAC;YACD,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC;AAC3D,CAAC"}

package/dist/store/sync/flags.d.ts

@@ -19,6 +19,12 @@ export declare const SYNC_FLAGS: readonly ["sync.capture", "sync.seal", "sync.pu
 export type SyncFlag = (typeof SYNC_FLAGS)[number];
 /** Every flag's persisted state. */
 export type SyncFlagState = Readonly<Record<SyncFlag, boolean>>;
+/**
+ * Flags whose slices are not finished: turning one on is refused unless a
+ * test opts in (`allowUnreleased`). `sync.seal` stays here until S3b–S3d land
+ * (T13032); remove a flag when its slice ships.
+ */
+export declare const UNRELEASED_FLAGS: ReadonlySet<SyncFlag>;
 /** The environment kill switch for a flag: `sync.push` → `CLEO_SYNC_PUSH`. */
 export declare function killSwitchVar(flag: SyncFlag): string;
 /**
@@ -47,5 +53,6 @@ export declare function isSyncFlagOn(db: DatabaseSync, flag: SyncFlag, env?: Nod
 export declare function setSyncFlag(db: DatabaseSync, flag: SyncFlag, on: boolean, options?: {
     now?: Date;
     schemaRoot?: string;
+    allowUnreleased?: boolean;
 }): boolean;
 //# sourceMappingURL=flags.d.ts.map

package/dist/store/sync/flags.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"flags.d.ts","sourceRoot":"","sources":["../../../src/store/sync/flags.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,2CAA2C;AAC3C,eAAO,MAAM,UAAU,iFAMb,CAAC;AAEX,wBAAwB;AACxB,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,oCAAoC;AACpC,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAMhE,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAEpD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,YAAY,GAAG,aAAa,CAU7D;AAED,yEAAyE;AACzE,wBAAgB,aAAa,CAAC,EAAE,EAAE,YAAY,GAAG,OAAO,CAEvD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE,QAAQ,EACd,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAGT;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CACzB,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE,QAAQ,EACd,EAAE,EAAE,OAAO,EACX,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GAChD,OAAO,CAWT"}
+{"version":3,"file":"flags.d.ts","sourceRoot":"","sources":["../../../src/store/sync/flags.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,2CAA2C;AAC3C,eAAO,MAAM,UAAU,iFAMb,CAAC;AAEX,wBAAwB;AACxB,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,oCAAoC;AACpC,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAMhE;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,QAAQ,CAKjD,CAAC;AAEH,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAEpD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,YAAY,GAAG,aAAa,CAU7D;AAED,yEAAyE;AACzE,wBAAgB,aAAa,CAAC,EAAE,EAAE,YAAY,GAAG,OAAO,CAEvD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE,QAAQ,EACd,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAGT;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CACzB,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE,QAAQ,EACd,EAAE,EAAE,OAAO,EACX,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAO,GAC3E,OAAO,CAqBT"}

package/dist/store/sync/flags.js

@@ -22,6 +22,17 @@ export const SYNC_FLAGS = [
     'sync.strict',
 ];
 const ALL_OFF = Object.freeze(Object.fromEntries(SYNC_FLAGS.map((f) => [f, false])));
+/**
+ * Flags whose slices are not finished: turning one on is refused unless a
+ * test opts in (`allowUnreleased`). `sync.seal` stays here until S3b–S3d land
+ * (T13032); remove a flag when its slice ships.
+ */
+export const UNRELEASED_FLAGS = new Set([
+    'sync.seal',
+    'sync.push',
+    'sync.pull',
+    'sync.strict',
+]);
 /** The environment kill switch for a flag: `sync.push` → `CLEO_SYNC_PUSH`. */
 export function killSwitchVar(flag) {
     return `CLEO_SYNC_${flag.slice('sync.'.length).toUpperCase()}`;
@@ -66,8 +77,13 @@ export function isSyncFlagOn(db, flag, env = process.env) {
  * @returns Whether the stored value changed.
  */
 export function setSyncFlag(db, flag, on, options = {}) {
+    // @sync-invariant none:local-only unknown flag name from a local caller; sync flags are per-store settings, not synced rows
     if (!SYNC_FLAGS.includes(flag))
         throw new Error(`unknown sync flag: ${flag}`);
+    if (on && UNRELEASED_FLAGS.has(flag) && options.allowUnreleased !== true) {
+        // @sync-invariant none:local-only a local operator cannot turn on an unfinished journal slice; a per-store setting, not synced rows
+        throw Object.assign(new Error(`E_SYNC_FLAG_UNRELEASED: ${flag} cannot be enabled until its slices land (T12343: S3b–S3d for sync.seal)`), { code: 'E_SYNC_FLAG_UNRELEASED' });
+    }
     if (!on && !hasTable(db, '_sync_meta'))
         return false;
     if (readSyncFlags(db)[flag] === on)

package/dist/store/sync/flags.js.map

@@ -1 +1 @@
-{"version":3,"file":"flags.js","sourceRoot":"","sources":["../../../src/store/sync/flags.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEzD,2CAA2C;AAC3C,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,cAAc;IACd,WAAW;IACX,WAAW;IACX,WAAW;IACX,aAAa;CACL,CAAC;AAQX,MAAM,OAAO,GAAkB,MAAM,CAAC,MAAM,CAC1C,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAA8B,CACnF,CAAC;AAEF,8EAA8E;AAC9E,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,OAAO,aAAa,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,EAAgB;IAC5C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC;QAAE,OAAO,OAAO,CAAC;IAChD,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN,mDAAmD,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3F;SACA,GAAG,CAAC,GAAG,UAAU,CAA4C,CAAC;IACjE,MAAM,GAAG,GAA8B,EAAE,GAAG,OAAO,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC;IACnD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAAC,EAAgB;IAC5C,OAAO,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,EAAgB,EAChB,IAAc,EACd,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACnD,OAAO,aAAa,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CACzB,EAAgB,EAChB,IAAc,EACd,EAAW,EACX,UAA+C,EAAE;IAEjD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;IAC9E,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACjD,gBAAgB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACxD,EAAE,CAAC,OAAO,CACR,mEAAmE;QACjE,yFAAyF,CAC5F,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"flags.js","sourceRoot":"","sources":["../../../src/store/sync/flags.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEzD,2CAA2C;AAC3C,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,cAAc;IACd,WAAW;IACX,WAAW;IACX,WAAW;IACX,aAAa;CACL,CAAC;AAQX,MAAM,OAAO,GAAkB,MAAM,CAAC,MAAM,CAC1C,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAA8B,CACnF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA0B,IAAI,GAAG,CAAC;IAC7D,WAAW;IACX,WAAW;IACX,WAAW;IACX,aAAa;CACd,CAAC,CAAC;AAEH,8EAA8E;AAC9E,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,OAAO,aAAa,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,EAAgB;IAC5C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC;QAAE,OAAO,OAAO,CAAC;IAChD,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN,mDAAmD,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3F;SACA,GAAG,CAAC,GAAG,UAAU,CAA4C,CAAC;IACjE,MAAM,GAAG,GAA8B,EAAE,GAAG,OAAO,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC;IACnD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAAC,EAAgB;IAC5C,OAAO,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,EAAgB,EAChB,IAAc,EACd,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACnD,OAAO,aAAa,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CACzB,EAAgB,EAChB,IAAc,EACd,EAAW,EACX,UAA0E,EAAE;IAE5E,4HAA4H;IAC5H,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;IAC9E,IAAI,EAAE,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QACzE,oIAAoI;QACpI,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CACP,2BAA2B,IAAI,0EAA0E,CAC1G,EACD,EAAE,IAAI,EAAE,wBAAwB,EAAE,CACnC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACjD,gBAAgB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACxD,EAAE,CAAC,OAAO,CACR,mEAAmE;QACjE,yFAAyF,CAC5F,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/store/sync/hlc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hlc.d.ts","sourceRoot":"","sources":["../../../src/store/sync/hlc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,qBAAqB;AACrB,MAAM,WAAW,GAAG;IAClB,kDAAkD;IAClD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iDAAiD;IACjD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,sDAAsD;AACtD,eAAO,MAAM,WAAW,SAAU,CAAC;AAEnC,yEAAyE;AACzE,eAAO,MAAM,QAAQ,gBAAoB,CAAC;AAE1C;;;GAGG;AACH,eAAO,MAAM,YAAY,QAAgB,CAAC;AAK1C,+DAA+D;AAC/D,qBAAa,QAAS,SAAQ,KAAK;gBACrB,OAAO,EAAE,MAAM;CAI5B;AAcD;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAGxC;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,GAAG,CAMvC;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,GAAG,MAAM,CAKjD;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,GAAG,CAG/C;AAQD;;;;;;;;;;;;GAYG;AACH,wBAAgB,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,CAMnD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,CASlE;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,SAAe,GAAG,OAAO,CAE3F;AAED;;GAEG;AACH,wBAAgB,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,GAAG,GAAG,CAE1C"}
+{"version":3,"file":"hlc.d.ts","sourceRoot":"","sources":["../../../src/store/sync/hlc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,qBAAqB;AACrB,MAAM,WAAW,GAAG;IAClB,kDAAkD;IAClD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iDAAiD;IACjD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,sDAAsD;AACtD,eAAO,MAAM,WAAW,SAAU,CAAC;AAEnC,yEAAyE;AACzE,eAAO,MAAM,QAAQ,gBAAoB,CAAC;AAE1C;;;GAGG;AACH,eAAO,MAAM,YAAY,QAAgB,CAAC;AAK1C,+DAA+D;AAC/D,qBAAa,QAAS,SAAQ,KAAK;gBACrB,OAAO,EAAE,MAAM;CAI5B;AAiBD;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAGxC;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,GAAG,CAOvC;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,GAAG,MAAM,CAKjD;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,GAAG,CAG/C;AAQD;;;;;;;;;;;;GAYG;AACH,wBAAgB,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,CAMnD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,CASlE;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,SAAe,GAAG,OAAO,CAE3F;AAED;;GAEG;AACH,wBAAgB,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,GAAG,GAAG,CAE1C"}

package/dist/store/sync/hlc.js

@@ -38,12 +38,15 @@ export class HlcError extends Error {
 }
 function assertParts(phys, ctr, replica) {
     if (!Number.isSafeInteger(phys) || phys < 0 || phys > MAX_PHYS) {
+        // @sync-invariant none:input-shape an HLC is a fixed-format value; a malformed one is refused wherever it arrives
         throw new HlcError(`HLC physical time out of range: ${phys}`);
     }
     if (!Number.isSafeInteger(ctr) || ctr < 0 || ctr > MAX_COUNTER) {
+        // @sync-invariant none:input-shape an HLC is a fixed-format value; a malformed one is refused wherever it arrives
         throw new HlcError(`HLC counter out of range: ${ctr}`);
     }
     if (!REPLICA_RE.test(replica)) {
+        // @sync-invariant none:input-shape an HLC is a fixed-format value; a malformed one is refused wherever it arrives
         throw new HlcError(`HLC replica id is not a lowercase UUID: ${replica}`);
     }
 }
@@ -67,6 +70,7 @@ export function encodeHlc(h) {
  */
 export function parseHlc(s) {
     const m = HLC_RE.exec(s);
+    // @sync-invariant none:input-shape an HLC is a fixed-format value; a malformed one is refused wherever it arrives
     if (!m)
         throw new HlcError(`not an encoded HLC: ${s}`);
     const h = { phys: Number(m[1]), ctr: Number(m[2]), replica: m[3] };

package/dist/store/sync/hlc.js.map

@@ -1 +1 @@
-{"version":3,"file":"hlc.js","sourceRoot":"","sources":["../../../src/store/sync/hlc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAYH,sDAAsD;AACtD,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC;AAEnC,yEAAyE;AACzE,MAAM,CAAC,MAAM,QAAQ,GAAG,iBAAiB,CAAC;AAE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1C,MAAM,MAAM,GAAG,oCAAoC,CAAC;AACpD,MAAM,UAAU,GAAG,gEAAgE,CAAC;AAEpF,+DAA+D;AAC/D,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,GAAW,EAAE,OAAe;IAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;QAC/D,MAAM,IAAI,QAAQ,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,WAAW,EAAE,CAAC;QAC/D,MAAM,IAAI,QAAQ,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,2CAA2C,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,CAAM;IAC9B,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;AAC9F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,CAAS;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;IACvD,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAW,EAAE,CAAC;IAC7E,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,CAAM,EAAE,CAAM;IACvC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO;QAAE,OAAO,CAAC,CAAC;IACtC,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3B,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,uDAAuD;AACvD,SAAS,KAAK,CAAC,IAAY,EAAE,GAAW,EAAE,OAAe;IACvD,IAAI,GAAG,GAAG,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;IAClE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,IAAI,CAAC,IAAS,EAAE,MAAc;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,OAAO,CAAC,IAAS,EAAE,MAAW,EAAE,KAAa;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,GAAW,CAAC;IAChB,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI;QAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;SACpF,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI;QAAE,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;SAC3C,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI;QAAE,GAAG,GAAG,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC;;QAC/C,GAAG,GAAG,CAAC,CAAC;IACb,OAAO,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,MAAW,EAAE,KAAa,EAAE,UAAU,GAAG,YAAY;IAChF,OAAO,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC;AACvD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,MAAM,CAAC,CAAM,EAAE,CAAM;IACnC,OAAO,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC"}
+{"version":3,"file":"hlc.js","sourceRoot":"","sources":["../../../src/store/sync/hlc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAYH,sDAAsD;AACtD,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC;AAEnC,yEAAyE;AACzE,MAAM,CAAC,MAAM,QAAQ,GAAG,iBAAiB,CAAC;AAE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1C,MAAM,MAAM,GAAG,oCAAoC,CAAC;AACpD,MAAM,UAAU,GAAG,gEAAgE,CAAC;AAEpF,+DAA+D;AAC/D,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,GAAW,EAAE,OAAe;IAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;QAC/D,kHAAkH;QAClH,MAAM,IAAI,QAAQ,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,WAAW,EAAE,CAAC;QAC/D,kHAAkH;QAClH,MAAM,IAAI,QAAQ,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,kHAAkH;QAClH,MAAM,IAAI,QAAQ,CAAC,2CAA2C,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,CAAM;IAC9B,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;AAC9F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,CAAS;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,kHAAkH;IAClH,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;IACvD,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAW,EAAE,CAAC;IAC7E,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,CAAM,EAAE,CAAM;IACvC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO;QAAE,OAAO,CAAC,CAAC;IACtC,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3B,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,uDAAuD;AACvD,SAAS,KAAK,CAAC,IAAY,EAAE,GAAW,EAAE,OAAe;IACvD,IAAI,GAAG,GAAG,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;IAClE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,IAAI,CAAC,IAAS,EAAE,MAAc;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,OAAO,CAAC,IAAS,EAAE,MAAW,EAAE,KAAa;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,GAAW,CAAC;IAChB,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI;QAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;SACpF,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI;QAAE,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;SAC3C,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI;QAAE,GAAG,GAAG,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC;;QAC/C,GAAG,GAAG,CAAC,CAAC;IACb,OAAO,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,MAAW,EAAE,KAAa,EAAE,UAAU,GAAG,YAAY;IAChF,OAAO,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC;AACvD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,MAAM,CAAC,CAAM,EAAE,CAAM;IACnC,OAAO,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC"}

package/dist/store/sync/identity-fill.d.ts

@@ -0,0 +1,45 @@
+/**
+ * The open-time row-identity fill under capture (journal spec §2.3a rule 1;
+ * the S2 capture interactions of T12806 and T12801).
+ *
+ * The fill, the refill of pre-release fingerprints and the graveyard re-link
+ * are DERIVED rewrites: every value they write is a deterministic function of
+ * the store (spec §12.1), and a refill runs only before any uid has synced.
+ * Capturing them would journal one K and one F per filled row under shadow
+ * capture. So on a store with the sync schema they run inside
+ * {@link withSyncTriggersSuspended}, and the tables they wrote are marked
+ * suspect, for the sealer's repair diff (S3).
+ *
+ * One exception is journaled: a row whose identity a CAPTURED write cleared
+ * (a snapshot-overwrite import, K old → NULL) gets the K that records its
+ * new uid ({@link captureRemints}), in a `remint` frame, so the pair nets to
+ * old → new instead of leaving the new identity unjournaled.
+ *
+ * @task T12343
+ * @module store/sync/identity-fill
+ */
+import type { DatabaseSync } from 'node:sqlite';
+import type { TableScope } from '@cleocode/contracts';
+import { prepareRowIdentity, type RowUidFillReport } from '../row-identity.js';
+/** What the open-time fill did under capture. */
+export interface IdentityFillUnderCapture {
+    readonly report: RowUidFillReport | null;
+    /** Tables marked suspect (the fill wrote them uncaptured). */
+    readonly suspect: string[];
+    /** Re-mint K captures written, per table. */
+    readonly remints: Record<string, number>;
+}
+/** The tables a fill report says were written. */
+export declare function filledTables(scope: TableScope, report: RowUidFillReport): string[];
+/**
+ * Run the open-time identity fill ({@link prepareRowIdentity}). With
+ * `sync.capture` on: with the capture triggers dropped, the written tables
+ * marked suspect, and re-mint K captures for identities a captured write
+ * cleared. With it off: exactly {@link prepareRowIdentity}, even when the
+ * sync tables exist (`cleo project link` creates them, T13025).
+ *
+ * Never throws, like {@link prepareRowIdentity}: a failed bracket (busy,
+ * a broken sync schema) is logged and reported as no fill.
+ */
+export declare function prepareRowIdentityUnderCapture(db: DatabaseSync, scope: TableScope, options?: Parameters<typeof prepareRowIdentity>[2]): IdentityFillUnderCapture;
+//# sourceMappingURL=identity-fill.d.ts.map

package/dist/store/sync/identity-fill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-fill.d.ts","sourceRoot":"","sources":["../../../src/store/sync/identity-fill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAgB,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAW7F,iDAAiD;AACjD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACzC,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3B,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C;AAED,kDAAkD;AAClD,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAelF;AAED;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAC5C,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,UAAU,EACjB,OAAO,GAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAM,GACrD,wBAAwB,CAc1B"}