@cleocode/core 2026.10.3 → 2026.10.5-rc.ci.672

package/dist/store/sync/conflicts.js

@@ -0,0 +1,98 @@
+/**
+ * The conflict log (T12344; journal spec §3.2 "conflict records").
+ *
+ * Every conflict an apply decides — a typed rule refusing or overriding a
+ * write, an edit of a deleted row, a delete over newer edits, a concurrent
+ * divergent edit of one field — is a row of `_sync_conflict`, written in the
+ * apply's own transaction. Nothing is silently dropped: `cleo cloud
+ * conflicts` lists the open ones, and a resolution (an ordinary write in a
+ * `write` frame) marks them resolved.
+ *
+ * @module store/sync/conflicts
+ * @task T12344
+ */
+/**
+ * Record the conflicts of one op.
+ *
+ * @param db - The store, inside the apply frame's transaction.
+ * @param site - The inbox transaction and op index.
+ * @param conflicts - What the merge decided.
+ * @param origin - The op's origin replica.
+ * @param nowIso - The time.
+ */
+export function recordConflicts(db, site, conflicts, origin, nowIso) {
+    if (conflicts.length === 0)
+        return;
+    const ins = db.prepare(`INSERT INTO _sync_conflict (stream, seq, txn_idx, op_idx, kind, tbl, uid, columns_json,
+       rule, resolution, op_hlc, local_hlc, origin, created_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`);
+    for (const c of conflicts) {
+        ins.run(site.stream, site.seq, site.txnIdx, site.opIdx, c.kind, c.table, c.uid, JSON.stringify(c.columns), c.rule ?? null, c.resolution, c.opHlc, c.localHlc ?? null, origin, nowIso);
+    }
+}
+/**
+ * The recorded conflicts, oldest first.
+ *
+ * @param db - The store.
+ * @param opts - `open` lists only unresolved ones; `stream` narrows to one stream.
+ * @returns The conflicts.
+ */
+export function listConflicts(db, opts = {}) {
+    const where = [];
+    const args = [];
+    if (opts.open)
+        where.push('resolved_at IS NULL');
+    if (opts.stream !== undefined) {
+        where.push('stream = ?');
+        args.push(opts.stream);
+    }
+    const rows = db
+        .prepare(`SELECT * FROM _sync_conflict ${where.length > 0 ? `WHERE ${where.join(' AND ')}` : ''} ORDER BY id`)
+        .all(...args);
+    return rows.map((r) => ({
+        id: r.id,
+        stream: r.stream,
+        seq: r.seq,
+        txnIdx: r.txn_idx,
+        opIdx: r.op_idx,
+        kind: r.kind,
+        table: r.tbl,
+        uid: r.uid,
+        columns: JSON.parse(r.columns_json),
+        rule: r.rule,
+        resolution: r.resolution,
+        opHlc: r.op_hlc,
+        localHlc: r.local_hlc,
+        origin: r.origin,
+        createdAt: r.created_at,
+        resolvedAt: r.resolved_at,
+    }));
+}
+/**
+ * Mark an open conflict resolved (its resolution, an ordinary write, has been
+ * made or the conflict was reviewed and accepted).
+ *
+ * @param db - The store.
+ * @param id - The conflict id.
+ * @param nowIso - The time.
+ * @returns Whether an open conflict had that id.
+ */
+export function resolveConflict(db, id, nowIso) {
+    const r = db
+        .prepare('UPDATE _sync_conflict SET resolved_at = ? WHERE id = ? AND resolved_at IS NULL')
+        .run(nowIso, id);
+    return Number(r.changes) > 0;
+}
+/**
+ * How many conflicts the store holds, or one stream of it.
+ *
+ * @param db - The store.
+ * @param stream - Only this stream's conflicts, when given.
+ * @returns Open (unresolved) and total counts.
+ */
+export function conflictCounts(db, stream) {
+    const sql = 'SELECT count(*) AS total, coalesce(sum(resolved_at IS NULL), 0) AS open FROM _sync_conflict';
+    const row = (stream === undefined ? db.prepare(sql).get() : db.prepare(`${sql} WHERE stream = ?`).get(stream));
+    return { open: Number(row.open), total: Number(row.total) };
+}
+//# sourceMappingURL=conflicts.js.map

package/dist/store/sync/conflicts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conflicts.js","sourceRoot":"","sources":["../../../src/store/sync/conflicts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAiDH;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAC7B,EAAgB,EAChB,IAAkB,EAClB,SAAmC,EACnC,MAAc,EACd,MAAc;IAEd,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACnC,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CACpB;;uDAEmD,CACpD,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,KAAK,EACV,CAAC,CAAC,IAAI,EACN,CAAC,CAAC,KAAK,EACP,CAAC,CAAC,GAAG,EACL,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EACzB,CAAC,CAAC,IAAI,IAAI,IAAI,EACd,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,KAAK,EACP,CAAC,CAAC,QAAQ,IAAI,IAAI,EAClB,MAAM,EACN,MAAM,CACP,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,EAAgB,EAChB,OAA8D,EAAE;IAEhE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,IAAI,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN,gCAAgC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,CACrG;SACA,GAAG,CAAC,GAAG,IAAI,CAAkB,CAAC;IACjC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtB,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,MAAM,EAAE,CAAC,CAAC,OAAO;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM;QACf,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,CAAC,CAAC,GAAG;QACZ,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAa;QAC/C,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,KAAK,EAAE,CAAC,CAAC,MAAM;QACf,QAAQ,EAAE,CAAC,CAAC,SAAS;QACrB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,UAAU,EAAE,CAAC,CAAC,WAAW;KAC1B,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,EAAgB,EAAE,EAAU,EAAE,MAAc;IAC1E,MAAM,CAAC,GAAG,EAAE;SACT,OAAO,CAAC,gFAAgF,CAAC;SACzF,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,EAAgB,EAAE,MAAe;IAC9D,MAAM,GAAG,GACP,6FAA6F,CAAC;IAChG,MAAM,GAAG,GAAG,CACV,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,GAAG,mBAAmB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAC9D,CAAC;IACrC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;AAC9D,CAAC"}

package/dist/store/sync/field-leave.d.ts

@@ -0,0 +1,146 @@
+/**
+ * Typed-rule field state that row meta has no place for (T12344; journal spec
+ * §3.6, inventory §3.6.6 `task.status.absorbing`, `task.pipeline-stage.max`).
+ *
+ * - **Leaves.** An absorbing write (a task cancelled or done) overrides a
+ *   newer ordinary edit of its column, unless an explicit leave (a reopen …)
+ *   newer than it produced the current value; a rank-max restore raises a
+ *   floor below which writes are dead. Both are `FieldState.leave`.
+ * - **Frontiers.** A rank-max column keeps its alive candidate writes
+ *   (`FieldState.frontier`), so a later restore still finds the next best.
+ *
+ * Every replica must know both, whether applied from the stream or authored
+ * here, so `_sync_field_leave` keeps them per (tbl, uid, col):
+ * - the apply engine records what its merge decided;
+ * - the sealer records a local leave: a sealed U whose `actor.op` is a leave
+ *   op of the column's absorbing rule moving it off an absorbing value, or a
+ *   restore op of its rank-max rule — the cases in which a receiving
+ *   replica's merge records the same leave;
+ * - a delete clears the row's state with its fields.
+ *
+ * @module store/sync/field-leave
+ * @task T12344
+ */
+import type { DatabaseSync } from 'node:sqlite';
+import { LedgerWireValue } from '@cleocode/contracts/ledger';
+/** Column → encoded HLC of its latest explicit leave. */
+export type FieldLeaves = Readonly<Record<string, string>>;
+/** A rank-max column's alive candidate writes, oldest first. */
+export type FieldFrontier = ReadonlyArray<{
+    readonly value: LedgerWireValue;
+    readonly hlc: string;
+}>;
+/**
+ * The row's recorded leaves.
+ *
+ * @param db - The store (the journal schema applied).
+ * @param tbl - Sync-set table.
+ * @param uid - Row uid.
+ * @returns Column → leave HLC; empty when none.
+ */
+export declare function readFieldLeaves(db: DatabaseSync, tbl: string, uid: string): FieldLeaves;
+/**
+ * Record leaves; a stored leave newer than the incoming one is kept.
+ *
+ * @param db - The store, inside the writer's transaction.
+ * @param tbl - Sync-set table.
+ * @param uid - Row uid.
+ * @param leaves - Column → leave HLC.
+ */
+export declare function recordFieldLeaves(db: DatabaseSync, tbl: string, uid: string, leaves: FieldLeaves): void;
+/**
+ * The row's rank-max frontiers.
+ *
+ * @param db - The store (the journal schema applied).
+ * @param tbl - Sync-set table.
+ * @param uid - Row uid.
+ * @returns Column → frontier; empty when none.
+ */
+export declare function readFieldFrontiers(db: DatabaseSync, tbl: string, uid: string): Readonly<Record<string, FieldFrontier>>;
+/**
+ * Set rank-max frontiers as the merge left them; `null` clears one (the
+ * current value is the only candidate again).
+ *
+ * @param db - The store, inside the writer's transaction.
+ * @param tbl - Sync-set table.
+ * @param uid - Row uid.
+ * @param frontiers - Column → frontier, or null.
+ */
+export declare function setFieldFrontiers(db: DatabaseSync, tbl: string, uid: string, frontiers: Readonly<Record<string, FieldFrontier | null>>): void;
+/**
+ * Forget the row's leaves (its delete).
+ *
+ * @param db - The store, inside the writer's transaction.
+ * @param tbl - Sync-set table.
+ * @param uid - Row uid.
+ */
+export declare function clearFieldLeaves(db: DatabaseSync, tbl: string, uid: string): void;
+/**
+ * The explicit leaves a locally authored U op makes: per absorbing-rule
+ * column, `actorOp` is one of the rule's leave ops and the column moves from
+ * an absorbing value (`b`) to an ordinary one (`a`); per rank-max column the
+ * op writes, `actorOp` is one of the rule's restore ops.
+ *
+ * @param tbl - Sync-set table.
+ * @param op - The sealed op's changed values, before-image and HLC.
+ * @param actorOp - The transaction's `actor.op`, or null.
+ * @returns Column → `op.h` for every leave; empty when none.
+ */
+export declare function localLeaves(tbl: string, op: {
+    readonly a?: Readonly<Record<string, LedgerWireValue>>;
+    readonly b?: Readonly<Record<string, LedgerWireValue>>;
+    readonly h: string;
+}, actorOp: string | null): FieldLeaves;
+/**
+ * The `op` of a frame or transaction actor (JSON of a `LedgerActor`), or
+ * null when the actor is absent, not JSON (a bare label such as
+ * `fk_orphans`) or names no op.
+ *
+ * @param actor - The stored actor text.
+ * @returns The actor's op, or null.
+ */
+export declare function actorOpOf(actor: string | null): string | null;
+/**
+ * The stored rank-max frontiers a locally authored U op changes (T13232):
+ * the local write joins each frontier the row already has, pruned exactly as
+ * the merge prunes it, so the stored state stays the one every replica
+ * folding the same writes holds. A frontier left with one candidate is
+ * cleared (`null`). Columns without a stored frontier need nothing: the row's
+ * own value is their only candidate.
+ *
+ * @param db - The store, inside the sealer's transaction.
+ * @param tbl - Sync-set table.
+ * @param uid - Row uid.
+ * @param op - The sealed op's changed values and HLC.
+ * @param leaves - The leaves this op records ({@link localLeaves}).
+ * @returns Column → new frontier, or null to clear it.
+ */
+export declare function localFrontierUpdates(db: DatabaseSync, tbl: string, uid: string, op: {
+    readonly a?: Readonly<Record<string, LedgerWireValue>>;
+    readonly h: string;
+}, leaves: FieldLeaves): Record<string, FieldFrontier | null>;
+/**
+ * Move the row's typed-rule state to its new uid on a re-key.
+ *
+ * @param db - The store, inside the writer's transaction.
+ * @param tbl - Sync-set table.
+ * @param oldUid - The row's uid before the re-key.
+ * @param newUid - Its uid after.
+ */
+export declare function moveFieldState(db: DatabaseSync, tbl: string, oldUid: string, newUid: string): void;
+/** A row's typed-rule state as a rebase snapshot keeps it. */
+export interface FieldStateSnapshot {
+    readonly leaves: FieldLeaves;
+    readonly frontiers: Readonly<Record<string, FieldFrontier>>;
+}
+/**
+ * Put a row's typed-rule state back exactly as a snapshot holds it (none
+ * when null). A rebase rewind's writer (T13193).
+ *
+ * @param db - The store, inside the rebase frame.
+ * @param tbl - Sync-set table.
+ * @param uid - Row uid.
+ * @param state - The snapshot, or null.
+ */
+export declare function restoreFieldState(db: DatabaseSync, tbl: string, uid: string, state: FieldStateSnapshot | null): void;
+//# sourceMappingURL=field-leave.d.ts.map

package/dist/store/sync/field-leave.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-leave.d.ts","sourceRoot":"","sources":["../../../src/store/sync/field-leave.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAe,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAS1E,yDAAyD;AACzD,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE3D,gEAAgE;AAChE,MAAM,MAAM,aAAa,GAAG,aAAa,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,WAAW,CASvF;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,YAAY,EAChB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,WAAW,GAClB,IAAI,CASN;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,YAAY,EAChB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAYzC;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,YAAY,EAChB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC,CAAC,GACxD,IAAI,CAQN;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAEjF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CACzB,GAAG,EAAE,MAAM,EACX,EAAE,EAAE;IACF,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IACvD,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IACvD,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;CACpB,EACD,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,WAAW,CAkBb;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAU7D;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,YAAY,EAChB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,EAAE,EAAE;IAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;CAAE,EAClF,MAAM,EAAE,WAAW,GAClB,MAAM,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC,CAmBtC;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,EAAE,EAAE,YAAY,EAChB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACb,IAAI,CAON;AAED,8DAA8D;AAC9D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;CAC7D;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,YAAY,EAChB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,kBAAkB,GAAG,IAAI,GAC/B,IAAI,CAWN"}

package/dist/store/sync/field-leave.js

@@ -0,0 +1,241 @@
+/**
+ * Typed-rule field state that row meta has no place for (T12344; journal spec
+ * §3.6, inventory §3.6.6 `task.status.absorbing`, `task.pipeline-stage.max`).
+ *
+ * - **Leaves.** An absorbing write (a task cancelled or done) overrides a
+ *   newer ordinary edit of its column, unless an explicit leave (a reopen …)
+ *   newer than it produced the current value; a rank-max restore raises a
+ *   floor below which writes are dead. Both are `FieldState.leave`.
+ * - **Frontiers.** A rank-max column keeps its alive candidate writes
+ *   (`FieldState.frontier`), so a later restore still finds the next best.
+ *
+ * Every replica must know both, whether applied from the stream or authored
+ * here, so `_sync_field_leave` keeps them per (tbl, uid, col):
+ * - the apply engine records what its merge decided;
+ * - the sealer records a local leave: a sealed U whose `actor.op` is a leave
+ *   op of the column's absorbing rule moving it off an absorbing value, or a
+ *   restore op of its rank-max rule — the cases in which a receiving
+ *   replica's merge records the same leave;
+ * - a delete clears the row's state with its fields.
+ *
+ * @module store/sync/field-leave
+ * @task T12344
+ */
+import { LedgerActor, LedgerWireValue } from '@cleocode/contracts/ledger';
+import { z } from 'zod';
+import { rankMaxFrontier } from './merge/engine.js';
+import { SYNC_MERGE_RULES } from './merge/rules.js';
+import { canonicalJson } from './sealer-values.js';
+/** The stored frontier shape. */
+const FrontierJson = z.array(z.object({ value: LedgerWireValue, hlc: z.string() }).strict());
+/**
+ * The row's recorded leaves.
+ *
+ * @param db - The store (the journal schema applied).
+ * @param tbl - Sync-set table.
+ * @param uid - Row uid.
+ * @returns Column → leave HLC; empty when none.
+ */
+export function readFieldLeaves(db, tbl, uid) {
+    const rows = db
+        .prepare('SELECT col, leave FROM _sync_field_leave WHERE tbl = ? AND uid = ? AND leave IS NOT NULL')
+        .all(tbl, uid);
+    const out = {};
+    for (const r of rows)
+        out[r.col] = r.leave;
+    return out;
+}
+/**
+ * Record leaves; a stored leave newer than the incoming one is kept.
+ *
+ * @param db - The store, inside the writer's transaction.
+ * @param tbl - Sync-set table.
+ * @param uid - Row uid.
+ * @param leaves - Column → leave HLC.
+ */
+export function recordFieldLeaves(db, tbl, uid, leaves) {
+    const entries = Object.entries(leaves);
+    if (entries.length === 0)
+        return;
+    const up = db.prepare(`INSERT INTO _sync_field_leave (tbl, uid, col, leave) VALUES (?, ?, ?, ?)
+     ON CONFLICT (tbl, uid, col) DO UPDATE SET leave = excluded.leave
+     WHERE leave IS NULL OR excluded.leave > leave`);
+    for (const [col, hlc] of entries)
+        up.run(tbl, uid, col, hlc);
+}
+/**
+ * The row's rank-max frontiers.
+ *
+ * @param db - The store (the journal schema applied).
+ * @param tbl - Sync-set table.
+ * @param uid - Row uid.
+ * @returns Column → frontier; empty when none.
+ */
+export function readFieldFrontiers(db, tbl, uid) {
+    const rows = db
+        .prepare('SELECT col, frontier FROM _sync_field_leave WHERE tbl = ? AND uid = ? AND frontier IS NOT NULL')
+        .all(tbl, uid);
+    const out = {};
+    for (const r of rows) {
+        const parsed = FrontierJson.safeParse(JSON.parse(r.frontier));
+        if (parsed.success)
+            out[r.col] = parsed.data;
+    }
+    return out;
+}
+/**
+ * Set rank-max frontiers as the merge left them; `null` clears one (the
+ * current value is the only candidate again).
+ *
+ * @param db - The store, inside the writer's transaction.
+ * @param tbl - Sync-set table.
+ * @param uid - Row uid.
+ * @param frontiers - Column → frontier, or null.
+ */
+export function setFieldFrontiers(db, tbl, uid, frontiers) {
+    const entries = Object.entries(frontiers);
+    if (entries.length === 0)
+        return;
+    const up = db.prepare(`INSERT INTO _sync_field_leave (tbl, uid, col, frontier) VALUES (?, ?, ?, ?)
+     ON CONFLICT (tbl, uid, col) DO UPDATE SET frontier = excluded.frontier`);
+    for (const [col, f] of entries)
+        up.run(tbl, uid, col, f === null ? null : canonicalJson(f));
+}
+/**
+ * Forget the row's leaves (its delete).
+ *
+ * @param db - The store, inside the writer's transaction.
+ * @param tbl - Sync-set table.
+ * @param uid - Row uid.
+ */
+export function clearFieldLeaves(db, tbl, uid) {
+    db.prepare('DELETE FROM _sync_field_leave WHERE tbl = ? AND uid = ?').run(tbl, uid);
+}
+/**
+ * The explicit leaves a locally authored U op makes: per absorbing-rule
+ * column, `actorOp` is one of the rule's leave ops and the column moves from
+ * an absorbing value (`b`) to an ordinary one (`a`); per rank-max column the
+ * op writes, `actorOp` is one of the rule's restore ops.
+ *
+ * @param tbl - Sync-set table.
+ * @param op - The sealed op's changed values, before-image and HLC.
+ * @param actorOp - The transaction's `actor.op`, or null.
+ * @returns Column → `op.h` for every leave; empty when none.
+ */
+export function localLeaves(tbl, op, actorOp) {
+    const rules = SYNC_MERGE_RULES[tbl]?.rules;
+    if (!rules || actorOp === null)
+        return {};
+    const out = {};
+    for (const [col, rule] of Object.entries(rules)) {
+        if (rule.kind === 'rank-max') {
+            // A restore raises the column's floor to its own HLC.
+            if (rule.restoreOps.includes(actorOp) && op.a?.[col] !== undefined)
+                out[col] = op.h;
+            continue;
+        }
+        if (rule.kind !== 'absorbing' || !rule.leaveOps.includes(actorOp))
+            continue;
+        const before = op.b?.[col];
+        const after = op.a?.[col];
+        if (typeof before !== 'string' || after === undefined)
+            continue;
+        const afterAbsorbing = typeof after === 'string' && rule.states.includes(after);
+        if (rule.states.includes(before) && !afterAbsorbing)
+            out[col] = op.h;
+    }
+    return out;
+}
+/**
+ * The `op` of a frame or transaction actor (JSON of a `LedgerActor`), or
+ * null when the actor is absent, not JSON (a bare label such as
+ * `fk_orphans`) or names no op.
+ *
+ * @param actor - The stored actor text.
+ * @returns The actor's op, or null.
+ */
+export function actorOpOf(actor) {
+    if (actor === null || !actor.startsWith('{'))
+        return null;
+    let parsed;
+    try {
+        parsed = JSON.parse(actor);
+    }
+    catch {
+        return null;
+    }
+    const r = LedgerActor.safeParse(parsed);
+    return r.success ? (r.data.op ?? null) : null;
+}
+/**
+ * The stored rank-max frontiers a locally authored U op changes (T13232):
+ * the local write joins each frontier the row already has, pruned exactly as
+ * the merge prunes it, so the stored state stays the one every replica
+ * folding the same writes holds. A frontier left with one candidate is
+ * cleared (`null`). Columns without a stored frontier need nothing: the row's
+ * own value is their only candidate.
+ *
+ * @param db - The store, inside the sealer's transaction.
+ * @param tbl - Sync-set table.
+ * @param uid - Row uid.
+ * @param op - The sealed op's changed values and HLC.
+ * @param leaves - The leaves this op records ({@link localLeaves}).
+ * @returns Column → new frontier, or null to clear it.
+ */
+export function localFrontierUpdates(db, tbl, uid, op, leaves) {
+    const rules = SYNC_MERGE_RULES[tbl]?.rules;
+    if (!rules)
+        return {};
+    const out = {};
+    let stored;
+    let storedLeaves;
+    for (const [col, rule] of Object.entries(rules)) {
+        const value = op.a?.[col];
+        if (rule.kind !== 'rank-max' || value === undefined)
+            continue;
+        stored ??= readFieldFrontiers(db, tbl, uid);
+        const frontier = stored[col];
+        if (!frontier)
+            continue;
+        storedLeaves ??= readFieldLeaves(db, tbl, uid);
+        const floors = [storedLeaves[col], leaves[col]].filter((x) => x !== undefined);
+        const floor = floors.length > 0 ? floors.reduce((m, x) => (x > m ? x : m)) : undefined;
+        const next = rankMaxFrontier(rule, { value, hlc: op.h, frontier }, { value, hlc: op.h }, floor);
+        out[col] = next.length > 1 ? next : null;
+    }
+    return out;
+}
+/**
+ * Move the row's typed-rule state to its new uid on a re-key.
+ *
+ * @param db - The store, inside the writer's transaction.
+ * @param tbl - Sync-set table.
+ * @param oldUid - The row's uid before the re-key.
+ * @param newUid - Its uid after.
+ */
+export function moveFieldState(db, tbl, oldUid, newUid) {
+    if (oldUid === newUid)
+        return;
+    db.prepare('UPDATE _sync_field_leave SET uid = ? WHERE tbl = ? AND uid = ?').run(newUid, tbl, oldUid);
+}
+/**
+ * Put a row's typed-rule state back exactly as a snapshot holds it (none
+ * when null). A rebase rewind's writer (T13193).
+ *
+ * @param db - The store, inside the rebase frame.
+ * @param tbl - Sync-set table.
+ * @param uid - Row uid.
+ * @param state - The snapshot, or null.
+ */
+export function restoreFieldState(db, tbl, uid, state) {
+    db.prepare('DELETE FROM _sync_field_leave WHERE tbl = ? AND uid = ?').run(tbl, uid);
+    if (state === null)
+        return;
+    const cols = new Set([...Object.keys(state.leaves), ...Object.keys(state.frontiers)]);
+    const ins = db.prepare('INSERT INTO _sync_field_leave (tbl, uid, col, leave, frontier) VALUES (?, ?, ?, ?, ?)');
+    for (const col of cols) {
+        const f = state.frontiers[col];
+        ins.run(tbl, uid, col, state.leaves[col] ?? null, f === undefined ? null : canonicalJson(f));
+    }
+}
+//# sourceMappingURL=field-leave.js.map

package/dist/store/sync/field-leave.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-leave.js","sourceRoot":"","sources":["../../../src/store/sync/field-leave.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,iCAAiC;AACjC,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAW7F;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,EAAgB,EAAE,GAAW,EAAE,GAAW;IACxE,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN,0FAA0F,CAC3F;SACA,GAAG,CAAC,GAAG,EAAE,GAAG,CAA0C,CAAC;IAC1D,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;IAC3C,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,EAAgB,EAChB,GAAW,EACX,GAAW,EACX,MAAmB;IAEnB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CACnB;;mDAE+C,CAChD,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,OAAO;QAAE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,EAAgB,EAChB,GAAW,EACX,GAAW;IAEX,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN,gGAAgG,CACjG;SACA,GAAG,CAAC,GAAG,EAAE,GAAG,CAA6C,CAAC;IAC7D,MAAM,GAAG,GAAkC,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,OAAO;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,EAAgB,EAChB,GAAW,EACX,GAAW,EACX,SAAyD;IAEzD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CACnB;4EACwE,CACzE,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,OAAO;QAAE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAgB,EAAE,GAAW,EAAE,GAAW;IACzE,EAAE,CAAC,OAAO,CAAC,yDAAyD,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AACtF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CACzB,GAAW,EACX,EAIC,EACD,OAAsB;IAEtB,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC;IAC3C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC1C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC7B,sDAAsD;YACtD,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACpF,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QAC5E,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAChE,MAAM,cAAc,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChF,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,KAAoB;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,GAAG,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CAClC,EAAgB,EAChB,GAAW,EACX,GAAW,EACX,EAAkF,EAClF,MAAmB;IAEnB,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,GAAyC,EAAE,CAAC;IACrD,IAAI,MAA2D,CAAC;IAChE,IAAI,YAAqC,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAC9D,MAAM,KAAK,kBAAkB,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,YAAY,KAAK,eAAe,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;QAC5F,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAChG,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAC5B,EAAgB,EAChB,GAAW,EACX,MAAc,EACd,MAAc;IAEd,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO;IAC9B,EAAE,CAAC,OAAO,CAAC,gEAAgE,CAAC,CAAC,GAAG,CAC9E,MAAM,EACN,GAAG,EACH,MAAM,CACP,CAAC;AACJ,CAAC;AAQD;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,EAAgB,EAChB,GAAW,EACX,GAAW,EACX,KAAgC;IAEhC,EAAE,CAAC,OAAO,CAAC,yDAAyD,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpF,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACtF,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CACpB,uFAAuF,CACxF,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC"}

package/dist/store/sync/flags.d.ts

@@ -13,6 +13,7 @@
  * @module store/sync/flags
  */
 import type { DatabaseSync } from 'node:sqlite';
+import type { SupersededStoreBareAccount, TableScope } from '@cleocode/contracts';
 /** The journal's flags, in slice order. */
 export declare const SYNC_FLAGS: readonly ["sync.capture", "sync.seal", "sync.push", "sync.pull", "sync.strict"];
 /** One journal flag. */
@@ -41,6 +42,124 @@ export declare function anySyncFlagOn(db: DatabaseSync): boolean;
  * @param env - The environment to read the kill switch from.
  */
 export declare function isSyncFlagOn(db: DatabaseSync, flag: SyncFlag, env?: NodeJS.ProcessEnv): boolean;
+/**
+ * The journal's sync set (§2.1): tables declared in ROW_IDENTITY that are
+ * portable and not frozen-legacy. Defined here, below the capture machinery
+ * (which imports this module), so the strand check can name it (T13225).
+ *
+ * @param scope - The store scope.
+ */
+export declare function syncSetTables(scope: TableScope): string[];
+/** The remedy {@link LegacyOnlyStoreError} names while the store is a full strand. */
+export declare const LEGACY_ONLY_REMEDY = "cleo doctor superseded-store --reconcile";
+/** The task extending the reconcile to partial strands (T13225). */
+export declare const PARTIAL_STRAND_FOLLOW_UP = "T13309";
+/**
+ * One bare legacy table holding rows its sync-set twin lacks (T13224, T13225).
+ * The journal captures only the sync set, so it would never see them.
+ */
+export interface LegacyStrand {
+    /** The bare legacy table, e.g. `sessions`. */
+    readonly bareTable: string;
+    /** Its sync-set twin, e.g. `tasks_sessions`. */
+    readonly table: string;
+    /** Bare rows whose key the twin lacks. */
+    readonly missing: number;
+    /**
+     * Bare `tasks` rows whose id a DIFFERENT live task holds (the T001 reuse
+     * case): present by key, absent in substance. Always 0 for other tables.
+     */
+    readonly shadowed: number;
+}
+/**
+ * The store's bare legacy rows the journal would never see (T13224, T13225).
+ *
+ * A pair is a bare table outside the sync set whose consolidated target is a
+ * sync-set table, so a bare table the runtime still reads (it is in the sync
+ * set itself) is never a source. Rows are compared by the twin's primary key,
+ * projected as the reconcile projects it ({@link legacyRowProjection}), the
+ * same proof as the superseded-store survey. A pair whose keys cannot be
+ * compared counts only while its twin is empty. Bare `tasks` rows shadowed by a
+ * different live task with the same id ({@link taskIdCollisionsSql}) count too.
+ *
+ * Dead bare tables are written by nothing since consolidation, so a missing row
+ * was never carried — unless a reconcile carried it and the runtime deleted it
+ * from the twin since, the normal life of every reconciled store. A bare table
+ * the store records as carried ({@link BARE_ACCOUNTS_TABLE}) whose key digest
+ * still matches ({@link bareTableDigest}) is therefore not a strand (T13319,
+ * T13320). The record lives in the store, never in files beside it, so a
+ * restored pre-reconcile snapshot is refused again.
+ *
+ * @returns One entry per stranded pair; empty when the journal sees every row.
+ */
+export declare function legacyStrands(db: DatabaseSync): LegacyStrand[];
+/**
+ * Adopt reconcile receipts written before T13319 into the store's record of
+ * carried bare tables (T13320): a receipt file beside the store is audit
+ * only, never authority, so a bare table one names is recorded only when it
+ * compares clean RIGHT NOW (every bare key present in the twin, no shadowed
+ * task). A table that does not — a restored pre-reconcile snapshot, or rows
+ * deleted since the reconcile — stays a strand, for the bare-strands
+ * reconcile (T13309) to settle. Runs when a flag is turned on.
+ *
+ * @param db - The live project store, writable.
+ * @returns The bare tables adopted.
+ */
+export declare function adoptReconciledReceipts(db: DatabaseSync): string[];
+/** Whether any bare legacy row is stranded from the journal ({@link legacyStrands}). */
+export declare function isLegacyOnlyStore(db: DatabaseSync): boolean;
+/**
+ * The remedy for `strands`: the reconcile while `tasks_tasks` is empty (it
+ * copies the bare family only then), otherwise none yet ({@link
+ * PARTIAL_STRAND_FOLLOW_UP}).
+ */
+export declare function legacyStrandRemedy(db: DatabaseSync, strands: readonly LegacyStrand[]): string;
+/** Sync refused on a store with stranded bare rows ({@link legacyStrands}). */
+export declare class LegacyOnlyStoreError extends Error {
+    readonly code = "E_SYNC_LEGACY_ONLY_STORE";
+    /**
+     * @param flag - The flag being enabled.
+     * @param remedy - {@link legacyStrandRemedy} for the store.
+     */
+    constructor(flag: string, remedy: string);
+}
+/**
+ * {@link legacyStrands}, reused while no other connection has committed.
+ *
+ * @param db - The store connection the sealer uses.
+ */
+export declare function legacyStrandsCached(db: DatabaseSync): LegacyStrand[];
+/**
+ * The store's own record of the bare tables a reconcile carried (T13320): one
+ * row per bare table with its key digest ({@link bareTableDigest}) when the
+ * run verified. It lives IN the store (local-only, `_exodus_recovery_*`), so
+ * it travels with backups and restores; a snapshot taken before the reconcile
+ * carries none, and its stranded rows are refused again.
+ */
+export declare const BARE_ACCOUNTS_TABLE = "_exodus_recovery_bare_accounts";
+/**
+ * The row count and key digest of a bare legacy table, by which the store
+ * records a reconcile carrying it (T13319). Its primary-key values are hashed in order
+ * — the rows a strand is judged by — so a row added since changes it, while a
+ * column the runtime adds to the dead table on open (its legacy upgrade does)
+ * does not. A keyless table hashes every column.
+ *
+ * @param db - Connection holding the table.
+ * @param schema - Schema the table lives in, e.g. `main`.
+ * @param table - The bare table.
+ */
+export declare function bareTableDigest(db: DatabaseSync, schema: string, table: string): SupersededStoreBareAccount;
+/**
+ * Record, in the store, that a verified reconcile run carried `accounts`
+ * (T13320). Upserts per bare table, so a later run's digest replaces an
+ * earlier one; `run` names the receipt directory that did it.
+ *
+ * @param db - The live project store, writable.
+ * @param accounts - Key digests of the bare tables the run carried.
+ * @param run - The reconcile's run directory name.
+ * @param now - When the run verified.
+ */
+export declare function recordBareAccounts(db: DatabaseSync, accounts: readonly SupersededStoreBareAccount[], run: string, now?: Date): void;
 /**
  * Persist a flag. Turning one on first applies the sync schema; turning one
  * off on a store without the schema writes nothing.

package/dist/store/sync/flags.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"flags.d.ts","sourceRoot":"","sources":["../../../src/store/sync/flags.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,2CAA2C;AAC3C,eAAO,MAAM,UAAU,iFAMb,CAAC;AAEX,wBAAwB;AACxB,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,oCAAoC;AACpC,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAMhE;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,QAAQ,CAKjD,CAAC;AAEH,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAEpD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,YAAY,GAAG,aAAa,CAU7D;AAED,yEAAyE;AACzE,wBAAgB,aAAa,CAAC,EAAE,EAAE,YAAY,GAAG,OAAO,CAEvD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE,QAAQ,EACd,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAGT;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CACzB,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE,QAAQ,EACd,EAAE,EAAE,OAAO,EACX,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAO,GAC3E,OAAO,CAqBT"}
+{"version":3,"file":"flags.d.ts","sourceRoot":"","sources":["../../../src/store/sync/flags.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,0BAA0B,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAWlF,2CAA2C;AAC3C,eAAO,MAAM,UAAU,iFAMb,CAAC;AAEX,wBAAwB;AACxB,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,oCAAoC;AACpC,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAMhE;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,QAAQ,CAKjD,CAAC;AAEH,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAEpD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,YAAY,GAAG,aAAa,CAU7D;AAED,yEAAyE;AACzE,wBAAgB,aAAa,CAAC,EAAE,EAAE,YAAY,GAAG,OAAO,CAEvD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE,QAAQ,EACd,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAGT;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,EAAE,CASzD;AAED,sFAAsF;AACtF,eAAO,MAAM,kBAAkB,6CAA6C,CAAC;AAE7E,oEAAoE;AACpE,eAAO,MAAM,wBAAwB,WAAW,CAAC;AAEjD;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,gDAAgD;IAChD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,YAAY,GAAG,YAAY,EAAE,CAY9D;AA8CD;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,YAAY,GAAG,MAAM,EAAE,CAclE;AA0CD,wFAAwF;AACxF,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,YAAY,GAAG,OAAO,CAE3D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,YAAY,EAAE,GAAG,MAAM,CAgB7F;AAED,+EAA+E;AAC/E,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,8BAA8B;IAE3C;;;OAGG;gBACS,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAOzC;AAcD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,YAAY,GAAG,YAAY,EAAE,CASpE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,mCAAmC,CAAC;AASpE;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,EAAE,EAAE,YAAY,EAChB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,0BAA0B,CAmB5B;AAYD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,YAAY,EAChB,QAAQ,EAAE,SAAS,0BAA0B,EAAE,EAC/C,GAAG,EAAE,MAAM,EACX,GAAG,GAAE,IAAiB,GACrB,IAAI,CAsBN;AA0ED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CACzB,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE,QAAQ,EACd,EAAE,EAAE,OAAO,EACX,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAO,GAC3E,OAAO,CA4BT"}