@cleocode/core 2026.10.4 → 2026.10.5-rc.ci.672

package/dist/store/sync/held.js

@@ -0,0 +1,314 @@
+/**
+ * Held rows (journal spec §3.5 Rule 5; T13193 R-3, T13269).
+ *
+ * A local op a scoped rebase cannot replay stays rewound and is held until
+ * its echo is decided: the stream refused it (a dangling reference, a typed
+ * rule, a guard, a post-apply check), so it is sent and sequenced as usual,
+ * and the stream applies or voids it. While held:
+ *
+ * - its row meta carries `held = 1`, so the ledger check, the repair diff
+ *   and the Gate D manifest skip the row (no spurious repair D for a held
+ *   insert, whose meta has no live row);
+ * - `_sync_ledger` moves by the op's row-count effect, in both `live` and
+ *   `held`, so `live = count(*) + held` keeps holding;
+ * - its row undo records when, why (the conflict preview `cleo show` returns
+ *   with `E_SYNC_HELD`), and, for an insert, what the rewind kept that the
+ *   stream cannot bring back (local-only columns, FK children outside the
+ *   sync set), restored if the insert applies later.
+ *
+ * A rebase that rewinds a held op lifts the hold first and decides again.
+ * A held transaction's echo never takes the own-echo fast path, so its echo
+ * is always decided in a rebase, whose rewind lifts the hold.
+ *
+ * @task T13193
+ * @module store/sync/held
+ */
+import { ExitCode } from '@cleocode/contracts/exit-codes.js';
+import { LedgerOp } from '@cleocode/contracts/ledger';
+import { CleoError } from '../../errors.js';
+import { getDualScopeNativeDb, openDualScopeDb } from '../dual-scope-db.js';
+import { readRowMetaFull, restoreRowMeta } from './row-meta.js';
+import { hasTable } from './schema.js';
+/**
+ * A stored value as tagged JSON (T13272): integers travel as `$i` (they are
+ * read as BigInt), and a REAL JSON cannot carry (±Infinity) as `$r`, like
+ * the ledger wire format. (SQLite stores no NaN or -0.0.)
+ */
+function encodeValue(v) {
+    if (typeof v === 'bigint')
+        return { $i: v.toString() };
+    if (typeof v === 'number' && !Number.isFinite(v))
+        return { $r: String(v) };
+    if (v === null || typeof v === 'string' || typeof v === 'number')
+        return v;
+    return { $b: Buffer.from(v.buffer, v.byteOffset, v.byteLength).toString('base64') };
+}
+function decodeValue(v) {
+    if (v === null || typeof v === 'string' || typeof v === 'number')
+        return v;
+    if ('$i' in v)
+        return BigInt(v.$i);
+    if ('$r' in v)
+        return Number(v.$r);
+    return Buffer.from(v.$b, 'base64');
+}
+function mapValues(o, f) {
+    return Object.fromEntries(Object.entries(o).map(([k, v]) => [k, f(v)]));
+}
+/** What a rewound insert kept, as text for `_sync_row_undo.kept_json`. */
+function encodeKept(k) {
+    return JSON.stringify({
+        local: k.local ? mapValues(k.local, encodeValue) : null,
+        rows: k.descendants.rows.map((r) => ({
+            table: r.table,
+            values: mapValues(r.values, encodeValue),
+        })),
+        cleared: k.descendants.cleared.map((c) => ({
+            table: c.table,
+            where: mapValues(c.where, encodeValue),
+            column: c.column,
+            value: encodeValue(c.value),
+        })),
+    });
+}
+function decodeKept(text) {
+    const j = JSON.parse(text);
+    return {
+        local: j.local ? mapValues(j.local, decodeValue) : null,
+        descendants: {
+            rows: j.rows.map((r) => ({ table: r.table, values: mapValues(r.values, decodeValue) })),
+            cleared: j.cleared.map((c) => ({
+                table: c.table,
+                where: mapValues(c.where, decodeValue),
+                column: c.column,
+                value: decodeValue(c.value),
+            })),
+        },
+    };
+}
+/** Move `table`'s ledger by `live` and `held` (no row yet: the sealer's first sight counts it). */
+function adjustLedger(db, table, live, held) {
+    if (live === 0 && held === 0)
+        return;
+    db.prepare('UPDATE _sync_ledger SET live = live + ?, held = held + ? WHERE tbl = ?').run(live, held, table);
+}
+/**
+ * Account a rebase's own row-count change to `table` (a rewind's delete or
+ * re-insert, a replay's insert or delete). Rewind and replay write with
+ * capture suspended, so the sealer never sees them; without this the ledger
+ * would drift by every rewound insert whose echo then applies.
+ *
+ * @param db - The store, inside the rebase frame.
+ * @param table - Sync-set table.
+ * @param delta - Rows added (positive) or removed (negative).
+ */
+export function accountRebaseRows(db, table, delta) {
+    adjustLedger(db, table, delta, 0);
+}
+/**
+ * Hold an op the replay left rewound: mark its row meta held (creating it
+ * from the op's after-meta for an insert, whose rewind removed it), move the
+ * ledger by its row-count effect, and record the hold on its row undo.
+ *
+ * @param db - The store, inside the rebase frame.
+ * @param h - The op and why it is held.
+ */
+export function holdOp(db, h) {
+    const { op } = h;
+    const effect = op.o === 'I' && !h.exists ? 1 : op.o === 'D' && h.exists ? -1 : 0;
+    const meta = readRowMetaFull(db, op.t, op.u) ?? h.afterMeta;
+    if (meta)
+        restoreRowMeta(db, op.t, op.u, { ...meta, held: 1 });
+    adjustLedger(db, op.t, effect, effect);
+    db.prepare(`UPDATE _sync_row_undo SET held_at = ?, held_reason = ?, held_effect = ?, kept_json = ?
+      WHERE txn = ? AND idx = ?`).run(h.nowIso, h.reason.slice(0, 500), effect, h.kept && op.o === 'I' ? encodeKept(h.kept) : null, h.txn, h.idx);
+}
+/**
+ * The hold on a local op, or null when it is not held.
+ *
+ * @param db - The store.
+ * @param txn - The local transaction.
+ * @param idx - The op's index.
+ */
+export function heldOp(db, txn, idx) {
+    const r = db
+        .prepare(`SELECT txn, idx, tbl, uid, held_at, held_reason, held_effect, kept_json FROM _sync_row_undo
+        WHERE txn = ? AND idx = ? AND held_at IS NOT NULL`)
+        .get(txn, idx);
+    return r ? toHeld(r) : null;
+}
+function toHeld(r) {
+    return {
+        txn: r.txn,
+        idx: Number(r.idx),
+        tbl: r.tbl,
+        uid: r.uid,
+        at: r.held_at,
+        reason: r.held_reason ?? '',
+        effect: Number(r.held_effect),
+        kept: r.kept_json ? decodeKept(r.kept_json) : null,
+    };
+}
+/**
+ * Lift the hold on a local op: reverse its ledger effect, clear `held` in
+ * its row meta, and clear the hold (what it kept stays, for a later apply).
+ *
+ * @param db - The store, inside the frame.
+ * @param txn - The local transaction.
+ * @param idx - The op's index.
+ */
+export function unholdOp(db, txn, idx) {
+    const h = heldOp(db, txn, idx);
+    if (!h)
+        return;
+    adjustLedger(db, h.tbl, -h.effect, -h.effect);
+    const meta = readRowMetaFull(db, h.tbl, h.uid);
+    if (meta?.held)
+        restoreRowMeta(db, h.tbl, h.uid, { ...meta, held: 0 });
+    db.prepare('UPDATE _sync_row_undo SET held_at = NULL, held_reason = NULL, held_effect = 0 WHERE txn = ? AND idx = ?').run(txn, idx);
+}
+/**
+ * Whether a local transaction has a held op.
+ *
+ * @param db - The store.
+ * @param txn - The local transaction.
+ */
+export function txnHasHold(db, txn) {
+    return (db
+        .prepare('SELECT 1 FROM _sync_row_undo WHERE txn = ? AND held_at IS NOT NULL LIMIT 1')
+        .get(txn) !== undefined);
+}
+/**
+ * Every held op, oldest first (for `cleo sync status` and `cleo doctor`).
+ *
+ * @param db - The store.
+ * @returns The holds, or none when the journal has no row undo.
+ */
+export function listHeldOps(db) {
+    if (!hasTable(db, '_sync_row_undo'))
+        return [];
+    return db
+        .prepare(`SELECT txn, idx, tbl, uid, held_at, held_reason, held_effect, kept_json FROM _sync_row_undo
+          WHERE held_at IS NOT NULL ORDER BY held_at, txn, idx`)
+        .all().map(toHeld);
+}
+/** A hold older than this many days is a long hold `cleo doctor sync-journal` lists (§3.5 Rule 5). */
+export const HELD_WARN_DAYS = 7;
+/**
+ * The store's holds for `cleo cloud status` and `cleo doctor sync-journal`
+ * (§3.5 Rule 5): how many, the oldest, and the long ones with their reason.
+ *
+ * @param db - The store (a read-only snapshot is fine).
+ * @param nowMs - The current time (epoch ms).
+ * @param warnDays - The long-hold age. @defaultValue HELD_WARN_DAYS
+ * @returns The report; empty when the journal has no row undo.
+ */
+export function holdsReport(db, nowMs, warnDays = HELD_WARN_DAYS) {
+    const all = listHeldOps(db);
+    const cutoff = nowMs - warnDays * 86_400_000;
+    return {
+        total: all.length,
+        oldestAt: all[0]?.at ?? null,
+        long: all
+            .filter((h) => Date.parse(h.at) < cutoff)
+            .map((h) => ({
+            txn: h.txn,
+            idx: h.idx,
+            table: h.tbl,
+            uid: h.uid,
+            heldAt: h.at,
+            reason: h.reason,
+        })),
+        warnDays,
+    };
+}
+/**
+ * The held insert into `table` whose sealed values carry `column = value`
+ * (a held row is absent, so `cleo show` finds it here), or null.
+ *
+ * @param db - The store.
+ * @param table - Sync-set table.
+ * @param column - A column of the insert's after-image (for tasks, `id`).
+ * @param value - The value it must carry.
+ * @returns The held insert, or null.
+ */
+export function findHeldInsert(db, table, column, value) {
+    if (!hasTable(db, '_sync_row_undo'))
+        return null;
+    const rows = db
+        .prepare(`SELECT u.txn, u.uid, u.held_at, u.held_reason, o.body FROM _sync_row_undo u
+         JOIN _sync_op o ON o.txn = u.txn AND o.idx = u.idx
+        WHERE u.tbl = ? AND u.held_at IS NOT NULL AND u.held_effect = 1`)
+        .all(table);
+    for (const r of rows) {
+        const op = LedgerOp.parse(JSON.parse(r.body));
+        if (op.a?.[column] !== value)
+            continue;
+        const values = {};
+        for (const [k, v] of Object.entries(op.a ?? {})) {
+            if (typeof v !== 'object' || v === null || !('$inc' in v))
+                values[k] = v;
+        }
+        return {
+            table,
+            uid: r.uid,
+            txn: r.txn,
+            heldAt: r.held_at,
+            reason: r.held_reason ?? '',
+            values,
+        };
+    }
+    return null;
+}
+/**
+ * The held insert of task `id` in this project's store, or null (also when
+ * the store cannot be read: the caller's not-found stands).
+ *
+ * @param id - The task id (`T…`).
+ * @param cwd - The project directory.
+ * @returns The held insert, or null.
+ */
+export async function findHeldTask(id, cwd) {
+    try {
+        const db = getDualScopeNativeDb(await openDualScopeDb('project', cwd));
+        return findHeldInsert(db, 'tasks_tasks', 'id', id);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * `cleo show` of a row a rebase holds (§3.5 Rule 5): not `E_NOT_FOUND`, but
+ * `E_SYNC_HELD`, with the held values and the conflict preview. The insert
+ * is sent and the stream decides it: applied (its parent came back) or
+ * voided with a visible conflict.
+ */
+export class SyncHeldError extends CleoError {
+    /** Stable string error code for envelope `codeName` / log correlation. */
+    codeName = 'E_SYNC_HELD';
+    /** The held insert. */
+    held;
+    /**
+     * @param id - The id the caller asked for.
+     * @param held - The held insert.
+     */
+    constructor(id, held) {
+        super(ExitCode.NOT_FOUND, `${id} is held by a sync rebase: ${held.reason || 'the stream refused its replay'}. It is sent; the stream applies or voids it.`, {
+            fix: `Resolve what blocks it (cleo cloud conflicts), or wait for its echo to be decided`,
+            details: {
+                field: 'id',
+                actual: id,
+                held: { table: held.table, uid: held.uid, txn: held.txn, heldAt: held.heldAt },
+                preview: held.reason,
+                values: held.values,
+            },
+        });
+        this.name = 'SyncHeldError';
+        this.held = held;
+    }
+    /** The LAFS error, coded `E_SYNC_HELD`. */
+    toLAFSError() {
+        return { ...super.toLAFSError(), code: this.codeName };
+    }
+}
+//# sourceMappingURL=held.js.map

package/dist/store/sync/held.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"held.js","sourceRoot":"","sources":["../../../src/store/sync/held.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAwB,MAAM,4BAA4B,CAAC;AAE5E,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE5E,OAAO,EAAoB,eAAe,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAClF,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAyCvC;;;;GAIG;AACH,SAAS,WAAW,CAAC,CAAgB;IACnC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;IACvD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IAC3E,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,WAAW,CAAC,CAAW;IAC9B,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IAC3E,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnC,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAAO,CAA8B,EAAE,CAAc;IACrE,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,0EAA0E;AAC1E,SAAS,UAAU,CAAC,CAAU;IAC5B,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;QACvD,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnC,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC;SACzC,CAAC,CAAC;QACH,OAAO,EAAE,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzC,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC;YACtC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;KACJ,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CASxB,CAAC;IACF,OAAO;QACL,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;QACvD,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;YACvF,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7B,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC;gBACtC,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;aAC5B,CAAC,CAAC;SACJ;KACF,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,SAAS,YAAY,CAAC,EAAgB,EAAE,KAAa,EAAE,IAAY,EAAE,IAAY;IAC/E,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO;IACrC,EAAE,CAAC,OAAO,CAAC,wEAAwE,CAAC,CAAC,GAAG,CACtF,IAAI,EACJ,IAAI,EACJ,KAAK,CACN,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAgB,EAAE,KAAa,EAAE,KAAa;IAC9E,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM,CAAC,EAAgB,EAAE,CAAY;IACnD,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IACjB,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;IAC5D,IAAI,IAAI;QAAE,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/D,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,EAAE,CAAC,OAAO,CACR;gCAC4B,CAC7B,CAAC,GAAG,CACH,CAAC,CAAC,MAAM,EACR,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EACtB,MAAM,EACN,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAClD,CAAC,CAAC,GAAG,EACL,CAAC,CAAC,GAAG,CACN,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,MAAM,CAAC,EAAgB,EAAE,GAAW,EAAE,GAAW;IAC/D,MAAM,CAAC,GAAG,EAAE;SACT,OAAO,CACN;0DACoD,CACrD;SACA,GAAG,CAAC,GAAG,EAAE,GAAG,CAAwB,CAAC;IACxC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9B,CAAC;AAaD,SAAS,MAAM,CAAC,CAAU;IACxB,OAAO;QACL,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;QAClB,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,EAAE,EAAE,CAAC,CAAC,OAAO;QACb,MAAM,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;QAC7B,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;KACnD,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,EAAgB,EAAE,GAAW,EAAE,GAAW;IACjE,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC;QAAE,OAAO;IACf,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,eAAe,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,IAAI,EAAE,IAAI;QAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IACvE,EAAE,CAAC,OAAO,CACR,yGAAyG,CAC1G,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,EAAgB,EAAE,GAAW;IACtD,OAAO,CACL,EAAE;SACC,OAAO,CAAC,4EAA4E,CAAC;SACrF,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS,CAC1B,CAAC;AACJ,CAAC;AAcD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,EAAgB;IAC1C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,gBAAgB,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/C,OACE,EAAE;SACC,OAAO,CACN;+DACuD,CACxD;SACA,GAAG,EACP,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAChB,CAAC;AAED,sGAAsG;AACtG,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAuBhC;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CACzB,EAAgB,EAChB,KAAa,EACb,QAAQ,GAAG,cAAc;IAEzB,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC7C,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,MAAM;QACjB,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI;QAC5B,IAAI,EAAE,GAAG;aACN,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;aACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,KAAK,EAAE,CAAC,CAAC,GAAG;YACZ,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,MAAM,EAAE,CAAC,CAAC,EAAE;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC,CAAC;QACL,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAC5B,EAAgB,EAChB,KAAa,EACb,MAAc,EACd,KAAa;IAEb,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN;;wEAEkE,CACnE;SACA,GAAG,CAAC,KAAK,CAMV,CAAC;IACH,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK;YAAE,SAAS;QACvC,MAAM,MAAM,GAAoC,EAAE,CAAC;QACnD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAChD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAoB,CAAC;QAC9F,CAAC;QACD,OAAO;YACL,KAAK;YACL,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,MAAM,EAAE,CAAC,CAAC,OAAO;YACjB,MAAM,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE;YAC3B,MAAM;SACP,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAU,EAAE,GAAY;IACzD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,oBAAoB,CAAC,MAAM,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;QACvE,OAAO,cAAc,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,aAAc,SAAQ,SAAS;IAC1C,0EAA0E;IACjE,QAAQ,GAAG,aAAsB,CAAC;IAC3C,uBAAuB;IACd,IAAI,CAAa;IAE1B;;;OAGG;IACH,YAAY,EAAU,EAAE,IAAgB;QACtC,KAAK,CACH,QAAQ,CAAC,SAAS,EAClB,GAAG,EAAE,8BAA8B,IAAI,CAAC,MAAM,IAAI,+BAA+B,+CAA+C,EAChI;YACE,GAAG,EAAE,mFAAmF;YACxF,OAAO,EAAE;gBACP,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,EAAE;gBACV,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;gBAC9E,OAAO,EAAE,IAAI,CAAC,MAAM;gBACpB,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB;SACF,CACF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,2CAA2C;IAClC,WAAW;QAClB,OAAO,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzD,CAAC;CACF"}

package/dist/store/sync/identity-fill.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity-fill.d.ts","sourceRoot":"","sources":["../../../src/store/sync/identity-fill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAgB,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAW7F,iDAAiD;AACjD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACzC,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3B,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C;AAED,kDAAkD;AAClD,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAelF;AAED;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAC5C,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,UAAU,EACjB,OAAO,GAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAM,GACrD,wBAAwB,CAc1B"}
+{"version":3,"file":"identity-fill.d.ts","sourceRoot":"","sources":["../../../src/store/sync/identity-fill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EACL,kBAAkB,EAElB,KAAK,gBAAgB,EAEtB,MAAM,oBAAoB,CAAC;AAY5B,iDAAiD;AACjD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACzC,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3B,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C;AAED,kDAAkD;AAClD,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAelF;AAED;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAC5C,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,UAAU,EACjB,OAAO,GAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAM,GACrD,wBAAwB,CAkB1B"}

package/dist/store/sync/identity-fill.js

@@ -19,9 +19,10 @@
  * @module store/sync/identity-fill
  */
 import { getLogger } from '../../logger.js';
-import { prepareRowIdentity, ROW_IDENTITY } from '../row-identity.js';
+import { prepareRowIdentity, ROW_IDENTITY, snapshotIfFullRefillDue, } from '../row-identity.js';
 import { captureRemints, clearCaptureFrame, finishCaptureFrame, openCaptureFrame, } from './capture.js';
 import { readSyncFlags } from './flags.js';
+import { refreshPendingBirthFps } from './remap.js';
 import { hasTable } from './schema.js';
 import { markSuspect, touchSet, withSyncTriggersSuspended } from './structural.js';
 /** The tables a fill report says were written. */
@@ -60,7 +61,10 @@ export function prepareRowIdentityUnderCapture(db, scope, options = {}) {
         return { report: prepareRowIdentity(db, scope, options), suspect: [], remints: {} };
     }
     try {
-        return bracketedFill(db, scope, options);
+        // T13231: a full from-scratch refill needs its pre-refill snapshot, and a
+        // VACUUM INTO cannot run inside the bracket's transaction: take it first.
+        const refillSnapshot = options.refillSnapshot ?? snapshotIfFullRefillDue(db, scope, options.share);
+        return bracketedFill(db, scope, { ...options, refillSnapshot });
     }
     catch (err) {
         getLogger('row-identity').warn({ scope, err: err instanceof Error ? err.message : String(err) }, 'identity fill under capture failed; the store opens without it (T13025)');
@@ -71,6 +75,10 @@ function bracketedFill(db, scope, options) {
     return withSyncTriggersSuspended(db, scope, () => {
         const report = prepareRowIdentity(db, scope, options);
         const suspect = report ? markSuspect(db, scope, touchSet(db, filledTables(scope, report))) : [];
+        // A refill re-derived birth fingerprints: what is still pending follows
+        // the rows (§3.3 G, T12779).
+        if (report?.refill === 'cleared')
+            refreshPendingBirthFps(db, scope);
         const frame = openCaptureFrame(db, 'remint');
         try {
             const remints = captureRemints(db, scope);

package/dist/store/sync/identity-fill.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity-fill.js","sourceRoot":"","sources":["../../../src/store/sync/identity-fill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAyB,MAAM,oBAAoB,CAAC;AAC7F,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAWnF,kDAAkD;AAClD,MAAM,UAAU,YAAY,CAAC,KAAiB,EAAE,MAAwB;IACtE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,MAAwC,EAAE,EAAE;QACvD,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC;IACF,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnB,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC1B,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACvB,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AACtB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,8BAA8B,CAC5C,EAAgB,EAChB,KAAiB,EACjB,UAAoD,EAAE;IAEtD,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;IACnF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,SAAS,CAAC,cAAc,CAAC,CAAC,IAAI,CAC5B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAChE,yEAAyE,CAC1E,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACpD,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,EAAgB,EAChB,KAAiB,EACjB,OAAiD;IAEjD,OAAO,yBAAyB,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC1C,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC9B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACtC,CAAC;gBAAS,CAAC;YACT,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"identity-fill.js","sourceRoot":"","sources":["../../../src/store/sync/identity-fill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,kBAAkB,EAClB,YAAY,EAEZ,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAWnF,kDAAkD;AAClD,MAAM,UAAU,YAAY,CAAC,KAAiB,EAAE,MAAwB;IACtE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,MAAwC,EAAE,EAAE;QACvD,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC;IACF,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnB,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC1B,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACvB,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AACtB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,8BAA8B,CAC5C,EAAgB,EAChB,KAAiB,EACjB,UAAoD,EAAE;IAEtD,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;IACnF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,CAAC;QACH,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,cAAc,GAClB,OAAO,CAAC,cAAc,IAAI,uBAAuB,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9E,OAAO,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,SAAS,CAAC,cAAc,CAAC,CAAC,IAAI,CAC5B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAChE,yEAAyE,CAC1E,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACpD,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,EAAgB,EAChB,KAAiB,EACjB,OAAiD;IAEjD,OAAO,yBAAyB,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,wEAAwE;QACxE,6BAA6B;QAC7B,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS;YAAE,sBAAsB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC1C,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC9B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACtC,CAAC;gBAAS,CAAC;YACT,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/store/sync/inbox.d.ts

@@ -0,0 +1,114 @@
+/**
+ * The receive inbox (T12344; journal spec §3.1, §3.2).
+ *
+ * Every received transaction is staged in `_sync_inbox` in stream order,
+ * keyed by `(stream, seq, txn_idx)`, so a re-pull stages nothing twice. The
+ * applier ({@link stagedTxns} → apply → {@link markTxns}) moves each through
+ * its statuses:
+ *
+ * - `staged`: received, not yet tried;
+ * - `pending`: waits for something it needs (a never-seen row or reference,
+ *   or a pending transaction it depends on); retried on every pass;
+ * - `held-skew`: its HLC is beyond the skew bound; retried, FIFO per replica;
+ * - `applied`, `conflict`, `void`: tried; `conflict` and `void` carry their
+ *   records in `_sync_conflict` and are revivable;
+ * - `refused-schema`: written by a newer schema or format; replayed after an
+ *   upgrade, never skipped.
+ *
+ * A split transaction (`part: [i, n]`) is returned only once all n parts are
+ * staged, as one transaction whose ops are the parts' ops in order (Q18).
+ *
+ * @module store/sync/inbox
+ * @task T12344
+ */
+import type { DatabaseSync } from 'node:sqlite';
+import { LedgerTxn } from '@cleocode/contracts/ledger';
+/** A transaction's apply status in the inbox. */
+export type InboxStatus = 'staged' | 'pending' | 'applied' | 'void' | 'conflict' | 'held-skew' | 'refused-schema';
+/** The statuses the applier tries again. */
+export declare const OPEN_INBOX_STATUSES: readonly InboxStatus[];
+/** One staged row's position in the stream. */
+export interface InboxKey {
+    readonly stream: string;
+    readonly seq: number;
+    readonly txnIdx: number;
+}
+/** One verified segment's transactions, as the receiver stages them. */
+export interface InboxSegment {
+    /** The segment's stream sequence number. */
+    readonly seq: number;
+    readonly replicaId: string;
+    /** The origin replica's gap-free segment number. */
+    readonly replicaSeq: number;
+    readonly deviceId: string;
+    /** The segment's `schemaVersion` (§2.9). */
+    readonly schemaVersion: number;
+    /** The decoded transactions, in segment order (secrets still inner-sealed). */
+    readonly txns: readonly LedgerTxn[];
+}
+/** One transaction the applier may try, its parts joined. */
+export interface StagedTxn {
+    /** Position of its first part. */
+    readonly key: InboxKey;
+    /** Every part's position, in part order (one entry when not split). */
+    readonly parts: readonly InboxKey[];
+    readonly replicaId: string;
+    readonly replicaSeq: number;
+    readonly deviceId: string;
+    readonly schemaVersion: number;
+    /** The status it was staged under: `staged`, `pending` or `held-skew`. */
+    readonly status: InboxStatus;
+    /** The transaction, ops of every part in order, `hlc` the largest. */
+    readonly txn: LedgerTxn;
+}
+/**
+ * Stage a verified segment's transactions. Rows already staged (same
+ * stream, seq, index) are left alone, so a re-pull is idempotent.
+ *
+ * Exactly-once beyond the inbox's own rows is the receiver's: it stages only
+ * segments past its persisted `_sync_cursor` and advances the cursor in the
+ * same transaction (§3.1 step 3), so a segment whose applied rows were
+ * pruned after a verified checkpoint is never staged again. Counter deltas
+ * rely on it.
+ *
+ * @param db - The store (the journal schema applied); opens its own
+ *   transaction unless the caller holds one.
+ * @param stream - The stream id.
+ * @param segment - The segment and its decoded transactions.
+ * @param nowIso - The staging time.
+ * @returns How many transactions were newly staged.
+ */
+export declare function stageTxns(db: DatabaseSync, stream: string, segment: InboxSegment, nowIso: string): number;
+/**
+ * The transactions the applier may try, in `(seq, txn_idx)` order: every
+ * `staged`, `pending` and `held-skew` row, a split transaction once all of
+ * its parts are staged.
+ *
+ * @param db - The store.
+ * @param stream - The stream id.
+ * @param limit - At most this many transactions; 0 for all.
+ * @returns The transactions, parts joined.
+ */
+export declare function stagedTxns(db: DatabaseSync, stream: string, limit?: number): StagedTxn[];
+/**
+ * Set the status of a transaction's rows (every part of it).
+ *
+ * @param db - The store, inside the applier's transaction (or its own).
+ * @param keys - The transaction's parts.
+ * @param status - The new status.
+ * @param opts - The apply frame, a reason, and the time (`applied_at` for a tried status).
+ */
+export declare function markTxns(db: DatabaseSync, keys: readonly InboxKey[], status: InboxStatus, opts: {
+    readonly frame?: string | null;
+    readonly reason?: string | null;
+    readonly nowIso: string;
+}): void;
+/**
+ * Inbox rows per status for a stream (doctor and tests).
+ *
+ * @param db - The store.
+ * @param stream - The stream id.
+ * @returns Status → row count; absent statuses omitted.
+ */
+export declare function inboxCounts(db: DatabaseSync, stream: string): Partial<Record<InboxStatus, number>>;
+//# sourceMappingURL=inbox.d.ts.map

package/dist/store/sync/inbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox.d.ts","sourceRoot":"","sources":["../../../src/store/sync/inbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAsB,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAI3E,iDAAiD;AACjD,MAAM,MAAM,WAAW,GACnB,QAAQ,GACR,SAAS,GACT,SAAS,GACT,MAAM,GACN,UAAU,GACV,WAAW,GACX,gBAAgB,CAAC;AAErB,4CAA4C;AAC5C,eAAO,MAAM,mBAAmB,EAAE,SAAS,WAAW,EAAuC,CAAC;AAE9F,+CAA+C;AAC/C,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,wEAAwE;AACxE,MAAM,WAAW,YAAY;IAC3B,4CAA4C;IAC5C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,oDAAoD;IACpD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,4CAA4C;IAC5C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,SAAS,SAAS,EAAE,CAAC;CACrC;AAED,6DAA6D;AAC7D,MAAM,WAAW,SAAS;IACxB,kCAAkC;IAClC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;IACvB,uEAAuE;IACvE,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,sEAAsE;IACtE,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;CACzB;AAcD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,SAAS,CACvB,EAAE,EAAE,YAAY,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,MAAM,GACb,MAAM,CA2BR;AAyCD;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,SAAS,EAAE,CA+EnF;AAED;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CACtB,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE,SAAS,QAAQ,EAAE,EACzB,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE;IACJ,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GACA,IAAI,CAiBN;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,EAAE,EAAE,YAAY,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAOtC"}