@cleocode/core 2026.10.6 → 2026.10.7-rc.ci.674

package/dist/store/sync/pull.d.ts

@@ -0,0 +1,192 @@
+/**
+ * Pull one stream's journal into the store (journal spec §3.1 "Receive",
+ * §2.9; T12343 S5-1).
+ *
+ * {@link pullStream} pages through the stream after the store's persisted
+ * `_sync_cursor` (the journal client verifies order, gaps, the replica-to-
+ * device pin, trust, hashes and decryption before anything is returned),
+ * and for each segment, in ONE local transaction per page:
+ * - decodes it: `deflate-raw(canonical JSON of LedgerTxn[])`, parsed with
+ *   the ledger schema; a vault delta segment (`cleo-vault-delta/v1`, a count
+ *   correction a vault push appended before the stream's genesis) carries no
+ *   ops and is passed over;
+ * - checks every transaction's signature against the segment's device key
+ *   (§2.8); one bad signature refuses the segment, and the pull stops there:
+ *   the segments before it are staged and applied, the segment and what
+ *   follows are not;
+ * - skips every transaction id already staged from this stream
+ *   (`_sync_seen_txn`): a re-delivered transaction is never staged twice, so
+ *   a counter delta is never applied twice;
+ * - refuses a transaction at or below its origin's floor that has no seen
+ *   row (`_sync_seen_floor`, T13318): an origin's transactions are first
+ *   delivered in `local_seq` order, so such a transaction was either pruned
+ *   from the seen ledger or arrived out of order; the pull stops there, loud,
+ *   and never skips it as seen;
+ * - stages the rest (`stageTxns`), schema-ahead ones included (the applier
+ *   holds them `refused-schema` and replays them after an upgrade);
+ * - advances the cursor.
+ *
+ * Then the applier applies what is staged, in stream order, own echoes
+ * included (they feed the fast path and the scoped rebase, §3.5).
+ *
+ * The page source is a port ({@link SegmentPuller}): the journal client in
+ * production (`cloud/nexus-vault.ts`), a fake in tests.
+ *
+ * @task T12343
+ * @module store/sync/pull
+ */
+import type { DatabaseSync } from 'node:sqlite';
+import type { TableScope } from '@cleocode/contracts';
+import { LedgerTxn } from '@cleocode/contracts/ledger';
+import { type ApplyReport, type ApplyStagedOptions } from './apply/applier.js';
+/** Where a pull stands (the journal client's `PullCursor`). */
+export interface StreamCursor {
+    /** The last stream seq staged. */
+    readonly after: number;
+    /** Whether `replicas` lists every replica with a segment at or below `after`. */
+    readonly knowsAllReplicas: boolean;
+    /** Per replica: the device pinned to it and its last replicaSeq staged. */
+    readonly replicas: Readonly<Record<string, {
+        readonly deviceId: string;
+        readonly replicaSeq: number;
+    }>>;
+}
+/** One verified, decrypted segment, as the journal client returns it. */
+export interface PulledStreamSegment {
+    readonly seq: number;
+    readonly replicaId: string;
+    readonly replicaSeq: number;
+    readonly deviceId: string;
+    readonly plaintext: Uint8Array;
+    readonly schemaVersion: number;
+}
+/** Pulls the next verified page after `cursor`. */
+export type SegmentPuller = (cursor: StreamCursor) => Promise<{
+    readonly segments: readonly PulledStreamSegment[];
+    readonly cursor: StreamCursor;
+    readonly head: number;
+}>;
+/** The index of a segment's first transaction its device did not sign, or null when every one is signed. */
+export type TxnVerifier = (deviceId: string, txns: readonly LedgerTxn[]) => number | null;
+/** The plaintext kind of a vault count-delta segment (`cloud/nexus-vault.ts`). */
+export declare const VAULT_DELTA_KIND = "cleo-vault-delta/v1";
+/** Options for {@link pullStream}. */
+export interface PullStreamOptions {
+    readonly scope: TableScope;
+    readonly stream: string;
+    /** This store's bound replica (own echoes are recognised by it). */
+    readonly replica: string;
+    readonly pull: SegmentPuller;
+    readonly verify: TxnVerifier;
+    /** The cursor to start from when the store has none persisted (the checkpoint it was cut from or restored). */
+    readonly initialCursor: StreamCursor;
+    /** Wall clock. @defaultValue Date.now */
+    readonly now?: () => number;
+    /** Seals pending local captures before a rebase (the applier's `seal`). */
+    readonly seal: ApplyStagedOptions['seal'];
+    /** Applier options passed through (pages, budget). */
+    readonly apply?: Partial<Pick<ApplyStagedOptions, 'pageOps' | 'pageMs' | 'undoBudgetBytes'>>;
+    /** Environment for the `sync.pull` kill switch. @defaultValue process.env */
+    readonly env?: NodeJS.ProcessEnv;
+    /**
+     * After staging, drop each origin's seen-txn rows below its staged floor
+     * ({@link pruneSeenTxns}, T13318). A pruned transaction delivered again is
+     * refused (`below-floor`), never applied twice. @defaultValue false
+     */
+    readonly pruneSeen?: boolean;
+}
+/**
+ * Why {@link pullStream} stopped short, as a kind callers branch on (the
+ * message in `refused` is for people and may be reworded):
+ * - `pull-off`: `sync.pull` is off, nothing was pulled;
+ * - `segment`: a segment is malformed, carries a transaction its device did
+ *   not sign, or a transaction that is not its replica's;
+ * - `below-floor`: a segment carries a transaction at or below its origin's
+ *   staged floor with no seen row: pruned from the seen ledger, or delivered
+ *   out of `local_seq` order (T13318).
+ */
+export type PullRefusal = 'pull-off' | 'segment' | 'below-floor';
+/** What {@link pullStream} did. */
+export interface PullStreamReport {
+    readonly stream: string;
+    /**
+     * Why the pull stopped short, or null: `sync.pull` off (nothing pulled), or
+     * a refused segment (a malformed body or a transaction its device did not
+     * sign), naming its seq, replica and device. Everything before a refused
+     * segment was staged and applied, and the cursor stops just before it.
+     */
+    readonly refused: string | null;
+    /** The kind of `refused` ({@link PullRefusal}), or null when nothing was refused. */
+    readonly refusedKind: PullRefusal | null;
+    /** Segments received, vault deltas passed over, transactions staged, re-deliveries skipped. */
+    readonly segments: number;
+    readonly vaultDeltas: number;
+    readonly staged: number;
+    readonly redelivered: number;
+    /** The stream position the store has staged up to, and the server's head. */
+    readonly after: number;
+    readonly head: number;
+    /** What the applier did, or null when the pull was refused. */
+    readonly apply: ApplyReport | null;
+}
+/** A segment the store refuses to stage (a malformed body or a bad transaction signature). */
+export declare class SegmentRefusedError extends Error {
+    readonly code = "E_SYNC_SEGMENT_REFUSED";
+}
+/** The store's persisted cursor for `stream`, or null. */
+export declare function readStreamCursor(db: DatabaseSync, stream: string): StreamCursor | null;
+/**
+ * Persist the store's pull position for `stream`, in the caller's
+ * transaction (the pull's page, or a JOIN seeding it from the checkpoint it
+ * restored).
+ *
+ * @param db - The store.
+ * @param stream - The stream.
+ * @param cursor - The position.
+ * @param nowIso - The time.
+ */
+export declare function writeStreamCursor(db: DatabaseSync, stream: string, cursor: StreamCursor, nowIso: string): void;
+/**
+ * The size of `_sync_seen_txn` (T13317), for `cleo cloud status`: rows per
+ * stream and the estimated payload bytes (stream and txn text plus the seq
+ * integer, without SQLite's page overhead). Read-only, and O(origins): it
+ * sums the per-origin counts `_sync_seen_floor` keeps with every insert and
+ * prune (T13318), never the ledger itself.
+ *
+ * @param db - The store.
+ * @returns Zeroes when the tables are not installed; the ledger walked when
+ *   only the floor table is missing.
+ */
+export declare function seenTxnReport(db: DatabaseSync): {
+    rows: number;
+    bytes: number;
+    byStream: Record<string, number>;
+};
+/**
+ * Drop each origin's seen-txn rows of `stream` below its staged floor,
+ * keeping `_sync_seen_txn` bounded (§3.1, T13318), and record how far each
+ * origin was pruned (`pruned_upto`). Safe because an origin's transactions
+ * are first delivered in `local_seq` order and the pull refuses any
+ * transaction at or below the floor that has no seen row (`below-floor`):
+ * a pruned transaction delivered again is refused loudly, never applied
+ * twice. The row at the floor itself is kept, so re-delivery of the latest
+ * transaction is still skipped quietly.
+ *
+ * @param db - The store, outside a transaction.
+ * @param stream - The stream.
+ * @returns How many rows were dropped.
+ */
+export declare function pruneSeenTxns(db: DatabaseSync, stream: string): number;
+/**
+ * Pull and stage a stream's new segments, then apply (module docs). Must run
+ * outside a transaction. A refused segment stops the pull: everything
+ * before it is staged and applied, the cursor stops just before it, and the
+ * report's `refused` names it (T13307), so the next pull reaches it again
+ * without re-staging anything.
+ *
+ * @param db - The store.
+ * @param o - {@link PullStreamOptions}.
+ * @returns What was received, staged and applied.
+ */
+export declare function pullStream(db: DatabaseSync, o: PullStreamOptions): Promise<PullStreamReport>;
+//# sourceMappingURL=pull.d.ts.map

package/dist/store/sync/pull.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pull.d.ts","sourceRoot":"","sources":["../../../src/store/sync/pull.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,kBAAkB,EAAmB,MAAM,oBAAoB,CAAC;AAMhG,+DAA+D;AAC/D,MAAM,WAAW,YAAY;IAC3B,kCAAkC;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,iFAAiF;IACjF,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CACzB,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAC3E,CAAC;CACH;AAED,yEAAyE;AACzE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,mDAAmD;AACnD,MAAM,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC;IAC5D,QAAQ,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC,CAAC;AAEH,4GAA4G;AAC5G,MAAM,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,SAAS,EAAE,KAAK,MAAM,GAAG,IAAI,CAAC;AAE1F,kFAAkF;AAClF,eAAO,MAAM,gBAAgB,wBAAwB,CAAC;AAEtD,sCAAsC;AACtC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,+GAA+G;IAC/G,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC;IACrC,yCAAyC;IACzC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC1C,sDAAsD;IACtD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,SAAS,GAAG,QAAQ,GAAG,iBAAiB,CAAC,CAAC,CAAC;IAC7F,6EAA6E;IAC7E,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,CAAC;AAEjE,mCAAmC;AACnC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,qFAAqF;IACrF,QAAQ,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IACzC,+FAA+F;IAC/F,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;CACpC;AAED,8FAA8F;AAC9F,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,4BAA4B;CAC1C;AAED,0DAA0D;AAC1D,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAMtF;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,YAAY,EAChB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,MAAM,GACb,IAAI,CAKN;AAsMD;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,YAAY,GAAG;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC,CAgBA;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAwCtE;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,UAAU,CAC9B,EAAE,EAAE,YAAY,EAChB,CAAC,EAAE,iBAAiB,GACnB,OAAO,CAAC,gBAAgB,CAAC,CAqH3B"}

package/dist/store/sync/pull.js

@@ -0,0 +1,429 @@
+/**
+ * Pull one stream's journal into the store (journal spec §3.1 "Receive",
+ * §2.9; T12343 S5-1).
+ *
+ * {@link pullStream} pages through the stream after the store's persisted
+ * `_sync_cursor` (the journal client verifies order, gaps, the replica-to-
+ * device pin, trust, hashes and decryption before anything is returned),
+ * and for each segment, in ONE local transaction per page:
+ * - decodes it: `deflate-raw(canonical JSON of LedgerTxn[])`, parsed with
+ *   the ledger schema; a vault delta segment (`cleo-vault-delta/v1`, a count
+ *   correction a vault push appended before the stream's genesis) carries no
+ *   ops and is passed over;
+ * - checks every transaction's signature against the segment's device key
+ *   (§2.8); one bad signature refuses the segment, and the pull stops there:
+ *   the segments before it are staged and applied, the segment and what
+ *   follows are not;
+ * - skips every transaction id already staged from this stream
+ *   (`_sync_seen_txn`): a re-delivered transaction is never staged twice, so
+ *   a counter delta is never applied twice;
+ * - refuses a transaction at or below its origin's floor that has no seen
+ *   row (`_sync_seen_floor`, T13318): an origin's transactions are first
+ *   delivered in `local_seq` order, so such a transaction was either pruned
+ *   from the seen ledger or arrived out of order; the pull stops there, loud,
+ *   and never skips it as seen;
+ * - stages the rest (`stageTxns`), schema-ahead ones included (the applier
+ *   holds them `refused-schema` and replays them after an upgrade);
+ * - advances the cursor.
+ *
+ * Then the applier applies what is staged, in stream order, own echoes
+ * included (they feed the fast path and the scoped rebase, §3.5).
+ *
+ * The page source is a port ({@link SegmentPuller}): the journal client in
+ * production (`cloud/nexus-vault.ts`), a fake in tests.
+ *
+ * @task T12343
+ * @module store/sync/pull
+ */
+import { inflateRawSync } from 'node:zlib';
+import { LedgerTxn } from '@cleocode/contracts/ledger';
+import { applyStagedTxns } from './apply/applier.js';
+import { withImmediateTransaction } from './clock-store.js';
+import { isSyncFlagOn } from './flags.js';
+import { stageTxns } from './inbox.js';
+import { ensureSyncSchema, hasTable, healSyncSchema } from './schema.js';
+/** The plaintext kind of a vault count-delta segment (`cloud/nexus-vault.ts`). */
+export const VAULT_DELTA_KIND = 'cleo-vault-delta/v1';
+/** A segment the store refuses to stage (a malformed body or a bad transaction signature). */
+export class SegmentRefusedError extends Error {
+    code = 'E_SYNC_SEGMENT_REFUSED';
+}
+/** The store's persisted cursor for `stream`, or null. */
+export function readStreamCursor(db, stream) {
+    if (!hasTable(db, '_sync_cursor'))
+        return null;
+    const row = db.prepare('SELECT cursor_json FROM _sync_cursor WHERE stream = ?').get(stream);
+    return row ? JSON.parse(row.cursor_json) : null;
+}
+/**
+ * Persist the store's pull position for `stream`, in the caller's
+ * transaction (the pull's page, or a JOIN seeding it from the checkpoint it
+ * restored).
+ *
+ * @param db - The store.
+ * @param stream - The stream.
+ * @param cursor - The position.
+ * @param nowIso - The time.
+ */
+export function writeStreamCursor(db, stream, cursor, nowIso) {
+    db.prepare('INSERT INTO _sync_cursor (stream, cursor_json, updated_at) VALUES (?, ?, ?) ' +
+        'ON CONFLICT (stream) DO UPDATE SET cursor_json = excluded.cursor_json, updated_at = excluded.updated_at').run(stream, JSON.stringify(cursor), nowIso);
+}
+/** Decode a segment's transactions, or `null` for a vault delta segment. */
+function decode(seg) {
+    let text;
+    try {
+        text = inflateRawSync(seg.plaintext).toString('utf8');
+    }
+    catch {
+        // Not deflated: a vault delta segment is plain JSON.
+        try {
+            const raw = JSON.parse(Buffer.from(seg.plaintext).toString('utf8'));
+            if (typeof raw === 'object' &&
+                raw !== null &&
+                'kind' in raw &&
+                raw.kind === VAULT_DELTA_KIND) {
+                return null;
+            }
+        }
+        catch {
+            // fall through to the refusal
+        }
+        // @sync-invariant none:input-shape a segment body that is neither a ledger segment nor a vault delta is never staged
+        throw new SegmentRefusedError(`segment ${seg.seq} of replica ${seg.replicaId}: not a ledger segment`);
+    }
+    const parsed = LedgerTxn.array().safeParse(JSON.parse(text));
+    if (!parsed.success) {
+        // @sync-invariant none:input-shape a ledger segment that does not parse is never staged
+        throw new SegmentRefusedError(`segment ${seg.seq} of replica ${seg.replicaId}: transactions do not parse`);
+    }
+    return parsed.data;
+}
+/** A segment's transactions (null for a vault delta), or why it is refused. */
+function refusalOf(seg, verify) {
+    let txns;
+    try {
+        txns = decode(seg);
+    }
+    catch (err) {
+        if (err instanceof SegmentRefusedError)
+            return err.message;
+        throw err;
+    }
+    if (txns !== null) {
+        const bad = verify(seg.deviceId, txns);
+        if (bad !== null) {
+            return `segment ${seg.seq} of replica ${seg.replicaId}: transaction ${bad} is not signed by device ${seg.deviceId}`;
+        }
+        // A replica packs only its own transactions (`buildSegment`); the floor
+        // is kept per origin, so a foreign id is refused, never staged.
+        const foreign = txns.find((t) => localSeqOf(t.txn, seg.replicaId) === null);
+        if (foreign !== undefined) {
+            return `segment ${seg.seq} of replica ${seg.replicaId}: transaction ${foreign.txn} is not one of its transactions`;
+        }
+    }
+    return { txns };
+}
+/**
+ * The `local_seq` of `txn` when it is `replica`'s (`<replica>:<local_seq>`,
+ * minted by the sealer from 1), else null.
+ */
+function localSeqOf(txn, replica) {
+    const prefix = `${replica}:`;
+    if (!txn.startsWith(prefix))
+        return null;
+    const rest = txn.slice(prefix.length);
+    if (!/^[1-9][0-9]*$/.test(rest))
+        return null;
+    const n = Number(rest);
+    return Number.isSafeInteger(n) ? n : null;
+}
+function readFloor(db, stream, origin) {
+    const row = db
+        .prepare('SELECT staged_upto, pruned_upto FROM _sync_seen_floor WHERE stream = ? AND origin = ?')
+        .get(stream, origin);
+    return row
+        ? { stagedUpto: Number(row.staged_upto), prunedUpto: Number(row.pruned_upto) }
+        : { stagedUpto: 0, prunedUpto: 0 };
+}
+/**
+ * Split a verified segment's transactions into re-deliveries (a seen row
+ * exists) and fresh ones, against the origin's floor (T13318). Read-only. A
+ * transaction with no seen row at or below the floor refuses the whole
+ * segment: its seen row was pruned, or it arrived out of `local_seq` order,
+ * and either way skipping it as seen could lose it.
+ */
+function planFresh(db, stream, seg, txns) {
+    const floor = readFloor(db, stream, seg.replicaId);
+    const isSeen = db.prepare('SELECT 1 FROM _sync_seen_txn WHERE stream = ? AND txn = ?');
+    const inSegment = new Set();
+    const fresh = [];
+    let redelivered = 0;
+    let upto = floor.stagedUpto;
+    for (const t of txns) {
+        if (inSegment.has(t.txn) || isSeen.get(stream, t.txn) !== undefined) {
+            redelivered += 1;
+            continue;
+        }
+        // refusalOf proved every id is the segment replica's.
+        const seq = localSeqOf(t.txn, seg.replicaId) ?? 0;
+        if (seq <= upto) {
+            const why = seq <= floor.prunedUpto
+                ? `its seen row was pruned (pruned_upto ${floor.prunedUpto})`
+                : 'it arrived out of local_seq order';
+            return {
+                refused: `segment ${seg.seq} of replica ${seg.replicaId}: transaction ${t.txn} is at or below the origin's staged floor ${upto} on ${stream} with no seen row: ${why}; it is not staged`,
+            };
+        }
+        inSegment.add(t.txn);
+        fresh.push(t);
+        upto = seq;
+    }
+    return { fresh, redelivered, stagedUpto: upto };
+}
+/** `cursor` advanced over `segs` (a page cut short by a refused segment). */
+function advance(cursor, segs) {
+    const replicas = { ...cursor.replicas };
+    for (const s of segs)
+        replicas[s.replicaId] = { deviceId: s.deviceId, replicaSeq: s.replicaSeq };
+    return {
+        after: segs.at(-1)?.seq ?? cursor.after,
+        knowsAllReplicas: cursor.knowsAllReplicas,
+        replicas,
+    };
+}
+/** Bytes counted for a seen-txn row's `seq` integer. */
+const SEEN_SEQ_BYTES = 8;
+/** Estimated payload bytes of one seen-txn row (stream and txn text plus the seq integer). */
+const seenBytes = (stream, txn) => Buffer.byteLength(stream, 'utf8') + Buffer.byteLength(txn, 'utf8') + SEEN_SEQ_BYTES;
+/**
+ * Install the floor table before a pull: a store whose journal predates it
+ * gains it, and a store whose journal records the folder but lost the table
+ * gets it re-created (§2.3a rule 9), its counts re-seeded from the seen rows.
+ *
+ * @param db - The store, outside a transaction.
+ */
+function ensureSeenFloor(db) {
+    if (hasTable(db, '_sync_seen_floor'))
+        return;
+    ensureSyncSchema(db);
+    healSyncSchema(db, ['_sync_seen_floor']);
+}
+/**
+ * {@link seenTxnReport} for a store with seen rows but no floor table yet
+ * (its next pull installs it): the ledger walked once, O(rows).
+ */
+function seenLedgerWalk(db) {
+    const byStream = {};
+    let rows = 0;
+    let bytes = 0;
+    if (!hasTable(db, '_sync_seen_txn'))
+        return { rows, bytes, byStream };
+    for (const r of db
+        .prepare(`SELECT stream, count(*) AS n, sum(octet_length(stream) + octet_length(txn) + ${SEEN_SEQ_BYTES}) AS b
+         FROM _sync_seen_txn GROUP BY stream ORDER BY stream`)
+        .all()) {
+        byStream[r.stream] = Number(r.n);
+        rows += Number(r.n);
+        bytes += Number(r.b ?? 0);
+    }
+    return { rows, bytes, byStream };
+}
+/**
+ * The size of `_sync_seen_txn` (T13317), for `cleo cloud status`: rows per
+ * stream and the estimated payload bytes (stream and txn text plus the seq
+ * integer, without SQLite's page overhead). Read-only, and O(origins): it
+ * sums the per-origin counts `_sync_seen_floor` keeps with every insert and
+ * prune (T13318), never the ledger itself.
+ *
+ * @param db - The store.
+ * @returns Zeroes when the tables are not installed; the ledger walked when
+ *   only the floor table is missing.
+ */
+export function seenTxnReport(db) {
+    if (!hasTable(db, '_sync_seen_floor'))
+        return seenLedgerWalk(db);
+    const byStream = {};
+    let rows = 0;
+    let bytes = 0;
+    for (const r of db
+        .prepare(`SELECT stream, sum(seen_rows) AS n, sum(seen_bytes) AS b
+         FROM _sync_seen_floor GROUP BY stream HAVING sum(seen_rows) > 0 ORDER BY stream`)
+        .all()) {
+        byStream[r.stream] = Number(r.n);
+        rows += Number(r.n);
+        bytes += Number(r.b ?? 0);
+    }
+    return { rows, bytes, byStream };
+}
+/**
+ * Drop each origin's seen-txn rows of `stream` below its staged floor,
+ * keeping `_sync_seen_txn` bounded (§3.1, T13318), and record how far each
+ * origin was pruned (`pruned_upto`). Safe because an origin's transactions
+ * are first delivered in `local_seq` order and the pull refuses any
+ * transaction at or below the floor that has no seen row (`below-floor`):
+ * a pruned transaction delivered again is refused loudly, never applied
+ * twice. The row at the floor itself is kept, so re-delivery of the latest
+ * transaction is still skipped quietly.
+ *
+ * @param db - The store, outside a transaction.
+ * @param stream - The stream.
+ * @returns How many rows were dropped.
+ */
+export function pruneSeenTxns(db, stream) {
+    if (!hasTable(db, '_sync_seen_floor'))
+        return 0;
+    return withImmediateTransaction(db, () => {
+        const floors = db
+            .prepare('SELECT origin, staged_upto FROM _sync_seen_floor WHERE stream = ? AND staged_upto - 1 > pruned_upto')
+            .all(stream);
+        // The origin's ids sort between '<origin>:' and '<origin>;' (':' + 1),
+        // a range of the (stream, txn) primary key.
+        const rowsOf = db.prepare(`SELECT txn FROM _sync_seen_txn
+        WHERE stream = ? AND txn >= ? AND txn < ? AND CAST(substr(txn, ?) AS INTEGER) <= ?`);
+        const drop = db.prepare('DELETE FROM _sync_seen_txn WHERE stream = ? AND txn = ?');
+        const mark = db.prepare(`UPDATE _sync_seen_floor
+          SET pruned_upto = ?, seen_rows = max(seen_rows - ?, 0), seen_bytes = max(seen_bytes - ?, 0)
+        WHERE stream = ? AND origin = ?`);
+        let dropped = 0;
+        for (const f of floors) {
+            const upto = Number(f.staged_upto) - 1;
+            const victims = rowsOf.all(stream, `${f.origin}:`, `${f.origin};`, f.origin.length + 2, upto);
+            let bytes = 0;
+            for (const v of victims) {
+                drop.run(stream, v.txn);
+                bytes += seenBytes(stream, v.txn);
+            }
+            mark.run(upto, victims.length, bytes, stream, f.origin);
+            dropped += victims.length;
+        }
+        return dropped;
+    });
+}
+/**
+ * Pull and stage a stream's new segments, then apply (module docs). Must run
+ * outside a transaction. A refused segment stops the pull: everything
+ * before it is staged and applied, the cursor stops just before it, and the
+ * report's `refused` names it (T13307), so the next pull reaches it again
+ * without re-staging anything.
+ *
+ * @param db - The store.
+ * @param o - {@link PullStreamOptions}.
+ * @returns What was received, staged and applied.
+ */
+export async function pullStream(db, o) {
+    const now = o.now ?? Date.now;
+    if (!isSyncFlagOn(db, 'sync.pull', o.env ?? process.env)) {
+        return {
+            stream: o.stream,
+            refused: 'sync.pull is off',
+            refusedKind: 'pull-off',
+            segments: 0,
+            vaultDeltas: 0,
+            staged: 0,
+            redelivered: 0,
+            after: readStreamCursor(db, o.stream)?.after ?? o.initialCursor.after,
+            head: 0,
+            apply: null,
+        };
+    }
+    ensureSeenFloor(db);
+    let cursor = readStreamCursor(db, o.stream) ?? o.initialCursor;
+    let segments = 0;
+    let vaultDeltas = 0;
+    let staged = 0;
+    let redelivered = 0;
+    let head = cursor.after;
+    let refused = null;
+    let refusedKind = null;
+    for (;;) {
+        const page = await o.pull(cursor);
+        head = page.head;
+        const nowIso = new Date(now()).toISOString();
+        // Decode and verify the page before writing anything of it, up to the
+        // first segment refused (T13307): what precedes it is staged and applied,
+        // the cursor stops just before it, and the refusal is reported.
+        const decoded = [];
+        for (const seg of page.segments) {
+            const why = refusalOf(seg, o.verify);
+            if (typeof why === 'string') {
+                refused = why;
+                refusedKind = 'segment';
+                break;
+            }
+            decoded.push({ seg, txns: why.txns });
+        }
+        cursor = withImmediateTransaction(db, () => {
+            const seen = db.prepare('INSERT INTO _sync_seen_txn (stream, txn, seq) VALUES (?, ?, ?)');
+            const raise = db.prepare(`INSERT INTO _sync_seen_floor (stream, origin, staged_upto, seen_rows, seen_bytes)
+         VALUES (?, ?, ?, ?, ?)
+         ON CONFLICT (stream, origin) DO UPDATE SET
+           staged_upto = excluded.staged_upto,
+           seen_rows = seen_rows + excluded.seen_rows,
+           seen_bytes = seen_bytes + excluded.seen_bytes`);
+            const done = [];
+            for (const { seg, txns } of decoded) {
+                if (txns !== null) {
+                    const plan = planFresh(db, o.stream, seg, txns);
+                    if ('refused' in plan) {
+                        refused = plan.refused;
+                        refusedKind = 'below-floor';
+                        break;
+                    }
+                    redelivered += plan.redelivered;
+                    if (plan.fresh.length > 0) {
+                        let bytes = 0;
+                        for (const t of plan.fresh) {
+                            seen.run(o.stream, t.txn, seg.seq);
+                            bytes += seenBytes(o.stream, t.txn);
+                        }
+                        raise.run(o.stream, seg.replicaId, plan.stagedUpto, plan.fresh.length, bytes);
+                        staged += stageTxns(db, o.stream, {
+                            seq: seg.seq,
+                            replicaId: seg.replicaId,
+                            replicaSeq: seg.replicaSeq,
+                            deviceId: seg.deviceId,
+                            schemaVersion: seg.schemaVersion,
+                            txns: plan.fresh,
+                        }, nowIso);
+                    }
+                }
+                else {
+                    vaultDeltas += 1;
+                }
+                segments += 1;
+                done.push(seg);
+            }
+            const next = refused === null ? page.cursor : advance(cursor, done);
+            writeStreamCursor(db, o.stream, next, nowIso);
+            return next;
+        });
+        if (refused !== null)
+            break;
+        if (page.segments.length === 0 || cursor.after >= page.head)
+            break;
+    }
+    if (o.pruneSeen === true)
+        pruneSeenTxns(db, o.stream);
+    const apply = applyStagedTxns(db, {
+        scope: o.scope,
+        stream: o.stream,
+        replica: o.replica,
+        now,
+        seal: o.seal,
+        ...(o.apply ?? {}),
+    });
+    return {
+        stream: o.stream,
+        refused,
+        refusedKind,
+        segments,
+        vaultDeltas,
+        staged,
+        redelivered,
+        after: cursor.after,
+        head,
+        apply,
+    };
+}
+//# sourceMappingURL=pull.js.map

package/dist/store/sync/pull.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pull.js","sourceRoot":"","sources":["../../../src/store/sync/pull.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAA6C,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAkCzE,kFAAkF;AAClF,MAAM,CAAC,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAgEtD,8FAA8F;AAC9F,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,IAAI,GAAG,wBAAwB,CAAC;CAC1C;AAED,0DAA0D;AAC1D,MAAM,UAAU,gBAAgB,CAAC,EAAgB,EAAE,MAAc;IAC/D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,uDAAuD,CAAC,CAAC,GAAG,CAAC,MAAM,CAE7E,CAAC;IACd,OAAO,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAkB,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,EAAgB,EAChB,MAAc,EACd,MAAoB,EACpB,MAAc;IAEd,EAAE,CAAC,OAAO,CACR,8EAA8E;QAC5E,yGAAyG,CAC5G,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,4EAA4E;AAC5E,SAAS,MAAM,CAAC,GAAwB;IACtC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;QACrD,IAAI,CAAC;YACH,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7E,IACE,OAAO,GAAG,KAAK,QAAQ;gBACvB,GAAG,KAAK,IAAI;gBACZ,MAAM,IAAI,GAAG;gBACb,GAAG,CAAC,IAAI,KAAK,gBAAgB,EAC7B,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;QACD,qHAAqH;QACrH,MAAM,IAAI,mBAAmB,CAC3B,WAAW,GAAG,CAAC,GAAG,eAAe,GAAG,CAAC,SAAS,wBAAwB,CACvE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,wFAAwF;QACxF,MAAM,IAAI,mBAAmB,CAC3B,WAAW,GAAG,CAAC,GAAG,eAAe,GAAG,CAAC,SAAS,6BAA6B,CAC5E,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,+EAA+E;AAC/E,SAAS,SAAS,CAChB,GAAwB,EACxB,MAAmB;IAEnB,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,mBAAmB;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC;QAC3D,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO,WAAW,GAAG,CAAC,GAAG,eAAe,GAAG,CAAC,SAAS,iBAAiB,GAAG,4BAA4B,GAAG,CAAC,QAAQ,EAAE,CAAC;QACtH,CAAC;QACD,wEAAwE;QACxE,gEAAgE;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC;QAC5E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,WAAW,GAAG,CAAC,GAAG,eAAe,GAAG,CAAC,SAAS,iBAAiB,OAAO,CAAC,GAAG,iCAAiC,CAAC;QACrH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,GAAW,EAAE,OAAe;IAC9C,MAAM,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC;IAC7B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAQD,SAAS,SAAS,CAAC,EAAgB,EAAE,MAAc,EAAE,MAAc;IACjE,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CACN,uFAAuF,CACxF;SACA,GAAG,CAAC,MAAM,EAAE,MAAM,CAA6D,CAAC;IACnF,OAAO,GAAG;QACR,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;QAC9E,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AACvC,CAAC;AAOD;;;;;;GAMG;AACH,SAAS,SAAS,CAChB,EAAgB,EAChB,MAAc,EACd,GAAwB,EACxB,IAA0B;IAE1B,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAAC;IACvF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;YACpE,WAAW,IAAI,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,sDAAsD;QACtD,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;YAChB,MAAM,GAAG,GACP,GAAG,IAAI,KAAK,CAAC,UAAU;gBACrB,CAAC,CAAC,wCAAwC,KAAK,CAAC,UAAU,GAAG;gBAC7D,CAAC,CAAC,mCAAmC,CAAC;YAC1C,OAAO;gBACL,OAAO,EAAE,WAAW,GAAG,CAAC,GAAG,eAAe,GAAG,CAAC,SAAS,iBAAiB,CAAC,CAAC,GAAG,6CAA6C,IAAI,OAAO,MAAM,sBAAsB,GAAG,oBAAoB;aACzL,CAAC;QACJ,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,GAAG,GAAG,CAAC;IACb,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,6EAA6E;AAC7E,SAAS,OAAO,CAAC,MAAoB,EAAE,IAAoC;IACzE,MAAM,QAAQ,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACjG,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,MAAM,CAAC,KAAK;QACvC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,wDAAwD;AACxD,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,8FAA8F;AAC9F,MAAM,SAAS,GAAG,CAAC,MAAc,EAAE,GAAW,EAAU,EAAE,CACxD,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,cAAc,CAAC;AAEtF;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,EAAgB;IACvC,IAAI,QAAQ,CAAC,EAAE,EAAE,kBAAkB,CAAC;QAAE,OAAO;IAC7C,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACrB,cAAc,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,EAAgB;IAKtC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,gBAAgB,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACtE,KAAK,MAAM,CAAC,IAAI,EAAE;SACf,OAAO,CACN,gFAAgF,cAAc;6DACvC,CACxD;SACA,GAAG,EAA4D,EAAE,CAAC;QACnE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpB,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,EAAgB;IAK5C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,kBAAkB,CAAC;QAAE,OAAO,cAAc,CAAC,EAAE,CAAC,CAAC;IACjE,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,EAAE;SACf,OAAO,CACN;yFACmF,CACpF;SACA,GAAG,EAA4D,EAAE,CAAC;QACnE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpB,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAAC,EAAgB,EAAE,MAAc;IAC5D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,kBAAkB,CAAC;QAAE,OAAO,CAAC,CAAC;IAChD,OAAO,wBAAwB,CAAC,EAAE,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG,EAAE;aACd,OAAO,CACN,qGAAqG,CACtG;aACA,GAAG,CAAC,MAAM,CAAmD,CAAC;QACjE,uEAAuE;QACvE,4CAA4C;QAC5C,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACvB;2FACqF,CACtF,CAAC;QACF,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,yDAAyD,CAAC,CAAC;QACnF,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACrB;;wCAEkC,CACnC,CAAC;QACF,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CACxB,MAAM,EACN,GAAG,CAAC,CAAC,MAAM,GAAG,EACd,GAAG,CAAC,CAAC,MAAM,GAAG,EACd,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EACnB,IAAI,CACqB,CAAC;YAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;gBACxB,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YACxD,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;QAC5B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,EAAgB,EAChB,CAAoB;IAEpB,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAC9B,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,OAAO;YACL,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,kBAAkB;YAC3B,WAAW,EAAE,UAAU;YACvB,QAAQ,EAAE,CAAC;YACX,WAAW,EAAE,CAAC;YACd,MAAM,EAAE,CAAC;YACT,WAAW,EAAE,CAAC;YACd,KAAK,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,aAAa,CAAC,KAAK;YACrE,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IACD,eAAe,CAAC,EAAE,CAAC,CAAC;IACpB,IAAI,MAAM,GAAG,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC;IAC/D,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC;IACxB,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,WAAW,GAAuB,IAAI,CAAC;IAC3C,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACjB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7C,sEAAsE;QACtE,0EAA0E;QAC1E,gEAAgE;QAChE,MAAM,OAAO,GAAkE,EAAE,CAAC;QAClF,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,OAAO,GAAG,GAAG,CAAC;gBACd,WAAW,GAAG,SAAS,CAAC;gBACxB,MAAM;YACR,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,GAAG,wBAAwB,CAAC,EAAE,EAAE,GAAG,EAAE;YACzC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,gEAAgE,CAAC,CAAC;YAC1F,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CACtB;;;;;yDAKiD,CAClD,CAAC;YACF,MAAM,IAAI,GAA0B,EAAE,CAAC;YACvC,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;gBACpC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAClB,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;oBAChD,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;wBACtB,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;wBACvB,WAAW,GAAG,aAAa,CAAC;wBAC5B,MAAM;oBACR,CAAC;oBACD,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC;oBAChC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;wBACd,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;4BAC3B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;4BACnC,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;wBACtC,CAAC;wBACD,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;wBAC9E,MAAM,IAAI,SAAS,CACjB,EAAE,EACF,CAAC,CAAC,MAAM,EACR;4BACE,GAAG,EAAE,GAAG,CAAC,GAAG;4BACZ,SAAS,EAAE,GAAG,CAAC,SAAS;4BACxB,UAAU,EAAE,GAAG,CAAC,UAAU;4BAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;4BACtB,aAAa,EAAE,GAAG,CAAC,aAAa;4BAChC,IAAI,EAAE,IAAI,CAAC,KAAK;yBACjB,EACD,MAAM,CACP,CAAC;oBACJ,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,WAAW,IAAI,CAAC,CAAC;gBACnB,CAAC;gBACD,QAAQ,IAAI,CAAC,CAAC;gBACd,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACpE,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9C,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,OAAO,KAAK,IAAI;YAAE,MAAM;QAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI;YAAE,MAAM;IACrE,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI;QAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,EAAE;QAChC,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,GAAG;QACH,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;KACnB,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,OAAO;QACP,WAAW;QACX,QAAQ;QACR,WAAW;QACX,MAAM;QACN,WAAW;QACX,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI;QACJ,KAAK;KACN,CAAC;AACJ,CAAC"}