@cleocode/core 2026.10.8 → 2026.10.9-rc.ci.676

package/dist/store/sync/rebind.js

@@ -33,9 +33,9 @@
  */
 import { withImmediateTransaction } from './clock-store.js';
 import { reconcileInPlace } from './reconcile.js';
-import { activeReplica, rebindReplicaWith } from './replica.js';
+import { activeReplica, RETIRE_DUE_KEY, rebindReplicaWith, retireDue, } from './replica.js';
 import { queueRetireTxn } from './retire.js';
-import { hasTable } from './schema.js';
+import { GENESIS_CUT_KEY_PREFIX, hasTable } from './schema.js';
 import { FOREIGN_TOUCH_COUNT_KEY, FOREIGN_TOUCH_INCOMPLETE_KEY, UNDO_BUDGET_EXCEEDED_KEY, } from './sequencing.js';
 /**
  * `_sync_meta` key holding the server half of a rebind the store committed
@@ -142,8 +142,7 @@ export function rebindAtHead(db, o) {
             at: nowIso,
         };
         tx.prepare('DELETE FROM _sync_meta WHERE key = ?').run(UNDO_BUDGET_EXCEEDED_KEY);
-        tx.prepare('INSERT INTO _sync_meta (key, value, updated_at) VALUES (?, ?, ?) ' +
-            'ON CONFLICT(key) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at').run(REBIND_PENDING_KEY, JSON.stringify(pending), nowIso);
+        writePendingRebind(tx, pending);
         return { undoDropped, reconcile, pending };
     });
     return {
@@ -155,6 +154,89 @@ export function rebindAtHead(db, o) {
         reconcile: out.result.reconcile,
     };
 }
+/** Record the server half of a committed rebind, in the caller's transaction. */
+function writePendingRebind(db, pending) {
+    db.prepare('INSERT INTO _sync_meta (key, value, updated_at) VALUES (?, ?, ?) ' +
+        'ON CONFLICT(key) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at').run(REBIND_PENDING_KEY, JSON.stringify(pending), pending.at);
+}
+/**
+ * The stream a store announces a retirement on: the one it holds a pushed
+ * high-water, a genesis cut or a pull position for. A store has one stream
+ * (T13303); with several, its genesis cut's stream wins, then the first by
+ * name. Null when the store never joined a stream.
+ */
+function retireStream(db, hwm) {
+    const cut = db
+        .prepare('SELECT key FROM _sync_meta WHERE key >= ? AND key < ? ORDER BY key')
+        .all(GENESIS_CUT_KEY_PREFIX, `${GENESIS_CUT_KEY_PREFIX}\uffff`).map((r) => r.key.slice(GENESIS_CUT_KEY_PREFIX.length));
+    if (cut.length > 0)
+        return cut[0];
+    const cursors = hasTable(db, '_sync_cursor')
+        ? db.prepare('SELECT stream FROM _sync_cursor ORDER BY stream').all().map((r) => r.stream)
+        : [];
+    const all = [...new Set([...Object.keys(hwm), ...cursors])].sort();
+    return all[0] ?? null;
+}
+/**
+ * Turn the retirement an open-pass rebind owes (a rollback or a
+ * cross-filesystem move, {@link RETIRE_DUE_KEY}; T13337) into the signed
+ * `retire` transaction and the pending server rebind, in one transaction.
+ * `cloud sync` then completes the server half (`completeServerRebind`)
+ * before it pushes or pulls, as after a rebind at head.
+ *
+ * The retire names the highest replicaSeq of the old replica persisted on
+ * the stream, by the store or the device registry; a replica that persisted
+ * nothing retires with no journal transaction. A store that never joined a
+ * stream owes nothing, and the record is dropped. While another rebind's
+ * server half is still pending, nothing is done: that one completes first.
+ *
+ * @param db - The store, outside a transaction.
+ * @param opts - Clock override (tests).
+ * @returns The pending rebind it recorded, or null.
+ */
+export function settleRetireDue(db, opts = {}) {
+    if (retireDue(db) === null || pendingRebind(db) !== null)
+        return null;
+    return withImmediateTransaction(db, () => {
+        const due = retireDue(db);
+        if (due === null || pendingRebind(db) !== null)
+            return null;
+        db.prepare('DELETE FROM _sync_meta WHERE key = ?').run(RETIRE_DUE_KEY);
+        // A later rebind superseded this one: the store no longer is `to`.
+        if (activeReplica(db, due.scope)?.replicaId !== due.to)
+            return null;
+        const stream = retireStream(db, due.hwm);
+        if (stream === null)
+            return null;
+        const now = opts.now?.() ?? new Date();
+        const segmented = hasTable(db, '_sync_segment')
+            ? db
+                .prepare('SELECT max(replica_seq) AS s FROM _sync_segment WHERE stream = ? AND replica_id = ?')
+                .get(stream, due.from).s
+            : null;
+        const candidates = [due.hwm[stream], segmented === null ? undefined : Number(segmented)].filter((v) => v !== undefined);
+        const lastReplicaSeq = candidates.length > 0 ? Math.max(...candidates) : null;
+        const retireTxn = lastReplicaSeq === null
+            ? null
+            : queueRetireTxn(db, {
+                scope: due.scope,
+                stream,
+                retire: { replica: due.from, successor: due.to, lastReplicaSeq },
+                nowMs: now.getTime(),
+            });
+        const pending = {
+            stream,
+            scope: due.scope,
+            from: due.from,
+            to: due.to,
+            lastReplicaSeq,
+            retireTxn,
+            at: now.toISOString(),
+        };
+        writePendingRebind(db, pending);
+        return pending;
+    });
+}
 /**
  * Empty the undo log in the rebind transaction (D5). First every transaction
  * of the old replica the stream has not sequenced is inherited, including

package/dist/store/sync/rebind.js.map

@@ -1 +1 @@
-{"version":3,"file":"rebind.js","sourceRoot":"","sources":["../../../src/store/sync/rebind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAIH,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAE5D,OAAO,EAAwB,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAwB,MAAM,cAAc,CAAC;AACtF,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAEzB;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAuCxD,MAAM,OAAO,GAAG,CAAC,EAAgB,EAAE,GAAW,EAAsB,EAAE,CACpE,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC;IACxB,CAAC,CACG,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,CAAC,GAAG,CAGjE,EAAE,KAAK;IACV,CAAC,CAAC,SAAS,CAAC;AAEhB;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAgB;IAClD,OAAO,OAAO,CAAC,EAAE,EAAE,wBAAwB,CAAC,KAAK,SAAS,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,EAAgB;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAC5C,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;AACvE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAgB,EAAE,EAAU;IAC7D,wBAAwB,CAAC,EAAE,EAAE,GAAG,EAAE;QAChC,MAAM,GAAG,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;YAClC,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,EAAgB,EAAE,CAAsB;IACnE,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAEjC,sEAAsE;IACtE,0EAA0E;IAC1E,sEAAsE;IACtE,MAAM,MAAM,GAAG,wBAAwB,CAAC,EAAE,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,IAAI,CAAC,MAAM,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAC;YAAE,OAAO,CAAC,CAAC;QAC9E,OAAO,MAAM,CACX,EAAE;aACC,OAAO,CACN;0FACgF,CACjF;aACA,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,CAC/C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,4CAA4C;IAC5C,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE;QACpF,MAAM,WAAW,GAAG,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,gBAAgB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,eAAe,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;QAChG,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,IAAI,IAAI,CAAC;QAC7E,MAAM,WAAW,GAAG,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAC;YAC/C,CAAC,CACG,EAAE;iBACC,OAAO,CACN,0GAA0G,CAC3G;iBACA,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,CACpC,CAAC,CAAC;YACL,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,UAAU,GAAG,CAAC,UAAU,EAAE,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CACvF,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAC/B,CAAC;QACF,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9E,MAAM,SAAS,GACb,cAAc,KAAK,IAAI;YACrB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE;gBACjB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,MAAM,EAAE;oBACN,OAAO,EAAE,QAAQ,CAAC,SAAS;oBAC3B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,cAAc;iBACf;gBACD,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE;aACrB,CAAC,CAAC;QACT,MAAM,OAAO,GAAkB;YAC7B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,IAAI,EAAE,QAAQ,CAAC,SAAS;YACxB,EAAE,EAAE,OAAO,CAAC,SAAS;YACrB,cAAc;YACd,SAAS;YACT,EAAE,EAAE,MAAM;SACX,CAAC;QACF,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACjF,EAAE,CAAC,OAAO,CACR,mEAAmE;YACjE,yFAAyF,CAC5F,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3D,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,OAAO;QACL,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO;QAC3B,oBAAoB,EAAE,MAAM;QAC5B,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW;QACnC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS;KAChC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,QAAQ,CAAC,EAAgB,EAAE,eAAuB;IACzD,IAAI,QAAQ,CAAC,EAAE,EAAE,WAAW,CAAC,IAAI,QAAQ,CAAC,EAAE,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACjE,EAAE,CAAC,OAAO,CACR;sFACgF,CACjF,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,QAAQ,CAAC,EAAE,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,QAAQ,CAAC,EAAE,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACxC,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,GAAG,EAAE,CAAC;QACpD,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,CAC1D,4BAA4B,EAC5B,uBAAuB,CACxB,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"rebind.js","sourceRoot":"","sources":["../../../src/store/sync/rebind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAIH,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAE5D,OAAO,EAAwB,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,EACL,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,SAAS,GAEV,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAEzB;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAuCxD,MAAM,OAAO,GAAG,CAAC,EAAgB,EAAE,GAAW,EAAsB,EAAE,CACpE,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC;IACxB,CAAC,CACG,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,CAAC,GAAG,CAGjE,EAAE,KAAK;IACV,CAAC,CAAC,SAAS,CAAC;AAEhB;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAgB;IAClD,OAAO,OAAO,CAAC,EAAE,EAAE,wBAAwB,CAAC,KAAK,SAAS,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,EAAgB;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAC5C,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;AACvE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAgB,EAAE,EAAU;IAC7D,wBAAwB,CAAC,EAAE,EAAE,GAAG,EAAE;QAChC,MAAM,GAAG,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;YAClC,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,EAAgB,EAAE,CAAsB;IACnE,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAEjC,sEAAsE;IACtE,0EAA0E;IAC1E,sEAAsE;IACtE,MAAM,MAAM,GAAG,wBAAwB,CAAC,EAAE,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,IAAI,CAAC,MAAM,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAC;YAAE,OAAO,CAAC,CAAC;QAC9E,OAAO,MAAM,CACX,EAAE;aACC,OAAO,CACN;0FACgF,CACjF;aACA,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,CAC/C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,4CAA4C;IAC5C,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE;QACpF,MAAM,WAAW,GAAG,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,gBAAgB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,eAAe,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;QAChG,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,IAAI,IAAI,CAAC;QAC7E,MAAM,WAAW,GAAG,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAC;YAC/C,CAAC,CACG,EAAE;iBACC,OAAO,CACN,0GAA0G,CAC3G;iBACA,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,CACpC,CAAC,CAAC;YACL,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,UAAU,GAAG,CAAC,UAAU,EAAE,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CACvF,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAC/B,CAAC;QACF,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9E,MAAM,SAAS,GACb,cAAc,KAAK,IAAI;YACrB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE;gBACjB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,MAAM,EAAE;oBACN,OAAO,EAAE,QAAQ,CAAC,SAAS;oBAC3B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,cAAc;iBACf;gBACD,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE;aACrB,CAAC,CAAC;QACT,MAAM,OAAO,GAAkB;YAC7B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,IAAI,EAAE,QAAQ,CAAC,SAAS;YACxB,EAAE,EAAE,OAAO,CAAC,SAAS;YACrB,cAAc;YACd,SAAS;YACT,EAAE,EAAE,MAAM;SACX,CAAC;QACF,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACjF,kBAAkB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,OAAO;QACL,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO;QAC3B,oBAAoB,EAAE,MAAM;QAC5B,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW;QACnC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS;KAChC,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,SAAS,kBAAkB,CAAC,EAAgB,EAAE,OAAsB;IAClE,EAAE,CAAC,OAAO,CACR,mEAAmE;QACjE,yFAAyF,CAC5F,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,EAAgB,EAAE,GAAqC;IAC3E,MAAM,GAAG,GACP,EAAE;SACC,OAAO,CAAC,oEAAoE,CAAC;SAC7E,GAAG,CAAC,sBAAsB,EAAE,GAAG,sBAAsB,QAAQ,CACjE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,CAAC,CAAW,CAAC;IAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC;QAC1C,CAAC,CACG,EAAE,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,EAGlE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACxB,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,eAAe,CAC7B,EAAgB,EAChB,OAAsC,EAAE;IAExC,IAAI,SAAS,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,aAAa,CAAC,EAAE,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,wBAAwB,CAAC,EAAE,EAAE,GAAG,EAAE;QACvC,MAAM,GAAG,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC1B,IAAI,GAAG,KAAK,IAAI,IAAI,aAAa,CAAC,EAAE,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC5D,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACvE,mEAAmE;QACnE,IAAI,aAAa,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,KAAK,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAC;YAC7C,CAAC,CACG,EAAE;iBACC,OAAO,CACN,qFAAqF,CACtF;iBACA,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CACxB,CAAC,CAAC;YACL,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAC7F,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CACpC,CAAC;QACF,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9E,MAAM,SAAS,GACb,cAAc,KAAK,IAAI;YACrB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE;gBACjB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,MAAM;gBACN,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,cAAc,EAAE;gBAChE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE;aACrB,CAAC,CAAC;QACT,MAAM,OAAO,GAAkB;YAC7B,MAAM;YACN,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,cAAc;YACd,SAAS;YACT,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE;SACtB,CAAC;QACF,kBAAkB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,QAAQ,CAAC,EAAgB,EAAE,eAAuB;IACzD,IAAI,QAAQ,CAAC,EAAE,EAAE,WAAW,CAAC,IAAI,QAAQ,CAAC,EAAE,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACjE,EAAE,CAAC,OAAO,CACR;sFACgF,CACjF,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,QAAQ,CAAC,EAAE,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,QAAQ,CAAC,EAAE,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACxC,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,GAAG,EAAE,CAAC;QACpD,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,CAC1D,4BAA4B,EAC5B,uBAAuB,CACxB,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/store/sync/reconcile-copy.d.ts

@@ -0,0 +1,152 @@
+/**
+ * The copy reconcile (journal spec §1.5 N7, H3; T13335).
+ *
+ * Every rebind the open pass makes (a copy, a move, a rollback, another
+ * device's store) discards the inherited pull cursor, pauses push and records
+ * `sync.reconcile_due` (`replica.ts`). The new replica then reconciles its
+ * own state against the stream's MERGED state: the latest verified
+ * checkpoint restored into a scratch store (`sync: 'off'`) and pulled to head
+ * there with the merge engine (`cloud/nexus-vault.ts` builds it). Here, in
+ * one apply frame on the store:
+ *
+ * - **Rule 1** (`reconcile.ts`): a field an inherited capture or an
+ *   inherited sealed-but-unpushed op changed is re-emitted from the live row
+ *   at `tick(at_ms)` of that change.
+ * - Every other field is compared per (table, uid, column) with the merged
+ *   state; a differing field is decided by {@link decideReconcileField}:
+ *   - **rule 2**, the local field HLC is below the merged one (a row with
+ *     no row meta, as a never-synced store merging in holds, is dated by its
+ *     genesis HLC, §1.2; a local value it loses is reported in `overwritten`):
+ *     the merged value is written locally in the apply frame, its intents
+ *     recorded so the sealer never sends it, and the merged field HLC stored
+ *     in the row meta. Nothing is emitted;
+ *   - **rule 3**, the local HLC is at or above the merged one (a value the
+ *     original replica sealed but the stream never saw): it is emitted in
+ *     the `rebind` frame with that HLC pinned (op `fh`, or `h` for a delete).
+ * - The store takes the merged state's pull position, and the due record is
+ *   cleared, which lets push resume.
+ *
+ * Rows: a row only the merged state has is adopted (inserted) unless the
+ * store holds a newer tombstone for it (rule 3: a pinned delete); a row the
+ * merged state deleted is adopted (deleted) unless the store's row is newer
+ * (rule 3: the whole live row re-inserted as an I whose op HLC is above the
+ * tombstone, its field HLCs pinned; the merge engine voids a U on a
+ * tombstoned row but re-creates the row from a newer I, T13392). A live row the merged state never knew, with
+ * no inherited change, is emitted: with its row meta's HLCs pinned when it
+ * has meta, else as a plain insert (nothing local is ever deleted that the
+ * stream cannot account for).
+ *
+ * Reference columns are compared by the uid of the row they point at, and an
+ * adopted reference is resolved to this store's local key ({@link resolveRef}).
+ * A merged row whose reference does not resolve here, or whose insert hits a
+ * local constraint, is left out and counted in `unresolved`. In a merge join
+ * (T13466) a local constraint refuses the whole reconcile instead
+ * ({@link MergeKeyCollisionError}, T13504).
+ *
+ * @task T13335
+ * @module store/sync/reconcile-copy
+ */
+import type { DatabaseSync } from 'node:sqlite';
+import type { TableScope } from '@cleocode/contracts';
+import type { LedgerWireValue } from '@cleocode/contracts/ledger';
+import { type StreamCursor } from './pull.js';
+import { type ReconcileReport } from './reconcile.js';
+/** Options for {@link reconcileCopy}. */
+export interface ReconcileCopyOptions {
+    readonly scope: TableScope;
+    /** The stream the merged state was pulled to the head of. */
+    readonly stream: string;
+    /** The merged state's pull position at head: the store takes it. */
+    readonly mergedCursor: StreamCursor;
+    /** Wall clock (ms). @defaultValue Date.now */
+    readonly now?: () => number;
+    /**
+     * The checkpoint as restored, before the pull (T13507). A merge join dates a
+     * meta-less local row by its `updated_at`, which cannot show which fields it
+     * touched; a stream field whose HLC moved past this baseline is a real write
+     * since the cut and wins.
+     */
+    readonly baseline?: DatabaseSync;
+}
+/** What {@link reconcileCopy} did. */
+export interface ReconcileCopyReport {
+    /** Fields adopted from the merged state (rule 2), and rows inserted and deleted by adoption. */
+    readonly adoptedFields: number;
+    readonly adoptedInserts: number;
+    readonly adoptedDeletes: number;
+    /** Rule-3 emits with pinned HLCs. */
+    readonly pinned: number;
+    /** Merged rows left out: a reference that does not resolve here, or a local constraint. */
+    readonly unresolved: number;
+    /**
+     * Fields of a row this store held with no row meta (a merge join, T13466)
+     * whose local value lost to a newer merged one: the local value was
+     * replaced. Read the store's safety backup to recover one.
+     */
+    readonly overwritten: ReadonlyArray<{
+        table: string;
+        uid: string;
+        column: string;
+    }>;
+    /**
+     * The other direction (T13507): fields of such a row whose newer local value
+     * replaced the stream's value, so every replica takes the local one.
+     */
+    readonly replaced: ReadonlyArray<{
+        table: string;
+        uid: string;
+        column: string;
+    }>;
+    /**
+     * Rows of a never-synced store that a newer stream delete removed (T13508). The store's
+     * safety backup holds them.
+     */
+    readonly deleted: ReadonlyArray<{
+        table: string;
+        uid: string;
+    }>;
+    /** The `rebind` frame (rule 1 and rule 3). */
+    readonly frame: ReconcileReport;
+}
+/** A merged row a merge join cannot place: a row this store holds already has its local key (T13504). */
+export interface MergeKeyCollision {
+    readonly table: string;
+    readonly uid: string;
+    /** The merged row's local key values. */
+    readonly key: readonly LedgerWireValue[];
+}
+/**
+ * A merge join refused: a merged row's local key is held by this store's own
+ * row, and nothing yet settles such a collision across devices, so emitting
+ * this store's row would leave it held on every peer (T13504). The apply
+ * frame rolls back: nothing is adopted or emitted, and the reconcile stays due.
+ */
+export declare class MergeKeyCollisionError extends Error {
+    readonly collisions: readonly MergeKeyCollision[];
+    constructor(collisions: readonly MergeKeyCollision[]);
+}
+/**
+ * Reconcile a rebound store against the merged state (module docs). Must
+ * run outside a transaction. Does nothing, and returns null, when no
+ * reconcile is due.
+ *
+ * @param db - The rebound store (the canonical store).
+ * @param merged - The scratch store: the latest verified checkpoint pulled to head. Read-only here.
+ * @param o - Scope, stream, the merged pull position and the clock.
+ * @returns What was adopted and emitted, or null when nothing was due.
+ */
+export declare function reconcileCopy(db: DatabaseSync, merged: DatabaseSync, o: ReconcileCopyOptions): ReconcileCopyReport | null;
+/**
+ * The merged rows a merge join (T13466) could not place: a live merged row
+ * this store has no row for, whose local key a different row here already
+ * holds. Read-only; run it before the join so a refusal changes nothing
+ * (T13504). Tables whose key holds a reference are left to the reconcile's
+ * own check, which refuses the same way.
+ *
+ * @param db - The store about to merge in.
+ * @param merged - The merged state (checkpoint pulled to head).
+ * @param scope - The store's scope.
+ * @returns The colliding merged rows, in table order.
+ */
+export declare function mergeKeyCollisions(db: DatabaseSync, merged: DatabaseSync, scope: TableScope): MergeKeyCollision[];
+//# sourceMappingURL=reconcile-copy.d.ts.map

package/dist/store/sync/reconcile-copy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile-copy.d.ts","sourceRoot":"","sources":["../../../src/store/sync/reconcile-copy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAQlE,OAAO,EAAE,KAAK,YAAY,EAAqB,MAAM,WAAW,CAAC;AACjE,OAAO,EAKL,KAAK,eAAe,EAGrB,MAAM,gBAAgB,CAAC;AAOxB,yCAAyC;AACzC,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,8CAA8C;IAC9C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;CAClC;AAED,sCAAsC;AACtC,MAAM,WAAW,mBAAmB;IAClC,gGAAgG;IAChG,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,qCAAqC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,2FAA2F;IAC3F,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpF;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjF;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChE,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;CACjC;AAID,yGAAyG;AACzG,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,yCAAyC;IACzC,QAAQ,CAAC,GAAG,EAAE,SAAS,eAAe,EAAE,CAAC;CAC1C;AAED;;;;;GAKG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IACnC,QAAQ,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE;gBAAxC,UAAU,EAAE,SAAS,iBAAiB,EAAE;CAQ9D;AAKD;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAC3B,EAAE,EAAE,YAAY,EAChB,MAAM,EAAE,YAAY,EACpB,CAAC,EAAE,oBAAoB,GACtB,mBAAmB,GAAG,IAAI,CAgQ5B;AAID;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,YAAY,EAChB,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,UAAU,GAChB,iBAAiB,EAAE,CAoBrB"}