@harperfast/harper 5.2.9 → 5.3.0-alpha.1

package/dist/resources/recordLock.js

@@ -0,0 +1,184 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_LOCK_TIMEOUT_MS = exports.DEFAULT_LOCK_TIMEOUT_MS = exports.MAX_LOCK_LEASE_MS = exports.MIN_LOCK_LEASE_MS = exports.DEFAULT_LOCK_LEASE_MS = void 0;
+exports.resolveLockOptions = resolveLockOptions;
+exports.lockNotHeldError = lockNotHeldError;
+exports.lockAttemptKey = lockAttemptKey;
+exports.makeKeyLockHandle = makeKeyLockHandle;
+exports.acquireRecordKey = acquireRecordKey;
+const harper_logger_ts_1 = __importDefault(require("../utility/logging/harper_logger.js"));
+const hdbError_ts_1 = require("../utility/errors/hdbError.js");
+/**
+ * Exclusive per-record locks (harper#483, Phase 0: one node, every worker thread).
+ *
+ * The sole authority is the rocksdb-js process-wide key lock: one `locks` map per DBDescriptor
+ * shared by every worker thread's handle. Nothing is written to the store or audit log. Lock and
+ * unlock are pure in-memory operations; the record's version and bytes are unchanged.
+ */
+exports.DEFAULT_LOCK_LEASE_MS = 30_000;
+/** Below this a generation can expire before the caller's work completes, handing back a lock already lost. */
+exports.MIN_LOCK_LEASE_MS = 100;
+exports.MAX_LOCK_LEASE_MS = 300_000;
+exports.DEFAULT_LOCK_TIMEOUT_MS = 30_000;
+exports.MAX_LOCK_TIMEOUT_MS = 300_000;
+const LOCK_KEY_PREFIX = Symbol.for('record-lock');
+function requireDuration(name, value, fallback, min, max) {
+    if (value === undefined)
+        return fallback;
+    if (typeof value !== 'number' || !Number.isFinite(value) || value < min)
+        throw new hdbError_ts_1.ClientError(`Lock option ${name} must be a number of milliseconds of at least ${min}, but received ${value}`);
+    if (value > max)
+        throw new hdbError_ts_1.ClientError(`Lock option ${name} must not exceed ${max}ms, but received ${value}`);
+    return value;
+}
+function resolveLockOptions(options) {
+    if (options != null && typeof options !== 'object')
+        throw new hdbError_ts_1.ClientError(`Lock options must be an object, but received ${typeof options}`);
+    const hold = options?.hold ?? false;
+    if (typeof hold !== 'boolean')
+        throw new hdbError_ts_1.ClientError(`Lock option hold must be a boolean, but received ${hold}`);
+    return {
+        lease: requireDuration('lease', options?.lease, exports.DEFAULT_LOCK_LEASE_MS, exports.MIN_LOCK_LEASE_MS, exports.MAX_LOCK_LEASE_MS),
+        timeout: requireDuration('timeout', options?.timeout, exports.DEFAULT_LOCK_TIMEOUT_MS, 1, exports.MAX_LOCK_TIMEOUT_MS),
+        hold,
+    };
+}
+/**
+ * The 409 for a write staged through a handle that is no longer live. A lease that ran out and a
+ * lock that was handed back are different causes, and a caller told the wrong one debugs the wrong
+ * thing — a commit-released scoped handle is not a timeout.
+ */
+function lockNotHeldError(handle) {
+    return new hdbError_ts_1.ClientError(handle.expired ? 'Record lock lease expired' : 'Record lock already released', 409);
+}
+/** The advisory key for this (table, record) pair, distinct from getFromSource's bare-id single-flight lock. */
+function lockAttemptKey(tableId, id) {
+    return Array.isArray(id) ? [LOCK_KEY_PREFIX, tableId, ...id] : [LOCK_KEY_PREFIX, tableId, id];
+}
+const warnedLeaseTimerStores = new WeakSet();
+class KeyLockHandle {
+    store;
+    key;
+    keyId;
+    expiresAt;
+    hold;
+    released = false;
+    expired = false;
+    acquiredAt;
+    #lastHolderVersion;
+    #candidateFloor;
+    #timer;
+    constructor(store, key, keyId, lease, hold = false, acquiredAt) {
+        this.store = store;
+        this.key = key;
+        this.keyId = keyId;
+        this.expiresAt = lease != null ? Date.now() + lease : Infinity;
+        this.hold = hold;
+        this.acquiredAt = acquiredAt ?? store.getMonotonicTimestamp();
+        if (lease != null) {
+            this.#timer = setTimeout(() => this.#onLeaseExpire(), lease).unref();
+        }
+    }
+    noteHolderVersion(version) {
+        this.#lastHolderVersion = Math.max(this.#lastHolderVersion ?? version, version);
+    }
+    noteCandidateFloor(version) {
+        this.#candidateFloor = Math.max(this.#candidateFloor ?? version, version);
+    }
+    holderVersionCandidate(floor) {
+        // A small nonzero step prevents exact LWW ties without materially moving past the observed floor.
+        const MIN_STEP = 0.000488;
+        return Math.max(this.#lastHolderVersion != null ? this.#lastHolderVersion + MIN_STEP : this.acquiredAt, this.acquiredAt, this.#candidateFloor ?? -Infinity, floor ?? -Infinity);
+    }
+    nextHolderVersion() {
+        const next = this.holderVersionCandidate();
+        this.#lastHolderVersion = next;
+        return next;
+    }
+    #onLeaseExpire() {
+        if (this.released)
+            return;
+        this.released = true;
+        this.expired = true;
+        try {
+            this.store.unlock(this.key);
+        }
+        catch (err) {
+            if (!warnedLeaseTimerStores.has(this.store)) {
+                warnedLeaseTimerStores.add(this.store);
+                harper_logger_ts_1.default.warn?.('record lock lease timer failed (store may have been dropped)', err);
+            }
+        }
+    }
+    release() {
+        if (this.released)
+            return false;
+        this.released = true;
+        clearTimeout(this.#timer);
+        try {
+            this.store.unlock(this.key);
+        }
+        catch (err) {
+            if (!warnedLeaseTimerStores.has(this.store)) {
+                warnedLeaseTimerStores.add(this.store);
+                harper_logger_ts_1.default.warn?.('record lock release failed (store may have been dropped)', err);
+            }
+        }
+        return true;
+    }
+    upgradeToHold(lease) {
+        this.hold = true;
+        clearTimeout(this.#timer);
+        this.expiresAt = Date.now() + lease;
+        this.#timer = setTimeout(() => this.#onLeaseExpire(), lease).unref();
+    }
+}
+function makeKeyLockHandle(store, key, keyId, lease, hold = false, acquiredAt) {
+    return new KeyLockHandle(store, key, keyId, lease, hold, acquiredAt);
+}
+/**
+ * Acquire the native key lock for a record, looping until acquired or deadline passes. Re-entrant
+ * within a transaction: if the transaction already holds this key (non-expired handle in its
+ * recordLocks map) the existing handle is returned without a second tryLock.
+ */
+async function acquireRecordKey(txn, store, key, keyId, waitMs, lease, hold = false) {
+    const existing = txn.recordLockFor(store, keyId);
+    if (existing && !existing.released && !existing.expired)
+        return existing;
+    const deadline = Date.now() + waitMs;
+    // One persistent wake slot: at most one onUnlocked callback is registered per waiter at any
+    // time.  After the callback fires (holder released), hasCallback is cleared so the next
+    // tryLock can register a fresh callback for the new holder.  When the timeout fires instead
+    // (the holder has not released yet), hasCallback stays true and subsequent retries skip the
+    // callback registration, preventing unbounded accumulation on a hot key.
+    let wakeResolve;
+    let hasCallback = false;
+    while (true) {
+        const onUnlocked = hasCallback
+            ? undefined
+            : () => {
+                hasCallback = false;
+                wakeResolve?.();
+            };
+        const acquired = store.tryLock(key, onUnlocked);
+        if (acquired)
+            return makeKeyLockHandle(store, key, keyId, lease, hold, store.getMonotonicTimestamp());
+        if (onUnlocked)
+            hasCallback = true; // callback now registered; do not register another until it fires
+        const remaining = deadline - Date.now();
+        if (remaining <= 0)
+            throw new hdbError_ts_1.ClientError(`Record is locked and was not released in time`, 423);
+        await new Promise((resolve) => {
+            const t = setTimeout(resolve, remaining).unref();
+            wakeResolve = () => {
+                clearTimeout(t);
+                resolve();
+            };
+        });
+        wakeResolve = undefined;
+    }
+}
+//# sourceMappingURL=recordLock.js.map

package/dist/resources/recordLock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recordLock.js","sourceRoot":"","sources":["../../resources/recordLock.ts"],"names":[],"mappings":";;;;;;AAgFA,gDAUC;AAOD,4CAEC;AAGD,wCAEC;AA2FD,8CASC;AAOD,4CAyCC;AA5PD,2FAA+D;AAC/D,+DAA4D;AAE5D;;;;;;GAMG;AAEU,QAAA,qBAAqB,GAAG,MAAM,CAAC;AAC5C,+GAA+G;AAClG,QAAA,iBAAiB,GAAG,GAAG,CAAC;AACxB,QAAA,iBAAiB,GAAG,OAAO,CAAC;AAC5B,QAAA,uBAAuB,GAAG,MAAM,CAAC;AACjC,QAAA,mBAAmB,GAAG,OAAO,CAAC;AAC3C,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AAqDlD,SAAS,eAAe,CAAC,IAAY,EAAE,KAAc,EAAE,QAAgB,EAAE,GAAW,EAAE,GAAW;IAChG,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,GAAG;QACtE,MAAM,IAAI,yBAAW,CACpB,eAAe,IAAI,iDAAiD,GAAG,kBAAkB,KAAK,EAAE,CAChG,CAAC;IACH,IAAI,KAAK,GAAG,GAAG;QAAE,MAAM,IAAI,yBAAW,CAAC,eAAe,IAAI,oBAAoB,GAAG,oBAAoB,KAAK,EAAE,CAAC,CAAC;IAC9G,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAgB,kBAAkB,CAAC,OAAkC;IACpE,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;QACjD,MAAM,IAAI,yBAAW,CAAC,gDAAgD,OAAO,OAAO,EAAE,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,KAAK,CAAC;IACpC,IAAI,OAAO,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,yBAAW,CAAC,oDAAoD,IAAI,EAAE,CAAC,CAAC;IACjH,OAAO;QACN,KAAK,EAAE,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,6BAAqB,EAAE,yBAAiB,EAAE,yBAAiB,CAAC;QAC5G,OAAO,EAAE,eAAe,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,+BAAuB,EAAE,CAAC,EAAE,2BAAmB,CAAC;QACtG,IAAI;KACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,MAAyC;IACzE,OAAO,IAAI,yBAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;AAC5G,CAAC;AAED,gHAAgH;AAChH,SAAgB,cAAc,CAAC,OAAe,EAAE,EAAO;IACtD,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,sBAAsB,GAAG,IAAI,OAAO,EAAE,CAAC;AAE7C,MAAM,aAAa;IAClB,KAAK,CAAM;IACX,GAAG,CAAQ;IACX,KAAK,CAAU;IACf,SAAS,CAAS;IAClB,IAAI,CAAU;IACd,QAAQ,GAAG,KAAK,CAAC;IACjB,OAAO,GAAG,KAAK,CAAC;IAChB,UAAU,CAAS;IACnB,kBAAkB,CAAqB;IACvC,eAAe,CAAqB;IACpC,MAAM,CAA4C;IAElD,YAAY,KAAU,EAAE,GAAU,EAAE,KAAc,EAAE,KAAc,EAAE,IAAI,GAAG,KAAK,EAAE,UAAmB;QACpG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC/D,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;QAC9D,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;QACtE,CAAC;IACF,CAAC;IAED,iBAAiB,CAAC,OAAe;QAChC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,OAAO,EAAE,OAAO,CAAC,CAAC;IACjF,CAAC;IAED,kBAAkB,CAAC,OAAe;QACjC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAED,sBAAsB,CAAC,KAAc;QACpC,kGAAkG;QAClG,MAAM,QAAQ,GAAG,QAAQ,CAAC;QAC1B,OAAO,IAAI,CAAC,GAAG,CACd,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EACtF,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,eAAe,IAAI,CAAC,QAAQ,EACjC,KAAK,IAAI,CAAC,QAAQ,CAClB,CAAC;IACH,CAAC;IAED,iBAAiB;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC3C,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAC/B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,cAAc;QACb,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACJ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7C,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACvC,0BAAY,CAAC,IAAI,EAAE,CAAC,8DAA8D,EAAE,GAAG,CAAC,CAAC;YAC1F,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO;QACN,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC;YACJ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7C,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACvC,0BAAY,CAAC,IAAI,EAAE,CAAC,0DAA0D,EAAE,GAAG,CAAC,CAAC;YACtF,CAAC;QACF,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAED,aAAa,CAAC,KAAa;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;IACtE,CAAC;CACD;AAED,SAAgB,iBAAiB,CAChC,KAAU,EACV,GAAU,EACV,KAAc,EACd,KAAc,EACd,IAAI,GAAG,KAAK,EACZ,UAAmB;IAEnB,OAAO,IAAI,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,gBAAgB,CACrC,GAAgF,EAChF,KAAU,EACV,GAAU,EACV,KAAc,EACd,MAAc,EACd,KAAc,EACd,IAAI,GAAG,KAAK;IAEZ,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC;IAEzE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACrC,4FAA4F;IAC5F,wFAAwF;IACxF,4FAA4F;IAC5F,4FAA4F;IAC5F,yEAAyE;IACzE,IAAI,WAAqC,CAAC;IAC1C,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,OAAO,IAAI,EAAE,CAAC;QACb,MAAM,UAAU,GAAG,WAAW;YAC7B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,GAAG,EAAE;gBACL,WAAW,GAAG,KAAK,CAAC;gBACpB,WAAW,EAAE,EAAE,CAAC;YACjB,CAAC,CAAC;QACJ,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAChD,IAAI,QAAQ;YAAE,OAAO,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,qBAAqB,EAAE,CAAC,CAAC;QACtG,IAAI,UAAU;YAAE,WAAW,GAAG,IAAI,CAAC,CAAC,kEAAkE;QACtG,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACxC,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM,IAAI,yBAAW,CAAC,+CAA+C,EAAE,GAAG,CAAC,CAAC;QAChG,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC;YACjD,WAAW,GAAG,GAAG,EAAE;gBAClB,YAAY,CAAC,CAAC,CAAC,CAAC;gBAChB,OAAO,EAAE,CAAC;YACX,CAAC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,WAAW,GAAG,SAAS,CAAC;IACzB,CAAC;AACF,CAAC"}

package/dist/resources/replayLogs.d.ts

@@ -1,3 +1,16 @@
 import { RocksDatabase } from '@harperfast/rocksdb-js';
 export declare function structuresWouldShrink(existing: any, updated: any): boolean;
-export declare function replayLogs(rootStore: RocksDatabase, tables: any): Promise<void>;
+/** The total wall-clock budget (ms) a replay may spend, as configured for this process. */
+export declare function replayTimeBudgetMs(): number;
+/**
+ * `electedReplayer` marks a caller that has already won a cross-thread election for this store —
+ * the branch claim (branchDatabase.ts) — and so may replay off the main thread. It also makes the
+ * replay strict: the promise settles (never hangs), and a failure to apply the tail — a commit or
+ * write error, a stall or wall-clock abort — rejects instead of quietly serving a rewound store.
+ * Undecodable entries and a torn tail stay tolerated in both modes: a crash tears the last frame of
+ * a log by construction, and end-of-log is the designed reading of it (see replayLogsGuards.ts). A
+ * **mid-log** break is different — entries behind it were acknowledged and are now quarantined — so
+ * an elected replay rejects on one rather than publish a branch as a trustworthy point-in-time copy
+ * over known lost writes; boot replay still logs it and continues (harper#2016, harper#2063).
+ */
+export declare function replayLogs(rootStore: RocksDatabase, tables: any, electedReplayer?: boolean): Promise<void>;

package/dist/resources/replayLogs.js

@@ -34,6 +34,7 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.structuresWouldShrink = structuresWouldShrink;
+exports.replayTimeBudgetMs = replayTimeBudgetMs;
 exports.replayLogs = replayLogs;
 const logger = __importStar(require("../utility/logging/harper_logger.js"));
 const DatabaseTransaction_ts_1 = require("./DatabaseTransaction.js");
@@ -63,15 +64,37 @@ function structuresWouldShrink(existing, updated) {
     }
     return false;
 }
-function replayLogs(rootStore, tables) {
-    if (!node_worker_threads_1.isMainThread)
-        return; // ideally we don't do it like this, but for now this is predictable
-    return new Promise((resolve) => {
+/** The total wall-clock budget (ms) a replay may spend, as configured for this process. */
+function replayTimeBudgetMs() {
+    const configuredReplayTimeout = Number((0, environmentManager_ts_1.get)(hdbTerms_ts_1.CONFIG_PARAMS.REPLICATION_REPLAYTIMEOUT));
+    return configuredReplayTimeout > 0 ? configuredReplayTimeout : replayLogsGuards_ts_1.REPLAY_WALL_CLOCK_LIMIT_MS;
+}
+/**
+ * `electedReplayer` marks a caller that has already won a cross-thread election for this store —
+ * the branch claim (branchDatabase.ts) — and so may replay off the main thread. It also makes the
+ * replay strict: the promise settles (never hangs), and a failure to apply the tail — a commit or
+ * write error, a stall or wall-clock abort — rejects instead of quietly serving a rewound store.
+ * Undecodable entries and a torn tail stay tolerated in both modes: a crash tears the last frame of
+ * a log by construction, and end-of-log is the designed reading of it (see replayLogsGuards.ts). A
+ * **mid-log** break is different — entries behind it were acknowledged and are now quarantined — so
+ * an elected replay rejects on one rather than publish a branch as a trustworthy point-in-time copy
+ * over known lost writes; boot replay still logs it and continues (harper#2016, harper#2063).
+ */
+function replayLogs(rootStore, tables, electedReplayer) {
+    if (!node_worker_threads_1.isMainThread && !electedReplayer)
+        return Promise.resolve(); // ideally we don't do it like this, but for now this is predictable
+    return new Promise((resolve, reject) => {
         const acquired = rootStore.tryLock('replayLogs', async () => {
             resolve();
         });
-        if (!acquired)
+        if (!acquired) {
+            // An elected replayer is the store's sole opener, so a held lock is a protocol violation;
+            // hanging its awaited promise would wedge the branch claim in CREATING. The boot-scan
+            // caller keeps the settle-on-unlock semantics (nothing awaits it).
+            if (electedReplayer)
+                reject(new Error(`The replay lock for ${rootStore.databaseName} is already held`));
             return;
+        }
         // Shed transaction-log files already older than the audit retention window before
         // replaying. A node that crash-loops during recovery never reaches the steady-state
         // cleanup loop, so without this its aged backlog only grows and enlarges each subsequent
@@ -99,6 +122,10 @@ function replayLogs(rootStore, tables) {
         let transaction;
         let lastTimestamp = 0;
         let writes = 0;
+        // Writes staged on the currently-open transaction, so a discard can be taken back out of `writes`.
+        let stagedWrites = 0;
+        // Records dropped because a corrupt frame truncated the transaction they belong to.
+        let discardedWrites = 0;
         let skipped = 0;
         // Track forward progress so a backlog of unwritable entries can't grind the boot thread
         // forever (harper#1266). `noProgressRun` counts every entry processed without a successful
@@ -110,15 +137,36 @@ function replayLogs(rootStore, tables) {
         let lastProgressTime = replayStartTime;
         // Total wall-clock budget (ms) for replay, configurable via `replication.replayTimeout`;
         // falls back to the 10-minute default (harper#1316).
-        const configuredReplayTimeout = Number((0, environmentManager_ts_1.get)(hdbTerms_ts_1.CONFIG_PARAMS.REPLICATION_REPLAYTIMEOUT));
-        const replayTimeoutMs = configuredReplayTimeout > 0 ? configuredReplayTimeout : replayLogsGuards_ts_1.REPLAY_WALL_CLOCK_LIMIT_MS;
+        const replayTimeoutMs = replayTimeBudgetMs();
+        // Set on the first unrecoverable failure in elected mode; rejects below instead of publishing
+        // a store the replay knows is incomplete.
+        let strictFailure;
+        const strictAbort = (error, staged) => {
+            try {
+                staged?.abort();
+            }
+            catch (abortError) {
+                logger.warn('Error aborting a strict replay transaction', abortError);
+            }
+            strictFailure = error;
+        };
         const txnLog = rootStore.auditStore;
-        for (const auditRecord of txnLog.getRange({ startFromLastFlushed: true, readUncommitted: true })) {
+        const entries = txnLog.getRange({
+            startFromLastFlushed: true,
+            readUncommitted: true,
+            trackCorruptTransactions: true,
+        });
+        for (const auditRecord of entries) {
             if (noProgressRun > 0 && (0, replayLogsGuards_ts_1.shouldAbortStalledReplay)(noProgressRun, performance.now() - lastProgressTime)) {
-                logger.fatal(`Aborting transaction-log replay in ${rootStore.databaseName} database: ${noProgressRun} consecutive audit entries with no successful write (${skipped} skipped as unrecoverable, ${writes} replayed so far). This backlog is making no forward progress and was blocking startup (harper#1266) — typically a peer transaction log whose values reference unresolvable shared structures (harper#1163), or a backlog for a dropped table. Continuing boot without replaying the remainder; shed or relocate the oversized/undecodable peer transaction log(s), or re-clone this node, to recover the unreplayed data.`);
+                const stallDiagnostic = `Aborting transaction-log replay in ${rootStore.databaseName} database: ${noProgressRun} consecutive audit entries with no successful write (${skipped} skipped as unrecoverable, ${writes} replayed so far). This backlog is making no forward progress and was blocking startup (harper#1266) — typically a peer transaction log whose values reference unresolvable shared structures (harper#1163), or a backlog for a dropped table.`;
+                if (electedReplayer) {
+                    strictAbort(new Error(stallDiagnostic), transaction);
+                    break;
+                }
+                logger.fatal(`${stallDiagnostic} Continuing boot without replaying the remainder; shed or relocate the oversized/undecodable peer transaction log(s), or re-clone this node, to recover the unreplayed data.`);
                 break;
             }
-            const { type, tableId, nodeId, recordId, version, residencyId, expiresAt, originatingOperation, username, extendedType, } = auditRecord;
+            const { type, tableId, nodeId, recordId, version, txnLogKey, residencyId, expiresAt, originatingOperation, username, extendedType, } = auditRecord;
             try {
                 if ((0, replayLogsGuards_ts_1.classifyAuditEntryForReplay)(extendedType, tableId, true) === 'corrupt-header') {
                     skipped++;
@@ -172,15 +220,39 @@ function replayLogs(rootStore, tables) {
                     warnedReplayHappening = true;
                     console.warn('Harper was not properly shutdown, replaying transaction logs to synchronize database');
                 }
-                if (lastTimestamp !== version) {
-                    lastTimestamp = version;
+                // Transactions are delimited by the log key — which is also what `truncatedVersions` records —
+                // and each write is replayed at its own stored record version. The two differ for a source
+                // fill, and stamping such a record at the log key would move its version forward and make a
+                // later legitimate write in between look stale (harper#2411).
+                if (lastTimestamp !== txnLogKey) {
+                    const torn = entries.corruptFrameStop.truncatedVersions.has(lastTimestamp);
+                    lastTimestamp = txnLogKey;
                     try {
-                        // commit the last transaction since we are starting a new one
-                        transaction?.directCommitSync();
+                        // commit the last transaction since we are starting a new one, unless a corrupt
+                        // frame swallowed the rest of it — half of a source transaction must never become
+                        // durable, so it is dropped whole and stays in the log for a repaired retry
+                        if (torn) {
+                            writes -= stagedWrites;
+                            discardedWrites += stagedWrites;
+                            transaction?.abort();
+                        }
+                        else
+                            transaction?.directCommitSync();
                     }
                     catch (error) {
-                        logger.error('Error committing replay transaction', error);
+                        // directCommitSync aborts and detaches its transaction on failure; no cleanup here.
+                        // The torn branch already backed stagedWrites out of writes before this try, so
+                        // only a failed COMMIT (never applied) needs it backed out here too — otherwise a
+                        // commit failure left `writes` counting records that never actually landed.
+                        if (!torn)
+                            writes -= stagedWrites;
+                        if (electedReplayer) {
+                            strictFailure = error;
+                            break;
+                        }
+                        logger.error(`Error ${torn ? 'discarding a torn' : 'committing'} replay transaction`, error);
                     }
+                    stagedWrites = 0;
                     // Abort if replay has exceeded the total wall-clock budget even while making progress
                     // (harper#1316, facet a). shouldAbortStalledReplay resets its counters on every write,
                     // so a slow-but-progressing replay (deep out-of-order audit chain walk per entry) can
@@ -189,13 +261,18 @@ function replayLogs(rootStore, tables) {
                     // is not yet staged, so aborting never tears a same-version (same source-transaction)
                     // write batch in half. Re-clone to recover the unreplayed remainder.
                     if ((0, replayLogsGuards_ts_1.shouldAbortSlowReplay)(performance.now() - replayStartTime, replayTimeoutMs)) {
-                        logger.fatal(`Aborting transaction-log replay in ${rootStore.databaseName} database: replay has exceeded the wall-clock time limit (${writes} written, ${skipped} skipped). The transaction log contains a pathologically deep out-of-order write history that is too expensive to reconcile during boot (harper#1316). Re-clone this node from a healthy leader to recover the unreplayed data.`);
+                        const slowMessage = `Aborting transaction-log replay in ${rootStore.databaseName} database: replay has exceeded the wall-clock time limit (${writes} written, ${skipped} skipped). The transaction log contains a pathologically deep out-of-order write history that is too expensive to reconcile during boot (harper#1316). Re-clone this node from a healthy leader to recover the unreplayed data.`;
                         transaction = undefined; // already committed above; nothing staged for the new version
+                        if (electedReplayer) {
+                            strictFailure = new Error(slowMessage);
+                            break;
+                        }
+                        logger.fatal(slowMessage);
                         break;
                     }
                     transaction = new DatabaseTransaction_ts_1.DatabaseTransaction();
                     transaction.db = primaryStore;
-                    transaction.timestamp = version;
+                    transaction.timestamp = txnLogKey;
                     // retries=1 routes operation.commit() through its retry path (no duplicate audit staging)
                     transaction.retries = 1;
                     // Explicit replay marker: skips schema validation (harper#1316) and makes save() stamp
@@ -204,8 +281,9 @@ function replayLogs(rootStore, tables) {
                     transaction.isReplay = true;
                 }
                 context.transaction = transaction;
-                const options = { context, residencyId, nodeId, originatingOperation };
+                const options = { context, residencyId, nodeId, originatingOperation, version };
                 writes++;
+                stagedWrites++;
                 switch (type) {
                     case 'put':
                         tableInstance._writeUpdate(recordId, record, true, options);
@@ -274,6 +352,10 @@ function replayLogs(rootStore, tables) {
                 lastProgressTime = performance.now();
             }
             catch (err) {
+                if (electedReplayer) {
+                    strictAbort(err, transaction);
+                    break;
+                }
                 // A write that threw made no forward progress either — count it toward the stall
                 // bound so a continuous stream of throwing writes can't grind the boot thread
                 // indefinitely (and the per-entry error log below can't spam unboundedly). harper#1266
@@ -283,18 +365,64 @@ function replayLogs(rootStore, tables) {
                 });
             }
         }
-        try {
-            transaction?.directCommitSync();
+        const finalTorn = entries.corruptFrameStop.truncatedVersions.has(lastTimestamp);
+        if (!strictFailure) {
+            try {
+                if (finalTorn) {
+                    writes -= stagedWrites;
+                    discardedWrites += stagedWrites;
+                    transaction?.abort();
+                }
+                else
+                    transaction?.directCommitSync();
+            }
+            catch (error) {
+                // directCommitSync aborts and detaches its transaction on failure; no cleanup here.
+                // Mirrors the interior version-boundary catch above: a failed commit never applied, so
+                // it must not stay counted in `writes`.
+                if (!finalTorn)
+                    writes -= stagedWrites;
+                if (electedReplayer)
+                    strictFailure = error;
+                logger.error(`Error ${finalTorn ? 'discarding a torn' : 'committing'} replay transaction`, error);
+            }
         }
-        catch (error) {
-            logger.error('Error committing replay transaction', error);
+        // `breaks` also counts a torn tail — the designed, benign reading of a crash's last frame, and
+        // the reporter already logged it at `warn`. Only a mid-log break lost entries, so it alone earns
+        // this quarantine/repair summary; duplicating it for a torn tail would tell an operator to
+        // repair or re-clone the node on every ordinary unclean shutdown.
+        if (entries.corruptFrameStop.midLogBreak) {
+            logger.error(`Transaction-log replay in ${rootStore.databaseName} database stopped at a corrupt entry after replaying ${writes} records. Every entry after the break is quarantined — neither replayed nor replicated — and ${discardedWrites} record(s) of the transaction the break truncated were discarded rather than applied in part. Repair the transaction log or re-clone this node to recover them.`);
+            // electedReplayer must not resolve past known loss — see the doc comment above. Only set
+            // strictFailure if nothing has already failed the replay for an unrelated reason, so this
+            // diagnostic never shadows a more specific commit/write error.
+            if (electedReplayer && !strictFailure) {
+                strictFailure = new Error(`Elected replay in ${rootStore.databaseName} database stopped at a mid-log corrupt transaction-log frame; entries behind the break were acknowledged and are now quarantined. Refusing to publish a branch over known lost writes — repair the transaction log or re-clone this node.`);
+            }
         }
         if (writes > 0)
             logger.warn(`Replayed ${writes} records in ${rootStore.databaseName} database`);
         if (skipped > 0)
             logger.warn(`Skipped ${skipped} unrecoverable audit entries in ${rootStore.databaseName} database during replay`);
-        // we never actually release the lock because we only want to ever run one time
-        // rootStore.unlock('replayLogs');
+        if (strictFailure) {
+            // A failed strict replay must be re-runnable: the branch claim resets for a retry, so the
+            // lock must not be what survives to wedge it. Only a COMPLETED replay keeps the lock
+            // forever (the once-per-boot guarantee). Reject BEFORE unlocking: unlock wakes tryLock
+            // callbacks — including this holder's own resolve() — and the first settle must be the
+            // rejection, or a failed replay reads as success.
+            reject(strictFailure);
+            try {
+                rootStore.unlock('replayLogs');
+            }
+            catch (unlockError) {
+                logger.warn('Error releasing the replay lock after a failed replay', unlockError);
+            }
+        }
+        else {
+            // we never actually release the lock because we only want to ever run one time
+            // rootStore.unlock('replayLogs');
+            resolve();
+        }
     });
 }
 function asBinary(buffer) {

package/dist/resources/replayLogs.js.map

@@ -1 +1 @@
-{"version":3,"file":"replayLogs.js","sourceRoot":"","sources":["../../resources/replayLogs.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,sDAYC;AAED,gCAgQC;AAvSD,4EAA8D;AAC9D,qEAA+D;AAE/D,6DAAmD;AACnD,yDAAmD;AACnD,+DAM+B;AAC/B,mDAAgD;AAChD,wFAA6E;AAC7E,wDAAuD;AAEvD,IAAI,qBAAqB,GAAG,KAAK,CAAC;AAElC,mGAAmG;AACnG,2FAA2F;AAC3F,gGAAgG;AAChG,oGAAoG;AACpG,kGAAkG;AAClG,mGAAmG;AACnG,uFAAuF;AACvF,SAAgB,qBAAqB,CAAC,QAAa,EAAE,OAAY;IAChE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IACpE,CAAC;IACD,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QACpD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QAC/D,OAAO,CACN,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;YAC1E,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,CAC1E,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAgB,UAAU,CAAC,SAAwB,EAAE,MAAW;IAC/D,IAAI,CAAC,kCAAY;QAAE,OAAO,CAAC,oEAAoE;IAC/F,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE;YAC3D,OAAO,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,kFAAkF;QAClF,oFAAoF;QACpF,yFAAyF;QACzF,uFAAuF;QACvF,kEAAkE;QAClE,2FAA2F;QAC3F,0FAA0F;QAC1F,4CAA4C;QAC5C,IAAI,UAAU,GAAa,EAAE,CAAC;QAC9B,IAAI,CAAC;YACJ,UAAU,GAAG,IAAA,6BAAa,EAAC,SAAS,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CACV,0DAA2D,SAAiB,CAAC,YAAY,WAAW,EACpG,KAAK,CACL,CAAC;QACH,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CACV,UAAU,UAAU,CAAC,MAAM,kDAAmD,SAAiB,CAAC,YAAY,WAAW,CACvH,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;QACrD,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YAChC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;QACD,sBAAsB;QACtB,IAAI,WAAgC,CAAC;QACrC,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,wFAAwF;QACxF,2FAA2F;QAC3F,6FAA6F;QAC7F,0FAA0F;QAC1F,kBAAkB;QAClB,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC1C,IAAI,gBAAgB,GAAG,eAAe,CAAC;QACvC,yFAAyF;QACzF,qDAAqD;QACrD,MAAM,uBAAuB,GAAG,MAAM,CAAC,IAAA,2BAAM,EAAC,2BAAa,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACxF,MAAM,eAAe,GAAG,uBAAuB,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,gDAA0B,CAAC;QAC3G,MAAM,MAAM,GAA8B,SAAiB,CAAC,UAAU,CAAC;QACvE,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAQ,EAAE,CAAC;YACzG,IAAI,aAAa,GAAG,CAAC,IAAI,IAAA,8CAAwB,EAAC,aAAa,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC,EAAE,CAAC;gBACxG,MAAM,CAAC,KAAK,CACX,sCAAuC,SAAiB,CAAC,YAAY,cAAc,aAAa,wDAAwD,OAAO,8BAA8B,MAAM,4ZAA4Z,CAC/lB,CAAC;gBACF,MAAM;YACP,CAAC;YACD,MAAM,EACL,IAAI,EACJ,OAAO,EACP,MAAM,EACN,QAAQ,EACR,OAAO,EACP,WAAW,EACX,SAAS,EACT,oBAAoB,EACpB,QAAQ,EACR,YAAY,GACZ,GAAG,WAAW,CAAC;YAChB,IAAI,CAAC;gBACJ,IAAI,IAAA,iDAA2B,EAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,gBAAgB,EAAE,CAAC;oBACnF,OAAO,EAAE,CAAC;oBACV,aAAa,EAAE,CAAC;oBAChB,SAAS;gBACV,CAAC;gBACD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACrC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACZ,sEAAsE;oBACtE,8EAA8E;oBAC9E,+DAA+D;oBAC/D,aAAa,EAAE,CAAC;oBAChB,SAAS;gBACV,CAAC;gBACD,MAAM,EAAE,YAAY,EAAE,GAAG,KAAY,CAAC;gBACtC,IAAI,MAAW,CAAC;gBAChB,IAAI,CAAC;oBACJ,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAC7C,CAAC;gBAAC,MAAM,CAAC;oBACR,2EAA2E;oBAC3E,4EAA4E;oBAC5E,6EAA6E;oBAC7E,4EAA4E;oBAC5E,6BAA6B;oBAC7B,OAAO,EAAE,CAAC;oBACV,aAAa,EAAE,CAAC;oBAChB,SAAS;gBACV,CAAC;gBACD,IACC,IAAA,iDAA2B,EAAC,YAAY,EAAE,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,KAAK,gBAAgB;oBAC7F,IAAA,iDAA2B,EAAC,IAAI,EAAE,MAAM,CAAC,EACxC,CAAC;oBACF,OAAO,EAAE,CAAC;oBACV,aAAa,EAAE,CAAC;oBAChB,SAAS;gBACV,CAAC;gBACD,mFAAmF;gBACnF,4EAA4E;gBAC5E,MAAM,OAAO,GAAY;oBACxB,MAAM;oBACN,aAAa,EAAE,IAAI;oBACnB,OAAO;oBACP,SAAS;oBACT,IAAI,EAAE,EAAE,QAAQ,EAAE;iBACX,CAAC;gBACT,MAAM,MAAM,GAAG,IAAI,gCAAa,EAAE,CAAC;gBACnC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC;gBACjB,MAAM,aAAa,GAAQ,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;gBAClE,qGAAqG;gBACrG,6FAA6F;gBAC7F,IAAI,CAAC,qBAAqB,EAAE,CAAC;oBAC5B,qBAAqB,GAAG,IAAI,CAAC;oBAC7B,OAAO,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAC;gBACtG,CAAC;gBACD,IAAI,aAAa,KAAK,OAAO,EAAE,CAAC;oBAC/B,aAAa,GAAG,OAAO,CAAC;oBACxB,IAAI,CAAC;wBACJ,8DAA8D;wBAC9D,WAAW,EAAE,gBAAgB,EAAE,CAAC;oBACjC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;oBAC5D,CAAC;oBACD,sFAAsF;oBACtF,uFAAuF;oBACvF,sFAAsF;oBACtF,wFAAwF;oBACxF,uFAAuF;oBACvF,sFAAsF;oBACtF,qEAAqE;oBACrE,IAAI,IAAA,2CAAqB,EAAC,WAAW,CAAC,GAAG,EAAE,GAAG,eAAe,EAAE,eAAe,CAAC,EAAE,CAAC;wBACjF,MAAM,CAAC,KAAK,CACX,sCAAuC,SAAiB,CAAC,YAAY,6DAA6D,MAAM,aAAa,OAAO,iOAAiO,CAC7X,CAAC;wBACF,WAAW,GAAG,SAAgB,CAAC,CAAC,8DAA8D;wBAC9F,MAAM;oBACP,CAAC;oBACD,WAAW,GAAG,IAAI,4CAAmB,EAAE,CAAC;oBACxC,WAAW,CAAC,EAAE,GAAG,YAAY,CAAC;oBAC9B,WAAW,CAAC,SAAS,GAAG,OAAO,CAAC;oBAChC,0FAA0F;oBAC1F,WAAW,CAAC,OAAO,GAAG,CAAC,CAAC;oBACxB,uFAAuF;oBACvF,kFAAkF;oBAClF,kFAAkF;oBAClF,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC;gBAC7B,CAAC;gBACD,OAAO,CAAC,WAAW,GAAG,WAAW,CAAC;gBAClC,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;gBACvE,MAAM,EAAE,CAAC;gBACT,QAAQ,IAAI,EAAE,CAAC;oBACd,KAAK,KAAK;wBACT,aAAa,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;wBAC5D,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,4BAA4B;wBAClD,MAAM;oBACP,KAAK,OAAO;wBACX,aAAa,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;wBAC7D,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,4BAA4B;wBAClD,MAAM;oBACP,KAAK,SAAS;wBACb,aAAa,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;wBACvD,MAAM;oBACP,KAAK,UAAU;wBACd,aAAa,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;wBAChD,MAAM;oBACP,KAAK,QAAQ;wBACZ,aAAa,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;wBAC9C,MAAM;oBACP,KAAK,YAAY;wBAChB,aAAa,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;wBAC1D,MAAM;oBACP,KAAK,YAAY,CAAC,CAAC,CAAC;wBACnB,MAAM,kBAAkB,GAAG,WAAW,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;wBACpE,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;wBAC3G,wFAAwF;wBACxF,4EAA4E;wBAC5E,2FAA2F;wBAC3F,sFAAsF;wBACtF,2FAA2F;wBAC3F,4FAA4F;wBAC5F,6FAA6F;wBAC7F,8FAA8F;wBAC9F,oFAAoF;wBACpF,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;wBACrC,MAAM,mBAAmB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;wBACrE,OAAO,CAAC,SAAS,CAAC,eAAe,CAChC,CAAC,GAAG,EAAE,EAAE;4BACP,qFAAqF;4BACrF,iFAAiF;4BACjF,IAAI,CAAC,iBAAiB,EAAE,CAAC;gCACxB,MAAM,CAAC,IAAI,CACV,8FAA8F,OAAO,CAAC,IAAI,IAAI,CAC9G,CAAC;gCACF,OAAO;4BACR,CAAC;4BACD,MAAM,wBAAwB,GAAG,GAAG,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;4BACxE,MAAM,kBAAkB,GAAG,wBAAwB;gCAClD,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,wBAAwB,CAAC;gCAC1C,CAAC,CAAC,SAAS,CAAC;4BACb,mFAAmF;4BACnF,mFAAmF;4BACnF,oFAAoF;4BACpF,IAAI,kBAAkB,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,EAAE,CAAC;gCACxF,MAAM,CAAC,IAAI,CACV,mCAAmC,OAAO,CAAC,IAAI,qEAAqE,CACpH,CAAC;gCACF,OAAO;4BACR,CAAC;4BACD,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;wBAChE,CAAC,EACD,EAAE,WAAW,EAAE,IAAI,EAAE,CACrB,CAAC;wBACF,iFAAiF;wBACjF,2FAA2F;wBAC3F,wFAAwF;wBACxF,0FAA0F;oBAC3F,CAAC;gBACF,CAAC;gBACD,8EAA8E;gBAC9E,8EAA8E;gBAC9E,qFAAqF;gBACrF,aAAa,GAAG,CAAC,CAAC;gBAClB,gBAAgB,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YACtC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,iFAAiF;gBACjF,8EAA8E;gBAC9E,uFAAuF;gBACvF,aAAa,EAAE,CAAC;gBAChB,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,EAAE;oBACrD,OAAO;iBACP,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QACD,IAAI,CAAC;YACJ,WAAW,EAAE,gBAAgB,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,YAAY,MAAM,eAAgB,SAAiB,CAAC,YAAY,WAAW,CAAC,CAAC;QACzG,IAAI,OAAO,GAAG,CAAC;YACd,MAAM,CAAC,IAAI,CACV,WAAW,OAAO,mCAAoC,SAAiB,CAAC,YAAY,yBAAyB,CAC7G,CAAC;QACH,+EAA+E;QAC/E,kCAAkC;IACnC,CAAC,CAAC,CAAC;AACJ,CAAC;AACD,SAAS,QAAQ,CAAC,MAAM;IACvB,OAAO,EAAE,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"replayLogs.js","sourceRoot":"","sources":["../../resources/replayLogs.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,sDAYC;AAGD,gDAGC;AAaD,gCAwWC;AAhaD,4EAA8D;AAC9D,qEAA+D;AAE/D,6DAAmD;AACnD,yDAAmD;AACnD,+DAM+B;AAC/B,mDAAgD;AAChD,wFAA6E;AAC7E,wDAAuD;AAEvD,IAAI,qBAAqB,GAAG,KAAK,CAAC;AAElC,mGAAmG;AACnG,2FAA2F;AAC3F,gGAAgG;AAChG,oGAAoG;AACpG,kGAAkG;AAClG,mGAAmG;AACnG,uFAAuF;AACvF,SAAgB,qBAAqB,CAAC,QAAa,EAAE,OAAY;IAChE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IACpE,CAAC;IACD,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QACpD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QAC/D,OAAO,CACN,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;YAC1E,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,CAC1E,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,2FAA2F;AAC3F,SAAgB,kBAAkB;IACjC,MAAM,uBAAuB,GAAG,MAAM,CAAC,IAAA,2BAAM,EAAC,2BAAa,CAAC,yBAAyB,CAAC,CAAC,CAAC;IACxF,OAAO,uBAAuB,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,gDAA0B,CAAC;AAC3F,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,UAAU,CAAC,SAAwB,EAAE,MAAW,EAAE,eAAyB;IAC1F,IAAI,CAAC,kCAAY,IAAI,CAAC,eAAe;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,oEAAoE;IACrI,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE;YAC3D,OAAO,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,0FAA0F;YAC1F,sFAAsF;YACtF,mEAAmE;YACnE,IAAI,eAAe;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAwB,SAAiB,CAAC,YAAY,kBAAkB,CAAC,CAAC,CAAC;YACjH,OAAO;QACR,CAAC;QACD,kFAAkF;QAClF,oFAAoF;QACpF,yFAAyF;QACzF,uFAAuF;QACvF,kEAAkE;QAClE,2FAA2F;QAC3F,0FAA0F;QAC1F,4CAA4C;QAC5C,IAAI,UAAU,GAAa,EAAE,CAAC;QAC9B,IAAI,CAAC;YACJ,UAAU,GAAG,IAAA,6BAAa,EAAC,SAAS,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CACV,0DAA2D,SAAiB,CAAC,YAAY,WAAW,EACpG,KAAK,CACL,CAAC;QACH,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CACV,UAAU,UAAU,CAAC,MAAM,kDAAmD,SAAiB,CAAC,YAAY,WAAW,CACvH,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;QACrD,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YAChC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;QACD,sBAAsB;QACtB,IAAI,WAA4C,CAAC;QACjD,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,mGAAmG;QACnG,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,oFAAoF;QACpF,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,wFAAwF;QACxF,2FAA2F;QAC3F,6FAA6F;QAC7F,0FAA0F;QAC1F,kBAAkB;QAClB,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC1C,IAAI,gBAAgB,GAAG,eAAe,CAAC;QACvC,yFAAyF;QACzF,qDAAqD;QACrD,MAAM,eAAe,GAAG,kBAAkB,EAAE,CAAC;QAC7C,8FAA8F;QAC9F,0CAA0C;QAC1C,IAAI,aAAgC,CAAC;QACrC,MAAM,WAAW,GAAG,CAAC,KAAY,EAAE,MAAuC,EAAQ,EAAE;YACnF,IAAI,CAAC;gBACJ,MAAM,EAAE,KAAK,EAAE,CAAC;YACjB,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,UAAU,CAAC,CAAC;YACvE,CAAC;YACD,aAAa,GAAG,KAAK,CAAC;QACvB,CAAC,CAAC;QACF,MAAM,MAAM,GAA8B,SAAiB,CAAC,UAAU,CAAC;QACvE,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC/B,oBAAoB,EAAE,IAAI;YAC1B,eAAe,EAAE,IAAI;YACrB,wBAAwB,EAAE,IAAI;SAC9B,CAAC,CAAC;QACH,KAAK,MAAM,WAAW,IAAI,OAAc,EAAE,CAAC;YAC1C,IAAI,aAAa,GAAG,CAAC,IAAI,IAAA,8CAAwB,EAAC,aAAa,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC,EAAE,CAAC;gBACxG,MAAM,eAAe,GAAG,sCAAuC,SAAiB,CAAC,YAAY,cAAc,aAAa,wDAAwD,OAAO,8BAA8B,MAAM,gPAAgP,CAAC;gBAC5c,IAAI,eAAe,EAAE,CAAC;oBACrB,WAAW,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,EAAE,WAAW,CAAC,CAAC;oBACrD,MAAM;gBACP,CAAC;gBACD,MAAM,CAAC,KAAK,CACX,GAAG,eAAe,8KAA8K,CAChM,CAAC;gBACF,MAAM;YACP,CAAC;YACD,MAAM,EACL,IAAI,EACJ,OAAO,EACP,MAAM,EACN,QAAQ,EACR,OAAO,EACP,SAAS,EACT,WAAW,EACX,SAAS,EACT,oBAAoB,EACpB,QAAQ,EACR,YAAY,GACZ,GAAG,WAAW,CAAC;YAChB,IAAI,CAAC;gBACJ,IAAI,IAAA,iDAA2B,EAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,gBAAgB,EAAE,CAAC;oBACnF,OAAO,EAAE,CAAC;oBACV,aAAa,EAAE,CAAC;oBAChB,SAAS;gBACV,CAAC;gBACD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACrC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACZ,sEAAsE;oBACtE,8EAA8E;oBAC9E,+DAA+D;oBAC/D,aAAa,EAAE,CAAC;oBAChB,SAAS;gBACV,CAAC;gBACD,MAAM,EAAE,YAAY,EAAE,GAAG,KAAY,CAAC;gBACtC,IAAI,MAAW,CAAC;gBAChB,IAAI,CAAC;oBACJ,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAC7C,CAAC;gBAAC,MAAM,CAAC;oBACR,2EAA2E;oBAC3E,4EAA4E;oBAC5E,6EAA6E;oBAC7E,4EAA4E;oBAC5E,6BAA6B;oBAC7B,OAAO,EAAE,CAAC;oBACV,aAAa,EAAE,CAAC;oBAChB,SAAS;gBACV,CAAC;gBACD,IACC,IAAA,iDAA2B,EAAC,YAAY,EAAE,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,KAAK,gBAAgB;oBAC7F,IAAA,iDAA2B,EAAC,IAAI,EAAE,MAAM,CAAC,EACxC,CAAC;oBACF,OAAO,EAAE,CAAC;oBACV,aAAa,EAAE,CAAC;oBAChB,SAAS;gBACV,CAAC;gBACD,mFAAmF;gBACnF,4EAA4E;gBAC5E,MAAM,OAAO,GAAY;oBACxB,MAAM;oBACN,aAAa,EAAE,IAAI;oBACnB,OAAO;oBACP,SAAS;oBACT,IAAI,EAAE,EAAE,QAAQ,EAAE;iBACX,CAAC;gBACT,MAAM,MAAM,GAAG,IAAI,gCAAa,EAAE,CAAC;gBACnC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC;gBACjB,MAAM,aAAa,GAAQ,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;gBAClE,qGAAqG;gBACrG,6FAA6F;gBAC7F,IAAI,CAAC,qBAAqB,EAAE,CAAC;oBAC5B,qBAAqB,GAAG,IAAI,CAAC;oBAC7B,OAAO,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAC;gBACtG,CAAC;gBACD,+FAA+F;gBAC/F,2FAA2F;gBAC3F,4FAA4F;gBAC5F,8DAA8D;gBAC9D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;oBACjC,MAAM,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;oBAC3E,aAAa,GAAG,SAAS,CAAC;oBAC1B,IAAI,CAAC;wBACJ,gFAAgF;wBAChF,kFAAkF;wBAClF,4EAA4E;wBAC5E,IAAI,IAAI,EAAE,CAAC;4BACV,MAAM,IAAI,YAAY,CAAC;4BACvB,eAAe,IAAI,YAAY,CAAC;4BAChC,WAAW,EAAE,KAAK,EAAE,CAAC;wBACtB,CAAC;;4BAAM,WAAW,EAAE,gBAAgB,EAAE,CAAC;oBACxC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,oFAAoF;wBACpF,gFAAgF;wBAChF,kFAAkF;wBAClF,4EAA4E;wBAC5E,IAAI,CAAC,IAAI;4BAAE,MAAM,IAAI,YAAY,CAAC;wBAClC,IAAI,eAAe,EAAE,CAAC;4BACrB,aAAa,GAAG,KAAK,CAAC;4BACtB,MAAM;wBACP,CAAC;wBACD,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,YAAY,qBAAqB,EAAE,KAAK,CAAC,CAAC;oBAC9F,CAAC;oBACD,YAAY,GAAG,CAAC,CAAC;oBACjB,sFAAsF;oBACtF,uFAAuF;oBACvF,sFAAsF;oBACtF,wFAAwF;oBACxF,uFAAuF;oBACvF,sFAAsF;oBACtF,qEAAqE;oBACrE,IAAI,IAAA,2CAAqB,EAAC,WAAW,CAAC,GAAG,EAAE,GAAG,eAAe,EAAE,eAAe,CAAC,EAAE,CAAC;wBACjF,MAAM,WAAW,GAAG,sCAAuC,SAAiB,CAAC,YAAY,6DAA6D,MAAM,aAAa,OAAO,iOAAiO,CAAC;wBAClZ,WAAW,GAAG,SAAS,CAAC,CAAC,8DAA8D;wBACvF,IAAI,eAAe,EAAE,CAAC;4BACrB,aAAa,GAAG,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;4BACvC,MAAM;wBACP,CAAC;wBACD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;wBAC1B,MAAM;oBACP,CAAC;oBACD,WAAW,GAAG,IAAI,4CAAmB,EAAE,CAAC;oBACxC,WAAW,CAAC,EAAE,GAAG,YAAY,CAAC;oBAC9B,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;oBAClC,0FAA0F;oBAC1F,WAAW,CAAC,OAAO,GAAG,CAAC,CAAC;oBACxB,uFAAuF;oBACvF,kFAAkF;oBAClF,kFAAkF;oBAClF,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC;gBAC7B,CAAC;gBACD,OAAO,CAAC,WAAW,GAAG,WAAW,CAAC;gBAClC,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC;gBAChF,MAAM,EAAE,CAAC;gBACT,YAAY,EAAE,CAAC;gBACf,QAAQ,IAAI,EAAE,CAAC;oBACd,KAAK,KAAK;wBACT,aAAa,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;wBAC5D,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,4BAA4B;wBAClD,MAAM;oBACP,KAAK,OAAO;wBACX,aAAa,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;wBAC7D,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,4BAA4B;wBAClD,MAAM;oBACP,KAAK,SAAS;wBACb,aAAa,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;wBACvD,MAAM;oBACP,KAAK,UAAU;wBACd,aAAa,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;wBAChD,MAAM;oBACP,KAAK,QAAQ;wBACZ,aAAa,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;wBAC9C,MAAM;oBACP,KAAK,YAAY;wBAChB,aAAa,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;wBAC1D,MAAM;oBACP,KAAK,YAAY,CAAC,CAAC,CAAC;wBACnB,MAAM,kBAAkB,GAAG,WAAW,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;wBACpE,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;wBAC3G,wFAAwF;wBACxF,4EAA4E;wBAC5E,2FAA2F;wBAC3F,sFAAsF;wBACtF,2FAA2F;wBAC3F,4FAA4F;wBAC5F,6FAA6F;wBAC7F,8FAA8F;wBAC9F,oFAAoF;wBACpF,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;wBACrC,MAAM,mBAAmB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;wBACrE,OAAO,CAAC,SAAS,CAAC,eAAe,CAChC,CAAC,GAAG,EAAE,EAAE;4BACP,qFAAqF;4BACrF,iFAAiF;4BACjF,IAAI,CAAC,iBAAiB,EAAE,CAAC;gCACxB,MAAM,CAAC,IAAI,CACV,8FAA8F,OAAO,CAAC,IAAI,IAAI,CAC9G,CAAC;gCACF,OAAO;4BACR,CAAC;4BACD,MAAM,wBAAwB,GAAG,GAAG,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;4BACxE,MAAM,kBAAkB,GAAG,wBAAwB;gCAClD,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,wBAAwB,CAAC;gCAC1C,CAAC,CAAC,SAAS,CAAC;4BACb,mFAAmF;4BACnF,mFAAmF;4BACnF,oFAAoF;4BACpF,IAAI,kBAAkB,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,EAAE,CAAC;gCACxF,MAAM,CAAC,IAAI,CACV,mCAAmC,OAAO,CAAC,IAAI,qEAAqE,CACpH,CAAC;gCACF,OAAO;4BACR,CAAC;4BACD,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;wBAChE,CAAC,EACD,EAAE,WAAW,EAAE,IAAI,EAAE,CACrB,CAAC;wBACF,iFAAiF;wBACjF,2FAA2F;wBAC3F,wFAAwF;wBACxF,0FAA0F;oBAC3F,CAAC;gBACF,CAAC;gBACD,8EAA8E;gBAC9E,8EAA8E;gBAC9E,qFAAqF;gBACrF,aAAa,GAAG,CAAC,CAAC;gBAClB,gBAAgB,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YACtC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,IAAI,eAAe,EAAE,CAAC;oBACrB,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;oBAC9B,MAAM;gBACP,CAAC;gBACD,iFAAiF;gBACjF,8EAA8E;gBAC9E,uFAAuF;gBACvF,aAAa,EAAE,CAAC;gBAChB,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,EAAE;oBACrD,OAAO;iBACP,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAChF,IAAI,CAAC,aAAa,EAAE,CAAC;YACpB,IAAI,CAAC;gBACJ,IAAI,SAAS,EAAE,CAAC;oBACf,MAAM,IAAI,YAAY,CAAC;oBACvB,eAAe,IAAI,YAAY,CAAC;oBAChC,WAAW,EAAE,KAAK,EAAE,CAAC;gBACtB,CAAC;;oBAAM,WAAW,EAAE,gBAAgB,EAAE,CAAC;YACxC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,oFAAoF;gBACpF,uFAAuF;gBACvF,wCAAwC;gBACxC,IAAI,CAAC,SAAS;oBAAE,MAAM,IAAI,YAAY,CAAC;gBACvC,IAAI,eAAe;oBAAE,aAAa,GAAG,KAAK,CAAC;gBAC3C,MAAM,CAAC,KAAK,CAAC,SAAS,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,YAAY,qBAAqB,EAAE,KAAK,CAAC,CAAC;YACnG,CAAC;QACF,CAAC;QACD,+FAA+F;QAC/F,iGAAiG;QACjG,2FAA2F;QAC3F,kEAAkE;QAClE,IAAI,OAAO,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,CAAC,KAAK,CACX,6BAA8B,SAAiB,CAAC,YAAY,wDAAwD,MAAM,gGAAgG,eAAe,iKAAiK,CAC1Y,CAAC;YACF,yFAAyF;YACzF,0FAA0F;YAC1F,+DAA+D;YAC/D,IAAI,eAAe,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvC,aAAa,GAAG,IAAI,KAAK,CACxB,qBAAsB,SAAiB,CAAC,YAAY,2OAA2O,CAC/R,CAAC;YACH,CAAC;QACF,CAAC;QACD,IAAI,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,YAAY,MAAM,eAAgB,SAAiB,CAAC,YAAY,WAAW,CAAC,CAAC;QACzG,IAAI,OAAO,GAAG,CAAC;YACd,MAAM,CAAC,IAAI,CACV,WAAW,OAAO,mCAAoC,SAAiB,CAAC,YAAY,yBAAyB,CAC7G,CAAC;QACH,IAAI,aAAa,EAAE,CAAC;YACnB,0FAA0F;YAC1F,qFAAqF;YACrF,uFAAuF;YACvF,uFAAuF;YACvF,kDAAkD;YAClD,MAAM,CAAC,aAAa,CAAC,CAAC;YACtB,IAAI,CAAC;gBACJ,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,WAAW,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,uDAAuD,EAAE,WAAW,CAAC,CAAC;YACnF,CAAC;QACF,CAAC;aAAM,CAAC;YACP,+EAA+E;YAC/E,kCAAkC;YAClC,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC;AACD,SAAS,QAAQ,CAAC,MAAM;IACvB,OAAO,EAAE,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC"}

package/dist/resources/replayLogsGuards.d.ts

@@ -60,11 +60,98 @@ export declare const REPLAY_WALL_CLOCK_LIMIT_MS: number;
  */
 export declare function shouldAbortSlowReplay(totalElapsedMs: number, timeLimitMs?: number): boolean;
 /**
- * Wraps a transaction-log query iterator so a corrupt/torn frame ends that log's iteration
- * cleanly instead of escaping as an uncaughtException. rocksdb-js throws a bounded RangeError
- * when an entry's framing is broken; framing loss means the next entry can't be located, so the
- * frame marks end-of-log (entries before it were already yielded) and startup replay /
- * replication broadcast continue. `onCorruptFrame` fires once, latched — kept a callback (not a
- * direct log) so this module stays out of the Harper module graph and is unit-testable.
+ * A corrupt transaction-log frame from rocksdb-js. `resyncPosition` is set only when intact entries
+ * follow the break, which is what distinguishes lost entries from a merely truncated tail; its
+ * absence is also all that any rocksdb-js predating that field can report.
  */
-export declare function endIteratorOnCorruptFrame<T>(iterator: Iterator<T>, onCorruptFrame: (error: RangeError) => void): IterableIterator<T>;
+export type CorruptFrameError = RangeError & {
+    logId?: number | null;
+    position?: number | null;
+    resyncPosition?: number | null;
+    unreadableBytes?: number | null;
+};
+/**
+ * Corrupt frames hit by one `getRange` call, shared by its per-log iterators.
+ *
+ * `truncatedVersions` is what a consumer has to act on: a break destroys the framing after the last
+ * entry the broken log yielded, and whether the entries it swallowed continued that entry's version
+ * is exactly what can no longer be read — UNLESS that last entry's own `endTxn` already closed its
+ * transaction, in which case nothing of it was left open to swallow. That version's transaction is
+ * therefore incomplete only when it wasn't already known-closed, and replay must discard it rather
+ * than commit the part of it that was still readable. A log that broke before yielding anything
+ * truncates no transaction.
+ *
+ * `midLogBreak` is coarser: true once any break in this range left intact entries unreadable behind
+ * it (see {@link isMidLogBreak}), regardless of which version they belonged to. A consumer that must
+ * never serve a range with lost entries — an elected branch replay publishing itself as a trustworthy
+ * point-in-time copy — rejects on this rather than on `truncatedVersions`, since a mid-log break can
+ * strand entries whose version this range never even attributes to one log (harper#2016, #2063).
+ */
+export interface CorruptFrameStop {
+    breaks: number;
+    truncatedVersions: Set<number>;
+    midLogBreak: boolean;
+}
+/**
+ * Whether a corrupt frame is a mid-log break — intact entries followed it, so entries were lost
+ * rather than the log merely being torn at its tail. Shared by the reporter below and by
+ * `RocksTransactionLogStore.getRange`'s `CorruptFrameStop.midLogBreak`, so the two can't drift on
+ * what counts as a mid-log break.
+ */
+export declare function isMidLogBreak(error: CorruptFrameError): boolean;
+/**
+ * Wraps a transaction-log query iterator so a corrupt/torn frame ends that log's iteration cleanly
+ * instead of escaping as an uncaughtException.
+ *
+ * Iteration stops at the break whether or not intact entries follow it. Resuming past a mid-log
+ * break would recover those entries, but a transaction log carries no frame-level transaction
+ * boundaries: replay groups equal-version entries into one source transaction, so skipping a frame
+ * inside such a group applies and checkpoints the surviving subset of a transaction that never
+ * committed that way at the source. Availability loss is visible and recoverable; a silently torn
+ * transaction is neither. Recovery is deferred until the engine can resume at a proven boundary
+ * (harper#2016, harper#2063); `resyncPosition` is used only to report the break as lost entries
+ * rather than as a truncated tail.
+ */
+export declare function endIteratorOnCorruptFrame<T>(iterator: Iterator<T>, onCorruptFrame: (error: CorruptFrameError) => void): IterableIterator<T>;
+/**
+ * A corrupt frame, accumulated for the life of the process. The same frame is re-encountered by
+ * every reader until each consumer's resume cursor has passed it, so this is deduplicated by
+ * location and the repeats become a count.
+ */
+export interface CorruptFrameReport {
+    log: string;
+    logId?: number;
+    position?: number;
+    /** Intact entries followed the break, so entries were lost rather than merely truncated. */
+    midLog: boolean;
+    /** Extent of the unreadable region, when the engine reports it; 0 when nothing valid follows it. */
+    unreadableBytes: number;
+    firstSeen: number;
+    lastSeen: number;
+    occurrences: number;
+}
+/** Distinct break sites retained. One physical corruption yields one site, so this is generous. */
+export declare const MAX_CORRUPT_FRAME_REPORTS = 256;
+/**
+ * Every corrupt frame seen by this worker. This is not yet consumed by cluster/health status;
+ * callers must aggregate it across worker threads before exposing a node-wide signal.
+ *
+ * Mid-log breaks are immediately logged at error level even without that consumer.
+ */
+export declare function getCorruptFrameReports(): CorruptFrameReport[];
+/** Break sites evicted because {@link MAX_CORRUPT_FRAME_REPORTS} was reached. */
+export declare function getEvictedCorruptFrameReportCount(): number;
+export declare function clearCorruptFrameReports(): void;
+/**
+ * Records a corrupt frame and logs it once per distinct break.
+ *
+ * A mid-log break is an `error`, not a `warn`: entries after it were acknowledged and are now
+ * quarantined behind it. Severity follows the break's own shape, never this pass's outcome — every
+ * pass stops, so keying on that would report the #2063 signature with the benign torn-tail `warn`.
+ * A site first seen as a torn tail can escalate later, since only a rocksdb-js that reports
+ * `resyncPosition` can tell the two apart.
+ */
+export declare function createCorruptFrameReporter(logger: {
+    warn: (message: string, error?: unknown) => void;
+    error: (message: string, error?: unknown) => void;
+}): (logName: string) => (error: CorruptFrameError) => void;