@indigoai-us/hq-cloud 6.16.67 → 6.16.68-alpha.0

package/dist/cli/sync.d.ts

@@ -585,10 +585,10 @@ export interface SyncOptions {
      */
     onHeartbeat?: () => void;
     /**
-     * Watch-runner hand-off seam for an unscoped full pull. It is invoked only
-     * after one drained download chunk has made its journal changes durable.
-     * Returning true means realtime ran; this pull discards its stale plan and
-     * resumes from a fresh durable journal snapshot.
+     * Watch-runner hand-off seam for an unscoped full pull. Invoked at LIST
+     * page boundaries, every 500 planned rows, and after each drained download
+     * chunk. Returning true means realtime ran; this pull overlays the journal
+     * delta and continues the same LIST/plan/queue instead of re-LISTing S3.
      */
     cooperativeCheckpoint?: () => Promise<void | boolean>;
     /**
@@ -848,6 +848,28 @@ export declare function targetedJournalSessionCensusSizes(): Record<string, numb
  * resulting journal delta is durable before realtime can acquire the writer.
  */
 export declare const FULL_PULL_COOPERATIVE_CHECKPOINT_BATCH_SIZE = 500;
+/**
+ * ListObjectsV2 page size (AWS MaxKeys default). Full-pull LIST yields the
+ * root lock at each page boundary so queued realtime work is not stuck behind
+ * a 30-minute personal-vault spool.
+ */
+export declare const FULL_PULL_LIST_PAGE_CHECKPOINT_SIZE = 1000;
+declare function enableCooperativeRowVisits(): void;
+declare function disableCooperativeRowVisits(): void;
+declare function snapshotCooperativeRowVisits(): {
+    list: Map<string, number>;
+    plan: Map<string, number>;
+};
+/**
+ * Test-only export. Kept under `_testing` so the public surface stays `sync()`.
+ * Do NOT import from `_testing` outside of tests in this package.
+ */
+export declare const _testing: {
+    enableCooperativeRowVisits: typeof enableCooperativeRowVisits;
+    disableCooperativeRowVisits: typeof disableCooperativeRowVisits;
+    cooperativeRowVisits: typeof snapshotCooperativeRowVisits;
+    cooperativePhase: () => "list" | "plan" | "download" | null;
+};
 /**
  * Best-effort report of the files that were new to this drive during the sync,
  * so the HQ Sync app can show a persistent cross-session "new files" history.
@@ -882,4 +904,5 @@ export declare function sync(options: SyncOptions): Promise<SyncResult>;
  * false off win32.
  */
 export declare function win32SymlinkFlavorBroken(localPath: string, win32?: boolean): boolean;
+export {};
 //# sourceMappingURL=sync.d.ts.map

package/dist/cli/sync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../src/cli/sync.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAEV,kBAAkB,EAEnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAA+B,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAUhF,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,wBAAwB,CAAC;AAgEhC,OAAO,EAML,KAAK,gBAAgB,EACtB,MAAM,uBAAuB,CAAC;AAI/B,OAAO,EAML,KAAK,iBAAiB,EAEvB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAW5F,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,cAAc,EACd,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAA4B,KAAK,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAEtG,iFAAiF;AACjF,eAAO,MAAM,2BAA2B,+CAAgD,CAAC;AAEzF;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,kBAAkB,CAAC;AAElE,yFAAyF;AACzF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAI3E;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,KAAK,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAAC,KAAK,CAAC,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;CACnJ;AA+CD;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,MAAM,CAAC,CAWjB;AAED,gFAAgF;AAChF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,qBAAqB,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,cAAc,CAEjH;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,aAAa,GAAG,eAAe,GAAG,QAAQ,CAAC,EACjE,YAAY,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,mBAAmB,CAAC,GACjE,OAAO,CAAC,IAAI,CAAC,CAEf;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,iBAAiB,GACzB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;;;OAOG;IACH,aAAa,EAAE,MAAM,CAAC;CACvB,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IAC1B;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB,GACD;IACE,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,IAAI,CAAC;CACnB,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,UAAU,EAAE,kBAAkB,CAAC;IAC/B,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,gBAAgB,CAAC;CAC7B,GACD;IACE;;;;;;OAMG;IACH,IAAI,EAAE,2BAA2B,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,sBAAsB,GAAG,0BAA0B,CAAC;CAC/D,GACD;IACE;;;;;OAKG;IACH,IAAI,EAAE,mCAAmC,CAAC;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,GACD;IACE;;;;;;;;;;;;;;;;OAgBG;IACH,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B,GACD;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CACvE,GACD;IACE;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,IAAI,EAAE,2BAA2B,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EACF,YAAY,GACZ,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,uBAAuB,GACvB,gBAAgB,GAChB,mBAAmB,GACnB,iBAAiB,CAAC;CACvB,GACD;IACE;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,IAAI,EAAE,+BAA+B,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,GACD;IACE;;;;;;;;;;;;;;;OAeG;IACH,IAAI,EAAE,8BAA8B,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,GACD;IACE;;;;;;;;;;;;;;;;;;;OAmBG;IACH,IAAI,EAAE,+BAA+B,CAAC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC,GACD;IACE;;;;;;;OAOG;IACH,IAAI,EAAE,sCAAsC,CAAC;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,GACD;IACE;;;;;;;;;;;;;;;;OAgBG;IACH,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,GACD;IACE;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,IAAI,EAAE,2BAA2B,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,QAAQ,CAAC;CACpB,GACD;IACE;;;;;;;;;OASG;IACH,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,GACD;IACE;;;;;;;;;;;OAWG;IACH,IAAI,EAAE,6BAA6B,CAAC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB,GACD;IACE;;;;;;;;;;;;OAYG;IACH,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf,GACD;IACE;;;;;;;;;;;;;;OAcG;IACH,IAAI,EAAE,yBAAyB,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACD;IACE;;;;;;;;;;;;;;OAcG;IACH,IAAI,EAAE,wBAAwB,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,YAAY,EAAE,MAAM,CAAC;CACtB,GACD;IACE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA0CG;IACH,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EACF,kBAAkB,GAClB,iBAAiB,GACjB,gBAAgB,GAChB,qBAAqB,GACrB,2BAA2B,GAC3B,4BAA4B,GAC5B,6BAA6B,GAC7B,2BAA2B,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACD;IACE;;;;;;;;;;;;;;;;OAgBG;IACH,IAAI,EAAE,wBAAwB,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IACE;;;;;;;;;;;;;;;;;OAiBG;IACH,IAAI,EAAE,qBAAqB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IACE;;;;;OAKG;IACH,IAAI,EAAE,2BAA2B,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEN,MAAM,WAAW,WAAW;IAC1B,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,2BAA2B;IAC3B,WAAW,EAAE,kBAAkB,CAAC;IAChC,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC7C;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IACtD;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;IACzB;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC;IACtD;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,gBAAgB,GAAG,YAAY,GAAG,KAAK,CAAC;IAChE;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACtC;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACvD;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC/B;;;;;;;;;;;;;;;OAeG;IACH,eAAe,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACrC;;;;;;;;;;;;;;;;;;OAkBG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;;;;;;;;;;;OAiBG;IACH,iBAAiB,CAAC,EAAE,OAAO,GAAG,cAAc,CAAC;IAC7C;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;OAGG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC;;;;OAIG;IACH,cAAc,CAAC,EAAE,wBAAwB,CAAC;CAC3C;AAED,MAAM,WAAW,UAAU;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,4CAA4C;IAC5C,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;;OAOG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAC9B;;;;;;;;;OASG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;;;OAOG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;OAGG;IACH,cAAc,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD;AAmHD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAM5C;AAwDD,2EAA2E;AAC3E,wBAAgB,iCAAiC,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAK1E;AAOD;;;GAGG;AACH,eAAO,MAAM,2CAA2C,MAAM,CAAC;AAY/D;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,kBAAkB,EAC/B,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,EACrE,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,GACvC,OAAO,CAAC,IAAI,CAAC,CA6Ef;AAoCD;;GAEG;AACH,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAOpE;AAsuED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,KAAK,GAAE,OAAsC,GAC5C,OAAO,CAoBT"}
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../src/cli/sync.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAEV,kBAAkB,EAEnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAA+B,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAUhF,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,wBAAwB,CAAC;AAgEhC,OAAO,EAML,KAAK,gBAAgB,EACtB,MAAM,uBAAuB,CAAC;AAI/B,OAAO,EAML,KAAK,iBAAiB,EAEvB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAW5F,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,cAAc,EACd,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAA4B,KAAK,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAEtG,iFAAiF;AACjF,eAAO,MAAM,2BAA2B,+CAAgD,CAAC;AAEzF;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,kBAAkB,CAAC;AAElE,yFAAyF;AACzF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAI3E;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,KAAK,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAAC,KAAK,CAAC,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;CACnJ;AA+CD;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,MAAM,CAAC,CAWjB;AAED,gFAAgF;AAChF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,qBAAqB,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,cAAc,CAEjH;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,aAAa,GAAG,eAAe,GAAG,QAAQ,CAAC,EACjE,YAAY,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,mBAAmB,CAAC,GACjE,OAAO,CAAC,IAAI,CAAC,CAEf;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,iBAAiB,GACzB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;;;OAOG;IACH,aAAa,EAAE,MAAM,CAAC;CACvB,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IAC1B;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB,GACD;IACE,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,IAAI,CAAC;CACnB,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,UAAU,EAAE,kBAAkB,CAAC;IAC/B,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,gBAAgB,CAAC;CAC7B,GACD;IACE;;;;;;OAMG;IACH,IAAI,EAAE,2BAA2B,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,sBAAsB,GAAG,0BAA0B,CAAC;CAC/D,GACD;IACE;;;;;OAKG;IACH,IAAI,EAAE,mCAAmC,CAAC;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,GACD;IACE;;;;;;;;;;;;;;;;OAgBG;IACH,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B,GACD;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CACvE,GACD;IACE;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,IAAI,EAAE,2BAA2B,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EACF,YAAY,GACZ,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,uBAAuB,GACvB,gBAAgB,GAChB,mBAAmB,GACnB,iBAAiB,CAAC;CACvB,GACD;IACE;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,IAAI,EAAE,+BAA+B,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,GACD;IACE;;;;;;;;;;;;;;;OAeG;IACH,IAAI,EAAE,8BAA8B,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,GACD;IACE;;;;;;;;;;;;;;;;;;;OAmBG;IACH,IAAI,EAAE,+BAA+B,CAAC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC,GACD;IACE;;;;;;;OAOG;IACH,IAAI,EAAE,sCAAsC,CAAC;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,GACD;IACE;;;;;;;;;;;;;;;;OAgBG;IACH,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,GACD;IACE;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,IAAI,EAAE,2BAA2B,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,QAAQ,CAAC;CACpB,GACD;IACE;;;;;;;;;OASG;IACH,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,GACD;IACE;;;;;;;;;;;OAWG;IACH,IAAI,EAAE,6BAA6B,CAAC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB,GACD;IACE;;;;;;;;;;;;OAYG;IACH,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf,GACD;IACE;;;;;;;;;;;;;;OAcG;IACH,IAAI,EAAE,yBAAyB,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACD;IACE;;;;;;;;;;;;;;OAcG;IACH,IAAI,EAAE,wBAAwB,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,YAAY,EAAE,MAAM,CAAC;CACtB,GACD;IACE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA0CG;IACH,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EACF,kBAAkB,GAClB,iBAAiB,GACjB,gBAAgB,GAChB,qBAAqB,GACrB,2BAA2B,GAC3B,4BAA4B,GAC5B,6BAA6B,GAC7B,2BAA2B,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACD;IACE;;;;;;;;;;;;;;;;OAgBG;IACH,IAAI,EAAE,wBAAwB,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IACE;;;;;;;;;;;;;;;;;OAiBG;IACH,IAAI,EAAE,qBAAqB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IACE;;;;;OAKG;IACH,IAAI,EAAE,2BAA2B,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEN,MAAM,WAAW,WAAW;IAC1B,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,2BAA2B;IAC3B,WAAW,EAAE,kBAAkB,CAAC;IAChC,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC7C;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IACtD;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;IACzB;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC;IACtD;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,gBAAgB,GAAG,YAAY,GAAG,KAAK,CAAC;IAChE;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACtC;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACvD;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC/B;;;;;;;;;;;;;;;OAeG;IACH,eAAe,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACrC;;;;;;;;;;;;;;;;;;OAkBG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;;;;;;;;;;;OAiBG;IACH,iBAAiB,CAAC,EAAE,OAAO,GAAG,cAAc,CAAC;IAC7C;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;OAGG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC;;;;OAIG;IACH,cAAc,CAAC,EAAE,wBAAwB,CAAC;CAC3C;AAED,MAAM,WAAW,UAAU;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,4CAA4C;IAC5C,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;;OAOG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAC9B;;;;;;;;;OASG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;;;OAOG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;OAGG;IACH,cAAc,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD;AAsJD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAM5C;AAwDD,2EAA2E;AAC3E,wBAAgB,iCAAiC,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAK1E;AAOD;;;GAGG;AACH,eAAO,MAAM,2CAA2C,MAAM,CAAC;AAC/D;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,OAAO,CAAC;AAmBxD,iBAAS,0BAA0B,IAAI,IAAI,CAK1C;AAED,iBAAS,2BAA2B,IAAI,IAAI,CAK3C;AAED,iBAAS,4BAA4B,IAAI;IACvC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1B,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3B,CAKA;AAED;;;GAGG;AACH,eAAO,MAAM,QAAQ;;;;4BAIG,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,IAAI;CAC1D,CAAC;AAYF;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,kBAAkB,EAC/B,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,EACrE,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,GACvC,OAAO,CAAC,IAAI,CAAC,CA6Ef;AAoCD;;GAEG;AACH,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAOpE;AA4sED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,KAAK,GAAE,OAAsC,GAC5C,OAAO,CAoBT"}

package/dist/cli/sync.js

@@ -123,6 +123,56 @@ export function createSyncMutationClient(options) {
 export async function applyRealtimeDeltaPage(engine, page, fetchContent) {
     await engine.applyPage(page, fetchContent);
 }
+/**
+ * Let queued realtime take the root lock at a bounded LIST/plan/download
+ * unit, then resume the same spool and remaining queue. A true return means
+ * the scheduler handed off; the caller overlays the journal delta rather than
+ * throwing away the LIST snapshot.
+ */
+async function yieldToCooperativeCheckpoint(work, cooperativeCheckpoint, force, resumedAt) {
+    work.rowsSinceYield += 1;
+    if (!force && work.rowsSinceYield < FULL_PULL_COOPERATIVE_CHECKPOINT_BATCH_SIZE) {
+        return false;
+    }
+    work.rowsSinceYield = 0;
+    await new Promise((resolve) => setImmediate(resolve));
+    if (!cooperativeCheckpoint)
+        return false;
+    const handedOff = (await cooperativeCheckpoint()) === true;
+    if (handedOff) {
+        process.stderr.write(`${JSON.stringify({
+            type: "cooperative-handoff",
+            direction: "pull",
+            resumedAt,
+        })}\n`);
+    }
+    return handedOff;
+}
+/**
+ * Freshness after a cooperative hand-off is the journal dirty-log overlay, not
+ * a second S3 LIST. The spool exists so classification can replay one snapshot
+ * after the caller refreshes its journal (remote-file-spool.ts:29-33).
+ *
+ * Trade-off: remote creates/deletes that landed only in S3 during the burst
+ * and were never journaled stay invisible until the next full pass.
+ * Absence-is-deletion still uses this pass's exact LIST denominators, so a
+ * realtime-added journal row cannot be swept as a delete.
+ */
+function overlayPullJournalDelta(run) {
+    run.keyedJournal?.refresh();
+    const fresh = run.keyedJournal
+        ? journalForTargetedPull(run.keyedJournal, run.listedPrefixSet)
+        : migrateToV2(readJournalForPass(run.journalSlug));
+    const live = journalRows(run.journal);
+    const incoming = journalRows(fresh);
+    for (const key of incoming.keys()) {
+        if (live.has(key))
+            continue;
+        const entry = incoming.get(key);
+        if (entry)
+            live.set(key, structuredClone(entry));
+    }
+}
 /**
  * Resolve the auto-prune safety cap (US-005 bulk-delete guard). An automatic
  * scope shrink that would delete more than this many CLEAN local files in one
@@ -194,6 +244,52 @@ const DOWNLOAD_JOURNAL_CHECKPOINT_BATCH_SIZE = 10_000;
  * resulting journal delta is durable before realtime can acquire the writer.
  */
 export const FULL_PULL_COOPERATIVE_CHECKPOINT_BATCH_SIZE = 500;
+/**
+ * ListObjectsV2 page size (AWS MaxKeys default). Full-pull LIST yields the
+ * root lock at each page boundary so queued realtime work is not stuck behind
+ * a 30-minute personal-vault spool.
+ */
+export const FULL_PULL_LIST_PAGE_CHECKPOINT_SIZE = 1000;
+const cooperativeRowVisits = {
+    enabled: false,
+    list: new Map(),
+    plan: new Map(),
+};
+let cooperativePhaseForTest = null;
+function noteCooperativeRowVisit(phase, remoteKey) {
+    if (!cooperativeRowVisits.enabled)
+        return;
+    const bucket = cooperativeRowVisits[phase];
+    bucket.set(remoteKey, (bucket.get(remoteKey) ?? 0) + 1);
+}
+function enableCooperativeRowVisits() {
+    cooperativeRowVisits.enabled = true;
+    cooperativeRowVisits.list = new Map();
+    cooperativeRowVisits.plan = new Map();
+    cooperativePhaseForTest = null;
+}
+function disableCooperativeRowVisits() {
+    cooperativeRowVisits.enabled = false;
+    cooperativeRowVisits.list = new Map();
+    cooperativeRowVisits.plan = new Map();
+    cooperativePhaseForTest = null;
+}
+function snapshotCooperativeRowVisits() {
+    return {
+        list: new Map(cooperativeRowVisits.list),
+        plan: new Map(cooperativeRowVisits.plan),
+    };
+}
+/**
+ * Test-only export. Kept under `_testing` so the public surface stays `sync()`.
+ * Do NOT import from `_testing` outside of tests in this package.
+ */
+export const _testing = {
+    enableCooperativeRowVisits,
+    disableCooperativeRowVisits,
+    cooperativeRowVisits: snapshotCooperativeRowVisits,
+    cooperativePhase: () => cooperativePhaseForTest,
+};
 /**
  * Server cap on files per `/v1/notify/file-added` report. The endpoint rejects
  * an oversized batch wholesale, so the client MUST split a large report into
@@ -333,53 +429,40 @@ async function syncWithOperationLockHeld(options) {
     catch (err) {
         console.warn("hq-root-recovery: local HQ recovery failed:", err);
     }
-    let carried;
-    for (;;) {
-        const run = await buildPullContext(options);
-        if (carried)
-            run.carriedProgress = carried;
-        try {
-            const plan = await planPull(run);
-            emitPullPlan(run.emit, plan);
-            reportInvalidRemoteKeys(run, plan);
-            const scopeRun = run.keyedJournal
-                ? emptyTargetedScopeRun(run)
-                : executeScopeShrink(run, planScopeShrink(run));
-            const counters = createPullCounters();
-            // A streaming all-mode planner retains only executor-relevant items. Its
-            // ordinary skips have already been counted while the page was live.
-            counters.filesSkipped = plan.preplannedFilesSkipped;
-            counters.filesOutOfScope = plan.preplannedFilesOutOfScope;
-            seedCarriedPullProgress(counters, carried);
-            const transferConcurrency = resolveTransferConcurrency(run.hostLoadAtStart);
-            const conflictRun = await executeConflictExecutor(run, plan, scopeRun, counters);
-            if (conflictRun.abortResult) {
-                return conflictRun.abortResult;
-            }
-            await executeDownloadExecutor(run, conflictRun.downloadItems, transferConcurrency, counters);
-            // The following added-by and tombstone phases may still make authenticated
-            // vault calls. Make a completed sub-threshold download tail durable before
-            // they begin, so their failure cannot turn a successful bulk transfer into
-            // a full replay on the next pass.
-            flushDownloadedJournalTail(run);
-            await emitAndReportNewFiles(run, plan);
-            await verifyPlannedJournalTombstones(run, plan);
-            executeJournalTombstoneDeletes(run, plan, counters);
-            emitScopeMaterializationGap(run, plan);
-            return finalizePullRun(run, plan, scopeRun, counters);
-        }
-        catch (error) {
-            if (error instanceof CooperativePullHandoff) {
-                carried = error.completed;
-                continue;
-            }
-            throw error;
-        }
-        finally {
-            // Release a pass-local lease even on conflict, transfer, or auth failure.
-            // The one bounded hot lease remains available only for its same vault.
-            run.releaseKeyedJournal?.();
-        }
+    const run = await buildPullContext(options);
+    try {
+        const plan = await planPull(run);
+        emitPullPlan(run.emit, plan);
+        reportInvalidRemoteKeys(run, plan);
+        const scopeRun = run.keyedJournal
+            ? emptyTargetedScopeRun(run)
+            : executeScopeShrink(run, planScopeShrink(run));
+        const counters = createPullCounters();
+        // A streaming all-mode planner retains only executor-relevant items. Its
+        // ordinary skips have already been counted while the page was live.
+        counters.filesSkipped = plan.preplannedFilesSkipped;
+        counters.filesOutOfScope = plan.preplannedFilesOutOfScope;
+        const transferConcurrency = resolveTransferConcurrency(run.hostLoadAtStart);
+        const conflictRun = await executeConflictExecutor(run, plan, scopeRun, counters);
+        if (conflictRun.abortResult) {
+            return conflictRun.abortResult;
+        }
+        await executeDownloadExecutor(run, conflictRun.downloadItems, transferConcurrency, counters);
+        // The following added-by and tombstone phases may still make authenticated
+        // vault calls. Make a completed sub-threshold download tail durable before
+        // they begin, so their failure cannot turn a successful bulk transfer into
+        // a full replay on the next pass.
+        flushDownloadedJournalTail(run);
+        await emitAndReportNewFiles(run, plan);
+        await verifyPlannedJournalTombstones(run, plan);
+        executeJournalTombstoneDeletes(run, plan, counters);
+        emitScopeMaterializationGap(run, plan);
+        return finalizePullRun(run, plan, scopeRun, counters);
+    }
+    finally {
+        // Release a pass-local lease even on conflict, transfer, or auth failure.
+        // The one bounded hot lease remains available only for its same vault.
+        run.releaseKeyedJournal?.();
     }
 }
 async function buildPullContext(options) {
@@ -469,8 +552,11 @@ async function buildPullContext(options) {
         : undefined;
     const keyedJournal = keyedJournalLease?.store;
     let remoteFiles;
+    const deleteDenominatorKeys = options.cooperativeCheckpoint
+        ? new Set(journalRows(migrateToV2(readJournalForPass(journalSlug))).keys())
+        : undefined;
     try {
-        remoteFiles = await listRemoteFilesForScope(ctx, syncMode, listedPrefixSet, requestedPullPrefixes.length > 0);
+        remoteFiles = await listRemoteFilesForScope(ctx, syncMode, listedPrefixSet, requestedPullPrefixes.length > 0, options.cooperativeCheckpoint);
         const fileTombstones = options.fileTombstones ??
             await fetchFileTombstones(vaultConfig, options.personalMode === true
                 ? { personal: true }
@@ -513,6 +599,7 @@ async function buildPullContext(options) {
             currentExcludeSet,
             fileTombstones,
             downloadsSinceJournalCheckpoint: 0,
+            ...(deleteDenominatorKeys ? { deleteDenominatorKeys } : {}),
         };
     }
     catch (error) {
@@ -527,18 +614,36 @@ async function buildPullContext(options) {
 function isStreamingRemoteFileSource(source) {
     return !Array.isArray(source);
 }
-function allModeRemoteFileStream(ctx) {
-    return spoolRemoteFiles(streamRemoteFiles(ctx));
+async function* streamRemoteFilesWithListCheckpoints(ctx, cooperativeCheckpoint) {
+    cooperativePhaseForTest = "list";
+    const work = { rowsSinceYield: 0 };
+    let listed = 0;
+    for await (const file of streamRemoteFiles(ctx)) {
+        listed++;
+        noteCooperativeRowVisit("list", file.key);
+        yield file;
+        if (listed % FULL_PULL_LIST_PAGE_CHECKPOINT_SIZE === 0) {
+            await yieldToCooperativeCheckpoint(work, cooperativeCheckpoint, true, listed);
+        }
+    }
+}
+function allModeRemoteFileStream(ctx, cooperativeCheckpoint) {
+    if (!cooperativeCheckpoint)
+        return spoolRemoteFiles(streamRemoteFiles(ctx));
+    return spoolRemoteFiles(streamRemoteFilesWithListCheckpoints(ctx, cooperativeCheckpoint));
 }
-async function listRemoteFilesForScope(ctx, syncMode, listedPrefixSet, isTargetedPull) {
+async function listRemoteFilesForScope(ctx, syncMode, listedPrefixSet, isTargetedPull, cooperativeCheckpoint) {
     const entries = toScopePrefixEntries(listedPrefixSet);
-    if (entries.some((e) => e.prefix === ""))
-        return allModeRemoteFileStream(ctx);
+    if (entries.some((e) => e.prefix === "")) {
+        return allModeRemoteFileStream(ctx, cooperativeCheckpoint);
+    }
     if (entries.length === 0) {
         // `all` mode always carries `[""]`, so an empty set only occurs for a
         // scoped mode (empty grants, or a targeted intersection that excluded
         // everything). Defensive `all` branch: never silently narrow a full pull.
-        return syncMode === "all" ? allModeRemoteFileStream(ctx) : [];
+        return syncMode === "all"
+            ? allModeRemoteFileStream(ctx, cooperativeCheckpoint)
+            : [];
     }
     return listRemoteForScope({
         ctx,
@@ -560,8 +665,9 @@ async function listRemoteFilesForScope(ctx, syncMode, listedPrefixSet, isTargete
     });
 }
 async function planPull(run) {
+    cooperativePhaseForTest = "plan";
     try {
-        return computePullPlan(run.remoteFiles, run.journal, run.companyRoot, run.shouldSync, run.options.personalMode === true, run.options.teamSyncedSlugs ?? null, run.listedPrefixSet, run.fileTombstones, run.currentExcludeSet, run.options.propagateDeletePolicy ?? "owned-only", run.options.onHeartbeat, run.journalRowCount);
+        return await computePullPlan(run.remoteFiles, run.journal, run.companyRoot, run.shouldSync, run.options.personalMode === true, run.options.teamSyncedSlugs ?? null, run.listedPrefixSet, run.fileTombstones, run.currentExcludeSet, run.options.propagateDeletePolicy ?? "owned-only", run.options.onHeartbeat, run.journalRowCount, run.options.cooperativeCheckpoint, () => overlayPullJournalDelta(run), run.deleteDenominatorKeys);
     }
     finally {
         if (isStreamingRemoteFileSource(run.remoteFiles))
@@ -683,50 +789,8 @@ function createPullCounters() {
         hasRetryableOutcome: false,
     };
 }
-/** Fold a previous attempt's completed work into a restarted run's counters. */
-function seedCarriedPullProgress(counters, carried) {
-    if (!carried)
-        return;
-    counters.filesDownloaded += carried.filesDownloaded;
-    counters.bytesDownloaded += carried.bytesDownloaded;
-    counters.conflicts += carried.conflicts;
-    counters.filesTombstoned += carried.filesTombstoned;
-    counters.conflictPaths.push(...carried.conflictPaths);
-    counters.changedPaths.push(...carried.changedPaths);
-    counters.appliedUpserts.push(...carried.appliedUpserts);
-    if (carried.hasRetryableOutcome)
-        counters.hasRetryableOutcome = true;
-}
-/**
- * Snapshot what survives the hand-off. The numeric and path axes already
- * include everything carried into this attempt; `newFiles` is accumulated
- * separately so it stays a record of pre-restart downloads only, and cannot
- * double up with the current plan's own new files.
- */
-function carryPullProgress(previous, counters) {
-    return {
-        filesDownloaded: counters.filesDownloaded,
-        bytesDownloaded: counters.bytesDownloaded,
-        conflicts: counters.conflicts,
-        conflictPaths: [...counters.conflictPaths],
-        filesTombstoned: counters.filesTombstoned,
-        changedPaths: [...counters.changedPaths],
-        appliedUpserts: [...counters.appliedUpserts],
-        newFiles: [...(previous?.newFiles ?? []), ...counters.newFiles],
-        hasRetryableOutcome: counters.hasRetryableOutcome,
-    };
-}
-/**
- * Every new file this pull is responsible for reporting: the ones a previous
- * attempt downloaded before handing off, then this plan's own. A carried path
- * that the fresh plan also lists is reported once.
- */
-function reportableNewFiles(run, plan) {
-    const carried = run.carriedProgress?.newFiles;
-    if (carried === undefined || carried.length === 0)
-        return plan.newFiles;
-    const planned = new Set(plan.newFiles.map((newFile) => newFile.path));
-    return [...carried.filter((newFile) => !planned.has(newFile.path)), ...plan.newFiles];
+function reportableNewFiles(_run, plan) {
+    return plan.newFiles;
 }
 function planScopeShrink(run) {
     const lastRecord = lastPullRecord(run.journal, run.ctx.uid);
@@ -1323,20 +1387,6 @@ async function executeConflictItem(run, plan, scopeRun, counters, downloadItems,
             discardProbe();
     }
 }
-/**
- * The old plan may have tombstone evidence that predates a realtime hand-off.
- * Rebuilding from disk after a hand-off makes the continuation observe the
- * realtime journal and a fresh LIST before it can perform another mutation.
- */
-class CooperativePullHandoff extends Error {
-    /** Completed work the restarted pull must keep reporting. */
-    completed;
-    constructor(completed) {
-        super("full pull handed off to realtime work");
-        this.name = "CooperativePullHandoff";
-        this.completed = completed;
-    }
-}
 async function executeDownloadQueue(run, downloadItems, transferConcurrency, counters, deferJournalCheckpoint) {
     const queue = [...downloadItems];
     const inFlight = new Set();
@@ -1399,6 +1449,8 @@ async function executeDownloadExecutor(run, downloadItems, transferConcurrency,
             throwDownloadWorkerErrors(run, workerErrors);
         return;
     }
+    cooperativePhaseForTest = "download";
+    const work = { rowsSinceYield: 0 };
     for (let start = 0; start < downloadItems.length; start += FULL_PULL_COOPERATIVE_CHECKPOINT_BATCH_SIZE) {
         const chunk = downloadItems.slice(start, start + FULL_PULL_COOPERATIVE_CHECKPOINT_BATCH_SIZE);
         const workerErrors = await executeDownloadQueue(run, chunk, transferConcurrency, counters, true);
@@ -1408,8 +1460,8 @@ async function executeDownloadExecutor(run, downloadItems, transferConcurrency,
         flushDownloadedJournalTail(run);
         if (workerErrors.length > 0)
             throwDownloadWorkerErrors(run, workerErrors);
-        if (await run.options.cooperativeCheckpoint() === true) {
-            throw new CooperativePullHandoff(carryPullProgress(run.carriedProgress, counters));
+        if (await yieldToCooperativeCheckpoint(work, run.options.cooperativeCheckpoint, true, start + chunk.length)) {
+            overlayPullJournalDelta(run);
         }
     }
 }
@@ -1627,9 +1679,6 @@ function persistPullJournal(run) {
 }
 async function emitAndReportNewFiles(run, plan) {
     const enrichedNewFiles = [];
-    // New files a cooperative hand-off already downloaded are reported here too:
-    // the restarted plan cannot see them as new, so this is their only
-    // notification.
     const newFiles = reportableNewFiles(run, plan);
     // Batch-mint the GET presigns once (chunked, breaker-aware) so the per-file
     // created-by HEADs below reuse the cache instead of each minting its own
@@ -2104,7 +2153,7 @@ export function win32SymlinkFlavorBroken(localPath, win32 = process.platform ===
         return true; // target exists but the link cannot traverse: wrong flavor
     }
 }
-function computePullPlan(remoteFiles, journal, companyRoot, shouldSync, personalMode, teamSyncedSlugs, 
+async function computePullPlan(remoteFiles, journal, companyRoot, shouldSync, personalMode, teamSyncedSlugs, 
 // Coalesced, company-relative prefixes the pull is scoped to (US-005).
 // `[""]` (the `all`-mode value) covers everything via `isCoveredByAny`, so
 // the scope filter below becomes a no-op and legacy behavior is preserved.
@@ -2125,7 +2174,7 @@ fileTombstones = new Map(),
 excludePrefixes = [], 
 // The runner resolves this once and shares it with the push leg. Direct
 // callers preserve the pre-policy, watcher-intent-only behavior.
-propagateDeletePolicy = "owned-only", onHeartbeat, journalRowCount = journalRows(journal).size) {
+propagateDeletePolicy = "owned-only", onHeartbeat, journalRowCount = journalRows(journal).size, cooperativeCheckpoint, onCooperativeHandoff, deleteDenominatorKeys) {
     const items = [];
     const streaming = isStreamingRemoteFileSource(remoteFiles);
     const listedFiles = isStreamingRemoteFileSource(remoteFiles) ? remoteFiles.files : remoteFiles;
@@ -2184,14 +2233,18 @@ propagateDeletePolicy = "owned-only", onHeartbeat, journalRowCount = journalRows
     // `journaledKeyByCanonical` above deliberately retains only the preferred
     // representative for classification.
     const journaledSkillKeysByCanonical = new Map();
+    const presenceKeys = deleteDenominatorKeys ?? journalRows(journal).keys();
+    for (const journaledKey of presenceKeys) {
+        if (isCoveredByAny(toPosixKey(journaledKey), prefixSet)) {
+            unseenJournalKeys.add(journaledKey);
+        }
+    }
     for (const journaledKey of journalRows(journal).keys()) {
         onHeartbeat?.();
         const posixJournaledKey = toPosixKey(journaledKey);
         // A scoped LIST cannot prove anything about keys outside its prefixes.
         // Do not copy the entire vault's journal into its presence bookkeeping.
         const inListedScope = isCoveredByAny(posixJournaledKey, prefixSet);
-        if (inListedScope)
-            unseenJournalKeys.add(journaledKey);
         if (inListedScope && posixJournaledKey !== journaledKey) {
             const legacyKeys = legacyJournalKeysByPosix.get(posixJournaledKey);
             if (legacyKeys === undefined) {
@@ -2235,8 +2288,18 @@ propagateDeletePolicy = "owned-only", onHeartbeat, journalRowCount = journalRows
         : collectRemoteAncestors(remoteFiles);
     // Both sources replay synchronously. for-await on a scoped array introduces
     // promise/microtask work per object even though no I/O is being awaited.
+    const cooperativeWork = { rowsSinceYield: 0 };
+    let plannedRows = 0;
     for (const remoteFile of listedFiles) {
         onHeartbeat?.();
+        noteCooperativeRowVisit("plan", remoteFile.key);
+        plannedRows++;
+        if (cooperativeCheckpoint &&
+            plannedRows % FULL_PULL_COOPERATIVE_CHECKPOINT_BATCH_SIZE === 0) {
+            if (await yieldToCooperativeCheckpoint(cooperativeWork, cooperativeCheckpoint, true, plannedRows)) {
+                onCooperativeHandoff?.();
+            }
+        }
         const posixRemoteKey = toPosixKey(remoteFile.key);
         // S3 object keys are POSIX. Match the old delete-sweep membership check:
         // a legacy backslash journal entry counts as present only when its POSIX
@@ -2847,6 +2910,13 @@ propagateDeletePolicy = "owned-only", onHeartbeat, journalRowCount = journalRows
             localSnapshot: plannedLocalSnapshot,
         });
     }
+    if (cooperativeCheckpoint &&
+        plannedRows > FULL_PULL_COOPERATIVE_CHECKPOINT_BATCH_SIZE &&
+        plannedRows % FULL_PULL_COOPERATIVE_CHECKPOINT_BATCH_SIZE !== 0) {
+        if (await yieldToCooperativeCheckpoint(cooperativeWork, cooperativeCheckpoint, true, plannedRows)) {
+            onCooperativeHandoff?.();
+        }
+    }
     // ── Intentional-delete bulk-asymmetry decision (pull-leg producer) ─────────
     // Below the breaker → stamp a persisting `local-delete` tombstone (the
     // suppression above keeps it from being re-pulled; the push leg propagates the