@indigoai-us/hq-cloud 6.18.44-alpha.48 → 6.18.44-alpha.49

package/dist/sync/idle-full-reconcile.test.js

@@ -0,0 +1,62 @@
+import { describe, expect, it } from "vitest";
+import { canSkipScheduledFullReconcile, FullPassContinuity, isFullPassJournalHealthy, } from "./idle-full-reconcile.js";
+describe("scheduled full reconcile idle proof", () => {
+    const baseline = {
+        enabled: true,
+        lastFullMonoMs: 1_000,
+        lastFullWallMs: 10_000,
+        nowMonoMs: 901_000,
+        nowWallMs: 910_000,
+        previousTickMonoMs: 900_000,
+        watcherCoverageHealthy: true,
+        journalHealthy: true,
+        continuityHealthy: true,
+    };
+    it("skips only a scheduled scan when coverage and journal stayed valid", () => {
+        expect(canSkipScheduledFullReconcile(baseline)).toBe(true);
+    });
+    it("falls back after downtime or a long event-loop gap", () => {
+        expect(canSkipScheduledFullReconcile({
+            ...baseline,
+            previousTickMonoMs: 800_000,
+            nowMonoMs: 901_000,
+            nowWallMs: 911_000,
+        })).toBe(false);
+    });
+    it("falls back on a clock jump in either direction", () => {
+        expect(canSkipScheduledFullReconcile({ ...baseline, nowWallMs: 1_010_000 })).toBe(false);
+        expect(canSkipScheduledFullReconcile({ ...baseline, nowWallMs: 10_000 })).toBe(false);
+    });
+    it("falls back when the journal or watcher coverage proof is missing", () => {
+        expect(canSkipScheduledFullReconcile({ ...baseline, journalHealthy: false })).toBe(false);
+        expect(canSkipScheduledFullReconcile({ ...baseline, watcherCoverageHealthy: false })).toBe(false);
+    });
+    it("keeps an earlier long loop gap latched until a clean full pass", () => {
+        const continuity = new FullPassContinuity();
+        continuity.markFullPassCompleted(1_000);
+        expect(continuity.observeLoopTick(61_001)).toBe(false);
+        expect(continuity.observeLoopTick(91_001)).toBe(false);
+        expect(continuity.observeLoopTick(121_001)).toBe(false);
+        continuity.markFullPassCompleted(121_001);
+        expect(continuity.observeLoopTick(151_001)).toBe(true);
+    });
+    it("rejects an idle skip after a latched loop gap even when the latest tick is recent", () => {
+        expect(canSkipScheduledFullReconcile({
+            ...baseline,
+            previousTickMonoMs: 890_000,
+            nowMonoMs: 900_000,
+            nowWallMs: 909_000,
+            continuityHealthy: false,
+        })).toBe(false);
+    });
+    it("requires a complete, non-aborted pass before trusting the journal", () => {
+        expect(isFullPassJournalHealthy(0, false)).toBe(true);
+        expect(isFullPassJournalHealthy(0, true)).toBe(false);
+        expect(isFullPassJournalHealthy(0, undefined)).toBe(false);
+        expect(isFullPassJournalHealthy(2, false)).toBe(false);
+    });
+    it("keeps the old full-pass behavior with the flag off", () => {
+        expect(canSkipScheduledFullReconcile({ ...baseline, enabled: false })).toBe(false);
+    });
+});
+//# sourceMappingURL=idle-full-reconcile.test.js.map

package/dist/sync/idle-full-reconcile.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idle-full-reconcile.test.js","sourceRoot":"","sources":["../../src/sync/idle-full-reconcile.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,6BAA6B,EAC7B,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAElC,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,IAAI;QACb,cAAc,EAAE,KAAK;QACrB,cAAc,EAAE,MAAM;QACtB,SAAS,EAAE,OAAO;QAClB,SAAS,EAAE,OAAO;QAClB,kBAAkB,EAAE,OAAO;QAC3B,sBAAsB,EAAE,IAAI;QAC5B,cAAc,EAAE,IAAI;QACpB,iBAAiB,EAAE,IAAI;KACxB,CAAC;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,6BAA6B,CAAC;YACnC,GAAG,QAAQ;YACX,kBAAkB,EAAE,OAAO;YAC3B,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,6BAA6B,CAAC,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzF,MAAM,CAAC,6BAA6B,CAAC,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,6BAA6B,CAAC,EAAE,GAAG,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1F,MAAM,CAAC,6BAA6B,CAAC,EAAE,GAAG,QAAQ,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,UAAU,GAAG,IAAI,kBAAkB,EAAE,CAAC;QAC5C,UAAU,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,UAAU,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,CAAC,6BAA6B,CAAC;YACnC,GAAG,QAAQ;YACX,kBAAkB,EAAE,OAAO;YAC3B,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,OAAO;YAClB,iBAAiB,EAAE,KAAK;SACzB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,wBAAwB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,wBAAwB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,wBAAwB,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,CAAC,wBAAwB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,6BAA6B,CAAC,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/sync/inbound-event-admission.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=inbound-event-admission.test.d.ts.map

package/dist/sync/inbound-event-admission.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-event-admission.test.d.ts","sourceRoot":"","sources":["../../src/sync/inbound-event-admission.test.ts"],"names":[],"mappings":""}

package/dist/sync/inbound-event-admission.test.js

@@ -0,0 +1,128 @@
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { hashFile } from "../journal.js";
+import { isInboundEventPlaceable } from "./inbound-event-admission.js";
+import { SESSION_LOGS_PUSH_ONLY_PREFIX } from "./pull-scope.js";
+vi.mock("../journal.js", async (importOriginal) => {
+    const actual = await importOriginal();
+    return { ...actual, hashFile: vi.fn(actual.hashFile) };
+});
+const roots = [];
+function makeRoot() {
+    const root = fs.mkdtempSync(path.join(os.tmpdir(), "hq-inbound-event-admission-"));
+    roots.push(root);
+    return root;
+}
+function write(root, relativePath) {
+    const absolutePath = path.join(root, relativePath);
+    fs.mkdirSync(path.dirname(absolutePath), { recursive: true });
+    fs.writeFileSync(absolutePath, "fixture\n");
+}
+function event(relativePath, overrides = {}) {
+    return {
+        relativePath,
+        kind: "upsert",
+        contentHash: "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        mtime: "2026-08-29T00:00:00.000Z",
+        originDeviceId: "device-a",
+        originTenantId: "tenant-a",
+        sequenceNumber: 1,
+        eventTimestamp: "2026-08-29T00:00:00.000Z",
+        ...overrides,
+    };
+}
+afterEach(() => {
+    for (const root of roots.splice(0))
+        fs.rmSync(root, { recursive: true, force: true });
+});
+describe("isInboundEventPlaceable", () => {
+    it("drops a mirror upsert only when its content hash matches the personal source", () => {
+        const hqRoot = makeRoot();
+        write(hqRoot, "personal/policies/foo.md");
+        expect(isInboundEventPlaceable(hqRoot, event("core/policies/foo.md", {
+            contentHash: `sha256:${hashFile(path.join(hqRoot, "personal/policies/foo.md"))}`,
+        }))).toBe(false);
+    });
+    it("processes a first-arrival collision when the content hash differs", () => {
+        const hqRoot = makeRoot();
+        write(hqRoot, "personal/policies/bar.md");
+        expect(isInboundEventPlaceable(hqRoot, event("core/policies/bar.md", {
+            contentHash: `sha256:${"a".repeat(64)}`,
+        }))).toBe(true);
+    });
+    it("processes an upsert when hashing the personal source fails", () => {
+        const hqRoot = makeRoot();
+        write(hqRoot, "personal/policies/unreadable.md");
+        vi.mocked(hashFile).mockImplementationOnce(() => {
+            throw new Error("unreadable");
+        });
+        expect(isInboundEventPlaceable(hqRoot, event("core/policies/unreadable.md"))).toBe(true);
+    });
+    it("drops a mirror delete but processes a delete for a real core file", () => {
+        const hqRoot = makeRoot();
+        write(hqRoot, "personal/policies/removed.md");
+        expect(isInboundEventPlaceable(hqRoot, event("core/policies/removed.md", {
+            kind: "delete",
+            contentHash: undefined,
+            mtime: undefined,
+        }))).toBe(false);
+        write(hqRoot, "core/policies/removed.md");
+        expect(isInboundEventPlaceable(hqRoot, event("core/policies/removed.md", {
+            kind: "delete",
+            contentHash: undefined,
+            mtime: undefined,
+        }))).toBe(true);
+    });
+    // chmod 0o000 does not produce EACCES on Windows: lstat of the child is
+    // ENOENT, which lstatIfPresent treats as absence (inbound-event-admission.ts:64).
+    // POSIX coverage of the unexpected-error branch stays in this test.
+    it.skipIf(process.platform === "win32")("processes an event when the core-path lstat has an unexpected error", () => {
+        const hqRoot = makeRoot();
+        const relativePath = "core/policies/locked.md";
+        write(hqRoot, "personal/policies/locked.md");
+        const coreDirectory = path.join(hqRoot, "core/policies");
+        fs.mkdirSync(coreDirectory, { recursive: true });
+        fs.chmodSync(coreDirectory, 0o000);
+        try {
+            expect(() => fs.lstatSync(path.join(hqRoot, relativePath))).toThrowError(expect.objectContaining({ code: "EACCES" }));
+            expect(isInboundEventPlaceable(hqRoot, event(relativePath))).toBe(true);
+        }
+        finally {
+            fs.chmodSync(coreDirectory, 0o700);
+        }
+    });
+    it("processes a plain release-shipped core file", () => {
+        const hqRoot = makeRoot();
+        write(hqRoot, "core/policies/baz.md");
+        expect(isInboundEventPlaceable(hqRoot, event("core/policies/baz.md"))).toBe(true);
+    });
+    it("keeps a genuinely new core file placeable", () => {
+        expect(isInboundEventPlaceable(makeRoot(), event("core/policies/new.md"))).toBe(true);
+    });
+    it("keeps a valid-area absent file placeable", () => {
+        expect(isInboundEventPlaceable(makeRoot(), event("knowledge/notes/new.md"))).toBe(true);
+    });
+    it("filters push-only session logs without matching neighboring paths", () => {
+        const hqRoot = makeRoot();
+        expect(isInboundEventPlaceable(hqRoot, event(`${SESSION_LOGS_PUSH_ONLY_PREFIX}codex/session.jsonl`))).toBe(false);
+        expect(isInboundEventPlaceable(hqRoot, event("workspace/.session-logs-export/session.jsonl"))).toBe(true);
+    });
+    it.each([
+        ["core/workers/legacy-worker.yaml", "personal/workers/legacy-worker.yaml"],
+        ["core/knowledge/legacy-kb/file.md", "personal/knowledge/legacy-kb/file.md"],
+        ["core/settings/legacy.yaml", "personal/settings/legacy.yaml"],
+        ["core/policies/_digest.md", "personal/policies/_digest.md"],
+    ])("uses the retired route map for %s", (relativePath, personalPath) => {
+        const hqRoot = makeRoot();
+        write(hqRoot, personalPath);
+        expect(isInboundEventPlaceable(hqRoot, event(relativePath, {
+            contentHash: `sha256:${hashFile(path.join(hqRoot, personalPath))}`,
+        }))).toBe(false);
+    });
+    it("processes public knowledge with no personal source", () => {
+        expect(isInboundEventPlaceable(makeRoot(), event("core/knowledge/public/hq-core/x.md"))).toBe(true);
+    });
+});
+//# sourceMappingURL=inbound-event-admission.test.js.map

package/dist/sync/inbound-event-admission.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-event-admission.test.js","sourceRoot":"","sources":["../../src/sync/inbound-event-admission.test.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE7D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAGhE,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAChD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAkC,CAAC;IACtE,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;AACzD,CAAC,CAAC,CAAC;AAEH,MAAM,KAAK,GAAa,EAAE,CAAC;AAE3B,SAAS,QAAQ;IACf,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC,CAAC;IACnF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,KAAK,CAAC,IAAY,EAAE,YAAoB;IAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACnD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,KAAK,CAAC,YAAoB,EAAE,YAAgC,EAAE;IACrE,OAAO;QACL,YAAY;QACZ,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,yEAAyE;QACtF,KAAK,EAAE,0BAA0B;QACjC,cAAc,EAAE,UAAU;QAC1B,cAAc,EAAE,UAAU;QAC1B,cAAc,EAAE,CAAC;QACjB,cAAc,EAAE,0BAA0B;QAC1C,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACxF,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1B,KAAK,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;QAE1C,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,sBAAsB,EAAE;YACnE,WAAW,EAAE,UAAU,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC,EAAE;SACjF,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1B,KAAK,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;QAE1C,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,sBAAsB,EAAE;YACnE,WAAW,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;SACxC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1B,KAAK,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;QACjD,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,sBAAsB,CAAC,GAAG,EAAE;YAC9C,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1B,KAAK,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;QAE9C,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,0BAA0B,EAAE;YACvE,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,SAAS;YACtB,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEjB,KAAK,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;QAC1C,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,0BAA0B,EAAE;YACvE,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,SAAS;YACtB,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,kFAAkF;IAClF,oEAAoE;IACpE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAClH,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1B,MAAM,YAAY,GAAG,yBAAyB,CAAC;QAC/C,KAAK,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;QAC7C,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QACzD,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAEnC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CACtE,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAC5C,CAAC;YACF,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1B,KAAK,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;QAEtC,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,uBAAuB,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,uBAAuB,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;QAE1B,MAAM,CAAC,uBAAuB,CAC5B,MAAM,EACN,KAAK,CAAC,GAAG,6BAA6B,qBAAqB,CAAC,CAC7D,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACf,MAAM,CAAC,uBAAuB,CAC5B,MAAM,EACN,KAAK,CAAC,8CAA8C,CAAC,CACtD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,iCAAiC,EAAE,qCAAqC,CAAC;QAC1E,CAAC,kCAAkC,EAAE,sCAAsC,CAAC;QAC5E,CAAC,2BAA2B,EAAE,+BAA+B,CAAC;QAC9D,CAAC,0BAA0B,EAAE,8BAA8B,CAAC;KAC7D,CAAC,CAAC,mCAAmC,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,EAAE;QACrE,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1B,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAE5B,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,EAAE;YACzD,WAAW,EAAE,UAAU,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,EAAE;SACnE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,uBAAuB,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/sync/journal-ledger-stream.test.d.ts

@@ -0,0 +1,12 @@
+/**
+ * The streaming ledger reader must agree with `JSON.parse` on every document
+ * the journal writer can produce — that is the whole safety argument for using
+ * a hand-written scanner at all.
+ *
+ * So the central test is not a hand-picked example, it is an EQUIVALENCE: for
+ * each fixture, the rows this reader emits are compared against the rows
+ * `JSON.parse` yields from the same bytes. A fixture that the two disagree on
+ * is a bug in this file by construction, whichever one is "right".
+ */
+export {};
+//# sourceMappingURL=journal-ledger-stream.test.d.ts.map

package/dist/sync/journal-ledger-stream.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal-ledger-stream.test.d.ts","sourceRoot":"","sources":["../../src/sync/journal-ledger-stream.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/sync/journal-ledger-stream.test.js

@@ -0,0 +1,134 @@
+/**
+ * The streaming ledger reader must agree with `JSON.parse` on every document
+ * the journal writer can produce — that is the whole safety argument for using
+ * a hand-written scanner at all.
+ *
+ * So the central test is not a hand-picked example, it is an EQUIVALENCE: for
+ * each fixture, the rows this reader emits are compared against the rows
+ * `JSON.parse` yields from the same bytes. A fixture that the two disagree on
+ * is a bug in this file by construction, whichever one is "right".
+ */
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { streamJournalLedgerRows } from "./journal-ledger-stream.js";
+let dir;
+beforeEach(() => {
+    dir = fs.mkdtempSync(path.join(os.tmpdir(), "hq-ledger-stream-"));
+});
+afterEach(() => {
+    fs.rmSync(dir, { recursive: true, force: true });
+});
+function write(name, text) {
+    const filePath = path.join(dir, name);
+    fs.writeFileSync(filePath, text, "utf8");
+    return filePath;
+}
+function streamed(filePath) {
+    const out = {};
+    streamJournalLedgerRows(filePath, (key, valueJson) => {
+        out[key] = JSON.parse(valueJson);
+    });
+    return out;
+}
+function parsed(filePath) {
+    const doc = JSON.parse(fs.readFileSync(filePath, "utf8"));
+    return doc.files ?? {};
+}
+describe("streamJournalLedgerRows — equivalence with JSON.parse", () => {
+    const cases = {
+        "an ordinary journal": {
+            version: "2",
+            files: {
+                "notes/a.md": { hash: "sha256:aa", size: 1, syncedAt: "2026-01-01T00:00:00.000Z", direction: "up" },
+                "notes/b.md": { hash: "sha256:bb", size: 2, syncedAt: "2026-01-02T00:00:00.000Z", direction: "down" },
+            },
+            pulls: [{ id: "p1", at: "2026-01-02T00:00:00.000Z" }],
+        },
+        "an empty files map": { version: "2", files: {}, pulls: [] },
+        "no files member at all": { schema: "hq-sync-journal-locator@1", scopeId: "x" },
+        "files declared last": {
+            pulls: [{ id: "p1" }],
+            version: "2",
+            files: { "z.md": { hash: "sha256:zz", size: 3, syncedAt: "2026-01-01T00:00:00.000Z", direction: "up" } },
+        },
+        "nested and heterogeneous row values": {
+            version: "2",
+            files: {
+                "deep.md": {
+                    hash: "sha256:dd",
+                    size: 4,
+                    syncedAt: "2026-01-01T00:00:00.000Z",
+                    direction: "up",
+                    localDeleteIntent: { version: 1, remoteEtag: "e", localHash: "h", localKind: "file" },
+                    outOfScopeProtected: true,
+                    ctimeMs: null,
+                },
+            },
+            pulls: [],
+        },
+        "keys and values that exercise the string scanner": {
+            version: "2",
+            files: {
+                // A quote, a backslash, a brace, a colon and a comma inside a KEY —
+                // every character the scanner treats as structural when it is outside
+                // a string, and must not when it is inside one.
+                'odd"key\\with{braces}:and,commas.md': { hash: "sha256:ee", size: 5, syncedAt: "t", direction: "up" },
+                "unicode/café/日本語/🗂.md": { hash: "sha256:ff", size: 6, syncedAt: "t", direction: "down" },
+                "escapes.md": { hash: 'sha256:with"quote\\and\\\\backslash', size: 7, syncedAt: "t\nnewline", direction: "up" },
+            },
+            pulls: [],
+        },
+        "a row whose value is not an object": {
+            version: "2",
+            files: { "scalar.md": 42, "nulled.md": null, "stringy.md": "plain", "listed.md": [1, 2, 3] },
+            pulls: [],
+        },
+    };
+    for (const [name, document] of Object.entries(cases)) {
+        it(`matches JSON.parse for ${name}`, () => {
+            const filePath = write("journal.json", JSON.stringify(document));
+            expect(streamed(filePath)).toEqual(parsed(filePath));
+        });
+        it(`matches JSON.parse for ${name}, pretty-printed`, () => {
+            // The writer emits compact JSON, but a journal repaired by hand is still
+            // a journal — and whitespace is exactly where a naive scanner breaks.
+            const filePath = write("journal-pretty.json", JSON.stringify(document, null, 2));
+            expect(streamed(filePath)).toEqual(parsed(filePath));
+        });
+    }
+});
+describe("streamJournalLedgerRows — chunk boundaries are not row boundaries", () => {
+    it("reads a document far larger than one read buffer identically", () => {
+        // Comfortably past the 256 KB chunk size, so keys, values, and multi-byte
+        // sequences all land mid-buffer somewhere in the run.
+        const files = {};
+        for (let index = 0; index < 20_000; index += 1) {
+            files[`notes/café-${index}/日本語-${index}.md`] = {
+                hash: `sha256:${index.toString(16).padStart(64, "0")}`,
+                size: index,
+                syncedAt: "2026-01-01T00:00:00.000Z",
+                direction: index % 2 === 0 ? "up" : "down",
+            };
+        }
+        const filePath = write("big.json", JSON.stringify({ version: "2", files, pulls: [] }));
+        const rows = streamed(filePath);
+        expect(Object.keys(rows)).toHaveLength(20_000);
+        expect(rows).toEqual(parsed(filePath));
+    });
+});
+describe("streamJournalLedgerRows — malformed input surfaces, never fabricates", () => {
+    it("throws rather than reporting a truncated document as a short ledger", () => {
+        const filePath = write("truncated.json", '{"version":"2","files":{"a.md":{"hash":"sha256:aa","siz');
+        expect(() => streamed(filePath)).toThrow(SyntaxError);
+    });
+    it("throws for a row whose value is not valid JSON", () => {
+        const filePath = write("bad-row.json", '{"files":{"a.md":{"hash":,}},"pulls":[]}');
+        expect(() => streamed(filePath)).toThrow(SyntaxError);
+    });
+    it("propagates an unreadable file", () => {
+        expect(() => streamed(path.join(dir, "missing.json"))).toThrow();
+    });
+});
+//# sourceMappingURL=journal-ledger-stream.test.js.map

package/dist/sync/journal-ledger-stream.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal-ledger-stream.test.js","sourceRoot":"","sources":["../../src/sync/journal-ledger-stream.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,IAAI,GAAW,CAAC;AAEhB,UAAU,CAAC,GAAG,EAAE;IACd,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,SAAS,KAAK,CAAC,IAAY,EAAE,IAAY;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB;IAChC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,uBAAuB,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE;QACnD,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,MAAM,CAAC,QAAgB;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAwC,CAAC;IACjG,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,QAAQ,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACrE,MAAM,KAAK,GAA4B;QACrC,qBAAqB,EAAE;YACrB,OAAO,EAAE,GAAG;YACZ,KAAK,EAAE;gBACL,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,0BAA0B,EAAE,SAAS,EAAE,IAAI,EAAE;gBACnG,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,0BAA0B,EAAE,SAAS,EAAE,MAAM,EAAE;aACtG;YACD,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,0BAA0B,EAAE,CAAC;SACtD;QACD,oBAAoB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAC5D,wBAAwB,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,OAAO,EAAE,GAAG,EAAE;QAC/E,qBAAqB,EAAE;YACrB,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACrB,OAAO,EAAE,GAAG;YACZ,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,0BAA0B,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;SACzG;QACD,qCAAqC,EAAE;YACrC,OAAO,EAAE,GAAG;YACZ,KAAK,EAAE;gBACL,SAAS,EAAE;oBACT,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,CAAC;oBACP,QAAQ,EAAE,0BAA0B;oBACpC,SAAS,EAAE,IAAI;oBACf,iBAAiB,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE;oBACrF,mBAAmB,EAAE,IAAI;oBACzB,OAAO,EAAE,IAAI;iBACd;aACF;YACD,KAAK,EAAE,EAAE;SACV;QACD,kDAAkD,EAAE;YAClD,OAAO,EAAE,GAAG;YACZ,KAAK,EAAE;gBACL,oEAAoE;gBACpE,sEAAsE;gBACtE,gDAAgD;gBAChD,qCAAqC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE;gBACrG,wBAAwB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC1F,YAAY,EAAE,EAAE,IAAI,EAAE,qCAAqC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE;aAChH;YACD,KAAK,EAAE,EAAE;SACV;QACD,oCAAoC,EAAE;YACpC,OAAO,EAAE,GAAG;YACZ,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE;YAC5F,KAAK,EAAE,EAAE;SACV;KACF,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,EAAE,CAAC,0BAA0B,IAAI,EAAE,EAAE,GAAG,EAAE;YACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,IAAI,kBAAkB,EAAE,GAAG,EAAE;YACxD,yEAAyE;YACzE,sEAAsE;YACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACjF,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mEAAmE,EAAE,GAAG,EAAE;IACjF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,0EAA0E;QAC1E,sDAAsD;QACtD,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC/C,KAAK,CAAC,cAAc,KAAK,QAAQ,KAAK,KAAK,CAAC,GAAG;gBAC7C,IAAI,EAAE,UAAU,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE;gBACtD,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,0BAA0B;gBACpC,SAAS,EAAE,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;aAC3C,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACvF,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sEAAsE,EAAE,GAAG,EAAE;IACpF,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,EAAE,yDAAyD,CAAC,CAAC;QACpG,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,EAAE,0CAA0C,CAAC,CAAC;QACnF,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/sync/lease-client.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=lease-client.test.d.ts.map

package/dist/sync/lease-client.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease-client.test.d.ts","sourceRoot":"","sources":["../../src/sync/lease-client.test.ts"],"names":[],"mappings":""}

package/dist/sync/lease-client.test.js

@@ -0,0 +1,119 @@
+import { describe, expect, it, vi } from "vitest";
+import { RealtimeLeaseClient, RealtimePassAuthorizer } from "./lease-client.js";
+import { RealtimeRolloutClient } from "./realtime-rollout.js";
+const capability = {
+    hqCloud: "6.14.49",
+    hqDesktop: "none",
+    protocol: 2,
+    journal: 3,
+    durableApply: 1,
+};
+function jsonResponse(body, status = 200) {
+    return { ok: status >= 200 && status < 300, status, text: async () => JSON.stringify(body) };
+}
+describe("RealtimeLeaseClient", () => {
+    it("uses the pass bearer and rejects a lease longer than sixty seconds", async () => {
+        let received;
+        const fetchImpl = async (_url, init) => {
+            received = init;
+            return jsonResponse({
+                lease: "lease_1",
+                issuedAt: "2026-08-12T00:00:00.000Z",
+                expiresAt: "2026-08-12T00:01:01.000Z",
+                authorizationEpoch: "epoch_1",
+            });
+        };
+        const client = new RealtimeLeaseClient({ apiUrl: "https://api.example", fetchImpl, now: () => Date.parse("2026-08-12T00:00:00.000Z") });
+        await expect(client.issue({ bearer: "token-a", deviceId: "machine_a", capabilityVector: capability, scopeHandle: "handle_1", scopeRevision: "rev_1" })).rejects.toThrow("invalid lease lifetime");
+        expect(received).toMatchObject({
+            method: "POST",
+            headers: expect.objectContaining({ Authorization: "Bearer token-a", "X-HQ-Sync-Contract": "2" }),
+        });
+    });
+    it("rejects a lease issued too far into the future", async () => {
+        const fetchImpl = async () => jsonResponse({
+            lease: "lease_1",
+            issuedAt: "2026-08-12T00:00:06.000Z",
+            expiresAt: "2026-08-12T00:01:00.000Z",
+            authorizationEpoch: "epoch_1",
+        });
+        const client = new RealtimeLeaseClient({ apiUrl: "https://api.example", fetchImpl, now: () => Date.parse("2026-08-12T00:00:00.000Z") });
+        await expect(client.issue({ bearer: "token-a", deviceId: "machine_a", capabilityVector: capability, scopeHandle: "handle_1", scopeRevision: "rev_1" })).rejects.toThrow("invalid lease lifetime");
+    });
+    it("resolves one bearer and freshly leases every selected scope before I/O", async () => {
+        const now = Date.parse("2026-08-12T00:00:00.000Z");
+        const requests = [];
+        const fetchImpl = async (url, init) => {
+            requests.push({ headers: init?.headers });
+            if (url.endsWith("/scopes")) {
+                return jsonResponse({ contractVersion: 2, scopes: [
+                        { scopeUid: "prs_1", scopeHandle: "handle_1", scopeRevision: "rev_1", state: "v2-ready", cursor: "cursor_1" },
+                        { scopeUid: "cmp_1", scopeHandle: "handle_2", scopeRevision: "rev_2", state: "v2-ready", cursor: "cursor_2" },
+                    ] });
+            }
+            return jsonResponse({
+                lease: "lease_issued",
+                issuedAt: "2026-08-12T00:00:00.000Z",
+                expiresAt: "2026-08-12T00:01:00.000Z",
+                authorizationEpoch: "epoch_1",
+            }, 201);
+        };
+        const token = vi.fn(async () => "token-a");
+        const inventory = new RealtimeRolloutClient({ apiUrl: "https://api.example", fetchImpl, now: () => now });
+        const leases = new RealtimeLeaseClient({ apiUrl: "https://api.example", fetchImpl, now: () => now });
+        const authorizer = new RealtimePassAuthorizer(token, inventory, leases);
+        const operation = vi.fn(async () => "done");
+        await expect(authorizer.runBeforeIo({
+            deviceId: "machine_a",
+            capabilityVector: capability,
+            configurationFingerprint: "config-a",
+            scopeFingerprint: "prs_1,cmp_1",
+            scopeUids: ["prs_1", "cmp_1"],
+        }, operation)).resolves.toBe("done");
+        expect(token).toHaveBeenCalledTimes(1);
+        expect(requests).toHaveLength(3);
+        for (const call of requests)
+            expect(call.headers?.Authorization).toBe("Bearer token-a");
+        expect(operation).toHaveBeenCalledTimes(1);
+    });
+    it("does not invoke I/O when inventory loses a requested scope", async () => {
+        const fetchImpl = vi.fn(async () => jsonResponse({ contractVersion: 2, scopes: [
+                { scopeUid: "prs_1", scopeHandle: "handle_1", scopeRevision: "rev_1", state: "paused", reasonCode: "maintenance" },
+            ] }));
+        const inventory = new RealtimeRolloutClient({ apiUrl: "https://api.example", fetchImpl });
+        const leases = new RealtimeLeaseClient({ apiUrl: "https://api.example", fetchImpl });
+        const authorizer = new RealtimePassAuthorizer("token-a", inventory, leases);
+        const operation = vi.fn(async () => undefined);
+        await expect(authorizer.runBeforeIo({
+            deviceId: "machine_a", capabilityVector: capability, configurationFingerprint: "config-a", scopeFingerprint: "prs_1", scopeUids: ["prs_1"],
+        }, operation)).rejects.toThrow("does not authorize every requested scope");
+        expect(operation).not.toHaveBeenCalled();
+    });
+    it("does not invoke I/O when parallel lease issues disagree on epoch", async () => {
+        let leaseCalls = 0;
+        const fetchImpl = async (url) => {
+            if (url.endsWith("/scopes"))
+                return jsonResponse({ contractVersion: 2, scopes: [
+                        { scopeUid: "prs_1", scopeHandle: "handle_1", scopeRevision: "rev_1", state: "v2-ready", cursor: "cursor_1" },
+                        { scopeUid: "cmp_1", scopeHandle: "handle_2", scopeRevision: "rev_2", state: "v2-ready", cursor: "cursor_2" },
+                    ] });
+            leaseCalls += 1;
+            return jsonResponse({
+                lease: `lease_${leaseCalls}`,
+                issuedAt: "2026-08-12T00:00:00.000Z",
+                expiresAt: "2026-08-12T00:00:30.000Z",
+                authorizationEpoch: `epoch_${leaseCalls}`,
+            }, 201);
+        };
+        const now = () => Date.parse("2026-08-12T00:00:00.000Z");
+        const inventory = new RealtimeRolloutClient({ apiUrl: "https://api.example", fetchImpl, now });
+        const leases = new RealtimeLeaseClient({ apiUrl: "https://api.example", fetchImpl, now });
+        const authorizer = new RealtimePassAuthorizer("token-a", inventory, leases);
+        const operation = vi.fn(async () => undefined);
+        await expect(authorizer.runBeforeIo({
+            deviceId: "machine_a", capabilityVector: capability, configurationFingerprint: "config-a", scopeFingerprint: "all", scopeUids: ["prs_1", "cmp_1"],
+        }, operation)).rejects.toThrow("leases disagree on authorization epoch");
+        expect(operation).not.toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=lease-client.test.js.map

package/dist/sync/lease-client.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease-client.test.js","sourceRoot":"","sources":["../../src/sync/lease-client.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAElD,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAiC,MAAM,uBAAuB,CAAC;AAE7F,MAAM,UAAU,GAA6B;IAC3C,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,MAAM;IACjB,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,CAAC;IACV,YAAY,EAAE,CAAC;CAChB,CAAC;AAEF,SAAS,YAAY,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG;IAC/C,OAAO,EAAE,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;AAC/F,CAAC;AAED,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,IAAI,QAA2E,CAAC;QAChF,MAAM,SAAS,GAAG,KAAK,EAAE,IAAY,EAAE,IAA4D,EAAE,EAAE;YACrG,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,YAAY,CAAC;gBAClB,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,0BAA0B;gBACpC,SAAS,EAAE,0BAA0B;gBACrC,kBAAkB,EAAE,SAAS;aAC9B,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAExI,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAClM,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,CAAC;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,aAAa,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC;SACjG,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,SAAS,GAAG,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC;YACzC,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,0BAA0B;YACpC,SAAS,EAAE,0BAA0B;YACrC,kBAAkB,EAAE,SAAS;SAC9B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QACxI,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACpM,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAgD,EAAE,CAAC;QACjE,MAAM,SAAS,GAAG,KAAK,EAAE,GAAW,EAAE,IAA2C,EAAE,EAAE;YACnF,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAC1C,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC5B,OAAO,YAAY,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,MAAM,EAAE;wBAChD,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE;wBAC7G,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE;qBAC9G,EAAE,CAAC,CAAC;YACP,CAAC;YACD,OAAO,YAAY,CAAC;gBAClB,KAAK,EAAE,cAAc;gBACrB,QAAQ,EAAE,0BAA0B;gBACpC,SAAS,EAAE,0BAA0B;gBACrC,kBAAkB,EAAE,SAAS;aAC9B,EAAE,GAAG,CAAC,CAAC;QACV,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,qBAAqB,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1G,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QACrG,MAAM,UAAU,GAAG,IAAI,sBAAsB,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC;QAE5C,MAAM,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC;YAClC,QAAQ,EAAE,WAAW;YACrB,gBAAgB,EAAE,UAAU;YAC5B,wBAAwB,EAAE,UAAU;YACpC,gBAAgB,EAAE,aAAa;YAC/B,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;SAC9B,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAErC,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACxF,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,MAAM,EAAE;gBAC7E,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE;aACnH,EAAE,CAAC,CAAC,CAAC;QACN,MAAM,SAAS,GAAG,IAAI,qBAAqB,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,SAAS,EAAE,CAAC,CAAC;QACrF,MAAM,UAAU,GAAG,IAAI,sBAAsB,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QAE/C,MAAM,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC;YAClC,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,wBAAwB,EAAE,UAAU,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC;SAC3I,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC;QAC3E,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,SAAS,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE;YACtC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,OAAO,YAAY,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,MAAM,EAAE;wBAC7E,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE;wBAC7G,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE;qBAC9G,EAAE,CAAC,CAAC;YACL,UAAU,IAAI,CAAC,CAAC;YAChB,OAAO,YAAY,CAAC;gBAClB,KAAK,EAAE,SAAS,UAAU,EAAE;gBAC5B,QAAQ,EAAE,0BAA0B;gBACpC,SAAS,EAAE,0BAA0B;gBACrC,kBAAkB,EAAE,SAAS,UAAU,EAAE;aAC1C,EAAE,GAAG,CAAC,CAAC;QACV,CAAC,CAAC;QACF,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,IAAI,qBAAqB,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/F,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1F,MAAM,UAAU,GAAG,IAAI,sBAAsB,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC;YAClC,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,wBAAwB,EAAE,UAAU,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;SAClJ,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC;QACzE,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/sync/logger.test.d.ts

@@ -0,0 +1,19 @@
+/**
+ * US-011 — unit tests for the pino logger factory + the 3-log diagnostic
+ * chain's CLIENT-side correlated fields.
+ *
+ * The PRD requires three correlated logs sharing the same `sequenceNumber`:
+ *   1. `watcher.emit`    — client push (US-008 PushEventEmitter)   [client]
+ *   2. `push.receive`    — server (hq-pro)                          [server]
+ *   3. `fanout.receive`  — client fanout-receive (US-009 receiver)  [client]
+ *
+ * This package owns the two CLIENT-side links. These tests prove:
+ *   - `createLogger` stamps the `component` tag on every line and respects
+ *     level + injected destination.
+ *   - the watcher emits `event=watcher.emit` carrying `sequenceNumber`.
+ *   - the receiver emits `event=fanout.receive` carrying the SAME
+ *     `sequenceNumber` → an operator can join the two client links (and the
+ *     server `push.receive` line, which carries the same key) end-to-end.
+ */
+export {};
+//# sourceMappingURL=logger.test.d.ts.map

package/dist/sync/logger.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.test.d.ts","sourceRoot":"","sources":["../../src/sync/logger.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG"}