@mdbase-dev/sdk 0.0.0-stage → 0.1.0-beta.149

package/dist/app-host/local-facade.js

@@ -0,0 +1,361 @@
+/** First-party local Core data facade across ONE owned MessagePort.
+ * The trusted Worker owns WASM + SQL + keys. This carries only ordinary client
+ * frames and bounded native Bases READ bytes, never bootstrap, signing,
+ * custody, log tokens, caller session IDs or SQL commands.
+ * Same-origin JS remains trusted; this is not a third-party grant boundary.
+ * Closing a facade does NOT retire the runtime or release its owner lease.
+ */
+import { decode, encode } from "../cbor.js";
+import { mdbaseError } from "../errors.js";
+import { inProcessConnector } from "../transport/inprocess.js";
+import { MAX_FRAME } from "../transport/port.js";
+const UUID = /^[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$/iu;
+const unavailable = () => mdbaseError("unavailable", "app local facade unavailable; reopen and reconcile");
+function pin(source) {
+    const ids = [source.account, source.installation, source.collection];
+    if (ids.some(id => typeof id !== "string" || !UUID.test(id)) || typeof source.isCurrent !== "function")
+        throw unavailable();
+    const binding = JSON.stringify(ids.map(id => id.toLowerCase()));
+    const check = source.isCurrent.bind(source);
+    return { binding, current: () => {
+            try {
+                return check() === true && JSON.stringify([source.account, source.installation, source.collection].map(id => id.toLowerCase())) === binding;
+            }
+            catch {
+                return false;
+            }
+        } };
+}
+const packetKinds = ["bases-request", "bases-response", "bases-list-views-request", "bases-list-views-response", "bases-read-view-source-request", "bases-read-view-source-response"];
+const responseFor = (kind) => kind === "bases-request" ? "bases-response" : kind === "bases-list-views-request" ? "bases-list-views-response" : "bases-read-view-source-response";
+const packetMax = (kind) => kind.endsWith("request") ? 128 * 1024 : kind === "bases-response" ? MAX_FRAME : 1024 * 1024;
+function bridge(channel, source, receive, ended, bases) {
+    const scope = pin(source);
+    let closed = false;
+    const stop = () => {
+        if (closed)
+            return;
+        closed = true;
+        channel.onmessage = null;
+        channel.onmessageerror = null;
+        try {
+            channel.postMessage([1, scope.binding, "close"]);
+        }
+        catch { /* fail-stop channel */ }
+        channel.close();
+        ended();
+    };
+    const current = () => {
+        if (closed || !scope.current()) {
+            stop();
+            throw unavailable();
+        }
+    };
+    channel.onmessageerror = stop;
+    channel.onmessage = event => {
+        try {
+            current();
+            const packet = event.data;
+            if (!Array.isArray(packet) || packet[0] !== 1 || packet[1] !== scope.binding)
+                throw unavailable();
+            if (packet.length === 3 && packet[2] === "close") {
+                stop();
+                return;
+            }
+            if (packet.length === 5 && packetKinds.includes(packet[2])) {
+                const kind = packet[2], id = packet[3], bytes = packet[4], max = packetMax(kind);
+                if (!bases || !Number.isInteger(id) || id < 1 || id > 0xffffffff || !(bytes instanceof Uint8Array) || !bytes.length || bytes.length > max)
+                    throw unavailable();
+                current();
+                bases(kind, id, bytes);
+                return;
+            }
+            if (packet.length !== 4 || packet[2] !== "frame" || !(packet[3] instanceof Uint8Array)
+                || packet[3].length === 0 || packet[3].length > MAX_FRAME)
+                throw unavailable();
+            const frame = decode(new Uint8Array(packet[3]));
+            current();
+            receive(frame);
+        }
+        catch {
+            stop();
+        }
+    };
+    channel.start();
+    return {
+        close: stop,
+        send(frame) {
+            try {
+                current();
+                const bytes = encode(frame);
+                if (!bytes.length || bytes.length > MAX_FRAME)
+                    throw unavailable();
+                current();
+                // Independently owned encoded bytes, not a caller buffer/Buffer view.
+                channel.postMessage([1, scope.binding, "frame", bytes], [bytes.buffer]);
+            }
+            catch {
+                stop();
+                throw unavailable();
+            }
+        },
+        /** Internal independently owned full ArrayBuffer, transferred once. */
+        control(kind, id, bytes) {
+            try {
+                current();
+                const max = packetMax(kind);
+                if (!Number.isInteger(id) || id < 1 || id > 0xffffffff || !(bytes instanceof Uint8Array) || !bytes.length || bytes.length > max || !(bytes.buffer instanceof ArrayBuffer) || bytes.byteOffset !== 0 || bytes.byteLength !== bytes.buffer.byteLength)
+                    throw unavailable();
+                current();
+                channel.postMessage([1, scope.binding, kind, id, bytes], [bytes.buffer]);
+            }
+            catch {
+                stop();
+                throw unavailable();
+            }
+        },
+        current,
+    };
+}
+/** App calls that can queue log work at once: writes and file transfers. */
+const LOG_WORK = new Set(["submit", "resolve_hold", "open_upload", "upload_chunk", "commit_upload", "abort_upload", "fetch_file", "read_file", "ack_chunks"]);
+function queuesLogWork(frame) {
+    if (!(frame instanceof Map))
+        return false;
+    const fields = frame;
+    return fields.get(0) === 0 && LOG_WORK.has(fields.get(2));
+}
+/** Worker-side attachment, AFTER ownership and genuine native bootstrap/adoption.
+ * AppWasmRuntime checks the original collection; a caller cannot choose a grant
+ * or request a different native authority. No host-control RPC is exposed. */
+export function attachAppLocalFacade(runtime, channel, source, logWork) {
+    const original = pin(source);
+    if (!original.current())
+        throw unavailable();
+    let native;
+    try {
+        native = runtime.connect({ collection: source.collection });
+    }
+    catch {
+        channel.close();
+        throw unavailable();
+    }
+    let wire;
+    try {
+        wire = bridge(channel, source, frame => {
+            native.send(frame);
+            if (logWork && queuesLogWork(frame)) {
+                try {
+                    logWork();
+                }
+                catch { /* a drive hint, never a call outcome */ }
+            }
+        }, () => native.close(), (kind, id, bytes) => {
+            let reply;
+            try {
+                if (kind === "bases-request" && typeof runtime.executeBases === "function")
+                    reply = runtime.executeBases(native, bytes);
+                else if ((kind === "bases-list-views-request" || kind === "bases-read-view-source-request") && typeof runtime.discoverBases === "function")
+                    reply = runtime.discoverBases(native, kind === "bases-list-views-request" ? "list-views" : "read-view-source", bytes);
+                else
+                    throw unavailable();
+            }
+            finally {
+                bytes.fill(0);
+            }
+            try {
+                wire.current();
+                wire.control(responseFor(kind), id, reply);
+            }
+            catch (error) {
+                if (reply.byteLength)
+                    reply.fill(0);
+                throw error;
+            }
+        });
+        native.onframe = frame => { try {
+            wire.send(frame);
+        }
+        catch { /* closed and fenced facade */ } };
+        native.onclose = () => wire.close();
+    }
+    catch {
+        native.close();
+        channel.close();
+        throw unavailable();
+    }
+    const resourceSetup = Object.freeze({
+        async assess(manifest, signal, decisions) {
+            signal.throwIfAborted();
+            wire.current();
+            if (!runtime.setupResources)
+                throw unavailable();
+            const result = decisions === undefined ? runtime.setupResources(native, "assess", manifest)
+                : runtime.setupResources(native, "assess", manifest, undefined, decisions);
+            wire.current();
+            signal.throwIfAborted();
+            return result;
+        },
+        async apply(manifest, assessmentDigest, signal, decisions) {
+            signal.throwIfAborted();
+            wire.current();
+            if (!runtime.setupResources)
+                throw unavailable();
+            const result = decisions === undefined ? runtime.setupResources(native, "apply", manifest, assessmentDigest)
+                : runtime.setupResources(native, "apply", manifest, assessmentDigest, decisions);
+            wire.current();
+            signal.throwIfAborted();
+            return result;
+        },
+        async rejected(mutationId, signal) {
+            signal.throwIfAborted();
+            wire.current();
+            if (!runtime.resourceRejected)
+                return false;
+            const result = runtime.resourceRejected(native, mutationId);
+            wire.current();
+            signal.throwIfAborted();
+            return result;
+        },
+    });
+    return { close: () => wire.close(), resourceSetup };
+}
+/** UI-side data connector. A channel is single-use: replacement requires a new
+ * owner-provided channel, never replaying hello or writes into a prior session. */
+export function appLocalConnector(channel, source) {
+    const original = pin(source);
+    let used = false, closed = false;
+    let wire;
+    let pending = null;
+    const queued = [];
+    const cancelled = () => mdbaseError("cancelled", "Bases read cancelled");
+    let nextBasesId = 1;
+    return {
+        description: "app-local",
+        close() { closed = true; if (wire)
+            wire.close();
+        else
+            channel.close(); },
+        async open(hello, signal) {
+            // Reject a second open without disrupting the first live session.
+            if (used)
+                throw unavailable();
+            if (!original.current() || signal?.aborted || closed) {
+                channel.close();
+                throw unavailable();
+            }
+            used = true;
+            let port;
+            const active = wire = bridge(channel, source, frame => port?.onframe?.(frame), () => {
+                const stopped = pending;
+                pending = null;
+                const waiting = queued.splice(0);
+                stopped?.finish(undefined, cancelled());
+                for (const read of waiting)
+                    read.finish(undefined, cancelled());
+                port?.onclose?.(unavailable());
+            }, (kind, id, bytes) => {
+                if (!pending || kind !== pending.response || id !== pending.id) {
+                    bytes.fill(0);
+                    throw unavailable();
+                }
+                const completed = pending;
+                pending = null;
+                completed.finish(bytes);
+                dispatch();
+            });
+            function dispatch() {
+                if (pending || queued.length === 0)
+                    return;
+                const read = queued.shift();
+                pending = read;
+                try {
+                    active.current();
+                    if (pending !== read) {
+                        dispatch();
+                        return;
+                    } // cancelled before native dispatch
+                    if (nextBasesId > 0xffffffff) {
+                        active.close();
+                        throw unavailable();
+                    }
+                    read.id = nextBasesId++;
+                    active.control(read.kind, read.id, read.request);
+                }
+                catch (error) {
+                    if (pending === read)
+                        pending = null;
+                    read.finish(undefined, error);
+                    dispatch();
+                }
+            }
+            const readBases = (kind, request, signal) => {
+                try {
+                    active.current();
+                    if (signal?.aborted)
+                        throw cancelled();
+                    if (!(request instanceof Uint8Array) || !request.length || request.length > 128 * 1024)
+                        throw mdbaseError("invalid_request", "Bases request bytes exceed bound");
+                    if (queued.length >= 32)
+                        throw mdbaseError("unavailable", "Bases read queue is full", "bases_read_backpressure");
+                }
+                catch (error) {
+                    return Promise.reject(error);
+                }
+                // Capture before waiting: mutation of a caller's buffer cannot alter
+                // another queued READ. Never loan/retain the caller's buffer.
+                const owned = new Uint8Array(request);
+                return new Promise((resolve, reject) => {
+                    let settled = false;
+                    const finish = (bytes, error) => {
+                        // Active caller cancellation does NOT wipe an input still being
+                        // transferred. Dispose only after removal/original reply/close.
+                        if (pending !== read && owned.byteLength)
+                            owned.fill(0);
+                        if (settled) {
+                            if (bytes?.byteLength)
+                                bytes.fill(0);
+                            return;
+                        }
+                        settled = true;
+                        signal?.removeEventListener("abort", abort);
+                        if (error !== undefined)
+                            reject(error);
+                        else
+                            resolve(bytes);
+                    };
+                    const read = { kind, request: owned, response: responseFor(kind), finish };
+                    const abort = () => {
+                        const index = queued.indexOf(read);
+                        if (index !== -1)
+                            queued.splice(index, 1);
+                        if (pending === read && read.id === undefined)
+                            pending = null;
+                        finish(undefined, cancelled()); // dispatched pending remains occupied
+                    };
+                    queued.push(read);
+                    signal?.addEventListener("abort", abort, { once: true });
+                    dispatch();
+                });
+            };
+            port = { onframe: null, onclose: null, send: frame => active.send(frame), close: () => active.close(),
+                readAppBases: (request, signal) => readBases("bases-request", request, signal),
+                readAppBasesDiscovery(operation, request, signal) {
+                    if (operation !== "list-views" && operation !== "read-view-source")
+                        return Promise.reject(mdbaseError("invalid_request", "unknown native Bases read"));
+                    return readBases(operation === "list-views" ? "bases-list-views-request" : "bases-read-view-source-request", request, signal);
+                },
+            };
+            try {
+                if (signal?.aborted || closed)
+                    throw unavailable();
+                return await inProcessConnector({ connect: () => port }).open(hello, signal);
+            }
+            catch {
+                active.close();
+                throw unavailable();
+            }
+        },
+    };
+}
+//# sourceMappingURL=local-facade.js.map

package/dist/app-host/local-facade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-facade.js","sourceRoot":"","sources":["../../src/app-host/local-facade.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAkB,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAkC,MAAM,sBAAsB,CAAC;AAUjF,MAAM,IAAI,GAAG,iDAAiD,CAAC;AAC/D,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,aAAa,EAAE,oDAAoD,CAAC,CAAC;AAC3G,SAAS,GAAG,CAAC,MAAqB;IAChC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACrE,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,UAAU;QAAE,MAAM,WAAW,EAAE,CAAC;IAC5H,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE;YAC9B,IAAI,CAAC;gBAAC,OAAO,KAAK,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC;YAAC,CAAC;YACpJ,MAAM,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;QACzB,CAAC,EAAE,CAAC;AACN,CAAC;AAKD,MAAM,WAAW,GAAG,CAAC,eAAe,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,gCAAgC,EAAE,iCAAiC,CAAU,CAAC;AAC/L,MAAM,WAAW,GAAG,CAAC,IAAwB,EAAe,EAAE,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,KAAK,0BAA0B,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,iCAAiC,CAAC;AACnN,MAAM,SAAS,GAAG,CAAC,IAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;AACrI,SAAS,MAAM,CAAC,OAAoB,EAAE,MAAqB,EAAE,OAAmC,EAAE,KAAiB,EACjH,KAAkE;IAClE,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;QACzB,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC;YAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;QAC3F,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,EAAE,CAAC;IACV,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAAC,IAAI,EAAE,CAAC;YAAC,MAAM,WAAW,EAAE,CAAC;QAAC,CAAC;IAClE,CAAC,CAAC;IACF,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAC9B,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,EAAE;QAC1B,IAAI,CAAC;YACH,OAAO,EAAE,CAAC;YACV,MAAM,MAAM,GAAY,KAAK,CAAC,IAAI,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO;gBAAE,MAAM,WAAW,EAAE,CAAC;YAClG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;gBAAC,IAAI,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACrE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAgB,CAAC,EAAE,CAAC;gBAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAgB,EAAE,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChG,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,UAAU,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;oBAAE,MAAM,WAAW,EAAE,CAAC;gBAC/J,OAAO,EAAE,CAAC;gBAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;gBAAC,OAAO;YAC5C,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC;mBACjF,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,SAAS;gBAAE,MAAM,WAAW,EAAE,CAAC;YACjF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,EAAE,CAAC;QAAC,CAAC;IACrB,CAAC,CAAC;IACF,OAAO,CAAC,KAAK,EAAE,CAAC;IAChB,OAAO;QACL,KAAK,EAAE,IAAI;QACX,IAAI,CAAC,KAAgB;YACnB,IAAI,CAAC;gBACH,OAAO,EAAE,CAAC;gBACV,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;oBAAE,MAAM,WAAW,EAAE,CAAC;gBACnE,OAAO,EAAE,CAAC;gBACV,sEAAsE;gBACtE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1E,CAAC;YAAC,MAAM,CAAC;gBAAC,IAAI,EAAE,CAAC;gBAAC,MAAM,WAAW,EAAE,CAAC;YAAC,CAAC;QAC1C,CAAC;QACD,uEAAuE;QACvE,OAAO,CAAC,IAAiB,EAAE,EAAU,EAAE,KAAiB;YACtD,IAAI,CAAC;gBACH,OAAO,EAAE,CAAC;gBACV,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,UAAU,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY,WAAW,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,MAAM,CAAC,UAAU;oBAAE,MAAM,WAAW,EAAE,CAAC;gBACzQ,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YACtF,CAAC;YAAC,MAAM,CAAC;gBAAC,IAAI,EAAE,CAAC;gBAAC,MAAM,WAAW,EAAE,CAAC;YAAC,CAAC;QAC1C,CAAC;QACD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;AAC9J,SAAS,aAAa,CAAC,KAAgB;IACrC,IAAI,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,KAA8B,CAAC;IAC9C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAW,CAAC,CAAC;AACtE,CAAC;AAED;;8EAE8E;AAC9E,MAAM,UAAU,oBAAoB,CAAC,OAAkJ,EAAE,OAAoB,EAAE,MAAqB,EAAE,OAAoB;IACxP,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE;QAAE,MAAM,WAAW,EAAE,CAAC;IAC7C,IAAI,MAAiB,CAAC;IACtB,IAAI,CAAC;QAAC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAAC,CAAC;IACpE,MAAM,CAAC;QAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,WAAW,EAAE,CAAC;IAAC,CAAC;IAC/C,IAAI,IAA+B,CAAC;IACpC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;YACrC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,IAAI,OAAO,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,OAAO,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;YAAC,CAAC;QAChH,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE;YAC3C,IAAI,KAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,IAAI,IAAI,KAAK,eAAe,IAAI,OAAO,OAAO,CAAC,YAAY,KAAK,UAAU;oBAAE,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;qBACnH,IAAI,CAAC,IAAI,KAAK,0BAA0B,IAAI,IAAI,KAAK,gCAAgC,CAAC,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,UAAU;oBAAE,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,EAAC,IAAI,KAAK,0BAA0B,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,EAAC,KAAK,CAAC,CAAC;;oBAC3P,MAAM,WAAW,EAAE,CAAC;YAC3B,CAAC;oBAAS,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAC5B,IAAI,CAAC;gBAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAA0B,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;YAAC,CAAC;YACzF,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,KAAK,CAAC,UAAU;oBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC,CAAC;QACjG,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,WAAW,EAAE,CAAC;IAAC,CAAC;IACjE,MAAM,aAAa,GAAyB,MAAM,CAAC,MAAM,CAAC;QACxD,KAAK,CAAC,MAAM,CAAC,QAAiB,EAAE,MAAmB,EAAE,SAAgC;YACnF,MAAM,CAAC,cAAc,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,cAAc;gBAAE,MAAM,WAAW,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;gBACzF,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAC7E,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAAC,OAAO,MAAM,CAAC;QACzD,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,QAAiB,EAAE,gBAAwB,EAAE,MAAmB,EAAE,SAAgC;YAC5G,MAAM,CAAC,cAAc,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,cAAc;gBAAE,MAAM,WAAW,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC;gBAC1G,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC;YACnF,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAAC,OAAO,MAAM,CAAC;QACzD,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,UAAkB,EAAE,MAAmB;YACpD,MAAM,CAAC,cAAc,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,gBAAgB;gBAAE,OAAO,KAAK,CAAC;YAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAAC,OAAO,MAAM,CAAC;QACzD,CAAC;KACF,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,CAAC;AACtD,CAAC;AAOD;mFACmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,OAAoB,EAAE,MAAqB;IAC3E,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,IAAI,GAAG,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;IACjC,IAAI,IAA2C,CAAC;IAKhD,IAAI,OAAO,GAAgB,IAAI,CAAC;IAChC,MAAM,MAAM,GAAW,EAAE,CAAC;IAC1B,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC;IACzE,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,OAAO;QACL,WAAW,EAAE,WAAW;QACxB,KAAK,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,IAAI,IAAI;YAAE,IAAI,CAAC,KAAK,EAAE,CAAC;;YAAM,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACxE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM;YACtB,kEAAkE;YAClE,IAAI,IAAI;gBAAE,MAAM,WAAW,EAAE,CAAC;YAC9B,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,MAAM,EAAE,OAAO,IAAI,MAAM,EAAE,CAAC;gBAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBAAC,MAAM,WAAW,EAAE,CAAC;YAAC,CAAC;YAC/F,IAAI,GAAG,IAAI,CAAC;YACZ,IAAI,IAA2B,CAAC;YAChC,MAAM,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE;gBAClF,MAAM,OAAO,GAAG,OAAO,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;gBACxC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACjC,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;gBACxC,KAAK,MAAM,IAAI,IAAI,OAAO;oBAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;gBAChE,IAAI,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACjC,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE;gBACrB,IAAI,CAAC,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC,QAAQ,IAAI,EAAE,KAAK,OAAO,CAAC,EAAE,EAAE,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAAC,MAAM,WAAW,EAAE,CAAC;gBAAC,CAAC;gBACvG,MAAM,SAAS,GAAG,OAAO,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;gBAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAC,QAAQ,EAAE,CAAC;YACjF,CAAC,CAAC,CAAC;YACH,SAAS,QAAQ;gBACf,IAAI,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO;gBAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAG,CAAC;gBAC7B,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,CAAC;oBACH,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;wBAAC,QAAQ,EAAE,CAAC;wBAAC,OAAO;oBAAC,CAAC,CAAC,mCAAmC;oBACjF,IAAI,WAAW,GAAG,UAAU,EAAE,CAAC;wBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;wBAAC,MAAM,WAAW,EAAE,CAAC;oBAAC,CAAC;oBACtE,IAAI,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;oBACxB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBACnD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,OAAO,KAAK,IAAI;wBAAE,OAAO,GAAG,IAAI,CAAC;oBACrC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;oBAC9B,QAAQ,EAAE,CAAC;gBACb,CAAC;YACH,CAAC;YACD,MAAM,SAAS,GAAG,CAAC,IAAwB,EAAE,OAAmB,EAAE,MAAoB,EAAuB,EAAE;gBAC3G,IAAI,CAAC;oBACH,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,IAAI,MAAM,EAAE,OAAO;wBAAE,MAAM,SAAS,EAAE,CAAC;oBACvC,IAAI,CAAC,CAAC,OAAO,YAAY,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,GAAG,IAAI;wBAAE,MAAM,WAAW,CAAC,iBAAiB,EAAE,kCAAkC,CAAC,CAAC;oBACjK,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE;wBAAE,MAAM,WAAW,CAAC,aAAa,EAAE,0BAA0B,EAAE,yBAAyB,CAAC,CAAC;gBACnH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAAC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC;gBACjD,qEAAqE;gBACrE,8DAA8D;gBAC9D,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;gBACtC,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBACjD,IAAI,OAAO,GAAG,KAAK,CAAC;oBACpB,MAAM,MAAM,GAAG,CAAC,KAAkB,EAAE,KAAe,EAAE,EAAE;wBACrD,gEAAgE;wBAChE,gEAAgE;wBAChE,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU;4BAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;wBACxD,IAAI,OAAO,EAAE,CAAC;4BAAC,IAAI,KAAK,EAAE,UAAU;gCAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;4BAAC,OAAO;wBAAC,CAAC;wBAC9D,OAAO,GAAG,IAAI,CAAC;wBAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;wBAC5D,IAAI,KAAK,KAAK,SAAS;4BAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;4BAAM,OAAO,CAAC,KAAM,CAAC,CAAC;oBAC/D,CAAC,CAAC;oBACF,MAAM,IAAI,GAAS,EAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAC,CAAC;oBAC/E,MAAM,KAAK,GAAG,GAAG,EAAE;wBACjB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;wBACnC,IAAI,KAAK,KAAK,CAAC,CAAC;4BAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;wBAC1C,IAAI,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS;4BAAE,OAAO,GAAG,IAAI,CAAC;wBAC9D,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,sCAAsC;oBACxE,CAAC,CAAC;oBACF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAClB,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAC,IAAI,EAAE,IAAI,EAAC,CAAC,CAAC;oBACvD,QAAQ,EAAE,CAAC;gBACb,CAAC,CAAC,CAAC;YACP,CAAC,CAAC;YACF,IAAI,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;gBACnG,YAAY,EAAE,CAAC,OAAO,EAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,eAAe,EAAC,OAAO,EAAC,MAAM,CAAC;gBAC3E,qBAAqB,CAAC,SAAS,EAAC,OAAO,EAAC,MAAM;oBAC5C,IAAI,SAAS,KAAK,YAAY,IAAI,SAAS,KAAK,kBAAkB;wBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAC,CAAC;oBACvJ,OAAO,SAAS,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,gCAAgC,EAAC,OAAO,EAAC,MAAM,CAAC,CAAC;gBAC9H,CAAC;aACF,CAAC;YACF,IAAI,CAAC;gBACH,IAAI,MAAM,EAAE,OAAO,IAAI,MAAM;oBAAE,MAAM,WAAW,EAAE,CAAC;gBACnD,OAAO,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAChF,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAAC,MAAM,WAAW,EAAE,CAAC;YAAC,CAAC;QAClD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/app-host/log-pump.d.ts

@@ -0,0 +1,124 @@
+import { type AppServerProblem } from "./cp-problem.js";
+export interface AppLogCall {
+    /** From log_codec::host_call; the call ID stays inside the canonical frame. */
+    endpoint: number | bigint;
+    frame: Uint8Array;
+    sidecar?: Uint8Array;
+}
+export interface AppLogRuntime {
+    /** Drain canonical records produced by Rust log_codec, not app-authored requests. */
+    takeLogCalls(): readonly AppLogCall[];
+    /** Rust checks ID, original method, schema/checksum/scope before applying anything.
+     * False means invalid, never acknowledgement; it cannot consume another call. */
+    acceptLogReply(id: bigint, bytes: Uint8Array): boolean;
+    /** No response is NOT a rejection or proof that the append did not happen. */
+    logNoResponse(id: bigint): void;
+    /** Retire this runtime's log generation before closing its transport. */
+    retireLog(): void;
+}
+export interface AppLogTransport {
+    /** Fixed authenticated binding; never dynamically repointed across scopes. */
+    readonly endpoint: number | bigint;
+    readonly collection: string;
+    /** Host-authenticated account/installation/device generation is still current. */
+    isCurrent(): boolean;
+    /** HTTP exposes capped bytes for active logical sends; whole-frame ports have
+     * no partial response activity. Disappears when send settles (valid or not). */
+    responseProgress?(): readonly {
+        id: number;
+        bytes: number;
+    }[];
+    /** Sends the EXACT sealed frame. For direct objects, verify ranges/checksums and
+     * finish PUT+commit/GET before returning a normalized inline result to Rust.
+     * Returns owned mutable bytes (never a borrowed WASM view). Bodies must be
+     * bounded while streaming, before allocating a full response.
+     * No generic device signer, token, URL or collection keys reach this driver. */
+    send(call: AppLogCall, options: {
+        signal: AbortSignal;
+    }): Promise<Uint8Array>;
+}
+export declare class AppLogHostError extends Error {
+    readonly reason: "invalid_binding" | "invalid_call" | "fenced";
+    constructor(reason: "invalid_binding" | "invalid_call" | "fenced");
+}
+/** What the last failed call says about the path to the log, for display and
+ * retry pacing. Null after any accepted reply. */
+export type AppLogHealth = {
+    readonly kind: "offline";
+} | {
+    readonly kind: "unreachable";
+} | {
+    readonly kind: "server_busy";
+    readonly retryAfterMs: number | null;
+} | {
+    readonly kind: "rate_limited";
+    readonly retryAfterMs: number | null;
+} | {
+    readonly kind: "auth";
+};
+/** Classify a send failure. A fenced or shape failure says nothing about the network. */
+export declare function appLogHealth(e: unknown, online?: boolean | undefined): AppLogHealth | null;
+/** One pump is permanently bound to one runtime/transport generation. The caller
+ * supplies actual authenticated initialization; this helper does not manufacture
+ * it or create sessions. Worker's owner stop must await close(), or terminate the
+ * Worker if transport shutdown hangs, BEFORE releasing its writer lease. */
+export declare class AppLogPump {
+    private readonly runtime;
+    private readonly transport;
+    private readonly abort;
+    private readonly endpoint;
+    private readonly collection;
+    private readonly rounds;
+    private work;
+    private closed;
+    private failed;
+    private retired;
+    private problem;
+    private terminal;
+    private health;
+    private sent;
+    private readonly readAfter;
+    private readAdvances;
+    constructor(runtime: AppLogRuntime, transport: AppLogTransport, binding: {
+        endpoint: number | bigint;
+        collection: string;
+        maxRounds?: number;
+    });
+    get fenced(): boolean;
+    /** Calls this pump has sent so far; a host compares it across a turn to
+     * learn whether the turn did log work. */
+    get callsSent(): number;
+    /** Native-accepted advancing READ cursors (data/control separately). Unlike
+     * sent/accepted call counts, retries at the same cursor and head heartbeats
+     * cannot extend initial-sync inactivity. No remote result is decoded in JS. */
+    get readProgress(): number;
+    responseProgress(): readonly {
+        id: number;
+        bytes: number;
+    }[];
+    /** The server's latest specific refusal (migrating, moved, suspended) for
+     * this live collection; null once a reply is accepted again. Display only. */
+    get serverProblem(): AppServerProblem | null;
+    /** Initial admission must not lose a genuine non-retryable refusal when a
+     * concurrent call succeeds. Bound to this pump generation; never a retry key. */
+    get terminalProblem(): AppServerProblem | null;
+    /** Typed transport health from the latest failed call; null once a reply is accepted. */
+    get transportHealth(): AppLogHealth | null;
+    private current;
+    private retire;
+    private capture;
+    private wipe;
+    /** Coalesces concurrent kicks. Bounded turns return quiet:false when the caller
+     * should schedule another turn; no background timer or autonomous retry loop. */
+    pump(): Promise<{
+        quiet: boolean;
+    }>;
+    private drive;
+    /** HOST ONLY: fence/abort this pump and drain BEFORE the authenticated host
+     * replaces the native session. Native replacement MUST classify originals as
+     * unknown; on failure host MUST retire runtime. Same owners/lease stay held.
+     * This is not close/lease release/Saved. May hang; terminate Worker first. */
+    drainForAuthenticatedReconnect(): Promise<void>;
+    /** Retire immediately, abort I/O, then drain without feeding late replies. */
+    close(): Promise<void>;
+}