@oharness/engine 0.1.0

package/dist/sync/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/sync/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AA8CvF,MAAM,OAAO,UAAU;IACJ,IAAI,CAAS;IACb,KAAK,CAAiC;IACtC,IAAI,CAAqB;IACzB,IAAI,CAA0B;IAE/C,YAAY,IAAuB;QACjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAe,CAAC;QACxF,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QAC3C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAC7C,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,QAAQ,CAAC,MAAoB;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAA0B,KAAK,EAAE,eAAe,KAAK,EAAE,EAAE;YACtF,MAAM;SACP,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CACR,OAAe,EACf,OAAqB,EACrB,QAAuB,EACvB,MAAoB;QAEpB,IAAI,OAAO,CAAC,MAAM,GAAG,gBAAgB,IAAI,QAAQ,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,gBAAgB,gBAAgB,0BAA0B,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAe,MAAM,EAAE,UAAU,EAAE;YACpD,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YAC/E,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CACR,OAAe,EACf,KAAa,EACb,OAAgE,EAAE;QAElE,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACrE,IAAI,IAAI,CAAC,IAAI;YAAE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,kBAAkB,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC3F,IAAI,IAAI,CAAC,IAAI;YAAE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAEhF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAe,KAAK,EAAE,YAAY,KAAK,EAAE,EAAE;YACxE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAC;QACH,OAAO;YACL,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;YAC7D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YACxD,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YAC3D,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI;SACzB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,IAAY,EACZ,OAAiD,EAAE;QAEnD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,EAAE,EAAE;gBAChD,MAAM;gBACN,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,KAAK,EAAE;oBAChC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;iBAC3E;gBACD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,uEAAuE;YACvE,uEAAuE;YACvE,wDAAwD;YACxD,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;gBAAE,MAAM,GAAG,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,IAAI,IAAI,YAAY,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,uEAAuE;YACvE,kEAAkE;YAClE,MAAM,MAAM,GAAG,SAAS,CAAqB,IAAI,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC1F,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,MAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,MAAM,GAAG,SAAS,CAAI,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,IAAI,IAAI,yBAAyB,CAAC,CAAC;QACjF,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,MAAM,CAAS;IAExB,YAAY,MAAc,EAAE,OAAe;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,gDAAgD;AAChD,MAAM,UAAU,KAAK,CAAI,KAAU,EAAE,IAAI,GAAG,gBAAgB;IAC1D,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,MAAM,GAAG,GAAU,EAAE,CAAC;IACtB,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACrF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/sync/mirror.d.ts

@@ -0,0 +1,85 @@
+import type { SessionStore } from "../agent/store.ts";
+import { JsonStore } from "../storage/kv.ts";
+import { SyncClient } from "./client.ts";
+export interface MirrorOptions {
+    store: SessionStore;
+    client: SyncClient;
+    /** The feed this mirror is bound to — a repository, not a path. */
+    projectId: string;
+    /** Where the cursor is kept. Defaults to the store's own root. */
+    state?: JsonStore;
+    /** Told about failures. Sync problems are worth a log line, never a throw. */
+    onError?: (message: string) => void;
+    /**
+     * Seconds to hold a poll open, capped by the protocol.
+     *
+     * The maximum is the right answer for a harness someone is working in, and
+     * the wrong one for anything short-lived: a held connection keeps the
+     * process alive, so a scheduled run or a test would sit waiting on a server
+     * that has nothing to say.
+     */
+    pollSeconds?: number;
+    /** Overridable for tests, which should not wait in real seconds. */
+    timers?: {
+        setTimeout: (fn: () => void, ms: number) => unknown;
+        clearTimeout: (handle: unknown) => void;
+    };
+}
+export declare class SessionMirror {
+    private readonly store;
+    private readonly client;
+    private readonly projectId;
+    private readonly state;
+    private readonly onError;
+    private readonly pollSeconds;
+    private readonly timers;
+    private unwatch?;
+    private aborter?;
+    private pushTimer?;
+    private pulling?;
+    private running;
+    /** Sessions with local writes not known to be pushed. */
+    private readonly dirty;
+    /** Deletions waiting to travel, kept because the metadata is already gone. */
+    private readonly tombstones;
+    private held?;
+    constructor(opts: MirrorOptions);
+    get active(): boolean;
+    /**
+     * Begin mirroring.
+     *
+     * Subscribing comes before the first pull so a write that lands during the
+     * opening round trip is not missed — it would otherwise sit unpushed until
+     * something else in that session changed, which for a finished session is
+     * never.
+     */
+    start(): void;
+    /**
+     * Stop, and stay stopped.
+     *
+     * The in-flight long poll is aborted rather than waited out: a user who
+     * switches sync off should not have a connection to the server outliving the
+     * decision by up to thirty seconds.
+     */
+    stop(): void;
+    /** Push whatever is pending now, rather than on the debounce. */
+    flush(): Promise<void>;
+    private onChange;
+    private schedulePush;
+    /** Offer every session in this project, for a device that has never pushed. */
+    private sweep;
+    private push;
+    /**
+     * Read the feed forward, forever.
+     *
+     * A long poll returns either when something arrives or when the server gives
+     * up holding it, so the loop is not a poll with a delay in it — the delay
+     * only appears after a failure.
+     */
+    private loop;
+    private pull;
+    private report;
+    private wait;
+    private read;
+    private write;
+}

package/dist/sync/mirror.js

@@ -0,0 +1,389 @@
+import { asArtifactRevision } from "../artifacts/store.js";
+import { JsonStore } from "../storage/kv.js";
+import { errorMessage } from "../core/errors.js";
+import { SyncClient, SyncHttpError, chunk } from "./client.js";
+import { MAX_WAIT_SECONDS } from "./protocol.js";
+/**
+ * The line between the session store and a sync server.
+ *
+ * One mirror serves one project, because a feed is scoped to one and a cursor
+ * into someone else's is meaningless. It pushes what the store reports and
+ * pulls in a loop, and it is allowed to fail at every step: the local store is
+ * complete on its own, so a mirror that cannot reach anything must leave the
+ * harness working exactly as it would with sync switched off. Nothing here
+ * throws outward, and nothing here is awaited by a write path.
+ *
+ * Two asymmetries worth knowing, both of them the protocol's doing:
+ *
+ *   Pushing again is free. The server deduplicates on record id, so the
+ *   bookkeeping below only has to be approximately right — it exists to keep
+ *   pushes small, not to keep them correct. On any doubt it re-sends.
+ *
+ *   Pulling twice is free for the same reason, one layer down: `mergeRecords`
+ *   drops what the log already holds. So a cursor lost to a crash costs
+ *   bandwidth and nothing else.
+ */
+/** How long to gather writes before pushing. A turn writes many records. */
+const PUSH_DEBOUNCE_MS = 750;
+/** Backoff after a failure, doubling to the ceiling. */
+const RETRY_FLOOR_MS = 2_000;
+const RETRY_CEILING_MS = 60_000;
+export class SessionMirror {
+    store;
+    client;
+    projectId;
+    state;
+    onError;
+    pollSeconds;
+    timers;
+    unwatch;
+    aborter;
+    pushTimer;
+    pulling;
+    running = false;
+    /** Sessions with local writes not known to be pushed. */
+    dirty = new Set();
+    /** Deletions waiting to travel, kept because the metadata is already gone. */
+    tombstones = new Map();
+    held;
+    constructor(opts) {
+        this.store = opts.store;
+        this.client = opts.client;
+        this.projectId = opts.projectId;
+        this.state = opts.state ?? new JsonStore(opts.store.root);
+        this.onError = opts.onError ?? (() => { });
+        this.pollSeconds = Math.min(opts.pollSeconds ?? MAX_WAIT_SECONDS, MAX_WAIT_SECONDS);
+        this.timers = opts.timers ?? {
+            setTimeout: (fn, ms) => setTimeout(fn, ms),
+            clearTimeout: (handle) => clearTimeout(handle),
+        };
+    }
+    get active() {
+        return this.running;
+    }
+    /**
+     * Begin mirroring.
+     *
+     * Subscribing comes before the first pull so a write that lands during the
+     * opening round trip is not missed — it would otherwise sit unpushed until
+     * something else in that session changed, which for a finished session is
+     * never.
+     */
+    start() {
+        if (this.running)
+            return;
+        this.running = true;
+        this.aborter = new AbortController();
+        this.unwatch = this.store.watch((change) => this.onChange(change));
+        // Everything already on disk may predate this device having a server at
+        // all, so the first pass offers the whole project rather than only what
+        // changes from here.
+        void this.sweep();
+        void this.loop();
+    }
+    /**
+     * Stop, and stay stopped.
+     *
+     * The in-flight long poll is aborted rather than waited out: a user who
+     * switches sync off should not have a connection to the server outliving the
+     * decision by up to thirty seconds.
+     */
+    stop() {
+        if (!this.running)
+            return;
+        this.running = false;
+        this.unwatch?.();
+        this.unwatch = undefined;
+        if (this.pushTimer !== undefined) {
+            this.timers.clearTimeout(this.pushTimer);
+            this.pushTimer = undefined;
+        }
+        this.aborter?.abort();
+        this.aborter = undefined;
+    }
+    /** Push whatever is pending now, rather than on the debounce. */
+    async flush() {
+        if (this.pushTimer !== undefined) {
+            this.timers.clearTimeout(this.pushTimer);
+            this.pushTimer = undefined;
+        }
+        await this.push();
+    }
+    onChange(change) {
+        if (change.projectId !== this.projectId)
+            return;
+        if (change.kind === "delete") {
+            this.tombstones.set(change.id, change.meta);
+            this.dirty.delete(change.id);
+        }
+        else {
+            this.dirty.add(change.id);
+        }
+        this.schedulePush();
+    }
+    schedulePush() {
+        if (!this.running || this.pushTimer !== undefined)
+            return;
+        this.pushTimer = this.timers.setTimeout(() => {
+            this.pushTimer = undefined;
+            void this.push();
+        }, PUSH_DEBOUNCE_MS);
+    }
+    /** Offer every session in this project, for a device that has never pushed. */
+    async sweep() {
+        try {
+            const sessions = await this.store.list(Number.MAX_SAFE_INTEGER, {
+                projectId: this.projectId,
+            });
+            for (const meta of sessions)
+                this.dirty.add(meta.id);
+            if (sessions.length > 0)
+                this.schedulePush();
+        }
+        catch (err) {
+            this.onError(`sync sweep failed: ${errorMessage(err)}`);
+        }
+    }
+    async push() {
+        if (!this.running)
+            return;
+        const ids = [...this.dirty];
+        const graves = [...this.tombstones.entries()];
+        if (ids.length === 0 && graves.length === 0)
+            return;
+        // Cleared before the work, not after: a write that lands mid-push marks the
+        // session dirty again and earns its own round rather than being folded into
+        // one whose records were already read.
+        this.dirty.clear();
+        this.tombstones.clear();
+        const state = await this.read();
+        const records = [];
+        const sessions = [];
+        try {
+            for (const id of ids) {
+                const meta = await this.store.readMeta(id);
+                if (!meta)
+                    continue;
+                const from = state.pushed[id] ?? 0;
+                const pending = (await this.store.recordsOf(id)).filter((record) => record.seq > from);
+                for (const record of pending)
+                    records.push(toWire(id, record));
+                // Artifact revisions ride the same lane and the same watermark. They
+                // are not messages, so they travel in an envelope the reader can tell
+                // apart, and a client that predates them skips what it cannot read
+                // rather than mistaking a revision for a turn.
+                const revisions = (await this.store.artifactRevisions(id)).filter((revision) => (revision.seq ?? 0) > from);
+                for (const revision of revisions)
+                    records.push(artifactToWire(id, revision));
+                sessions.push({
+                    id,
+                    gen: meta.gen ?? 0,
+                    updatedAt: meta.updatedAt,
+                    body: meta,
+                });
+                state.pushed[id] = Math.max(from, ...pending.map((record) => record.seq), ...revisions.map((revision) => revision.seq ?? 0), from);
+            }
+            for (const [id, meta] of graves) {
+                sessions.push({ id, gen: meta.gen ?? 0, updatedAt: meta.updatedAt, deleted: true });
+                delete state.pushed[id];
+            }
+            // Batched to the protocol's cap. A first sync of a long project is many
+            // more records than one push may carry, and the server refuses an
+            // oversized batch outright rather than taking half of it.
+            const recordBatches = chunk(records);
+            const sessionBatches = chunk(sessions);
+            const rounds = Math.max(recordBatches.length, sessionBatches.length, 1);
+            for (let round = 0; round < rounds; round++) {
+                await this.client.push(this.projectId, recordBatches[round] ?? [], sessionBatches[round] ?? [], this.aborter?.signal);
+            }
+            await this.write(state);
+        }
+        catch (err) {
+            // Put them back. The next change, or the next loop turn, tries again.
+            for (const id of ids)
+                this.dirty.add(id);
+            for (const [id, meta] of graves)
+                this.tombstones.set(id, meta);
+            this.report(err, "push");
+        }
+    }
+    /**
+     * Read the feed forward, forever.
+     *
+     * A long poll returns either when something arrives or when the server gives
+     * up holding it, so the loop is not a poll with a delay in it — the delay
+     * only appears after a failure.
+     */
+    async loop() {
+        if (this.pulling)
+            return this.pulling;
+        const run = (async () => {
+            let backoff = RETRY_FLOOR_MS;
+            while (this.running) {
+                try {
+                    const moved = await this.pull();
+                    backoff = RETRY_FLOOR_MS;
+                    // `more` means the page was cut short, so come straight back rather
+                    // than holding a poll open while the rest is already waiting.
+                    if (!moved)
+                        continue;
+                }
+                catch (err) {
+                    if (!this.running)
+                        break;
+                    this.report(err, "pull");
+                    await this.wait(backoff);
+                    backoff = Math.min(backoff * 2, RETRY_CEILING_MS);
+                }
+            }
+        })();
+        this.pulling = run.finally(() => {
+            this.pulling = undefined;
+            // A stop that landed while the poll was in flight leaves `running`
+            // false; a stop followed by a start leaves it true and wants the loop
+            // back, which the finished promise can no longer provide.
+            if (this.running)
+                void this.loop();
+        });
+        return this.pulling;
+    }
+    async pull() {
+        const state = await this.read();
+        const answer = await this.client.pull(this.projectId, state.cursor, {
+            wait: this.pollSeconds,
+            ...(this.aborter?.signal ? { signal: this.aborter.signal } : {}),
+        });
+        for (const wire of answer.sessions) {
+            if (wire.deleted) {
+                await this.store.delete(wire.id).catch(() => false);
+                continue;
+            }
+            const meta = wire.body;
+            if (meta && typeof meta.id === "string") {
+                await this.store.mergeMeta({ ...meta, projectId: this.projectId }).catch(() => false);
+            }
+        }
+        // Grouped as wire records rather than messages, because the two kinds are
+        // only told apart once the envelope is opened.
+        const bySession = new Map();
+        for (const wire of answer.records) {
+            const list = bySession.get(wire.session) ?? [];
+            list.push(wire);
+            bySession.set(wire.session, list);
+        }
+        for (const [id, incoming] of bySession) {
+            const messages = [];
+            const revisions = [];
+            for (const wire of incoming) {
+                const revision = artifactFromWire(wire);
+                if (revision)
+                    revisions.push(revision);
+                else
+                    messages.push(fromWire(wire));
+            }
+            await this.store.mergeRecords(id, messages).catch(() => 0);
+            await this.store.mergeArtifactRevisions(id, revisions).catch(() => 0);
+        }
+        if (answer.cursor !== state.cursor) {
+            state.cursor = answer.cursor;
+            await this.write(state);
+        }
+        return !answer.more;
+    }
+    report(err, what) {
+        // An aborted request is this mirror being stopped, not a problem.
+        if (err instanceof Error && err.name === "AbortError")
+            return;
+        if (!this.running)
+            return;
+        if (err instanceof SyncHttpError && err.status === 401) {
+            this.onError(`sync ${what}: the token was rejected; sign in again to resume`);
+            // A bad token will not fix itself, and retrying it every few seconds is
+            // how an expired credential becomes a log nobody reads.
+            this.stop();
+            return;
+        }
+        this.onError(`sync ${what}: ${errorMessage(err)}`);
+    }
+    wait(ms) {
+        return new Promise((resolve) => {
+            this.timers.setTimeout(resolve, ms);
+        });
+    }
+    async read() {
+        if (this.held)
+            return this.held;
+        const stored = await this.state.read(["sync", this.projectId]);
+        this.held = {
+            cursor: typeof stored?.cursor === "number" ? stored.cursor : 0,
+            pushed: stored?.pushed && typeof stored.pushed === "object" ? { ...stored.pushed } : {},
+        };
+        return this.held;
+    }
+    async write(state) {
+        this.held = state;
+        await this.state.write(["sync", this.projectId], state).catch(() => { });
+    }
+}
+/**
+ * The envelope an artifact revision travels in.
+ *
+ * A record body is opaque to the server, so this needs no server change at
+ * all — but it does need to be unmistakable to a reader, because the same feed
+ * carries turns. `{ artifact: … }` is that mark: `asRecord` returns undefined
+ * for it, so a client that has never heard of artifacts skips the line instead
+ * of writing a malformed message into a transcript.
+ */
+const ARTIFACT_ENVELOPE = "artifact";
+function artifactToWire(session, revision) {
+    return {
+        session,
+        id: revision.id ?? `art_${revision.artifact}_v${revision.version}`,
+        seq: revision.seq ?? 0,
+        device: revision.device ?? "unknown",
+        at: revision.at,
+        body: { [ARTIFACT_ENVELOPE]: revision },
+    };
+}
+/** The revision inside an envelope, or undefined for anything else on the feed. */
+function artifactFromWire(wire) {
+    const body = wire.body;
+    if (!body || typeof body !== "object")
+        return undefined;
+    const inner = body[ARTIFACT_ENVELOPE];
+    if (!inner)
+        return undefined;
+    const revision = asArtifactRevision(inner);
+    if (!revision)
+        return undefined;
+    // The wire fields win: they are what the other device recorded, and what
+    // dedupe on both sides is keyed on.
+    return { ...revision, id: wire.id, seq: wire.seq, device: wire.device };
+}
+function toWire(session, record) {
+    return {
+        session,
+        id: record.id,
+        seq: record.seq,
+        device: record.device,
+        at: record.at,
+        body: record.message,
+    };
+}
+/**
+ * A record as it came back.
+ *
+ * The three identity fields are taken as given — that is the entire point of
+ * sending them — while `body` is trusted only as far as being an object,
+ * because the server never looked inside it and neither did anything between.
+ */
+function fromWire(wire) {
+    return {
+        id: wire.id,
+        seq: wire.seq,
+        device: wire.device,
+        at: wire.at,
+        message: wire.body,
+    };
+}
+//# sourceMappingURL=mirror.js.map

package/dist/sync/mirror.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mirror.js","sourceRoot":"","sources":["../../src/sync/mirror.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGjD;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,4EAA4E;AAC5E,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,wDAAwD;AACxD,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAmChC,MAAM,OAAO,aAAa;IACP,KAAK,CAAe;IACpB,MAAM,CAAa;IACnB,SAAS,CAAS;IAClB,KAAK,CAAY;IACjB,OAAO,CAA4B;IACnC,WAAW,CAAS;IACpB,MAAM,CAAuC;IAEtD,OAAO,CAAc;IACrB,OAAO,CAAmB;IAC1B,SAAS,CAAW;IACpB,OAAO,CAAiB;IACxB,OAAO,GAAG,KAAK,CAAC;IAExB,yDAAyD;IACxC,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,8EAA8E;IAC7D,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;IACrD,IAAI,CAAe;IAE3B,YAAY,IAAmB;QAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI;YAC3B,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC;YAC1C,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAuC,CAAC;SAChF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;QAErC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,wEAAwE;QACxE,wEAAwE;QACxE,qBAAqB;QACrB,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACH,IAAI;QACF,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACzC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;IAC3B,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACzC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAEO,QAAQ,CAAC,MAAmB;QAClC,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO;QAChD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO;QAC1D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE;YAC3C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC3B,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC;IAED,+EAA+E;IACvE,KAAK,CAAC,KAAK;QACjB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;gBAC9D,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,QAAQ;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,sBAAsB,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEpD,4EAA4E;QAC5E,4EAA4E;QAC5E,uCAAuC;QACvC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAExB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAkB,EAAE,CAAC;QAEnC,IAAI,CAAC;YACH,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBAC3C,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;gBACnC,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;gBACvF,KAAK,MAAM,MAAM,IAAI,OAAO;oBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC/D,qEAAqE;gBACrE,sEAAsE;gBACtE,mEAAmE;gBACnE,+CAA+C;gBAC/C,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAC/D,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CACzC,CAAC;gBACF,KAAK,MAAM,QAAQ,IAAI,SAAS;oBAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAC7E,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE;oBACF,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC;oBAClB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,IAAI,EAAE,IAAI;iBACX,CAAC,CAAC;gBACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CACzB,IAAI,EACJ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EACtC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,EACjD,IAAI,CACL,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpF,OAAO,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;YAED,wEAAwE;YACxE,kEAAkE;YAClE,0DAA0D;YAC1D,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACxE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC5C,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,IAAI,CAAC,SAAS,EACd,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,EAC1B,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,EAC3B,IAAI,CAAC,OAAO,EAAE,MAAM,CACrB,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sEAAsE;YACtE,KAAK,MAAM,EAAE,IAAI,GAAG;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzC,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM;gBAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,IAAI;QAChB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE;YACtB,IAAI,OAAO,GAAG,cAAc,CAAC;YAC7B,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpB,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;oBAChC,OAAO,GAAG,cAAc,CAAC;oBACzB,oEAAoE;oBACpE,8DAA8D;oBAC9D,IAAI,CAAC,KAAK;wBAAE,SAAS;gBACvB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,IAAI,CAAC,OAAO;wBAAE,MAAM;oBACzB,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;oBACzB,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACzB,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,gBAAgB,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE;YAC9B,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YACzB,mEAAmE;YACnE,sEAAsE;YACtE,0DAA0D;YAC1D,IAAI,IAAI,CAAC,OAAO;gBAAE,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE;YAClE,IAAI,EAAE,IAAI,CAAC,WAAW;YACtB,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;gBACpD,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAA+B,CAAC;YAClD,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACxC,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,+CAA+C;QAC/C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAC;QAClD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,KAAK,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAoB,EAAE,CAAC;YACrC,MAAM,SAAS,GAA6B,EAAE,CAAC;YAC/C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,QAAQ;oBAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;;oBAClC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACrC,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3D,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YACnC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC7B,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;IACtB,CAAC;IAEO,MAAM,CAAC,GAAY,EAAE,IAAY;QACvC,kEAAkE;QAClE,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO;QAC9D,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,mDAAmD,CAAC,CAAC;YAC9E,wEAAwE;YACxE,wDAAwD;YACxD,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,KAAK,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;IAEO,IAAI,CAAC,EAAU;QACrB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAc,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,GAAG;YACV,MAAM,EAAE,OAAO,MAAM,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC9D,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;SACxF,CAAC;QACF,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,KAAkB;QACpC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QAClB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAErC,SAAS,cAAc,CAAC,OAAe,EAAE,QAAgC;IACvE,OAAO;QACL,OAAO;QACP,EAAE,EAAE,QAAQ,CAAC,EAAE,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,OAAO,EAAE;QAClE,GAAG,EAAE,QAAQ,CAAC,GAAG,IAAI,CAAC;QACtB,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,SAAS;QACpC,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE;KACxC,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,gBAAgB,CAAC,IAAgB;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAsC,CAAC;IACzD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,yEAAyE;IACzE,oCAAoC;IACpC,OAAO,EAAE,GAAG,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,MAAM,CAAC,OAAe,EAAE,MAAqB;IACpD,OAAO;QACL,OAAO;QACP,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,OAAO;KACrB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,IAAgB;IAChC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,OAAO,EAAE,IAAI,CAAC,IAAgC;KAC/C,CAAC;AACJ,CAAC"}

package/dist/sync/protocol.d.ts

@@ -0,0 +1,67 @@
+/**
+ * The wire between a harness and a sync server.
+ *
+ * The server never looks inside `body`. It stores an opaque blob against an
+ * id, a sequence and a cursor, and hands it back in order — which is what makes
+ * it safe to change the message format without redeploying anything, and what
+ * would make an end-to-end encrypted mode a client-side change alone.
+ */
+/** One transcript line, as it crosses the network. */
+export interface WireRecord {
+    /** Session it belongs to. */
+    session: string;
+    /** Stable across devices — the server dedupes on it, so a retry is free. */
+    id: string;
+    /** Lamport counter within the session. Ordering, not arrival. */
+    seq: number;
+    device: string;
+    at: number;
+    /** The message. Opaque to the server. */
+    body: unknown;
+}
+/** Session metadata, resolved last-writer-wins rather than merged. */
+export interface WireSession {
+    id: string;
+    /** Bumped by a rewrite (compaction). Higher generations win outright. */
+    gen: number;
+    updatedAt: number;
+    /** Tombstone: a deletion has to travel, or the other device restores it. */
+    deleted?: boolean;
+    /** The metadata. Opaque to the server. */
+    body?: unknown;
+}
+export interface PushRequest {
+    project: string;
+    device: string;
+    records?: WireRecord[];
+    sessions?: WireSession[];
+    /**
+     * Push into a team's feed rather than your own.
+     *
+     * Absent means the person, which is what a single-user install always wants
+     * and what every client sent before teams existed. Named, the server checks
+     * the token holds that team — a client cannot reach a feed by guessing an
+     * id, and there is no scope string that could be pointed at another person.
+     */
+    team?: string;
+}
+export interface PushResponse {
+    /** Where the caller now stands in this project's feed. */
+    cursor: number;
+    /** How many were new; the rest were already held. */
+    accepted: number;
+}
+export interface PullResponse {
+    cursor: number;
+    records: WireRecord[];
+    sessions: WireSession[];
+    /** True when the response was cut short by `limit` and more is waiting. */
+    more: boolean;
+}
+/** Refused rather than truncated: a silently dropped record is a lost turn. */
+export declare const MAX_PUSH_RECORDS = 500;
+export declare const MAX_BODY_BYTES: number;
+/** Cap on one pull, so a first sync arrives in pages instead of one gulp. */
+export declare const DEFAULT_PULL_LIMIT = 500;
+/** Longest a long-poll is held open. Below any sensible proxy idle timeout. */
+export declare const MAX_WAIT_SECONDS = 30;

package/dist/sync/protocol.js

@@ -0,0 +1,16 @@
+/**
+ * The wire between a harness and a sync server.
+ *
+ * The server never looks inside `body`. It stores an opaque blob against an
+ * id, a sequence and a cursor, and hands it back in order — which is what makes
+ * it safe to change the message format without redeploying anything, and what
+ * would make an end-to-end encrypted mode a client-side change alone.
+ */
+/** Refused rather than truncated: a silently dropped record is a lost turn. */
+export const MAX_PUSH_RECORDS = 500;
+export const MAX_BODY_BYTES = 8 * 1024 * 1024;
+/** Cap on one pull, so a first sync arrives in pages instead of one gulp. */
+export const DEFAULT_PULL_LIMIT = 500;
+/** Longest a long-poll is held open. Below any sensible proxy idle timeout. */
+export const MAX_WAIT_SECONDS = 30;
+//# sourceMappingURL=protocol.js.map

package/dist/sync/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/sync/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA2DH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AACpC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC9C,6EAA6E;AAC7E,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC"}

package/dist/sync/settings.d.ts

@@ -0,0 +1,56 @@
+import type { SyncConfig } from "../config.ts";
+/**
+ * Whether to mirror, and where to.
+ *
+ * Sync is on by default, which is a decision about defaults rather than about
+ * consent: it cannot do anything until there is a destination and a token, and
+ * the token comes from signing in. So the honest reading of "on" is "as soon
+ * as you have an account", and a machine that never signs in never sends
+ * anything.
+ *
+ * Three ways to stop it, in the order they are checked. Each exists because
+ * the others do not cover its case:
+ *
+ *   `OHARNESS_SYNC=0`   one run, or every run in CI, without editing a file.
+ *   `sync.enabled`      this machine, or this repository (off only — see
+ *                       `mergeSync` on why a project cannot switch it on).
+ *   `sync.exclude`      one project, while everything else keeps mirroring.
+ */
+/** The official service. Overridden by `sync.url` for self-hosted servers. */
+export declare const DEFAULT_SYNC_URL = "https://sync.oharness.ai";
+export interface ResolvedSync {
+    url: string;
+    token: string;
+}
+export interface SyncInputs {
+    config: SyncConfig | undefined;
+    /** The account credential, when signed in. Used when no token is configured. */
+    accountToken?: string | undefined;
+    env?: NodeJS.ProcessEnv;
+}
+/**
+ * Off, and why.
+ *
+ * The reason is carried rather than collapsed to a boolean so a UI can tell
+ * "you turned this off" from "you are not signed in" — two states that look
+ * identical from the outside and need opposite advice.
+ */
+export type SyncDecision = {
+    on: true;
+    target: ResolvedSync;
+} | {
+    on: false;
+    reason: "disabled" | "no-credential";
+};
+export declare function resolveSync(inputs: SyncInputs): SyncDecision;
+/**
+ * Whether one project is excluded.
+ *
+ * Matched against both the project id and the worktree path, because neither
+ * alone is what a person reaches for: the id is a commit hash nobody has
+ * memorised, and the path is what they would type.
+ */
+export declare function isExcluded(config: SyncConfig | undefined, project: {
+    id: string;
+    cwd?: string;
+}): boolean;