@omnitron-dev/omnitron 0.3.0 → 0.3.2

package/dist/services/static-carry-forward.js

@@ -5,7 +5,7 @@
  * `index.html` and entry name every lazy chunk by its content hash. The
  * deployment then points the gateway at a NEW build directory, and the next
  * lazy route that tab opens asks for a chunk that directory does not have.
- * Measured on daos/test on 2026-09-29, after release d531ab26: the owner's
+ * Measured on sample/test on 2026-09-29, after release d531ab26: the owner's
  * /admin/config answered «error loading dynamically imported module:
  * …/assets/config-CUEyrA2c.js», which was 404 — while the current build was
  * whole (243 files referenced by its index and entry, all 200) and the chunk
@@ -119,8 +119,8 @@ export function gatewayStaticLinkName(project, stack) {
  *
  * So it resolves the link instead. `readlink -f`, not `readlink`: the link is
  * relative (it must be — it is resolved inside the container), and the reader
- * below wants an absolute path. A gateway with no link yet — the first
- * deployment — prints nothing, and there is nothing to carry.
+ * below wants an absolute path. Without a live directory at the link, retain
+ * the mount itself: older gateways still mount their build directly.
  */
 export const GATEWAY_MOUNTS_COMMAND = [
     'for c in $(docker ps -aq --filter label=omnitron.service=gateway 2>/dev/null); do',
@@ -137,7 +137,10 @@ export const GATEWAY_MOUNTS_COMMAND = [
     // The link's name comes from `gatewayStaticLinkName` even here: given the
     // shell's own variables it yields the shell's own string, so there is one
     // spelling and not two that drift.
-    `  [ -n "$proj" ] && [ -n "$stk" ] && tgt=$(readlink -f "$src/${gatewayStaticLinkName('$proj', '$stk')}" 2>/dev/null)`,
+    // GNU readlink -f succeeds even when the last component is absent. Such a
+    // synthetic target must never replace the actually mounted build in the
+    // retention set, or a later deployment can prune a live legacy gateway.
+    `  [ -n "$proj" ] && [ -n "$stk" ] && [ -d "$src/${gatewayStaticLinkName('$proj', '$stk')}" ] && tgt=$(readlink -f "$src/${gatewayStaticLinkName('$proj', '$stk')}" 2>/dev/null)`,
     '  [ -n "$tgt" ] || tgt="$src"',
     '  echo "$state $tgt"',
     'done',
@@ -156,4 +159,282 @@ export function readGatewayMounts(output) {
     }
     return { serving: [...new Set(serving)], mounted: [...new Set(mounted)] };
 }
+const ASSET_STORAGE = '/opt/omnitron/stack-static/assets';
+export function immutableAssetsRoot(owner) {
+    if (!owner ||
+        Object.keys(owner).sort().join(',') !== 'app,project,stack' ||
+        ![owner.project, owner.stack, owner.app].every((part) => typeof part === 'string' && /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,79}$/.test(part)))
+        throw new Error('Invalid static asset owner');
+    return `${ASSET_STORAGE}/${owner.project}/${owner.stack}/${owner.app}/public`;
+}
+/** Self-contained destination program. Every writer MUST hold the native exclusive execution fence. */
+function immutableAssetProgram(input, storage, replaying = false) {
+    // This function is serialized and executed as CommonJS on the destination host.
+    // eslint-disable-next-line @typescript-eslint/no-require-imports
+    const fs = require('node:fs');
+    // eslint-disable-next-line @typescript-eslint/no-require-imports -- Destination CommonJS program.
+    const path = require('node:path');
+    // eslint-disable-next-line @typescript-eslint/no-require-imports -- Destination CommonJS program.
+    const crypto = require('node:crypto');
+    const fail = (reason) => {
+        throw new Error('Immutable assets: ' + reason);
+    };
+    const object = (value) => !!value && typeof value === 'object' && !Array.isArray(value);
+    const digest = (bytes) => crypto.createHash('sha256').update(bytes).digest('hex');
+    const safeName = (name) => name.length > 0 &&
+        name.length <= 1024 &&
+        name.split('/').every((part) => /^[a-zA-Z0-9_@+-][a-zA-Z0-9._@+-]*$/.test(part));
+    if (!object(input) ||
+        !object(input.owner) ||
+        Object.keys(input.owner).sort().join(',') !== 'app,project,stack' ||
+        ![input.owner.project, input.owner.stack, input.owner.app].every((part) => typeof part === 'string' && /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,79}$/.test(part)) ||
+        !Array.isArray(input.sources) ||
+        input.sources.length === 0)
+        fail('invalid owner or sources');
+    const owner = {
+        project: input.owner.project,
+        stack: input.owner.stack,
+        app: input.owner.app,
+    };
+    if (!path.isAbsolute(storage) || path.resolve(storage) !== storage)
+        fail('noncanonical storage');
+    const ownerRoot = path.join(storage, owner.project, owner.stack, owner.app), publicRoot = path.join(ownerRoot, 'public');
+    const manifestFile = path.join(ownerRoot, 'manifest.json'), pendingFile = path.join(ownerRoot, 'pending.json');
+    const syncDir = (name) => {
+        const fd = fs.openSync(name, 'r');
+        try {
+            fs.fsyncSync(fd);
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+    };
+    const directory = (name, create = false) => {
+        if (!path.isAbsolute(name) || path.resolve(name) !== name)
+            fail('noncanonical directory: ' + name);
+        let current = path.parse(name).root;
+        for (const component of name.slice(current.length).split('/').filter(Boolean)) {
+            const parent = current;
+            current = path.join(current, component);
+            let st;
+            try {
+                st = fs.lstatSync(current);
+            }
+            catch (error) {
+                if (!create || error.code !== 'ENOENT')
+                    throw error;
+                fs.mkdirSync(current, { mode: 0o755 });
+                fs.chmodSync(current, 0o755); // native remote commands inherit umask 077
+                syncDir(parent);
+                st = fs.lstatSync(current);
+            }
+            if (!st.isDirectory() || st.isSymbolicLink())
+                fail('directory symlink or non-directory: ' + current);
+        }
+        if (fs.realpathSync(name) !== name)
+            fail('directory alias: ' + name);
+    };
+    const read = (file) => {
+        directory(path.dirname(file));
+        const fd = fs.openSync(file, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW);
+        try {
+            if (!fs.fstatSync(fd).isFile())
+                fail('nonregular file: ' + file);
+            return fs.readFileSync(fd);
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+    };
+    const inventory = (root) => {
+        directory(root);
+        const names = [];
+        const walk = (dir, prefix) => {
+            for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+                const name = prefix + entry.name;
+                if (!safeName(name) || entry.isSymbolicLink())
+                    fail('unsafe asset: ' + name);
+                if (entry.isDirectory())
+                    walk(path.join(dir, entry.name), name + '/');
+                else if (entry.isFile())
+                    names.push(name);
+                else
+                    fail('nonregular asset: ' + name);
+            }
+        };
+        walk(root, '');
+        return names.sort();
+    };
+    const validateManifest = (value) => {
+        if (!object(value) ||
+            value['schema'] !== 1 ||
+            JSON.stringify(value['owner']) !== JSON.stringify(owner) ||
+            !object(value['files']))
+            fail('invalid pool manifest');
+        const parsed = value;
+        for (const [name, entry] of Object.entries(parsed.files)) {
+            if (!safeName(name) ||
+                !object(entry) ||
+                !/^[a-f0-9]{64}$/.test(entry.sha256) ||
+                !Number.isSafeInteger(entry.bytes) ||
+                entry.bytes < 0)
+                fail('invalid pool entry: ' + name);
+        }
+        return parsed;
+    };
+    const exists = (file) => {
+        try {
+            fs.lstatSync(file);
+            return true;
+        }
+        catch (e) {
+            if (e.code === 'ENOENT')
+                return false;
+            throw e;
+        }
+    };
+    const load = (file) => validateManifest(JSON.parse(read(file).toString('utf8')));
+    const encode = (manifest) => JSON.stringify({
+        schema: 1,
+        owner,
+        files: Object.fromEntries(Object.entries(manifest.files).sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))),
+    }) + '\n';
+    const writeAtomic = (file, bytes) => {
+        const temp = file + '.' + crypto.randomUUID() + '.tmp', fd = fs.openSync(temp, 'wx', 0o600);
+        try {
+            fs.writeFileSync(fd, bytes);
+            fs.fsyncSync(fd);
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+        fs.renameSync(temp, file);
+        syncDir(path.dirname(file));
+    };
+    directory(ownerRoot, true);
+    directory(publicRoot, true);
+    const baseline = exists(manifestFile) ? load(manifestFile) : { schema: 1, owner, files: {} };
+    const pending = exists(pendingFile) ? load(pendingFile) : null;
+    if (pending)
+        for (const [name, entry] of Object.entries(baseline.files)) {
+            if (JSON.stringify(pending.files[name]) !== JSON.stringify(entry))
+                fail('pending publication changes retained asset: ' + name);
+        }
+    const admitted = pending ?? baseline, present = new Set(inventory(publicRoot));
+    for (const name of present) {
+        const entry = Object.hasOwn(admitted.files, name) ? admitted.files[name] : undefined;
+        if (!entry)
+            fail('unrecorded public asset: ' + name);
+        const bytes = read(path.join(publicRoot, name));
+        if (bytes.length !== entry.bytes || digest(bytes) !== entry.sha256)
+            fail('retained asset integrity: ' + name);
+    }
+    for (const name of Object.keys(baseline.files))
+        if (!present.has(name))
+            fail('missing retained asset: ' + name);
+    if (pending && !replaying) {
+        const incomplete = Object.keys(pending.files).some((name) => !present.has(name));
+        if (incomplete) {
+            if (!Array.isArray(pending.sources) || pending.sources.length === 0)
+                fail('pending publication has no recoverable source descriptors');
+            // Complete the original validated intention first, even if this caller is a later release.
+            immutableAssetProgram({ owner, sources: pending.sources }, storage, true);
+        }
+        else {
+            // All planned bytes already passed integrity verification; no source directory is needed.
+            writeAtomic(manifestFile, encode(pending));
+            fs.unlinkSync(pendingFile);
+            syncDir(ownerRoot);
+        }
+        return immutableAssetProgram(input, storage);
+    }
+    const stage = fs.mkdtempSync(path.join(ownerRoot, '.staging-'));
+    fs.chmodSync(stage, 0o700);
+    const requested = Object.create(null);
+    try {
+        // Copy and validate every requested byte before changing any public URL.
+        for (const source of input.sources) {
+            if (!object(source) ||
+                typeof source.root !== 'string' ||
+                !object(source.files) ||
+                Object.keys(source.files).length === 0)
+                fail('invalid or empty source');
+            directory(source.root);
+            const names = Object.keys(source.files).sort();
+            if (JSON.stringify(names) !== JSON.stringify(inventory(source.root)))
+                fail('source inventory differs from manifest: ' + source.root);
+            for (const name of names) {
+                const expected = source.files[name];
+                if (!safeName(name) || typeof expected !== 'string' || !/^[a-f0-9]{64}$/.test(expected))
+                    fail('invalid source identity: ' + name);
+                const bytes = read(path.join(source.root, name));
+                if (digest(bytes) !== expected)
+                    fail('source digest differs: ' + name);
+                const entry = { sha256: expected, bytes: bytes.length };
+                for (const prior of [Object.hasOwn(admitted.files, name) ? admitted.files[name] : undefined, requested[name]])
+                    if (prior && (prior.sha256 !== entry.sha256 || prior.bytes !== entry.bytes))
+                        fail('URL collision: ' + name);
+                if (!requested[name] && !present.has(name)) {
+                    const file = path.join(stage, name);
+                    directory(path.dirname(file), true);
+                    const fd = fs.openSync(file, 'wx', 0o444);
+                    try {
+                        fs.writeFileSync(fd, bytes);
+                        fs.fchmodSync(fd, 0o444); // readable through an app-owned nginx bind mount
+                        fs.fsyncSync(fd);
+                    }
+                    finally {
+                        fs.closeSync(fd);
+                    }
+                }
+                requested[name] = entry;
+            }
+        }
+        for (const name of Object.keys(admitted.files))
+            if (!present.has(name) && !requested[name])
+                fail('unfinished publication requires its original sources: ' + name);
+        const next = {
+            schema: 1,
+            owner,
+            files: { ...admitted.files, ...requested },
+        }, encoded = encode(next);
+        // A durable intention identifies partial publication after a lost controller/acknowledgement.
+        writeAtomic(pendingFile, JSON.stringify({ ...next, sources: input.sources }) + '\n');
+        let added = 0;
+        for (const name of Object.keys(requested).sort()) {
+            if (present.has(name))
+                continue;
+            const destination = path.join(publicRoot, name), staged = path.join(stage, name);
+            directory(path.dirname(destination), true);
+            if (exists(destination))
+                fail('destination appeared before publication: ' + name);
+            const copied = read(staged);
+            if (digest(copied) !== requested[name].sha256 || copied.length !== requested[name].bytes)
+                fail('staged asset integrity: ' + name);
+            // All writers use the same native exclusive execution fence. No source inode is linked.
+            fs.renameSync(staged, destination);
+            syncDir(path.dirname(destination));
+            added++;
+        }
+        writeAtomic(manifestFile, encoded);
+        fs.unlinkSync(pendingFile);
+        syncDir(ownerRoot);
+        return {
+            assetsRoot: publicRoot,
+            manifestSha256: digest(encoded),
+            files: Object.keys(next.files).length,
+            added,
+            reused: Object.keys(requested).length - added,
+            bytes: Object.values(next.files).reduce((sum, entry) => sum + entry.bytes, 0),
+        };
+    }
+    finally {
+        fs.rmSync(stage, { recursive: true, force: true });
+    }
+}
+/** Runs only inside the caller's native node execution fence; custom storage isolates integration tests. */
+export function immutableAssetsScript(inputFile, storage = ASSET_STORAGE) {
+    const source = `const fs=require('node:fs');const input=JSON.parse(fs.readFileSync(process.argv[1],'utf8'));const receipt=(${immutableAssetProgram.toString()})(input,process.argv[2]);process.stdout.write(JSON.stringify(receipt)+'\\n');`;
+    return `node -e ${shellEscape(source)} ${shellEscape(inputFile)} ${shellEscape(storage)}`;
+}
 //# sourceMappingURL=static-carry-forward.js.map

package/dist/services/static-carry-forward.js.map

@@ -1 +1 @@
-{"version":3,"file":"static-carry-forward.js","sourceRoot":"","sources":["../../src/services/static-carry-forward.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD,2FAA2F;AAC3F,MAAM,SAAS,GAAG,cAAc,CAAC;AAEjC;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAQlC;IACC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IACxE,MAAM,CAAC,GAAG,WAAW,CAAC;IACtB,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,OAAO;QACL,QAAQ;QACR,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE;QAC3E,6EAA6E;QAC7E,EAAE;QACF,wEAAwE;QACxE,oEAAoE;QACpE,wEAAwE;QACxE,yEAAyE;QACzE,0EAA0E;QAC1E,0CAA0C;QAC1C,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,uFAAuF;QACtG,mBAAmB;QACnB,YAAY,WAAW,MAAM;QAC7B,kDAAkD;QAClD,mCAAmC;QACnC,kCAAkC;QAClC,sBAAsB;QACtB,8GAA8G;QAC9G,4BAA4B;QAC5B,8CAA8C;QAC9C,2CAA2C;QAC3C,uCAAuC;QACvC,MAAM;YACJ,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,6GAA6G;QACjH,8BAA8B;QAC9B,kBAAkB;QAClB,MAAM;QACN,wFAAwF;QACxF,eAAe;QACf,wDAAwD,SAAS,SAAS;QAC1E,2BAA2B;QAC3B,gBAAgB;QAChB,oCAAoC;QACpC,UAAU;QACV,cAAc,QAAQ,sCAAsC;QAC5D,+BAA+B;QAC/B,MAAM;YACJ,CAAC,CAAC,kDAAkD;YACpD,CAAC,CAAC,oFAAoF;QACxF,MAAM;QACN,SAAS,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,kCAAkC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,oBAAoB;KACnI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,KAAa;IAClE,OAAO,WAAW,OAAO,IAAI,KAAK,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,mFAAmF;IACnF,oIAAoI;IACpI,sEAAsE;IACtE,6BAA6B;IAC7B,wEAAwE;IACxE,wEAAwE;IACxE,uEAAuE;IACvE,kEAAkE;IAClE,8FAA8F;IAC9F,2FAA2F;IAC3F,UAAU;IACV,0EAA0E;IAC1E,0EAA0E;IAC1E,mCAAmC;IACnC,gEAAgE,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,gBAAgB;IACtH,+BAA+B;IAC/B,sBAAsB;IACtB,MAAM;CACP,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,qEAAqE;AACrE,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QACpB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;AAC5E,CAAC"}
+{"version":3,"file":"static-carry-forward.js","sourceRoot":"","sources":["../../src/services/static-carry-forward.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD,2FAA2F;AAC3F,MAAM,SAAS,GAAG,cAAc,CAAC;AAEjC;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAQlC;IACC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IACxE,MAAM,CAAC,GAAG,WAAW,CAAC;IACtB,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,OAAO;QACL,QAAQ;QACR,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE;QAC3E,6EAA6E;QAC7E,EAAE;QACF,wEAAwE;QACxE,oEAAoE;QACpE,wEAAwE;QACxE,yEAAyE;QACzE,0EAA0E;QAC1E,0CAA0C;QAC1C,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,uFAAuF;QACtG,mBAAmB;QACnB,YAAY,WAAW,MAAM;QAC7B,kDAAkD;QAClD,mCAAmC;QACnC,kCAAkC;QAClC,sBAAsB;QACtB,8GAA8G;QAC9G,4BAA4B;QAC5B,8CAA8C;QAC9C,2CAA2C;QAC3C,uCAAuC;QACvC,MAAM;YACJ,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,6GAA6G;QACjH,8BAA8B;QAC9B,kBAAkB;QAClB,MAAM;QACN,wFAAwF;QACxF,eAAe;QACf,wDAAwD,SAAS,SAAS;QAC1E,2BAA2B;QAC3B,gBAAgB;QAChB,oCAAoC;QACpC,UAAU;QACV,cAAc,QAAQ,sCAAsC;QAC5D,+BAA+B;QAC/B,MAAM;YACJ,CAAC,CAAC,kDAAkD;YACpD,CAAC,CAAC,oFAAoF;QACxF,MAAM;QACN,SAAS,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,kCAAkC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,oBAAoB;KACnI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,KAAa;IAClE,OAAO,WAAW,OAAO,IAAI,KAAK,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,mFAAmF;IACnF,oIAAoI;IACpI,sEAAsE;IACtE,6BAA6B;IAC7B,wEAAwE;IACxE,wEAAwE;IACxE,uEAAuE;IACvE,kEAAkE;IAClE,8FAA8F;IAC9F,2FAA2F;IAC3F,UAAU;IACV,0EAA0E;IAC1E,0EAA0E;IAC1E,mCAAmC;IACnC,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,mDAAmD,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,kCAAkC,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,gBAAgB;IACjL,+BAA+B;IAC/B,sBAAsB;IACtB,MAAM;CACP,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,qEAAqE;AACrE,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QACpB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;AAC5E,CAAC;AAiBD,MAAM,aAAa,GAAG,mCAAmC,CAAC;AAC1D,MAAM,UAAU,mBAAmB,CAAC,KAAuB;IACzD,IACE,CAAC,KAAK;QACN,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,mBAAmB;QAC3D,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAC5C,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CACpF;QAED,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,OAAO,GAAG,aAAa,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,SAAS,CAAC;AAChF,CAAC;AAED,uGAAuG;AACvG,SAAS,qBAAqB,CAAC,KAA6B,EAAE,OAAe,EAAE,SAAS,GAAG,KAAK;IAC9F,gFAAgF;IAChF,iEAAiE;IACjE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAA6B,CAAC;IAC1D,kGAAkG;IAClG,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAA+B,CAAC;IAChE,kGAAkG;IAClG,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAiC,CAAC;IAOtE,MAAM,IAAI,GAAG,CAAC,MAAc,EAAS,EAAE;QACrC,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,MAAM,CAAC,CAAC;IACjD,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,KAAc,EAAoC,EAAE,CAClE,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnG,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAChC,IAAI,CAAC,MAAM,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,IAAI,IAAI;QACnB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACnF,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;QACd,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,mBAAmB;QACjE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAC9D,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CACpF;QACD,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC7B,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAE1B,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG;QACZ,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;QAC5B,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK;QACxB,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG;KACrB,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO;QAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACjG,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EACzE,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EACxD,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE;QAC/B,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,MAAM,GAAG,KAAK,EAAE,EAAE;QACjD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,IAAI,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;QACnG,IAAI,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QACpC,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9E,MAAM,MAAM,GAAG,OAAO,CAAC;YACvB,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACxC,IAAI,EAA2B,CAAC;YAChC,IAAI,CAAC;gBACH,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;gBAC/E,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,2CAA2C;gBACzE,OAAO,CAAC,MAAM,CAAC,CAAC;gBAChB,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE;gBAAE,IAAI,CAAC,sCAAsC,GAAG,OAAO,CAAC,CAAC;QACvG,CAAC;QACD,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IACvE,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE;QACpC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC9E,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;gBAAE,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;YACjE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC7B,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,IAAY,EAAY,EAAE;QAC3C,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,MAAc,EAAE,EAAE;YAC3C,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBACjE,MAAM,IAAI,GAAG,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC;gBACjC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,cAAc,EAAE;oBAAE,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;gBAC7E,IAAI,KAAK,CAAC,WAAW,EAAE;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;qBACjE,IAAI,KAAK,CAAC,MAAM,EAAE;oBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;oBACrC,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;YACzC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACf,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC;IACF,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAY,EAAE;QACpD,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;YACd,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;YACrB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YACxD,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEvB,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,KAA4B,CAAC;QAC5C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,IACE,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACf,CAAC,MAAM,CAAC,KAAK,CAAC;gBACd,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;gBACpC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;gBAClC,KAAK,CAAC,KAAK,GAAG,CAAC;gBAEf,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACjE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,CAAC,QAAkB,EAAE,EAAE,CACpC,IAAI,CAAC,SAAS,CAAC;QACb,MAAM,EAAE,CAAC;QACT,KAAK;QACL,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC3G,CAAC,GAAG,IAAI,CAAC;IACZ,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE;QAClD,MAAM,IAAI,GAAG,IAAI,GAAG,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,GAAG,MAAM,EACpD,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC5B,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;QACD,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC;IACF,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3B,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAa,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACvG,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,WAAW,CAAkD,CAAC,CAAC,CAAC,IAAI,CAAC;IACjH,IAAI,OAAO;QACT,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAC/D,IAAI,CAAC,8CAA8C,GAAG,IAAI,CAAC,CAAC;QAChE,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,IAAI,QAAQ,EAClC,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrF,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,MAAM,KAAK,KAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAM,CAAC,MAAM;YAAE,IAAI,CAAC,4BAA4B,GAAG,IAAI,CAAC,CAAC;IAClH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;IAChH,IAAI,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACjF,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;gBACjE,IAAI,CAAC,2DAA2D,CAAC,CAAC;YACpE,2FAA2F;YAC3F,qBAAqB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC7E,CAAC;aAAM,CAAC;YACN,0FAA0F;YAC1F,WAAW,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3C,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAC3B,OAAO,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IAChE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3B,MAAM,SAAS,GAA0B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,yEAAyE;QACzE,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,IACE,CAAC,MAAM,CAAC,MAAM,CAAC;gBACf,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAC/B,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;gBAEtC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAClC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAClE,IAAI,CAAC,0CAA0C,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YACjE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC;oBACrF,IAAI,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAAC;gBAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;gBACjD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ;oBAAE,IAAI,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAAC;gBACvE,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,QAAS,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;gBACzD,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;oBAC3G,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC;wBAAE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;gBAC9G,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;oBACpC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;oBACpC,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;oBAC1C,IAAI,CAAC;wBACH,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;wBAC5B,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,iDAAiD;wBAC3E,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;oBACnB,CAAC;4BAAS,CAAC;wBACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;oBACnB,CAAC;gBACH,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,wDAAwD,GAAG,IAAI,CAAC,CAAC;QACpH,MAAM,IAAI,GAAa;YACnB,MAAM,EAAE,CAAC;YACT,KAAK;YACL,KAAK,EAAE,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,SAAS,EAAE;SAC3C,EACD,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,8FAA8F;QAC9F,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACrF,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACjD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAChC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,EAC7C,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAClC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;YAC3C,IAAI,MAAM,CAAC,WAAW,CAAC;gBAAE,IAAI,CAAC,2CAA2C,GAAG,IAAI,CAAC,CAAC;YAClF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,IAAI,CAAE,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAE,CAAC,KAAK;gBACxF,IAAI,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;YAC1C,wFAAwF;YACxF,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;YACnC,KAAK,EAAE,CAAC;QACV,CAAC;QACD,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACnC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC3B,OAAO,CAAC,SAAS,CAAC,CAAC;QACnB,OAAO;YACL,UAAU,EAAE,UAAU;YACtB,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC;YAC/B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;YACrC,KAAK;YACL,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,KAAK;YAC7C,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;SAC9E,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,qBAAqB,CAAC,SAAiB,EAAE,OAAO,GAAG,aAAa;IAC9E,MAAM,MAAM,GAAG,8GAA8G,qBAAqB,CAAC,QAAQ,EAAE,+EAA+E,CAAC;IAC7O,OAAO,WAAW,WAAW,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;AAC5F,CAAC"}

package/dist/services/sync-summary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync-summary.d.ts","sourceRoot":"","sources":["../../src/services/sync-summary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D,MAAM,WAAW,WAAW;IAC1B,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,YAAY,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,UAAU,CAAC,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,CAAC;CAC7C;AAwBD,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,GAAG,WAAW,CAiBzE"}
+{"version":3,"file":"sync-summary.d.ts","sourceRoot":"","sources":["../../src/services/sync-summary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D,MAAM,WAAW,WAAW;IAC1B,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,YAAY,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,UAAU,CAAC,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,CAAC;CAC7C;AAOD,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,GAAG,WAAW,CAiBzE"}

package/dist/services/sync-summary.js

@@ -22,24 +22,7 @@
  * from contributes. Nothing. It is not synced, and its backlog is unknown
  * rather than zero — the same mistake as the literal, made a level down.
  */
-/**
- * A node is synced when it has nothing left to deliver.
- *
- * NOT `connected && pendingItems === 0`, which is what this said first and
- * which can never be true. `ISyncStatus.connected` is `masterInvoke !==
- * null` — whether the slave holds a PUSH channel to the master — and that
- * channel has no production caller; `sync.rpc-service.ts` says so in as many
- * words. Replication runs the other way: the master PULLS, through
- * `drainBuffer`/`ackDrained`, and `ackDrained` is what advances
- * `lastSyncAt`. So a node that is perfectly up to date reports
- * `connected: false`, and requiring it made «synced» a state the column
- * could never print — an unreachable figure one level down from the literal
- * zero it replaced.
- *
- * Of the six fields, three are written only by that dead path — `connected`,
- * `lastError` and `failedAttempts`. `pendingItems` and `lastSyncAt` are the
- * two the pull path maintains, and they are the two to count on.
- */
+/** The controller observes mesh connectivity. The worker independently reports its undelivered backlog. */
 function isSynced(status) {
     return status.pendingItems === 0;
 }

package/dist/services/sync-summary.js.map

@@ -1 +1 @@
-{"version":3,"file":"sync-summary.js","sourceRoot":"","sources":["../../src/services/sync-summary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAkBH;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,QAAQ,CAAC,MAAmB;IACnC,OAAO,MAAM,CAAC,YAAY,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAA8B;IAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAE9D,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC;QAChC,sEAAsE;QACtE,8DAA8D;QAC9D,IAAI,CAAC,MAAM;YAAE,SAAS;QAEtB,IAAI,QAAQ,CAAC,MAAM,CAAC;YAAE,YAAY,IAAI,CAAC,CAAC;QACxC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC;IACtC,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;AACpE,CAAC"}
+{"version":3,"file":"sync-summary.js","sourceRoot":"","sources":["../../src/services/sync-summary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAkBH,2GAA2G;AAC3G,SAAS,QAAQ,CAAC,MAAmB;IACnC,OAAO,MAAM,CAAC,YAAY,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAA8B;IAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAE9D,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC;QAChC,sEAAsE;QACtE,8DAA8D;QAC9D,IAAI,CAAC,MAAM;YAAE,SAAS;QAEtB,IAAI,QAAQ,CAAC,MAAM,CAAC;YAAE,YAAY,IAAI,CAAC,CAAC;QACxC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC;IACtC,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;AACpE,CAAC"}

package/dist/services/sync.rpc-service.d.ts

@@ -1,28 +1,11 @@
-/**
- * SyncRpcService — Netron RPC endpoints for slave→master data sync
- *
- * Master exposes:
- *   - receiveBatch: accepts sync batches from slaves (idempotent)
- *   - getSyncStatus: returns sync status for monitoring
- *
- * Slaves call receiveBatch via Netron TCP transport.
- * TCP transport is auth-free (fleet assumes network-level security via WireGuard).
- */
-import type { SyncService, SyncBatch, IngestBatchResult } from './sync.service.js';
+import type { SyncService, SyncBatch } from './sync.service.js';
 export type { SyncBatch };
 import type { ISyncStatus } from '../shared/dto/project.js';
+import type { ReplicationReceipt } from './replication-evidence.js';
+import type { ReconciliationProof } from './replication-reconciliation.js';
 export declare class SyncRpcService {
     private readonly syncService;
     constructor(syncService: SyncService);
-    /**
-     * Receive a sync batch from a slave daemon.
-     * Called over Netron TCP transport.
-     *
-     * Idempotent — and now actually so. The claim is enforced by a ledger
-     * keyed on the slave's entry id, so a batch replayed after a lost
-     * acknowledgement is recognised rather than ingested twice.
-     */
-    receiveBatch(data: SyncBatch): Promise<IngestBatchResult>;
     /**
      * Hand pending entries to the master — called by the master over TCP.
      *
@@ -38,9 +21,23 @@ export declare class SyncRpcService {
      */
     ackDrained(data: {
         ids: string[];
+        receipt?: ReplicationReceipt;
     }): Promise<{
         released: number;
     }>;
+    /** Administrative recovery reads only released, retained metrics, in bounded pages. */
+    readUnverifiedMetrics(data?: {
+        after?: string;
+        through?: string;
+        epoch?: string;
+        limit?: number;
+    }): Promise<import("./replication-reconciliation.js").ReconciliationPage>;
+    /** A separate, payload-bound proof settles history without rewriting the original receipt. */
+    acknowledgeReconciliation(data: {
+        proofs: ReconciliationProof[];
+    }): Promise<{
+        reconciled: number;
+    }>;
     /**
      * Get sync status (for webapp monitoring).
      */

package/dist/services/sync.rpc-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync.rpc-service.d.ts","sourceRoot":"","sources":["../../src/services/sync.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACnF,YAAY,EAAE,SAAS,EAAE,CAAC;AAC1B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D,qBACa,cAAc;IACb,OAAO,CAAC,QAAQ,CAAC,WAAW;IAAxC,YAA6B,WAAW,EAAE,WAAW,EAAI;IAEzD;;;;;;;OAOG;IAUG,YAAY,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAE9D;IAED;;;;;;OAMG;IAEG,WAAW,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAE/D;IAED;;OAEG;IAEG,UAAU,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAEvE;IAED;;OAEG;IAOG,aAAa,IAAI,OAAO,CAAC,WAAW,CAAC,CAE1C;CACF"}
+{"version":3,"file":"sync.rpc-service.d.ts","sourceRoot":"","sources":["../../src/services/sync.rpc-service.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAChE,YAAY,EAAE,SAAS,EAAE,CAAC;AAC1B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAE3E,qBACa,cAAc;IACb,OAAO,CAAC,QAAQ,CAAC,WAAW;IAAxC,YAA6B,WAAW,EAAE,WAAW,EAAI;IAEzD;;;;;;OAMG;IAEG,WAAW,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAE/D;IAED;;OAEG;IAEG,UAAU,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,kBAAkB,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAErG;IAED,uFAAuF;IAEvF,qBAAqB,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,yEAEhG;IAED,8FAA8F;IAE9F,yBAAyB,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,mBAAmB,EAAE,CAAA;KAAE;;OAEhE;IAED;;OAEG;IAOG,aAAa,IAAI,OAAO,CAAC,WAAW,CAAC,CAE1C;CACF"}

package/dist/services/sync.rpc-service.js

@@ -1,13 +1,3 @@
-/**
- * SyncRpcService — Netron RPC endpoints for slave→master data sync
- *
- * Master exposes:
- *   - receiveBatch: accepts sync batches from slaves (idempotent)
- *   - getSyncStatus: returns sync status for monitoring
- *
- * Slaves call receiveBatch via Netron TCP transport.
- * TCP transport is auth-free (fleet assumes network-level security via WireGuard).
- */
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -17,6 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
+/** Worker outbox operations invoked by the mesh controller. */
 import { Service, Public } from '@omnitron-dev/titan/decorators';
 import { CONTROL_PLANE_READ_ROLES } from '../shared/roles.js';
 let SyncRpcService = class SyncRpcService {
@@ -24,25 +15,6 @@ let SyncRpcService = class SyncRpcService {
     constructor(syncService) {
         this.syncService = syncService;
     }
-    /**
-     * Receive a sync batch from a slave daemon.
-     * Called over Netron TCP transport.
-     *
-     * Idempotent — and now actually so. The claim is enforced by a ledger
-     * keyed on the slave's entry id, so a batch replayed after a lost
-     * acknowledgement is recognised rather than ingested twice.
-     */
-    // `service_role` cannot be presented today: the daemon issues JWTs whose
-    // role comes from `omnitron_users.role` (admin | operator | viewer), and
-    // titan-auth only mints a service context from `validateApiKey()`, which
-    // needs a `serviceKey` the daemon does not configure. It is left named
-    // because this is one end of an unfinished cross-daemon path — the other
-    // end, `SyncService.setMasterConnection()`, has no production caller
-    // either — and removing it would erase the only statement of the intent.
-    // Reachable in practice by admin and operator.
-    async receiveBatch(data) {
-        return this.syncService.receiveBatch(data);
-    }
     /**
      * Hand pending entries to the master — called by the master over TCP.
      *
@@ -57,7 +29,15 @@ let SyncRpcService = class SyncRpcService {
      * Release entries the master has confirmed it holds.
      */
     async ackDrained(data) {
-        return this.syncService.ackDrained(data?.ids ?? []);
+        return this.syncService.ackDrained(data?.ids ?? [], data?.receipt);
+    }
+    /** Administrative recovery reads only released, retained metrics, in bounded pages. */
+    readUnverifiedMetrics(data) {
+        return this.syncService.readUnverifiedMetrics(data);
+    }
+    /** A separate, payload-bound proof settles history without rewriting the original receipt. */
+    acknowledgeReconciliation(data) {
+        return this.syncService.acknowledgeReconciliation(data.proofs);
     }
     /**
      * Get sync status (for webapp monitoring).
@@ -72,23 +52,29 @@ let SyncRpcService = class SyncRpcService {
     }
 };
 __decorate([
-    Public({ auth: { roles: ['admin', 'operator', 'service_role'] } }),
+    Public({ auth: { roles: ['admin', 'service_role'] } }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
-], SyncRpcService.prototype, "receiveBatch", null);
+], SyncRpcService.prototype, "drainBuffer", null);
 __decorate([
-    Public({ auth: { roles: ['admin', 'operator', 'service_role'] } }),
+    Public({ auth: { roles: ['service_role'] } }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
-], SyncRpcService.prototype, "drainBuffer", null);
+], SyncRpcService.prototype, "ackDrained", null);
 __decorate([
-    Public({ auth: { roles: ['admin', 'operator', 'service_role'] } }),
+    Public({ auth: { roles: ['admin', 'service_role'] } }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object]),
-    __metadata("design:returntype", Promise)
-], SyncRpcService.prototype, "ackDrained", null);
+    __metadata("design:returntype", void 0)
+], SyncRpcService.prototype, "readUnverifiedMetrics", null);
+__decorate([
+    Public({ auth: { roles: ['service_role'] } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], SyncRpcService.prototype, "acknowledgeReconciliation", null);
 __decorate([
     Public({ auth: { roles: CONTROL_PLANE_READ_ROLES } }),
     __metadata("design:type", Function),

package/dist/services/sync.rpc-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"sync.rpc-service.js","sourceRoot":"","sources":["../../src/services/sync.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;;;;;;;;;;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAMvD,IAAM,cAAc,GAApB,MAAM,cAAc;IACI,WAAW;IAAxC,YAA6B,WAAwB;2BAAxB,WAAW;IAAgB,CAAC;IAEzD;;;;;;;OAOG;IACH,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,uEAAuE;IACvE,yEAAyE;IACzE,qEAAqE;IACrE,yEAAyE;IACzE,+CAA+C;IAEzC,AAAN,KAAK,CAAC,YAAY,CAAC,IAAe;QAChC,OAAO,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;OAMG;IAEG,AAAN,KAAK,CAAC,WAAW,CAAC,IAAyB;QACzC,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IAEG,AAAN,KAAK,CAAC,UAAU,CAAC,IAAuB;QACtC,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,wEAAwE;IACxE,yEAAyE;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,uDAAuD;IAEjD,AAAN,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;IACtC,CAAC;CACF,CAAA;AApCO;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC;;;;kDAGlE;AAUK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC;;;;iDAGlE;AAMK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC;;;;gDAGlE;AAWK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,CAAC;;;;mDAGrD;AAvDU,cAAc;IAD1B,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;;GACrB,cAAc,CAwD1B"}
+{"version":3,"file":"sync.rpc-service.js","sourceRoot":"","sources":["../../src/services/sync.rpc-service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+DAA+D;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAQvD,IAAM,cAAc,GAApB,MAAM,cAAc;IACI,WAAW;IAAxC,YAA6B,WAAwB;2BAAxB,WAAW;IAAgB,CAAC;IAEzD;;;;;;OAMG;IAEG,AAAN,KAAK,CAAC,WAAW,CAAC,IAAyB;QACzC,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IAEG,AAAN,KAAK,CAAC,UAAU,CAAC,IAAqD;QACpE,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,uFAAuF;IAEvF,qBAAqB,CAAC,IAA2E;QAC/F,OAAO,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,8FAA8F;IAE9F,yBAAyB,CAAC,IAAuC;QAC/D,OAAO,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,wEAAwE;IACxE,yEAAyE;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,uDAAuD;IAEjD,AAAN,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;IACtC,CAAC;CACF,CAAA;AApCO;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC;;;;iDAGtD;AAMK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;;;;gDAG7C;AAID;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC;;;;2DAGtD;AAID;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;;;;+DAG7C;AAWK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,CAAC;;;;mDAGrD;AA9CU,cAAc;IAD1B,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;;GACrB,cAAc,CA+C1B"}