@vibe-commit/capture 0.7.0 → 0.9.0

package/dist/grants_sync.d.ts

@@ -0,0 +1,165 @@
+/**
+ * The account-grants client — `POST /ingest/v1/grants/sync` and `GET /ingest/v1/grants` (slice 2, `CR-259`, S4).
+ *
+ * ```
+ *   POST <ingest origin>/ingest/v1/grants/sync    Authorization: Bearer vcik_…
+ *     { "schema": 1, "ops": [{ "op": "grant"|"revoke"|"exclude"|"include", "kind": "owner"|"repo", "value": "<normalized>" }],
+ *       "named": { "owners": [..], "repos": [..] } }            64 KiB, 500 ops; `exclude`/`include` take kind "repo"
+ *   200 { "schema": 1, "epoch", "owners", "repos", "excluded", "unsynced_machines" }   + X-Grant-Epoch
+ *   400 { "error": "invalid_grants_sync" }         nothing applied
+ *   401                                            the credential, not the grants
+ *
+ *   GET  <ingest origin>/ingest/v1/grants                       a pure read — it does not mark the credential as synced
+ *   200 { "schema": 1, "epoch", "owners", "repos", "excluded" }   + X-Grant-Epoch
+ * ```
+ *
+ * The contract is `CR-259`'s (`slice2-build-brief-20261024.md` §1.2), which the server side (`cr259b`) is built to as well: this file
+ * was written from that brief and not from any closed source, so it declares no sibling-repo provenance.
+ *
+ * ## What this file is, and is not, in the PR that adds it
+ *
+ * Primitives. No verb calls them yet: `connect`, `status` and `off` sync at their start or end, and SessionStart does the one
+ * bounded GET, but each of those prints something new and waits on the 0.7.0 error-code copy (PR 7). They are tested here
+ * through injected deps, and listed in `dead-symbols.test.ts` as unreferenced until those verbs land.
+ *
+ * ## Who writes what
+ *
+ *   - `syncGrants` is a VERB's: it may write `grants.json` (to clear what it delivered from `pending`) because a verb is
+ *     the only kind of caller that may. Hooks never sync, and never write `grants.json` (`consent.ts`).
+ *   - `fetchAccountGrants` writes NOTHING. SessionStart (a hook) is its caller, and what it learned goes to `grants-account.json`.
+ *
+ * ## Failure is silent, and a failed sync loses nothing
+ *
+ * Every function here is bounded (3 s) and NEVER THROWS. A sync that fails for any reason leaves `pending` where it was, so the
+ * next verb sends it again — the server applies every op idempotently. The caller says "not yet sent" (`status`); this file
+ * says nothing.
+ */
+import { type Grants, type PendingOp } from "./consent.js";
+import type { IngestCredential } from "./credential.js";
+export declare const GRANTS_PATH = "/ingest/v1/grants";
+export declare const GRANTS_SYNC_PATH = "/ingest/v1/grants/sync";
+/** Brief §2: each sync is bounded at 3 s IN TOTAL (one deadline shared by its chunks), so a verb never feels hung on it. The same bound serves the GET. */
+export declare const GRANTS_TIMEOUT_MS = 3000;
+/** The server's caps on one sync request (brief §1.2). A request over either is never sent. */
+export declare const SYNC_MAX_OPS = 500;
+export declare const SYNC_MAX_BYTES: number;
+/** The account's grants as the server answered, normalized. */
+export interface AccountSnapshot {
+    readonly epoch: number;
+    readonly owners: readonly string[];
+    readonly repos: readonly string[];
+    readonly excluded: readonly string[];
+}
+export type AccountGrantsRead = ({
+    readonly kind: "ok";
+} & AccountSnapshot)
+/** 401, and only 401: the credential is not accepted. */
+ | {
+    readonly kind: "unauthorized";
+}
+/** Everything else: a 5xx, a 404 from a server that predates the route, a timeout, a stalled or oversize body, off-contract JSON. */
+ | {
+    readonly kind: "unavailable";
+};
+/** What a CLI verb (`connect`, `status`, `off`) passes as `maxBodyBytes`: a verb is not a hook, so eng-2 D2's 64 KiB rule does not bind it. */
+export declare const GRANTS_VERB_BODY_BYTES: number;
+export interface GrantsDeps {
+    readonly fetch: typeof fetch;
+    readonly timeoutMs?: number;
+    /**
+     * The most of a response body that is read. **The default is the hook path's 64 KiB** (`readCappedJson`, eng-2 D2): SessionStart's
+     * GET must not buffer more. A CLI verb passes `GRANTS_VERB_BODY_BYTES`. An answer over the cap is `unavailable`.
+     */
+    readonly maxBodyBytes?: number;
+}
+export interface SyncDeps extends GrantsDeps {
+    readonly home: string;
+    readonly now: () => Date;
+}
+/**
+ * `GET /ingest/v1/grants`. A pure read: it changes nothing on the server and writes nothing here. Read through the one capped,
+ * signal-raced body reader (`post.ts`), so a 64 KiB cap and the time bound are the same ones the hook's other body reads have; a
+ * body that stalls, is cut off, is over the cap or is not JSON is `unavailable`, and the caller's epoch stays as stale as it was.
+ */
+export declare function fetchAccountGrants(ingestUrl: string, credential: IngestCredential, deps: GrantsDeps): Promise<AccountGrantsRead>;
+/** One op as the server takes it. */
+export interface SyncOp {
+    readonly op: PendingOp["op"];
+    readonly kind: PendingOp["kind"];
+    readonly value: string;
+}
+/** What one sync sends: the ops in order, and the full set this machine has named. */
+export interface SyncPlan {
+    readonly ops: readonly SyncOp[];
+    readonly named: {
+        readonly owners: readonly string[];
+        readonly repos: readonly string[];
+    };
+}
+/**
+ * What to send. `named` is everything THIS machine has named: its `owners`, and its `repos` plus the slug of every clone it holds
+ * a per-clone consent for (`consentedSlugs`, which the caller resolves — it needs git) — minus anything the user turned off
+ * here, since a turned-off repo is not named. Local-only (`local:`) slugs are never sent: they name a path, and the server has no
+ * grant for one.
+ *
+ * ⭐ **THE FIRST SYNC** (`account === null`: nothing has ever come back from the server) also sends a `grant` for each of those,
+ * so per-clone consents made under 0.6.x/0.7.0 reach the account (R3-21). They go BEFORE the pending ops, so a later user
+ * intent (a queued `revoke` of the same repo) is the one that stands. After the first sync only `pending` rides.
+ */
+export declare function planSync(grants: Grants, consentedSlugs: readonly string[], firstSync: boolean): SyncPlan;
+export type SyncResult = {
+    readonly kind: "synced";
+    /** How many of the user's OTHER machines have not confirmed the latest grants (for `off`'s second line). */
+    readonly unsyncedMachines: number;
+    readonly account: AccountSnapshot;
+}
+/** 401: the credential is not accepted. The caller's credential beat owns that; this only says the sync did not happen. */
+ | {
+    readonly kind: "unauthorized";
+}
+/**
+ * 400: the server applied nothing. Our own bug — the queue is kept (dropping it would lose the user's intent) and will be refused
+ * again. `pendingRejected` is how many QUEUED ops were in the request that was refused (the first-sync grants derived from
+ * `grants.json` are not counted), so a verb can say "N changes your account didn't accept" and log the 400 once per run.
+ */
+ | {
+    readonly kind: "rejected";
+    readonly pendingRejected: number;
+}
+/** The request would exceed the server's caps, so none was sent. `pending` is untouched. */
+ | {
+    readonly kind: "too-large";
+}
+/** `grants.json` is present and unreadable: `named` and `pending` cannot be known, so nothing is sent. */
+ | {
+    readonly kind: "unreadable";
+}
+/** No answer, or an answer off-contract, or it could not be recorded here. `pending` is untouched. */
+ | {
+    readonly kind: "unavailable";
+};
+/**
+ * One sync. Reads `grants.json`, sends its `pending` queue (and, the first time, what this machine already named), and on a 200
+ * records the answer:
+ *   - `grants-account.json` gets the account state, with `refused` and `stale` cleared (the server has just said what it thinks);
+ *   - the ops that were sent leave `pending` — exactly those, matched by value, so an op queued while the request was in flight
+ *     stays.
+ * Anything else leaves both files as they were.
+ *
+ * **NEVER THROWS**, and it is bounded by `timeoutMs` per request (3 s). `consentedSlugs` is the caller's: the slug of every clone
+ * with a per-clone consent, because only the caller can afford the git spawns to know them.
+ */
+export declare function syncGrants(ingestUrl: string, credential: IngestCredential, consentedSlugs: readonly string[], deps: SyncDeps): Promise<SyncResult>;
+/**
+ * The queue after `ops` are added to it. ⛔ **A later op REPLACES an earlier one on the same axis, kind and value, and is then
+ * appended** — only the last word on each axis matters, and keeping the first (the old "already queued, skip it") turned an
+ * offline grant, stop, grant into `[grant, revoke]`: the server ended revoked while this machine named the repo, and every upload
+ * was refused for ever. The two axes are independent, so `grant X` and `exclude X` both stay, in the order they were queued.
+ * Pure: `connect`'s grant write uses it inside its own `updateGrants`, so the grants and the queue land in ONE write.
+ */
+export declare function mergePending(pending: readonly PendingOp[], ops: readonly SyncOp[], now: Date): PendingOp[];
+/**
+ * Queue writes for the next sync (a verb's, never a hook's: it goes through `updateGrants`). See `mergePending` for the rule.
+ * Returns false — and writes nothing — if `grants.json` is unreadable.
+ */
+export declare function queueGrantOps(home: string, ops: readonly SyncOp[], now: Date): boolean;

package/dist/grants_sync.js

@@ -0,0 +1,289 @@
+/**
+ * The account-grants client — `POST /ingest/v1/grants/sync` and `GET /ingest/v1/grants` (slice 2, `CR-259`, S4).
+ *
+ * ```
+ *   POST <ingest origin>/ingest/v1/grants/sync    Authorization: Bearer vcik_…
+ *     { "schema": 1, "ops": [{ "op": "grant"|"revoke"|"exclude"|"include", "kind": "owner"|"repo", "value": "<normalized>" }],
+ *       "named": { "owners": [..], "repos": [..] } }            64 KiB, 500 ops; `exclude`/`include` take kind "repo"
+ *   200 { "schema": 1, "epoch", "owners", "repos", "excluded", "unsynced_machines" }   + X-Grant-Epoch
+ *   400 { "error": "invalid_grants_sync" }         nothing applied
+ *   401                                            the credential, not the grants
+ *
+ *   GET  <ingest origin>/ingest/v1/grants                       a pure read — it does not mark the credential as synced
+ *   200 { "schema": 1, "epoch", "owners", "repos", "excluded" }   + X-Grant-Epoch
+ * ```
+ *
+ * The contract is `CR-259`'s (`slice2-build-brief-20261024.md` §1.2), which the server side (`cr259b`) is built to as well: this file
+ * was written from that brief and not from any closed source, so it declares no sibling-repo provenance.
+ *
+ * ## What this file is, and is not, in the PR that adds it
+ *
+ * Primitives. No verb calls them yet: `connect`, `status` and `off` sync at their start or end, and SessionStart does the one
+ * bounded GET, but each of those prints something new and waits on the 0.7.0 error-code copy (PR 7). They are tested here
+ * through injected deps, and listed in `dead-symbols.test.ts` as unreferenced until those verbs land.
+ *
+ * ## Who writes what
+ *
+ *   - `syncGrants` is a VERB's: it may write `grants.json` (to clear what it delivered from `pending`) because a verb is
+ *     the only kind of caller that may. Hooks never sync, and never write `grants.json` (`consent.ts`).
+ *   - `fetchAccountGrants` writes NOTHING. SessionStart (a hook) is its caller, and what it learned goes to `grants-account.json`.
+ *
+ * ## Failure is silent, and a failed sync loses nothing
+ *
+ * Every function here is bounded (3 s) and NEVER THROWS. A sync that fails for any reason leaves `pending` where it was, so the
+ * next verb sends it again — the server applies every op idempotently. The caller says "not yet sent" (`status`); this file
+ * says nothing.
+ */
+import { EMPTY_GRANTS, GrantsUnreadableError, isLocalSlug, normalizeOwner, normalizeSlug, readAccountState, readGrants, updateGrants, writeAccountState, } from "./consent.js";
+import { MAX_ERROR_BODY_BYTES, readCappedJson } from "./post.js";
+import { CLIENT_VERSION, CLIENT_VERSION_HEADER } from "./version.js";
+export const GRANTS_PATH = "/ingest/v1/grants";
+export const GRANTS_SYNC_PATH = "/ingest/v1/grants/sync";
+/** Brief §2: each sync is bounded at 3 s IN TOTAL (one deadline shared by its chunks), so a verb never feels hung on it. The same bound serves the GET. */
+export const GRANTS_TIMEOUT_MS = 3_000;
+/** The server's caps on one sync request (brief §1.2). A request over either is never sent. */
+export const SYNC_MAX_OPS = 500;
+export const SYNC_MAX_BYTES = 64 * 1024;
+/** What a CLI verb (`connect`, `status`, `off`) passes as `maxBodyBytes`: a verb is not a hook, so eng-2 D2's 64 KiB rule does not bind it. */
+export const GRANTS_VERB_BODY_BYTES = 1024 * 1024;
+function grantsUrl(ingestUrl, path) {
+    return new URL(path, ingestUrl).toString();
+}
+function headersFor(credential, json) {
+    return {
+        // The request boundary — a credential's plaintext is used here, in `post.ts` and in `oauth/whoami.ts`.
+        authorization: `Bearer ${credential.expose()}`,
+        accept: "application/json",
+        ...(json ? { "content-type": "application/json" } : {}),
+        [CLIENT_VERSION_HEADER.toLowerCase()]: CLIENT_VERSION,
+    };
+}
+function normalizedList(value, normalize) {
+    if (!Array.isArray(value))
+        return null;
+    const out = [];
+    for (const item of value) {
+        if (typeof item !== "string")
+            return null;
+        const n = normalize(item);
+        if (n !== "" && !out.includes(n))
+            out.push(n);
+    }
+    return out;
+}
+/** The account state in a sync or GET body, or `null` if it is not what the contract says. Schema 1 only. */
+function parseSnapshot(body) {
+    if (body === null || typeof body !== "object" || Array.isArray(body))
+        return null;
+    const o = body;
+    if (o.schema !== 1)
+        return null;
+    if (typeof o.epoch !== "number" || !Number.isSafeInteger(o.epoch) || o.epoch < 0)
+        return null;
+    const owners = normalizedList(o.owners, normalizeOwner);
+    const repos = normalizedList(o.repos, normalizeSlug);
+    const excluded = normalizedList(o.excluded, normalizeSlug);
+    if (owners === null || repos === null || excluded === null)
+        return null;
+    return { epoch: o.epoch, owners, repos, excluded };
+}
+/**
+ * `GET /ingest/v1/grants`. A pure read: it changes nothing on the server and writes nothing here. Read through the one capped,
+ * signal-raced body reader (`post.ts`), so a 64 KiB cap and the time bound are the same ones the hook's other body reads have; a
+ * body that stalls, is cut off, is over the cap or is not JSON is `unavailable`, and the caller's epoch stays as stale as it was.
+ */
+export async function fetchAccountGrants(ingestUrl, credential, deps) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), deps.timeoutMs ?? GRANTS_TIMEOUT_MS);
+    try {
+        const res = await deps.fetch(grantsUrl(ingestUrl, GRANTS_PATH), {
+            method: "GET",
+            headers: headersFor(credential, false),
+            signal: controller.signal,
+            redirect: "error",
+        });
+        if (res.status === 401)
+            return { kind: "unauthorized" };
+        if (res.status !== 200)
+            return { kind: "unavailable" };
+        const snapshot = parseSnapshot(await readCappedJson(res, controller.signal, deps.maxBodyBytes ?? MAX_ERROR_BODY_BYTES));
+        return snapshot === null ? { kind: "unavailable" } : { kind: "ok", ...snapshot };
+    }
+    catch {
+        return { kind: "unavailable" };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+const wire = (p) => ({ op: p.op, kind: p.kind, value: p.value });
+/**
+ * What to send. `named` is everything THIS machine has named: its `owners`, and its `repos` plus the slug of every clone it holds
+ * a per-clone consent for (`consentedSlugs`, which the caller resolves — it needs git) — minus anything the user turned off
+ * here, since a turned-off repo is not named. Local-only (`local:`) slugs are never sent: they name a path, and the server has no
+ * grant for one.
+ *
+ * ⭐ **THE FIRST SYNC** (`account === null`: nothing has ever come back from the server) also sends a `grant` for each of those,
+ * so per-clone consents made under 0.6.x/0.7.0 reach the account (R3-21). They go BEFORE the pending ops, so a later user
+ * intent (a queued `revoke` of the same repo) is the one that stands. After the first sync only `pending` rides.
+ */
+export function planSync(grants, consentedSlugs, firstSync) {
+    const off = new Set(grants.excluded);
+    const owners = [...new Set(grants.owners.map(normalizeOwner))].filter((o) => o !== "");
+    const repos = [...new Set([...grants.repos, ...consentedSlugs].map(normalizeSlug))].filter((r) => r !== "" && !isLocalSlug(r) && !off.has(r));
+    const derived = firstSync
+        ? [
+            ...owners.map((value) => ({ op: "grant", kind: "owner", value })),
+            ...repos.map((value) => ({ op: "grant", kind: "repo", value })),
+        ]
+        : [];
+    return { ops: [...derived, ...grants.pending.map(wire)], named: { owners, repos } };
+}
+/** Cut `ops` into requests of at most 500, each carrying the whole `named` set (the server replaces it each time). */
+function requestBodies(plan) {
+    const bodies = [];
+    const chunks = [];
+    for (let i = 0; i < plan.ops.length; i += SYNC_MAX_OPS)
+        chunks.push(plan.ops.slice(i, i + SYNC_MAX_OPS));
+    if (chunks.length === 0)
+        chunks.push([]);
+    for (const ops of chunks) {
+        const body = JSON.stringify({ schema: 1, ops, named: plan.named });
+        if (Buffer.byteLength(body, "utf8") > SYNC_MAX_BYTES)
+            return null;
+        bodies.push(body);
+    }
+    return bodies;
+}
+/**
+ * One sync. Reads `grants.json`, sends its `pending` queue (and, the first time, what this machine already named), and on a 200
+ * records the answer:
+ *   - `grants-account.json` gets the account state, with `refused` and `stale` cleared (the server has just said what it thinks);
+ *   - the ops that were sent leave `pending` — exactly those, matched by value, so an op queued while the request was in flight
+ *     stays.
+ * Anything else leaves both files as they were.
+ *
+ * **NEVER THROWS**, and it is bounded by `timeoutMs` per request (3 s). `consentedSlugs` is the caller's: the slug of every clone
+ * with a per-clone consent, because only the caller can afford the git spawns to know them.
+ */
+export async function syncGrants(ingestUrl, credential, consentedSlugs, deps) {
+    try {
+        const read = readGrants(deps.home);
+        if (read.kind === "unreadable")
+            return { kind: "unreadable" };
+        const grants = read.kind === "ok" ? read.grants : EMPTY_GRANTS;
+        // ⛔ "First" is decided by grants.json's own `synced_at` and never by the account file, which reads as empty when it is corrupt
+        // or gone — and a re-sent first sync would re-grant whatever was revoked on another machine since.
+        const plan = planSync(grants, consentedSlugs, grants.synced_at === null);
+        const bodies = requestBodies(plan);
+        if (bodies === null)
+            return { kind: "too-large" };
+        const derivedCount = plan.ops.length - grants.pending.length;
+        let last = null;
+        // ⛔ ONE deadline for the whole sync, shared by every chunk: a verb "never feels hung on it" (brief §2) however many
+        // requests more than 500 ops make. A sync that runs out of time is `unavailable`, `pending` untouched, and the next verb
+        // sends it again (every op is idempotent on the server).
+        const deadline = Date.now() + (deps.timeoutMs ?? GRANTS_TIMEOUT_MS);
+        for (const [index, body] of bodies.entries()) {
+            const remaining = deadline - Date.now();
+            if (remaining <= 0)
+                return { kind: "unavailable" };
+            const controller = new AbortController();
+            const timer = setTimeout(() => controller.abort(), remaining);
+            try {
+                const res = await deps.fetch(grantsUrl(ingestUrl, GRANTS_SYNC_PATH), {
+                    method: "POST",
+                    headers: headersFor(credential, true),
+                    body,
+                    signal: controller.signal,
+                    redirect: "error",
+                });
+                if (res.status === 401)
+                    return { kind: "unauthorized" };
+                if (res.status === 400) {
+                    const from = index * SYNC_MAX_OPS;
+                    const to = Math.min(plan.ops.length, from + SYNC_MAX_OPS);
+                    return { kind: "rejected", pendingRejected: Math.max(0, to - Math.max(from, derivedCount)) };
+                }
+                if (res.status !== 200)
+                    return { kind: "unavailable" };
+                const json = await readCappedJson(res, controller.signal, deps.maxBodyBytes ?? MAX_ERROR_BODY_BYTES);
+                const snapshot = parseSnapshot(json);
+                const unsynced = json?.unsynced_machines;
+                if (snapshot === null || typeof unsynced !== "number" || !Number.isSafeInteger(unsynced) || unsynced < 0) {
+                    return { kind: "unavailable" };
+                }
+                last = { ...snapshot, unsynced };
+            }
+            finally {
+                clearTimeout(timer);
+            }
+        }
+        if (last === null)
+            return { kind: "unavailable" };
+        // The server has it. Record that: pending first (a failure there leaves the queue to be re-sent, which is idempotent),
+        // then the account file.
+        const sent = new Set(grants.pending.map((p) => `${p.op}\n${p.kind}\n${p.value}\n${p.at}`));
+        const stamp = deps.now().toISOString();
+        if (sent.size > 0 || grants.synced_at === null) {
+            try {
+                updateGrants(deps.home, (g) => ({
+                    ...g,
+                    pending: g.pending.filter((p) => !sent.has(`${p.op}\n${p.kind}\n${p.value}\n${p.at}`)),
+                    // Once, on the first 200, in the same write that clears what was delivered.
+                    synced_at: g.synced_at ?? stamp,
+                }));
+            }
+            catch (error) {
+                if (error instanceof GrantsUnreadableError)
+                    return { kind: "unavailable" };
+                throw error;
+            }
+        }
+        const { unsynced, ...account } = last;
+        writeAccountState(deps.home, {
+            account: { owners: account.owners, repos: account.repos, excluded: account.excluded, epoch: account.epoch, synced_at: stamp },
+            refused: [],
+            stale: false,
+            last_get_at: readAccountState(deps.home).last_get_at,
+        });
+        return { kind: "synced", unsyncedMachines: unsynced, account };
+    }
+    catch {
+        return { kind: "unavailable" };
+    }
+}
+/** `grant` / `revoke` are one axis (is the repo granted?) and `exclude` / `include` another (is it turned off?). */
+const axisOf = (op) => (op === "grant" || op === "revoke" ? "grant" : "exclude");
+/**
+ * The queue after `ops` are added to it. ⛔ **A later op REPLACES an earlier one on the same axis, kind and value, and is then
+ * appended** — only the last word on each axis matters, and keeping the first (the old "already queued, skip it") turned an
+ * offline grant, stop, grant into `[grant, revoke]`: the server ended revoked while this machine named the repo, and every upload
+ * was refused for ever. The two axes are independent, so `grant X` and `exclude X` both stay, in the order they were queued.
+ * Pure: `connect`'s grant write uses it inside its own `updateGrants`, so the grants and the queue land in ONE write.
+ */
+export function mergePending(pending, ops, now) {
+    let queued = [...pending];
+    for (const op of ops) {
+        const value = op.kind === "owner" ? normalizeOwner(op.value) : normalizeSlug(op.value);
+        if (value === "")
+            continue;
+        queued = queued.filter((p) => !(axisOf(p.op) === axisOf(op.op) && p.kind === op.kind && p.value === value));
+        queued.push({ op: op.op, kind: op.kind, value, at: now.toISOString() });
+    }
+    return queued;
+}
+/**
+ * Queue writes for the next sync (a verb's, never a hook's: it goes through `updateGrants`). See `mergePending` for the rule.
+ * Returns false — and writes nothing — if `grants.json` is unreadable.
+ */
+export function queueGrantOps(home, ops, now) {
+    try {
+        updateGrants(home, (g) => ({ ...g, pending: mergePending(g.pending, ops, now) }));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=grants_sync.js.map

package/dist/grants_sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants_sync.js","sourceRoot":"","sources":["../src/grants_sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,WAAW,EACX,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,iBAAiB,GAGlB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAErE,MAAM,CAAC,MAAM,WAAW,GAAG,mBAAmB,CAAC;AAC/C,MAAM,CAAC,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAEzD,2JAA2J;AAC3J,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEvC,+FAA+F;AAC/F,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAChC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AAiBxC,+IAA+I;AAC/I,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,IAAI,CAAC;AAiBlD,SAAS,SAAS,CAAC,SAAiB,EAAE,IAAY;IAChD,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,UAA4B,EAAE,IAAa;IAC7D,OAAO;QACL,uGAAuG;QACvG,aAAa,EAAE,UAAU,UAAU,CAAC,MAAM,EAAE,EAAE;QAC9C,MAAM,EAAE,kBAAkB;QAC1B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,CAAC,qBAAqB,CAAC,WAAW,EAAE,CAAC,EAAE,cAAc;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,SAAgC;IACtE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6GAA6G;AAC7G,SAAS,aAAa,CAAC,IAAa;IAClC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClF,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9F,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC3D,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,UAA4B,EAC5B,IAAgB;IAEhB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,IAAI,iBAAiB,CAAC,CAAC;IACxF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE;YAC9D,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC;YACtC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QACxD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QACvD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,IAAI,oBAAoB,CAAC,CAAC,CAAC;QACxH,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAeD,MAAM,IAAI,GAAG,CAAC,CAAY,EAAU,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAEpF;;;;;;;;;GASG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,cAAiC,EAAE,SAAkB;IAC5F,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,cAAc,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CACxF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAClD,CAAC;IACF,MAAM,OAAO,GAAa,SAAS;QACjC,CAAC,CAAC;YACE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAU,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACzE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAU,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;SACxE;QACH,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;AACtF,CAAC;AAwBD,sHAAsH;AACtH,SAAS,aAAa,CAAC,IAAc;IACnC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,YAAY;QAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC;IACzG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,cAAc;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,SAAiB,EACjB,UAA4B,EAC5B,cAAiC,EACjC,IAAc;IAEd,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;QAC/D,+HAA+H;QAC/H,mGAAmG;QACnG,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAElD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QAC7D,IAAI,IAAI,GAAkD,IAAI,CAAC;QAC/D,oHAAoH;QACpH,yHAAyH;QACzH,yDAAyD;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,iBAAiB,CAAC,CAAC;QACpE,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7C,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACxC,IAAI,SAAS,IAAI,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;YACnD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;YAC9D,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE;oBACnE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC;oBACrC,IAAI;oBACJ,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAC;gBACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;oBAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;gBACxD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACvB,MAAM,IAAI,GAAG,KAAK,GAAG,YAAY,CAAC;oBAClC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,YAAY,CAAC,CAAC;oBAC1D,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;gBAC/F,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;oBAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;gBACvD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,IAAI,oBAAoB,CAAC,CAAC;gBACrG,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;gBACrC,MAAM,QAAQ,GAAI,IAA+C,EAAE,iBAAiB,CAAC;gBACrF,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;oBACzG,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;gBACjC,CAAC;gBACD,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,CAAC;YACnC,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QAElD,uHAAuH;QACvH,yBAAyB;QACzB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3F,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC9B,GAAG,CAAC;oBACJ,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACtF,4EAA4E;oBAC5E,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,KAAK;iBAChC,CAAC,CAAC,CAAC;YACN,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,qBAAqB;oBAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;gBAC3E,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC;QACtC,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE;YAC3B,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE;YAC7H,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW;SACrD,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;AACH,CAAC;AAED,oHAAoH;AACpH,MAAM,MAAM,GAAG,CAAC,EAAmB,EAAuB,EAAE,CAAC,CAAC,EAAE,KAAK,OAAO,IAAI,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAEvH;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,OAA6B,EAAE,GAAsB,EAAE,GAAS;IAC3F,IAAI,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAC1B,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACvF,IAAI,KAAK,KAAK,EAAE;YAAE,SAAS;QAC3B,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC;QAC5G,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,GAAsB,EAAE,GAAS;IAC3E,IAAI,CAAC;QACH,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/grants_verb.d.ts

@@ -0,0 +1,70 @@
+/**
+ * What a CLI verb does with the account's grants (slice 2, S4): `status` and `off` sync at the start or the end, and read what
+ * the last sync recorded. `connect` (the picker's "on your account" group, the joining-machine prompt, `g`) comes in a later PR.
+ *
+ * ```
+ *   syncForVerb(ctx, …)      one bounded sync, silent on failure         (a verb's, never a hook's)
+ *   accountView(…)           the account rows' data, read from the files (no network)
+ * ```
+ *
+ * ## The first sync says what it saves, or it waits
+ *
+ * The first sync uploads what this machine already named — its owners and repos, and the slug of every per-clone consent
+ * made under 0.6.x/0.7.0 — to the user's account (R3-21). That is a disclosure the user must be able to read, so it runs
+ * only on a verb that can print it: a terminal, and not `--json`. Anywhere else it WAITS (nothing is sent, `pending` is
+ * untouched), and the next verb that can say so does it. The line names slugs, never paths.
+ *
+ * ## Nothing here is a hook
+ *
+ * Hooks never sync (`grants_sync.ts`). A verb reads the response with the 1 MiB cap a verb may use (`GRANTS_VERB_BODY_BYTES`).
+ */
+import { ownerName } from "./account_not_here.js";
+import { type AccountGrants, type Grants } from "./consent.js";
+import type { CommandContext } from "./commands/context.js";
+import { type SyncResult } from "./grants_sync.js";
+/** What a verb injects: the network. A test passes a stub; `index.ts` passes the real `fetch`. */
+export interface VerbSyncDeps {
+    readonly fetch: typeof fetch;
+    readonly timeoutMs?: number;
+}
+export type VerbSync = 
+/** No sync was attempted: no usable credential or ingest address, an unreadable `grants.json`, or a first sync that must wait. */
+{
+    readonly kind: "skipped";
+} | {
+    readonly kind: "ran";
+    readonly result: SyncResult;
+    /** The first-sync line was printed by THIS call. A verb that syncs twice passes it back as `quietFirst`, so it is said once. */
+    readonly disclosed?: boolean;
+};
+/** `owner/` for an owner, the slug for a repo — the way every account row and the first-sync line name them (`account_not_here.ts`). */
+export { ownerName };
+/**
+ * One sync for a verb. `json` is true for `--json`, which can print no line and so never does a FIRST sync.
+ *
+ * Prints, to stdout, only the first-sync line (and its full list past three names) and a blank line after it. Never throws.
+ */
+export declare function syncForVerb(ctx: CommandContext, json: boolean, deps: VerbSyncDeps, 
+/** A verb that syncs more than once (`connect`: at its start and after its writes) says what the first sync saves only once. */
+options?: {
+    readonly quietFirst?: boolean;
+}): Promise<VerbSync>;
+/** What the account rows show, read from `grants.json` and `grants-account.json` (no network). */
+export interface AccountView {
+    /** The last synced account state, or `null` before the first sync. */
+    readonly account: AccountGrants | null;
+    /** What the account grants that this machine has not named: an owner as `owner/`, a repo as its slug. */
+    readonly notHere: readonly string[];
+    /** Queued changes no sync has delivered. */
+    readonly pending: number;
+    /** Of those, how many the server refused in THIS run's sync (a 400). */
+    readonly pendingRejected: number;
+}
+/**
+ * ⛔ "Not on this machine" is what THIS machine has not named: not in its owners, its repos, or a per-clone consent, and not
+ * turned off here or on the account. A repo under an owner the account grants is covered by that owner's row, not listed
+ * again. An owner or repo the user turned off is a choice, not a gap.
+ */
+export declare function accountView(grants: Grants, account: AccountGrants | null, perCloneSlugs: readonly string[], sync: VerbSync, pendingRevokes?: number): AccountView;
+/** The account state and grants for a view, read fresh from disk. `null` when `grants.json` is unreadable. */
+export declare function readAccountView(home: string, perCloneSlugs: readonly string[], sync: VerbSync): AccountView | null;