paths-engine 0.0.0-stage → 0.1.0

package/dist/core/security/error-classifier.js

@@ -0,0 +1,169 @@
+export class DomainError extends Error {
+    code;
+    constructor(message, code = 'DOMAIN_ERROR') {
+        super(message);
+        this.name = 'DomainError';
+        this.code = code;
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+export class NotFoundError extends DomainError {
+    constructor(message) {
+        super(message, 'NOT_FOUND');
+        this.name = 'NotFoundError';
+    }
+}
+export class ValidationError extends DomainError {
+    constructor(message) {
+        super(message, 'VALIDATION_ERROR');
+        this.name = 'ValidationError';
+    }
+}
+export class ConflictError extends DomainError {
+    constructor(message) {
+        super(message, 'CONFLICT_ERROR');
+        this.name = 'ConflictError';
+    }
+}
+export class ContextClosedError extends DomainError {
+    constructor(message = 'Context has been closed.') {
+        super(message, 'CONTEXT_CLOSED');
+        this.name = 'ContextClosedError';
+    }
+}
+const INTERNAL_ERROR_MESSAGE = 'An internal error occurred.';
+const INTERNAL_ERROR_PATTERNS = [
+    /sqlite/i,
+    /SQLITE_/i,
+    /syntax error/i,
+    /FOREIGN KEY constraint/i,
+    /UNIQUE constraint failed/i,
+    /no such table/i,
+    /no such column/i,
+    /table .* has no column/i,
+    /\b(SELECT|INSERT|UPDATE|DELETE|DROP|ALTER|CREATE|VACUUM)\b.*\b(FROM|INTO|TABLE|SET)\b/i,
+    /ENOENT:/i,
+    /EACCES:/i,
+    /ECONNREFUSED:/i,
+    /EBUSY:/i,
+    /EPERM:/i,
+    /ENOTDIR:/i,
+    /ERR_[A-Z_]+/i,
+    /MODULE_NOT_FOUND/i,
+    /Cannot read propert/i,
+    /is not a function/i,
+    /is not iterable/i,
+    /TypeError:/i,
+    /ReferenceError:/i,
+    /SyntaxError:/i,
+    /at (?:[a-zA-Z0-9_$.<>]+ )?\(?[a-zA-Z0-9_/\-\\.:]+\)?/i,
+    /EISDIR:/i,
+    /ENOMEM/i,
+    /ECONNRESET/i,
+    /ETIMEDOUT/i,
+    /EAI_AGAIN/i,
+    /EPIPE:/i,
+    /ELIFECYCLE/i,
+    /FetchError/i,
+    /node_modules\//i,
+    /\w+\.js:\d+:\d+/,
+    /OPENSSL|certificate/i,
+    /SIGTERM|SIGKILL/i,
+];
+const SECRET_TOKEN_PATTERNS = [
+    /\b(?:ghp|gho|ghu|ghs|ghr)_[0-9a-zA-Z]{36}\b/g,
+    /\bnpm_[0-9a-zA-Z_-]{20,}\b/g,
+    /\bAKIA[0-9A-Z]{16}\b/g,
+    /\bsk-(?:live|ant|proj)-[0-9a-zA-Z_-]{10,}\b/g,
+    /\bsk_live_[0-9a-zA-Z]{24,}\b/g,
+    /\bxox[bpa]-[0-9a-zA-Z-]{10,}\b/g,
+    /\beyJ[A-Za-z0-9-_=]{25,}\.eyJ[A-Za-z0-9-_=]{25,}\.[A-Za-z0-9-_.+/=]{25,}\b/g,
+    /\bBearer\s+[0-9a-zA-Z._~+/=-]{20,}/g,
+    /\bapi[_-]?key\s*[:=]\s*\S+/gi,
+    /:\/\/[^/\s:]+:[^/\s@]+@/g,
+];
+/**
+ * Strips sensitive file paths, SQL fragments, and connection strings from error messages.
+ */
+export function sanitizeErrorMessage(message) {
+    if (!message || typeof message !== 'string') {
+        return INTERNAL_ERROR_MESSAGE;
+    }
+    let sanitized = message;
+    // Mask Windows absolute + UNC file paths (e.g. C:\Users\... or \\server\share)
+    sanitized = sanitized.replace(/[a-zA-Z]:\\[^"'\n\r<>|:\s]+/g, '[REDACTED_PATH]');
+    sanitized = sanitized.replace(/\\\\[A-Za-z0-9._-]+\\[^"'\n\r\s]+/g, '[REDACTED_PATH]');
+    // Mask Unix absolute file paths (any multi-segment absolute path)
+    sanitized = sanitized.replace(/(?<![A-Za-z0-9_/:.-])\/(?:[A-Za-z0-9._-]+\/)+[A-Za-z0-9._-]+/g, '[REDACTED_PATH]');
+    // Mask SQL statements and clauses
+    sanitized = sanitized.replace(/\b(SELECT|INSERT INTO|UPDATE|DELETE FROM|DROP TABLE)\b[^;\n]+/gi, '[REDACTED_SQL]');
+    // Mask credential/token material
+    for (const pattern of SECRET_TOKEN_PATTERNS) {
+        pattern.lastIndex = 0;
+        sanitized = sanitized.replace(pattern, '[REDACTED_SECRET]');
+    }
+    return sanitized.trim();
+}
+/**
+ * Determines whether an error message indicates an internal infrastructure,
+ * database, or unexpected runtime exception.
+ */
+export function isInternalInfrastructureError(message) {
+    if (!message || typeof message !== 'string') {
+        return true;
+    }
+    for (const pattern of INTERNAL_ERROR_PATTERNS) {
+        if (pattern.test(message)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Universal Allowlist-First Error Classifier
+ */
+export function classifyError(err) {
+    if (err instanceof DomainError) {
+        return {
+            code: err.code,
+            safeMessage: sanitizeErrorMessage(err.message),
+            isInternal: false,
+        };
+    }
+    const rawMessage = err instanceof Error ? err.message : typeof err === 'string' ? err : '';
+    if (!rawMessage || isInternalInfrastructureError(rawMessage)) {
+        return {
+            code: 'INTERNAL_ERROR',
+            safeMessage: INTERNAL_ERROR_MESSAGE,
+            isInternal: true,
+        };
+    }
+    const sanitized = sanitizeErrorMessage(rawMessage);
+    if (/closed/i.test(sanitized)) {
+        return {
+            code: 'CONTEXT_CLOSED',
+            safeMessage: sanitized,
+            isInternal: false,
+        };
+    }
+    if (/not found|does not exist/i.test(sanitized)) {
+        return {
+            code: 'NOT_FOUND',
+            safeMessage: sanitized,
+            isInternal: false,
+        };
+    }
+    if (/invalid|validation|cannot be empty|must be|already/i.test(sanitized)) {
+        return {
+            code: 'DOMAIN_ERROR',
+            safeMessage: sanitized,
+            isInternal: false,
+        };
+    }
+    return {
+        code: 'DOMAIN_ERROR',
+        safeMessage: sanitized,
+        isInternal: false,
+    };
+}
+//# sourceMappingURL=error-classifier.js.map

package/dist/core/security/error-classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-classifier.js","sourceRoot":"","sources":["../../../src/core/security/error-classifier.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,CAAS;IAEtB,YAAY,OAAe,EAAE,IAAI,GAAG,cAAc;QAChD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,WAAW;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,WAAW;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,WAAW;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,WAAW;IACjD,YAAY,OAAO,GAAG,0BAA0B;QAC9C,KAAK,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAQD,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AAE7D,MAAM,uBAAuB,GAAG;IAC9B,SAAS;IACT,UAAU;IACV,eAAe;IACf,yBAAyB;IACzB,2BAA2B;IAC3B,gBAAgB;IAChB,iBAAiB;IACjB,yBAAyB;IACzB,wFAAwF;IACxF,UAAU;IACV,UAAU;IACV,gBAAgB;IAChB,SAAS;IACT,SAAS;IACT,WAAW;IACX,cAAc;IACd,mBAAmB;IACnB,sBAAsB;IACtB,oBAAoB;IACpB,kBAAkB;IAClB,aAAa;IACb,kBAAkB;IAClB,eAAe;IACf,uDAAuD;IACvD,UAAU;IACV,SAAS;IACT,aAAa;IACb,YAAY;IACZ,YAAY;IACZ,SAAS;IACT,aAAa;IACb,aAAa;IACb,iBAAiB;IACjB,iBAAiB;IACjB,sBAAsB;IACtB,kBAAkB;CACnB,CAAC;AAEF,MAAM,qBAAqB,GAAG;IAC5B,8CAA8C;IAC9C,6BAA6B;IAC7B,uBAAuB;IACvB,8CAA8C;IAC9C,+BAA+B;IAC/B,iCAAiC;IACjC,6EAA6E;IAC7E,qCAAqC;IACrC,8BAA8B;IAC9B,0BAA0B;CAC3B,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,sBAAsB,CAAC;IAChC,CAAC;IAED,IAAI,SAAS,GAAG,OAAO,CAAC;IAExB,+EAA+E;IAC/E,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,8BAA8B,EAAE,iBAAiB,CAAC,CAAC;IACjF,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,oCAAoC,EAAE,iBAAiB,CAAC,CAAC;IAEvF,kEAAkE;IAClE,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,+DAA+D,EAAE,iBAAiB,CAAC,CAAC;IAElH,kCAAkC;IAClC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,iEAAiE,EAAE,gBAAgB,CAAC,CAAC;IAEnH,iCAAiC;IACjC,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;QAC5C,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAAe;IAC3D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;QAC9C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;QAC/B,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EAAE,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC;YAC9C,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAE3F,IAAI,CAAC,UAAU,IAAI,6BAA6B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7D,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,sBAAsB;YACnC,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAEnD,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,SAAS;YACtB,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IAED,IAAI,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAChD,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,WAAW,EAAE,SAAS;YACtB,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IAED,IAAI,qDAAqD,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1E,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,SAAS;YACtB,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,SAAS;QACtB,UAAU,EAAE,KAAK;KAClB,CAAC;AACJ,CAAC"}

package/dist/core/sync/bundle-auth.d.ts

@@ -0,0 +1,23 @@
+import { SyncBundle, SyncChangeItem } from './types.js';
+export declare const SYNC_BUNDLE_MAX_CHANGES = 500;
+export declare const SYNC_BUNDLE_MAX_BYTES: number;
+export declare const SYNC_BUNDLE_MAX_ITEM_BYTES: number;
+export declare const SYNC_HLC_MAX_FUTURE_SKEW_MS: number;
+export declare const SYNC_ALLOWED_ENTITY_TYPES: ReadonlySet<string>;
+export declare const SYNC_ALLOWED_OPERATIONS: ReadonlySet<string>;
+export declare const SYNC_MIN_KEY_LENGTH = 16;
+export declare function getSyncSigningKey(): string | undefined;
+export declare function isSyncKeyMisconfigured(): boolean;
+export declare function isStrictSignatureMode(): boolean;
+export declare function isUnsignedSyncAllowed(): boolean;
+export declare function isSignatureRequired(): boolean;
+export declare function canonicalBundlePayload(bundle: SyncBundle): string;
+export declare function signSyncBundle(bundle: SyncBundle, key?: string): string;
+export declare function verifySyncBundleSignature(bundle: SyncBundle, key?: string): boolean;
+export interface SyncItemValidation {
+    ok: boolean;
+    reason?: string;
+}
+export declare function validateSyncChangeItem(item: SyncChangeItem, nowMs?: number): SyncItemValidation;
+export declare function validateSyncBundleStructure(bundle: SyncBundle, _nowMs?: number): SyncItemValidation;
+//# sourceMappingURL=bundle-auth.d.ts.map

package/dist/core/sync/bundle-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-auth.d.ts","sourceRoot":"","sources":["../../../src/core/sync/bundle-auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAiC,MAAM,YAAY,CAAC;AAEvF,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C,eAAO,MAAM,qBAAqB,QAAc,CAAC;AACjD,eAAO,MAAM,0BAA0B,QAAa,CAAC;AACrD,eAAO,MAAM,2BAA2B,QAAgB,CAAC;AAEzD,eAAO,MAAM,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAOxD,CAAC;AAEH,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAItD,CAAC;AAEH,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAEtC,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,SAAS,CAMtD;AAED,wBAAgB,sBAAsB,IAAI,OAAO,CAGhD;AAED,wBAAgB,qBAAqB,IAAI,OAAO,CAE/C;AAED,wBAAgB,qBAAqB,IAAI,OAAO,CAE/C;AAED,wBAAgB,mBAAmB,IAAI,OAAO,CAQ7C;AAcD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAQjE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAMvE;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAqBnF;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,SAAa,GAAG,kBAAkB,CAwDnG;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,SAAa,GAAG,kBAAkB,CAgCvG"}

package/dist/core/sync/bundle-auth.js

@@ -0,0 +1,184 @@
+import crypto from 'node:crypto';
+export const SYNC_BUNDLE_MAX_CHANGES = 500;
+export const SYNC_BUNDLE_MAX_BYTES = 1024 * 1024;
+export const SYNC_BUNDLE_MAX_ITEM_BYTES = 256 * 1024;
+export const SYNC_HLC_MAX_FUTURE_SKEW_MS = 5 * 60 * 1000;
+export const SYNC_ALLOWED_ENTITY_TYPES = new Set([
+    'project',
+    'lineage',
+    'node',
+    'todo',
+    'knowledge',
+    'knowledge_confirmation',
+]);
+export const SYNC_ALLOWED_OPERATIONS = new Set([
+    'UPSERT',
+    'TOMBSTONE',
+    'CONFIRMATION',
+]);
+export const SYNC_MIN_KEY_LENGTH = 16;
+export function getSyncSigningKey() {
+    const raw = process.env.PATHS_SYNC_KEY;
+    if (!raw || raw.length < SYNC_MIN_KEY_LENGTH) {
+        return undefined;
+    }
+    return raw;
+}
+export function isSyncKeyMisconfigured() {
+    const raw = process.env.PATHS_SYNC_KEY;
+    return !!raw && raw.length < SYNC_MIN_KEY_LENGTH;
+}
+export function isStrictSignatureMode() {
+    return process.env.PATHS_SYNC_REQUIRE_SIGNATURE === '1';
+}
+export function isUnsignedSyncAllowed() {
+    return process.env.PATHS_SYNC_ALLOW_UNSIGNED === '1';
+}
+export function isSignatureRequired() {
+    if (isStrictSignatureMode()) {
+        return true;
+    }
+    if (isUnsignedSyncAllowed()) {
+        return false;
+    }
+    return !!getSyncSigningKey();
+}
+function stableStringify(value) {
+    if (value === null || typeof value !== 'object') {
+        return JSON.stringify(value) ?? 'null';
+    }
+    if (Array.isArray(value)) {
+        return `[${value.map((v) => stableStringify(v)).join(',')}]`;
+    }
+    const record = value;
+    const keys = Object.keys(record).sort();
+    return `{${keys.map((k) => `${JSON.stringify(k)}:${stableStringify(record[k])}`).join(',')}}`;
+}
+export function canonicalBundlePayload(bundle) {
+    return stableStringify({
+        version: bundle.version,
+        projectKey: bundle.projectKey,
+        originDeviceId: bundle.originDeviceId,
+        exportedAt: bundle.exportedAt,
+        changes: bundle.changes,
+    });
+}
+export function signSyncBundle(bundle, key) {
+    const signingKey = key ?? getSyncSigningKey();
+    if (!signingKey) {
+        throw new Error('Cannot sign sync bundle: PATHS_SYNC_KEY is not configured.');
+    }
+    return crypto.createHmac('sha256', signingKey).update(canonicalBundlePayload(bundle), 'utf-8').digest('hex');
+}
+export function verifySyncBundleSignature(bundle, key) {
+    const signingKey = key ?? getSyncSigningKey();
+    if (!signingKey || !bundle.signature) {
+        return false;
+    }
+    const expected = signSyncBundle({
+        version: bundle.version,
+        projectKey: bundle.projectKey,
+        originDeviceId: bundle.originDeviceId,
+        exportedAt: bundle.exportedAt,
+        changes: bundle.changes,
+    }, signingKey);
+    const a = Buffer.from(expected, 'utf-8');
+    const b = Buffer.from(bundle.signature, 'utf-8');
+    if (a.length !== b.length) {
+        return false;
+    }
+    return crypto.timingSafeEqual(a, b);
+}
+export function validateSyncChangeItem(item, nowMs = Date.now()) {
+    if (!item || typeof item !== 'object') {
+        return { ok: false, reason: 'Change item must be an object.' };
+    }
+    if (typeof item.originDeviceId !== 'string' || !item.originDeviceId.trim()) {
+        return { ok: false, reason: 'originDeviceId must be a non-empty string.' };
+    }
+    if (!Number.isInteger(item.originSequence) || item.originSequence <= 0) {
+        return { ok: false, reason: 'originSequence must be a positive integer.' };
+    }
+    if (!SYNC_ALLOWED_ENTITY_TYPES.has(item.entityType)) {
+        return { ok: false, reason: `Unsupported entityType '${String(item.entityType)}'.` };
+    }
+    if (!SYNC_ALLOWED_OPERATIONS.has(item.operation)) {
+        return { ok: false, reason: `Unsupported operation '${String(item.operation)}'.` };
+    }
+    if (typeof item.entityUuid !== 'string' || !item.entityUuid.trim() || item.entityUuid.length > 256) {
+        return { ok: false, reason: 'entityUuid must be a non-empty string (max 256 chars).' };
+    }
+    if (typeof item.payload !== 'string') {
+        return { ok: false, reason: 'payload must be a JSON string.' };
+    }
+    if (Buffer.byteLength(item.payload, 'utf-8') > SYNC_BUNDLE_MAX_ITEM_BYTES) {
+        return { ok: false, reason: 'payload exceeds per-item size limit.' };
+    }
+    try {
+        JSON.parse(item.payload);
+    }
+    catch {
+        return { ok: false, reason: 'payload must be valid JSON.' };
+    }
+    if (typeof item.hlcTimestamp !== 'string' || !item.hlcTimestamp.includes(':')) {
+        return { ok: false, reason: 'hlcTimestamp must be a valid HLC string.' };
+    }
+    const parts = item.hlcTimestamp.split(':');
+    if (parts.length < 3) {
+        return { ok: false, reason: 'hlcTimestamp must have physical:logical:deviceId.' };
+    }
+    const physical = Number(parts[0]);
+    const logical = Number(parts[1]);
+    const deviceId = parts.slice(2).join(':');
+    if (!Number.isFinite(physical) || physical < 0) {
+        return { ok: false, reason: 'HLC physical time must be a non-negative number.' };
+    }
+    if (!Number.isInteger(logical) || logical < 0 || logical > 1000000) {
+        return { ok: false, reason: 'HLC logical counter out of range.' };
+    }
+    if (!deviceId.trim()) {
+        return { ok: false, reason: 'HLC deviceId must be non-empty.' };
+    }
+    if (physical > nowMs + SYNC_HLC_MAX_FUTURE_SKEW_MS) {
+        return { ok: false, reason: 'HLC physical time is too far in the future.' };
+    }
+    if (typeof item.createdAt !== 'string' || Number.isNaN(Date.parse(item.createdAt))) {
+        return { ok: false, reason: 'createdAt must be a valid ISO date.' };
+    }
+    return { ok: true };
+}
+export function validateSyncBundleStructure(bundle, _nowMs = Date.now()) {
+    if (!bundle || typeof bundle !== 'object') {
+        return { ok: false, reason: 'Bundle must be an object.' };
+    }
+    if (bundle.version !== 1) {
+        return { ok: false, reason: `Unsupported bundle version '${String(bundle.version)}'.` };
+    }
+    if (typeof bundle.projectKey !== 'string' || !bundle.projectKey.trim() || bundle.projectKey.length > 512) {
+        return { ok: false, reason: 'projectKey must be a non-empty string (max 512 chars).' };
+    }
+    if (typeof bundle.originDeviceId !== 'string' || !bundle.originDeviceId.trim()) {
+        return { ok: false, reason: 'originDeviceId must be a non-empty string.' };
+    }
+    if (typeof bundle.exportedAt !== 'string' || Number.isNaN(Date.parse(bundle.exportedAt))) {
+        return { ok: false, reason: 'exportedAt must be a valid ISO date.' };
+    }
+    if (!Array.isArray(bundle.changes)) {
+        return { ok: false, reason: 'changes must be an array.' };
+    }
+    if (bundle.changes.length > SYNC_BUNDLE_MAX_CHANGES) {
+        return { ok: false, reason: `Bundle exceeds max ${SYNC_BUNDLE_MAX_CHANGES} changes.` };
+    }
+    let totalBytes = 0;
+    try {
+        totalBytes = Buffer.byteLength(JSON.stringify(bundle), 'utf-8');
+    }
+    catch {
+        return { ok: false, reason: 'Bundle is not JSON-serializable.' };
+    }
+    if (totalBytes > SYNC_BUNDLE_MAX_BYTES) {
+        return { ok: false, reason: 'Bundle exceeds max 1MB size.' };
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=bundle-auth.js.map

package/dist/core/sync/bundle-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-auth.js","sourceRoot":"","sources":["../../../src/core/sync/bundle-auth.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAGjC,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAC3C,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,GAAG,IAAI,CAAC;AACjD,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,GAAG,IAAI,CAAC;AACrD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzD,MAAM,CAAC,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC;IACpE,SAAS;IACT,SAAS;IACT,MAAM;IACN,MAAM;IACN,WAAW;IACX,wBAAwB;CACzB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IAClE,QAAQ;IACR,WAAW;IACX,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAEtC,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACvC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QAC7C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACvC,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,mBAAmB,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,OAAO,CAAC,GAAG,CAAC,4BAA4B,KAAK,GAAG,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,IAAI,qBAAqB,EAAE,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,qBAAqB,EAAE,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,CAAC,iBAAiB,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACzC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAkB;IACvD,OAAO,eAAe,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAkB,EAAE,GAAY;IAC7D,MAAM,UAAU,GAAG,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAC9C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/G,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAkB,EAAE,GAAY;IACxE,MAAM,UAAU,GAAG,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAC9C,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAC7B;QACE,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;KACV,EACf,UAAU,CACX,CAAC;IACF,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACtC,CAAC;AAOD,MAAM,UAAU,sBAAsB,CAAC,IAAoB,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;IAC7E,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,cAAc,IAAI,CAAC,EAAE,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,UAA4B,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,SAA0B,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACnG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,0BAA0B,EAAE,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IACvE,CAAC;IACD,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;IAC3E,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAAC;IACpF,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,OAAO,EAAE,CAAC;QACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,QAAQ,GAAG,KAAK,GAAG,2BAA2B,EAAE,CAAC;QACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;IAC9E,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACnF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAkB,EAAE,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE;IACjF,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAC5D,CAAC;IACD,IAAK,MAAM,CAAC,OAAkB,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACzG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;IAC7E,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACzF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,uBAAuB,WAAW,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,UAAU,GAAG,qBAAqB,EAAE,CAAC;QACvC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/core/sync/device.d.ts

@@ -0,0 +1,8 @@
+import { Store } from '../db/store.js';
+import { InstallationIdentity } from '../types/installation-identity.js';
+export declare class DeviceEngine {
+    static getOrCreateDeviceId(store: Store, deviceName?: string | null): string;
+    static allocateNextSequence(store: Store, deviceId: string): number;
+    static getIdentity(store: Store, deviceId?: string): InstallationIdentity | undefined;
+}
+//# sourceMappingURL=device.d.ts.map

package/dist/core/sync/device.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device.d.ts","sourceRoot":"","sources":["../../../src/core/sync/device.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAEzE,qBAAa,YAAY;IACvB,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM;IAa5E,MAAM,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM;IAMnE,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS;CAYtF"}

package/dist/core/sync/device.js

@@ -0,0 +1,32 @@
+import crypto from 'node:crypto';
+export class DeviceEngine {
+    static getOrCreateDeviceId(store, deviceName) {
+        return store.transaction(() => {
+            const existing = store.getPrimaryInstallationIdentity();
+            if (existing) {
+                return existing.device_id;
+            }
+            const newDeviceId = crypto.randomUUID();
+            store.createInstallationIdentity(newDeviceId, deviceName ?? null);
+            return newDeviceId;
+        });
+    }
+    static allocateNextSequence(store, deviceId) {
+        return store.transaction(() => {
+            return store.allocateDeviceSequence(deviceId);
+        });
+    }
+    static getIdentity(store, deviceId) {
+        const row = store.getInstallationIdentity(deviceId);
+        if (!row) {
+            return undefined;
+        }
+        return {
+            deviceId: row.device_id,
+            deviceName: row.device_name,
+            lastSequence: row.last_sequence,
+            createdAt: row.created_at,
+        };
+    }
+}
+//# sourceMappingURL=device.js.map

package/dist/core/sync/device.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device.js","sourceRoot":"","sources":["../../../src/core/sync/device.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAIjC,MAAM,OAAO,YAAY;IACvB,MAAM,CAAC,mBAAmB,CAAC,KAAY,EAAE,UAA0B;QACjE,OAAO,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;YAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,8BAA8B,EAAE,CAAC;YACxD,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,QAAQ,CAAC,SAAS,CAAC;YAC5B,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YACxC,KAAK,CAAC,0BAA0B,CAAC,WAAW,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC;YAClE,OAAO,WAAW,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,oBAAoB,CAAC,KAAY,EAAE,QAAgB;QACxD,OAAO,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;YAC5B,OAAO,KAAK,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,KAAY,EAAE,QAAiB;QAChD,MAAM,GAAG,GAAG,KAAK,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,GAAG,CAAC,SAAS;YACvB,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC;IACJ,CAAC;CACF"}

package/dist/core/sync/hlc.d.ts

@@ -0,0 +1,12 @@
+import { Store } from '../db/store.js';
+import { HlcTimestamp } from '../types/hlc.js';
+export declare function compareLexical(a: string, b: string): number;
+export declare function compareHlc(a: HlcTimestamp, b: HlcTimestamp): number;
+export declare function formatHlc(hlc: HlcTimestamp): string;
+export declare function parseHlc(str: string): HlcTimestamp;
+export declare class HlcEngine {
+    static next(store: Store, deviceId: string, nowMs?: number): HlcTimestamp;
+    static observe(store: Store, deviceId: string, remote: HlcTimestamp, nowMs?: number): HlcTimestamp;
+    private static calculateObservedCounter;
+}
+//# sourceMappingURL=hlc.d.ts.map

package/dist/core/sync/hlc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hlc.d.ts","sourceRoot":"","sources":["../../../src/core/sync/hlc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAQ3D;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,GAAG,MAAM,CAQnE;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,CAEnD;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAclD;AAED,qBAAa,SAAS;IACpB,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,GAAE,MAAmB,GAAG,YAAY;IAoBrF,MAAM,CAAC,OAAO,CACZ,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,YAAY,EACpB,KAAK,GAAE,MAAmB,GACzB,YAAY;IAuBf,OAAO,CAAC,MAAM,CAAC,wBAAwB;CAkBxC"}

package/dist/core/sync/hlc.js

@@ -0,0 +1,83 @@
+export function compareLexical(a, b) {
+    if (a < b) {
+        return -1;
+    }
+    if (a > b) {
+        return 1;
+    }
+    return 0;
+}
+export function compareHlc(a, b) {
+    if (a.physicalTimeMs !== b.physicalTimeMs) {
+        return a.physicalTimeMs - b.physicalTimeMs;
+    }
+    if (a.logicalCounter !== b.logicalCounter) {
+        return a.logicalCounter - b.logicalCounter;
+    }
+    return compareLexical(a.deviceId, b.deviceId);
+}
+export function formatHlc(hlc) {
+    return `${hlc.physicalTimeMs}:${hlc.logicalCounter}:${hlc.deviceId}`;
+}
+export function parseHlc(str) {
+    const parts = str.split(':');
+    if (parts.length < 3) {
+        throw new Error(`Invalid HLC timestamp string: "${str}"`);
+    }
+    const physicalTimeMs = Number(parts[0]);
+    const logicalCounter = Number(parts[1]);
+    const deviceId = parts.slice(2).join(':');
+    if (Number.isNaN(physicalTimeMs) || Number.isNaN(logicalCounter)) {
+        throw new Error(`Invalid numeric component in HLC timestamp: "${str}"`);
+    }
+    return { physicalTimeMs, logicalCounter, deviceId };
+}
+export class HlcEngine {
+    static next(store, deviceId, nowMs = Date.now()) {
+        return store.transaction(() => {
+            const current = store.getHlcState(deviceId);
+            const lCurrent = current?.physical_time_ms ?? 0;
+            const cCurrent = current?.logical_counter ?? 0;
+            const lNew = Math.max(lCurrent, nowMs);
+            const cNew = lNew === lCurrent ? cCurrent + 1 : 0;
+            const updatedAt = new Date(nowMs).toISOString();
+            store.upsertHlcState(deviceId, lNew, cNew, updatedAt);
+            return {
+                physicalTimeMs: lNew,
+                logicalCounter: cNew,
+                deviceId,
+            };
+        });
+    }
+    static observe(store, deviceId, remote, nowMs = Date.now()) {
+        return store.transaction(() => {
+            const current = store.getHlcState(deviceId);
+            const lCurrent = current?.physical_time_ms ?? 0;
+            const cCurrent = current?.logical_counter ?? 0;
+            const lRemote = remote.physicalTimeMs;
+            const cRemote = remote.logicalCounter;
+            const lNew = Math.max(lCurrent, lRemote, nowMs);
+            const cNew = this.calculateObservedCounter(lNew, lCurrent, cCurrent, lRemote, cRemote);
+            const updatedAt = new Date(nowMs).toISOString();
+            store.upsertHlcState(deviceId, lNew, cNew, updatedAt);
+            return {
+                physicalTimeMs: lNew,
+                logicalCounter: cNew,
+                deviceId,
+            };
+        });
+    }
+    static calculateObservedCounter(lNew, lCurrent, cCurrent, lRemote, cRemote) {
+        if (lNew === lCurrent && lNew === lRemote) {
+            return Math.max(cCurrent, cRemote) + 1;
+        }
+        if (lNew === lRemote) {
+            return cRemote + 1;
+        }
+        if (lNew === lCurrent) {
+            return cCurrent + 1;
+        }
+        return 0;
+    }
+}
+//# sourceMappingURL=hlc.js.map

package/dist/core/sync/hlc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hlc.js","sourceRoot":"","sources":["../../../src/core/sync/hlc.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,cAAc,CAAC,CAAS,EAAE,CAAS;IACjD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACV,OAAO,CAAC,CAAC,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACV,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,CAAe,EAAE,CAAe;IACzD,IAAI,CAAC,CAAC,cAAc,KAAK,CAAC,CAAC,cAAc,EAAE,CAAC;QAC1C,OAAO,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,CAAC,cAAc,KAAK,CAAC,CAAC,cAAc,EAAE,CAAC;QAC1C,OAAO,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC;IAC7C,CAAC;IACD,OAAO,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAiB;IACzC,OAAO,GAAG,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,GAAG,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE1C,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,gDAAgD,GAAG,GAAG,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,OAAO,SAAS;IACpB,MAAM,CAAC,IAAI,CAAC,KAAY,EAAE,QAAgB,EAAE,QAAgB,IAAI,CAAC,GAAG,EAAE;QACpE,OAAO,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;YAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAG,OAAO,EAAE,gBAAgB,IAAI,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,OAAO,EAAE,eAAe,IAAI,CAAC,CAAC;YAE/C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAElD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YAChD,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YAEtD,OAAO;gBACL,cAAc,EAAE,IAAI;gBACpB,cAAc,EAAE,IAAI;gBACpB,QAAQ;aACT,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,OAAO,CACZ,KAAY,EACZ,QAAgB,EAChB,MAAoB,EACpB,QAAgB,IAAI,CAAC,GAAG,EAAE;QAE1B,OAAO,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;YAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAG,OAAO,EAAE,gBAAgB,IAAI,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,OAAO,EAAE,eAAe,IAAI,CAAC,CAAC;YAE/C,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC;YACtC,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC;YAEtC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAEvF,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YAChD,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YAEtD,OAAO;gBACL,cAAc,EAAE,IAAI;gBACpB,cAAc,EAAE,IAAI;gBACpB,QAAQ;aACT,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,wBAAwB,CACrC,IAAY,EACZ,QAAgB,EAChB,QAAgB,EAChB,OAAe,EACf,OAAe;QAEf,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO,OAAO,GAAG,CAAC,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,QAAQ,GAAG,CAAC,CAAC;QACtB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;CACF"}

package/dist/core/sync/index.d.ts

@@ -0,0 +1,6 @@
+export { HlcEngine, compareHlc, compareLexical, formatHlc, parseHlc, } from './hlc.js';
+export { DeviceEngine, } from './device.js';
+export { SyncService, getTableNameForEntityType, } from './sync.service.js';
+export { signSyncBundle, verifySyncBundleSignature, validateSyncBundleStructure, validateSyncChangeItem, getSyncSigningKey, isStrictSignatureMode, isSignatureRequired, isSyncKeyMisconfigured, isUnsignedSyncAllowed, SYNC_MIN_KEY_LENGTH, SYNC_BUNDLE_MAX_CHANGES, SYNC_BUNDLE_MAX_BYTES, } from './bundle-auth.js';
+export type { ProjectSyncPayload, LineageSyncPayload, NodeSyncPayload, TodoSyncPayload, KnowledgeSyncPayload, KnowledgeConfirmationSyncPayload, SyncEntityType, SyncOperation, SyncChangeItem, SyncCursor, SyncBundle, SyncDisposition, SyncItemResult, SyncResult, SyncStatus, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/sync/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/sync/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,UAAU,EACV,cAAc,EACd,SAAS,EACT,QAAQ,GACT,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,YAAY,GACb,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,WAAW,EACX,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,cAAc,EACd,yBAAyB,EACzB,2BAA2B,EAC3B,sBAAsB,EACtB,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,gCAAgC,EAChC,cAAc,EACd,aAAa,EACb,cAAc,EACd,UAAU,EACV,UAAU,EACV,eAAe,EACf,cAAc,EACd,UAAU,EACV,UAAU,GACX,MAAM,YAAY,CAAC"}

package/dist/core/sync/index.js

@@ -0,0 +1,5 @@
+export { HlcEngine, compareHlc, compareLexical, formatHlc, parseHlc, } from './hlc.js';
+export { DeviceEngine, } from './device.js';
+export { SyncService, getTableNameForEntityType, } from './sync.service.js';
+export { signSyncBundle, verifySyncBundleSignature, validateSyncBundleStructure, validateSyncChangeItem, getSyncSigningKey, isStrictSignatureMode, isSignatureRequired, isSyncKeyMisconfigured, isUnsignedSyncAllowed, SYNC_MIN_KEY_LENGTH, SYNC_BUNDLE_MAX_CHANGES, SYNC_BUNDLE_MAX_BYTES, } from './bundle-auth.js';
+//# sourceMappingURL=index.js.map

package/dist/core/sync/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/sync/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,UAAU,EACV,cAAc,EACd,SAAS,EACT,QAAQ,GACT,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,YAAY,GACb,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,WAAW,EACX,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,cAAc,EACd,yBAAyB,EACzB,2BAA2B,EAC3B,sBAAsB,EACtB,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC"}

package/dist/core/sync/sync.service.d.ts

@@ -0,0 +1,29 @@
+import { Store } from '../db/store.js';
+import { SyncRepository } from '../db/sync-repository.js';
+import { HlcTimestamp } from '../types/hlc.js';
+import { SyncChange } from '../types/sync-change.js';
+import { SyncBundle, SyncCursor, SyncEntityType, SyncOperation, SyncResult, SyncStatus } from './types.js';
+export declare function getTableNameForEntityType(entityType: SyncEntityType): string;
+export declare class SyncService {
+    private readonly store;
+    private readonly syncRepo;
+    constructor(store: Store, syncRepo: SyncRepository);
+    recordLocalChange<T>(projectKey: string, entityType: SyncEntityType, entityUuid: string, operation: SyncOperation, payload: T): {
+        change: SyncChange;
+        hlc: HlcTimestamp;
+    };
+    exportSyncBundle(projectKey: string, cursor?: SyncCursor): SyncBundle;
+    applySyncBundle(bundle: SyncBundle): SyncResult;
+    private applySingleChangeItem;
+    private resolveOptionalDependency;
+    private applyProjectMutation;
+    private applyLineageMutation;
+    private applyNodeMutation;
+    private applyTodoMutation;
+    private applyKnowledgeMutation;
+    private applyConfirmationMutation;
+    private resolveAndApplyMutation;
+    retryDeferredChanges(projectKey: string): number;
+    getSyncStatus(projectKey: string): SyncStatus;
+}
+//# sourceMappingURL=sync.service.d.ts.map

package/dist/core/sync/sync.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.service.d.ts","sourceRoot":"","sources":["../../../src/core/sync/sync.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAc1D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EACL,UAAU,EAEV,UAAU,EACV,cAAc,EAEd,aAAa,EACb,UAAU,EACV,UAAU,EAOX,MAAM,YAAY,CAAC;AAEpB,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,cAAc,GAAG,MAAM,CAe5E;AAmCD,qBAAa,WAAW;IAEpB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBADR,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,cAAc;IAG3C,iBAAiB,CAAC,CAAC,EACjB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,cAAc,EAC1B,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,aAAa,EACxB,OAAO,EAAE,CAAC,GACT;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,YAAY,CAAA;KAAE;IAgD5C,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,GAAG,UAAU;IA0CrE,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU;IA8F/C,OAAO,CAAC,qBAAqB;IAgH7B,OAAO,CAAC,yBAAyB;IAejC,OAAO,CAAC,oBAAoB;IAe5B,OAAO,CAAC,oBAAoB;IAsB5B,OAAO,CAAC,iBAAiB;IA4BzB,OAAO,CAAC,iBAAiB;IAkCzB,OAAO,CAAC,sBAAsB;IAmD9B,OAAO,CAAC,yBAAyB;IAyBjC,OAAO,CAAC,uBAAuB;IA2B/B,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;IA8ChD,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU;CAa9C"}