@agent-teams/repository-mutation 0.0.0

package/dist/transaction-coordination/adapters/node/node-operation-lock.js

@@ -0,0 +1,359 @@
+import { randomUUID } from "node:crypto";
+import { constants } from "node:fs";
+import { mkdir, open, rename, unlink } from "node:fs/promises";
+import { hostname } from "node:os";
+import { join } from "node:path";
+import { TextDecoder } from "node:util";
+import { RepositoryMutationError } from "../../../errors.js";
+import { LOCAL_OPERATION_LOCK } from "../../../state-contract.js";
+import { parseStrictJson } from "../../../strict-json.js";
+import { readBoundedRegularFile } from "../../../repository-mutation/adapters/node/node-bounded-regular-file.js";
+import { assertTerminalEvidenceDirectory, ensureTerminalEvidenceDirectory } from "../../../repository-mutation/adapters/node/node-terminal-evidence-directory.js";
+import { ensureMutationStateDirectory, syncMutationStateDirectory } from "./node-state-directory.js";
+const maximumLockBytes = 8 * 1024;
+const strictUtf8 = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true });
+const terminalEvidenceDirectoryName = "foundation-operation-lock.completed-evidence";
+function isErrorCode(error, code) {
+    return (error instanceof Error &&
+        "code" in error &&
+        error.code === code);
+}
+function evidenceBytes(evidence) {
+    return Buffer.from(`${JSON.stringify(evidence)}\n`, "utf8");
+}
+function parseEvidence(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        throw new Error("Foundation operation lock evidence is invalid.");
+    }
+    const candidate = value;
+    const tokenIsValid = typeof candidate["token"] === "string" &&
+        /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/u.test(candidate["token"]);
+    if (candidate["schemaVersion"] === 1 &&
+        candidate["kind"] === "transaction-barrier" &&
+        tokenIsValid &&
+        Object.keys(candidate).toSorted().join(",") === "kind,schemaVersion,token") {
+        return {
+            kind: "transaction-barrier",
+            schemaVersion: 1,
+            token: candidate["token"]
+        };
+    }
+    if (candidate["schemaVersion"] !== 1 ||
+        candidate["kind"] !== "active" ||
+        !tokenIsValid ||
+        typeof candidate["host"] !== "string" ||
+        candidate["host"].length === 0 ||
+        !Number.isSafeInteger(candidate["pid"]) ||
+        candidate["pid"] <= 0 ||
+        Object.keys(candidate).toSorted().join(",") !==
+            "host,kind,pid,schemaVersion,token") {
+        throw new Error("Foundation operation lock evidence is invalid.");
+    }
+    return {
+        host: candidate["host"],
+        kind: "active",
+        pid: candidate["pid"],
+        schemaVersion: 1,
+        token: candidate["token"]
+    };
+}
+async function readLock(path) {
+    const record = await readBoundedRegularFile(path, maximumLockBytes);
+    if (record.outcome !== "read") {
+        throw new Error("Foundation operation lock must be a stable bounded regular file.");
+    }
+    return {
+        evidence: parseEvidence(parseStrictJson(strictUtf8.decode(record.bytes))),
+        identity: record.identity
+    };
+}
+function identitiesEqual(left, right) {
+    return (left.birthtimeNs === right.birthtimeNs &&
+        left.dev === right.dev &&
+        left.ino === right.ino);
+}
+function evidenceEqual(left, right) {
+    if (left.kind !== right.kind || left.token !== right.token) {
+        return false;
+    }
+    return left.kind === "transaction-barrier" ||
+        right.kind === "transaction-barrier"
+        ? left.kind === right.kind
+        : left.host === right.host && left.pid === right.pid;
+}
+async function readHandleEvidence(handle, expectedIdentity) {
+    const before = await handle.stat({ bigint: true });
+    if (!before.isFile() ||
+        before.size > BigInt(maximumLockBytes) ||
+        !identitiesEqual({
+            birthtimeNs: before.birthtimeNs,
+            dev: before.dev,
+            ino: before.ino
+        }, expectedIdentity)) {
+        throw new Error("Foundation operation lock identity changed before rewrite.");
+    }
+    const bytes = Buffer.alloc(Number(before.size));
+    let offset = 0;
+    while (offset < bytes.byteLength) {
+        const { bytesRead } = await handle.read(bytes, offset, bytes.byteLength - offset, offset);
+        if (bytesRead === 0) {
+            throw new Error("Foundation operation lock was truncated before rewrite.");
+        }
+        offset += bytesRead;
+    }
+    const after = await handle.stat({ bigint: true });
+    if (before.birthtimeNs !== after.birthtimeNs ||
+        before.ctimeNs !== after.ctimeNs ||
+        before.dev !== after.dev ||
+        before.ino !== after.ino ||
+        before.mtimeNs !== after.mtimeNs ||
+        before.size !== after.size) {
+        throw new Error("Foundation operation lock changed during rewrite verification.");
+    }
+    return parseEvidence(parseStrictJson(strictUtf8.decode(bytes)));
+}
+async function rewriteOwnedLockEvidence(lockPath, expected, replacement) {
+    const noFollow = process.platform === "win32" ? 0 : constants.O_NOFOLLOW;
+    const handle = await open(lockPath, constants.O_RDWR | noFollow);
+    try {
+        const current = await readHandleEvidence(handle, expected.identity);
+        if (!evidenceEqual(current, expected.evidence)) {
+            throw new Error("Foundation operation lock ownership changed before rewrite.");
+        }
+        const bytes = evidenceBytes(replacement);
+        await handle.truncate(0);
+        let offset = 0;
+        while (offset < bytes.byteLength) {
+            const { bytesWritten } = await handle.write(bytes, offset, bytes.byteLength - offset, offset);
+            if (bytesWritten === 0) {
+                throw new Error("Foundation operation lock rewrite made no progress.");
+            }
+            offset += bytesWritten;
+        }
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+    const observed = await readLock(lockPath);
+    if (!evidenceEqual(observed.evidence, replacement) ||
+        !identitiesEqual(observed.identity, expected.identity)) {
+        throw new Error("Foundation operation lock rewrite was not published.");
+    }
+    return observed.identity;
+}
+function activeOwnerIsAlive(owner) {
+    if (owner.host !== hostname()) {
+        return undefined;
+    }
+    try {
+        process.kill(owner.pid, 0);
+        return true;
+    }
+    catch (error) {
+        return isErrorCode(error, "ESRCH") ? false : undefined;
+    }
+}
+async function createOwnedLock(directory, lockPath) {
+    const evidence = {
+        host: hostname(),
+        kind: "active",
+        pid: process.pid,
+        schemaVersion: 1,
+        token: randomUUID()
+    };
+    const handle = await open(lockPath, "wx", 0o600);
+    try {
+        await handle.writeFile(evidenceBytes(evidence));
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+    await syncMutationStateDirectory(directory);
+    const observed = await readLock(lockPath);
+    if (observed.evidence.kind !== "active" ||
+        observed.evidence.token !== evidence.token) {
+        throw new Error("Foundation operation lock ownership was not published.");
+    }
+    return { evidence, identity: observed.identity };
+}
+async function takeoverLock(directory, lockPath) {
+    const expected = await readLock(lockPath);
+    if (expected.evidence.kind === "active" &&
+        activeOwnerIsAlive(expected.evidence) !== false) {
+        throw new Error("Foundation operation lock owner is live or cannot be proven dead.");
+    }
+    const evidence = {
+        host: hostname(),
+        kind: "active",
+        pid: process.pid,
+        schemaVersion: 1,
+        token: randomUUID()
+    };
+    const claimPath = `${lockPath}.claim.${expected.evidence.token}`;
+    let claimHeld = false;
+    let ownershipPublished = false;
+    try {
+        try {
+            const claimHandle = await open(claimPath, "wx", 0o600);
+            try {
+                await claimHandle.writeFile(evidenceBytes(evidence));
+                await claimHandle.sync();
+            }
+            finally {
+                await claimHandle.close();
+            }
+            await syncMutationStateDirectory(directory);
+            claimHeld = true;
+        }
+        catch (error) {
+            if (isErrorCode(error, "EEXIST")) {
+                throw new Error("Foundation operation-lock takeover claim requires manual recovery.", { cause: error });
+            }
+            throw error;
+        }
+        const observed = await readLock(lockPath);
+        if (!evidenceEqual(observed.evidence, expected.evidence) ||
+            !identitiesEqual(observed.identity, expected.identity)) {
+            throw new Error("Foundation operation lock changed during takeover.");
+        }
+        const rewrittenIdentity = await rewriteOwnedLockEvidence(lockPath, observed, evidence);
+        await syncMutationStateDirectory(directory);
+        const current = await readLock(lockPath);
+        if (current.evidence.kind !== "active" ||
+            current.evidence.token !== evidence.token ||
+            !identitiesEqual(current.identity, rewrittenIdentity)) {
+            throw new Error("Foundation operation-lock takeover was not published.");
+        }
+        ownershipPublished = true;
+        return { evidence, identity: current.identity };
+    }
+    finally {
+        if (claimHeld) {
+            await unlink(claimPath).catch((error) => {
+                if (!ownershipPublished && !isErrorCode(error, "ENOENT")) {
+                    throw error;
+                }
+            });
+        }
+    }
+}
+async function quarantineObservedLock(directory, lockPath, observed, phase, operations = {}) {
+    const retirementToken = operations.retirementToken?.() ?? randomUUID();
+    const terminalRoot = await ensureTerminalEvidenceDirectory(join(directory, terminalEvidenceDirectoryName));
+    await syncMutationStateDirectory(directory);
+    await assertTerminalEvidenceDirectory(terminalRoot);
+    const quarantineDirectory = join(terminalRoot.path, `${phase}.${retirementToken}`);
+    try {
+        await mkdir(quarantineDirectory, { mode: 0o700 });
+    }
+    catch (error) {
+        throw new Error("Foundation operation lock retirement destination is occupied; all evidence was preserved.", { cause: error });
+    }
+    await syncMutationStateDirectory(terminalRoot.path);
+    const quarantinePath = join(quarantineDirectory, "evidence");
+    await rename(lockPath, quarantinePath);
+    await syncMutationStateDirectory(quarantineDirectory);
+    await syncMutationStateDirectory(directory);
+    if (phase === "released") {
+        await operations.faultInjector?.({
+            path: quarantinePath,
+            phase: "after-release-retirement"
+        });
+    }
+    const quarantined = await readLock(quarantinePath);
+    if (quarantined.evidence.token !== observed.evidence.token ||
+        !identitiesEqual(quarantined.identity, observed.identity)) {
+        throw new Error("Foundation operation lock ownership changed during cleanup.");
+    }
+    return quarantinePath;
+}
+async function retainTransactionBarrier(directory, lockPath, owned) {
+    const current = await readLock(lockPath);
+    if (current.evidence.kind !== "active" ||
+        current.evidence.token !== owned.evidence.token ||
+        !identitiesEqual(current.identity, owned.identity)) {
+        throw new Error("Foundation operation lock ownership changed before retention.");
+    }
+    const barrier = {
+        kind: "transaction-barrier",
+        schemaVersion: 1,
+        token: owned.evidence.token
+    };
+    const beforePublish = await readLock(lockPath);
+    if (beforePublish.evidence.kind !== "active" ||
+        beforePublish.evidence.token !== owned.evidence.token ||
+        !identitiesEqual(beforePublish.identity, owned.identity)) {
+        throw new Error("Foundation operation lock ownership changed during retention.");
+    }
+    await rewriteOwnedLockEvidence(lockPath, beforePublish, barrier);
+    await syncMutationStateDirectory(directory);
+}
+export class NodeMutationOperationLock {
+    #consumerRoot;
+    #operations;
+    constructor(consumerRoot, operations = {}) {
+        this.#consumerRoot = consumerRoot;
+        this.#operations = operations;
+    }
+    async acquire() {
+        const directory = await ensureMutationStateDirectory(this.#consumerRoot);
+        const lockPath = join(directory, LOCAL_OPERATION_LOCK);
+        let owned;
+        try {
+            try {
+                owned = await createOwnedLock(directory, lockPath);
+            }
+            catch (error) {
+                if (!isErrorCode(error, "EEXIST")) {
+                    throw error;
+                }
+                owned = await takeoverLock(directory, lockPath);
+            }
+        }
+        catch (error) {
+            throw new RepositoryMutationError("MUTATION_LEASE_INVALID", "Another repository mutation operation is active or its lock is not safely recoverable.", { cause: error });
+        }
+        let state = "held";
+        let releaseInProgress;
+        return async (options = {}) => {
+            if (state === "released") {
+                return;
+            }
+            releaseInProgress ??= (async () => {
+                try {
+                    if (options.retainTransactionBarrier === true) {
+                        await retainTransactionBarrier(directory, lockPath, owned);
+                        state = "released";
+                        await syncMutationStateDirectory(directory);
+                        return;
+                    }
+                    const current = await readLock(lockPath);
+                    if (current.evidence.kind !== "active" ||
+                        current.evidence.token !== owned.evidence.token ||
+                        !identitiesEqual(current.identity, owned.identity)) {
+                        throw new Error("Foundation operation lock ownership was lost before release.");
+                    }
+                    const quarantinePath = await quarantineObservedLock(directory, lockPath, current, "released", this.#operations);
+                    state = "released";
+                    // The verified evidence is logically retired inside a fresh 0700
+                    // directory. Node has no unlink-by-handle primitive, so retaining it
+                    // avoids a pathname proof-to-delete race with foreign substitution.
+                    void quarantinePath;
+                }
+                catch (error) {
+                    throw new RepositoryMutationError("MUTATION_LEASE_INVALID", "Foundation operation lock could not be released without violating ownership.", { cause: error });
+                }
+            })();
+            try {
+                await releaseInProgress;
+            }
+            catch (error) {
+                releaseInProgress = undefined;
+                throw error;
+            }
+        };
+    }
+}
+//# sourceMappingURL=node-operation-lock.js.map

package/dist/transaction-coordination/adapters/node/node-operation-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-operation-lock.js","sourceRoot":"","sources":["../../../../src/transaction-coordination/adapters/node/node-operation-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAmB,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yEAAyE,CAAC;AACjH,OAAO,EACL,+BAA+B,EAC/B,+BAA+B,EAChC,MAAM,gFAAgF,CAAC;AAExF,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC3B,MAAM,2BAA2B,CAAC;AAMnC,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,CAAC;AAClC,MAAM,UAAU,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9E,MAAM,6BAA6B,GACjC,8CAA8C,CAAC;AA+BjD,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,OAAO,CACL,KAAK,YAAY,KAAK;QACtB,MAAM,IAAI,KAAK;QACd,KAA+B,CAAC,IAAI,KAAK,IAAI,CAC/C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,QAAsB;IAC3C,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,MAAM,YAAY,GAChB,OAAO,SAAS,CAAC,OAAO,CAAC,KAAK,QAAQ;QACtC,wEAAwE,CAAC,IAAI,CAC3E,SAAS,CAAC,OAAO,CAAC,CACnB,CAAC;IACJ,IACE,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC;QAChC,SAAS,CAAC,MAAM,CAAC,KAAK,qBAAqB;QAC3C,YAAY;QACZ,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,0BAA0B,EAC1E,CAAC;QACD,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,aAAa,EAAE,CAAC;YAChB,KAAK,EAAE,SAAS,CAAC,OAAO,CAAW;SACpC,CAAC;IACJ,CAAC;IACD,IACE,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC;QAChC,SAAS,CAAC,MAAM,CAAC,KAAK,QAAQ;QAC9B,CAAC,YAAY;QACb,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,QAAQ;QACrC,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;QAC9B,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,SAAS,CAAC,KAAK,CAAY,IAAI,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;YACzC,mCAAmC,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC;QACvB,IAAI,EAAE,QAAQ;QACd,GAAG,EAAE,SAAS,CAAC,KAAK,CAAW;QAC/B,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,SAAS,CAAC,OAAO,CAAW;KACpC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAIlC,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,aAAa,CAAC,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,IAA0B,EAC1B,KAA2B;IAE3B,OAAO,CACL,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;QACtC,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QACtB,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CACvB,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAkB,EAAE,KAAmB;IAC5D,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,KAAK,qBAAqB;QACxC,KAAK,CAAC,IAAI,KAAK,qBAAqB;QACpC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAC1B,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,MAAkB,EAClB,gBAAsC;IAEtC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,IACE,CAAC,MAAM,CAAC,MAAM,EAAE;QAChB,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,gBAAgB,CAAC;QACtC,CAAC,eAAe,CACd;YACE,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;SAChB,EACD,gBAAgB,CACjB,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CACrC,KAAK,EACL,MAAM,EACN,KAAK,CAAC,UAAU,GAAG,MAAM,EACzB,MAAM,CACP,CAAC;QACF,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,IAAI,SAAS,CAAC;IACtB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,IACE,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;QACxC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAChC,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QACxB,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QACxB,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAChC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAC1B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,aAAa,CAAC,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,QAAgB,EAChB,QAA8C,EAC9C,WAAyB;IAEzB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC;IACzE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpE,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;YACjC,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACzC,KAAK,EACL,MAAM,EACN,KAAK,CAAC,UAAU,GAAG,MAAM,EACzB,MAAM,CACP,CAAC;YACF,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,IAAI,YAAY,CAAC;QACzB,CAAC;QACD,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1C,IACE,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;QAC9C,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EACtD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,CAAC;AAC3B,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAkB;IAC5C,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,SAAiB,EACjB,QAAgB;IAEhB,MAAM,QAAQ,GAAgB;QAC5B,IAAI,EAAE,QAAQ,EAAE;QAChB,IAAI,EAAE,QAAQ;QACd,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,UAAU,EAAE;KACpB,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChD,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,0BAA0B,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1C,IACE,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;QACnC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,SAAiB,EACjB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1C,IACE,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;QACnC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,EAC/C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAgB;QAC5B,IAAI,EAAE,QAAQ,EAAE;QAChB,IAAI,EAAE,QAAQ;QACd,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,UAAU,EAAE;KACpB,CAAC;IACF,MAAM,SAAS,GAAG,GAAG,QAAQ,UAAU,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjE,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,IAAI,CAAC;QACH,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACvD,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACrD,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;YAC3B,CAAC;oBAAS,CAAC;gBACT,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;YACD,MAAM,0BAA0B,CAAC,SAAS,CAAC,CAAC;YAC5C,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CACb,oEAAoE,EACpE,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1C,IACE,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;YACpD,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EACtD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,iBAAiB,GAAG,MAAM,wBAAwB,CACtD,QAAQ,EACR,QAAQ,EACR,QAAQ,CACT,CAAC;QACF,MAAM,0BAA0B,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzC,IACE,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAClC,OAAO,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;YACzC,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EACrD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,kBAAkB,GAAG,IAAI,CAAC;QAC1B,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAC/C,IAAI,CAAC,kBAAkB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;oBACzD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,SAAiB,EACjB,QAAgB,EAChB,QAA8C,EAC9C,KAA+B,EAC/B,UAAU,GAA4B,EAAE;IAExC,MAAM,eAAe,GAAG,UAAU,CAAC,eAAe,EAAE,EAAE,IAAI,UAAU,EAAE,CAAC;IACvE,MAAM,YAAY,GAAG,MAAM,+BAA+B,CACxD,IAAI,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAC/C,CAAC;IACF,MAAM,0BAA0B,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,+BAA+B,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,mBAAmB,GAAG,IAAI,CAC9B,YAAY,CAAC,IAAI,EACjB,GAAG,KAAK,IAAI,eAAe,EAAE,CAC9B,CAAC;IACF,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,2FAA2F,EAC3F,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IACD,MAAM,0BAA0B,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;IAC7D,MAAM,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACvC,MAAM,0BAA0B,CAAC,mBAAmB,CAAC,CAAC;IACtD,MAAM,0BAA0B,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;QACzB,MAAM,UAAU,CAAC,aAAa,EAAE,CAAC;YAC/B,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,0BAA0B;SAClC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,CAAC;IACnD,IACE,WAAW,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,QAAQ,CAAC,KAAK;QACtD,CAAC,eAAe,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EACzD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,SAAiB,EACjB,QAAgB,EAChB,KAAgB;IAEhB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,IACE,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;QAClC,OAAO,CAAC,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,QAAQ,CAAC,KAAK;QAC/C,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAClD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,OAAO,GAAuB;QAClC,IAAI,EAAE,qBAAqB;QAC3B,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;KAC5B,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/C,IACE,aAAa,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;QACxC,aAAa,CAAC,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,QAAQ,CAAC,KAAK;QACrD,CAAC,eAAe,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EACxD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,wBAAwB,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,0BAA0B,CAAC,SAAS,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,OAAO,yBAAyB;IAC3B,aAAa,CAAS;IACtB,WAAW,CAA0B;IAE9C,YAAY,YAAoB,EAAE,UAAU,GAA4B,EAAE;QACxE,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,OAAO;QAGX,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QACvD,IAAI,KAAgB,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;oBAClC,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,KAAK,GAAG,MAAM,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,uBAAuB,CAC/B,wBAAwB,EACxB,wFAAwF,EACxF,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,GAAwB,MAAM,CAAC;QACxC,IAAI,iBAA4C,CAAC;QACjD,OAAO,KAAK,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE;YAC5B,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,iBAAiB,KAAK,CAAC,KAAK,IAAI,EAAE;gBAChC,IAAI,CAAC;oBACH,IAAI,OAAO,CAAC,wBAAwB,KAAK,IAAI,EAAE,CAAC;wBAC9C,MAAM,wBAAwB,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;wBAC3D,KAAK,GAAG,UAAU,CAAC;wBACnB,MAAM,0BAA0B,CAAC,SAAS,CAAC,CAAC;wBAC5C,OAAO;oBACT,CAAC;oBACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACzC,IACE,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;wBAClC,OAAO,CAAC,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,QAAQ,CAAC,KAAK;wBAC/C,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAClD,CAAC;wBACD,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;oBAClF,CAAC;oBACD,MAAM,cAAc,GAAG,MAAM,sBAAsB,CACjD,SAAS,EACT,QAAQ,EACR,OAAO,EACP,UAAU,EACV,IAAI,CAAC,WAAW,CACjB,CAAC;oBACF,KAAK,GAAG,UAAU,CAAC;oBACnB,iEAAiE;oBACjE,qEAAqE;oBACrE,oEAAoE;oBACpE,KAAK,cAAc,CAAC;gBACtB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,uBAAuB,CAC/B,wBAAwB,EACxB,8EAA8E,EAC9E,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;YACL,IAAI,CAAC;gBACH,MAAM,iBAAiB,CAAC;YAC1B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iBAAiB,GAAG,SAAS,CAAC;gBAC9B,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;CACF"}

package/dist/transaction-coordination/adapters/node/node-state-directory.d.ts

@@ -0,0 +1,11 @@
+export declare function ensureMutationStateDirectory(consumerRoot: string): Promise<string>;
+export declare function syncMutationStateDirectory(path: string): Promise<void>;
+/**
+ * Persists recovery-authority metadata without treating unsupported directory
+ * fsync as success. Ordinary local state may use the tolerant operation above;
+ * transaction cleanup markers must fail closed because their durable presence
+ * is what globally excludes another mutation after a crash.
+ */
+export declare function syncMutationStateDirectoryStrictly(path: string): Promise<void>;
+export declare function pruneMutationStateDirectory(consumerRoot: string): Promise<void>;
+//# sourceMappingURL=node-state-directory.d.ts.map

package/dist/transaction-coordination/adapters/node/node-state-directory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-state-directory.d.ts","sourceRoot":"","sources":["../../../../src/transaction-coordination/adapters/node/node-state-directory.ts"],"names":[],"mappings":"AAMA,wBAAsB,4BAA4B,CAChD,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,CAAC,CA2CjB;AAED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA4B5E;AAED;;;;;GAKG;AACH,wBAAsB,kCAAkC,CACtD,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAsB,2BAA2B,CAC/C,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAef"}

package/dist/transaction-coordination/adapters/node/node-state-directory.js

@@ -0,0 +1,91 @@
+import { lstat, mkdir, open, realpath, rmdir } from "node:fs/promises";
+import { join } from "node:path";
+import { RepositoryMutationError } from "../../../errors.js";
+import { LOCAL_STATE_DIRECTORY } from "../../../state-contract.js";
+export async function ensureMutationStateDirectory(consumerRoot) {
+    const directory = join(consumerRoot, LOCAL_STATE_DIRECTORY);
+    try {
+        const entry = await lstat(directory);
+        if (!entry.isDirectory() || entry.isSymbolicLink()) {
+            throw new RepositoryMutationError("MUTATION_STATE_INVALID", "Local foundation state path must be a real consumer-owned directory.");
+        }
+        if ((await realpath(directory)) !== directory) {
+            throw new RepositoryMutationError("MUTATION_STATE_INVALID", "Local foundation state directory resolves outside its expected path.");
+        }
+        return directory;
+    }
+    catch (error) {
+        if (!(error instanceof Error &&
+            "code" in error &&
+            error.code === "ENOENT")) {
+            throw error;
+        }
+    }
+    try {
+        await mkdir(directory);
+    }
+    catch (error) {
+        if (error instanceof Error &&
+            "code" in error &&
+            error.code === "EEXIST") {
+            return ensureMutationStateDirectory(consumerRoot);
+        }
+        throw error;
+    }
+    await syncMutationStateDirectory(consumerRoot);
+    return directory;
+}
+export async function syncMutationStateDirectory(path) {
+    try {
+        const handle = await open(path, "r");
+        try {
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    catch (error) {
+        if (error instanceof Error &&
+            "code" in error &&
+            error.code === "ENOENT") {
+            return;
+        }
+        if (process.platform === "win32" &&
+            error instanceof Error &&
+            "code" in error &&
+            ["EACCES", "EINVAL", "EISDIR", "EPERM"].includes(error.code ?? "")) {
+            return;
+        }
+        throw error;
+    }
+}
+/**
+ * Persists recovery-authority metadata without treating unsupported directory
+ * fsync as success. Ordinary local state may use the tolerant operation above;
+ * transaction cleanup markers must fail closed because their durable presence
+ * is what globally excludes another mutation after a crash.
+ */
+export async function syncMutationStateDirectoryStrictly(path) {
+    const handle = await open(path, "r");
+    try {
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+}
+export async function pruneMutationStateDirectory(consumerRoot) {
+    try {
+        await rmdir(join(consumerRoot, LOCAL_STATE_DIRECTORY));
+    }
+    catch (error) {
+        if (error instanceof Error &&
+            "code" in error &&
+            ["ENOENT", "ENOTEMPTY"].includes(error.code ?? "")) {
+            return;
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=node-state-directory.js.map

package/dist/transaction-coordination/adapters/node/node-state-directory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-state-directory.js","sourceRoot":"","sources":["../../../../src/transaction-coordination/adapters/node/node-state-directory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,YAAoB;IAEpB,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,uBAAuB,CAC/B,wBAAwB,EACxB,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9C,MAAM,IAAI,uBAAuB,CAC/B,wBAAwB,EACxB,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,CAAC,CACC,KAAK,YAAY,KAAK;YACtB,MAAM,IAAI,KAAK;YACd,KAA+B,CAAC,IAAI,KAAK,QAAQ,CACnD,EACD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK,YAAY,KAAK;YACtB,MAAM,IAAI,KAAK;YACd,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAClD,CAAC;YACD,OAAO,4BAA4B,CAAC,YAAY,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,0BAA0B,CAAC,YAAY,CAAC,CAAC;IAC/C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAY;IAC3D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK,YAAY,KAAK;YACtB,MAAM,IAAI,KAAK;YACd,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAClD,CAAC;YACD,OAAO;QACT,CAAC;QACD,IACE,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,KAAK,YAAY,KAAK;YACtB,MAAM,IAAI,KAAK;YACf,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAC7C,KAA+B,CAAC,IAAI,IAAI,EAAE,CAC5C,EACD,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,IAAY;IAEZ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,YAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK,YAAY,KAAK;YACtB,MAAM,IAAI,KAAK;YACf,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAC7B,KAA+B,CAAC,IAAI,IAAI,EAAE,CAC5C,EACD,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/transaction-coordination/mutation-lease.d.ts

@@ -0,0 +1,38 @@
+declare const leaseBrand: unique symbol;
+declare const observationBrand: unique symbol;
+declare const claimBrand: unique symbol;
+export interface MutationLease {
+    readonly [leaseBrand]: true;
+}
+export interface MutationObservation {
+    readonly [observationBrand]: true;
+}
+export interface MutationClaim {
+    readonly [claimBrand]: true;
+}
+export interface MutationArtifactIdentity {
+    readonly name: string;
+    readonly version: string;
+    readonly buildIdentity: `sha256:${string}`;
+}
+export type MutationIntent = {
+    readonly kind: "apply-known-file";
+    readonly planDigest: `sha256:${string}`;
+    readonly ownerArtifact: MutationArtifactIdentity;
+    readonly kernelArtifact: MutationArtifactIdentity;
+} | {
+    readonly kind: "recover-known-file";
+    readonly ownerArtifact: MutationArtifactIdentity;
+    readonly kernelArtifact: MutationArtifactIdentity;
+};
+export declare function acquireMutationLease(root: string): Promise<MutationLease>;
+export declare function observeMutationState(lease: MutationLease): Promise<MutationObservation>;
+export declare function claimMutation(lease: MutationLease, observation: MutationObservation, intent: MutationIntent): Promise<MutationClaim>;
+export declare function consumeMutationClaim(claim: MutationClaim, expectedKind: MutationIntent["kind"]): Promise<string>;
+export declare function mutationClaimIntent(claim: MutationClaim): MutationIntent;
+export declare function retainMutationClaimBarrierOnEvidence(claim: MutationClaim): Promise<void>;
+export declare function retainMutationBarrierOnEvidence(lease: MutationLease): Promise<boolean>;
+export declare function retainMutationBarrier(lease: MutationLease): void;
+export declare function releaseMutationLease(lease: MutationLease): Promise<void>;
+export {};
+//# sourceMappingURL=mutation-lease.d.ts.map

package/dist/transaction-coordination/mutation-lease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutation-lease.d.ts","sourceRoot":"","sources":["../../src/transaction-coordination/mutation-lease.ts"],"names":[],"mappings":"AAaA,OAAO,CAAC,MAAM,UAAU,EAAE,OAAO,MAAM,CAAC;AACxC,OAAO,CAAC,MAAM,gBAAgB,EAAE,OAAO,MAAM,CAAC;AAC9C,OAAO,CAAC,MAAM,UAAU,EAAE,OAAO,MAAM,CAAC;AAExC,MAAM,WAAW,aAAa;IAAG,QAAQ,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;CAAE;AAC9D,MAAM,WAAW,mBAAmB;IAAG,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAA;CAAE;AAC1E,MAAM,WAAW,aAAa;IAAG,QAAQ,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;CAAE;AAE9D,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,UAAU,MAAM,EAAE,CAAC;CAC5C;AAED,MAAM,MAAM,cAAc,GACtB;IACE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,UAAU,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,wBAAwB,CAAC;IACjD,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;CACnD,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,wBAAwB,CAAC;IACjD,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;CACnD,CAAC;AAkQN,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAoB/E;AAED,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAY7F;AAED,wBAAsB,aAAa,CACjC,KAAK,EAAE,aAAa,EACpB,WAAW,EAAE,mBAAmB,EAChC,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,aAAa,CAAC,CA6BxB;AAED,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,aAAa,EACpB,YAAY,EAAE,cAAc,CAAC,MAAM,CAAC,GACnC,OAAO,CAAC,MAAM,CAAC,CAmBjB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,cAAc,CAKxE;AAED,wBAAsB,oCAAoC,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAS9F;AAED,wBAAsB,+BAA+B,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAU5F;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAEhE;AAED,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAI9E"}