@agentunion/fastaun 0.5.35 → 0.5.36

package/dist/client.js

@@ -1415,25 +1415,30 @@ export class AUNClient {
         const observation = { root: manager.root, etag: observedEtag, version: Number(record?.observation_version ?? 0), content_hash: typeof record?.content === 'string' ? ownershipSha256(record.content) : '' };
         const cache = this._ownershipConsensusCache ??= new Map();
         const cached = cache.get(target);
-        if (!force && cached?.result.status === 'consensus' && record?.remote_status !== 'missing'
+        if (cached?.result.status === 'consensus' && cached.observedVersion === observation.version && record?.remote_status !== 'missing'
+            && (!record?.remote_owner_md_sha256 || record.remote_owner_md_sha256 === cached.result.owner_md_sha256)
             && (observedEtag === cached.observedEtag || observedEtag === cached.result.agent_md_etag)
             && (typeof record?.content !== 'string' || ownershipSha256(record.content) === cached.result.agent_md_sha256)) {
             cached.observedEtag = observedEtag;
             return { ...cached.result };
         }
-        if (!force && !cached) {
+        if (!cached) {
             const local = manager.localOwnershipConsensus(target, record);
             if (local) {
-                cache.set(target, { observedEtag, result: local });
+                cache.set(target, { observedEtag, observedVersion: observation.version, result: local });
                 return { ...local };
             }
         }
         cache.delete(target);
         const result = { status: 'unavailable', sub_aid: target, owner_aid: null, relation_version: 0, lock: 'unlocked', agent_md_etag: '', agent_md_sha256: '' };
-        const entry = { observedEtag, result: { ...result } };
+        const entry = { observedEtag, observedVersion: observation.version, result: { ...result } };
         cache.set(target, entry);
+        let consensusContent;
         try {
             const snapshot = await manager.readOwnershipFresh(target);
+            consensusContent = snapshot.content;
+            if (snapshot.owner_md_sha256)
+                result.owner_md_sha256 = snapshot.owner_md_sha256;
             Object.assign(result, { relation_version: snapshot.relation_version, lock: snapshot.lock, agent_md_etag: snapshot.etag,
                 agent_md_sha256: snapshot.exists ? ownershipSha256(snapshot.content) : '' });
             if (snapshot.ownership_status)
@@ -1454,11 +1459,15 @@ export class AUNClient {
             result.retryable = result.status === 'unavailable';
         }
         if (this._agentMdManager === manager && this._ownershipConsensusCache === cache && cache.get(target) === entry) {
-            entry.result = { ...result };
             try {
-                manager.cacheOwnershipSnapshot(target, result, observation);
+                if (manager.cacheOwnershipSnapshot(target, result, observation, consensusContent))
+                    entry.result = { ...result };
+                else
+                    cache.delete(target);
+            }
+            catch {
+                cache.delete(target);
             }
-            catch { }
         }
         return result;
     }
@@ -2118,6 +2127,7 @@ export class AUNClient {
             throw ownershipFailure('conflict', 'entity lifecycle ownership action changed');
         const ownership = { statement: declaration.statement, action, ...(transfer ? { transfer: { new_owner_aid: ownershipAid(newOwner, 'new_owner_aid'), target_relation_version: declaration.statement.relation_version + 1, expires_at: Number(params.expires_at ?? Math.floor(Date.now() / 1000) + 3600) } } : {}) };
         const raw = signOwnershipFile(owner, `---\nowner_aid: ${owner.aid}\nsub_aid: ${target}\nownership: ${JSON.stringify(ownership)}\n---\n`, 'owner');
+        await this._getOwnershipFiles().verifyFile(raw, 'owner', target, owner.aid, true);
         await storage.writeOwnerMd(owner.aid, target, raw, original, assertCurrent);
         return async (error) => {
             if (!(error instanceof AUNError) || error instanceof TimeoutError || error instanceof ConnectionError || error.retryable || isJsonObject(error.data) && error.data.committed === true || ![-32602, 4000, 4030, 403].includes(error.code) && !['INVALID_ARGUMENT', 'ROLE_ACCESS_DENIED', 'MEMBER_NOT_FOUND', 'permission_denied', 'member_banned', 'member_blocked'].includes(error.stringCode))
@@ -2263,12 +2273,14 @@ export class AUNClient {
         else {
             const payload = `---\nowner_aid: ${owner.aid}\nsub_aid: ${aid}\nownership: ${JSON.stringify({ statement, action: 'declare' })}\n---\n`;
             const raw = signOwnershipFile(owner, payload, 'owner');
+            await this._getOwnershipFiles().verifyFile(raw, 'owner', aid, owner.aid, true);
             assertCurrent();
             await storage.writeOwnerMd(owner.aid, aid, raw, original, assertCurrent);
         }
         const source = content ?? (observed.exists ? observed.content : buildDefaultAgentMd(aid, { type, name: String(entity.name ?? aid) }));
         const updated = updateOwnershipAgentMd(source, { owner: owner.aid, ownership: { statement } }).replace(/^entity_cert_fingerprint:.*(?:\r?\n|$)/m, '');
         const signed = signOwnershipFile(local.data.aid, updated, 'agent');
+        await this._getOwnershipFiles().verifyFile(signed, 'agent', aid, undefined, true);
         if (content === undefined) {
             if (!previous || previous.owner_aid !== owner.aid || previous.relation_version !== version) {
                 assertCurrent();