@namzu/sdk 43.0.0 → 44.1.0

package/dist/store/session-log/held-leases.d.ts

@@ -0,0 +1,56 @@
+/**
+ * The session writer leases this process holds, so a process that is told to
+ * stop can give them back before it exits.
+ *
+ * A turn renews its lease while it runs and releases it when it settles. A
+ * process that is terminated mid-turn (SIGTERM from a supervisor, SIGHUP when
+ * its terminal closes) settles nothing, and without this its lease stays live
+ * until it expires: the session refuses `/resume`, `/abandon` and a new prompt
+ * for up to the lease's time-to-live although no process is writing to it.
+ *
+ * {@link releaseHeldSessionLeases} publishes a release for every holding,
+ * which leaves a running turn `interrupted` (no live lease, not paused; spec
+ * §4.5): the next writer takes the session at once and closes the turn
+ * through the explicit flow — `abandonTurn`, `resumeSession`, or
+ * `beginTurn({ abandonInterrupted })`. Nothing is appended on the way out,
+ * because the dying process cannot know how far its turn got.
+ *
+ * A process killed with SIGKILL runs no code; its lease is freed by expiry.
+ */
+/** One log instance's current holding, released under that log's own write order. */
+export interface HeldSessionLease {
+    release(): Promise<void>;
+}
+/** A claim made after {@link releaseHeldSessionLeases}: this process is on its way out. */
+export declare class SessionLeasesReleasedError extends Error {
+    readonly name = "SessionLeasesReleasedError";
+    constructor();
+}
+/** @internal Record a holding a log instance took. */
+export declare function trackHeldSessionLease(holding: HeldSessionLease): void;
+/** @internal Forget a holding its log instance gave up. */
+export declare function untrackHeldSessionLease(holding: HeldSessionLease): void;
+/** @internal Whether this process has released its leases to exit. */
+export declare function sessionLeasesReleasedForExit(): boolean;
+export interface ReleaseHeldSessionLeasesOptions {
+    /**
+     * How long to wait for the releases. Each waits for its log's write in
+     * flight, if any, so a release never lands under a half-written record.
+     * Default 2000.
+     */
+    readonly timeoutMs?: number;
+}
+export interface ReleaseHeldSessionLeasesResult {
+    /** Holdings whose release landed (or was already stale: somebody took the session over). */
+    readonly released: number;
+    /** Holdings whose release had not landed when the wait ended, or failed; expiry frees those. */
+    readonly unfinished: number;
+}
+/**
+ * Give back every session writer lease this process holds, for a process that
+ * is about to exit. From the first call on, every later claim in this process
+ * is refused with {@link SessionLeasesReleasedError}, so a turn still unwinding
+ * cannot renew or retake the lease it just gave up. Never throws.
+ */
+export declare function releaseHeldSessionLeases(options?: ReleaseHeldSessionLeasesOptions): Promise<ReleaseHeldSessionLeasesResult>;
+//# sourceMappingURL=held-leases.d.ts.map

package/dist/store/session-log/held-leases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"held-leases.d.ts","sourceRoot":"","sources":["../../../src/store/session-log/held-leases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAChC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACxB;AAKD,2FAA2F;AAC3F,qBAAa,0BAA2B,SAAQ,KAAK;IACpD,SAAkB,IAAI,gCAA+B;;CAMrD;AAED,sDAAsD;AACtD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAErE;AAED,2DAA2D;AAC3D,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAEvE;AAED,sEAAsE;AACtE,wBAAgB,4BAA4B,IAAI,OAAO,CAEtD;AAED,MAAM,WAAW,+BAA+B;IAC/C;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,8BAA8B;IAC9C,4FAA4F;IAC5F,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,gGAAgG;IAChG,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC7C,OAAO,GAAE,+BAAoC,GAC3C,OAAO,CAAC,8BAA8B,CAAC,CAyBzC"}

package/dist/store/session-log/held-leases.js

@@ -0,0 +1,67 @@
+/**
+ * The session writer leases this process holds, so a process that is told to
+ * stop can give them back before it exits.
+ *
+ * A turn renews its lease while it runs and releases it when it settles. A
+ * process that is terminated mid-turn (SIGTERM from a supervisor, SIGHUP when
+ * its terminal closes) settles nothing, and without this its lease stays live
+ * until it expires: the session refuses `/resume`, `/abandon` and a new prompt
+ * for up to the lease's time-to-live although no process is writing to it.
+ *
+ * {@link releaseHeldSessionLeases} publishes a release for every holding,
+ * which leaves a running turn `interrupted` (no live lease, not paused; spec
+ * §4.5): the next writer takes the session at once and closes the turn
+ * through the explicit flow — `abandonTurn`, `resumeSession`, or
+ * `beginTurn({ abandonInterrupted })`. Nothing is appended on the way out,
+ * because the dying process cannot know how far its turn got.
+ *
+ * A process killed with SIGKILL runs no code; its lease is freed by expiry.
+ */
+const held = new Set();
+let releasedForExit = false;
+/** A claim made after {@link releaseHeldSessionLeases}: this process is on its way out. */
+export class SessionLeasesReleasedError extends Error {
+    name = 'SessionLeasesReleasedError';
+    constructor() {
+        super('This process gave its session leases back to exit (releaseHeldSessionLeases); it takes no new lease.');
+    }
+}
+/** @internal Record a holding a log instance took. */
+export function trackHeldSessionLease(holding) {
+    held.add(holding);
+}
+/** @internal Forget a holding its log instance gave up. */
+export function untrackHeldSessionLease(holding) {
+    held.delete(holding);
+}
+/** @internal Whether this process has released its leases to exit. */
+export function sessionLeasesReleasedForExit() {
+    return releasedForExit;
+}
+/**
+ * Give back every session writer lease this process holds, for a process that
+ * is about to exit. From the first call on, every later claim in this process
+ * is refused with {@link SessionLeasesReleasedError}, so a turn still unwinding
+ * cannot renew or retake the lease it just gave up. Never throws.
+ */
+export async function releaseHeldSessionLeases(options = {}) {
+    releasedForExit = true;
+    const holdings = [...held];
+    if (holdings.length === 0)
+        return { released: 0, unfinished: 0 };
+    let released = 0;
+    const all = Promise.all(holdings.map((holding) => holding.release().then(() => {
+        released += 1;
+    }, () => {
+        // A release that failed (an unwritable directory) cannot be retried
+        // by a process that is exiting; expiry frees that session.
+    })));
+    let timer;
+    const deadline = new Promise((resolve) => {
+        timer = setTimeout(resolve, options.timeoutMs ?? 2_000);
+    });
+    await Promise.race([all, deadline]);
+    clearTimeout(timer);
+    return { released, unfinished: holdings.length - released };
+}
+//# sourceMappingURL=held-leases.js.map

package/dist/store/session-log/held-leases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"held-leases.js","sourceRoot":"","sources":["../../../src/store/session-log/held-leases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAOH,MAAM,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAA;AACxC,IAAI,eAAe,GAAG,KAAK,CAAA;AAE3B,2FAA2F;AAC3F,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAClC,IAAI,GAAG,4BAA4B,CAAA;IACrD;QACC,KAAK,CACJ,sGAAsG,CACtG,CAAA;IACF,CAAC;CACD;AAED,sDAAsD;AACtD,MAAM,UAAU,qBAAqB,CAAC,OAAyB;IAC9D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;AAClB,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,uBAAuB,CAAC,OAAyB;IAChE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;AACrB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,4BAA4B;IAC3C,OAAO,eAAe,CAAA;AACvB,CAAC;AAkBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,UAA2C,EAAE;IAE7C,eAAe,GAAG,IAAI,CAAA;IACtB,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IAC1B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAA;IAChE,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CACtB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACxB,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CACrB,GAAG,EAAE;QACJ,QAAQ,IAAI,CAAC,CAAA;IACd,CAAC,EACD,GAAG,EAAE;QACJ,oEAAoE;QACpE,2DAA2D;IAC5D,CAAC,CACD,CACD,CACD,CAAA;IACD,IAAI,KAAiC,CAAA;IACrC,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC9C,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IACF,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAA;IACnC,YAAY,CAAC,KAAK,CAAC,CAAA;IACnB,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAA;AAC5D,CAAC"}

package/dist/store/session-log/index.d.ts

@@ -0,0 +1,10 @@
+export { type LogBytes, LineSplitter, SessionLogChain, type ChainStart, type SessionLogBreakReason, type SessionLogEntry, SessionLogIntegrityError, readSessionLogTail, verifyPointer, } from './chain.js';
+export { type ActiveTurn, type ActiveTurnOptions, type BeginTurnOptions, InvalidSessionRecordError, type LogMedium, type ReadSessionLogOptions, type SessionLog, SessionLogConflictError, SessionLogCore, type SessionLogCoreOptions, type SessionLogHead, type SessionLogRead, type SessionLogReadSummary, type SessionRecordDraft, type TurnStartedDraft, walkSessionLog, } from './core.js';
+export { DiskLogMedium, DiskSessionLog, type DiskSessionLogOptions, readSessionLog, streamSessionLog, } from './disk.js';
+export { type ActiveTurnRecord, type FoldSessionMessagesOptions, type FoldedMessage, SessionMessageFold, SessionTurnState, type SpilledSummary, SpillUnavailableError, TurnRuleError, foldSessionMessages, } from './fold.js';
+export { type TornTailRepair, repairRecordDraft } from './heal.js';
+export { type ReleaseHeldSessionLeasesOptions, type ReleaseHeldSessionLeasesResult, SessionLeasesReleasedError, releaseHeldSessionLeases, } from './held-leases.js';
+export { type ClaimSessionOptions, DiskSessionLeaseStore, InMemorySessionLeaseStore, type LeaseClaimContext, type SessionLease, type SessionLeaseStore, StaleSessionLeaseError, isLeaseLive, readSessionLease, } from './lease.js';
+export { InMemoryLogMedium, InMemorySessionLog, type InMemorySessionLogOptions, } from './memory.js';
+export { DiskSpillStore, InMemorySpillStore, SPILL_DIR, SpillIntegrityError, type SpillManifest, type SpillRef, type SpillStore, spillFileName, } from './spill.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/store/session-log/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/store/session-log/index.ts"],"names":[],"mappings":"AAOA,OAAO,EACN,KAAK,QAAQ,EACb,YAAY,EACZ,eAAe,EACf,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,wBAAwB,EACxB,kBAAkB,EAClB,aAAa,GACb,MAAM,YAAY,CAAA;AACnB,OAAO,EACN,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,yBAAyB,EACzB,KAAK,SAAS,EACd,KAAK,qBAAqB,EAC1B,KAAK,UAAU,EACf,uBAAuB,EACvB,cAAc,EACd,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,cAAc,GACd,MAAM,WAAW,CAAA;AAClB,OAAO,EACN,aAAa,EACb,cAAc,EACd,KAAK,qBAAqB,EAC1B,cAAc,EACd,gBAAgB,GAChB,MAAM,WAAW,CAAA;AAClB,OAAO,EACN,KAAK,gBAAgB,EACrB,KAAK,0BAA0B,EAC/B,KAAK,aAAa,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,KAAK,cAAc,EACnB,qBAAqB,EACrB,aAAa,EACb,mBAAmB,GACnB,MAAM,WAAW,CAAA;AAClB,OAAO,EAAE,KAAK,cAAc,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAClE,OAAO,EACN,KAAK,+BAA+B,EACpC,KAAK,8BAA8B,EACnC,0BAA0B,EAC1B,wBAAwB,GACxB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACN,KAAK,mBAAmB,EACxB,qBAAqB,EACrB,yBAAyB,EACzB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,sBAAsB,EACtB,WAAW,EACX,gBAAgB,GAChB,MAAM,YAAY,CAAA;AACnB,OAAO,EACN,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,yBAAyB,GAC9B,MAAM,aAAa,CAAA;AACpB,OAAO,EACN,cAAc,EACd,kBAAkB,EAClB,SAAS,EACT,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,KAAK,UAAU,EACf,aAAa,GACb,MAAM,YAAY,CAAA"}

package/dist/store/session-log/index.js

@@ -0,0 +1,16 @@
+// The session log: one append-only, hash-chained JSONL file per session
+// (`DiskSessionLog`, `InMemorySessionLog`, the chain, the fold, the lease).
+// The public barrels re-export this module. The conformance suite
+// (`conformance.ts`) is deliberately not re-exported here: like the other
+// suites it belongs on the `@namzu/sdk/testing` subpath, so importing it is a
+// deliberate act and the root entry stays free of anything shaped like a test.
+export { LineSplitter, SessionLogChain, SessionLogIntegrityError, readSessionLogTail, verifyPointer, } from './chain.js';
+export { InvalidSessionRecordError, SessionLogConflictError, SessionLogCore, walkSessionLog, } from './core.js';
+export { DiskLogMedium, DiskSessionLog, readSessionLog, streamSessionLog, } from './disk.js';
+export { SessionMessageFold, SessionTurnState, SpillUnavailableError, TurnRuleError, foldSessionMessages, } from './fold.js';
+export { repairRecordDraft } from './heal.js';
+export { SessionLeasesReleasedError, releaseHeldSessionLeases, } from './held-leases.js';
+export { DiskSessionLeaseStore, InMemorySessionLeaseStore, StaleSessionLeaseError, isLeaseLive, readSessionLease, } from './lease.js';
+export { InMemoryLogMedium, InMemorySessionLog, } from './memory.js';
+export { DiskSpillStore, InMemorySpillStore, SPILL_DIR, SpillIntegrityError, spillFileName, } from './spill.js';
+//# sourceMappingURL=index.js.map

package/dist/store/session-log/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/store/session-log/index.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,4EAA4E;AAC5E,kEAAkE;AAClE,0EAA0E;AAC1E,8EAA8E;AAC9E,+EAA+E;AAE/E,OAAO,EAEN,YAAY,EACZ,eAAe,EAIf,wBAAwB,EACxB,kBAAkB,EAClB,aAAa,GACb,MAAM,YAAY,CAAA;AACnB,OAAO,EAIN,yBAAyB,EAIzB,uBAAuB,EACvB,cAAc,EAOd,cAAc,GACd,MAAM,WAAW,CAAA;AAClB,OAAO,EACN,aAAa,EACb,cAAc,EAEd,cAAc,EACd,gBAAgB,GAChB,MAAM,WAAW,CAAA;AAClB,OAAO,EAIN,kBAAkB,EAClB,gBAAgB,EAEhB,qBAAqB,EACrB,aAAa,EACb,mBAAmB,GACnB,MAAM,WAAW,CAAA;AAClB,OAAO,EAAuB,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAClE,OAAO,EAGN,0BAA0B,EAC1B,wBAAwB,GACxB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAEN,qBAAqB,EACrB,yBAAyB,EAIzB,sBAAsB,EACtB,WAAW,EACX,gBAAgB,GAChB,MAAM,YAAY,CAAA;AACnB,OAAO,EACN,iBAAiB,EACjB,kBAAkB,GAElB,MAAM,aAAa,CAAA;AACpB,OAAO,EACN,cAAc,EACd,kBAAkB,EAClB,SAAS,EACT,mBAAmB,EAInB,aAAa,GACb,MAAM,YAAY,CAAA"}

package/dist/store/session-log/lease.d.ts

@@ -0,0 +1,126 @@
+/**
+ * The writer lease of one session: who may append, under which fence, until
+ * when.
+ *
+ * ## The fence
+ *
+ * A fence is a number that only grows. Every new holding of a session mints a
+ * fence above every earlier one, and every record carries the fence of the
+ * lease its writer held as `gen`. An append presents its lease, and a lease
+ * below the session's current fence is refused (`StaleSessionLeaseError`). So
+ * a holder that stalled past its expiry — a long GC pause, a suspended
+ * container — cannot write after somebody else took the session over, and it
+ * finds out at its next append rather than never.
+ *
+ * ## On disk: the fence is a file name, `lease.json` is the view
+ *
+ * `<session-id>/lease.<fence>.json` is created by writing the body to a
+ * private temporary file and `link`ing it into place. `link` fails with
+ * `EEXIST` if the name exists, so of any number of simultaneous takers exactly
+ * one wins each fence, and the name never exists without its whole body. This
+ * is the arbitration `store/run/claim-disk.ts` measured and settled on; its
+ * header records why a single mutable file with a lock, `wx` and `rename`
+ * each fail to arbitrate. The current holding is the highest fence.
+ *
+ * `<session-id>/lease.json` is then replaced (fsynced temporary, rename) with
+ * the same body plus `v`, `kind` and `fence`, for a person or a tool to read.
+ * It is a view: under a race an older holding's rename can land after a newer
+ * one's, so nothing that decides anything reads it. {@link readSessionLease}
+ * reads the fence names.
+ *
+ * Renewing keeps the fence and rewrites that fence's body. A renewal that
+ * loses a race with a taker — the taker judged the lease expired a moment
+ * before the renewal landed — finds the higher fence afterwards and reports
+ * the lease lost, and the fence check refuses its appends either way.
+ *
+ * Releasing publishes a tombstone at the next fence (empty holder, expiry 0),
+ * so the counter never rewinds and the releasing holder's own fence is stale
+ * the instant the release lands.
+ *
+ * ## Who renews, and when a new fence is minted
+ *
+ * Both stores apply one rule ({@link LeaseClaimContext}):
+ *
+ * - **Renewal is by presentation.** A claim renews only when it presents the
+ *   holding it has (`renew`) and that holding is still the top fence under
+ *   the same holder. The holder string alone never renews: a second instance
+ *   or a restarted process that reuses a name gets `null` while the lease is
+ *   live, exactly as a different holder would. A renewal keeps its fence even
+ *   when it arrives after the expiry, provided nobody took the session in
+ *   between — the fence did not move, so no other writer can have appended,
+ *   and the holder's turn is still its own (spec §4.5 "running").
+ * - **A new fence is above everything seen.** It is one more than the higher
+ *   of the top lease fence and `above`, which the log passes as its head's
+ *   `gen`. So a lost or cleared `<session-id>/` directory cannot rewind the
+ *   fence below records already written.
+ */
+/** A holding of a session's writer lease. */
+export interface SessionLease {
+    /** Opaque caller identity (a worker id, a pod name). Evidence, not authority; make it unique per process. */
+    readonly holder: string;
+    /** The fencing token; every record appended under this lease carries it as `gen`. */
+    readonly fence: number;
+    /** Epoch ms after which another holder may take the session. */
+    readonly expiresAt: number;
+}
+export interface ClaimSessionOptions {
+    readonly holder: string;
+    readonly ttlMs: number;
+    /** Clock, for tests. Defaults to `Date.now()`. */
+    readonly now?: number;
+}
+/** An append or a release presented a lease that is no longer the session's current one. */
+export declare class StaleSessionLeaseError extends Error {
+    readonly presentedFence: number;
+    readonly currentFence: number;
+    readonly name = "StaleSessionLeaseError";
+    constructor(presentedFence: number, currentFence: number, holder?: string);
+}
+/** What a log adds to a claim: the holding it presents, and the fence floor its records set. */
+export interface LeaseClaimContext {
+    /**
+     * The holding the claimant has. The claim renews it (same fence) when it is
+     * still the top fence under `options.holder`; without it a live lease is
+     * never renewed, whoever holds it.
+     */
+    readonly renew?: SessionLease;
+    /** A minted fence is above this (the log head's `gen`). Default 0. */
+    readonly above?: number;
+}
+/** Where a backend keeps its leases. */
+export interface SessionLeaseStore {
+    /**
+     * Take or renew the lease. `null` when it is live and the claim does not
+     * present it (see {@link LeaseClaimContext}).
+     */
+    claim(options: ClaimSessionOptions, context?: LeaseClaimContext): Promise<SessionLease | null>;
+    /** Give the lease up early. A stale lease releases nothing. */
+    release(lease: SessionLease): Promise<void>;
+    /** The current holding, or `null` when the session was never claimed. */
+    current(): Promise<SessionLease | null>;
+    /** The current fence (0 when never claimed), from the cheapest source the backend has. */
+    fence(): Promise<number>;
+}
+/** Whether `lease` is live at `now`: not expired, and not a release tombstone. */
+export declare function isLeaseLive(lease: SessionLease | null, now: number): boolean;
+/** Leases in `<session-id>/`, correct across processes. */
+export declare class DiskSessionLeaseStore implements SessionLeaseStore {
+    #private;
+    readonly sessionDir: string;
+    constructor(sessionDir: string);
+    fence(): Promise<number>;
+    current(): Promise<SessionLease | null>;
+    claim(options: ClaimSessionOptions, context?: LeaseClaimContext): Promise<SessionLease | null>;
+    release(lease: SessionLease): Promise<void>;
+}
+/** The current lease of a session directory, for a reader that holds none (a drain, a status view). */
+export declare function readSessionLease(sessionDir: string): Promise<SessionLease | null>;
+/** The lease of an in-memory session: the same rules, held in this process. */
+export declare class InMemorySessionLeaseStore implements SessionLeaseStore {
+    #private;
+    fence(): Promise<number>;
+    current(): Promise<SessionLease | null>;
+    claim(options: ClaimSessionOptions, context?: LeaseClaimContext): Promise<SessionLease | null>;
+    release(lease: SessionLease): Promise<void>;
+}
+//# sourceMappingURL=lease.d.ts.map

package/dist/store/session-log/lease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.d.ts","sourceRoot":"","sources":["../../../src/store/session-log/lease.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAEH,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IAC5B,6GAA6G;IAC7G,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,qFAAqF;IACrF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,kDAAkD;IAClD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,4FAA4F;AAC5F,qBAAa,sBAAuB,SAAQ,KAAK;IAG/C,QAAQ,CAAC,cAAc,EAAE,MAAM;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM;IAH9B,SAAkB,IAAI,4BAA2B;gBAEvC,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,EAC7B,MAAM,CAAC,EAAE,MAAM;CAMhB;AAED,gGAAgG;AAChG,MAAM,WAAW,iBAAiB;IACjC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAA;IAC7B,sEAAsE;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,wCAAwC;AACxC,MAAM,WAAW,iBAAiB;IACjC;;;OAGG;IACH,KAAK,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;IAC9F,+DAA+D;IAC/D,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3C,yEAAyE;IACzE,OAAO,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;IACvC,0FAA0F;IAC1F,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;CACxB;AAED,kFAAkF;AAClF,wBAAgB,WAAW,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAE5E;AAqDD,2DAA2D;AAC3D,qBAAa,qBAAsB,YAAW,iBAAiB;;IAClD,QAAQ,CAAC,UAAU,EAAE,MAAM;gBAAlB,UAAU,EAAE,MAAM;IAkBjC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAIxB,OAAO,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAoCvC,KAAK,CACV,OAAO,EAAE,mBAAmB,EAC5B,OAAO,GAAE,iBAAsB,GAC7B,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAkCzB,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;CAwCjD;AAED,uGAAuG;AACvG,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAEjF;AAID,+EAA+E;AAC/E,qBAAa,yBAA0B,YAAW,iBAAiB;;IAG5D,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAIxB,OAAO,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAIvC,KAAK,CACV,OAAO,EAAE,mBAAmB,EAC5B,OAAO,GAAE,iBAAsB,GAC7B,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAYzB,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;CAIjD"}

package/dist/store/session-log/lease.js

@@ -0,0 +1,226 @@
+import { link, mkdir, readFile, readdir, stat, unlink, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { durableReplaceFile } from './spill.js';
+/** An append or a release presented a lease that is no longer the session's current one. */
+export class StaleSessionLeaseError extends Error {
+    presentedFence;
+    currentFence;
+    name = 'StaleSessionLeaseError';
+    constructor(presentedFence, currentFence, holder) {
+        super(`The lease at fence ${presentedFence} is no longer this session's writer lease (the current fence is ${currentFence}${holder ? `, held by "${holder}"` : ''}). Another writer has taken the session over; refusing the write.`);
+        this.presentedFence = presentedFence;
+        this.currentFence = currentFence;
+    }
+}
+/** Whether `lease` is live at `now`: not expired, and not a release tombstone. */
+export function isLeaseLive(lease, now) {
+    return lease !== null && lease.holder !== '' && now < lease.expiresAt;
+}
+/** The one claim rule both stores apply (see the module header). */
+function decideClaim(held, options, context, now) {
+    const above = context.above ?? 0;
+    const renew = context.renew;
+    const presented = held !== null &&
+        renew !== undefined &&
+        held.holder !== '' &&
+        held.fence === renew.fence &&
+        held.holder === renew.holder &&
+        held.holder === options.holder;
+    if (presented && held.fence >= above)
+        return { kind: 'renew', fence: held.fence };
+    if (!presented && isLeaseLive(held, now))
+        return { kind: 'refuse' };
+    return { kind: 'mint', fence: Math.max(held?.fence ?? 0, above) + 1 };
+}
+// ─── disk ─────────────────────────────────────────────────────────────────
+const FENCE_NAME = /^lease\.([0-9]{1,15})\.json$/;
+const TEMP_NAME = /^\.lease-tmp-/;
+/** Holdings kept below the current fence, as handover history for an operator. */
+const KEEP_BELOW_MAX = 8;
+/** A scratch file older than this belongs to a process that is not coming back. */
+const TEMP_TTL_MS = 10 * 60_000;
+function isErrno(error, code) {
+    return error?.code === code;
+}
+let attempts = 0;
+function tempName(fence) {
+    attempts += 1;
+    return `.lease-tmp-${process.pid}-${attempts}-${Math.random().toString(36).slice(2, 10)}-${fence}`;
+}
+/** Leases in `<session-id>/`, correct across processes. */
+export class DiskSessionLeaseStore {
+    sessionDir;
+    constructor(sessionDir) {
+        this.sessionDir = sessionDir;
+    }
+    async #fences() {
+        let names;
+        try {
+            names = await readdir(this.sessionDir);
+        }
+        catch (error) {
+            if (isErrno(error, 'ENOENT'))
+                return [];
+            throw error;
+        }
+        const found = [];
+        for (const name of names) {
+            const match = FENCE_NAME.exec(name);
+            if (match)
+                found.push({ name, fence: Number(match[1]) });
+        }
+        return found.sort((a, b) => b.fence - a.fence);
+    }
+    async fence() {
+        return (await this.#fences())[0]?.fence ?? 0;
+    }
+    async current() {
+        const [top] = await this.#fences();
+        if (top === undefined)
+            return null;
+        try {
+            const body = JSON.parse(await readFile(join(this.sessionDir, top.name), 'utf8'));
+            if (typeof body.holder === 'string' && Number.isFinite(body.expiresAt)) {
+                return { holder: body.holder, fence: top.fence, expiresAt: body.expiresAt };
+            }
+        }
+        catch {
+            // An unreadable body: the fence is known from the name, the holding is anonymous.
+        }
+        return { holder: '', fence: top.fence, expiresAt: 0 };
+    }
+    /** Write `body` and make it visible at `fence`, whole or not at all. Throws `EEXIST` on a lost race. */
+    async #publish(fence, body) {
+        const temporary = join(this.sessionDir, tempName(fence));
+        await writeFile(temporary, JSON.stringify(body), { flag: 'wx' });
+        try {
+            await link(temporary, join(this.sessionDir, `lease.${fence}.json`));
+        }
+        finally {
+            await unlink(temporary).catch(() => undefined);
+        }
+    }
+    async #writeView(lease) {
+        const view = {
+            v: 1,
+            kind: 'lease',
+            holder: lease.holder === '' ? 'released' : lease.holder,
+            fence: lease.fence,
+            expiresAt: new Date(lease.expiresAt).toISOString(),
+        };
+        await durableReplaceFile(join(this.sessionDir, 'lease.json'), `${JSON.stringify(view)}\n`);
+    }
+    async claim(options, context = {}) {
+        const now = options.now ?? Date.now();
+        await mkdir(this.sessionDir, { recursive: true });
+        for (let attempt = 0; attempt < 8; attempt++) {
+            const held = await this.current();
+            const decision = decideClaim(held, options, context, now);
+            if (decision.kind === 'refuse')
+                return null;
+            const body = { holder: options.holder, expiresAt: now + options.ttlMs };
+            if (decision.kind === 'renew') {
+                // Same fence, new expiry. A taker that read the old body in the
+                // meantime publishes a higher fence, which the check below sees.
+                await durableReplaceFile(join(this.sessionDir, `lease.${decision.fence}.json`), JSON.stringify(body));
+                if ((await this.fence()) !== decision.fence)
+                    return null;
+                const renewed = { holder: options.holder, fence: decision.fence, expiresAt: body.expiresAt };
+                await this.#writeView(renewed);
+                return renewed;
+            }
+            try {
+                await this.#publish(decision.fence, body);
+            }
+            catch (error) {
+                if (isErrno(error, 'EEXIST'))
+                    continue;
+                throw error;
+            }
+            const lease = { holder: options.holder, fence: decision.fence, expiresAt: body.expiresAt };
+            await this.#writeView(lease);
+            await this.#prune(decision.fence);
+            return lease;
+        }
+        return null;
+    }
+    async release(lease) {
+        const current = await this.fence();
+        if (current !== lease.fence)
+            return;
+        const tombstone = { holder: '', fence: lease.fence + 1, expiresAt: 0 };
+        try {
+            await this.#publish(tombstone.fence, { holder: '', expiresAt: 0 });
+        }
+        catch (error) {
+            if (isErrno(error, 'EEXIST'))
+                return;
+            throw error;
+        }
+        await this.#writeView(tombstone);
+    }
+    /** Drop holdings far below the current fence and scratch files a crash left. Never the top. */
+    async #prune(max) {
+        let names;
+        try {
+            names = await readdir(this.sessionDir);
+        }
+        catch {
+            return;
+        }
+        const wallClock = Date.now();
+        for (const name of names) {
+            const match = FENCE_NAME.exec(name);
+            if (match) {
+                if (Number(match[1]) < max - KEEP_BELOW_MAX) {
+                    await unlink(join(this.sessionDir, name)).catch(() => undefined);
+                }
+                continue;
+            }
+            if (!TEMP_NAME.test(name))
+                continue;
+            const path = join(this.sessionDir, name);
+            try {
+                if (wallClock - (await stat(path)).mtimeMs < TEMP_TTL_MS)
+                    continue;
+            }
+            catch {
+                continue;
+            }
+            await unlink(path).catch(() => undefined);
+        }
+    }
+}
+/** The current lease of a session directory, for a reader that holds none (a drain, a status view). */
+export function readSessionLease(sessionDir) {
+    return new DiskSessionLeaseStore(sessionDir).current();
+}
+// ─── in process ───────────────────────────────────────────────────────────
+/** The lease of an in-memory session: the same rules, held in this process. */
+export class InMemorySessionLeaseStore {
+    #current = null;
+    async fence() {
+        return this.#current?.fence ?? 0;
+    }
+    async current() {
+        return this.#current;
+    }
+    async claim(options, context = {}) {
+        const now = options.now ?? Date.now();
+        const decision = decideClaim(this.#current, options, context, now);
+        if (decision.kind === 'refuse')
+            return null;
+        this.#current = {
+            holder: options.holder,
+            fence: decision.fence,
+            expiresAt: now + options.ttlMs,
+        };
+        return this.#current;
+    }
+    async release(lease) {
+        if (this.#current?.fence !== lease.fence)
+            return;
+        this.#current = { holder: '', fence: lease.fence + 1, expiresAt: 0 };
+    }
+}
+//# sourceMappingURL=lease.js.map

package/dist/store/session-log/lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.js","sourceRoot":"","sources":["../../../src/store/session-log/lease.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC1F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AA4E/C,4FAA4F;AAC5F,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAGtC;IACA;IAHQ,IAAI,GAAG,wBAAwB,CAAA;IACjD,YACU,cAAsB,EACtB,YAAoB,EAC7B,MAAe;QAEf,KAAK,CACJ,sBAAsB,cAAc,mEAAmE,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,mEAAmE,CAC9N,CAAA;QANQ,mBAAc,GAAd,cAAc,CAAQ;QACtB,iBAAY,GAAZ,YAAY,CAAQ;IAM9B,CAAC;CACD;AA6BD,kFAAkF;AAClF,MAAM,UAAU,WAAW,CAAC,KAA0B,EAAE,GAAW;IAClE,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,CAAA;AACtE,CAAC;AAOD,oEAAoE;AACpE,SAAS,WAAW,CACnB,IAAyB,EACzB,OAA4B,EAC5B,OAA0B,EAC1B,GAAW;IAEX,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAA;IAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;IAC3B,MAAM,SAAS,GACd,IAAI,KAAK,IAAI;QACb,KAAK,KAAK,SAAS;QACnB,IAAI,CAAC,MAAM,KAAK,EAAE;QAClB,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAC1B,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC5B,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAA;IAC/B,IAAI,SAAS,IAAI,IAAI,CAAC,KAAK,IAAI,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAA;IACjF,IAAI,CAAC,SAAS,IAAI,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IACnE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAA;AACtE,CAAC;AAED,6EAA6E;AAE7E,MAAM,UAAU,GAAG,8BAA8B,CAAA;AACjD,MAAM,SAAS,GAAG,eAAe,CAAA;AACjC,kFAAkF;AAClF,MAAM,cAAc,GAAG,CAAC,CAAA;AACxB,mFAAmF;AACnF,MAAM,WAAW,GAAG,EAAE,GAAG,MAAM,CAAA;AAO/B,SAAS,OAAO,CAAC,KAAc,EAAE,IAAY;IAC5C,OAAQ,KAA2C,EAAE,IAAI,KAAK,IAAI,CAAA;AACnE,CAAC;AAED,IAAI,QAAQ,GAAG,CAAC,CAAA;AAEhB,SAAS,QAAQ,CAAC,KAAa;IAC9B,QAAQ,IAAI,CAAC,CAAA;IACb,OAAO,cAAc,OAAO,CAAC,GAAG,IAAI,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAA;AACnG,CAAC;AAED,2DAA2D;AAC3D,MAAM,OAAO,qBAAqB;IACZ;IAArB,YAAqB,UAAkB;QAAlB,eAAU,GAAV,UAAU,CAAQ;IAAG,CAAC;IAE3C,KAAK,CAAC,OAAO;QACZ,IAAI,KAAe,CAAA;QACnB,IAAI,CAAC;YACJ,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,OAAO,EAAE,CAAA;YACvC,MAAM,KAAK,CAAA;QACZ,CAAC;QACD,MAAM,KAAK,GAAsC,EAAE,CAAA;QACnD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnC,IAAI,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACzD,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAA;IAC/C,CAAC;IAED,KAAK,CAAC,KAAK;QACV,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAA;IAC7C,CAAC;IAED,KAAK,CAAC,OAAO;QACZ,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QAClC,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA;QAClC,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAc,CAAA;YAC7F,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAA;YAC5E,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,kFAAkF;QACnF,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;IACtD,CAAC;IAED,wGAAwG;IACxG,KAAK,CAAC,QAAQ,CAAC,KAAa,EAAE,IAAe;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;QACxD,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QAChE,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,KAAK,OAAO,CAAC,CAAC,CAAA;QACpE,CAAC;gBAAS,CAAC;YACV,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC/C,CAAC;IACF,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAmB;QACnC,MAAM,IAAI,GAAyB;YAClC,CAAC,EAAE,CAAC;YACJ,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;YACvD,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;SAClD,CAAA;QACD,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3F,CAAC;IAED,KAAK,CAAC,KAAK,CACV,OAA4B,EAC5B,UAA6B,EAAE;QAE/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;QACrC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACjD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;YACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;YACzD,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAA;YAC3C,MAAM,IAAI,GAAc,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,OAAO,CAAC,KAAK,EAAE,CAAA;YAClF,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC/B,gEAAgE;gBAChE,iEAAiE;gBACjE,MAAM,kBAAkB,CACvB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,QAAQ,CAAC,KAAK,OAAO,CAAC,EACrD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CACpB,CAAA;gBACD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,QAAQ,CAAC,KAAK;oBAAE,OAAO,IAAI,CAAA;gBACxD,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAA;gBAC5F,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;gBAC9B,OAAO,OAAO,CAAA;YACf,CAAC;YACD,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;YAC1C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;oBAAE,SAAQ;gBACtC,MAAM,KAAK,CAAA;YACZ,CAAC;YACD,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAA;YAC1F,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;YAC5B,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;YACjC,OAAO,KAAK,CAAA;QACb,CAAC;QACD,OAAO,IAAI,CAAA;IACZ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAmB;QAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QAClC,IAAI,OAAO,KAAK,KAAK,CAAC,KAAK;YAAE,OAAM;QACnC,MAAM,SAAS,GAAiB,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;QACpF,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAA;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,OAAM;YACpC,MAAM,KAAK,CAAA;QACZ,CAAC;QACD,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IACjC,CAAC;IAED,+FAA+F;IAC/F,KAAK,CAAC,MAAM,CAAC,GAAW;QACvB,IAAI,KAAe,CAAA;QACnB,IAAI,CAAC;YACJ,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACvC,CAAC;QAAC,MAAM,CAAC;YACR,OAAM;QACP,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnC,IAAI,KAAK,EAAE,CAAC;gBACX,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,cAAc,EAAE,CAAC;oBAC7C,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;gBACjE,CAAC;gBACD,SAAQ;YACT,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAQ;YACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;YACxC,IAAI,CAAC;gBACJ,IAAI,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,WAAW;oBAAE,SAAQ;YACnE,CAAC;YAAC,MAAM,CAAC;gBACR,SAAQ;YACT,CAAC;YACD,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC1C,CAAC;IACF,CAAC;CACD;AAED,uGAAuG;AACvG,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IAClD,OAAO,IAAI,qBAAqB,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAA;AACvD,CAAC;AAED,6EAA6E;AAE7E,+EAA+E;AAC/E,MAAM,OAAO,yBAAyB;IACrC,QAAQ,GAAwB,IAAI,CAAA;IAEpC,KAAK,CAAC,KAAK;QACV,OAAO,IAAI,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,OAAO;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAA;IACrB,CAAC;IAED,KAAK,CAAC,KAAK,CACV,OAA4B,EAC5B,UAA6B,EAAE;QAE/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;QACrC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;QAClE,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAA;QAC3C,IAAI,CAAC,QAAQ,GAAG;YACf,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,SAAS,EAAE,GAAG,GAAG,OAAO,CAAC,KAAK;SAC9B,CAAA;QACD,OAAO,IAAI,CAAC,QAAQ,CAAA;IACrB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAmB;QAChC,IAAI,IAAI,CAAC,QAAQ,EAAE,KAAK,KAAK,KAAK,CAAC,KAAK;YAAE,OAAM;QAChD,IAAI,CAAC,QAAQ,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;IACrE,CAAC;CACD"}

package/dist/store/session-log/memory.d.ts

@@ -0,0 +1,43 @@
+import type { SessionId } from '../../types/ids/index.js';
+import { type LogMedium, SessionLogCore, type SessionLogCoreOptions } from './core.js';
+import { type SessionLeaseStore } from './lease.js';
+import { type SpillStore } from './spill.js';
+/**
+ * A session log held in process: the same bytes, chain, turn rules, lease and
+ * spills as the disk log, so the conformance suite holds both to one
+ * contract. An in-memory session keeps its whole log, lease and spills in
+ * this process and loses them with it.
+ */
+/** A log's bytes in memory. Exposed so a test can tear or corrupt them. */
+export declare class InMemoryLogMedium implements LogMedium {
+    #private;
+    size(): Promise<number>;
+    read(offset: number, length: number): Promise<Uint8Array>;
+    stream(offset: number): AsyncIterable<Uint8Array>;
+    append(bytes: Uint8Array, expectedOffset: number): Promise<void>;
+    truncate(size: number, expectedSize: number): Promise<void>;
+    /** A copy of the log's bytes. */
+    bytes(): Buffer;
+    /** Replace the log's bytes wholesale (tests: tear a tail, flip a byte). */
+    overwrite(bytes: Uint8Array): void;
+}
+export interface InMemorySessionLogOptions extends Pick<SessionLogCoreOptions, 'now' | 'spillAboveBytes'> {
+    readonly sessionId: SessionId;
+    /**
+     * Share storage with another instance, as a second process would see one
+     * disk log. Each defaults to a fresh store.
+     */
+    readonly medium?: InMemoryLogMedium;
+    readonly leases?: SessionLeaseStore;
+    readonly spills?: SpillStore;
+}
+export declare class InMemorySessionLog extends SessionLogCore {
+    #private;
+    readonly medium: InMemoryLogMedium;
+    readonly leaseStore: SessionLeaseStore;
+    readonly spillStore: SpillStore;
+    constructor(options: InMemorySessionLogOptions);
+    /** Another instance over the same log, lease and spills: what a second process would open. */
+    reopen(): InMemorySessionLog;
+}
+//# sourceMappingURL=memory.d.ts.map

package/dist/store/session-log/memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/store/session-log/memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,EACN,KAAK,SAAS,EAEd,cAAc,EACd,KAAK,qBAAqB,EAC1B,MAAM,WAAW,CAAA;AAClB,OAAO,EAA6B,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC9E,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,YAAY,CAAA;AAEhE;;;;;GAKG;AAEH,2EAA2E;AAC3E,qBAAa,iBAAkB,YAAW,SAAS;;IAG5C,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAIvB,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAIxD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC;IAMlD,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAShE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASjE,iCAAiC;IACjC,KAAK,IAAI,MAAM;IAIf,2EAA2E;IAC3E,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;CAGlC;AAED,MAAM,WAAW,yBAChB,SAAQ,IAAI,CAAC,qBAAqB,EAAE,KAAK,GAAG,iBAAiB,CAAC;IAC9D,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAC7B;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAA;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAA;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAA;CAC5B;AAED,qBAAa,kBAAmB,SAAQ,cAAc;;IACrD,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAA;IACtC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;gBAGnB,OAAO,EAAE,yBAAyB;IAmB9C,8FAA8F;IAC9F,MAAM,IAAI,kBAAkB;CAQ5B"}