@origintrail-official/dkg-agent 10.0.21 → 10.0.23

package/dist/registered-context-graph-authority.d.ts

@@ -7,6 +7,21 @@ import type { ApprovedPrivateReplicaAuthority } from './approved-private-replica
  * is a failure whose error says neither.
  */
 export type ContextGraphReadAuthorityDependency = 'store' | 'chain' | 'local-state' | 'unknown';
+/**
+ * Which check of the recipient-authority stability loop refused a share or a
+ * publish (GH#3067), for server-side diagnostics only: a closed set, so a log
+ * can carry it without any free text.
+ */
+export type ContextGraphAuthorityFailureSite = 'transport-unavailable' | 'transport-changed' | 'revision-moved' | 'recipient-set-changed';
+/**
+ * Why a name that is absent on chain has no accepted unregistered authority,
+ * for server-side diagnostics only: a closed set, so a log can carry it where
+ * the free-text `detail` may not go. The `replica-` codes belong to an approved
+ * member's local proof: it ran out of its time limit, failed, found no current
+ * proof, was discarded on every run because the graph's metadata moved, or was
+ * followed by a binding change or a registration its own metadata claims.
+ */
+export type ContextGraphFinalizedAbsenceDetailCode = 'no-accepted-authority' | 'replica-proof-timeout' | 'replica-proof-error' | 'replica-proof-absent' | 'replica-metadata-moved' | 'replica-binding-changed' | 'replica-registered-metadata';
 export type LiveOnChainAccessPolicyUnavailableReason = 'chain-access-policy-timeout' | 'chain-access-policy-unknown';
 export type LiveOnChainAccessPolicyUnavailable = {
     kind: 'unavailable';
@@ -26,6 +41,8 @@ export type RegisteredContextGraphAuthorityUnavailable = (LiveOnChainAccessPolic
     detail?: string;
     /** Set where the failed read's own error says which dependency could not answer. */
     dependency?: ContextGraphReadAuthorityDependency;
+    /** Set by the producers of `finalized-name-absence-unaccepted` that classify their `detail`. */
+    detailCode?: ContextGraphFinalizedAbsenceDetailCode;
 };
 /** Explicit non-applicability proof, separate from legacy read fallbacks. */
 export type ContextGraphUnregisteredEvidence = 'local-create' | 'accepted-rfc64-finalized-absence' | 'approved-private-replica-finalized-absence';

package/dist/registered-context-graph-authority.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registered-context-graph-authority.d.ts","sourceRoot":"","sources":["../src/registered-context-graph-authority.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAErF;;;;;;GAMG;AACH,MAAM,MAAM,mCAAmC,GAAG,OAAO,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,CAAC;AAEhG,MAAM,MAAM,wCAAwC,GAChD,6BAA6B,GAC7B,6BAA6B,CAAC;AAElC,MAAM,MAAM,kCAAkC,GAAG;IAC/C,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,wCAAwC,CAAC;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,UAAU,CAAC,EAAE,mCAAmC,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,gDAAgD,GACxD,wCAAwC,GACxC,mCAAmC,GACnC,gCAAgC,GAIhC,wBAAwB,GACxB,iCAAiC,GACjC,6BAA6B,GAC7B,iCAAiC,GACjC,yCAAyC,GACzC,yCAAyC,GACzC,qCAAqC,CAAC;AAE1C,KAAK,yDAAyD,GAAG,OAAO,CACtE,gDAAgD,EAChD,wCAAwC,CACzC,CAAC;AAEF,MAAM,MAAM,0CAA0C,GAClD,CAAC,kCAAkC,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,GAC5D;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,yDAAyD,CAAC;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,UAAU,CAAC,EAAE,mCAAmC,CAAC;CAClD,CAAC;AAEN,6EAA6E;AAC7E,MAAM,MAAM,gCAAgC,GACxC,cAAc,GACd,kCAAkC,GAClC,4CAA4C,CAAC;AAEjD,2EAA2E;AAC3E,MAAM,MAAM,+BAA+B,GACvC;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,2EAA2E;IAC3E,oBAAoB,CAAC,EAAE,gCAAgC,CAAC;IACxD,0EAA0E;IAC1E,+BAA+B,CAAC,EAAE,+BAA+B,CAAC;CACnE,GACD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAA;CAAE,GACnE,0CAA0C,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,6BAA6B,GACrC,cAAc,GACd,iBAAiB,GACjB,yBAAyB,CAAC"}
+{"version":3,"file":"registered-context-graph-authority.d.ts","sourceRoot":"","sources":["../src/registered-context-graph-authority.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAErF;;;;;;GAMG;AACH,MAAM,MAAM,mCAAmC,GAAG,OAAO,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,CAAC;AAEhG;;;;GAIG;AACH,MAAM,MAAM,gCAAgC,GACxC,uBAAuB,GACvB,mBAAmB,GACnB,gBAAgB,GAChB,uBAAuB,CAAC;AAE5B;;;;;;;GAOG;AACH,MAAM,MAAM,sCAAsC,GAC9C,uBAAuB,GACvB,uBAAuB,GACvB,qBAAqB,GACrB,sBAAsB,GACtB,wBAAwB,GACxB,yBAAyB,GACzB,6BAA6B,CAAC;AAElC,MAAM,MAAM,wCAAwC,GAChD,6BAA6B,GAC7B,6BAA6B,CAAC;AAElC,MAAM,MAAM,kCAAkC,GAAG;IAC/C,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,wCAAwC,CAAC;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,UAAU,CAAC,EAAE,mCAAmC,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,gDAAgD,GACxD,wCAAwC,GACxC,mCAAmC,GACnC,gCAAgC,GAIhC,wBAAwB,GACxB,iCAAiC,GACjC,6BAA6B,GAC7B,iCAAiC,GACjC,yCAAyC,GACzC,yCAAyC,GACzC,qCAAqC,CAAC;AAE1C,KAAK,yDAAyD,GAAG,OAAO,CACtE,gDAAgD,EAChD,wCAAwC,CACzC,CAAC;AAEF,MAAM,MAAM,0CAA0C,GAClD,CAAC,kCAAkC,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,GAC5D;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,yDAAyD,CAAC;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,UAAU,CAAC,EAAE,mCAAmC,CAAC;IACjD,gGAAgG;IAChG,UAAU,CAAC,EAAE,sCAAsC,CAAC;CACrD,CAAC;AAEN,6EAA6E;AAC7E,MAAM,MAAM,gCAAgC,GACxC,cAAc,GACd,kCAAkC,GAClC,4CAA4C,CAAC;AAEjD,2EAA2E;AAC3E,MAAM,MAAM,+BAA+B,GACvC;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,2EAA2E;IAC3E,oBAAoB,CAAC,EAAE,gCAAgC,CAAC;IACxD,0EAA0E;IAC1E,+BAA+B,CAAC,EAAE,+BAA+B,CAAC;CACnE,GACD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAA;CAAE,GACnE,0CAA0C,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,6BAA6B,GACrC,cAAc,GACd,iBAAiB,GACjB,yBAAyB,CAAC"}

package/dist/registered-private-empty-vm-attempt-v1.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registered-private-empty-vm-attempt-v1.d.ts","sourceRoot":"","sources":["../src/registered-private-empty-vm-attempt-v1.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAI/C,MAAM,MAAM,iCAAiC,GACzC;IAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7F,eAAO,MAAM,yBAAyB;;CAA6B,CAAC;AACpE,eAAO,MAAM,0BAA0B;;;CAA8C,CAAC;AAEtF,gFAAgF;AAChF,MAAM,WAAW,6BAA6B;IAC5C,YAAY,IAAI,OAAO,CAAC;IACxB,oBAAoB,IAAI,MAAM,CAAC;IAC/B,eAAe,IAAI;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,SAAS,CAAC;IACd,kBAAkB,IAAI,OAAO,CAAC;IAC9B,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,iCAAiC,IAAI,MAAM,GAAG,SAAS,CAAC;CACzD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAIvD;AAED,gFAAgF;AAChF,wBAAsB,iCAAiC,CACrD,KAAK,EAAE,QAAQ,EACf,QAAQ,EAAE,6BAA6B,EACvC,cAAc,EAAE,MAAM,EACtB,kBAAkB,EAAE,MAAM,EAC1B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,iCAAiC,CAAC,CAmF5C"}
+{"version":3,"file":"registered-private-empty-vm-attempt-v1.d.ts","sourceRoot":"","sources":["../src/registered-private-empty-vm-attempt-v1.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAI/C,MAAM,MAAM,iCAAiC,GACzC;IAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7F,eAAO,MAAM,yBAAyB;;CAA6B,CAAC;AACpE,eAAO,MAAM,0BAA0B;;;CAA8C,CAAC;AAEtF,gFAAgF;AAChF,MAAM,WAAW,6BAA6B;IAC5C,YAAY,IAAI,OAAO,CAAC;IACxB,oBAAoB,IAAI,MAAM,CAAC;IAC/B,eAAe,IAAI;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,SAAS,CAAC;IACd,kBAAkB,IAAI,OAAO,CAAC;IAC9B,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,iCAAiC,IAAI,MAAM,GAAG,SAAS,CAAC;CACzD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAIvD;AAED,gFAAgF;AAChF,wBAAsB,iCAAiC,CACrD,KAAK,EAAE,QAAQ,EACf,QAAQ,EAAE,6BAA6B,EACvC,cAAc,EAAE,MAAM,EACtB,kBAAkB,EAAE,MAAM,EAC1B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,iCAAiC,CAAC,CAuF5C"}

package/dist/registered-private-empty-vm-attempt-v1.js

@@ -1,6 +1,6 @@
 // SPDX-License-Identifier: Apache-2.0
 import { ethers } from 'ethers';
-import { createStrictCurrentFinalizedEvmSnapshotScopeV1, isFinalizedChainAdmissionContention, resolveRpcUrls, } from '@origintrail-official/dkg-chain';
+import { createStrictCurrentFinalizedEvmSnapshotScopeV1, isFinalizedChainAdmissionContention, numericChainIdOf, resolveRpcUrls, } from '@origintrail-official/dkg-chain';
 import { assertCanonicalChainId, assertCanonicalEvmAddress, } from '@origintrail-official/dkg-core';
 import { finalizedContextGraphSnapshotMismatchV1 } from './internal/context-graph-authority/finalized-context-graph-binding.js';
 import { proveRegisteredPrivateEmptyVmV1 } from './rfc64/registered-private-empty-vm-proof-v1.js';
@@ -58,17 +58,21 @@ export async function attemptRegisteredPrivateEmptyVmV1(agent, bindings, context
             tracePrivateEmptyVm('rpc-endpoints-absent');
             return UNPROVEN_PRIVATE_EMPTY_VM;
         }
-        const configuredChainId = chainConfig.chainId?.match(/^evm:(0|[1-9][0-9]*)$/u)?.[1];
+        // The adapter's own reading of a configured chain: a decimal id behind any
+        // namespace. The network files name theirs `base:8453`, `gnosis:100`, and
+        // so on; only a local chain is `evm:31337`.
+        const configuredChainId = numericChainIdOf(chainConfig.chainId);
         if ((chainConfig.chainId !== undefined && configuredChainId === undefined)
             || !ethers.isAddress(chainConfig.hubAddress)) {
             tracePrivateEmptyVm('chain-binding-absent');
             return UNPROVEN_PRIVATE_EMPTY_VM;
         }
-        const chainId = (await bindings.readAdapterEvmChainId()).toString();
-        if (configuredChainId !== undefined && configuredChainId !== chainId) {
+        const adapterChainId = await bindings.readAdapterEvmChainId();
+        if (configuredChainId !== undefined && configuredChainId !== adapterChainId) {
             tracePrivateEmptyVm('chain-binding-mismatch');
             return UNPROVEN_PRIVATE_EMPTY_VM;
         }
+        const chainId = adapterChainId.toString();
         // Normalize external bindings once. The registry supplies the graph name;
         // it is not restricted to the RFC-64 author-lane grammar.
         const hubAddress = chainConfig.hubAddress.toLowerCase();

package/dist/registered-private-empty-vm-attempt-v1.js.map

@@ -1 +1 @@
-{"version":3,"file":"registered-private-empty-vm-attempt-v1.js","sourceRoot":"","sources":["../src/registered-private-empty-vm-attempt-v1.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EACL,8CAA8C,EAC9C,mCAAmC,EACnC,cAAc,GACf,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,sBAAsB,EAAE,yBAAyB,GAClD,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,uCAAuC,EAAE,MAAM,uEAAuE,CAAC;AAChI,OAAO,EAAE,+BAA+B,EAAE,MAAM,iDAAiD,CAAC;AAMlG,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,MAAM,EAAE,KAAK,EAAW,CAAC;AACpE,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAW,CAAC;AAiBtF,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG,EAAE,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,KAAe,EACf,QAAuC,EACvC,cAAsB,EACtB,kBAA0B,EAC1B,MAAoB;IAEpB,IAAI,CAAC;QACH,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,yBAAyB,CAAC;QACtD,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;YAC1D,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QAC1E,CAAC;QACD,MAAM,gBAAgB,GAAG,QAAQ,CAAC,oBAAoB,EAAE,CAAC;QACzD,MAAM,eAAe,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACzG,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,mBAAmB,CAAC,4BAA4B,CAAC,CAAC;YAAC,OAAO,0BAA0B,CAAC;QACvF,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QAC3F,IAAI,CAAC,aAAa,EAAE,CAAC;YAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QAAC,CAAC;QAC7F,IAAI,QAAQ,CAAC,oBAAoB,EAAE,KAAK,gBAAgB,EAAE,CAAC;YACzD,mBAAmB,CAAC,kCAAkC,CAAC,CAAC;YAAC,OAAO,0BAA0B,CAAC;QAC7F,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,iDAAiD,CAAC,cAAc,EAAE;YAC3F,kBAAkB,EAAE,MAAM,EAAE,yBAAyB,EAAE,KAAK,EAAE,MAAM;SACrE,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;YACrC,mBAAmB,CAAC,oCAAoC,CAAC,CAAC;YAAC,OAAO,0BAA0B,CAAC;QAC/F,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAkB;eACnE,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,cAAc,EAAE,CAAC;YAC9E,mBAAmB,CAAC,kCAAkC,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QAC5F,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC/C,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAChE,mBAAmB,CAAC,yBAAyB,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QACnF,CAAC;QACD,MAAM,SAAS,GAAG,cAAc,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;QAChF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QAAC,CAAC;QAC9G,MAAM,iBAAiB,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,WAAW,CAAC,OAAO,KAAK,SAAS,IAAI,iBAAiB,KAAK,SAAS,CAAC;eACrE,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/C,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QAChF,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpE,IAAI,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,KAAK,OAAO,EAAE,CAAC;YACrE,mBAAmB,CAAC,wBAAwB,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QAClF,CAAC;QACD,0EAA0E;QAC1E,0DAA0D;QAC1D,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QACxD,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAChC,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAClC,yBAAyB,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,sCAAsC,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC9F,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,iBAAiB,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YAC7E,mBAAmB,CAAC,kCAAkC,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QAC5F,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO;eAC1B,OAAO,CAAC,YAAY,KAAK,CAAC;eAC1B,uCAAuC,CAAC,OAAO,EAAE;gBAClD,SAAS,EAAE,UAAU,CAAC,iBAAiB;gBACvC,QAAQ,EAAE,UAAU,CAAC,gBAAgB;aACtC,CAAC,KAAK,SAAS,EAAE,CAAC;YACnB,mBAAmB,CAAC,kCAAkC,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QAC5F,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,iCAAiC,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,+BAA+B,CAAC;YACnD,cAAc;YACd,qBAAqB,EAAE,OAAO,CAAC,cAAc;YAC7C,kBAAkB,EAAE,MAAM;YAC1B,OAAO;YACP,UAAU;YACV,yBAAyB,EAAE,OAAO,CAAC,kBAAkB;YACrD,QAAQ,EAAE,8CAA8C,CAAC;gBACvD,OAAO,EAAE,SAAS;gBAClB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC;gBAChE,KAAK,EAAE,OAAO;aACf,CAAC;YACF,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACtG,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,mBAAmB,CAAC,4BAA4B,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QAAC,CAAC;QACrG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IACzE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,mBAAmB,CAAC,eAAe,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACtF,OAAO,MAAM,EAAE,OAAO,IAAI,CAAC,mCAAmC,CAAC,KAAK,CAAC;YACnE,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,0BAA0B,CAAC;IAC7D,CAAC;AACH,CAAC"}
+{"version":3,"file":"registered-private-empty-vm-attempt-v1.js","sourceRoot":"","sources":["../src/registered-private-empty-vm-attempt-v1.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EACL,8CAA8C,EAC9C,mCAAmC,EACnC,gBAAgB,EAChB,cAAc,GACf,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,sBAAsB,EAAE,yBAAyB,GAClD,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,uCAAuC,EAAE,MAAM,uEAAuE,CAAC;AAChI,OAAO,EAAE,+BAA+B,EAAE,MAAM,iDAAiD,CAAC;AAMlG,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,MAAM,EAAE,KAAK,EAAW,CAAC;AACpE,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAW,CAAC;AAiBtF,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG,EAAE,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,KAAe,EACf,QAAuC,EACvC,cAAsB,EACtB,kBAA0B,EAC1B,MAAoB;IAEpB,IAAI,CAAC;QACH,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,yBAAyB,CAAC;QACtD,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;YAC1D,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QAC1E,CAAC;QACD,MAAM,gBAAgB,GAAG,QAAQ,CAAC,oBAAoB,EAAE,CAAC;QACzD,MAAM,eAAe,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACzG,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,mBAAmB,CAAC,4BAA4B,CAAC,CAAC;YAAC,OAAO,0BAA0B,CAAC;QACvF,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QAC3F,IAAI,CAAC,aAAa,EAAE,CAAC;YAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QAAC,CAAC;QAC7F,IAAI,QAAQ,CAAC,oBAAoB,EAAE,KAAK,gBAAgB,EAAE,CAAC;YACzD,mBAAmB,CAAC,kCAAkC,CAAC,CAAC;YAAC,OAAO,0BAA0B,CAAC;QAC7F,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,iDAAiD,CAAC,cAAc,EAAE;YAC3F,kBAAkB,EAAE,MAAM,EAAE,yBAAyB,EAAE,KAAK,EAAE,MAAM;SACrE,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;YACrC,mBAAmB,CAAC,oCAAoC,CAAC,CAAC;YAAC,OAAO,0BAA0B,CAAC;QAC/F,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAkB;eACnE,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,cAAc,EAAE,CAAC;YAC9E,mBAAmB,CAAC,kCAAkC,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QAC5F,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC/C,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAChE,mBAAmB,CAAC,yBAAyB,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QACnF,CAAC;QACD,MAAM,SAAS,GAAG,cAAc,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;QAChF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QAAC,CAAC;QAC9G,2EAA2E;QAC3E,0EAA0E;QAC1E,4CAA4C;QAC5C,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,WAAW,CAAC,OAAO,KAAK,SAAS,IAAI,iBAAiB,KAAK,SAAS,CAAC;eACrE,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/C,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QAChF,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QAC9D,IAAI,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,KAAK,cAAc,EAAE,CAAC;YAC5E,mBAAmB,CAAC,wBAAwB,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QAClF,CAAC;QACD,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC;QAC1C,0EAA0E;QAC1E,0DAA0D;QAC1D,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QACxD,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAChC,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAClC,yBAAyB,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,sCAAsC,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC9F,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,iBAAiB,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YAC7E,mBAAmB,CAAC,kCAAkC,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QAC5F,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO;eAC1B,OAAO,CAAC,YAAY,KAAK,CAAC;eAC1B,uCAAuC,CAAC,OAAO,EAAE;gBAClD,SAAS,EAAE,UAAU,CAAC,iBAAiB;gBACvC,QAAQ,EAAE,UAAU,CAAC,gBAAgB;aACtC,CAAC,KAAK,SAAS,EAAE,CAAC;YACnB,mBAAmB,CAAC,kCAAkC,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QAC5F,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,iCAAiC,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,+BAA+B,CAAC;YACnD,cAAc;YACd,qBAAqB,EAAE,OAAO,CAAC,cAAc;YAC7C,kBAAkB,EAAE,MAAM;YAC1B,OAAO;YACP,UAAU;YACV,yBAAyB,EAAE,OAAO,CAAC,kBAAkB;YACrD,QAAQ,EAAE,8CAA8C,CAAC;gBACvD,OAAO,EAAE,SAAS;gBAClB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC;gBAChE,KAAK,EAAE,OAAO;aACf,CAAC;YACF,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACtG,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,mBAAmB,CAAC,4BAA4B,CAAC,CAAC;YAAC,OAAO,yBAAyB,CAAC;QAAC,CAAC;QACrG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IACzE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,mBAAmB,CAAC,eAAe,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACtF,OAAO,MAAM,EAAE,OAAO,IAAI,CAAC,mCAAmC,CAAC,KAAK,CAAC;YACnE,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,0BAA0B,CAAC;IAC7D,CAAC;AACH,CAAC"}

package/dist/rfc64/catalog-repair-retry-v1.d.ts

@@ -1,13 +1,19 @@
+import type { CatalogRepairDiagnosticV1 } from './catalog-repair-diagnostics-v1.js';
+/** Producer-owned identity separates inventory churn from an authoring-scope transition. */
+export interface CatalogRepairRevisionHintV1 {
+    readonly scopeIdentity: string;
+    readonly headRevision: string | null;
+}
 /** Constant-size scheduling hint; canonical reconciliation remains authoritative. */
 export declare class CatalogRepairRetryV1 {
     #private;
     generation: number;
     consecutiveFailures: number;
     nextAttemptAtMs: number | null;
-    observe(revision: string | null | undefined): boolean;
+    observe(revision: CatalogRepairRevisionHintV1 | null | undefined): boolean;
     eligible(nowMs: number): boolean;
     reset(): void;
-    /** A stale attempt cannot impose its cooldown on a newer observed revision. */
-    fail(attemptGeneration: number, nowMs: number, configuredIntervalMs?: number): boolean;
+    /** Integrity and store pressure survive head churn; lane changes and success reset them. */
+    fail(attemptGeneration: number, nowMs: number, configuredIntervalMs?: number, kind?: CatalogRepairDiagnosticV1['kind']): boolean;
 }
 //# sourceMappingURL=catalog-repair-retry-v1.d.ts.map

package/dist/rfc64/catalog-repair-retry-v1.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"catalog-repair-retry-v1.d.ts","sourceRoot":"","sources":["../../src/rfc64/catalog-repair-retry-v1.ts"],"names":[],"mappings":"AAEA,qFAAqF;AACrF,qBAAa,oBAAoB;;IAE/B,UAAU,SAAK;IACf,mBAAmB,SAAK;IACxB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAQ;IAEtC,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO;IAYrD,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAIhC,KAAK,IAAI,IAAI;IAKb,+EAA+E;IAC/E,IAAI,CAAC,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,CAAC,EAAE,MAAM,GAAG,OAAO;CASvF"}
+{"version":3,"file":"catalog-repair-retry-v1.d.ts","sourceRoot":"","sources":["../../src/rfc64/catalog-repair-retry-v1.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAOpF,4FAA4F;AAC5F,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,qFAAqF;AACrF,qBAAa,oBAAoB;;IAI/B,UAAU,SAAK;IACf,mBAAmB,SAAK;IACxB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAQ;IAEtC,OAAO,CAAC,QAAQ,EAAE,2BAA2B,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO;IAmB1E,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAIhC,KAAK,IAAI,IAAI;IAMb,4FAA4F;IAC5F,IAAI,CAAC,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE,yBAAyB,CAAC,MAAM,CAAa,GAAG,OAAO;CAW5I"}

package/dist/rfc64/catalog-repair-retry-v1.js

@@ -1,7 +1,11 @@
 // SPDX-License-Identifier: Apache-2.0
+const survivesInventoryChange = (kind) => (kind === 'integrity' || kind === 'queue_wait' || kind === 'queue_full'
+    || kind === 'store_timeout_not_started' || kind === 'store_timeout_indeterminate');
 /** Constant-size scheduling hint; canonical reconciliation remains authoritative. */
 export class CatalogRepairRetryV1 {
     #revision;
+    #retainCooldown = false;
+    #lastLaneGeneration = 0;
     generation = 0;
     consecutiveFailures = 0;
     nextAttemptAtMs = null;
@@ -9,11 +13,20 @@ export class CatalogRepairRetryV1 {
         // A failed local hint read is neither a mutation nor a lane transition.
         if (revision === undefined)
             return false;
-        const changed = this.#revision !== undefined && this.#revision !== revision;
-        this.#revision = revision;
+        const previous = this.#revision;
+        const changed = previous !== undefined && (previous === null || revision === null
+            ? previous !== revision
+            : previous.scopeIdentity !== revision.scopeIdentity || previous.headRevision !== revision.headRevision);
+        const scopeChanged = previous != null && revision !== null
+            && previous.scopeIdentity !== revision.scopeIdentity;
+        const laneChanged = previous === null || revision === null || scopeChanged;
+        this.#revision = revision === null ? null : { ...revision };
         if (changed) {
             this.generation += 1;
-            this.reset();
+            if (laneChanged)
+                this.#lastLaneGeneration = this.generation;
+            if (laneChanged || !this.#retainCooldown)
+                this.reset();
         }
         return changed;
     }
@@ -21,13 +34,16 @@ export class CatalogRepairRetryV1 {
         return this.nextAttemptAtMs === null || nowMs >= this.nextAttemptAtMs;
     }
     reset() {
+        this.#retainCooldown = false;
         this.consecutiveFailures = 0;
         this.nextAttemptAtMs = null;
     }
-    /** A stale attempt cannot impose its cooldown on a newer observed revision. */
-    fail(attemptGeneration, nowMs, configuredIntervalMs) {
-        if (attemptGeneration !== this.generation)
+    /** Integrity and store pressure survive head churn; lane changes and success reset them. */
+    fail(attemptGeneration, nowMs, configuredIntervalMs, kind = 'unknown') {
+        const retain = survivesInventoryChange(kind);
+        if (attemptGeneration !== this.generation && (!retain || this.#revision === null || attemptGeneration < this.#lastLaneGeneration))
             return false;
+        this.#retainCooldown = retain;
         this.consecutiveFailures = Math.min(Number.MAX_SAFE_INTEGER, this.consecutiveFailures + 1);
         const base = configuredIntervalMs !== undefined && configuredIntervalMs > 0
             ? configuredIntervalMs : 5_000;

package/dist/rfc64/catalog-repair-retry-v1.js.map

@@ -1 +1 @@
-{"version":3,"file":"catalog-repair-retry-v1.js","sourceRoot":"","sources":["../../src/rfc64/catalog-repair-retry-v1.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,qFAAqF;AACrF,MAAM,OAAO,oBAAoB;IAC/B,SAAS,CAA4B;IACrC,UAAU,GAAG,CAAC,CAAC;IACf,mBAAmB,GAAG,CAAC,CAAC;IACxB,eAAe,GAAkB,IAAI,CAAC;IAEtC,OAAO,CAAC,QAAmC;QACzC,wEAAwE;QACxE,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC;QAC5E,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;YACrB,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,OAAO,IAAI,CAAC,eAAe,KAAK,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC;IACxE,CAAC;IAED,KAAK;QACH,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;IAC9B,CAAC;IAED,+EAA+E;IAC/E,IAAI,CAAC,iBAAyB,EAAE,KAAa,EAAE,oBAA6B;QAC1E,IAAI,iBAAiB,KAAK,IAAI,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QACxD,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC;QAC3F,MAAM,IAAI,GAAG,oBAAoB,KAAK,SAAS,IAAI,oBAAoB,GAAG,CAAC;YACzE,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC,CAAC;QACvG,IAAI,CAAC,eAAe,GAAG,KAAK,GAAG,KAAK,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}
+{"version":3,"file":"catalog-repair-retry-v1.js","sourceRoot":"","sources":["../../src/rfc64/catalog-repair-retry-v1.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAItC,MAAM,uBAAuB,GAAG,CAAC,IAAuC,EAAW,EAAE,CAAC,CACpF,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,YAAY;OACnE,IAAI,KAAK,2BAA2B,IAAI,IAAI,KAAK,6BAA6B,CAClF,CAAC;AAQF,qFAAqF;AACrF,MAAM,OAAO,oBAAoB;IAC/B,SAAS,CAAiD;IAC1D,eAAe,GAAG,KAAK,CAAC;IACxB,mBAAmB,GAAG,CAAC,CAAC;IACxB,UAAU,GAAG,CAAC,CAAC;IACf,mBAAmB,GAAG,CAAC,CAAC;IACxB,eAAe,GAAkB,IAAI,CAAC;IAEtC,OAAO,CAAC,QAAwD;QAC9D,wEAAwE;QACxE,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,MAAM,OAAO,GAAG,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI;YAC/E,CAAC,CAAC,QAAQ,KAAK,QAAQ;YACvB,CAAC,CAAC,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC1G,MAAM,YAAY,GAAG,QAAQ,IAAI,IAAI,IAAI,QAAQ,KAAK,IAAI;eACrD,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa,CAAC;QACvD,MAAM,WAAW,GAAG,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,IAAI,YAAY,CAAC;QAC3E,IAAI,CAAC,SAAS,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC5D,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;YACrB,IAAI,WAAW;gBAAE,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,UAAU,CAAC;YAC5D,IAAI,WAAW,IAAI,CAAC,IAAI,CAAC,eAAe;gBAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QACzD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,OAAO,IAAI,CAAC,eAAe,KAAK,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC;IACxE,CAAC;IAED,KAAK;QACH,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC7B,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;IAC9B,CAAC;IAED,4FAA4F;IAC5F,IAAI,CAAC,iBAAyB,EAAE,KAAa,EAAE,oBAA6B,EAAE,OAA0C,SAAS;QAC/H,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,iBAAiB,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,iBAAiB,GAAG,IAAI,CAAC,mBAAmB,CAAC;YAAE,OAAO,KAAK,CAAC;QAChJ,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC;QAC9B,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC;QAC3F,MAAM,IAAI,GAAG,oBAAoB,KAAK,SAAS,IAAI,oBAAoB,GAAG,CAAC;YACzE,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC,CAAC;QACvG,IAAI,CAAC,eAAe,GAAG,KAAK,GAAG,KAAK,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/rfc64/control-envelope-signer-v1.d.ts

@@ -9,6 +9,14 @@ export declare class Rfc64ControlEnvelopeSigningErrorV1 extends Error {
     readonly phase: 'callback' | 'verification';
     constructor(phase: 'callback' | 'verification', message: string, options?: ErrorOptions);
 }
+/**
+ * The same signer, awaiting `turn` before each signature. A producer that
+ * works on the main thread passes its time-slice checkpoint, so the work
+ * around each signature does not run back to back with the work before it.
+ * The callback is read once and called on a snapshot that holds the issuer,
+ * which is the receiver a producer's own signer snapshot gives it.
+ */
+export declare function rfc64SignerTakingTurnsV1(signer: Rfc64ControlEnvelopeEip191SignerV1, turn: () => Promise<void>): Rfc64ControlEnvelopeEip191SignerV1;
 export interface SignedAndVerifiedRfc64ControlEnvelopeV1 {
     readonly envelope: SignedControlEnvelopeV1;
     readonly issuerSignature: VerifiedControlEnvelopeIssuerSignatureV1;

package/dist/rfc64/control-envelope-signer-v1.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control-envelope-signer-v1.d.ts","sourceRoot":"","sources":["../../src/rfc64/control-envelope-signer-v1.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EACZ,uBAAuB,EACvB,yBAAyB,EAC1B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAEL,KAAK,wCAAwC,EAC9C,MAAM,iCAAiC,CAAC;AAGzC,4DAA4D;AAC5D,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,CAAC,YAAY,EAAE,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACpE;AAED,qBAAa,kCAAmC,SAAQ,KAAK;IAEzD,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,cAAc;gBAAlC,KAAK,EAAE,UAAU,GAAG,cAAc,EAC3C,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,YAAiB;CAK7B;AAED,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,wCAAwC,CAAC;CACpE;AAED,mFAAmF;AACnF,wBAAsB,mCAAmC,CACvD,QAAQ,EAAE,yBAAyB,EACnC,YAAY,EAAE,UAAU,EACxB,MAAM,EAAE,kCAAkC,GACzC,OAAO,CAAC,uCAAuC,CAAC,CAsBlD"}
+{"version":3,"file":"control-envelope-signer-v1.d.ts","sourceRoot":"","sources":["../../src/rfc64/control-envelope-signer-v1.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EACZ,uBAAuB,EACvB,yBAAyB,EAC1B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAEL,KAAK,wCAAwC,EAC9C,MAAM,iCAAiC,CAAC;AAGzC,4DAA4D;AAC5D,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,CAAC,YAAY,EAAE,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACpE;AAED,qBAAa,kCAAmC,SAAQ,KAAK;IAEzD,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,cAAc;gBAAlC,KAAK,EAAE,UAAU,GAAG,cAAc,EAC3C,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,YAAiB;CAK7B;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,kCAAkC,EAC1C,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GACxB,kCAAkC,CAWpC;AAED,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,wCAAwC,CAAC;CACpE;AAED,mFAAmF;AACnF,wBAAsB,mCAAmC,CACvD,QAAQ,EAAE,yBAAyB,EACnC,YAAY,EAAE,UAAU,EACxB,MAAM,EAAE,kCAAkC,GACzC,OAAO,CAAC,uCAAuC,CAAC,CAsBlD"}

package/dist/rfc64/control-envelope-signer-v1.js

@@ -8,6 +8,26 @@ export class Rfc64ControlEnvelopeSigningErrorV1 extends Error {
         this.name = 'Rfc64ControlEnvelopeSigningErrorV1';
     }
 }
+/**
+ * The same signer, awaiting `turn` before each signature. A producer that
+ * works on the main thread passes its time-slice checkpoint, so the work
+ * around each signature does not run back to back with the work before it.
+ * The callback is read once and called on a snapshot that holds the issuer,
+ * which is the receiver a producer's own signer snapshot gives it.
+ */
+export function rfc64SignerTakingTurnsV1(signer, turn) {
+    const { issuer, signDigest } = signer;
+    if (typeof signDigest !== 'function')
+        return signer;
+    const snapshot = Object.freeze({ issuer, signDigest });
+    return Object.freeze({
+        issuer,
+        signDigest: async (objectDigest) => {
+            await turn();
+            return snapshot.signDigest(objectDigest);
+        },
+    });
+}
 /** Sign one prepared control object and recover its declared issuer before use. */
 export async function signAndVerifyRfc64ControlEnvelopeV1(unsigned, objectDigest, signer) {
     let signature;

package/dist/rfc64/control-envelope-signer-v1.js.map

@@ -1 +1 @@
-{"version":3,"file":"control-envelope-signer-v1.js","sourceRoot":"","sources":["../../src/rfc64/control-envelope-signer-v1.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,sCAAsC,GAEvC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAQhC,MAAM,OAAO,kCAAmC,SAAQ,KAAK;IAEhD;IADX,YACW,KAAkC,EAC3C,OAAe,EACf,UAAwB,EAAE;QAE1B,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAJf,UAAK,GAAL,KAAK,CAA6B;QAK3C,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAC;IACnD,CAAC;CACF;AAOD,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,QAAmC,EACnC,YAAwB,EACxB,MAA0C;IAE1C,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,kCAAkC,CAC1C,UAAU,EACV,8BAA8B,QAAQ,CAAC,UAAU,EAAE,EACnD,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,SAAS,EAA6B,CAAC;IACnF,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,MAAM,sCAAsC,CAAC,MAAM,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,kCAAkC,CAC1C,cAAc,EACd,sCAAsC,QAAQ,CAAC,UAAU,mBAAmB,EAC5E,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"control-envelope-signer-v1.js","sourceRoot":"","sources":["../../src/rfc64/control-envelope-signer-v1.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,sCAAsC,GAEvC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAQhC,MAAM,OAAO,kCAAmC,SAAQ,KAAK;IAEhD;IADX,YACW,KAAkC,EAC3C,OAAe,EACf,UAAwB,EAAE;QAE1B,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAJf,UAAK,GAAL,KAAK,CAA6B;QAK3C,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAC;IACnD,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAA0C,EAC1C,IAAyB;IAEzB,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IACtC,IAAI,OAAO,UAAU,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM;QACN,UAAU,EAAE,KAAK,EAAE,YAAwB,EAAmB,EAAE;YAC9D,MAAM,IAAI,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAOD,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,QAAmC,EACnC,YAAwB,EACxB,MAA0C;IAE1C,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,kCAAkC,CAC1C,UAAU,EACV,8BAA8B,QAAQ,CAAC,UAAU,EAAE,EACnD,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,SAAS,EAA6B,CAAC;IACnF,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,MAAM,sCAAsC,CAAC,MAAM,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,kCAAkC,CAC1C,cAAc,EACd,sCAAsC,QAAQ,CAAC,UAAU,mBAAmB,EAC5E,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/rfc64/legacy-swm-boundary-fence-v1.d.ts

@@ -0,0 +1,109 @@
+/** Who raised a fence. Named in every refusal and in every fence event. */
+export type Rfc64LegacySwmFenceSourceV1 = 'finalized-vm-retirement' | 'republish-retirement' | 'receiver-lease';
+export type Rfc64LegacySwmFenceScopeV1 = 'graph' | 'asset';
+/**
+ * A fence that is worth a log line: one that gave up waiting for its turn
+ * (`wait-exceeded`, the retirement did not run) or one that ran but was up for
+ * longer than {@link RFC64_LEGACY_SWM_FENCE_LONG_MS} (`long-fence`).
+ */
+export interface Rfc64LegacySwmFenceEventV1 {
+    readonly kind: 'wait-exceeded' | 'long-fence';
+    readonly source: Rfc64LegacySwmFenceSourceV1;
+    readonly scope: Rfc64LegacySwmFenceScopeV1;
+    readonly contextGraphId: string;
+    readonly kaUal?: string;
+    readonly elapsedMs: number;
+    /** What a `wait-exceeded` fence was still waiting for. */
+    readonly waitingOn?: 'mutation-chain' | 'preparations';
+    /** In-flight preparations of the scope when a `wait-exceeded` fence gave up. */
+    readonly activePreparations?: number;
+}
+/** One log line for a fence event. */
+export declare function describeRfc64LegacySwmFenceEventV1(event: Readonly<Rfc64LegacySwmFenceEventV1>): string;
+/**
+ * How long a retirement or a lease waits for its turn on the mutation chain
+ * and for the in-flight preparations of its scope before it gives up and drops
+ * its fence. Below the promote queue's first retry (48 to 72 s), so a share
+ * refused by a fence that never gets its turn is admitted on that retry.
+ */
+export declare const RFC64_LEGACY_SWM_FENCE_WAIT_LIMIT_MS = 30000;
+/** A fence that was up for longer than this is reported when it drops. */
+export declare const RFC64_LEGACY_SWM_FENCE_LONG_MS = 5000;
+export interface Rfc64LegacySwmFenceOptionsV1 {
+    readonly waitLimitMs?: number;
+    readonly longFenceMs?: number;
+    readonly now?: () => number;
+    readonly onFenceEvent?: (event: Readonly<Rfc64LegacySwmFenceEventV1>) => void;
+}
+interface Rfc64LegacySwmFenceHolderV1 {
+    readonly source: Rfc64LegacySwmFenceSourceV1;
+    readonly raisedAt: number;
+}
+interface Rfc64LegacySwmFenceScopeStateV1 {
+    activePreparations: number;
+    preparationsDrained: Promise<void>;
+    resolvePreparationsDrained: (() => void) | undefined;
+    /** The retirements and leases that fence this scope, oldest first. */
+    readonly holders: Rfc64LegacySwmFenceHolderV1[];
+    fenceDropped: Promise<void>;
+    resolveFenceDropped: (() => void) | undefined;
+}
+/**
+ * The preparation fences of one legacy SWM boundary and the chain that
+ * serializes its retirements. A preparation registers under its context graph
+ * id and under its asset key; a retirement fences one of the two.
+ */
+export interface Rfc64LegacySwmFenceCoordinatorV1 {
+    readonly scopes: Map<string, Rfc64LegacySwmFenceScopeStateV1>;
+    mutationTail: Promise<void>;
+    readonly waitLimitMs: number;
+    readonly longFenceMs: number;
+    readonly now: () => number;
+    readonly onFenceEvent: ((event: Readonly<Rfc64LegacySwmFenceEventV1>) => void) | undefined;
+}
+export declare function createRfc64LegacySwmFenceCoordinatorV1(options?: Rfc64LegacySwmFenceOptionsV1): Rfc64LegacySwmFenceCoordinatorV1;
+/**
+ * Refuse a preparation that meets a fence, the graph's or its asset's. The
+ * refusal names the oldest holder, so a log line that carries the message
+ * says which caller raised the fence and for how long it has been up.
+ */
+export declare function assertRfc64LegacySwmPreparationAdmittedV1(fence: Rfc64LegacySwmFenceCoordinatorV1, contextGraphId: string, kaUal: string): void;
+/**
+ * Register one in-flight preparation on both of its scopes. The returned
+ * function releases both and must be called exactly once.
+ */
+export declare function beginRfc64LegacySwmPreparationV1(fence: Rfc64LegacySwmFenceCoordinatorV1, contextGraphId: string, kaUal: string): () => void;
+/**
+ * Resolve once neither the graph nor the asset is fenced, or after `limitMs`.
+ * It registers nothing and promises nothing: a fence raised after it resolves
+ * still refuses the preparation. A seam that can wait calls it right before
+ * the synchronous prepare, so a fence that is up for milliseconds costs those
+ * milliseconds instead of a refused attempt and its retry delay.
+ */
+export declare function waitForRfc64LegacySwmPreparationAdmissionV1(fence: Rfc64LegacySwmFenceCoordinatorV1, contextGraphId: string, kaUal: string, limitMs: number): Promise<void>;
+export type Rfc64LegacySwmRetirementOutcomeV1<T> = {
+    readonly ran: true;
+    readonly value: T;
+} | {
+    readonly ran: false;
+};
+/**
+ * Run `work` behind a fence: raise it, take a turn on the mutation chain, wait
+ * for the scope's in-flight preparations, then run. The fence drops when the
+ * work settles, or earlier when the work calls `dropFence`.
+ *
+ * The two waits share one bound. A retirement that does not get to run within
+ * it drops its fence, reports `wait-exceeded` and answers `ran: false`; when
+ * its turn on the chain comes later it does nothing. Leaving the markers in
+ * place is the conservative state, and the next pass retires them. Without the
+ * bound one preparation that never settles would hold the chain, and through
+ * it the fence of every graph that tries to retire, for as long as it hangs.
+ */
+export declare function runRfc64LegacySwmRetirementV1<T>(fence: Rfc64LegacySwmFenceCoordinatorV1, target: Readonly<{
+    source: Rfc64LegacySwmFenceSourceV1;
+    contextGraphId: string;
+    /** Present for an asset fence; absent for the graph's. */
+    kaUal?: string;
+}>, work: (dropFence: () => void) => Promise<T>): Promise<Rfc64LegacySwmRetirementOutcomeV1<T>>;
+export {};
+//# sourceMappingURL=legacy-swm-boundary-fence-v1.d.ts.map

package/dist/rfc64/legacy-swm-boundary-fence-v1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-swm-boundary-fence-v1.d.ts","sourceRoot":"","sources":["../../src/rfc64/legacy-swm-boundary-fence-v1.ts"],"names":[],"mappings":"AAIA,2EAA2E;AAC3E,MAAM,MAAM,2BAA2B,GACnC,yBAAyB,GACzB,sBAAsB,GACtB,gBAAgB,CAAC;AAErB,MAAM,MAAM,0BAA0B,GAAG,OAAO,GAAG,OAAO,CAAC;AAE3D;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,YAAY,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,0DAA0D;IAC1D,QAAQ,CAAC,SAAS,CAAC,EAAE,gBAAgB,GAAG,cAAc,CAAC;IACvD,gFAAgF;IAChF,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAED,sCAAsC;AACtC,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,QAAQ,CAAC,0BAA0B,CAAC,GAC1C,MAAM,CAOR;AAED;;;;;GAKG;AACH,eAAO,MAAM,oCAAoC,QAAS,CAAC;AAE3D,0EAA0E;AAC1E,eAAO,MAAM,8BAA8B,OAAQ,CAAC;AAEpD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,0BAA0B,CAAC,KAAK,IAAI,CAAC;CAC/E;AAED,UAAU,2BAA2B;IACnC,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,UAAU,+BAA+B;IACvC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,0BAA0B,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;IACrD,sEAAsE;IACtE,QAAQ,CAAC,OAAO,EAAE,2BAA2B,EAAE,CAAC;IAChD,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,mBAAmB,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;CAC/C;AAED;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;IAC9D,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,0BAA0B,CAAC,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC5F;AAED,wBAAgB,sCAAsC,CACpD,OAAO,GAAE,4BAAiC,GACzC,gCAAgC,CASlC;AAYD;;;;GAIG;AACH,wBAAgB,yCAAyC,CACvD,KAAK,EAAE,gCAAgC,EACvC,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,MAAM,GACZ,IAAI,CAmBN;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,gCAAgC,EACvC,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,MAAM,GACZ,MAAM,IAAI,CAyBZ;AAED;;;;;;GAMG;AACH,wBAAsB,2CAA2C,CAC/D,KAAK,EAAE,gCAAgC,EACvC,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED,MAAM,MAAM,iCAAiC,CAAC,CAAC,IAC3C;IAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACzC;IAAE,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAA;CAAE,CAAC;AAE5B;;;;;;;;;;;GAWG;AACH,wBAAsB,6BAA6B,CAAC,CAAC,EACnD,KAAK,EAAE,gCAAgC,EACvC,MAAM,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,2BAA2B,CAAC;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,EACF,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAC1C,OAAO,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,CAoE/C"}

package/dist/rfc64/legacy-swm-boundary-fence-v1.js

@@ -0,0 +1,236 @@
+// SPDX-License-Identifier: Apache-2.0
+import { RFC64_LEGACY_SWM_BOUNDARY_RETIREMENT_IN_PROGRESS_CODE } from '@origintrail-official/dkg-core';
+/** One log line for a fence event. */
+export function describeRfc64LegacySwmFenceEventV1(event) {
+    const where = `${event.source} on the ${event.scope} of ${event.contextGraphId}`
+        + (event.kaUal === undefined ? '' : ` (${event.kaUal})`);
+    return event.kind === 'wait-exceeded'
+        ? `RFC-64 legacy SWM fence raised by ${where} gave up after ${event.elapsedMs} ms waiting on `
+            + `${event.waitingOn} (${event.activePreparations} preparation(s) in flight); nothing was retired`
+        : `RFC-64 legacy SWM fence raised by ${where} was up for ${event.elapsedMs} ms`;
+}
+/**
+ * How long a retirement or a lease waits for its turn on the mutation chain
+ * and for the in-flight preparations of its scope before it gives up and drops
+ * its fence. Below the promote queue's first retry (48 to 72 s), so a share
+ * refused by a fence that never gets its turn is admitted on that retry.
+ */
+export const RFC64_LEGACY_SWM_FENCE_WAIT_LIMIT_MS = 30_000;
+/** A fence that was up for longer than this is reported when it drops. */
+export const RFC64_LEGACY_SWM_FENCE_LONG_MS = 5_000;
+export function createRfc64LegacySwmFenceCoordinatorV1(options = {}) {
+    return {
+        scopes: new Map(),
+        mutationTail: Promise.resolve(),
+        waitLimitMs: options.waitLimitMs ?? RFC64_LEGACY_SWM_FENCE_WAIT_LIMIT_MS,
+        longFenceMs: options.longFenceMs ?? RFC64_LEGACY_SWM_FENCE_LONG_MS,
+        now: options.now ?? (() => performance.now()),
+        onFenceEvent: options.onFenceEvent,
+    };
+}
+/**
+ * The finalized-VM retirement reads and deletes the markers of ONE asset, so it fences and drains that
+ * asset's scope, not the graph's: a share of another asset is neither refused by it nor waited for.
+ * '#' is outside the context graph id grammar, so an asset key can never alias a graph key. The receiver
+ * lease and the republish retirement keep the graph key.
+ */
+function rfc64LegacySwmAssetScopeKeyV1(contextGraphId, kaUal) {
+    return `${contextGraphId}#${kaUal}`;
+}
+/**
+ * Refuse a preparation that meets a fence, the graph's or its asset's. The
+ * refusal names the oldest holder, so a log line that carries the message
+ * says which caller raised the fence and for how long it has been up.
+ */
+export function assertRfc64LegacySwmPreparationAdmittedV1(fence, contextGraphId, kaUal) {
+    const graphHolder = fence.scopes.get(contextGraphId)?.holders[0];
+    const holder = graphHolder
+        ?? fence.scopes.get(rfc64LegacySwmAssetScopeKeyV1(contextGraphId, kaUal))?.holders[0];
+    if (holder === undefined)
+        return;
+    const scope = graphHolder === undefined ? 'asset' : 'graph';
+    const ageMs = Math.max(0, Math.round(fence.now() - holder.raisedAt));
+    throw Object.assign(new Error('RFC-64 legacy SWM boundary retirement is in progress; retry promotion '
+        + `(fence raised by ${holder.source} on the ${scope}, up ${ageMs} ms)`), {
+        code: RFC64_LEGACY_SWM_BOUNDARY_RETIREMENT_IN_PROGRESS_CODE,
+        fenceSource: holder.source,
+        fenceScope: scope,
+        fenceAgeMs: ageMs,
+    });
+}
+/**
+ * Register one in-flight preparation on both of its scopes. The returned
+ * function releases both and must be called exactly once.
+ */
+export function beginRfc64LegacySwmPreparationV1(fence, contextGraphId, kaUal) {
+    const keys = [contextGraphId, rfc64LegacySwmAssetScopeKeyV1(contextGraphId, kaUal)];
+    const scopes = keys.map((key) => {
+        const scope = fenceScope(fence, key);
+        if (scope.activePreparations === 0) {
+            scope.preparationsDrained = new Promise((resolve) => {
+                scope.resolvePreparationsDrained = resolve;
+            });
+        }
+        scope.activePreparations += 1;
+        return scope;
+    });
+    return () => {
+        if (scopes.some((scope) => scope.activePreparations < 1)) {
+            throw new Error('RFC-64 legacy SWM boundary preparation settlement is unbalanced');
+        }
+        scopes.forEach((scope, index) => {
+            scope.activePreparations -= 1;
+            if (scope.activePreparations !== 0)
+                return;
+            const resolve = scope.resolvePreparationsDrained;
+            scope.resolvePreparationsDrained = undefined;
+            resolve?.();
+            cleanFenceScope(fence, keys[index], scope);
+        });
+    };
+}
+/**
+ * Resolve once neither the graph nor the asset is fenced, or after `limitMs`.
+ * It registers nothing and promises nothing: a fence raised after it resolves
+ * still refuses the preparation. A seam that can wait calls it right before
+ * the synchronous prepare, so a fence that is up for milliseconds costs those
+ * milliseconds instead of a refused attempt and its retry delay.
+ */
+export async function waitForRfc64LegacySwmPreparationAdmissionV1(fence, contextGraphId, kaUal, limitMs) {
+    const keys = [contextGraphId, rfc64LegacySwmAssetScopeKeyV1(contextGraphId, kaUal)];
+    const deadline = fence.now() + limitMs;
+    for (;;) {
+        const fenced = keys
+            .map((key) => fence.scopes.get(key))
+            .filter((scope) => scope !== undefined && scope.holders.length > 0);
+        const remainingMs = deadline - fence.now();
+        if (fenced.length === 0 || remainingMs <= 0)
+            return;
+        let timer;
+        try {
+            await Promise.race([
+                new Promise((resolve) => { timer = setTimeout(resolve, remainingMs); }),
+                ...fenced.map((scope) => scope.fenceDropped),
+            ]);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+}
+/**
+ * Run `work` behind a fence: raise it, take a turn on the mutation chain, wait
+ * for the scope's in-flight preparations, then run. The fence drops when the
+ * work settles, or earlier when the work calls `dropFence`.
+ *
+ * The two waits share one bound. A retirement that does not get to run within
+ * it drops its fence, reports `wait-exceeded` and answers `ran: false`; when
+ * its turn on the chain comes later it does nothing. Leaving the markers in
+ * place is the conservative state, and the next pass retires them. Without the
+ * bound one preparation that never settles would hold the chain, and through
+ * it the fence of every graph that tries to retire, for as long as it hangs.
+ */
+export async function runRfc64LegacySwmRetirementV1(fence, target, work) {
+    const scopeKey = target.kaUal === undefined
+        ? target.contextGraphId
+        : rfc64LegacySwmAssetScopeKeyV1(target.contextGraphId, target.kaUal);
+    const scope = fenceScope(fence, scopeKey);
+    const holder = { source: target.source, raisedAt: fence.now() };
+    const describe = (kind) => ({
+        kind,
+        source: target.source,
+        scope: target.kaUal === undefined ? 'graph' : 'asset',
+        contextGraphId: target.contextGraphId,
+        ...(target.kaUal === undefined ? {} : { kaUal: target.kaUal }),
+        elapsedMs: Math.max(0, Math.round(fence.now() - holder.raisedAt)),
+    });
+    if (scope.holders.length === 0) {
+        scope.fenceDropped = new Promise((resolve) => { scope.resolveFenceDropped = resolve; });
+    }
+    scope.holders.push(holder);
+    let waitingOn = 'mutation-chain';
+    let workStarted = false;
+    let gaveUp = false;
+    let dropped = false;
+    const dropFence = () => {
+        if (dropped)
+            return;
+        dropped = true;
+        scope.holders.splice(scope.holders.indexOf(holder), 1);
+        if (scope.holders.length === 0) {
+            const resolve = scope.resolveFenceDropped;
+            scope.resolveFenceDropped = undefined;
+            resolve?.();
+        }
+        cleanFenceScope(fence, scopeKey, scope);
+        const event = describe('long-fence');
+        if (!gaveUp && event.elapsedMs > fence.longFenceMs)
+            reportFenceEvent(fence, event);
+    };
+    let resolveAbandoned;
+    const abandoned = new Promise((resolve) => { resolveAbandoned = resolve; });
+    const timer = setTimeout(() => {
+        if (workStarted)
+            return;
+        gaveUp = true;
+        reportFenceEvent(fence, {
+            ...describe('wait-exceeded'),
+            waitingOn,
+            activePreparations: scope.activePreparations,
+        });
+        dropFence();
+        resolveAbandoned();
+    }, fence.waitLimitMs);
+    timer.unref?.();
+    const notRun = { ran: false };
+    const turn = fence.mutationTail.then(async () => {
+        if (gaveUp)
+            return notRun;
+        waitingOn = 'preparations';
+        await Promise.race([scope.preparationsDrained, abandoned]);
+        if (gaveUp)
+            return notRun;
+        workStarted = true;
+        clearTimeout(timer);
+        return { ran: true, value: await work(dropFence) };
+    });
+    fence.mutationTail = turn.then(() => undefined, () => undefined);
+    try {
+        return await Promise.race([turn, abandoned.then(() => notRun)]);
+    }
+    finally {
+        clearTimeout(timer);
+        dropFence();
+    }
+}
+function reportFenceEvent(fence, event) {
+    try {
+        fence.onFenceEvent?.(Object.freeze(event));
+    }
+    catch {
+        // A failing observer must not change what the fence does.
+    }
+}
+function fenceScope(fence, scopeKey) {
+    const existing = fence.scopes.get(scopeKey);
+    if (existing !== undefined)
+        return existing;
+    const created = {
+        activePreparations: 0,
+        preparationsDrained: Promise.resolve(),
+        resolvePreparationsDrained: undefined,
+        holders: [],
+        fenceDropped: Promise.resolve(),
+        resolveFenceDropped: undefined,
+    };
+    fence.scopes.set(scopeKey, created);
+    return created;
+}
+function cleanFenceScope(fence, scopeKey, scope) {
+    if (scope.activePreparations === 0
+        && scope.holders.length === 0
+        && fence.scopes.get(scopeKey) === scope) {
+        fence.scopes.delete(scopeKey);
+    }
+}
+//# sourceMappingURL=legacy-swm-boundary-fence-v1.js.map