@sentropic/h2a 0.98.4 → 0.98.6

package/dist/runtime/identity/binding-commit.js

@@ -0,0 +1,211 @@
+import { closeSync, existsSync, fsyncSync, linkSync, openSync, readFileSync, readdirSync, statSync, unlinkSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { BindingCommitIntegrityError, BindingCommitConflictError, BindingFenceStaleError, digestBytes, preparePossession, receiptMatches, withPossession, isPreparedPossession } from './possession.js';
+import { appendDurable, ensureDurableDirectory, syncDirectory, syncFile, writeComplete } from './durable.js';
+export const bindingKeyHash = (host, providerSessionId) => digestBytes(`${host}\0${providerSessionId}`).slice(0, 32);
+export const bindingLineId = (line) => digestBytes(line);
+const journal = (dir) => join(dir, 'bindings.jsonl');
+function lines(dir) {
+    if (!existsSync(journal(dir)))
+        return [];
+    const bytes = readFileSync(journal(dir), 'utf8');
+    return [...new Set(bytes.slice(0, bytes.lastIndexOf('\n') + 1).split('\n').filter(Boolean).map(line => line + '\n'))];
+}
+function keyOf(line) {
+    try {
+        const row = JSON.parse(line);
+        return typeof row.host === 'string' && typeof row.providerSessionId === 'string' ? bindingKeyHash(row.host, row.providerSessionId) : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function latest(dir, host, providerSessionId) {
+    return lines(dir).filter(line => { try {
+        const row = JSON.parse(line);
+        return row.host === host && row.providerSessionId === providerSessionId;
+    }
+    catch {
+        return false;
+    } }).map(bindingLineId).at(-1) ?? 'genesis';
+}
+function requireHeld(held) {
+    if (!held())
+        throw new BindingCommitIntegrityError('fence changed during protected mutation');
+}
+/** A pending winner is prepared before acquiring the fence; it forbids remint. */
+export function pendingBindingWinner(dir, kh) {
+    const commits = join(dir, 'commits');
+    if (!existsSync(commits))
+        return undefined;
+    const candidates = readdirSync(commits).filter(name => name.startsWith(kh + '.') && name.endsWith('.json'));
+    if (!candidates.length)
+        return undefined;
+    const complete = new Set(lines(dir).map(bindingLineId));
+    const slots = candidates.map(name => {
+        try {
+            const slot = JSON.parse(readFileSync(join(commits, name), 'utf8'));
+            if (slot.kh !== kh || !slot.line.endsWith('\n') || bindingLineId(slot.line) !== slot.lineId)
+                throw new Error();
+            return slot;
+        }
+        catch {
+            throw new BindingCommitIntegrityError('pending winner incomplete or incoherent');
+        }
+    }).filter(slot => !complete.has(slot.lineId));
+    if (!slots.length)
+        return undefined;
+    const tip = slots.find(slot => !slots.some(next => next.pred === slot.lineId));
+    if (!tip)
+        throw new BindingCommitIntegrityError('pending winner chain cyclic');
+    return JSON.parse(tip.line);
+}
+/** Cold possession preparation happens before election/normal possession. */
+export function prepareBindingSlots(dir) {
+    const commits = join(dir, 'commits');
+    const prepared = new Map();
+    if (!existsSync(commits))
+        return prepared;
+    for (const name of readdirSync(commits)) {
+        if (!name.endsWith('.json') || name.includes('.tmp.'))
+            continue;
+        const bytes = readFileSync(join(commits, name));
+        let receipt;
+        try {
+            const slot = JSON.parse(bytes.toString());
+            const row = JSON.parse(slot.line);
+            if (slot.proof?.instance === row.instance && receiptMatches(dirname(dir), slot.proof, true))
+                receipt = preparePossession(dirname(dir), row.instance);
+        }
+        catch (e) {
+            if (e.code)
+                throw e;
+        }
+        prepared.set(name, { sha256: digestBytes(bytes), ...(receipt ? { receipt } : {}) });
+    }
+    return prepared;
+}
+export function repairBindingSlots(dir, held, prepared) {
+    const commits = join(dir, 'commits');
+    if (!existsSync(commits))
+        return;
+    const pending = [];
+    for (const name of readdirSync(commits)) {
+        if (name.includes('.tmp.'))
+            continue;
+        if (!/^[0-9a-f]{32}\.(genesis|[0-9a-f]{64})\.json$/.test(name))
+            throw new BindingCommitIntegrityError('unsupported slot name');
+        let slot;
+        const bytes = readFileSync(join(commits, name));
+        const preparation = prepared.get(name);
+        if (!preparation || preparation.sha256 !== digestBytes(bytes))
+            throw new BindingFenceStaleError();
+        try {
+            slot = JSON.parse(bytes.toString());
+        }
+        catch {
+            throw new BindingCommitIntegrityError('incomplete slot');
+        }
+        if (!slot || slot.version !== 1 || typeof slot.line !== 'string' || !slot.line.endsWith('\n') || slot.line.slice(0, -1).includes('\n')
+            || keyOf(slot.line) !== slot.kh || bindingLineId(slot.line) !== slot.lineId || name !== `${slot.kh}.${slot.pred}.json`
+            || !/^[0-9a-f]{32}$/.test(slot.fenceEpoch))
+            throw new BindingCommitIntegrityError('incoherent slot content or predecessor');
+        const row = JSON.parse(slot.line);
+        if (!slot.proof || slot.proof.instance !== row.instance || !preparation.receipt || !isPreparedPossession(preparation.receipt))
+            throw new BindingCommitIntegrityError('slot possession proof missing');
+        if (!receiptMatches(dirname(dir), preparation.receipt))
+            throw new BindingFenceStaleError();
+        syncFile(join(commits, name));
+        pending.push(slot);
+    }
+    const complete = new Set(lines(dir).map(bindingLineId));
+    const byKey = new Map();
+    for (const line of lines(dir)) {
+        const kh = keyOf(line);
+        if (kh) {
+            const ids = byKey.get(kh) ?? new Set();
+            ids.add(bindingLineId(line));
+            byKey.set(kh, ids);
+        }
+    }
+    while (pending.length) {
+        const i = pending.findIndex(slot => slot.pred === 'genesis' || byKey.get(slot.kh)?.has(slot.pred));
+        if (i < 0)
+            throw new BindingCommitIntegrityError('slot predecessor missing or cyclic');
+        const [slot] = pending.splice(i, 1);
+        if (!complete.has(slot.lineId)) {
+            requireHeld(held);
+            appendDurable(journal(dir), slot.line, held);
+            complete.add(slot.lineId);
+        }
+        else
+            syncFile(journal(dir));
+        const ids = byKey.get(slot.kh) ?? new Set();
+        ids.add(slot.lineId);
+        byKey.set(slot.kh, ids);
+    }
+}
+export function commitBinding(dir, row, fenceEpoch, proof, held, beginMutation, endMutation) {
+    const kh = bindingKeyHash(row.host, row.providerSessionId);
+    const pred = latest(dir, row.host, row.providerSessionId);
+    const line = JSON.stringify(row) + '\n';
+    const slot = { version: 1, kh, pred, fenceEpoch, line, lineId: bindingLineId(line), proof };
+    const commits = join(dir, 'commits');
+    withPossession(dirname(dir), proof, () => {
+        requireHeld(held);
+        beginMutation();
+        ensureDurableDirectory(commits);
+        const path = join(commits, `${kh}.${pred}.json`);
+        if (existsSync(path))
+            throw new BindingCommitConflictError();
+        const tmp = `${path}.tmp.${fenceEpoch}`;
+        const fd = openSync(tmp, 'wx', 0o600);
+        try {
+            writeComplete(fd, JSON.stringify(slot));
+            fsyncSync(fd);
+        }
+        finally {
+            closeSync(fd);
+        }
+        requireHeld(held);
+        try {
+            linkSync(tmp, path);
+        }
+        catch (e) {
+            const code = e.code;
+            if (code === 'EEXIST')
+                throw new BindingCommitConflictError();
+            if (!['EPERM', 'ENOTSUP', 'EOPNOTSUPP', 'ENOSYS'].includes(code ?? ''))
+                throw e;
+            // Nominal acquisition remains possible without hard links. A partial
+            // fallback slot after a crash fails integrity under the retained barrier.
+            requireHeld(held);
+            const slotFd = openSync(path, 'wx', 0o600);
+            try {
+                writeComplete(slotFd, JSON.stringify(slot));
+                fsyncSync(slotFd);
+            }
+            finally {
+                closeSync(slotFd);
+            }
+        }
+        syncDirectory(commits);
+        requireHeld(held);
+        unlinkSync(tmp);
+        syncDirectory(commits);
+        requireHeld(held);
+        appendDurable(journal(dir), line, held);
+        // Conditional cleanup is limited to this key's successfully materialized slot.
+        const before = statSync(path);
+        if (readFileSync(path, 'utf8') !== JSON.stringify(slot))
+            throw new BindingCommitIntegrityError('slot changed after append');
+        requireHeld(held);
+        const current = statSync(path);
+        if (before.dev !== current.dev || before.ino !== current.ino)
+            throw new BindingCommitIntegrityError('slot replaced after append');
+        unlinkSync(path);
+        syncDirectory(commits);
+        endMutation();
+    });
+}
+//# sourceMappingURL=binding-commit.js.map

package/dist/runtime/identity/binding-commit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding-commit.js","sourceRoot":"","sources":["../../../src/runtime/identity/binding-commit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAChI,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,WAAW,EAAE,iBAAiB,EAAE,cAAc,EAAE,cAAc,EAAE,oBAAoB,EAA0B,MAAM,iBAAiB,CAAC;AAChO,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAM7G,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,iBAAyB,EAAU,EAAE,CAAC,WAAW,CAAC,GAAG,IAAI,KAAK,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7I,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;AAGzE,MAAM,OAAO,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;AAErE,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AACxH,CAAC;AACD,SAAS,KAAK,CAAC,IAAY;IACzB,IAAI,CAAC;QAAC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAAC,CAAC;IACrL,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC7B,CAAC;AACD,SAAS,MAAM,CAAC,GAAW,EAAE,IAAY,EAAE,iBAAwB;IACjE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAE,IAAG,CAAC;QAAA,MAAM,GAAG,GAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAA,OAAO,GAAG,CAAC,IAAI,KAAG,IAAI,IAAI,GAAG,CAAC,iBAAiB,KAAG,iBAAiB,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,OAAO,KAAK,CAAC;IAAA,CAAC,CAAA,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;AACtM,CAAC;AACD,SAAS,WAAW,CAAC,IAAmB;IACtC,IAAI,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,2BAA2B,CAAC,yCAAyC,CAAC,CAAC;AAChG,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,EAAU;IAC1D,MAAM,OAAO,GAAC,IAAI,CAAC,GAAG,EAAC,SAAS,CAAC,CAAC;IAAA,IAAG,CAAC,UAAU,CAAC,OAAO,CAAC;QAAC,OAAO,SAAS,CAAC;IAC3E,MAAM,UAAU,GAAC,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,UAAU,CAAC,EAAE,GAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACtG,IAAG,CAAC,UAAU,CAAC,MAAM;QAAC,OAAO,SAAS,CAAC;IACvC,MAAM,QAAQ,GAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IACtD,MAAM,KAAK,GAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAA,EAAE;QAC/B,IAAG,CAAC;YAAA,MAAM,IAAI,GAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,EAAC,MAAM,CAAC,CAAsB,CAAC;YACtF,IAAG,IAAI,CAAC,EAAE,KAAG,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAG,IAAI,CAAC,MAAM;gBAAC,MAAM,IAAI,KAAK,EAAE,CAAC;YACzG,OAAO,IAAI,CAAC;QACd,CAAC;QAAA,MAAK,CAAC;YAAA,MAAM,IAAI,2BAA2B,CAAC,yCAAyC,CAAC,CAAC;QAAA,CAAC;IAC3F,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAA,EAAE,CAAA,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,IAAG,CAAC,KAAK,CAAC,MAAM;QAAC,OAAO,SAAS,CAAC;IAClC,MAAM,GAAG,GAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,CAAA,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,IAAI,KAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACvE,IAAG,CAAC,GAAG;QAAC,MAAM,IAAI,2BAA2B,CAAC,6BAA6B,CAAC,CAAC;IAC7E,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CAAC,GAAU;IAC5C,MAAM,OAAO,GAAC,IAAI,CAAC,GAAG,EAAC,SAAS,CAAC,CAAC;IAAA,MAAM,QAAQ,GAAsB,IAAI,GAAG,EAAE,CAAC;IAChF,IAAG,CAAC,UAAU,CAAC,OAAO,CAAC;QAAC,OAAO,QAAQ,CAAC;IACxC,KAAI,MAAM,IAAI,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,IAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAC,SAAS;QAC9D,MAAM,KAAK,GAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC,CAAC;QAAA,IAAI,OAAmC,CAAC;QACrF,IAAI,CAAC;YACH,MAAM,IAAI,GAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAsB,CAAC;YAAA,MAAM,GAAG,GAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7F,IAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,KAAG,GAAG,CAAC,QAAQ,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,EAAC,IAAI,CAAC,KAAK,EAAC,IAAI,CAAC;gBAAC,OAAO,GAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9I,CAAC;QAAA,OAAM,CAAC,EAAC,CAAC;YAAA,IAAI,CAA2B,CAAC,IAAI;gBAAC,MAAM,CAAC,CAAC;QAAA,CAAC;QACxD,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAC,EAAC,MAAM,EAAC,WAAW,CAAC,KAAK,CAAC,EAAC,GAAG,CAAC,OAAO,CAAA,CAAC,CAAA,EAAC,OAAO,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,IAAmB,EAAE,QAA6B;IAChG,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO;IACjC,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACrC,IAAI,CAAC,8CAA8C,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,2BAA2B,CAAC,uBAAuB,CAAC,CAAC;QAC/H,IAAI,IAAuB,CAAC;QAC5B,MAAM,KAAK,GAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAG,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAG,WAAW,CAAC,KAAK,CAAC;YAAC,MAAM,IAAI,sBAAsB,EAAE,CAAC;QAC9F,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAAC,CAAC;QAC5C,MAAM,CAAC;YAAC,MAAM,IAAI,2BAA2B,CAAC,iBAAiB,CAAC,CAAC;QAAC,CAAC;QACnE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;eACjI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,OAAO;eACnH,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,2BAA2B,CAAC,wCAAwC,CAAC,CAAC;QAC9H,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,OAAO,CAAC;YAAC,MAAM,IAAI,2BAA2B,CAAC,+BAA+B,CAAC,CAAC;QACrM,IAAG,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,EAAC,WAAW,CAAC,OAAO,CAAC;YAAC,MAAM,IAAI,sBAAsB,EAAE,CAAC;QACxF,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAAC,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,IAAI,EAAE,EAAE,CAAC;YAAC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;YAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;IAAC,CAAC;IAChK,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACnG,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,2BAA2B,CAAC,oCAAoC,CAAC,CAAC;QACvF,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;;YAC1H,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;QAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,GAAsH,EAC/J,UAAkB,EAAE,KAAwB,EAAE,IAAmB,EAAE,aAAyB,EAAE,WAAuB;IACrH,MAAM,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACxC,MAAM,IAAI,GAAsB,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;IAC/G,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACrC,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE;QACvC,WAAW,CAAC,IAAI,CAAC,CAAC;QAAC,aAAa,EAAE,CAAC;QACnC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,OAAO,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,0BAA0B,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,UAAU,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC;YAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAC1F,WAAW,CAAC,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC;YAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,IAAI,GAAE,CAA2B,CAAC,IAAI,CAAC;YAC7C,IAAG,IAAI,KAAG,QAAQ;gBAAC,MAAM,IAAI,0BAA0B,EAAE,CAAC;YAC1D,IAAG,CAAC,CAAC,OAAO,EAAC,SAAS,EAAC,YAAY,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAE,EAAE,CAAC;gBAAC,MAAM,CAAC,CAAC;YACzE,qEAAqE;YACrE,0EAA0E;YAC1E,WAAW,CAAC,IAAI,CAAC,CAAC;YAAA,MAAM,MAAM,GAAC,QAAQ,CAAC,IAAI,EAAC,IAAI,EAAC,KAAK,CAAC,CAAC;YACzD,IAAG,CAAC;gBAAA,aAAa,CAAC,MAAM,EAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAA,SAAS,CAAC,MAAM,CAAC,CAAC;YAAA,CAAC;oBAAO,CAAC;gBAAA,SAAS,CAAC,MAAM,CAAC,CAAC;YAAA,CAAC;QAC/F,CAAC;QACD,aAAa,CAAC,OAAO,CAAC,CAAC;QACvB,WAAW,CAAC,IAAI,CAAC,CAAC;QAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3D,WAAW,CAAC,IAAI,CAAC,CAAC;QAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3D,+EAA+E;QAC/E,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,2BAA2B,CAAC,2BAA2B,CAAC,CAAC;QAC5H,WAAW,CAAC,IAAI,CAAC,CAAC;QAAC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;YAAE,MAAM,IAAI,2BAA2B,CAAC,4BAA4B,CAAC,CAAC;QAClI,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACzC,WAAW,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/identity/bindings.d.ts

@@ -24,13 +24,15 @@
  * identity, not the victim's inbox). The read → decide → append runs in ONE lock
  * (no reclaim/mint race, F3).
  */
-import { type H2ASignature } from "@sentropic/h2a";
+import type { IdentityFenceOptions } from "../local-files/identity-fence.js";
+import type { H2ASignature } from "@sentropic/h2a";
+import { IDENTITY_BINDING_FENCE_PROTOCOL } from "../local-files/identity-fence.js";
 /**
  * The one protocol accepted by the DEF identity-binding writer.  The cull
  * executor uses the same sentinel and refuses a writer inventory that cannot
  * prove this epoch-bearing protocol for every binding write path.
  */
-export declare const IDENTITY_BINDING_FENCE_PROTOCOL = "identity-binding-fence-v1";
+export { IDENTITY_BINDING_FENCE_PROTOCOL };
 export interface H2AIdentityBinding {
     readonly host: string;
     readonly providerSessionId: string;
@@ -86,38 +88,12 @@ export interface ReclaimOrMintResult {
  * binding. Spoofing the id without the key → mint (a new identity), never a
  * reclaim of someone else's.
  */
-export declare function reclaimOrMint(root: string, key: IdentityBindingKey, deps: ReclaimOrMintDeps): ReclaimOrMintResult;
-/**
- * L2 options for the ASYNC (MCP identity worker) reclaim/mint transaction.
- */
-export interface ReclaimOrMintOptions {
-    /**
-     * Cooperative cancellation (transport closed / signal). When aborted BEFORE the
-     * lock is held, the wait stops and the attempt throws; a transaction already
-     * entered under the lock finishes so no half-written binding is left.
-     */
-    readonly signal?: AbortSignal;
-    /** Monotone remaining budget (ms) bounding the lock wait for this attempt. */
+export interface ReclaimOrMintOptions extends IdentityFenceOptions {
     readonly deadlineMs?: number;
-    /**
-     * Materialize keys / registration / alias BEFORE the binding row is appended
-     * (mint path only), all inside the held identity lock. This closes the
-     * publish-order window through which a concurrent worker that read the fresh
-     * binding — but not yet its keyring — could fail proof-of-possession and mint a
-     * DUPLICATE identity. The binding is always the LAST durable write.
-     */
     readonly beforePublish?: (result: ReclaimOrMintResult, heldLocks: {
         readonly identity: true;
     }) => void;
 }
-/**
- * Async twin of {@link reclaimOrMint} used by the L2 identity worker. Identical
- * invariants — proof-of-possession gates reclaim, a fail-closed fence
- * (`reclaimStale:false`) refuses an ambiguous sentinel, `reclaimOrMint*` stays
- * the UNIQUE append of a binding row — but the lock WAIT is asynchronous so the
- * worker can receive an IPC cancel between poll attempts instead of blocking the
- * event loop inside `Atomics.wait`. On a mint, `beforePublish` publishes the
- * keyring/registration/alias before the binding append (window closure, T5).
- */
+export declare function reclaimOrMint(root: string, key: IdentityBindingKey, deps: ReclaimOrMintDeps, options?: ReclaimOrMintOptions): ReclaimOrMintResult;
 export declare function reclaimOrMintAsync(root: string, key: IdentityBindingKey, deps: ReclaimOrMintDeps, options?: ReclaimOrMintOptions): Promise<ReclaimOrMintResult>;
 //# sourceMappingURL=bindings.d.ts.map

package/dist/runtime/identity/bindings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bindings.d.ts","sourceRoot":"","sources":["../../../src/runtime/identity/bindings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAMH,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAMpE;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,8BAA8B,CAAC;AAE3E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,yFAAyF;IACzF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAYD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAa/D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,kBAAkB,GAAG,kBAAkB,GAAG,SAAS,CAUjG;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,YAAY,EACvB,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,OAAO,CAST;AAED,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC;IAClD,2EAA2E;IAC3E,IAAI,IAAI;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,GAAG,IAAI,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,kBAAkB,EACvB,IAAI,EAAE,iBAAiB,GACtB,mBAAmB,CAoCrB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CACvB,MAAM,EAAE,mBAAmB,EAC3B,SAAS,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,KACnC,IAAI,CAAC;CACX;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,kBAAkB,EACvB,IAAI,EAAE,iBAAiB,EACvB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC,CA6C9B"}
+{"version":3,"file":"bindings.d.ts","sourceRoot":"","sources":["../../../src/runtime/identity/bindings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AASH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAE7E,OAAO,KAAK,EACV,YAAY,EACb,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EACL,+BAA+B,EAIhC,MAAM,kCAAkC,CAAC;AAG1C;;;;GAIG;AACH,OAAO,EAAE,+BAA+B,EAAE,CAAC;AAE3C,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,yFAAyF;IACzF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAYD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAc/D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,kBAAkB,GAAG,kBAAkB,GAAG,SAAS,CAUjG;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,YAAY,EACvB,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,OAAO,CAST;AAED,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC;IAClD,2EAA2E;IAC3E,IAAI,IAAI;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,GAAG,IAAI,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;GAKG;AAEH,MAAM,WAAW,oBAAqB,SAAQ,oBAAoB;IAChE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,mBAAmB,EAAE,SAAS,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,KAAK,IAAI,CAAC;CACxG;AAoCD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,iBAAiB,EAC1F,OAAO,GAAE,oBAAyB,GAAG,mBAAmB,CAgBzD;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,iBAAiB,EACrG,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAgBlE"}

package/dist/runtime/identity/bindings.js

@@ -24,19 +24,23 @@
  * identity, not the victim's inbox). The read → decide → append runs in ONE lock
  * (no reclaim/mint race, F3).
  */
-import { existsSync, mkdirSync, readFileSync } from "node:fs";
-import { randomUUID } from "node:crypto";
+import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
-import { verifyCanonical } from "@sentropic/h2a";
-import { localStorePaths, withLock, withLockSync } from "../local-files/index.js";
-import { getActiveMcpTrace } from "../mcp/phase-trace.js";
-import { appendLaunchRow, launchLookupKey, lookupLaunchRows } from "../local-files/launch-index.js";
+import { performance } from "node:perf_hooks";
+import { commitBinding, pendingBindingWinner, bindingKeyHash } from "./binding-commit.js";
+import { BindingCommitIntegrityError, BindingFenceStaleError, preparePossession, receiptMatches, withPossession } from "./possession.js";
+import { ensureDurableDirectory } from "./durable.js";
+import { LockTimeoutError } from "../local-files/locks.js";
+import { verifyCanonical } from "../../signature.js";
+import { localStorePaths } from "../local-files/index.js";
+import { IDENTITY_BINDING_FENCE_PROTOCOL, withIdentityFence, withIdentityFenceSync } from "../local-files/identity-fence.js";
+import { launchLookupKey, lookupLaunchRows } from "../local-files/launch-index.js";
 /**
  * The one protocol accepted by the DEF identity-binding writer.  The cull
  * executor uses the same sentinel and refuses a writer inventory that cannot
  * prove this epoch-bearing protocol for every binding write path.
  */
-export const IDENTITY_BINDING_FENCE_PROTOCOL = "identity-binding-fence-v1";
+export { IDENTITY_BINDING_FENCE_PROTOCOL };
 function identityDir(root) {
     return join(localStorePaths(root).root, "identity");
 }
@@ -51,11 +55,13 @@ export function listBindings(root) {
     if (!existsSync(f))
         return [];
     const out = [];
-    for (const line of readFileSync(f, "utf8").split("\n")) {
+    for (const line of readFileSync(f, "utf8").split("\n").slice(0, -1)) {
         if (!line.trim())
             continue;
         try {
-            out.push(JSON.parse(line));
+            const row = JSON.parse(line);
+            if (row && typeof row === 'object' && !Array.isArray(row))
+                out.push(row);
         }
         catch {
             // skip malformed
@@ -103,98 +109,81 @@ export function verifyReclaimProof(nonce, signature, publicKeys) {
     }
     return false;
 }
-/**
- * Atomically (one lock) reclaim the existing binding iff it exists AND
- * proof-of-possession passes; otherwise mint a fresh identity and record the new
- * binding. Spoofing the id without the key → mint (a new identity), never a
- * reclaim of someone else's.
- */
-export function reclaimOrMint(root, key, deps) {
-    mkdirSync(identityDir(root), { recursive: true });
-    // L0 (detailed-gated): observe the binding lock's wait/acquire/hold so the
-    // trace shows time spent contending the identity write — a logical lock id,
-    // never a binding row's content.
-    const trace = getActiveMcpTrace();
-    const observe = trace?.detailed
-        ? (event) => {
-            trace.phase(`binding_lock_${event.event}`, {
-                tool: "identity",
-                ...(event.waitMs !== undefined ? { waitMs: event.waitMs } : {}),
-                ...(event.holdMs !== undefined ? { holdMs: event.holdMs } : {})
-            });
+function prepareTransaction(root, key, deps, options, memo) {
+    const binding = findBinding(root, key);
+    let pending;
+    try {
+        pending = pendingBindingWinner(identityDir(root), bindingKeyHash(key.host, key.providerSessionId));
+    }
+    catch (e) {
+        if (!(e instanceof BindingCommitIntegrityError))
+            throw e;
+        return { binding, proof: undefined };
+    }
+    if (pending) {
+        const proof = preparePossession(root, pending.instance);
+        if (!proof)
+            return { binding: pending, proof: undefined };
+        return { binding: pending, proof };
+    }
+    const proof = binding && deps.verifyProof(binding) ? preparePossession(root, binding.instance) : undefined;
+    if (binding && proof)
+        return { binding, proof };
+    memo.value ??= { action: 'mint', ...deps.mint() };
+    options.beforePublish?.(memo.value, { identity: true });
+    const mintedProof = preparePossession(root, memo.value.instance);
+    if (!mintedProof)
+        throw new BindingCommitIntegrityError('binding possession prerequisites missing');
+    return { binding, proof: mintedProof };
+}
+function transact(root, key, deps, memo, prepared, lease) {
+    if (!prepared.proof)
+        throw new BindingFenceStaleError();
+    const existing = findBinding(root, key);
+    if (existing?.instance !== prepared.binding?.instance || !receiptMatches(root, prepared.proof))
+        throw new BindingFenceStaleError();
+    if (existing && prepared.proof.instance === existing.instance) {
+        return withPossession(root, prepared.proof, () => ({ action: 'reclaim', instance: existing.instance, agentUuid: existing.agentUuid }));
+    }
+    if (!memo.value)
+        throw new BindingCommitIntegrityError('mint candidate unavailable');
+    commitBinding(identityDir(root), { ...key, instance: memo.value.instance, agentUuid: memo.value.agentUuid, at: new Date(deps.now()).toISOString() }, lease.token, prepared.proof, lease.stillHeld, lease.beginMutation, lease.endMutation);
+    return memo.value;
+}
+export function reclaimOrMint(root, key, deps, options = {}) {
+    ensureDurableDirectory(identityDir(root));
+    const end = performance.now() + (options.deadlineMs ?? options.timeoutMs ?? 5000);
+    const memo = {};
+    options = { ...options, signal: options.signal ?? new AbortController().signal };
+    for (;;) {
+        try {
+            const prepared = prepareTransaction(root, key, deps, options, memo);
+            return withIdentityFenceSync(bindingsLock(root), lease => transact(root, key, deps, memo, prepared, lease), { ...options, timeoutMs: Math.max(0, end - performance.now()) });
         }
-        : undefined;
-    return withLockSync(bindingsLock(root), () => {
-        const existing = findBinding(root, key);
-        if (existing && deps.verifyProof(existing)) {
-            return { action: "reclaim", instance: existing.instance, agentUuid: existing.agentUuid };
+        catch (e) {
+            // The short registry wait is one preparation attempt within the original deadline.
+            const contention = e instanceof LockTimeoutError && e.lockPath === join(root, "registry", ".lock");
+            if ((!(e instanceof BindingFenceStaleError) && !contention) || performance.now() >= end)
+                throw e;
         }
-        const minted = deps.mint();
-        appendLaunchRow(bindingsFile(root), "bindings", {
-            ...key, instance: minted.instance, agentUuid: minted.agentUuid,
-            at: new Date(deps.now()).toISOString()
-        });
-        return { action: "mint", instance: minted.instance, agentUuid: minted.agentUuid };
-    }, {
-        ownerMetadata: {
-            protocol: IDENTITY_BINDING_FENCE_PROTOCOL,
-            fenceEpoch: randomUUID()
-        },
-        // A cull fence is fail-closed.  Reclaiming an apparently stale sentinel
-        // would turn an ambiguous owner/fence state into a concurrent write.
-        reclaimStale: false,
-        ...(observe ? { observe } : {})
-    });
+    }
 }
-/**
- * Async twin of {@link reclaimOrMint} used by the L2 identity worker. Identical
- * invariants — proof-of-possession gates reclaim, a fail-closed fence
- * (`reclaimStale:false`) refuses an ambiguous sentinel, `reclaimOrMint*` stays
- * the UNIQUE append of a binding row — but the lock WAIT is asynchronous so the
- * worker can receive an IPC cancel between poll attempts instead of blocking the
- * event loop inside `Atomics.wait`. On a mint, `beforePublish` publishes the
- * keyring/registration/alias before the binding append (window closure, T5).
- */
 export async function reclaimOrMintAsync(root, key, deps, options = {}) {
-    mkdirSync(identityDir(root), { recursive: true });
-    const trace = getActiveMcpTrace();
-    const observe = trace?.detailed
-        ? (event) => {
-            trace.phase(`binding_lock_${event.event}`, {
-                tool: "identity",
-                ...(event.waitMs !== undefined ? { waitMs: event.waitMs } : {}),
-                ...(event.holdMs !== undefined ? { holdMs: event.holdMs } : {})
-            });
+    ensureDurableDirectory(identityDir(root));
+    const end = performance.now() + (options.deadlineMs ?? options.timeoutMs ?? 5000);
+    const memo = {};
+    options = { ...options, signal: options.signal ?? new AbortController().signal };
+    for (;;) {
+        try {
+            const prepared = prepareTransaction(root, key, deps, options, memo);
+            return await withIdentityFence(bindingsLock(root), lease => transact(root, key, deps, memo, prepared, lease), { ...options, timeoutMs: Math.max(0, end - performance.now()) });
         }
-        : undefined;
-    return withLock(bindingsLock(root), () => {
-        const existing = findBinding(root, key);
-        if (existing && deps.verifyProof(existing)) {
-            return { action: "reclaim", instance: existing.instance, agentUuid: existing.agentUuid };
+        catch (e) {
+            const contention = e instanceof LockTimeoutError && e.lockPath === join(root, "registry", ".lock");
+            if ((!(e instanceof BindingFenceStaleError) && !contention) || performance.now() >= end)
+                throw e;
+            await new Promise(r => setTimeout(r, 0));
         }
-        const minted = deps.mint();
-        const result = {
-            action: "mint",
-            instance: minted.instance,
-            agentUuid: minted.agentUuid
-        };
-        // Publish keys / registration / alias BEFORE the binding row so no reader
-        // can observe a binding whose keyring is not yet provable.
-        options.beforePublish?.(result, { identity: true });
-        appendLaunchRow(bindingsFile(root), "bindings", {
-            ...key, instance: minted.instance, agentUuid: minted.agentUuid,
-            at: new Date(deps.now()).toISOString()
-        });
-        return result;
-    }, {
-        ownerMetadata: {
-            protocol: IDENTITY_BINDING_FENCE_PROTOCOL,
-            fenceEpoch: randomUUID()
-        },
-        reclaimStale: false,
-        ...(options.signal ? { signal: options.signal } : {}),
-        ...(options.deadlineMs !== undefined ? { timeoutMs: options.deadlineMs } : {}),
-        ...(observe ? { observe } : {})
-    });
+    }
 }
 //# sourceMappingURL=bindings.js.map

package/dist/runtime/identity/bindings.js.map

@@ -1 +1 @@
-{"version":3,"file":"bindings.js","sourceRoot":"","sources":["../../../src/runtime/identity/bindings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,eAAe,EAAqB,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAEpG;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,2BAA2B,CAAC;AAmB3E,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AACtD,CAAC;AACD,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACnD,CAAC;AACD,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,GAAuB;IAC/D,MAAM,OAAO,GAAG,gBAAgB,CAAqB,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACvI,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,IAAI,KAAqC,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,iBAAiB,KAAK,GAAG,CAAC,iBAAiB,EAAE,CAAC;YACzE,KAAK,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAa,EACb,SAAuB,EACvB,UAA6B;IAE7B,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAgBD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,GAAuB,EACvB,IAAuB;IAEvB,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,2EAA2E;IAC3E,4EAA4E;IAC5E,iCAAiC;IACjC,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,KAAK,EAAE,QAAQ;QAC7B,CAAC,CAAC,CAAC,KAA0D,EAAQ,EAAE;YACnE,KAAK,CAAC,KAAK,CAAC,gBAAgB,KAAK,CAAC,KAAK,EAAE,EAAE;gBACzC,IAAI,EAAE,UAAU;gBAChB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChE,CAAC,CAAC;QACL,CAAC;QACH,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE;QAC3C,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC3F,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3B,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE;YAC9C,GAAG,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;YAC9D,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;SACV,CAAC,CAAC;QAChC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IACpF,CAAC,EAAE;QACD,aAAa,EAAE;YACb,QAAQ,EAAE,+BAA+B;YACzC,UAAU,EAAE,UAAU,EAAE;SACzB;QACD,wEAAwE;QACxE,qEAAqE;QACrE,YAAY,EAAE,KAAK;QACnB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AA2BD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,GAAuB,EACvB,IAAuB,EACvB,UAAgC,EAAE;IAElC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,KAAK,EAAE,QAAQ;QAC7B,CAAC,CAAC,CAAC,KAA0D,EAAQ,EAAE;YACnE,KAAK,CAAC,KAAK,CAAC,gBAAgB,KAAK,CAAC,KAAK,EAAE,EAAE;gBACzC,IAAI,EAAE,UAAU;gBAChB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChE,CAAC,CAAC;QACL,CAAC;QACH,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,QAAQ,CACb,YAAY,CAAC,IAAI,CAAC,EAClB,GAAG,EAAE;QACH,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC3F,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAwB;YAClC,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;QACF,0EAA0E;QAC1E,2DAA2D;QAC3D,OAAO,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE;YAC9C,GAAG,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;YAC9D,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;SACV,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC;IAChB,CAAC,EACD;QACE,aAAa,EAAE;YACb,QAAQ,EAAE,+BAA+B;YACzC,UAAU,EAAE,UAAU,EAAE;SACzB;QACD,YAAY,EAAE,KAAK;QACnB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"bindings.js","sourceRoot":"","sources":["../../../src/runtime/identity/bindings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACzI,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAM3D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EACL,+BAA+B,EAC/B,iBAAiB,EACjB,qBAAqB,EAEtB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAEnF;;;;GAIG;AACH,OAAO,EAAE,+BAA+B,EAAE,CAAC;AAmB3C,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AACtD,CAAC;AACD,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACnD,CAAC;AACD,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,GAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAG,GAAG,IAAI,OAAO,GAAG,KAAG,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,GAAyB,CAAC,CAAC;QAC7F,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,GAAuB;IAC/D,MAAM,OAAO,GAAG,gBAAgB,CAAqB,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACvI,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,IAAI,KAAqC,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,iBAAiB,KAAK,GAAG,CAAC,iBAAiB,EAAE,CAAC;YACzE,KAAK,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAa,EACb,SAAuB,EACvB,UAA6B;IAE7B,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AA4BD,SAAS,kBAAkB,CAAC,IAAY,EAAE,GAAuB,EAAE,IAAuB,EACxF,OAA6B,EAAE,IAAqC;IACpE,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACvC,IAAI,OAAoC,CAAC;IACzC,IAAG,CAAC;QAAA,OAAO,GAAC,oBAAoB,CAAC,WAAW,CAAC,IAAI,CAAC,EAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAC,GAAG,CAAC,iBAAiB,CAAC,CAA4C,CAAC;IAAA,CAAC;IAC/I,OAAM,CAAC,EAAC,CAAC;QAAA,IAAG,CAAC,CAAC,CAAC,YAAY,2BAA2B,CAAC;YAAC,MAAM,CAAC,CAAC;QAAA,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,SAAS,EAAC,CAAC;IAAA,CAAC;IAClG,IAAG,OAAO,EAAE,CAAC;QACX,MAAM,KAAK,GAAC,iBAAiB,CAAC,IAAI,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAG,CAAC,KAAK;YAAC,OAAO,EAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,SAAS,EAAC,CAAC;QACnD,OAAO,EAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,CAAC;IACjC,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3G,IAAI,OAAO,IAAI,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAChD,IAAI,CAAC,KAAK,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IAClD,OAAO,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,2BAA2B,CAAC,0CAA0C,CAAC,CAAC;IACpG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,GAAuB,EAAE,IAAuB,EAAE,IAAmC,EACnH,QAA+C,EAAE,KAAyB;IAC1E,IAAG,CAAC,QAAQ,CAAC,KAAK;QAAC,MAAM,IAAI,sBAAsB,EAAE,CAAC;IACtD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,QAAQ,EAAE,QAAQ,KAAK,QAAQ,CAAC,OAAO,EAAE,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,sBAAsB,EAAE,CAAC;IACnI,IAAI,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC9D,OAAO,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAC,MAAM,EAAC,SAAS,EAAC,QAAQ,EAAC,QAAQ,CAAC,QAAQ,EAAC,SAAS,EAAC,QAAQ,CAAC,SAAS,EAAC,CAAC,CAAC,CAAC;IAClI,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,2BAA2B,CAAC,4BAA4B,CAAC,CAAC;IACrF,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAC,GAAG,GAAG,EAAC,QAAQ,EAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAC,SAAS,EAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAC,EAAE,EAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAC,EACzI,KAAK,CAAC,KAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACzF,OAAO,IAAI,CAAC,KAAK,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,GAAuB,EAAE,IAAuB,EAC1F,UAAgC,EAAE;IAClC,sBAAsB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;IAClF,MAAM,IAAI,GAAkC,EAAE,CAAC;IAC/C,OAAO,GAAC,EAAC,GAAG,OAAO,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,EAAC,CAAC;IAC3E,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YACpE,OAAO,qBAAqB,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,GAAG,EAAC,IAAI,EAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,CAAC,EACrG,EAAC,GAAG,OAAO,EAAE,SAAS,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,GAAG,GAAC,WAAW,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC;QAAC,CAAC;QAC/D,OAAM,CAAC,EAAE,CAAC;YACR,mFAAmF;YACnF,MAAM,UAAU,GAAG,CAAC,YAAY,gBAAgB,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YACnG,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,GAAG;gBAAE,MAAM,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,GAAuB,EAAE,IAAuB,EACrG,UAAgC,EAAE;IAClC,sBAAsB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;IAClF,MAAM,IAAI,GAAkC,EAAE,CAAC;IAC/C,OAAO,GAAC,EAAC,GAAG,OAAO,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,EAAC,CAAC;IAC3E,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAC,GAAG,EAAC,IAAI,EAAC,OAAO,EAAC,IAAI,CAAC,CAAC;YAChE,OAAO,MAAM,iBAAiB,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,GAAG,EAAC,IAAI,EAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,CAAC,EACvG,EAAC,GAAG,OAAO,EAAE,SAAS,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,GAAG,GAAC,WAAW,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC;QAAC,CAAC;QAC/D,OAAM,CAAC,EAAE,CAAC;YACR,MAAM,UAAU,GAAG,CAAC,YAAY,gBAAgB,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YACnG,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,GAAG;gBAAE,MAAM,CAAC,CAAC;YACjG,MAAM,IAAI,OAAO,CAAC,CAAC,CAAA,EAAE,CAAA,UAAU,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/runtime/identity/durable.d.ts

@@ -0,0 +1,7 @@
+export declare function redactIdentityStorageError(error: unknown): unknown;
+export declare function syncDirectory(dir: string): void;
+export declare function ensureDurableDirectory(dir: string): void;
+export declare function syncFile(file: string): void;
+export declare function writeComplete(fd: number, bytes: Buffer | string): void;
+export declare function appendDurable(file: string, line: string, held: () => boolean): void;
+//# sourceMappingURL=durable.d.ts.map

package/dist/runtime/identity/durable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"durable.d.ts","sourceRoot":"","sources":["../../../src/runtime/identity/durable.ts"],"names":[],"mappings":"AAGA,wBAAgB,0BAA0B,CAAC,KAAK,EAAC,OAAO,GAAE,OAAO,CAIhE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAQ/C;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAOxD;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAI3C;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQtE;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,OAAO,GAAG,IAAI,CAKnF"}