instar 1.3.18 → 1.3.20

package/dist/core/LeaseCoordinator.js

@@ -0,0 +1,226 @@
+/**
+ * LeaseCoordinator — drives the FencedLease over the durable (git) and fast
+ * (tunnel) media, and owns the lifecycle of acquisition / renewal / fencing /
+ * escalation. Spec §6 + §8 G1.
+ *
+ * Correctness substrate is GIT: acquisition is a compare-and-swap implemented
+ * as write-then-push-or-reject-reread plus epoch monotonicity (git has no
+ * native CAS). The TUNNEL is an optional low-latency accelerator: it can raise
+ * the observed epoch (speeding acquisition) but can NEVER lower it below the
+ * git-committed floor, and a replayed/below-floor tunnel message is dropped by
+ * FencedLease.acceptTunnelLease. If the tunnel is unavailable the system
+ * degrades to git-only — correct, just bounded by git cadence — which is why
+ * Phase-0 pairing worked over git alone.
+ *
+ * Renewal requires the tunnel medium when one is configured: a holder that
+ * cannot renew for > leaseTtlMs MUST self-suspend ingress regardless of its
+ * local clock (closes the tunnel-down / git-up split-authority window).
+ *
+ * The store/transport are injected so the dangerous CAS-contention and
+ * self-suspend logic are unit-testable with in-memory fakes.
+ */
+export class LeaseCoordinator {
+    d;
+    fl;
+    nonceCounter = 0;
+    lastRenewOkAt;
+    lastObservedEpoch = 0;
+    suspended = false;
+    /**
+     * The freshest lease THIS machine has signed (acquisition or renewal). It is
+     * the authoritative low-latency copy of our own holding — we broadcast it
+     * over the tunnel, but git is only updated coarsely (on epoch change), so a
+     * renewal's new expiry lives here, not in git. Folded into effectiveView only
+     * while it is not superseded by a higher epoch.
+     */
+    selfIssued = null;
+    constructor(deps) {
+        this.d = deps;
+        this.fl = deps.lease;
+        this.lastRenewOkAt = this.now();
+    }
+    now() {
+        return (this.d.now ?? Date.now)();
+    }
+    log(m) {
+        this.d.logger?.(`[lease] ${m}`);
+    }
+    nextNonce() {
+        return ++this.nonceCounter;
+    }
+    get selfMachineId() {
+        return this.fl.selfMachineId;
+    }
+    get isSuspended() {
+        return this.suspended;
+    }
+    /**
+     * Compute the current effective epoch = max(tunnel-observed accepted, git).
+     * A tunnel lease is folded in only if acceptTunnelLease passes (valid sig,
+     * ≥ git floor, fresh nonce).
+     */
+    effectiveView() {
+        const git = this.d.store.read();
+        let bestLease = git.lease;
+        let epoch = git.epoch;
+        if (this.d.tunnel) {
+            const obs = this.d.tunnel.observed();
+            if (obs.lease) {
+                const decision = this.fl.acceptTunnelLease(obs.lease, git.epoch, obs.lastNonceByHolder);
+                if (decision.accept && obs.lease.epoch > epoch) {
+                    bestLease = obs.lease;
+                    epoch = obs.lease.epoch;
+                }
+            }
+        }
+        // Fold in our own freshest self-issued lease (a renewal's new expiry lives
+        // here, not in coarse git). Only while not superseded by a higher epoch.
+        if (this.selfIssued && this.selfIssued.holder === this.selfMachineId && this.selfIssued.epoch >= epoch) {
+            bestLease = this.selfIssued;
+            epoch = this.selfIssued.epoch;
+        }
+        return { lease: bestLease, epoch, gitEpoch: git.epoch };
+    }
+    /** Does THIS machine currently hold a valid lease at the effective epoch? */
+    holdsLease() {
+        if (this.suspended)
+            return false;
+        const view = this.effectiveView();
+        return this.fl.holdsValidLease(view.lease, view.epoch, this.now());
+    }
+    /** The current effective epoch (for stamping writes/sends). */
+    currentEpoch() {
+        return this.effectiveView().epoch;
+    }
+    currentHolder() {
+        return this.effectiveView().lease?.holder ?? null;
+    }
+    /**
+     * Attempt to acquire (or self-renew) the lease if eligible. Returns true if
+     * THIS machine holds the lease afterward. Implements the bounded-retry CAS
+     * with livelock backoff.
+     */
+    async acquireIfEligible() {
+        if (this.suspended) {
+            // A suspended holder may resume only by re-acquiring cleanly below.
+            this.suspended = false;
+        }
+        const dead = this.d.presumedDeadHolders();
+        let retries = 0;
+        // eslint-disable-next-line no-constant-condition
+        while (true) {
+            const view = this.effectiveView();
+            // Already hold it at the current epoch → just renew.
+            if (view.lease && view.lease.holder === this.selfMachineId && !this.fl.isExpired(view.lease, this.now())) {
+                return this.renew();
+            }
+            const decision = this.fl.canAcquire(view.lease, dead, this.now());
+            if (!decision.can) {
+                this.log(`acquire skipped: ${decision.reason}`);
+                return false;
+            }
+            const candidate = this.fl.buildAcquisition(view.lease, this.now(), this.nextNonce());
+            const res = this.d.store.casWrite(candidate);
+            if (res.ok) {
+                this.selfIssued = candidate;
+                await this.broadcast(candidate);
+                this.lastRenewOkAt = this.now();
+                this.emitEpoch(candidate.epoch);
+                this.log(`acquired lease at epoch ${candidate.epoch}`);
+                return true;
+            }
+            // CAS lost — someone advanced. Re-evaluate against the observed state.
+            const observedEpoch = res.observed.epoch;
+            if (observedEpoch >= candidate.epoch) {
+                this.log(`CAS lost to epoch ${observedEpoch} (our candidate ${candidate.epoch}) — yielding`);
+                this.emitEpoch(observedEpoch);
+                // If the winner is a presumed-dead/expired holder we'll retry; else stop.
+                if (!this.fl.canAcquire(res.observed.lease, dead, this.now()).can)
+                    return false;
+            }
+            retries++;
+            if (this.fl.shouldBackoffAfterContention(retries, res.observed.lease?.holder ?? '')) {
+                this.log(`livelock backoff after ${retries} retries — yielding for ${this.fl.backoffMs}ms`);
+                return false;
+            }
+        }
+    }
+    /**
+     * Renew the held lease: re-sign with a fresh expiry, broadcast over the
+     * tunnel, and (coarsely, via the store on epoch change) keep git current.
+     * Returns false (and self-suspends) if the tunnel medium is configured but
+     * has been unreachable for longer than the lease TTL.
+     */
+    async renew() {
+        const view = this.effectiveView();
+        if (!view.lease || view.lease.holder !== this.selfMachineId)
+            return false;
+        // Re-sign with a fresh expiry (same epoch — renewal never advances it).
+        const renewed = this.fl.signLease(view.epoch, view.lease.acquiredAt, new Date(this.now() + this.fl.ttlMs).toISOString(), this.nextNonce());
+        // Medium-agnostic renewal requirement: the renewal must be CONFIRMED over a
+        // shared medium — the tunnel (reachable broadcast) when configured, else a
+        // durable git refresh. A holder that cannot confirm over ANY medium for
+        // > leaseTtlMs MUST self-suspend, rather than extend its lease locally
+        // forever (which is exactly the partitioned-old-awake split-brain).
+        let confirmed;
+        if (this.d.tunnel) {
+            confirmed = await this.d.tunnel.broadcast(renewed).catch(() => false);
+        }
+        else {
+            confirmed = this.d.store.refresh(renewed);
+        }
+        if (confirmed) {
+            this.selfIssued = renewed;
+            this.lastRenewOkAt = this.now();
+            return true;
+        }
+        if (this.now() - this.lastRenewOkAt > this.fl.ttlMs) {
+            this.suspended = true;
+            this.d.onSelfSuspend?.(`could not confirm lease over ${this.d.tunnel ? 'tunnel' : 'git'} for > leaseTtlMs (${this.fl.ttlMs}ms) — lease lapsed`);
+            this.log('self-suspended: renewal-confirmation lapse');
+            return false;
+        }
+        // Within grace: keep serving on the EXISTING (soon-to-expire) lease — do
+        // NOT extend selfIssued's expiry, so it lapses if we never reconfirm.
+        return true;
+    }
+    async broadcast(lease) {
+        if (!this.d.tunnel)
+            return;
+        try {
+            const ok = await this.d.tunnel.broadcast(lease);
+            if (ok)
+                this.lastRenewOkAt = this.now();
+        }
+        catch (err) {
+            this.log(`broadcast failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    emitEpoch(epoch) {
+        if (epoch !== this.lastObservedEpoch) {
+            this.lastObservedEpoch = epoch;
+            this.d.onEpochAdvance?.(epoch);
+        }
+    }
+    /**
+     * Detection (signal only): does the synced state show contention the lease
+     * cannot resolve (e.g. a presumed-dead holder we cannot demote because no
+     * shared medium can advance the epoch)? Escalates ONCE per partition episode.
+     */
+    checkForUnresolvableSplit(partitionEpisodeId) {
+        const view = this.effectiveView();
+        if (!view.lease)
+            return;
+        const dead = this.d.presumedDeadHolders();
+        const holderDead = dead.has(view.lease.holder);
+        const cannotAdvance = this.d.tunnel ? !this.d.tunnel.isReachable() : false;
+        if (holderDead && cannotAdvance && view.lease.holder !== this.selfMachineId) {
+            this.d.onEscalate?.({
+                partitionEpisodeId,
+                holder: view.lease.holder,
+                reason: 'presumed-dead holder cannot be demoted — no shared medium to advance the epoch',
+            });
+        }
+    }
+}
+//# sourceMappingURL=LeaseCoordinator.js.map

package/dist/core/LeaseCoordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LeaseCoordinator.js","sourceRoot":"","sources":["../../src/core/LeaseCoordinator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAuDH,MAAM,OAAO,gBAAgB;IACV,CAAC,CAAuB;IACxB,EAAE,CAAc;IACzB,YAAY,GAAG,CAAC,CAAC;IACjB,aAAa,CAAS;IACtB,iBAAiB,GAAG,CAAC,CAAC;IACtB,SAAS,GAAG,KAAK,CAAC;IAC1B;;;;;;OAMG;IACK,UAAU,GAAuB,IAAI,CAAC;IAE9C,YAAY,IAA0B;QACpC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QACd,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,CAAC;IAEO,GAAG;QACT,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACpC,CAAC;IACO,GAAG,CAAC,CAAS;QACnB,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;IACO,SAAS;QACf,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC;IAC/B,CAAC;IACD,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACK,aAAa;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC;QAC1B,IAAI,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACtB,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBACd,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBACxF,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC;oBAC/C,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC;oBACtB,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QACD,2EAA2E;QAC3E,yEAAyE;QACzE,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC;YACvG,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC;YAC5B,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAChC,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IAC1D,CAAC;IAED,6EAA6E;IAC7E,UAAU;QACR,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,+DAA+D;IAC/D,YAAY;QACV,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC;IACpC,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC;IACpD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB;QACrB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,oEAAoE;YACpE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC;QAC1C,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,iDAAiD;QACjD,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAClC,qDAAqD;YACrD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;gBACzG,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;YACtB,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAClE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;gBAClB,IAAI,CAAC,GAAG,CAAC,oBAAoB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBAChD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YACrF,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;gBAC5B,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAChC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAChC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBAChC,IAAI,CAAC,GAAG,CAAC,2BAA2B,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;gBACvD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,uEAAuE;YACvE,MAAM,aAAa,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YACzC,IAAI,aAAa,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;gBACrC,IAAI,CAAC,GAAG,CAAC,qBAAqB,aAAa,mBAAmB,SAAS,CAAC,KAAK,cAAc,CAAC,CAAC;gBAC7F,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;gBAC9B,0EAA0E;gBAC1E,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG;oBAAE,OAAO,KAAK,CAAC;YAClF,CAAC;YACD,OAAO,EAAE,CAAC;YACV,IAAI,IAAI,CAAC,EAAE,CAAC,4BAA4B,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;gBACpF,IAAI,CAAC,GAAG,CAAC,0BAA0B,OAAO,2BAA2B,IAAI,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC;gBAC5F,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QAE1E,wEAAwE;QACxE,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,SAAS,CAC/B,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,CAAC,UAAU,EACrB,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAClD,IAAI,CAAC,SAAS,EAAE,CACjB,CAAC;QAEF,4EAA4E;QAC5E,2EAA2E;QAC3E,wEAAwE;QACxE,uEAAuE;QACvE,oEAAoE;QACpE,IAAI,SAAkB,CAAC;QACvB,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YAClB,SAAS,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;YAC1B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YACpD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CACpB,gCAAgC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,sBAAsB,IAAI,CAAC,EAAE,CAAC,KAAK,oBAAoB,CACxH,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;YACvD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,yEAAyE;QACzE,sEAAsE;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,KAAkB;QACxC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,OAAO;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,EAAE;gBAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,qBAAqB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,KAAa;QAC7B,IAAI,KAAK,KAAK,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACrC,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;YAC/B,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,yBAAyB,CAAC,kBAA0B;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QAC3E,IAAI,UAAU,IAAI,aAAa,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;YAC5E,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;gBAClB,kBAAkB;gBAClB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;gBACzB,MAAM,EAAE,gFAAgF;aACzF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/core/LiveTailBuffer.d.ts

@@ -0,0 +1,64 @@
+/**
+ * LiveTailBuffer — the standby-side persisted live-tail with sequence-dedup
+ * (spec §8 G3b). The holder pushes monotonic-sequence flushes of the live
+ * conversation tail; the standby applies a flush ONLY if its sequence is
+ * lastAppliedSeq + 1, coalescing/holding out-of-order flushes and dropping
+ * duplicates — so an at-least-once tunnel redelivery cannot double-append and
+ * corrupt the persisted context window (which would make a post-failover reply
+ * misrepresent history, violating acceptance criterion 3).
+ *
+ * Out-of-order flushes are held only until liveTailOutOfOrderTimeoutMs; if the
+ * gap is never filled (sender died mid-sequence) the buffer DECLARES THE GAP
+ * UNFILLABLE, discards the held flushes, and proceeds with the last contiguous
+ * sequence as its resumable tail — bounding the holdout buffer and never
+ * wedging the standby behind a gap the at-least-once channel will re-present.
+ *
+ * Bounded by liveTailMaxBytesPerTopic (drop-oldest). Pure logic — the encrypted
+ * transport feeds applyFlush(); persistence is the caller's (an injected sink).
+ */
+export interface LiveTailFlush {
+    seq: number;
+    topic: string;
+    /** Already-redacted, already-decrypted tail content for this flush. */
+    content: string;
+    /** Bytes (for the cap); defaults to content length. */
+    bytes?: number;
+    receivedAtMs?: number;
+}
+export interface LiveTailBufferConfig {
+    outOfOrderTimeoutMs: number;
+    maxBytesPerTopic: number;
+    now?: () => number;
+    logger?: (msg: string) => void;
+}
+export interface ApplyResult {
+    applied: boolean;
+    reason: 'applied' | 'duplicate' | 'held-out-of-order' | 'gap-discarded-then-applied';
+}
+export declare class LiveTailBuffer {
+    private readonly cfg;
+    private topics;
+    constructor(cfg: LiveTailBufferConfig);
+    private now;
+    private log;
+    private topic;
+    /**
+     * Apply a flush. Returns whether it was applied (or held/dropped). Enforces
+     * exactly-once contiguous application: dup dropped, out-of-order held, gap
+     * timed-out and discarded.
+     */
+    applyFlush(flush: LiveTailFlush): ApplyResult;
+    /** Discard held flushes whose gap has exceeded the out-of-order timeout. */
+    private evictTimedOutGaps;
+    /** A periodic tick the caller invokes to time out gaps even without new flushes. */
+    tick(topic: string): void;
+    private commit;
+    /** The resumable tail for a topic (the contiguous applied content). */
+    getTail(topic: string): {
+        lastAppliedSeq: number;
+        content: string;
+    };
+    getLastAppliedSeq(topic: string): number;
+    heldCount(topic: string): number;
+}
+//# sourceMappingURL=LiveTailBuffer.d.ts.map

package/dist/core/LiveTailBuffer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LiveTailBuffer.d.ts","sourceRoot":"","sources":["../../src/core/LiveTailBuffer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AASD,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,mBAAmB,GAAG,4BAA4B,CAAC;CACtF;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAuB;IAC3C,OAAO,CAAC,MAAM,CAAiC;gBAEnC,GAAG,EAAE,oBAAoB;IAIrC,OAAO,CAAC,GAAG;IAGX,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,KAAK;IASb;;;;OAIG;IACH,UAAU,CAAC,KAAK,EAAE,aAAa,GAAG,WAAW;IAwC7C,4EAA4E;IAC5E,OAAO,CAAC,iBAAiB;IAWzB,oFAAoF;IACpF,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAKzB,OAAO,CAAC,MAAM;IAYd,uEAAuE;IACvE,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;IAMnE,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAIxC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAGjC"}

package/dist/core/LiveTailBuffer.js

@@ -0,0 +1,122 @@
+/**
+ * LiveTailBuffer — the standby-side persisted live-tail with sequence-dedup
+ * (spec §8 G3b). The holder pushes monotonic-sequence flushes of the live
+ * conversation tail; the standby applies a flush ONLY if its sequence is
+ * lastAppliedSeq + 1, coalescing/holding out-of-order flushes and dropping
+ * duplicates — so an at-least-once tunnel redelivery cannot double-append and
+ * corrupt the persisted context window (which would make a post-failover reply
+ * misrepresent history, violating acceptance criterion 3).
+ *
+ * Out-of-order flushes are held only until liveTailOutOfOrderTimeoutMs; if the
+ * gap is never filled (sender died mid-sequence) the buffer DECLARES THE GAP
+ * UNFILLABLE, discards the held flushes, and proceeds with the last contiguous
+ * sequence as its resumable tail — bounding the holdout buffer and never
+ * wedging the standby behind a gap the at-least-once channel will re-present.
+ *
+ * Bounded by liveTailMaxBytesPerTopic (drop-oldest). Pure logic — the encrypted
+ * transport feeds applyFlush(); persistence is the caller's (an injected sink).
+ */
+export class LiveTailBuffer {
+    cfg;
+    topics = new Map();
+    constructor(cfg) {
+        this.cfg = cfg;
+    }
+    now() {
+        return (this.cfg.now ?? Date.now)();
+    }
+    log(m) {
+        this.cfg.logger?.(`[live-tail] ${m}`);
+    }
+    topic(id) {
+        let t = this.topics.get(id);
+        if (!t) {
+            t = { lastAppliedSeq: 0, applied: [], held: new Map(), bytes: 0 };
+            this.topics.set(id, t);
+        }
+        return t;
+    }
+    /**
+     * Apply a flush. Returns whether it was applied (or held/dropped). Enforces
+     * exactly-once contiguous application: dup dropped, out-of-order held, gap
+     * timed-out and discarded.
+     */
+    applyFlush(flush) {
+        const t = this.topic(flush.topic);
+        const seq = flush.seq;
+        if (seq <= t.lastAppliedSeq) {
+            return { applied: false, reason: 'duplicate' };
+        }
+        if (seq === t.lastAppliedSeq + 1) {
+            this.commit(t, flush);
+            // Drain any held flushes that are now contiguous.
+            let next = t.lastAppliedSeq + 1;
+            while (t.held.has(next)) {
+                const h = t.held.get(next);
+                t.held.delete(next);
+                this.commit(t, h);
+                next = t.lastAppliedSeq + 1;
+            }
+            return { applied: true, reason: 'applied' };
+        }
+        // seq > lastAppliedSeq + 1 → there's a gap. Check whether the earliest held
+        // gap has timed out; if so, declare unfillable, discard held, and treat this
+        // flush's predecessor chain as the new contiguous baseline.
+        const evicted = this.evictTimedOutGaps(t);
+        if (evicted) {
+            // After discarding the unfillable gap, accept this flush as the new
+            // baseline (we proceed with the last contiguous sequence == this one).
+            t.lastAppliedSeq = seq - 1;
+            this.commit(t, flush);
+            return { applied: true, reason: 'gap-discarded-then-applied' };
+        }
+        // Hold it for the out-of-order window.
+        if (!t.held.has(seq)) {
+            t.held.set(seq, { ...flush, heldAtMs: this.now() });
+        }
+        return { applied: false, reason: 'held-out-of-order' };
+    }
+    /** Discard held flushes whose gap has exceeded the out-of-order timeout. */
+    evictTimedOutGaps(t) {
+        if (t.held.size === 0)
+            return false;
+        const oldestHeldAt = Math.min(...[...t.held.values()].map((h) => h.heldAtMs));
+        if (this.now() - oldestHeldAt > this.cfg.outOfOrderTimeoutMs) {
+            this.log(`gap unfillable after ${this.cfg.outOfOrderTimeoutMs}ms — discarding ${t.held.size} held flush(es)`);
+            t.held.clear();
+            return true;
+        }
+        return false;
+    }
+    /** A periodic tick the caller invokes to time out gaps even without new flushes. */
+    tick(topic) {
+        const t = this.topics.get(topic);
+        if (t)
+            this.evictTimedOutGaps(t);
+    }
+    commit(t, flush) {
+        const bytes = flush.bytes ?? Buffer.byteLength(flush.content);
+        t.applied.push({ ...flush });
+        t.bytes += bytes;
+        t.lastAppliedSeq = flush.seq;
+        // Enforce the per-topic byte cap (drop-oldest).
+        while (t.bytes > this.cfg.maxBytesPerTopic && t.applied.length > 1) {
+            const dropped = t.applied.shift();
+            t.bytes -= dropped.bytes ?? Buffer.byteLength(dropped.content);
+        }
+    }
+    /** The resumable tail for a topic (the contiguous applied content). */
+    getTail(topic) {
+        const t = this.topics.get(topic);
+        if (!t)
+            return { lastAppliedSeq: 0, content: '' };
+        return { lastAppliedSeq: t.lastAppliedSeq, content: t.applied.map((f) => f.content).join('') };
+    }
+    getLastAppliedSeq(topic) {
+        return this.topics.get(topic)?.lastAppliedSeq ?? 0;
+    }
+    heldCount(topic) {
+        return this.topics.get(topic)?.held.size ?? 0;
+    }
+}
+//# sourceMappingURL=LiveTailBuffer.js.map

package/dist/core/LiveTailBuffer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LiveTailBuffer.js","sourceRoot":"","sources":["../../src/core/LiveTailBuffer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AA+BH,MAAM,OAAO,cAAc;IACR,GAAG,CAAuB;IACnC,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE/C,YAAY,GAAyB;QACnC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAEO,GAAG;QACT,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACtC,CAAC;IACO,GAAG,CAAC,CAAS;QACnB,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,EAAU;QACtB,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,KAAoB;QAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QAEtB,IAAI,GAAG,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACjD,CAAC;QAED,IAAI,GAAG,KAAK,CAAC,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACtB,kDAAkD;YAClD,IAAI,IAAI,GAAG,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC;YAChC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;gBAC5B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClB,IAAI,GAAG,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC;YAC9B,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC9C,CAAC;QAED,4EAA4E;QAC5E,6EAA6E;QAC7E,4DAA4D;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,OAAO,EAAE,CAAC;YACZ,oEAAoE;YACpE,uEAAuE;YACvE,CAAC,CAAC,cAAc,GAAG,GAAG,GAAG,CAAC,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QACjE,CAAC;QAED,uCAAuC;QACvC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzD,CAAC;IAED,4EAA4E;IACpE,iBAAiB,CAAC,CAAa;QACrC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9E,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;YAC7D,IAAI,CAAC,GAAG,CAAC,wBAAwB,IAAI,CAAC,GAAG,CAAC,mBAAmB,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,CAAC;YAC9G,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oFAAoF;IACpF,IAAI,CAAC,KAAa;QAChB,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC;YAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IAEO,MAAM,CAAC,CAAa,EAAE,KAAoB;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9D,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QAC7B,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC;QACjB,CAAC,CAAC,cAAc,GAAG,KAAK,CAAC,GAAG,CAAC;QAC7B,gDAAgD;QAChD,OAAO,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnE,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAG,CAAC;YACnC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,OAAO,CAAC,KAAa;QACnB,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAClD,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IACjG,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,cAAc,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,SAAS,CAAC,KAAa;QACrB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;IAChD,CAAC;CACF"}

package/dist/core/MultiMachineCoordinator.d.ts

@@ -19,7 +19,20 @@ import { HeartbeatManager } from './HeartbeatManager.js';
 import { SecurityLog } from './SecurityLog.js';
 import { NonceStore } from './NonceStore.js';
 import type { StateManager } from './StateManager.js';
+import type { LeaseCoordinator } from './LeaseCoordinator.js';
 import type { MachineRole, MachineIdentity, MultiMachineConfig, CoordinationMode } from './types.js';
+/** Observability shape for /health.multiMachine.syncStatus (spec §11). */
+export interface MultiMachineSyncStatus {
+    enabled: boolean;
+    role: MachineRole;
+    leaseHolder: string | null;
+    leaseEpoch: number;
+    holdsLease: boolean;
+    /** 'clear' | 'contested' (more than one awake machine in the registry) | 'self-suspended'. */
+    splitBrainState: 'clear' | 'contested' | 'self-suspended';
+    protocolVersion: number;
+    awakeMachineCount: number;
+}
 export interface CoordinatorConfig {
     /** State directory (.instar) */
     stateDir: string;
@@ -51,6 +64,14 @@ export declare class MultiMachineCoordinator extends EventEmitter {
     /** Integrated-Being v1 — tracks whether we've already emitted the
      *  per-machine-ledger warning this boot. Spec §Multi-machine. */
     private integratedBeingWarningEmitted;
+    /**
+     * Cross-Machine Seamlessness §6 — the fenced lease is the authority for
+     * "awake". When attached, holdsLease() gates the hot path (the structural
+     * demotion the Phase-0 split-brain was missing). Null on single-machine /
+     * non-git meshes, where the heartbeat path remains the authority.
+     */
+    private leaseCoordinator;
+    private leaseTicking;
     constructor(state: StateManager, config: CoordinatorConfig);
     /** Whether multi-machine is enabled (has identity). */
     get enabled(): boolean;
@@ -99,6 +120,34 @@ export declare class MultiMachineCoordinator extends EventEmitter {
      * Returns true if this machine should NOT process messages.
      */
     shouldSkipProcessing(): boolean;
+    /**
+     * Attach the LeaseCoordinator (built once gitSync exists in server boot).
+     * From here the lease is the authority for awake/standby. Wires the lease's
+     * epoch-advance to a coordinator `leaseEpochChange` event so the registry
+     * sync debouncer pushes the new epoch durably.
+     */
+    attachLeaseCoordinator(lc: LeaseCoordinator): void;
+    /** Whether this machine structurally holds the lease (false if none attached). */
+    holdsLease(): boolean;
+    /**
+     * Observability snapshot for /health.multiMachine.syncStatus (spec §11).
+     * Always returns valid fields (never null/throws) — this is the Phase-1
+     * "feature is alive" surface. On a single-machine install it reports the
+     * trivially-held lease.
+     */
+    getSyncStatus(): MultiMachineSyncStatus;
+    /**
+     * Initialize the lease-based role at boot: attempt acquisition if eligible,
+     * then reconcile _role + StateManager read-only to whether we hold the lease.
+     */
+    initializeLease(): Promise<void>;
+    /**
+     * Drive the lease on each monitor tick: renew if we hold it, else attempt
+     * failover acquisition. Reconciles role afterward. Fire-and-forget safe.
+     */
+    private tickLease;
+    /** Bring _role + read-only into line with whether we hold the lease. */
+    private reconcileRoleToLease;
     /**
      * Start periodic heartbeat writes (awake machine only).
      */

package/dist/core/MultiMachineCoordinator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MultiMachineCoordinator.d.ts","sourceRoot":"","sources":["../../src/core/MultiMachineCoordinator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAUrG,MAAM,WAAW,iBAAiB;IAChC,gCAAgC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,wDAAwD;IACxD,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,yDAAyD;IACzD,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,0CAA0C;IAC1C,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,6BAA6B;IAC7B,UAAU,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,KAAK,IAAI,CAAC;CAC1D;AAID,qBAAa,uBAAwB,SAAQ,YAAY;IACvD,OAAO,CAAC,eAAe,CAAyB;IAChD,OAAO,CAAC,gBAAgB,CAAmB;IAC3C,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,KAAK,CAA0B;IACvC,OAAO,CAAC,SAAS,CAAgC;IACjD,OAAO,CAAC,QAAQ,CAAkB;IAClC,OAAO,CAAC,mBAAmB,CAA+C;IAC1E,OAAO,CAAC,mBAAmB,CAA+C;IAC1E;qEACiE;IACjE,OAAO,CAAC,6BAA6B,CAAkB;gBAE3C,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,iBAAiB;IAc1D,uDAAuD;IACvD,IAAI,OAAO,IAAI,OAAO,CAA0B;IAEhD,mCAAmC;IACnC,IAAI,IAAI,IAAI,WAAW,CAAuB;IAE9C,yDAAyD;IACzD,IAAI,QAAQ,IAAI,eAAe,GAAG,IAAI,CAA2B;IAEjE,2DAA2D;IAC3D,IAAI,OAAO,IAAI,OAAO,CAAmC;IAEzD,0DAA0D;IAC1D,IAAI,gBAAgB,IAAI,gBAAgB,CAEvC;IAED,kDAAkD;IAClD,IAAI,QAAQ;;;;;MAOX;IAID;;;OAGG;IACH,KAAK,IAAI,WAAW;IAuGpB;;OAEG;IACH;;;;OAIG;IACH,OAAO,CAAC,sCAAsC;IAiB9C,IAAI,IAAI,IAAI;IAcZ;;;OAGG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IA8BpC;;;OAGG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAgCrC;;;OAGG;IACH,oBAAoB,IAAI,OAAO;IAY/B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA4B5B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAc7B;;OAEG;IACH,OAAO,CAAC,oBAAoB;CAoB7B"}
+{"version":3,"file":"MultiMachineCoordinator.d.ts","sourceRoot":"","sources":["../../src/core/MultiMachineCoordinator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAErG,0EAA0E;AAC1E,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,8FAA8F;IAC9F,eAAe,EAAE,OAAO,GAAG,WAAW,GAAG,gBAAgB,CAAC;IAC1D,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAUD,MAAM,WAAW,iBAAiB;IAChC,gCAAgC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,wDAAwD;IACxD,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,yDAAyD;IACzD,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,0CAA0C;IAC1C,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,6BAA6B;IAC7B,UAAU,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,KAAK,IAAI,CAAC;CAC1D;AAID,qBAAa,uBAAwB,SAAQ,YAAY;IACvD,OAAO,CAAC,eAAe,CAAyB;IAChD,OAAO,CAAC,gBAAgB,CAAmB;IAC3C,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,KAAK,CAA0B;IACvC,OAAO,CAAC,SAAS,CAAgC;IACjD,OAAO,CAAC,QAAQ,CAAkB;IAClC,OAAO,CAAC,mBAAmB,CAA+C;IAC1E,OAAO,CAAC,mBAAmB,CAA+C;IAC1E;qEACiE;IACjE,OAAO,CAAC,6BAA6B,CAAkB;IACvD;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB,CAAiC;IACzD,OAAO,CAAC,YAAY,CAAkB;gBAE1B,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,iBAAiB;IAc1D,uDAAuD;IACvD,IAAI,OAAO,IAAI,OAAO,CAA0B;IAEhD,mCAAmC;IACnC,IAAI,IAAI,IAAI,WAAW,CAAuB;IAE9C,yDAAyD;IACzD,IAAI,QAAQ,IAAI,eAAe,GAAG,IAAI,CAA2B;IAEjE,2DAA2D;IAC3D,IAAI,OAAO,IAAI,OAAO,CAAmC;IAEzD,0DAA0D;IAC1D,IAAI,gBAAgB,IAAI,gBAAgB,CAEvC;IAED,kDAAkD;IAClD,IAAI,QAAQ;;;;;MAOX;IAID;;;OAGG;IACH,KAAK,IAAI,WAAW;IAuGpB;;OAEG;IACH;;;;OAIG;IACH,OAAO,CAAC,sCAAsC;IAiB9C,IAAI,IAAI,IAAI;IAcZ;;;OAGG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IA8BpC;;;OAGG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAgCrC;;;OAGG;IACH,oBAAoB,IAAI,OAAO;IAoB/B;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,EAAE,gBAAgB,GAAG,IAAI;IAIlD,kFAAkF;IAClF,UAAU,IAAI,OAAO;IAIrB;;;;;OAKG;IACH,aAAa,IAAI,sBAAsB;IA6BvC;;;OAGG;IACG,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAMtC;;;OAGG;YACW,SAAS;IAiBvB,wEAAwE;IACxE,OAAO,CAAC,oBAAoB;IA6B5B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA4B5B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAc7B;;OAEG;IACH,OAAO,CAAC,oBAAoB;CA2B7B"}