instar 1.3.628 → 1.3.630

package/dist/core/HttpLeaseTransport.js

@@ -16,7 +16,7 @@
  * The HTTP layer is injected (fetchImpl) so the broadcast/observe/reachability
  * logic is unit-testable without a network.
  */
-import { signRequest } from '../server/machineAuth.js';
+import { signRequest, verifyLeaseAck, verifyLeaseAckIdentity, newReqNonce } from '../server/machineAuth.js';
 import { PeerFailureLogGate } from './PeerFailureLogGate.js';
 export class HttpLeaseTransport {
     d;
@@ -63,34 +63,170 @@ export class HttpLeaseTransport {
             this.lastBroadcastOkAt = this.now();
             return true;
         }
+        const results = await Promise.all(peers.map((peer) => this.dialPeer(peer, '/api/lease', { lease }, lease.epoch)));
+        const anyOk = results.some((r) => r.confirmed);
+        if (anyOk)
+            this.lastBroadcastOkAt = this.now();
+        return anyOk;
+    }
+    meshOn() {
+        if (!this.d.resolver)
+            return false;
+        return this.d.meshTransportEnabled ? this.d.meshTransportEnabled() : true;
+    }
+    /**
+     * Dial one peer over its resolved endpoints with hedged failover (Decision 3):
+     * try the best (last-known-good / due) rope first; after `hedgeDelayMs` fire the
+     * remaining ropes in parallel; the first rope that genuinely CONFIRMS wins and
+     * the losers are aborted. Confirmation = a verified accept-ack from the expected
+     * peer (Decision 9) for an ack-capable peer, else a 2xx (back-compat). When the
+     * mesh path is off (no resolver / disabled) it is the legacy single-`url` dial.
+     */
+    async dialPeer(peer, path, bodyBase, sentEpoch) {
         const fetchImpl = this.d.fetchImpl ?? fetch;
-        let anyOk = false;
-        await Promise.all(peers.map(async (peer) => {
+        if (!this.meshOn()) {
+            return this.legacyDial(peer, path, bodyBase, fetchImpl);
+        }
+        const resolved = this.d.resolver.resolve(peer.machineId, peer.endpoints, peer.url);
+        if (resolved.length === 0)
+            return { confirmed: false, lease: null };
+        const attempt = async (ep, signal) => {
+            const reqNonce = newReqNonce();
+            const body = { ...bodyBase, reqNonce };
+            const headers = signRequest(this.d.selfMachineId, this.d.signingKeyPem, body, this.d.nextSequence());
+            const started = this.now();
             try {
-                const body = { lease };
-                const headers = signRequest(this.d.selfMachineId, this.d.signingKeyPem, body, this.d.nextSequence());
-                const res = await fetchImpl(`${peer.url.replace(/\/$/, '')}/api/lease`, {
+                const res = await fetchImpl(`${ep.url.replace(/\/$/, '')}${path}`, {
                     method: 'POST',
                     headers: { 'Content-Type': 'application/json', ...headers },
                     body: JSON.stringify(body),
-                    // P19 brake: a hung socket aborts instead of holding the caller open.
-                    signal: AbortSignal.timeout(this.requestTimeoutMs),
+                    signal: mergeSignals(signal, AbortSignal.timeout(this.requestTimeoutMs)),
                 });
-                if (res && res.ok) {
-                    anyOk = true;
-                    this.logSuccess(`broadcast to ${peer.machineId}`);
-                }
-                else {
-                    this.logFailure(`broadcast to ${peer.machineId}`, `status ${res?.status}`);
-                }
+                const httpOk = !!res && res.ok;
+                const data = httpOk ? (await res.json().catch(() => null)) : null;
+                const outcome = this.interpretResponse(peer, path, reqNonce, sentEpoch, data, httpOk);
+                this.d.resolver.recordResult(peer.machineId, ep.kind, outcome.confirmed, this.now() - started);
+                if (outcome.confirmed)
+                    this.logSuccess(`${path} ${peer.machineId}/${ep.kind}`);
+                else
+                    this.logFailure(`${path} ${peer.machineId}/${ep.kind}`, 'unconfirmed');
+                return outcome;
             }
             catch (err) {
-                this.logFailure(`broadcast to ${peer.machineId}`, err instanceof Error ? err.message : String(err));
+                this.d.resolver.recordResult(peer.machineId, ep.kind, false, this.now() - started);
+                this.logFailure(`${path} ${peer.machineId}/${ep.kind}`, err instanceof Error ? err.message : String(err));
+                return { confirmed: false, lease: null };
             }
-        }));
-        if (anyOk)
-            this.lastBroadcastOkAt = this.now();
-        return anyOk;
+        };
+        return this.hedge(resolved, attempt);
+    }
+    /** Legacy single-`url` dial — byte-for-byte today (2xx = confirmed, no ack). */
+    async legacyDial(peer, path, bodyBase, fetchImpl) {
+        try {
+            const headers = signRequest(this.d.selfMachineId, this.d.signingKeyPem, bodyBase, this.d.nextSequence());
+            const res = await fetchImpl(`${peer.url.replace(/\/$/, '')}${path}`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json', ...headers },
+                body: JSON.stringify(bodyBase),
+                signal: AbortSignal.timeout(this.requestTimeoutMs),
+            });
+            const httpOk = !!res && res.ok;
+            if (!httpOk) {
+                this.logFailure(`${path} to ${peer.machineId}`, `status ${res?.status}`);
+                return { confirmed: false, lease: null };
+            }
+            this.logSuccess(`${path} to ${peer.machineId}`);
+            if (path === '/api/lease/pull') {
+                const data = (await res.json().catch(() => null));
+                return { confirmed: true, lease: data?.lease ?? null };
+            }
+            return { confirmed: true, lease: null };
+        }
+        catch (err) {
+            this.logFailure(`${path} to ${peer.machineId}`, err instanceof Error ? err.message : String(err));
+            return { confirmed: false, lease: null };
+        }
+    }
+    /** Interpret a mesh response (accept-ack semantics, Decision 9). */
+    interpretResponse(peer, path, sentReqNonce, sentEpoch, data, httpOk) {
+        if (!httpOk)
+            return { confirmed: false, lease: null };
+        const ackCapable = !!peer.meshAckCapable && !!peer.publicKeyPem;
+        if (path === '/api/lease/pull') {
+            const folded = data?.lease ?? null;
+            if (!ackCapable)
+                return { confirmed: true, lease: folded }; // legacy 2xx
+            const idOk = verifyLeaseAckIdentity(data?.ack, data?.sig, peer.machineId, sentReqNonce, peer.publicKeyPem);
+            return { confirmed: idOk, lease: idOk ? folded : null };
+        }
+        // /api/lease (broadcast) — epoch-equality confirmation.
+        if (!ackCapable)
+            return { confirmed: true, lease: null }; // legacy 2xx back-compat
+        const verdict = verifyLeaseAck(data?.ack, data?.sig, peer.machineId, sentReqNonce, sentEpoch ?? -1, peer.publicKeyPem);
+        // 'higher-epoch' is a real takeover signal — NOT a renewal confirmation.
+        return { confirmed: verdict === 'confirmed', lease: null };
+    }
+    /**
+     * Hedged race over an ordered endpoint list: fire endpoint[0] immediately, then
+     * after hedgeDelayMs fire the rest in parallel; resolve on the FIRST confirmed
+     * (aborting the losers), else return the last outcome once all settle.
+     */
+    async hedge(endpoints, attempt) {
+        const controller = new AbortController();
+        const hedgeMs = this.d.hedgeDelayMs ?? 1500;
+        return new Promise((resolve) => {
+            let settled = false;
+            let pending = 0;
+            let last = { confirmed: false, lease: null };
+            const finish = (r) => {
+                if (settled)
+                    return;
+                settled = true;
+                controller.abort();
+                clearTimeout(hedgeTimer);
+                resolve(r);
+            };
+            const fire = (ep) => {
+                pending += 1;
+                attempt(ep, controller.signal)
+                    .then((r) => {
+                    last = r;
+                    if (r.confirmed)
+                        finish(r);
+                })
+                    .catch(() => { })
+                    .finally(() => {
+                    pending -= 1;
+                    if (!settled && pending === 0 && !firedRest) {
+                        // first rope settled unconfirmed before the hedge timer → fire the rest now
+                        fireRest();
+                    }
+                    else if (!settled && pending === 0 && firedRest) {
+                        finish(last);
+                    }
+                });
+            };
+            let firedRest = false;
+            const fireRest = () => {
+                if (firedRest)
+                    return;
+                firedRest = true;
+                const rest = endpoints.slice(1);
+                if (rest.length === 0) {
+                    if (pending === 0)
+                        finish(last);
+                    return;
+                }
+                for (const ep of rest)
+                    fire(ep);
+            };
+            const hedgeTimer = setTimeout(() => {
+                if (!settled)
+                    fireRest();
+            }, hedgeMs);
+            // kick off the best rope
+            fire(endpoints[0]);
+        });
     }
     observed() {
         return { lease: this.lastObserved, lastNonceByHolder: { ...this.lastNonceByHolder } };
@@ -108,20 +244,29 @@ export class HttpLeaseTransport {
      * machine-auth verification). Keeps only the highest-epoch observed lease and
      * advances the per-holder nonce watermark (replay detection happens in
      * FencedLease.acceptTunnelLease which reads this map).
+     *
+     * multi-transport-mesh-comms — returns the resulting highest observed epoch (or
+     * the just-folded lease's epoch), so the /api/lease receiver can sign a
+     * freshness-bound accept-ack proving WHAT it folded (Decision 9). When this
+     * machine already holds a HIGHER epoch than the broadcast (a takeover the
+     * broadcaster hasn't seen), the returned epoch is that higher value — which the
+     * caller reads as a stand-down signal, never a confirmation.
      */
     recordObserved(lease) {
         if (!lease || typeof lease.epoch !== 'number')
-            return;
+            return undefined;
         const prevNonce = this.lastNonceByHolder[lease.holder] ?? -1;
         // Only accept a strictly-newer nonce for this holder (drop replays here too).
         if (lease.nonce <= prevNonce && this.lastObserved && this.lastObserved.epoch >= lease.epoch) {
-            return;
+            return this.lastObserved?.epoch;
         }
         if (lease.nonce > prevNonce)
             this.lastNonceByHolder[lease.holder] = lease.nonce;
         if (!this.lastObserved || lease.epoch >= this.lastObserved.epoch) {
             this.lastObserved = lease;
         }
+        // The resulting observed epoch = max(what we held, the folded lease).
+        return Math.max(this.lastObserved?.epoch ?? lease.epoch, lease.epoch);
     }
     /**
      * Active PULL (Cross-Machine Coherence): GET a peer's current lease over the
@@ -137,37 +282,17 @@ export class HttpLeaseTransport {
      * returns no lease — proves reachability.
      */
     async pullPeer(peer) {
-        const fetchImpl = this.d.fetchImpl ?? fetch;
-        try {
-            const body = {};
-            const headers = signRequest(this.d.selfMachineId, this.d.signingKeyPem, body, this.d.nextSequence());
-            const res = await fetchImpl(`${peer.url.replace(/\/$/, '')}/api/lease/pull`, {
-                method: 'POST',
-                headers: { 'Content-Type': 'application/json', ...headers },
-                body: JSON.stringify(body),
-                // P19 brake: the pull loop's `leasePulling` guard means a hung socket
-                // would wedge ALL future pulls — abort instead.
-                signal: AbortSignal.timeout(this.requestTimeoutMs),
-            });
-            if (!res || !res.ok) {
-                this.logFailure(`pull from ${peer.machineId}`, `status ${res?.status}`);
-                return null;
-            }
-            const data = (await res.json().catch(() => null));
-            // A successful response (even one carrying no lease) proves the medium is live.
-            this.lastPullOkAt = this.now();
-            this.logSuccess(`pull from ${peer.machineId}`);
-            const lease = data?.lease ?? null;
-            if (lease && typeof lease.epoch === 'number') {
-                this.recordObserved(lease);
-                return lease;
-            }
-            return null;
-        }
-        catch (err) {
-            this.logFailure(`pull from ${peer.machineId}`, err instanceof Error ? err.message : String(err));
+        const outcome = await this.dialPeer(peer, '/api/lease/pull', {}, null);
+        if (!outcome.confirmed)
             return null;
+        // A confirmed pull (verified reachability) proves the medium is live.
+        this.lastPullOkAt = this.now();
+        const lease = outcome.lease;
+        if (lease && typeof lease.epoch === 'number') {
+            this.recordObserved(lease);
+            return lease;
         }
+        return null;
     }
     /**
      * Best-effort fan-out pull of every peer's lease. Failures are advisory (a peer
@@ -181,4 +306,19 @@ export class HttpLeaseTransport {
         await Promise.all(peers.map((p) => this.pullPeer(p).catch(() => null)));
     }
 }
+/** Combine two AbortSignals — aborts when either does (Node 20.3+ AbortSignal.any, with fallback). */
+function mergeSignals(a, b) {
+    const anyFn = AbortSignal.any;
+    if (typeof anyFn === 'function')
+        return anyFn([a, b]);
+    const c = new AbortController();
+    const onAbort = () => c.abort();
+    if (a.aborted || b.aborted)
+        c.abort();
+    else {
+        a.addEventListener('abort', onAbort, { once: true });
+        b.addEventListener('abort', onAbort, { once: true });
+    }
+    return c.signal;
+}
 //# sourceMappingURL=HttpLeaseTransport.js.map

package/dist/core/HttpLeaseTransport.js.map

@@ -1 +1 @@
-{"version":3,"file":"HttpLeaseTransport.js","sourceRoot":"","sources":["../../src/core/HttpLeaseTransport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AA2C7D,MAAM,OAAO,kBAAkB;IACZ,CAAC,CAAyB;IACnC,YAAY,GAAuB,IAAI,CAAC;IACxC,iBAAiB,GAA2B,EAAE,CAAC;IAC/C,iBAAiB,GAAG,CAAC,CAAC;IACtB,YAAY,GAAG,CAAC,CAAC;IACR,QAAQ,CAAS;IACjB,gBAAgB,CAAS;IAC1C,6EAA6E;IAC5D,OAAO,CAAqB;IAE7C,YAAY,IAA4B;QACtC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QACd,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,oBAAoB,IAAI,MAAM,CAAC;QACpD,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,MAAM,CAAC;QACxD,IAAI,CAAC,OAAO,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,gBAAgB,IAAI,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,uFAAuF;IAC/E,UAAU,CAAC,GAAW,EAAE,MAAc;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACO,UAAU,CAAC,GAAW;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAEO,GAAG;QACT,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACpC,CAAC;IACO,GAAG,CAAC,CAAS;QACnB,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,KAAkB;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,4EAA4E;YAC5E,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC;QAC5C,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC;gBACvB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;gBACrG,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,EAAE;oBACtE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE;oBAC3D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAC1B,sEAAsE;oBACtE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC;iBACnD,CAAC,CAAC;gBACH,IAAI,GAAG,IAAK,GAAgB,CAAC,EAAE,EAAE,CAAC;oBAChC,KAAK,GAAG,IAAI,CAAC;oBACb,IAAI,CAAC,UAAU,CAAC,gBAAgB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;gBACpD,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,UAAU,CAAC,gBAAgB,IAAI,CAAC,SAAS,EAAE,EAAE,UAAW,GAAgB,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC3F,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,UAAU,CAAC,gBAAgB,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACtG,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QACF,IAAI,KAAK;YAAE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,QAAQ;QACN,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,iBAAiB,EAAE,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;IACxF,CAAC;IAED,WAAW;QACT,iFAAiF;QACjF,4EAA4E;QAC5E,gFAAgF;QAChF,mCAAmC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC;IAC5C,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,KAAkB;QAC/B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,8EAA8E;QAC9E,IAAI,KAAK,CAAC,KAAK,IAAI,SAAS,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC5F,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,GAAG,SAAS;YAAE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;QAChF,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YACjE,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,QAAQ,CAAC,IAAe;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;YACrG,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,EAAE;gBAC3E,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE;gBAC3D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,sEAAsE;gBACtE,gDAAgD;gBAChD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC;aACnD,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,IAAI,CAAE,GAAgB,CAAC,EAAE,EAAE,CAAC;gBAClC,IAAI,CAAC,UAAU,CAAC,aAAa,IAAI,CAAC,SAAS,EAAE,EAAE,UAAW,GAAgB,EAAE,MAAM,EAAE,CAAC,CAAC;gBACtF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAO,GAAgB,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA0C,CAAC;YACzG,gFAAgF;YAChF,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,IAAI,CAAC,UAAU,CAAC,aAAa,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC;YAClC,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC7C,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC3B,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,UAAU,CAAC,aAAa,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACjG,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC/B,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;CACF"}
+{"version":3,"file":"HttpLeaseTransport.js","sourceRoot":"","sources":["../../src/core/HttpLeaseTransport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,sBAAsB,EAAE,WAAW,EAAiB,MAAM,0BAA0B,CAAC;AAC3H,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAqE7D,MAAM,OAAO,kBAAkB;IACZ,CAAC,CAAyB;IACnC,YAAY,GAAuB,IAAI,CAAC;IACxC,iBAAiB,GAA2B,EAAE,CAAC;IAC/C,iBAAiB,GAAG,CAAC,CAAC;IACtB,YAAY,GAAG,CAAC,CAAC;IACR,QAAQ,CAAS;IACjB,gBAAgB,CAAS;IAC1C,6EAA6E;IAC5D,OAAO,CAAqB;IAE7C,YAAY,IAA4B;QACtC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QACd,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,oBAAoB,IAAI,MAAM,CAAC;QACpD,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,MAAM,CAAC;QACxD,IAAI,CAAC,OAAO,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,gBAAgB,IAAI,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,uFAAuF;IAC/E,UAAU,CAAC,GAAW,EAAE,MAAc;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACO,UAAU,CAAC,GAAW;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAEO,GAAG;QACT,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACpC,CAAC;IACO,GAAG,CAAC,CAAS;QACnB,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,KAAkB;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,4EAA4E;YAC5E,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAC/E,CAAC;QACF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,KAAK;YAAE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,MAAM;QACZ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACnC,OAAO,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,QAAQ,CACpB,IAAe,EACf,IAAsC,EACtC,QAAiC,EACjC,SAAwB;QAExB,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,QAAS,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACpF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAEpE,MAAM,OAAO,GAAG,KAAK,EAAE,EAAoB,EAAE,MAAmB,EAAE,EAAE;YAClE,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;YACrG,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE;oBACjE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE;oBAC3D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAC1B,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;iBACzE,CAAC,CAAC;gBACH,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,IAAK,GAAgB,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,MAAO,GAAgB,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA4B,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC5G,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;gBACtF,IAAI,CAAC,CAAC,CAAC,QAAS,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC;gBAChG,IAAI,OAAO,CAAC,SAAS;oBAAE,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;;oBAC1E,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,aAAa,CAAC,CAAC;gBAC5E,OAAO,OAAO,CAAC;YACjB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,CAAC,CAAC,QAAS,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC;gBACpF,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC1G,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,IAA0B,EAAE,CAAC;YACjE,CAAC;QACH,CAAC,CAAC;QAEF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,gFAAgF;IACxE,KAAK,CAAC,UAAU,CACtB,IAAe,EACf,IAAsC,EACtC,QAAiC,EACjC,SAAuB;QAEvB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;YACzG,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE;gBACnE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE;gBAC3D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAC9B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC;aACnD,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,IAAK,GAAgB,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,UAAW,GAAgB,EAAE,MAAM,EAAE,CAAC,CAAC;gBACvF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YAC3C,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAChD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,CAAC,MAAO,GAAgB,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA0C,CAAC;gBACzG,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC;YACzD,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAClG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,oEAAoE;IAC5D,iBAAiB,CACvB,IAAe,EACf,IAAsC,EACtC,YAAoB,EACpB,SAAwB,EACxB,IAA4B,EAC5B,MAAe;QAEf,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACtD,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;QAChE,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC;YACnC,IAAI,CAAC,UAAU;gBAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,aAAa;YACzE,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,YAAsB,CAAC,CAAC;YACrH,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,CAAC;QACD,wDAAwD;QACxD,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,yBAAyB;QACnF,MAAM,OAAO,GAAG,cAAc,CAC5B,IAAI,EAAE,GAAG,EACT,IAAI,EAAE,GAAG,EACT,IAAI,CAAC,SAAS,EACd,YAAY,EACZ,SAAS,IAAI,CAAC,CAAC,EACf,IAAI,CAAC,YAAsB,CAC5B,CAAC;QACF,yEAAyE;QACzE,OAAO,EAAE,SAAS,EAAE,OAAO,KAAK,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC7D,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,KAAK,CACjB,SAA6B,EAC7B,OAAkH;QAElH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC;QAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,IAAI,IAAI,GAAsD,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YAChG,MAAM,MAAM,GAAG,CAAC,CAAoD,EAAE,EAAE;gBACtE,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,UAAU,CAAC,KAAK,EAAE,CAAC;gBACnB,YAAY,CAAC,UAAU,CAAC,CAAC;gBACzB,OAAO,CAAC,CAAC,CAAC,CAAC;YACb,CAAC,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,EAAoB,EAAE,EAAE;gBACpC,OAAO,IAAI,CAAC,CAAC;gBACb,OAAO,CAAC,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC;qBAC3B,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;oBACV,IAAI,GAAG,CAAC,CAAC;oBACT,IAAI,CAAC,CAAC,SAAS;wBAAE,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC7B,CAAC,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;qBACf,OAAO,CAAC,GAAG,EAAE;oBACZ,OAAO,IAAI,CAAC,CAAC;oBACb,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;wBAC5C,4EAA4E;wBAC5E,QAAQ,EAAE,CAAC;oBACb,CAAC;yBAAM,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;wBAClD,MAAM,CAAC,IAAI,CAAC,CAAC;oBACf,CAAC;gBACH,CAAC,CAAC,CAAC;YACP,CAAC,CAAC;YACF,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,MAAM,QAAQ,GAAG,GAAG,EAAE;gBACpB,IAAI,SAAS;oBAAE,OAAO;gBACtB,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAChC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACtB,IAAI,OAAO,KAAK,CAAC;wBAAE,MAAM,CAAC,IAAI,CAAC,CAAC;oBAChC,OAAO;gBACT,CAAC;gBACD,KAAK,MAAM,EAAE,IAAI,IAAI;oBAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAClC,CAAC,CAAC;YACF,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;gBACjC,IAAI,CAAC,OAAO;oBAAE,QAAQ,EAAE,CAAC;YAC3B,CAAC,EAAE,OAAO,CAAC,CAAC;YACZ,yBAAyB;YACzB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,QAAQ;QACN,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,iBAAiB,EAAE,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;IACxF,CAAC;IAED,WAAW;QACT,iFAAiF;QACjF,4EAA4E;QAC5E,gFAAgF;QAChF,mCAAmC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC;IAC5C,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,cAAc,CAAC,KAAkB;QAC/B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,8EAA8E;QAC9E,IAAI,KAAK,CAAC,KAAK,IAAI,SAAS,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC5F,OAAO,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC;QAClC,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,GAAG,SAAS;YAAE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;QAChF,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YACjE,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC5B,CAAC;QACD,sEAAsE;QACtE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,QAAQ,CAAC,IAAe;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QACpC,sEAAsE;QACtE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC7C,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC/B,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;CACF;AAUD,sGAAsG;AACtG,SAAS,YAAY,CAAC,CAAc,EAAE,CAAc;IAClD,MAAM,KAAK,GAAI,WAAsE,CAAC,GAAG,CAAC;IAC1F,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,CAAC,GAAG,IAAI,eAAe,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IAChC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO;QAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SACjC,CAAC;QACJ,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAC;AAClB,CAAC"}

package/dist/core/LeaseCoordinator.d.ts

@@ -119,6 +119,42 @@ export interface LeaseCoordinatorDeps {
     onSelfSuspend?: (reason: string) => void;
     /** Fired whenever our effective epoch advances (drives leaseEpochChange → registry push). */
     onEpochAdvance?: (epoch: number) => void;
+    /**
+     * F2 (multi-machine-lease-self-heal staleHolderTakeover) — resolved live so a
+     * config flip needs no restart. null/disabled ⇒ canAcquire is byte-for-byte the
+     * legacy behavior. When enabled, a standby may take over a holder whose signed
+     * nonce watermark hasn't advanced for `ttlMs × nonRenewalMissedObservations` of
+     * the OBSERVER's own monotonic time (skew-immune; the takeover stays CAS-fenced).
+     */
+    staleHolderTakeover?: () => {
+        enabled: boolean;
+        nonRenewalMissedObservations: number;
+    } | null;
+    /**
+     * multi-transport-mesh-comms Layer 3 (soloCaptainHold) — resolved live; DARK by
+     * default (null/disabled ⇒ renew() is byte-for-byte today's self-fence). When
+     * enabled AND all three preconditions hold, a preferred stationary captain that
+     * cannot confirm its renewal over ANY rope HOLDS its lease (same epoch) instead
+     * of self-suspending. The preconditions are SIGNALS consumed here, never
+     * authority invented here:
+     *   - isPreferredAwakeAgreed(): this machine is the F4-agreed preferred-awake
+     *     machine (NOT a raw-config read — the agreement signal from the coordinator).
+     *   - allPeersPresumedGone(): every peer is presumed-gone by liveness-silence
+     *     (the EXISTING presumedDeadHolders timeout), i.e. positively aged-out, not
+     *     merely unreachable this tick.
+     *   - no higher epoch observed (checked inline against the effective view).
+     * The monotonic self-fence stays armed whenever allPeersPresumedGone() is false,
+     * so a merely-unreachable-but-recently-alive peer can NEVER keep the captain
+     * alive — only a liveness-aged-out one can. store.refresh is NOT used as
+     * evidence (a tautology on LocalLeaseStore). Spec: docs/specs/multi-transport-mesh-comms.md.
+     */
+    soloCaptainHold?: () => {
+        enabled: boolean;
+    } | null;
+    /** F4-agreed preferred-awake signal (consumed by Layer 3 — never the raw config). */
+    isPreferredAwakeAgreed?: () => boolean;
+    /** True iff EVERY peer is presumed-gone by liveness-silence (Layer 3 gate). */
+    allPeersPresumedGone?: () => boolean;
     logger?: (msg: string) => void;
 }
 export declare class LeaseCoordinator {
@@ -143,6 +179,17 @@ export declare class LeaseCoordinator {
      * while it is not superseded by a higher epoch.
      */
     private selfIssued;
+    /**
+     * F2 (staleHolderTakeover) — per-holder freshness on the OBSERVER's own
+     * monotonic clock: the time we last saw that holder's signed nonce watermark
+     * ADVANCE (a renewing holder bumps its nonce each renew). Stamped only when a
+     * VERIFIED observed lease's nonce strictly exceeds the last we recorded for
+     * that holder. `lastObservedNonce` is the per-holder high-water nonce that
+     * gates the stamp. Single-clock ⇒ clock-skew immune; the holder cannot forge
+     * freshness (the nonce is inside its Ed25519 signature).
+     */
+    private freshObservedMonoMs;
+    private lastObservedNonce;
     constructor(deps: LeaseCoordinatorDeps);
     private now;
     /**
@@ -172,6 +219,25 @@ export declare class LeaseCoordinator {
     /** The current effective epoch (for stamping writes/sends). */
     currentEpoch(): number;
     currentHolder(): string | null;
+    /**
+     * F4 — is `machineId` the current holder of a LIVE (non-expired, non-released)
+     * lease we observe? The deferential-standby health gate: a non-preferred machine
+     * defers to its preferred peer ONLY while this is true, so a frozen/down/released
+     * preferred never strands coverage (the non-preferred then acquires normally).
+     */
+    isHolderHealthy(machineId: string): boolean;
+    /**
+     * multi-transport-mesh-comms Layer 3 — may a preferred stationary captain HOLD
+     * its lease (same epoch) instead of self-suspending when no rope confirmed?
+     * ALL must hold (each is an EXISTING signal, never authority invented here):
+     *  (1) the feature is enabled (DARK by default);
+     *  (2) this machine is the F4-AGREED preferred-awake machine;
+     *  (3) EVERY peer is presumed-gone by liveness-silence (aged out, not merely
+     *      unreachable this tick) — the load-bearing "absent vs unreachable" gate;
+     *  (4) no higher epoch than ours is observed (a real takeover always wins).
+     * Fail-closed: a missing dep ⇒ not eligible (today's self-suspend).
+     */
+    private soloCaptainHoldEligible;
     /**
      * The current effective-view signed lease (max of tunnel-observed, git-committed,
      * and this machine's self-issued renewal), or null. Used to SERVE an active PULL
@@ -199,6 +265,24 @@ export declare class LeaseCoordinator {
      * win after we relinquish.
      */
     relinquish(): void;
+    /**
+     * F2 — build the StaleHolderTakeoverOpts for `canAcquire`, or `undefined` when
+     * the flag is off / the candidate is not a takeable peer (so canAcquire stays
+     * byte-for-byte the legacy behavior). Uses this holder's observed freshness on
+     * the OBSERVER's own monotonic clock.
+     */
+    private staleHolderOpts;
+    /**
+     * F3 — relinquish a lease THIS machine holds AND broadcast a SIGNED tombstone
+     * so peers stop deferring to a muted ex-holder's zombie. Called level-triggered
+     * by the coordinator when this machine is observe-only yet still the named
+     * holder (the 2026-06-19 silent-standby zombie). The tombstone is
+     * `released:true` at our epoch with a fresh nonce strictly greater than our last
+     * (so a concurrent in-flight renewal cannot out-nonce it) and a past expiry; a
+     * higher-epoch normal takeover always strictly dominates it. Idempotent: a no-op
+     * (just local relinquish) when we are not the named holder.
+     */
+    relinquishAndBroadcast(): Promise<void>;
     /**
      * Force a ONE-TIME epoch advance to resolve a same-epoch contested tie (spec
      * §Problem A — the WINNER side, lower `machineId`). Unlike acquireIfEligible(),

package/dist/core/LeaseCoordinator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LeaseCoordinator.d.ts","sourceRoot":"","sources":["../../src/core/LeaseCoordinator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,0DAA0D;AAC1D,MAAM,WAAW,UAAU;IACzB,gEAAgE;IAChE,IAAI,IAAI;QAAE,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,WAAW,GAAG;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE;YAAE,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IAC1G;;;;;;;;OAQG;IACH,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC;IACrC;;;;;;OAMG;IACH,gBAAgB,CAAC,IAAI,IAAI,CAAC;CAC3B;AAED,2DAA2D;AAC3D,MAAM,WAAW,cAAc;IAC7B,mEAAmE;IACnE,SAAS,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,iFAAiF;IACjF,QAAQ,IAAI;QAAE,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IACrF,wDAAwD;IACxD,WAAW,IAAI,OAAO,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACjF,+EAA+E;IAC/E,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,UAAU,CAAC;IAClB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,wEAAwE;IACxE,mBAAmB,EAAE,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/C;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;;;;;;;;OAUG;IACH,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,kGAAkG;IAClG,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,kBAAkB,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC5F,8EAA8E;IAC9E,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,6FAA6F;IAC7F,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAuB;IACzC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAc;IACjC,OAAO,CAAC,YAAY,CAAK;IACzB;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,SAAS,CAAS;IAC1B;;;;;;OAMG;IACH,OAAO,CAAC,UAAU,CAA4B;gBAElC,IAAI,EAAE,oBAAoB;IAMtC,OAAO,CAAC,GAAG;IAGX;;;;;OAKG;IACH,OAAO,CAAC,YAAY;IAIpB;;;OAGG;IACH,OAAO,CAAC,WAAW;IAGnB,OAAO,CAAC,GAAG;IAGX,OAAO,CAAC,SAAS;IAIjB,IAAI,aAAa,IAAI,MAAM,CAE1B;IACD,IAAI,WAAW,IAAI,OAAO,CAEzB;IAED;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAkCrB,6EAA6E;IAC7E,UAAU,IAAI,OAAO;IAerB,+DAA+D;IAC/D,YAAY,IAAI,MAAM;IAItB,aAAa,IAAI,MAAM,GAAG,IAAI;IAI9B;;;;;;OAMG;IACH,YAAY,IAAI,WAAW,GAAG,IAAI;IAIlC;;;;;;;;;;;;;;;;;OAiBG;IACH,UAAU,IAAI,IAAI;IAMlB;;;;;;;;;;;OAWG;IACG,2BAA2B,IAAI,OAAO,CAAC,OAAO,CAAC;IAoBrD;;;OAGG;IACH,YAAY,IAAI,OAAO;IAIvB;;;;;OAKG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAIpC;;;;;OAKG;IACH,iBAAiB,IAAI,WAAW,GAAG,IAAI;IAIvC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,mBAAmB,IAAI,OAAO;IAW9B;;;;OAIG;IACG,iBAAiB,IAAI,OAAO,CAAC,OAAO,CAAC;IA6C3C;;;;;;;;;;;;OAYG;IACG,gBAAgB,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA0BpE;;;;;OAKG;IACG,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC;YA2CjB,SAAS;IAUvB,OAAO,CAAC,SAAS;IAOjB;;;;OAIG;IACH,yBAAyB,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI;CAc5D"}
+{"version":3,"file":"LeaseCoordinator.d.ts","sourceRoot":"","sources":["../../src/core/LeaseCoordinator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,WAAW,EAAgC,MAAM,kBAAkB,CAAC;AAC7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,0DAA0D;AAC1D,MAAM,WAAW,UAAU;IACzB,gEAAgE;IAChE,IAAI,IAAI;QAAE,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,WAAW,GAAG;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE;YAAE,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IAC1G;;;;;;;;OAQG;IACH,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC;IACrC;;;;;;OAMG;IACH,gBAAgB,CAAC,IAAI,IAAI,CAAC;CAC3B;AAED,2DAA2D;AAC3D,MAAM,WAAW,cAAc;IAC7B,mEAAmE;IACnE,SAAS,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,iFAAiF;IACjF,QAAQ,IAAI;QAAE,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IACrF,wDAAwD;IACxD,WAAW,IAAI,OAAO,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACjF,+EAA+E;IAC/E,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,UAAU,CAAC;IAClB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,wEAAwE;IACxE,mBAAmB,EAAE,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/C;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;;;;;;;;OAUG;IACH,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,kGAAkG;IAClG,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,kBAAkB,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC5F,8EAA8E;IAC9E,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,6FAA6F;IAC7F,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,4BAA4B,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9F;;;;;;;;;;;;;;;;;OAiBG;IACH,eAAe,CAAC,EAAE,MAAM;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACpD,qFAAqF;IACrF,sBAAsB,CAAC,EAAE,MAAM,OAAO,CAAC;IACvC,+EAA+E;IAC/E,oBAAoB,CAAC,EAAE,MAAM,OAAO,CAAC;IACrC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAuB;IACzC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAc;IACjC,OAAO,CAAC,YAAY,CAAK;IACzB;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,SAAS,CAAS;IAC1B;;;;;;OAMG;IACH,OAAO,CAAC,UAAU,CAA4B;IAC9C;;;;;;;;OAQG;IACH,OAAO,CAAC,mBAAmB,CAA6B;IACxD,OAAO,CAAC,iBAAiB,CAA6B;gBAE1C,IAAI,EAAE,oBAAoB;IAMtC,OAAO,CAAC,GAAG;IAGX;;;;;OAKG;IACH,OAAO,CAAC,YAAY;IAIpB;;;OAGG;IACH,OAAO,CAAC,WAAW;IAGnB,OAAO,CAAC,GAAG;IAGX,OAAO,CAAC,SAAS;IAIjB,IAAI,aAAa,IAAI,MAAM,CAE1B;IACD,IAAI,WAAW,IAAI,OAAO,CAEzB;IAED;;;;OAIG;IACH,OAAO,CAAC,aAAa;IA6CrB,6EAA6E;IAC7E,UAAU,IAAI,OAAO;IAerB,+DAA+D;IAC/D,YAAY,IAAI,MAAM;IAItB,aAAa,IAAI,MAAM,GAAG,IAAI;IAS9B;;;;;OAKG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAM3C;;;;;;;;;;OAUG;IACH,OAAO,CAAC,uBAAuB;IAW/B;;;;;;OAMG;IACH,YAAY,IAAI,WAAW,GAAG,IAAI;IAIlC;;;;;;;;;;;;;;;;;OAiBG;IACH,UAAU,IAAI,IAAI;IAMlB;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IAWvB;;;;;;;;;OASG;IACG,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB7C;;;;;;;;;;;OAWG;IACG,2BAA2B,IAAI,OAAO,CAAC,OAAO,CAAC;IAoBrD;;;OAGG;IACH,YAAY,IAAI,OAAO;IAIvB;;;;;OAKG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAIpC;;;;;OAKG;IACH,iBAAiB,IAAI,WAAW,GAAG,IAAI;IAIvC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,mBAAmB,IAAI,OAAO;IAW9B;;;;OAIG;IACG,iBAAiB,IAAI,OAAO,CAAC,OAAO,CAAC;IA6C3C;;;;;;;;;;;;OAYG;IACG,gBAAgB,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA0BpE;;;;;OAKG;IACG,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC;YA2DjB,SAAS;IAUvB,OAAO,CAAC,SAAS;IAOjB;;;;OAIG;IACH,yBAAyB,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI;CAc5D"}

package/dist/core/LeaseCoordinator.js

@@ -41,6 +41,17 @@ export class LeaseCoordinator {
      * while it is not superseded by a higher epoch.
      */
     selfIssued = null;
+    /**
+     * F2 (staleHolderTakeover) — per-holder freshness on the OBSERVER's own
+     * monotonic clock: the time we last saw that holder's signed nonce watermark
+     * ADVANCE (a renewing holder bumps its nonce each renew). Stamped only when a
+     * VERIFIED observed lease's nonce strictly exceeds the last we recorded for
+     * that holder. `lastObservedNonce` is the per-holder high-water nonce that
+     * gates the stamp. Single-clock ⇒ clock-skew immune; the holder cannot forge
+     * freshness (the nonce is inside its Ed25519 signature).
+     */
+    freshObservedMonoMs = new Map();
+    lastObservedNonce = new Map();
     constructor(deps) {
         this.d = deps;
         this.fl = deps.lease;
@@ -103,9 +114,20 @@ export class LeaseCoordinator {
                 const { [obs.lease.holder]: _self, ...nonceFloor } = obs.lastNonceByHolder;
                 void _self;
                 const decision = this.fl.acceptTunnelLease(obs.lease, git.epoch, nonceFloor);
-                if (decision.accept && obs.lease.epoch > epoch) {
-                    bestLease = obs.lease;
-                    epoch = obs.lease.epoch;
+                if (decision.accept) {
+                    // F2 freshness stamp (VERIFIED fold-in): a renewing holder bumps its
+                    // signed nonce each renew (same OR higher epoch), so its watermark
+                    // advances; a non-renewing holder's stops. Stamp the OBSERVER's own
+                    // monotonic time when a peer holder's nonce watermark strictly advances.
+                    const prevNonce = this.lastObservedNonce.get(obs.lease.holder) ?? -1;
+                    if (obs.lease.holder !== this.selfMachineId && obs.lease.nonce > prevNonce) {
+                        this.lastObservedNonce.set(obs.lease.holder, obs.lease.nonce);
+                        this.freshObservedMonoMs.set(obs.lease.holder, this.monotonicNow());
+                    }
+                    if (obs.lease.epoch > epoch) {
+                        bestLease = obs.lease;
+                        epoch = obs.lease.epoch;
+                    }
                 }
             }
         }
@@ -140,7 +162,50 @@ export class LeaseCoordinator {
         return this.effectiveView().epoch;
     }
     currentHolder() {
-        return this.effectiveView().lease?.holder ?? null;
+        const lease = this.effectiveView().lease;
+        // F3 — a RELEASED tombstone declares "epoch N released, not held": it names
+        // no live holder, so peers stop deferring to a muted ex-holder's zombie. A
+        // higher-epoch normal acquisition still strictly dominates (epoch fold).
+        if (!lease || lease.released)
+            return null;
+        return lease.holder;
+    }
+    /**
+     * F4 — is `machineId` the current holder of a LIVE (non-expired, non-released)
+     * lease we observe? The deferential-standby health gate: a non-preferred machine
+     * defers to its preferred peer ONLY while this is true, so a frozen/down/released
+     * preferred never strands coverage (the non-preferred then acquires normally).
+     */
+    isHolderHealthy(machineId) {
+        const view = this.effectiveView();
+        if (!view.lease || view.lease.released || view.lease.holder !== machineId)
+            return false;
+        return !this.fl.isExpired(view.lease, this.now());
+    }
+    /**
+     * multi-transport-mesh-comms Layer 3 — may a preferred stationary captain HOLD
+     * its lease (same epoch) instead of self-suspending when no rope confirmed?
+     * ALL must hold (each is an EXISTING signal, never authority invented here):
+     *  (1) the feature is enabled (DARK by default);
+     *  (2) this machine is the F4-AGREED preferred-awake machine;
+     *  (3) EVERY peer is presumed-gone by liveness-silence (aged out, not merely
+     *      unreachable this tick) — the load-bearing "absent vs unreachable" gate;
+     *  (4) no higher epoch than ours is observed (a real takeover always wins).
+     * Fail-closed: a missing dep ⇒ not eligible (today's self-suspend).
+     */
+    soloCaptainHoldEligible(ourEpoch) {
+        const cfg = this.d.soloCaptainHold?.();
+        if (!cfg?.enabled)
+            return false;
+        if (!this.d.isPreferredAwakeAgreed?.())
+            return false;
+        if (!this.d.allPeersPresumedGone?.())
+            return false;
+        // No higher epoch observed than the one we hold (a real takeover dominates).
+        const view = this.effectiveView();
+        if (view.epoch > ourEpoch)
+            return false;
+        return true;
     }
     /**
      * The current effective-view signed lease (max of tunnel-observed, git-committed,
@@ -175,6 +240,48 @@ export class LeaseCoordinator {
         this.d.store.forceLocalExpiry?.();
         this.log('relinquished self-lease (contested tie-break loser) — winner may now advance to N+1');
     }
+    /**
+     * F2 — build the StaleHolderTakeoverOpts for `canAcquire`, or `undefined` when
+     * the flag is off / the candidate is not a takeable peer (so canAcquire stays
+     * byte-for-byte the legacy behavior). Uses this holder's observed freshness on
+     * the OBSERVER's own monotonic clock.
+     */
+    staleHolderOpts(currentLease) {
+        const cfg = this.d.staleHolderTakeover?.();
+        if (!cfg?.enabled)
+            return undefined;
+        if (!currentLease || currentLease.holder === this.selfMachineId)
+            return undefined;
+        return {
+            monotonicNowMs: this.monotonicNow(),
+            freshObservedMonoMs: this.freshObservedMonoMs.get(currentLease.holder),
+            nonRenewalThresholdMs: this.fl.ttlMs * Math.max(1, cfg.nonRenewalMissedObservations),
+        };
+    }
+    /**
+     * F3 — relinquish a lease THIS machine holds AND broadcast a SIGNED tombstone
+     * so peers stop deferring to a muted ex-holder's zombie. Called level-triggered
+     * by the coordinator when this machine is observe-only yet still the named
+     * holder (the 2026-06-19 silent-standby zombie). The tombstone is
+     * `released:true` at our epoch with a fresh nonce strictly greater than our last
+     * (so a concurrent in-flight renewal cannot out-nonce it) and a past expiry; a
+     * higher-epoch normal takeover always strictly dominates it. Idempotent: a no-op
+     * (just local relinquish) when we are not the named holder.
+     */
+    async relinquishAndBroadcast() {
+        const view = this.effectiveView();
+        if (!view.lease || view.lease.holder !== this.selfMachineId || view.lease.released) {
+            // Not the live holder (or already a tombstone) → just clear local state.
+            this.relinquish();
+            return;
+        }
+        const tombstone = this.fl.signLease(view.lease.epoch, view.lease.acquiredAt, new Date(this.now()).toISOString(), // past/now expiry — released regardless
+        this.nextNonce(), // strictly > our last renewal nonce
+        true);
+        this.relinquish(); // clear our own self-hold first (forceLocalExpiry preserves the epoch floor)
+        await this.broadcast(tombstone);
+        this.log(`relinquished + broadcast tombstone for epoch ${view.lease.epoch} (silent-standby release)`);
+    }
     /**
      * Force a ONE-TIME epoch advance to resolve a same-epoch contested tie (spec
      * §Problem A — the WINNER side, lower `machineId`). Unlike acquireIfEligible(),
@@ -284,7 +391,7 @@ export class LeaseCoordinator {
             if (view.lease && view.lease.holder === this.selfMachineId && !this.fl.isExpired(view.lease, this.now())) {
                 return this.renew();
             }
-            const decision = this.fl.canAcquire(view.lease, dead, this.now());
+            const decision = this.fl.canAcquire(view.lease, dead, this.now(), this.staleHolderOpts(view.lease));
             if (!decision.can) {
                 this.log(`acquire skipped: ${decision.reason}`);
                 return false;
@@ -304,8 +411,8 @@ export class LeaseCoordinator {
             if (observedEpoch >= candidate.epoch) {
                 this.log(`CAS lost to epoch ${observedEpoch} (our candidate ${candidate.epoch}) — yielding`);
                 this.emitEpoch(observedEpoch);
-                // If the winner is a presumed-dead/expired holder we'll retry; else stop.
-                if (!this.fl.canAcquire(res.observed.lease, dead, this.now()).can)
+                // If the winner is a presumed-dead/expired/non-renewing holder we'll retry; else stop.
+                if (!this.fl.canAcquire(res.observed.lease, dead, this.now(), this.staleHolderOpts(res.observed.lease)).can)
                     return false;
             }
             retries++;
@@ -382,6 +489,21 @@ export class LeaseCoordinator {
             this.markRenewOk();
             return true;
         }
+        // ── multi-transport-mesh-comms Layer 3 — safe-by-construction solo-captain hold ──
+        // The renewal could not confirm over any rope. BEFORE self-suspending, check the
+        // partition floor: a PREFERRED stationary captain whose sole peer is PROVABLY
+        // GONE (presumed-gone by liveness-silence) holds its lease (same epoch) instead
+        // of thrashing. Gated on F4-agreed-preferred + every-peer-presumed-gone + no
+        // higher epoch observed. The hold NEVER advances the epoch or takes over a
+        // peer's lease, so even a wrongly-presumed-gone live peer cannot double-write
+        // (the intact epoch-CAS + signature fence remains the authority). The monotonic
+        // self-fence stays armed whenever the presumed-gone gate is NOT satisfied.
+        if (this.soloCaptainHoldEligible(view.epoch)) {
+            this.selfIssued = renewed;
+            this.markRenewOk(); // hold the SAME epoch — no re-acquire, no inflation
+            this.log('solo-captain hold: preferred + all peers presumed-gone + no higher epoch — held lease without medium confirm');
+            return true;
+        }
         if (this.monotonicNow() - this.lastRenewOkMonoMs > this.fl.ttlMs) {
             this.suspended = true;
             this.d.onSelfSuspend?.(`could not confirm lease over ${this.d.tunnel ? 'tunnel' : 'git'} for > leaseTtlMs (${this.fl.ttlMs}ms, monotonic) — lease lapsed`);