@agenticprimitives/fabric 0.0.0-alpha.4 → 0.0.0-alpha.5

package/CLAUDE.md

@@ -20,8 +20,18 @@ adapter ships from `./cloudflare`.
   `@cloudflare/workers-types`.
 - **W4 DONE:** `GatewaySurfaceCommitmentV1` (gatewayRoot preimage) + peer `DeliveryEnvelopeV1` +
   `receiveDelivery` + `OutboxStore` store-and-forward.
-- **Next:** on-chain `atl:gatewayRoot` record (contracts, separate); `A2aTaskDO`/`SessionStoreDO`
-  absorption + `alarm()` drain; `fetch`/`alarm` e2e via vitest-pool-workers.
+- **W6 DONE (spec 340 — the Agentic Interaction spine):** `apix:` is the canonical vocabulary
+  (`apfab:` RETIRED). `InteractionRecordV1` is the root aggregate; `ContextSnapshotV1` replaces
+  floating `contextRefs`; six state machines, never collapsed (delivery · inbox · interaction ·
+  decision · commitment · execution); versioned `InteractionProfile`s replace the `MessageKind`/
+  `CaseState` enums; `createDurableObjectInteractionStore` is their durable home on the gateway DO,
+  reachable as `do.interactions`. **The store exposes transitions, never state assignment** — the
+  creditor discharges, not the debtor, and persistence must not become a bypass.
+- **Next:** the `MessageKind`/`CaseState` REMOVAL (spec 340 §R — the mapping is total and
+  compiler-checked; the rewrite spans 26 files and is its own wave); an interaction-aware ingress that
+  opens/joins an Interaction rather than only writing an Exchange; on-chain `atl:gatewayRoot` record
+  (contracts, separate); `A2aTaskDO`/`SessionStoreDO` absorption + `alarm()` drain; `fetch`/`alarm`
+  e2e via vitest-pool-workers.
 
 ## What this package owns
 - `ExchangeRecordV1` — the ONE canonical object (spine id `xch_`); two-level FSM: `ExecState`

package/dist/cloudflare/index.d.ts

@@ -1,5 +1,6 @@
 export { createDurableObjectSqlVault } from './sql-vault.js';
 export { createDurableObjectExchangeStore, type ExchangeStore } from './exchange-store.js';
+export { createDurableObjectInteractionStore, type InteractionStore, type SnapshotPutResult, } from './interaction-store.js';
 export { createDurableObjectOutboxStore, type OutboxStore, type OutboxEntry } from './outbox-store.js';
 export { createDurableObjectProvenanceStore, type ProvenanceStore } from './provenance-store.js';
 export { createDurableObjectChannelStore, projectionAuthorizes, type ChannelStore, type ChannelV1, type ConversationRoleProjection, type ConversationRoleAction, } from './channel-store.js';

package/dist/cloudflare/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cloudflare/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,gCAAgC,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC3F,OAAO,EAAE,8BAA8B,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACvG,OAAO,EAAE,kCAAkC,EAAE,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACjG,OAAO,EACL,+BAA+B,EAAE,oBAAoB,EACrD,KAAK,YAAY,EAAE,KAAK,SAAS,EAAE,KAAK,0BAA0B,EAAE,KAAK,sBAAsB,GAChG,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wCAAwC,EACxC,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,GACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,kCAAkC,EAAE,KAAK,eAAe,EAAE,KAAK,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC7H,OAAO,EACL,gCAAgC,EAChC,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,GAC7B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,KAAK,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC3G,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAE/G,eAAO,MAAM,gCAAgC,EAAG,mBAA4B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cloudflare/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,gCAAgC,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAI3F,OAAO,EACL,mCAAmC,EACnC,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,8BAA8B,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACvG,OAAO,EAAE,kCAAkC,EAAE,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACjG,OAAO,EACL,+BAA+B,EAAE,oBAAoB,EACrD,KAAK,YAAY,EAAE,KAAK,SAAS,EAAE,KAAK,0BAA0B,EAAE,KAAK,sBAAsB,GAChG,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wCAAwC,EACxC,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,GACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,kCAAkC,EAAE,KAAK,eAAe,EAAE,KAAK,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC7H,OAAO,EACL,gCAAgC,EAChC,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,GAC7B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,KAAK,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC3G,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAE/G,eAAO,MAAM,gCAAgC,EAAG,mBAA4B,CAAC"}

package/dist/cloudflare/index.js

@@ -7,6 +7,10 @@
 // absorption follow in subsequent W2 steps.
 export { createDurableObjectSqlVault } from './sql-vault.js';
 export { createDurableObjectExchangeStore } from './exchange-store.js';
+// The interaction spine's durable home (spec 340 W6) — interactions, context snapshots, decisions,
+// commitments and per-viewer inbox state. Five tables, because the six machines answer to different
+// parties at different times and one row would make them one write.
+export { createDurableObjectInteractionStore, } from './interaction-store.js';
 export { createDurableObjectOutboxStore } from './outbox-store.js';
 export { createDurableObjectProvenanceStore } from './provenance-store.js';
 export { createDurableObjectChannelStore, projectionAuthorizes, } from './channel-store.js';

package/dist/cloudflare/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cloudflare/index.ts"],"names":[],"mappings":"AAAA,0GAA0G;AAC1G,EAAE;AACF,wGAAwG;AACxG,wGAAwG;AACxG,yGAAyG;AACzG,yGAAyG;AACzG,4CAA4C;AAC5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,gCAAgC,EAAsB,MAAM,qBAAqB,CAAC;AAC3F,OAAO,EAAE,8BAA8B,EAAsC,MAAM,mBAAmB,CAAC;AACvG,OAAO,EAAE,kCAAkC,EAAwB,MAAM,uBAAuB,CAAC;AACjG,OAAO,EACL,+BAA+B,EAAE,oBAAoB,GAEtD,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wCAAwC,GAIzC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,kCAAkC,EAAmD,MAAM,wBAAwB,CAAC;AAC7H,OAAO,EACL,gCAAgC,EAChC,qBAAqB,GAItB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAA8C,MAAM,2BAA2B,CAAC;AAC3G,OAAO,EACL,eAAe,EACf,kBAAkB,GAInB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAE/G,MAAM,CAAC,MAAM,gCAAgC,GAAG,mBAA4B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cloudflare/index.ts"],"names":[],"mappings":"AAAA,0GAA0G;AAC1G,EAAE;AACF,wGAAwG;AACxG,wGAAwG;AACxG,yGAAyG;AACzG,yGAAyG;AACzG,4CAA4C;AAC5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,gCAAgC,EAAsB,MAAM,qBAAqB,CAAC;AAC3F,mGAAmG;AACnG,oGAAoG;AACpG,oEAAoE;AACpE,OAAO,EACL,mCAAmC,GAGpC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,8BAA8B,EAAsC,MAAM,mBAAmB,CAAC;AACvG,OAAO,EAAE,kCAAkC,EAAwB,MAAM,uBAAuB,CAAC;AACjG,OAAO,EACL,+BAA+B,EAAE,oBAAoB,GAEtD,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wCAAwC,GAIzC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,kCAAkC,EAAmD,MAAM,wBAAwB,CAAC;AAC7H,OAAO,EACL,gCAAgC,EAChC,qBAAqB,GAItB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAA8C,MAAM,2BAA2B,CAAC;AAC3G,OAAO,EACL,eAAe,EACf,kBAAkB,GAInB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAE/G,MAAM,CAAC,MAAM,gCAAgC,GAAG,mBAA4B,CAAC"}

package/dist/cloudflare/interaction-store.d.ts

@@ -0,0 +1,55 @@
+import type { InteractionRecordV1, InteractionId, ContextSnapshotV1 } from '../interaction-record.js';
+import { type InteractionLifecycleV1, type InteractionTransition, type DecisionRecordV1, type DecisionTransition, type CommitmentRecordV1, type CommitmentTransition, type InboxEntryV1, type InboxTransition, type MachineResult } from '../interaction-machines.js';
+import { type ProtocolBindingV1, type BindingResolution } from '../protocol-binding.js';
+import type { CanonicalAgentId } from '@agenticprimitives/types';
+export type SnapshotPutResult = {
+    ok: true;
+    stored: 'new' | 'identical';
+} | {
+    ok: false;
+    reason: 'digest-mismatch';
+};
+export interface InteractionStore {
+    putInteraction(record: InteractionRecordV1): Promise<void>;
+    getInteraction(id: InteractionId | string): Promise<InteractionRecordV1 | null>;
+    listInteractions(): Promise<InteractionRecordV1[]>;
+    /** Drive the interaction lifecycle THROUGH its machine. `null` when the interaction is unknown. */
+    transitionInteraction(id: InteractionId | string, event: {
+        transition: InteractionTransition;
+        actor: CanonicalAgentId;
+        at: string;
+    }): Promise<MachineResult<InteractionLifecycleV1> | null>;
+    /** Index a foreign correlator. Duplicates across interactions are KEPT — that is the ambiguity. */
+    bindProtocolTo(id: InteractionId, binding: ProtocolBindingV1): Promise<void>;
+    resolveByBinding(protocol: string, field: string, value: string): Promise<BindingResolution>;
+    /** Content-addressed. Verifies the digest against the bytes before storing — which IS the
+     *  immutability guarantee: forged content cannot reach a digest it does not hash to. */
+    putContextSnapshot(snapshot: ContextSnapshotV1): Promise<SnapshotPutResult>;
+    getContextSnapshot(digest: string): Promise<ContextSnapshotV1 | null>;
+    putDecision(record: DecisionRecordV1): Promise<void>;
+    getDecision(id: string): Promise<DecisionRecordV1 | null>;
+    transitionDecision(id: string, event: {
+        transition: DecisionTransition;
+        actor: CanonicalAgentId;
+        at: string;
+        subject?: string;
+    }): Promise<MachineResult<DecisionRecordV1> | null>;
+    putCommitment(record: CommitmentRecordV1): Promise<void>;
+    getCommitment(id: string): Promise<CommitmentRecordV1 | null>;
+    /** Open obligations — the query "what is still owed" that a single `case` field could not answer. */
+    listOpenCommitments(): Promise<CommitmentRecordV1[]>;
+    transitionCommitment(id: string, event: {
+        transition: CommitmentTransition;
+        actor: CanonicalAgentId;
+        at: string;
+    }): Promise<MachineResult<CommitmentRecordV1> | null>;
+    putInboxEntry(entry: InboxEntryV1): Promise<void>;
+    getInboxEntry(viewer: CanonicalAgentId, exchangeId: string): Promise<InboxEntryV1 | null>;
+    transitionInbox(viewer: CanonicalAgentId, exchangeId: string, event: {
+        transition: InboxTransition;
+        actor: CanonicalAgentId;
+        at: string;
+    }): Promise<MachineResult<InboxEntryV1> | null>;
+}
+export declare function createDurableObjectInteractionStore(sql: SqlStorage): InteractionStore;
+//# sourceMappingURL=interaction-store.d.ts.map

package/dist/cloudflare/interaction-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interaction-store.d.ts","sourceRoot":"","sources":["../../src/cloudflare/interaction-store.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAEtG,OAAO,EAKL,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,aAAa,EACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AA8CjE,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,KAAK,GAAG,WAAW,CAAA;CAAE,GACzC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAE7C,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,cAAc,CAAC,EAAE,EAAE,aAAa,GAAG,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAChF,gBAAgB,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;IACnD,mGAAmG;IACnG,qBAAqB,CACnB,EAAE,EAAE,aAAa,GAAG,MAAM,EAC1B,KAAK,EAAE;QAAE,UAAU,EAAE,qBAAqB,CAAC;QAAC,KAAK,EAAE,gBAAgB,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAChF,OAAO,CAAC,aAAa,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC;IAEzD,mGAAmG;IACnG,cAAc,CAAC,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAE7F;4FACwF;IACxF,kBAAkB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC5E,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IAEtE,WAAW,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAC1D,kBAAkB,CAChB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;QAAE,UAAU,EAAE,kBAAkB,CAAC;QAAC,KAAK,EAAE,gBAAgB,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/F,OAAO,CAAC,aAAa,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC;IAEnD,aAAa,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAC9D,qGAAqG;IACrG,mBAAmB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACrD,oBAAoB,CAClB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;QAAE,UAAU,EAAE,oBAAoB,CAAC;QAAC,KAAK,EAAE,gBAAgB,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAC/E,OAAO,CAAC,aAAa,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC;IAErD,aAAa,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,aAAa,CAAC,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC1F,eAAe,CACb,MAAM,EAAE,gBAAgB,EACxB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE;QAAE,UAAU,EAAE,eAAe,CAAC;QAAC,KAAK,EAAE,gBAAgB,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAC1E,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;CAChD;AAKD,wBAAgB,mCAAmC,CAAC,GAAG,EAAE,UAAU,GAAG,gBAAgB,CA4LrF"}

package/dist/cloudflare/interaction-store.js

@@ -0,0 +1,230 @@
+/// <reference types="@cloudflare/workers-types" />
+// DO-local InteractionStore (spec 340 W6) — durable homes for the records W2–W5 defined and nothing
+// wrote. The `PrincipalGatewayDO` is the single writer for its principal, so no cross-writer races.
+//
+// Five tables, and the reason they are five rather than one wide row is the reason there are six state
+// machines: an interaction's lifecycle, a decision, a commitment and a viewer's inbox state are
+// answered by different parties at different times, and one row would make them one write.
+//
+// TWO INVARIANTS THIS LAYER OWNS, both about immutability rather than authority:
+//
+//   1. A ContextSnapshot is CONTENT-ADDRESSED, and the digest check IS the immutability guarantee.
+//      `putContextSnapshot` verifies the digest against the bytes before storing, so a party cannot
+//      rewrite what an evaluator saw while every Exchange still pins the same hash — the forged
+//      snapshot is refused at the door, not detected later.
+//
+//      There is deliberately no separate `immutable-conflict` outcome. It was written first and was
+//      BOTH dead and wrong: dead, because content that differs necessarily fails the digest check
+//      already; and wrong, because it compared `JSON.stringify` output, so the same snapshot re-put
+//      with a different key insertion order would have been rejected as a conflicting overwrite. A
+//      verified digest with a row already at it means the content is the same — that is what
+//      content-addressing means — so the re-put is a no-op.
+//   2. Every transition goes through its machine. The store never sets a state directly, so "the
+//      creditor discharges, not the debtor" cannot be bypassed by writing the row.
+//
+// It confers nothing. Persisting a commitment does not make it owed; persisting a decision does not
+// authorize anything. Authority is `delegation` + `entitlements` + `tool-policy` at the moment of
+// acting (ADR-0041, ADR-0043).
+import { verifyContextSnapshot } from '../interaction-record.js';
+import { applyInteractionTransition, applyDecisionTransition, applyCommitmentTransition, applyInboxTransition, } from '../interaction-machines.js';
+import { bindingKey, resolveInteractionByBinding, } from '../protocol-binding.js';
+const CREATE_TABLES = [
+    `CREATE TABLE IF NOT EXISTS interaction_records (
+     interaction_id TEXT PRIMARY KEY,
+     record_json    TEXT NOT NULL,
+     state          TEXT NOT NULL,
+     rev            INTEGER NOT NULL,
+     updated_at     TEXT NOT NULL
+   )`,
+    // Keyed by the binding, not by the interaction: the lookup direction is foreign → ours, and a
+    // duplicate key across two interactions is the AMBIGUITY the resolver must be able to see. A UNIQUE
+    // constraint here would silently drop the second one and manufacture a confident wrong answer.
+    `CREATE TABLE IF NOT EXISTS interaction_bindings (
+     binding_key    TEXT NOT NULL,
+     interaction_id TEXT NOT NULL,
+     binding_json   TEXT NOT NULL,
+     PRIMARY KEY (binding_key, interaction_id)
+   )`,
+    `CREATE TABLE IF NOT EXISTS context_snapshots (
+     digest        TEXT PRIMARY KEY,
+     snapshot_json TEXT NOT NULL
+   )`,
+    `CREATE TABLE IF NOT EXISTS decision_records (
+     decision_id  TEXT PRIMARY KEY,
+     record_json  TEXT NOT NULL,
+     updated_at   TEXT NOT NULL
+   )`,
+    `CREATE TABLE IF NOT EXISTS commitment_records (
+     commitment_id TEXT PRIMARY KEY,
+     record_json   TEXT NOT NULL,
+     state         TEXT NOT NULL,
+     updated_at    TEXT NOT NULL
+   )`,
+    `CREATE TABLE IF NOT EXISTS inbox_entries (
+     viewer      TEXT NOT NULL,
+     exchange_id TEXT NOT NULL,
+     record_json TEXT NOT NULL,
+     PRIMARY KEY (viewer, exchange_id)
+   )`,
+];
+/** States an obligation is still live in. `discharged`/`breached`/`void` are ended, differently. */
+const OPEN_COMMITMENT_STATES = ['proposed', 'active', 'fulfilment-claimed'];
+export function createDurableObjectInteractionStore(sql) {
+    for (const ddl of CREATE_TABLES)
+        sql.exec(ddl);
+    const one = (query, ...binds) => {
+        const rows = sql.exec(query, ...binds).toArray();
+        return rows[0] ? JSON.parse(rows[0].record_json) : null;
+    };
+    const saveInteraction = (record) => {
+        sql.exec(`INSERT INTO interaction_records (interaction_id, record_json, state, rev, updated_at)
+       VALUES (?, ?, ?, ?, ?)
+       ON CONFLICT(interaction_id) DO UPDATE SET
+         record_json = excluded.record_json, state = excluded.state,
+         rev = excluded.rev, updated_at = excluded.updated_at`, record.interactionId, JSON.stringify(record), lifecycleStateOf(record), record.rev, record.updatedAt);
+    };
+    const saveCommitment = (record) => {
+        sql.exec(`INSERT INTO commitment_records (commitment_id, record_json, state, updated_at)
+       VALUES (?, ?, ?, ?)
+       ON CONFLICT(commitment_id) DO UPDATE SET
+         record_json = excluded.record_json, state = excluded.state, updated_at = excluded.updated_at`, record.commitmentId, JSON.stringify(record), record.state, record.updatedAt);
+    };
+    const store = {
+        async putInteraction(record) {
+            saveInteraction(record);
+            for (const b of record.protocolBindings ?? []) {
+                sql.exec(`INSERT INTO interaction_bindings (binding_key, interaction_id, binding_json) VALUES (?, ?, ?)
+           ON CONFLICT(binding_key, interaction_id) DO UPDATE SET binding_json = excluded.binding_json`, bindingKey(b.protocol, b.field, b.value), record.interactionId, JSON.stringify(b));
+            }
+        },
+        async getInteraction(id) {
+            return one('SELECT record_json FROM interaction_records WHERE interaction_id = ?', String(id));
+        },
+        async listInteractions() {
+            return sql
+                .exec('SELECT record_json FROM interaction_records ORDER BY updated_at DESC')
+                .toArray()
+                .map((r) => JSON.parse(r.record_json));
+        },
+        async transitionInteraction(id, event) {
+            const record = await this.getInteraction(id);
+            if (!record)
+                return null;
+            const result = applyInteractionTransition(lifecycleOf(record), event);
+            // Fail-closed: a rejection leaves the row exactly as it was. The store never sets state itself,
+            // so "concluding is custodial" cannot be bypassed by writing the row directly.
+            if (result.ok) {
+                saveInteraction({
+                    ...record,
+                    lifecycleState: result.next.state,
+                    updatedAt: event.at,
+                    rev: record.rev + 1,
+                });
+            }
+            return result;
+        },
+        async bindProtocolTo(id, binding) {
+            sql.exec(`INSERT INTO interaction_bindings (binding_key, interaction_id, binding_json) VALUES (?, ?, ?)
+         ON CONFLICT(binding_key, interaction_id) DO UPDATE SET binding_json = excluded.binding_json`, bindingKey(binding.protocol, binding.field, binding.value), id, JSON.stringify(binding));
+        },
+        async resolveByBinding(protocol, field, value) {
+            const key = bindingKey(protocol, field, value);
+            const ids = sql
+                .exec('SELECT interaction_id FROM interaction_bindings WHERE binding_key = ?', key)
+                .toArray()
+                .map((r) => r.interaction_id);
+            // Reuses the in-memory resolver over a one-key index so SQL and non-SQL callers cannot disagree
+            // about what "ambiguous" means — one definition, two backing stores.
+            return resolveInteractionByBinding(new Map([[key, ids]]), protocol, field, value);
+        },
+        async putContextSnapshot(snapshot) {
+            // A snapshot whose digest does not match its bytes is not evidence, and storing it would let a
+            // later `verifyContextSnapshot` fail on a record that arrived corrupt rather than was tampered.
+            if (!(await verifyContextSnapshot(snapshot)))
+                return { ok: false, reason: 'digest-mismatch' };
+            const existing = sql
+                .exec('SELECT snapshot_json FROM context_snapshots WHERE digest = ?', snapshot.digest)
+                .toArray()[0];
+            // The digest verified and a row is already here, so the content is the same — two parties
+            // observing one context legitimately store it twice. A no-op, and the stored bytes win.
+            if (existing)
+                return { ok: true, stored: 'identical' };
+            sql.exec('INSERT INTO context_snapshots (digest, snapshot_json) VALUES (?, ?)', snapshot.digest, JSON.stringify(snapshot));
+            return { ok: true, stored: 'new' };
+        },
+        async getContextSnapshot(digest) {
+            const rows = sql
+                .exec('SELECT snapshot_json FROM context_snapshots WHERE digest = ?', digest)
+                .toArray();
+            return rows[0] ? JSON.parse(rows[0].snapshot_json) : null;
+        },
+        async putDecision(record) {
+            sql.exec(`INSERT INTO decision_records (decision_id, record_json, updated_at) VALUES (?, ?, ?)
+         ON CONFLICT(decision_id) DO UPDATE SET record_json = excluded.record_json, updated_at = excluded.updated_at`, record.decisionId, JSON.stringify(record), record.updatedAt);
+        },
+        async getDecision(id) {
+            return one('SELECT record_json FROM decision_records WHERE decision_id = ?', id);
+        },
+        async transitionDecision(id, event) {
+            const record = await this.getDecision(id);
+            if (!record)
+                return null;
+            const result = applyDecisionTransition(record, event);
+            if (result.ok)
+                await this.putDecision(result.next);
+            return result;
+        },
+        async putCommitment(record) {
+            saveCommitment(record);
+        },
+        async getCommitment(id) {
+            return one('SELECT record_json FROM commitment_records WHERE commitment_id = ?', id);
+        },
+        async listOpenCommitments() {
+            return sql
+                .exec(`SELECT record_json FROM commitment_records WHERE state IN (?, ?, ?) ORDER BY updated_at DESC`, ...OPEN_COMMITMENT_STATES)
+                .toArray()
+                .map((r) => JSON.parse(r.record_json));
+        },
+        async transitionCommitment(id, event) {
+            const record = await this.getCommitment(id);
+            if (!record)
+                return null;
+            const result = applyCommitmentTransition(record, event);
+            if (result.ok)
+                saveCommitment(result.next);
+            return result;
+        },
+        async putInboxEntry(entry) {
+            sql.exec(`INSERT INTO inbox_entries (viewer, exchange_id, record_json) VALUES (?, ?, ?)
+         ON CONFLICT(viewer, exchange_id) DO UPDATE SET record_json = excluded.record_json`, entry.viewer, entry.exchangeId, JSON.stringify(entry));
+        },
+        async getInboxEntry(viewer, exchangeId) {
+            return one('SELECT record_json FROM inbox_entries WHERE viewer = ? AND exchange_id = ?', viewer, exchangeId);
+        },
+        async transitionInbox(viewer, exchangeId, event) {
+            const entry = await this.getInboxEntry(viewer, exchangeId);
+            if (!entry)
+                return null;
+            const result = applyInboxTransition(entry, event);
+            if (result.ok)
+                await this.putInboxEntry(result.next);
+            return result;
+        },
+    };
+    return store;
+}
+/** The lifecycle facet of a stored interaction, for the machine to operate on. */
+function lifecycleOf(record) {
+    return {
+        interactionId: record.interactionId,
+        state: lifecycleStateOf(record),
+        principal: record.principal,
+        participations: record.participations,
+        updatedAt: record.updatedAt,
+    };
+}
+function lifecycleStateOf(record) {
+    return record.lifecycleState;
+}
+//# sourceMappingURL=interaction-store.js.map

package/dist/cloudflare/interaction-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interaction-store.js","sourceRoot":"","sources":["../../src/cloudflare/interaction-store.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,oGAAoG;AACpG,oGAAoG;AACpG,EAAE;AACF,uGAAuG;AACvG,gGAAgG;AAChG,2FAA2F;AAC3F,EAAE;AACF,iFAAiF;AACjF,EAAE;AACF,mGAAmG;AACnG,oGAAoG;AACpG,gGAAgG;AAChG,4DAA4D;AAC5D,EAAE;AACF,oGAAoG;AACpG,kGAAkG;AAClG,oGAAoG;AACpG,mGAAmG;AACnG,6FAA6F;AAC7F,4DAA4D;AAC5D,iGAAiG;AACjG,mFAAmF;AACnF,EAAE;AACF,oGAAoG;AACpG,kGAAkG;AAClG,+BAA+B;AAG/B,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,GAUrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,UAAU,EACV,2BAA2B,GAG5B,MAAM,wBAAwB,CAAC;AAGhC,MAAM,aAAa,GAAG;IACpB;;;;;;KAMG;IACH,8FAA8F;IAC9F,oGAAoG;IACpG,+FAA+F;IAC/F;;;;;KAKG;IACH;;;KAGG;IACH;;;;KAIG;IACH;;;;;KAKG;IACH;;;;;KAKG;CACJ,CAAC;AAsDF,oGAAoG;AACpG,MAAM,sBAAsB,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,oBAAoB,CAAU,CAAC;AAErF,MAAM,UAAU,mCAAmC,CAAC,GAAe;IACjE,KAAK,MAAM,GAAG,IAAI,aAAa;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE/C,MAAM,GAAG,GAAG,CAAI,KAAa,EAAE,GAAG,KAAgB,EAAY,EAAE;QAC9D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAU,KAAK,EAAE,GAAI,KAA2B,CAAC,CAAC,OAAO,EAAE,CAAC;QACjF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,CAAC,MAA2B,EAAQ,EAAE;QAC5D,GAAG,CAAC,IAAI,CACN;;;;8DAIwD,EACxD,MAAM,CAAC,aAAa,EACpB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACtB,gBAAgB,CAAC,MAAM,CAAC,EACxB,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,SAAS,CACjB,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,CAAC,MAA0B,EAAQ,EAAE;QAC1D,GAAG,CAAC,IAAI,CACN;;;sGAGgG,EAChG,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAC5E,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,KAAK,GAAqB;QAC9B,KAAK,CAAC,cAAc,CAAC,MAAM;YACzB,eAAe,CAAC,MAAM,CAAC,CAAC;YACxB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC;gBAC9C,GAAG,CAAC,IAAI,CACN;uGAC6F,EAC7F,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAClF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,EAAE;YACrB,OAAO,GAAG,CACR,sEAAsE,EAAE,MAAM,CAAC,EAAE,CAAC,CACnF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,gBAAgB;YACpB,OAAO,GAAG;iBACP,IAAI,CAAU,sEAAsE,CAAC;iBACrF,OAAO,EAAE;iBACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAwB,CAAC,CAAC;QAClE,CAAC;QAED,KAAK,CAAC,qBAAqB,CAAC,EAAE,EAAE,KAAK;YACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,MAAM,MAAM,GAAG,0BAA0B,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;YACtE,gGAAgG;YAChG,+EAA+E;YAC/E,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACd,eAAe,CAAC;oBACd,GAAG,MAAM;oBACT,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;oBACjC,SAAS,EAAE,KAAK,CAAC,EAAE;oBACnB,GAAG,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC;iBACpB,CAAC,CAAC;YACL,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,EAAE,EAAE,OAAO;YAC9B,GAAG,CAAC,IAAI,CACN;qGAC6F,EAC7F,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CACxF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK;YAC3C,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC/C,MAAM,GAAG,GAAG,GAAG;iBACZ,IAAI,CAAa,uEAAuE,EAAE,GAAG,CAAC;iBAC9F,OAAO,EAAE;iBACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAA+B,CAAC,CAAC;YACjD,gGAAgG;YAChG,qEAAqE;YACrE,OAAO,2BAA2B,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACpF,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,QAAQ;YAC/B,+FAA+F;YAC/F,gGAAgG;YAChG,IAAI,CAAC,CAAC,MAAM,qBAAqB,CAAC,QAAQ,CAAC,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;YAC9F,MAAM,QAAQ,GAAG,GAAG;iBACjB,IAAI,CAAc,8DAA8D,EAAE,QAAQ,CAAC,MAAM,CAAC;iBAClG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YAChB,0FAA0F;YAC1F,wFAAwF;YACxF,IAAI,QAAQ;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YACvD,GAAG,CAAC,IAAI,CACN,qEAAqE,EACrE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAC1C,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACrC,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,MAAM;YAC7B,MAAM,IAAI,GAAG,GAAG;iBACb,IAAI,CAAc,8DAA8D,EAAE,MAAM,CAAC;iBACzF,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAuB,CAAC,CAAC,CAAC,IAAI,CAAC;QACnF,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,MAAM;YACtB,GAAG,CAAC,IAAI,CACN;qHAC6G,EAC7G,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,SAAS,CAC5D,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,EAAE;YAClB,OAAO,GAAG,CAAmB,gEAAgE,EAAE,EAAE,CAAC,CAAC;QACrG,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,EAAE,EAAE,KAAK;YAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,EAAE;gBAAE,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,MAAM;YACxB,cAAc,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,EAAE;YACpB,OAAO,GAAG,CAAqB,oEAAoE,EAAE,EAAE,CAAC,CAAC;QAC3G,CAAC;QAED,KAAK,CAAC,mBAAmB;YACvB,OAAO,GAAG;iBACP,IAAI,CACH,8FAA8F,EAC9F,GAAG,sBAAsB,CAC1B;iBACA,OAAO,EAAE;iBACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAuB,CAAC,CAAC;QACjE,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,EAAE,EAAE,KAAK;YAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,MAAM,MAAM,GAAG,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACxD,IAAI,MAAM,CAAC,EAAE;gBAAE,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3C,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAAK;YACvB,GAAG,CAAC,IAAI,CACN;2FACmF,EACnF,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CACtD,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU;YACpC,OAAO,GAAG,CACR,4EAA4E,EAAE,MAAM,EAAE,UAAU,CACjG,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK;YAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAC3D,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAClD,IAAI,MAAM,CAAC,EAAE;gBAAE,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;IAEF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kFAAkF;AAClF,SAAS,WAAW,CAAC,MAA2B;IAC9C,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA2B;IACnD,OAAO,MAAM,CAAC,cAAc,CAAC;AAC/B,CAAC"}

package/dist/cloudflare/principal-gateway-do.d.ts

@@ -4,6 +4,10 @@ import type { AuthorityTier } from '@agenticprimitives/tool-policy';
 import type { ExchangeRecordV1, ExchangeEventV1, ExchangeId } from '../exchange-record.js';
 import { type DeliveryEnvelopeV1 } from '../delivery-envelope.js';
 import { type OutboxEntry } from './outbox-store.js';
+import { type InteractionStore } from './interaction-store.js';
+import type { CommitmentRecordV1 } from '../interaction-machines.js';
+import type { InteractionRecordV1, InteractionId, ProfileVersion, ParticipationV1 } from '../interaction-record.js';
+import type { ProtocolBindingV1 } from '../protocol-binding.js';
 import { type AuthorityVerdictCache, type AuthorityVerdict, type AuthorityVerdictKey } from './authority-verdict-cache.js';
 import { type DeliveryReceiptInput, type SignedDeliveryReceiptV1 } from './receipt-signer.js';
 import type { GatewayToolRegistry } from './gateway-tools.js';
@@ -14,6 +18,10 @@ import { type ChannelV1, type ConversationRoleProjection } from './channel-store
 export interface PrincipalGatewayEnv {
     /** The chain id the gateway verifies authority against (for the T1 verdict + delivery). */
     CHAIN_ID?: string;
+    /** The CAIP-10 of the principal THIS gateway belongs to. Optional so every existing deployment keeps
+     *  working, but required by `openInteraction`: an interaction is custodied by the gateway holding it,
+     *  and a gateway that cannot name itself cannot be a custodian. Fails closed rather than defaulting. */
+    PRINCIPAL_SA?: string;
 }
 /**
  * Injected co-resident-MCP dependencies. INJECTED (not built in the fabric core) because they need
@@ -37,12 +45,40 @@ export interface GatewayDeps {
      *  tests) — the fabric core stays credential-mechanism-free. Absent ⇒ a gated channel cannot be joined. */
     verifyEntitlement?: (requirement: string, credential: unknown, member: string) => Promise<boolean>;
 }
+/** What ingress observed about an exchange's place in a governed situation (spec 340 W7). */
+export type DeliveryNote = 
+/** No `interactionId`: this is a message, not part of a governed situation. The common case. */
+{
+    kind: 'unpinned-exchange';
+}
+/** Pinned an older profile version than the interaction now runs. Legal — and the signal that
+ *  survives a downgrade, which is why it is reported rather than refused. */
+ | {
+    kind: 'profile-downgrade';
+    pinned: string;
+    inForce: string;
+}
+/** The pinned ContextSnapshot is not on this gateway — normal for an inbound delivery, where it
+ *  lives on the sender's. Recorded so nobody reads the exchange as replayable here. */
+ | {
+    kind: 'context-unavailable';
+    digest: string;
+};
+export type DeliveryOutcome = {
+    ok: true;
+    interactionId?: InteractionId;
+    notes: readonly DeliveryNote[];
+} | {
+    ok: false;
+    reason: 'unknown-interaction' | 'not-a-participant';
+};
 export declare class PrincipalGatewayDO {
     private readonly state;
     private readonly env;
     private readonly deps?;
     private readonly sql;
     private readonly exchanges;
+    private readonly interactionStore;
     private readonly verdicts;
     private readonly requestIds;
     private readonly receipts;
@@ -50,7 +86,18 @@ export declare class PrincipalGatewayDO {
     private readonly provenance;
     private readonly channels;
     constructor(state: DurableObjectState, env: PrincipalGatewayEnv, deps?: GatewayDeps | undefined);
-    /** Create/rename a channel owned by this org gateway. */
+    /**
+     * Create/rename a channel owned by this org gateway, and open the Interaction it IS (spec 340 W11).
+     *
+     * A topic was already a governed situation in everything but name: the org owns the board, members
+     * join and leave, `facilitator`/`contributor` are its roles, and it opens and closes. Opening the
+     * Interaction alongside it names that rather than adding a parallel object — the id is DERIVED
+     * (`ixn_topic_<channelId>`), so the two cannot drift and no join table exists to go stale.
+     *
+     * `participationMode: 'derived'`. Membership belongs to the channel (and, for an open topic, to the
+     * organization behind it), so the Interaction stores NO member list. Copying one per topic is what
+     * `apmsg:openParticipation` forbids, and a stale copy is how a removed member keeps posting.
+     */
     createChannel(channel: ChannelV1): Promise<void>;
     /**
      * Add a member with a role (spec 318 C2 — the role IS the projection of an org-SA delegation caveat).
@@ -183,9 +230,78 @@ export declare class PrincipalGatewayDO {
      * the message event's `idempotencyKey` at the reducer). Receipt signing (`DeliveryReceiptV1`, DO-local
      * software key) is a W2 follow-step.
      */
-    deliver(record: ExchangeRecordV1): Promise<void>;
+    deliver(record: ExchangeRecordV1): Promise<DeliveryOutcome>;
+    /**
+     * The interaction-aware half of ingress (spec 340 W7).
+     *
+     * THREE OUTCOMES, and which is which is the whole design:
+     *
+     * 1. NO `interactionId` → delivered, with an `unpinned-exchange` note. An Exchange without an
+     *    Interaction is a MESSAGE (ADR-0058 §12) — a legitimate state, and the overwhelmingly common
+     *    one. Auto-creating an interaction per message would make "a thread is a projection, not a
+     *    container" false by turning every message into a container.
+     *
+     * 2. UNKNOWN `interactionId` → REFUSED. Interactions are opened by their custodian
+     *    (`openInteraction`), never conjured by a sender. If ingress created one from a sender-supplied
+     *    id, any peer could seed arbitrary interactions with arbitrary participations on someone else's
+     *    gateway, then post into them — inventing a governed situation the owner never entered.
+     *
+     * 3. KNOWN `interactionId` → the sender must be a current participant. An exchange claiming to occur
+     *    in an interaction whose membership does not include its sender is a record that misrepresents
+     *    the situation. This is an integrity check on the record's shape, NOT authority: being a
+     *    participant is not permission to do anything (ADR-0048 §4).
+     *
+     * Two conditions are NOTED rather than refused, because refusing them would lose true records:
+     *   · a profile-version mismatch — a mid-flight profile bump is legal, and the per-exchange pin is
+     *     the signal that survives, so this reports (spec 340 §6);
+     *   · a pinned context digest we do not hold — normal for an INBOUND delivery, where the snapshot
+     *     lives on the sender's gateway. Dropping the message would be fail-closed in the wrong place;
+     *     the digest stays pinned and resolvable later. What we must not do is pretend it is replayable.
+     */
+    private admitIntoInteraction;
+    /**
+     * Membership for a `derived` interaction.
+     *
+     * Topic interactions carry `ixn_topic_<channelId>`, so the channel is recoverable from the id and the
+     * answer comes from the channel store — the same member-or-bot test `postToChannel` already applies.
+     * That is the point of doing this: the gate stops being a second check that could drift from the
+     * first, and becomes the same check asked once.
+     *
+     * Fail-closed by construction: an id that names no known derivation source resolves to `false`, so a
+     * `derived` interaction with no resolver admits nobody rather than everybody.
+     */
+    private resolveDerivedParticipation;
+    /**
+     * Open a governed situation on this gateway. The custodian is always THIS principal — an interaction
+     * is custodied by the gateway that holds it, and accepting a caller-supplied principal would let a
+     * peer name someone else as custodian of a situation on our storage.
+     */
+    openInteraction(input: {
+        interactionId: InteractionId;
+        profileVersion: ProfileVersion;
+        /** Omit for a `derived` interaction — see `InteractionRecordV1.participationMode`. */
+        participations?: readonly ParticipationV1[];
+        participationMode?: 'asserted' | 'derived';
+        at: string;
+        protocolBindings?: readonly ProtocolBindingV1[];
+    }): Promise<InteractionRecordV1>;
     /** Append one event to an existing exchange (case transitions / transport moves), reduced fail-closed. */
     applyEvent(exchangeId: ExchangeId | string, event: ExchangeEventV1): Promise<import("../exchange-reducer.js").ExchangeApplyResult | null>;
+    /** Interactions, context snapshots, decisions, commitments, per-viewer inbox state. */
+    get interactions(): InteractionStore;
+    /**
+     * Everything still owed on this gateway — the query the single `case` field could not answer.
+     *
+     * A case could be `denied` while an obligation stayed outstanding with nowhere to record it, because
+     * one field was serving three machines (spec 340 §R). Concluding an interaction deliberately does NOT
+     * appear here as a discharge: closing a conversation ends the conversation, never the promise made
+     * inside it.
+     */
+    openCommitments(): Promise<CommitmentRecordV1[]>;
+    /** The gateway's own SA. Throws rather than defaulting: a wrong custodian on a governed situation is
+     *  worse than a refused write, and empty-string config is treated as unset (a wrangler `VAR = ""`
+     *  binds an empty string, which `??` would happily accept). */
+    private requirePrincipal;
     private requireDeps;
     /** The verdict cache (revoke / epoch-sweep hooks + read for tests). */
     get authority(): AuthorityVerdictCache;

package/dist/cloudflare/principal-gateway-do.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"principal-gateway-do.d.ts","sourceRoot":"","sources":["../../src/cloudflare/principal-gateway-do.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAC3F,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAoD,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEvG,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC7B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAA4E,KAAK,SAAS,EAAE,KAAK,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAE/J,kHAAkH;AAClH,MAAM,WAAW,mBAAmB;IAClC,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B;oGACgG;IAChG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAC7D,4EAA4E;IAC5E,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C,wFAAwF;IACxF,KAAK,EAAE,mBAAmB,CAAC;IAC3B;oGACgG;IAChG,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;+GAE2G;IAC3G,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACpG;AAMD,qBAAa,kBAAkB;IAW3B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IAZxB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkB;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkB;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAe;gBAGrB,KAAK,EAAE,kBAAkB,EACzB,GAAG,EAAE,mBAAmB,EACxB,IAAI,CAAC,EAAE,WAAW,YAAA;IAmBrC,yDAAyD;IACnD,aAAa,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAItD;;;;;OAKG;IACG,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAO,GAClC,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAcxD,6EAA6E;IACvE,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9D,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAI1D,oGAAoG;IAC9F,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC;IAIzG;;kHAE8G;IACxG,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvG;;mHAE+G;IACzG,6BAA6B,CACjC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,0BAA0B,EACtC,EAAE,EAAE,MAAM,EACV,EAAE,CAAC,EAAE,MAAM,GACV,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAMxD,+GAA+G;IACzG,+BAA+B,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAMxJ;;0CAEsC;IAChC,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAM9I;;;;OAIG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAiBvH,+FAA+F;IACzF,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpE,uDAAuD;IACjD,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjE,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIvD,oFAAoF;IAC9E,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAUjE;;qHAEiH;IACjH,OAAO,CAAC,yBAAyB;IAiBjC,6FAA6F;IACvF,aAAa,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAIxF,oGAAoG;IAC9F,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IAItC;qHACiH;IAC3G,mBAAmB,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAIxF;;;;;OAKG;IACG,eAAe,CACnB,QAAQ,EAAE,kBAAkB,EAC5B,IAAI,EAAE;QAAE,SAAS,EAAE,gBAAgB,CAAC;QAAC,IAAI,EAAE,aAAa,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GACrE,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,uBAAuB,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAc1F;;;;;;OAMG;IACG,WAAW,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAoBxI;uGACmG;IAC7F,eAAe,CAAC,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/G,sEAAsE;IAChE,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAIpD,oGAAoG;IAC9F,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInD;;;;OAIG;IACH,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,KAAK;IAIjC;;;;;;OAMG;IACG,OAAO,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAOtD,0GAA0G;IACpG,UAAU,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,EAAE,KAAK,EAAE,eAAe;IAIxE,OAAO,CAAC,WAAW;IAKnB,uEAAuE;IACvE,IAAI,SAAS,IAAI,qBAAqB,CAErC;IAED;;;;OAIG;IACG,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAMrE;;;;;;;;;OASG;IACG,UAAU,CAAC,KAAK,EAAE;QACtB,GAAG,EAAE,mBAAmB,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9B,aAAa,EAAE,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;KAC7G,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAoB7F;oFACgF;IAC1E,KAAK,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAIpC,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IA4BhD;;;;qDAIiD;IAC3C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B"}
+{"version":3,"file":"principal-gateway-do.d.ts","sourceRoot":"","sources":["../../src/cloudflare/principal-gateway-do.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAC3F,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAoD,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEvG,OAAO,EAAuC,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACpG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AACpH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAGhE,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC7B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAA4E,KAAK,SAAS,EAAE,KAAK,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAE/J,kHAAkH;AAClH,MAAM,WAAW,mBAAmB;IAClC,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;4GAEwG;IACxG,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B;oGACgG;IAChG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAC7D,4EAA4E;IAC5E,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C,wFAAwF;IACxF,KAAK,EAAE,mBAAmB,CAAC;IAC3B;oGACgG;IAChG,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;+GAE2G;IAC3G,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACpG;AAMD,6FAA6F;AAC7F,MAAM,MAAM,YAAY;AACtB,gGAAgG;AAC9F;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE;AAC/B;6EAC6E;GAC3E;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAChE;uFACuF;GACrF;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpD,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAA;CAAE,GAC3E;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,qBAAqB,GAAG,mBAAmB,CAAA;CAAE,CAAC;AAEvE,qBAAa,kBAAkB;IAY3B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IAbxB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmB;IACpD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkB;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkB;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAe;gBAGrB,KAAK,EAAE,kBAAkB,EACzB,GAAG,EAAE,mBAAmB,EACxB,IAAI,CAAC,EAAE,WAAW,YAAA;IAoBrC;;;;;;;;;;;OAWG;IACG,aAAa,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAWtD;;;;;OAKG;IACG,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAO,GAClC,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAcxD,6EAA6E;IACvE,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9D,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAI1D,oGAAoG;IAC9F,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC;IAIzG;;kHAE8G;IACxG,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvG;;mHAE+G;IACzG,6BAA6B,CACjC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,0BAA0B,EACtC,EAAE,EAAE,MAAM,EACV,EAAE,CAAC,EAAE,MAAM,GACV,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAMxD,+GAA+G;IACzG,+BAA+B,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAMxJ;;0CAEsC;IAChC,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAM9I;;;;OAIG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IA6BvH,+FAA+F;IACzF,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpE,uDAAuD;IACjD,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjE,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIvD,oFAAoF;IAC9E,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAUjE;;qHAEiH;IACjH,OAAO,CAAC,yBAAyB;IAiBjC,6FAA6F;IACvF,aAAa,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAIxF,oGAAoG;IAC9F,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IAItC;qHACiH;IAC3G,mBAAmB,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAIxF;;;;;OAKG;IACG,eAAe,CACnB,QAAQ,EAAE,kBAAkB,EAC5B,IAAI,EAAE;QAAE,SAAS,EAAE,gBAAgB,CAAC;QAAC,IAAI,EAAE,aAAa,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GACrE,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,uBAAuB,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAiB1F;;;;;;OAMG;IACG,WAAW,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAoBxI;uGACmG;IAC7F,eAAe,CAAC,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/G,sEAAsE;IAChE,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAIpD,oGAAoG;IAC9F,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInD;;;;OAIG;IACH,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,KAAK;IAIjC;;;;;;OAMG;IACG,OAAO,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAWjE;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;YACW,oBAAoB;IA2BlC;;;;;;;;;;OAUG;YACW,2BAA2B;IAMzC;;;;OAIG;IACG,eAAe,CAAC,KAAK,EAAE;QAC3B,aAAa,EAAE,aAAa,CAAC;QAC7B,cAAc,EAAE,cAAc,CAAC;QAC/B,sFAAsF;QACtF,cAAc,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;QAC5C,iBAAiB,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;QAC3C,EAAE,EAAE,MAAM,CAAC;QACX,gBAAgB,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;KACjD,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAwBhC,0GAA0G;IACpG,UAAU,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,EAAE,KAAK,EAAE,eAAe;IAYxE,uFAAuF;IACvF,IAAI,YAAY,IAAI,gBAAgB,CAEnC;IAED;;;;;;;OAOG;IACG,eAAe,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAItD;;mEAE+D;IAC/D,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,WAAW;IAKnB,uEAAuE;IACvE,IAAI,SAAS,IAAI,qBAAqB,CAErC;IAED;;;;OAIG;IACG,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAMrE;;;;;;;;;OASG;IACG,UAAU,CAAC,KAAK,EAAE;QACtB,GAAG,EAAE,mBAAmB,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9B,aAAa,EAAE,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;KAC7G,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAoB7F;oFACgF;IAC1E,KAAK,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAIpC,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IA8BhD;;;;qDAIiD;IAC3C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B"}