@agirails/sdk 4.4.9 → 4.5.2

package/dist/cli/lib/sentinelReflections.js

@@ -0,0 +1,193 @@
+"use strict";
+/**
+ * Vendored copy of Sentinel's reflection table for local-fallback display.
+ *
+ * ## Why vendored?
+ *
+ * The Sentinel seed agent (`Public Agents/seed-sentinel/src/reflections.ts`)
+ * is the canonical source of these one-liners — when a buyer hits Sentinel
+ * via `actp test`, the AIP-16 delivery channel returns the day's reflection
+ * inside `result.payload.reflection`. That is the happy path and remains
+ * the source of truth at runtime.
+ *
+ * This file is a **byte-equivalent vendored copy** kept inside the SDK so
+ * the CLI can render a local reflection when the channel delivery is
+ * dormant (envelope subscription missed, relay was slow, decoding failed,
+ * or the buyer ran offline against a cached state). The intent: even when
+ * the delivery surface is silent, the buyer's "wow moment" still lands —
+ * a quiet quote in their terminal instead of a blank receipt.
+ *
+ * ## Determinism contract
+ *
+ * Selection is deterministic per UTC day. `todaysReflection(now)` returns
+ * the same entry for any `now` that falls inside the same UTC calendar
+ * day, across the SDK and Sentinel, because both use the same:
+ *   - djb2-style hash (Bernstein) of `YYYY-MM-DD`
+ *   - modulo over the same 76-entry table in the same order
+ *
+ * This means a buyer who sees a local-fallback reflection on day D and
+ * then re-runs `actp test` later that same day (after the channel
+ * recovers) will receive **the same** quote from Sentinel. No
+ * synchronicity is broken by the fallback.
+ *
+ * ## Sync policy
+ *
+ * Last synced: 2026-06-09 (against `Public Agents/seed-sentinel/src/reflections.ts`).
+ *
+ * When the upstream Sentinel table changes in a meaningful way (entries
+ * added, removed, reworded, or reordered), port those changes here and
+ * bump the "Last synced" date. The two tables MUST stay byte-identical
+ * for the determinism contract to hold — if they diverge, buyers will
+ * see one quote in fallback and a different quote on retry.
+ *
+ * The fallback path is the safety net, not the canonical render. If you
+ * find yourself wanting to add SDK-only reflections here that are NOT in
+ * Sentinel, stop: add them to Sentinel first, then port.
+ *
+ * @module cli/lib/sentinelReflections
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.todaysReflection = exports.utcDateKey = exports.djb2hash = exports.REFLECTIONS = void 0;
+/**
+ * The curated table. 76 entries.
+ *
+ * Byte-equivalent to the upstream Sentinel table. Do not reorder, edit
+ * text, or drop entries without porting the same change to Sentinel
+ * first — both tables drive the same `hashDateKey(YYYY-MM-DD) % 76`
+ * selection, so any divergence yields different reflections on the same
+ * day.
+ */
+exports.REFLECTIONS = Object.freeze([
+    { id: 1, text: 'Nothing I see means anything.' },
+    { id: 2, text: 'I have given everything I see all the meaning that it has for me.' },
+    { id: 3, text: 'I do not understand anything I see.' },
+    { id: 9, text: 'I see nothing as it is now.' },
+    { id: 15, text: 'My thoughts are images which I have made.' },
+    { id: 16, text: 'I have no neutral thoughts.' },
+    { id: 17, text: 'I see no neutral things.' },
+    { id: 18, text: 'I am not alone in experiencing the effects of my seeing.' },
+    { id: 19, text: 'I am not alone in experiencing the effects of my thoughts.' },
+    { id: 21, text: 'I am determined to see things differently.' },
+    { id: 25, text: 'I do not know what anything is for.' },
+    { id: 28, text: 'Above all else, I want to see things differently.' },
+    { id: 31, text: 'I am not the victim of the world I see.' },
+    { id: 32, text: 'I have invented the world I see.' },
+    { id: 33, text: 'There is another way of looking at the world.' },
+    { id: 66, text: 'My happiness and my function are one.' },
+    { id: 68, text: 'Love holds no grievances.' },
+    { id: 80, text: 'Let me recognize my problems have been solved.' },
+    { id: 93, text: 'Light and joy and peace abide within me.' },
+    { id: 104, text: 'I seek but what belongs to me in truth.' },
+    { id: 106, text: 'Let me be still and listen to the truth.' },
+    { id: 107, text: 'Truth will correct the errors in my mind.' },
+    { id: 108, text: 'To give and to receive are one in truth.' },
+    { id: 121, text: 'Forgiveness is the key to happiness.' },
+    { id: 122, text: 'Forgiveness offers everything I want.' },
+    { id: 126, text: 'All that I give is given to myself.' },
+    { id: 128, text: 'The world I see holds nothing that I want.' },
+    { id: 129, text: 'Beyond this world there is a world I want.' },
+    { id: 130, text: 'It is impossible to see two worlds.' },
+    { id: 131, text: 'No one can fail who seeks to reach the truth.' },
+    { id: 132, text: 'I loose the world from all I thought it was.' },
+    { id: 133, text: 'I will not value what is valueless.' },
+    { id: 135, text: 'If I defend myself I am attacked.' },
+    { id: 152, text: 'The power of decision is my own.' },
+    { id: 153, text: 'In my defenselessness my safety lies.' },
+    { id: 158, text: 'Today I learn to give as I receive.' },
+    { id: 195, text: 'Love is the way I walk in gratitude.' },
+    { id: 198, text: 'Only my condemnation injures me.' },
+    { id: 221, text: 'Peace to my mind. Let all my thoughts be still.' },
+    { id: 236, text: 'I rule my mind, which I alone must rule.' },
+    { id: 240, text: 'Fear is not justified in any form.' },
+    { id: 243, text: 'Today I will judge nothing that occurs.' },
+    { id: 249, text: 'Forgiveness ends all suffering and loss.' },
+    { id: 250, text: 'Let me not see myself as limited.' },
+    { id: 251, text: 'I am in need of nothing but the truth.' },
+    { id: 255, text: 'This day I choose to spend in perfect peace.' },
+    { id: 257, text: 'Let me remember what my purpose is.' },
+    { id: 262, text: 'Let me perceive no differences today.' },
+    { id: 268, text: 'Let all things be exactly as they are.' },
+    { id: 281, text: 'I can be hurt by nothing but my thoughts.' },
+    { id: 282, text: 'I will not be afraid of love today.' },
+    { id: 284, text: 'I can elect to change all thoughts that hurt.' },
+    { id: 289, text: 'The past is over. It can touch me not.' },
+    { id: 290, text: 'My present happiness is all I see.' },
+    { id: 291, text: 'This is a day of stillness and of peace.' },
+    { id: 292, text: 'A happy outcome to all things is sure.' },
+    { id: 293, text: 'All fear is past, and only love is here.' },
+    { id: 300, text: 'Only an instant does this world endure.' },
+    { id: 307, text: 'Conflicting wishes cannot be my will.' },
+    { id: 308, text: 'This instant is the only time there is.' },
+    { id: 309, text: 'I will not fear to look within today.' },
+    { id: 310, text: 'In fearlessness and love I spend today.' },
+    { id: 311, text: 'I judge all things as I would have them be.' },
+    { id: 312, text: 'I see all things as I would have them be.' },
+    { id: 313, text: 'Now let a new perception come to me.' },
+    { id: 314, text: 'I seek a future different from the past.' },
+    { id: 322, text: 'I can give up what was never real.' },
+    { id: 323, text: 'I gladly make the sacrifice of fear.' },
+    { id: 325, text: 'All things I think I see reflect ideas.' },
+    { id: 332, text: 'Fear binds the world. Forgiveness sets it free.' },
+    { id: 334, text: 'Today I claim the gifts forgiveness gives.' },
+    { id: 336, text: 'Forgiveness lets me know that minds are joined.' },
+    { id: 338, text: 'I am affected only by my thoughts.' },
+    { id: 339, text: 'I will receive what I request.' },
+    { id: 340, text: 'I can be free of suffering today.' },
+    { id: 345, text: 'I offer only miracles today.' },
+]);
+/**
+ * djb2-style additive hash over a string. Matches Sentinel's
+ * implementation exactly: shift-subtract loop with `|= 0` to coerce back
+ * to int32, then `Math.abs` to drop the sign. Two different inputs
+ * yielding the same hash are vanishingly rare across YYYY-MM-DD keys
+ * over the next 1000 years, so this is fine for the deterministic
+ * "quote of the day" use case (NOT for cryptographic purposes).
+ *
+ * Exported for tests (the determinism contract is observable, not
+ * hidden) and so callers verifying "same key → same hash" don't have to
+ * reimplement it.
+ */
+function djb2hash(key) {
+    let h = 0;
+    for (let i = 0; i < key.length; i++) {
+        h = ((h << 5) - h) + key.charCodeAt(i);
+        h |= 0;
+    }
+    return Math.abs(h);
+}
+exports.djb2hash = djb2hash;
+/**
+ * Format `YYYY-MM-DD` in **UTC**.
+ *
+ * UTC matters here: if we used local-tz date, two callers running the
+ * same `actp test` at the same wall-clock instant from Zagreb and San
+ * Francisco might land on different dates near midnight and see
+ * different reflections — breaking the "everyone onboarding today shares
+ * the same quote" property.
+ *
+ * Exported so tests can assert the slicing format directly.
+ */
+function utcDateKey(d) {
+    return d.toISOString().slice(0, 10);
+}
+exports.utcDateKey = utcDateKey;
+/**
+ * Select today's reflection. Deterministic per UTC day.
+ *
+ * Matches Sentinel's `todaysReflection(now)` exactly: hash the UTC
+ * YYYY-MM-DD key, modulo over the table length, return the entry. Same
+ * day, same entry — across Sentinel and the local fallback.
+ *
+ * @param now - Defaults to `new Date()`. Tests pass a fixed Date.
+ *              Per project rules: timing is injected, never inlined as
+ *              a wall-clock primitive at a call site that needs to be
+ *              deterministic — callers should pass an explicit Date when
+ *              the result is being asserted.
+ */
+function todaysReflection(now = new Date()) {
+    const key = utcDateKey(now);
+    const idx = djb2hash(key) % exports.REFLECTIONS.length;
+    return exports.REFLECTIONS[idx];
+}
+exports.todaysReflection = todaysReflection;
+//# sourceMappingURL=sentinelReflections.js.map

package/dist/cli/lib/sentinelReflections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentinelReflections.js","sourceRoot":"","sources":["../../../src/cli/lib/sentinelReflections.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;;;AAiBH;;;;;;;;GAQG;AACU,QAAA,WAAW,GAA8B,MAAM,CAAC,MAAM,CAAC;IAClE,EAAE,EAAE,EAAE,CAAC,EAAI,IAAI,EAAE,+BAA+B,EAAE;IAClD,EAAE,EAAE,EAAE,CAAC,EAAI,IAAI,EAAE,mEAAmE,EAAE;IACtF,EAAE,EAAE,EAAE,CAAC,EAAI,IAAI,EAAE,qCAAqC,EAAE;IACxD,EAAE,EAAE,EAAE,CAAC,EAAI,IAAI,EAAE,6BAA6B,EAAE;IAChD,EAAE,EAAE,EAAE,EAAE,EAAG,IAAI,EAAE,2CAA2C,EAAE;IAC9D,EAAE,EAAE,EAAE,EAAE,EAAG,IAAI,EAAE,6BAA6B,EAAE;IAChD,EAAE,EAAE,EAAE,EAAE,EAAG,IAAI,EAAE,0BAA0B,EAAE;IAC7C,EAAE,EAAE,EAAE,EAAE,EAAG,IAAI,EAAE,0DAA0D,EAAE;IAC7E,EAAE,EAAE,EAAE,EAAE,EAAG,IAAI,EAAE,4DAA4D,EAAE;IAC/E,EAAE,EAAE,EAAE,EAAE,EAAG,IAAI,EAAE,4CAA4C,EAAE;IAC/D,EAAE,EAAE,EAAE,EAAE,EAAG,IAAI,EAAE,qCAAqC,EAAE;IACxD,EAAE,EAAE,EAAE,EAAE,EAAG,IAAI,EAAE,mDAAmD,EAAE;IACtE,EAAE,EAAE,EAAE,EAAE,EAAG,IAAI,EAAE,yCAAyC,EAAE;IAC5D,EAAE,EAAE,EAAE,EAAE,EAAG,IAAI,EAAE,kCAAkC,EAAE;IACrD,EAAE,EAAE,EAAE,EAAE,EAAG,IAAI,EAAE,+CAA+C,EAAE;IAClE,EAAE,EAAE,EAAE,EAAE,EAAG,IAAI,EAAE,uCAAuC,EAAE;IAC1D,EAAE,EAAE,EAAE,EAAE,EAAG,IAAI,EAAE,2BAA2B,EAAE;IAC9C,EAAE,EAAE,EAAE,EAAE,EAAG,IAAI,EAAE,gDAAgD,EAAE;IACnE,EAAE,EAAE,EAAE,EAAE,EAAG,IAAI,EAAE,0CAA0C,EAAE;IAC7D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,yCAAyC,EAAE;IAC5D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,0CAA0C,EAAE;IAC7D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,2CAA2C,EAAE;IAC9D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,0CAA0C,EAAE;IAC7D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,sCAAsC,EAAE;IACzD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,uCAAuC,EAAE;IAC1D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,qCAAqC,EAAE;IACxD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,4CAA4C,EAAE;IAC/D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,4CAA4C,EAAE;IAC/D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,qCAAqC,EAAE;IACxD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,+CAA+C,EAAE;IAClE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,8CAA8C,EAAE;IACjE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,qCAAqC,EAAE;IACxD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,mCAAmC,EAAE;IACtD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,kCAAkC,EAAE;IACrD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,uCAAuC,EAAE;IAC1D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,qCAAqC,EAAE;IACxD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,sCAAsC,EAAE;IACzD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,kCAAkC,EAAE;IACrD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,iDAAiD,EAAE;IACpE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,0CAA0C,EAAE;IAC7D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,oCAAoC,EAAE;IACvD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,yCAAyC,EAAE;IAC5D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,0CAA0C,EAAE;IAC7D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,mCAAmC,EAAE;IACtD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,wCAAwC,EAAE;IAC3D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,8CAA8C,EAAE;IACjE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,qCAAqC,EAAE;IACxD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,uCAAuC,EAAE;IAC1D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,wCAAwC,EAAE;IAC3D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,2CAA2C,EAAE;IAC9D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,qCAAqC,EAAE;IACxD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,+CAA+C,EAAE;IAClE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,wCAAwC,EAAE;IAC3D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,oCAAoC,EAAE;IACvD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,0CAA0C,EAAE;IAC7D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,wCAAwC,EAAE;IAC3D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,0CAA0C,EAAE;IAC7D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,yCAAyC,EAAE;IAC5D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,uCAAuC,EAAE;IAC1D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,yCAAyC,EAAE;IAC5D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,uCAAuC,EAAE;IAC1D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,yCAAyC,EAAE;IAC5D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,6CAA6C,EAAE;IAChE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,2CAA2C,EAAE;IAC9D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,sCAAsC,EAAE;IACzD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,0CAA0C,EAAE;IAC7D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,oCAAoC,EAAE;IACvD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,sCAAsC,EAAE;IACzD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,yCAAyC,EAAE;IAC5D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,iDAAiD,EAAE;IACpE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,4CAA4C,EAAE;IAC/D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,iDAAiD,EAAE;IACpE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,oCAAoC,EAAE;IACvD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,gCAAgC,EAAE;IACnD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,mCAAmC,EAAE;IACtD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,8BAA8B,EAAE;CAClD,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,SAAgB,QAAQ,CAAC,GAAW;IAClC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACrB,CAAC;AAPD,4BAOC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,UAAU,CAAC,CAAO;IAChC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAFD,gCAEC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,gBAAgB,CAAC,MAAY,IAAI,IAAI,EAAE;IACrD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,mBAAW,CAAC,MAAM,CAAC;IAC/C,OAAO,mBAAW,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAJD,4CAIC"}

package/dist/delivery/MockDeliveryChannel.d.ts

@@ -0,0 +1,208 @@
+/**
+ * AIP-16 Delivery Surface — MockDeliveryChannel (Phase 2b)
+ * =========================================================
+ *
+ * In-process loopback {@link DeliveryChannel} implementation used by
+ * unit tests and `MockRuntime` flows. Both parties of an AIP-16
+ * delivery exchange share a single MockDeliveryChannel instance and
+ * exchange already-signed wire objects without any network transport.
+ *
+ * Verification is performed in-channel — the same builder `verify()`
+ * methods that `RelayDeliveryChannel` consumers run on read — so
+ * security regression tests using the mock exercise the same code
+ * paths as production deployments.
+ *
+ * ## Critical security invariants (mirror MockChannel / RelayChannel)
+ *
+ *  1. **Dedup AFTER verify.** A signature is added to a txId's dedup
+ *     set ONLY after the signature has been verified. Otherwise an
+ *     attacker who replays a malformed payload with a stolen signature
+ *     could poison the dedup set — the later legitimate signed object
+ *     would be silently dropped because its identifier was already
+ *     "seen". This is identical to the ordering used in
+ *     `src/negotiation/MockChannel.ts` ~line 189.
+ *
+ *  2. **Subscriber error isolation.** Subscriber callbacks may throw
+ *     synchronously or asynchronously. Every invocation is wrapped in
+ *     `Promise.resolve(...).catch(...)` so one bad subscriber can never
+ *     halt fan-out to peer subscribers and cannot propagate up into
+ *     the channel's publish loop.
+ *
+ *  3. **Replay on subscribe.** Subscribers receive the FULL historical
+ *     set of already-published wire objects for the subscribed `txId`
+ *     before any future objects fire. This matches the test-ergonomic
+ *     behavior of `MockChannel`: tests can publish first then subscribe
+ *     and still see what was posted. Each callback maintains its own
+ *     per-subscription `delivered` set so a replay does not double-fire
+ *     and so a slow subscriber can stagger its consumption without
+ *     missing messages.
+ *
+ *  4. **Address comparison case-insensitivity.** All comparisons that
+ *     touch addresses (none directly in this file — verification is
+ *     delegated to builders which already lowercase both sides) are
+ *     case-insensitive by construction.
+ *
+ * ## Verification opts derivation
+ *
+ * Verification calls `DeliverySetupBuilder.verify` / `DeliveryEnvelopeBuilder.verify`
+ * with `{ expectedKernelAddress, expectedChainId, now }`. The resolution
+ * order is:
+ *
+ *  - `expectedKernelAddress`: `opts.expectedKernelAddress` if set, else
+ *    `signed.kernelAddress` (the wire's self-asserted kernel).
+ *  - `expectedChainId`: `opts.expectedChainId` if set, else
+ *    `signed.chainId`.
+ *  - `now`: `opts.now?.()` if set, else the builder's default (which
+ *    reads its own injectable clock).
+ *
+ * Using the wire's self-asserted values is intentional for the *mock*
+ * — tests typically don't care to plumb an explicit kernel address per
+ * channel instance and want the channel to "just accept" whatever the
+ * test signed. Tests that DO want allowlist enforcement pass
+ * `expectedKernelAddress` / `expectedChainId` explicitly.
+ *
+ * @module delivery/MockDeliveryChannel
+ * @see {@link DeliveryChannel}
+ * @see {@link DeliverySetupBuilder.verify}
+ * @see {@link DeliveryEnvelopeBuilder.verify}
+ */
+import type { DeliveryChannel, DeliverySubscription, SetupCallback, EnvelopeCallback } from './channel';
+import type { DeliverySetupWireV1, DeliveryEnvelopeWireV1 } from './types';
+import { type LogFn } from './channelLog';
+/**
+ * Construction options for {@link MockDeliveryChannel}.
+ *
+ * All fields are optional. Defaults are tuned for the most common case
+ * (unit tests that publish locally-signed wire objects and expect them
+ * to round-trip without configuration).
+ */
+export interface MockDeliveryChannelOptions {
+    /**
+     * Pluggable logger. Defaults to {@link noopLog} (silent).
+     *
+     * Channels log at `warn` when:
+     *  - a publish is rejected because verification failed (one record
+     *    per rejected publish, with the structured error code),
+     *  - a subscriber callback threw and was swallowed (per security
+     *    invariant #2).
+     */
+    log?: LogFn;
+    /**
+     * If `true`, skip signature verification on publish. The channel will
+     * still compute the dedup hash and fan out, but it will accept
+     * malformed or tampered wires.
+     *
+     * Used by tests that need to inject poisoned signatures to exercise
+     * dedup-after-verify behavior, channel-level rejection paths, or
+     * subscriber error isolation under malformed input. Defaults to
+     * `false`.
+     */
+    skipVerifyForTests?: boolean;
+    /**
+     * Allowlisted kernel address. When set, verification enforces this
+     * value (matches the production posture). When unset, verification
+     * falls back to `signed.kernelAddress` (the wire's self-asserted
+     * kernel), which is the convenient default for tests that have
+     * already signed under an arbitrary kernel and just want it accepted.
+     */
+    expectedKernelAddress?: string;
+    /**
+     * Allowlisted chainId. Same fallback semantics as
+     * {@link expectedKernelAddress} — when unset, defaults to
+     * `signed.chainId`.
+     */
+    expectedChainId?: number;
+    /**
+     * Injectable wall clock returning Unix seconds. When set, passed
+     * through to the underlying builder `verify()` calls so timestamp
+     * skew and expiry checks are deterministic across tests.
+     */
+    now?: () => number;
+}
+/**
+ * In-process loopback delivery channel.
+ *
+ * Two parties (or any number) share a single instance and exchange
+ * wire objects via `publishSetup` / `publishEnvelope` / `subscribe*`.
+ * No network transport.
+ *
+ * @example
+ * ```typescript
+ * const channel = new MockDeliveryChannel();
+ *
+ * // Provider subscribes for setups on a txId.
+ * const sub = await channel.subscribeSetups(txId, async (wire) => {
+ *   // wire has already been verified by the channel.
+ *   await onSetup(wire);
+ * });
+ *
+ * // Requester publishes the setup.
+ * await channel.publishSetup(setupWire);
+ *
+ * // …later
+ * await sub.close();
+ * channel.close();
+ * ```
+ */
+export declare class MockDeliveryChannel implements DeliveryChannel {
+    private readonly log;
+    private readonly skipVerifyForTests;
+    private readonly expectedKernelAddress?;
+    private readonly expectedChainId?;
+    private readonly nowFn?;
+    private readonly setupStoreByTxId;
+    private readonly envelopeStoreByTxId;
+    private readonly setupSubscribersByTxId;
+    private readonly envelopeSubscribersByTxId;
+    private closed;
+    constructor(opts?: MockDeliveryChannelOptions);
+    publishSetup(setup: DeliverySetupWireV1): Promise<void>;
+    publishEnvelope(envelope: DeliveryEnvelopeWireV1): Promise<void>;
+    subscribeSetups(txId: `0x${string}`, callback: SetupCallback): Promise<DeliverySubscription>;
+    subscribeEnvelopes(txId: `0x${string}`, callback: EnvelopeCallback): Promise<DeliverySubscription>;
+    getSetups(txId?: `0x${string}`): Promise<DeliverySetupWireV1[]>;
+    getEnvelopes(txId?: `0x${string}`): Promise<DeliveryEnvelopeWireV1[]>;
+    /**
+     * Synchronous snapshot of all setups currently stored for `txId`,
+     * or all setups across every txId when `txId` is omitted. Returns a
+     * defensive copy.
+     */
+    getAllSetups(txId?: string): DeliverySetupWireV1[];
+    /**
+     * Synchronous snapshot of all envelopes currently stored for `txId`,
+     * or all envelopes across every txId when `txId` is omitted. Returns
+     * a defensive copy.
+     */
+    getAllEnvelopes(txId?: string): DeliveryEnvelopeWireV1[];
+    /**
+     * Count of currently-active subscriptions (setup + envelope combined).
+     * Useful for leak tests.
+     */
+    activeSubscriptionCount(): number;
+    /**
+     * Reset all stored state. Does NOT touch subscriber lists — existing
+     * subscribers remain registered for future publishes.
+     */
+    clear(): void;
+    /**
+     * Mark all current subscriptions cancelled and drop them. Storage is
+     * preserved so tests can still assert on what was published. Future
+     * `publish*` / `subscribe*` calls reject with a closed-channel error.
+     */
+    close(): void;
+    private fanoutSetup;
+    private fanoutEnvelope;
+    /**
+     * Deliver a setup to a single subscriber, honoring per-subscription
+     * dedup and isolating subscriber errors.
+     *
+     * NOTE on dedup ordering: the channel-wide dedup happens at publish
+     * time AFTER verify; the per-subscription dedup here is purely to
+     * prevent double-fire when replay-on-subscribe races with a live
+     * fanout for the same wire. It does NOT defend against signature
+     * poisoning — that's handled at publish time.
+     */
+    private deliverSetup;
+    private deliverEnvelope;
+}
+//# sourceMappingURL=MockDeliveryChannel.d.ts.map

package/dist/delivery/MockDeliveryChannel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MockDeliveryChannel.d.ts","sourceRoot":"","sources":["../../src/delivery/MockDeliveryChannel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AAEH,OAAO,KAAK,EACV,eAAe,EACf,oBAAoB,EACpB,aAAa,EACb,gBAAgB,EACjB,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EACV,mBAAmB,EACnB,sBAAsB,EACvB,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,KAAK,KAAK,EAAW,MAAM,cAAc,CAAC;AAMnD;;;;;;GAMG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;;;;;OAQG;IACH,GAAG,CAAC,EAAE,KAAK,CAAC;IAEZ;;;;;;;;;OASG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAE/B;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAsCD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBAAa,mBAAoB,YAAW,eAAe;IACzD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;IAC5B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAU;IAC7C,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAS;IAChD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAe;IAEtC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAiC;IAClE,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAoC;IACxE,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAA2C;IAClF,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAA8C;IAExF,OAAO,CAAC,MAAM,CAAS;gBAEX,IAAI,GAAE,0BAA+B;IAY3C,YAAY,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAqDvD,eAAe,CAAC,QAAQ,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAiDhE,eAAe,CACnB,IAAI,EAAE,KAAK,MAAM,EAAE,EACnB,QAAQ,EAAE,aAAa,GACtB,OAAO,CAAC,oBAAoB,CAAC;IAiD1B,kBAAkB,CACtB,IAAI,EAAE,KAAK,MAAM,EAAE,EACnB,QAAQ,EAAE,gBAAgB,GACzB,OAAO,CAAC,oBAAoB,CAAC;IAiD1B,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,EAAE,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAI/D,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,EAAE,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAQ3E;;;;OAIG;IACH,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,mBAAmB,EAAE;IAYlD;;;;OAIG;IACH,eAAe,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,sBAAsB,EAAE;IAYxD;;;OAGG;IACH,uBAAuB,IAAI,MAAM;IAOjC;;;OAGG;IACH,KAAK,IAAI,IAAI;IAKb;;;;OAIG;IACH,KAAK,IAAI,IAAI;IAiBb,OAAO,CAAC,WAAW;IAcnB,OAAO,CAAC,cAAc;IAYtB;;;;;;;;;OASG;IACH,OAAO,CAAC,YAAY;IAgBpB,OAAO,CAAC,eAAe;CAkBxB"}