@cello-protocol/daemon 0.0.160 → 0.0.162

package/dist/document-delivery.js

@@ -95,14 +95,15 @@ export class DocumentDelivery {
      * unreachable peer must not stop delivery to every other peer, which is precisely the "works
      * only when all nodes are healthy" shape the project forbids.
      */
-    async tick(ownerAgentId, peerFor, nowMs, opts = {}) {
-        // NO RE-ENTRY. Nothing marks a row in-flight until its outcome lands, so a `deliver` slower
-        // than the tick interval — a dial to a distant peer is exactly that — would have the next tick
-        // return the same rows and dial again: two autonomous sessions and two seals for one envelope,
-        // and the loser's markAcked returning false, which logs as if the PEER had redelivered an ack.
+    /**
+     * One pass over what is due, PER (document, holder). Returns counts rather than throwing on a
+     * per-target failure: one unreachable HOLDER must not stop delivery to any other — the same
+     * "works only when all nodes are healthy" shape the project forbids, now per holder.
+     */
+    async tick(ownerAgentId, holdersFor, nowMs, opts = {}) {
         if (this.#inFlight)
             return this.#inFlight;
-        const run = this.#run(ownerAgentId, peerFor, nowMs, opts);
+        const run = this.#run(ownerAgentId, holdersFor, nowMs, opts);
         this.#inFlight = run;
         try {
             return await run;
@@ -111,239 +112,204 @@ export class DocumentDelivery {
             this.#inFlight = null;
         }
     }
-    async #run(ownerAgentId, peerFor, nowMs, opts) {
-        // THE PASS BUDGET. Spent down by every envelope that opens its own session and waits for an
-        // ack; once it is gone the rest of the pass delivers without waiting rather than stalling
-        // behind whoever exhausted it. See DELIVERY_ACK_GRACE_BUDGET_MS.
+    async #run(ownerAgentId, holdersFor, nowMs, opts) {
         let graceBudgetRemainingMs = DELIVERY_ACK_GRACE_BUDGET_MS;
-        // Minted once per pass and threaded through every event, so an operator can tie a failure back
-        // to the lookup that preceded it and the session that carried it. Delivery is precisely the
-        // async multi-step flow the convention exists for: lookup, dial, deliver, ack — across ticks
-        // and across restarts.
         const correlationId = opts.correlationId ?? `dlv-${ownerAgentId.slice(0, 8)}-${nowMs}`;
-        // OUR sender id on the wire, which M14-D5 makes the pubkey hex rather than the owner key.
-        // Passing the owner key here returned nothing pending and every published update sat in the log
-        // undelivered, with no error on any path.
-        const pending = this.#store.pendingDeliveries(ownerAgentId, nowMs, opts.senderAgentId);
+        const senderAgentId = opts.senderAgentId ?? ownerAgentId;
+        // LEGACY bilateral rows gain their per-holder twin before anything is read — idempotent
+        // insurance, journaled (Entry 14): pre-fan-out backlogs are near-empty at alpha.
+        this.#store.backfillBilateralDeliveries(ownerAgentId, senderAgentId, nowMs);
+        const pending = this.#store.pendingHolderDeliveries(ownerAgentId, nowMs);
         const result = {
             attempted: 0, delivered: 0, sent: 0, rejected: 0, deferred: 0, failed: 0,
         };
-        // Group by document so one reachability lookup serves every pending envelope for that peer.
-        // Per-envelope lookups would multiply directory traffic by the size of the backlog, which is
-        // largest exactly when the peer has been away longest.
+        // Grouped (document, holder): one derivation and one reachability probe serve every pending
+        // envelope for that pair.
         const byDocument = new Map();
-        for (const e of pending) {
-            const list = byDocument.get(e.documentId);
+        for (const p of pending) {
+            let holders = byDocument.get(p.documentId);
+            if (!holders) {
+                holders = new Map();
+                byDocument.set(p.documentId, holders);
+            }
+            const list = holders.get(p.holderAgentId);
             if (list)
-                list.push(e);
+                list.push(p);
             else
-                byDocument.set(e.documentId, [e]);
+                holders.set(p.holderAgentId, [p]);
         }
-        for (const [documentId, envelopes] of byDocument) {
-            const peerAgentId = peerFor(documentId);
-            if (peerAgentId === null) {
-                // No peer means the document row is gone or malformed, which is NOT transient — so it goes
-                // straight to the cap rather than climbing to it, and crucially it is SCHEDULED. Skipping
-                // the schedule made this the one exit that never self-corrects: the rows stayed due on
-                // every tick forever, emitting an error line each time, and — because the pending window
-                // is ordered and bounded — they filled it and starved every other document. The operator's
-                // work on an unrelated document would silently never leave the machine, with the only
-                // signal being an error naming a different one.
-                this.#logger.error("document.delivery.no_peer", {
+        for (const [documentId, holderGroups] of byDocument) {
+            const currentHolders = holdersFor(documentId);
+            if (currentHolders === null) {
+                // The document row is gone or its chain does not derive — NOT transient. Scheduled at
+                // the cap so the rows never starve anything, exactly the old no_peer discipline.
+                this.#logger.error("document.delivery.no_holders", {
                     documentId,
-                    pending: envelopes.length,
+                    pending: [...holderGroups.values()].reduce((n, l) => n + l.length, 0),
                     correlationId,
                 });
-                for (const e of envelopes) {
-                    this.#store.recordDeliveryAttempt(ownerAgentId, documentId, e.envelopeHash, nowMs + DELIVERY_UNRESOLVABLE_RETRY_MS);
+                for (const [holder, rows] of holderGroups) {
+                    for (const r of rows) {
+                        this.#store.scheduleHolderRetry(ownerAgentId, documentId, r.envelope.envelopeHash, holder, nowMs + DELIVERY_UNRESOLVABLE_RETRY_MS);
+                    }
+                    result.failed += rows.length;
                 }
-                result.failed += envelopes.length;
                 continue;
             }
-            let reach;
-            try {
-                reach = await this.#transport.isPeerReachable(peerAgentId, correlationId);
-            }
-            catch (err) {
-                // A FAILED LOOKUP IS NOT AN OFFLINE PEER. Recording it as "away" would report a directory
-                // outage to the operator as their collaborator being absent — an error substituted for a
-                // different error, and one that sends them to ask the wrong person.
-                this.#logger.warn("document.delivery.lookup_failed", {
-                    documentId,
-                    peerAgentId,
-                    correlationId,
-                    reason: err instanceof Error ? err.message : String(err),
-                });
-                this.#defer(ownerAgentId, documentId, envelopes, nowMs);
-                result.deferred += envelopes.length;
-                continue;
-            }
-            if (!reach.reachable) {
-                // The unknown-agent case is announced AGAINST THE DOCUMENT, not in a separate line that
-                // cannot be joined to it. "This address does not resolve" and "your collaborator stepped
-                // away" are different things to tell an operator, and the second is what they saw for both.
-                this.#logger.info(reach.unknownAgent ? "document.delivery.peer_unknown" : "document.delivery.peer_unreachable", { documentId, peerAgentId, pending: envelopes.length, correlationId });
-                this.#defer(ownerAgentId, documentId, envelopes, nowMs);
-                result.deferred += envelopes.length;
-                continue;
-            }
-            for (const envelope of envelopes) {
-                result.attempted += 1;
-                // CLAIM THE ROW BEFORE DIALING. Scheduling only on the outcome leaves the row due for the
-                // whole duration of the dial, and leaves it due FOREVER if the daemon dies mid-dial. The
-                // claim is corrected below when the outcome lands.
-                const attempts = this.#store.recordDeliveryAttempt(ownerAgentId, documentId, envelope.envelopeHash, nowMs + backoffFor(envelope.attempts ?? 0));
-                let outcome;
-                const graceStartedAt = Date.now();
-                try {
-                    outcome = await this.#transport.deliver({
-                        peerAgentId,
-                        documentId,
-                        envelope,
-                        // WHAT IS LEFT OF THE PASS BUDGET, never a fresh allowance. One unresponsive peer can
-                        // exhaust it, and then every later envelope in the sweep is delivered without a wait
-                        // rather than the sweep stalling behind it.
-                        ackGraceMs: Math.max(0, graceBudgetRemainingMs),
-                        // Per DOCUMENT. One hint applied to every envelope in the pass refused every OTHER
-                        // document's delivery — their peer's active sessions cannot contain this document's
-                        // session — so an unrelated update failed and backed off, citing a session the
-                        // operator never associated with it.
-                        sessionHint: opts.sessionHints?.get(documentId),
-                        correlationId,
+            const currentSet = new Set(currentHolders);
+            for (const [holderAgentId, rows] of holderGroups) {
+                // A holder the arrangement no longer includes — removed, or never derivable — is
+                // RETIRED, announced: our decision, not evidence about them (DOD-MP-REMOVE-1's
+                // delivery-stop clause, generalized per holder).
+                if (!currentSet.has(holderAgentId) ||
+                    this.#store.memberRemoved(ownerAgentId, documentId, holderAgentId).removed) {
+                    const retiredHashes = this.#store.abandonHolderDeliveries(ownerAgentId, documentId, holderAgentId, nowMs);
+                    for (const hash of retiredHashes) {
+                        this.#store.reconcileEnvelopeSettlement(ownerAgentId, documentId, hash, nowMs);
+                    }
+                    this.#logger.info("document.delivery.peer_removed", {
+                        documentId, holderAgentId, retired: retiredHashes.length, correlationId,
                     });
+                    continue;
+                }
+                let reach;
+                try {
+                    reach = await this.#transport.isPeerReachable(holderAgentId, correlationId);
                 }
                 catch (err) {
-                    // A THROW IS A FAILURE, never a success. Wrapped here rather than left to propagate so
-                    // one envelope's transport fault does not abandon the rest of the backlog mid-pass.
-                    outcome = {
-                        ok: false,
-                        reason: "document_delivery_threw",
-                        detail: err instanceof Error ? err.message : String(err),
-                    };
+                    // A FAILED LOOKUP IS NOT AN OFFLINE HOLDER — deferred, per holder, without an attempt.
+                    this.#logger.warn("document.delivery.lookup_failed", {
+                        documentId, holderAgentId, correlationId,
+                        reason: err instanceof Error ? err.message : String(err),
+                    });
+                    for (const r of rows) {
+                        // Deferrals ESCALATE the schedule (an offline holder must not be redialed at full
+                        // rate forever) without touching the SENDS ceiling — waiting is not sending.
+                        this.#store.recordHolderAttempt(ownerAgentId, documentId, r.envelope.envelopeHash, holderAgentId, nowMs + backoffFor(r.attempts));
+                    }
+                    result.deferred += rows.length;
+                    continue;
                 }
-                finally {
-                    // SPEND WHAT THE CALL ACTUALLY TOOK, not the allowance it was offered. The dial and the
-                    // seal share the same await and cannot be timed apart from here, so the whole call is
-                    // charged — the conservative direction, since it can only exhaust the budget sooner,
-                    // never let one envelope overrun it.
-                    graceBudgetRemainingMs -= Date.now() - graceStartedAt;
+                if (!reach.reachable) {
+                    this.#logger.info(reach.unknownAgent ? "document.delivery.peer_unknown" : "document.delivery.peer_unreachable", { documentId, holderAgentId, pending: rows.length, correlationId });
+                    for (const r of rows) {
+                        this.#store.recordHolderAttempt(ownerAgentId, documentId, r.envelope.envelopeHash, holderAgentId, nowMs + backoffFor(r.attempts));
+                    }
+                    result.deferred += rows.length;
+                    continue;
                 }
-                if (outcome.ok && outcome.admitted === null) {
-                    // IN FLIGHT. The content left and the peer has not answered.
-                    this.#store.markDelivered(ownerAgentId, documentId, envelope.envelopeHash, nowMs);
-                    // PARKED IS NOT DELIVERED, and scheduling them alike cost ten minutes per parked update.
-                    //
-                    // The ack timeout answers "how long do I wait for an ANSWER", and it is the right question
-                    // for content that reached the peer. Parked content did not reach them — the relay took it
-                    // because the session had no live counterparty — so the question is the one the ordinary
-                    // backoff answers: how long before trying again. Ten minutes for a peer who is online and
-                    // simply moved to another session is a stall the operator reads as a broken document.
-                    //
-                    // Caught by the no-chat enforcer flipping red when unrelated edits shifted timing by
-                    // milliseconds: the update parked onto a session the peer had just left, and the next
-                    // attempt was outside any window a person would wait.
-                    const parked = outcome.parked;
-                    this.#store.recordDeliveryAttempt(ownerAgentId, documentId, envelope.envelopeHash, nowMs + (parked ? backoffFor(envelope.attempts ?? 0) : DELIVERY_ACK_TIMEOUT_MS));
-                    this.#logger.info("document.delivery.sent", {
-                        documentId,
-                        envelopeHash: envelope.envelopeHash,
-                        sessionId: outcome.sessionId,
-                        sessionOpened: outcome.sessionOpened,
-                        unackedSends: attempts,
-                        correlationId,
-                    });
-                    result.sent += 1;
-                    if (attempts >= DELIVERY_MAX_UNACKED_SENDS) {
-                        // A peer that will never answer must stop being a transient. Otherwise this envelope is
-                        // re-sent forever and looks, in the log and in `list`, exactly like one about to land.
-                        //
-                        // AND IT DID, because setting the status was never what stopped it. The selection above
-                        // is `pendingDeliveries`, which filters on `acked_at IS NULL` and reads no status at
-                        // all — so `stalled` changed what the surface SAID and nothing about what the worker
-                        // DID. Every subsequent tick re-entered this branch, re-set the same status, and sent
-                        // again. Measured on the operator's daemon: `sends: 74` against a documented cap of 5,
-                        // while both the log line and the comment above claimed publishing had stopped.
-                        //
-                        // Retiring the envelope is what actually stops it — and it is retired as ABANDONED,
-                        // not as acked. `markAcked` was the first spelling and it was wrong: `acked_at` means
-                        // "the peer's daemon answered", so reusing it made `withdraw` tell the operator "your
-                        // peer holds it, so it cannot be withdrawn" about an envelope the peer may never have
-                        // seen. Giving up is our decision; it is not evidence about them.
-                        this.#store.setDocumentStatus(ownerAgentId, documentId, "stalled");
-                        this.#store.markAbandoned(ownerAgentId, documentId, envelope.envelopeHash, nowMs);
-                        this.#logger.error("document.delivery.unacked_limit", {
+                for (const row of rows) {
+                    const envelope = row.envelope;
+                    result.attempted += 1;
+                    // CLAIM THE ROW BEFORE DIALING — due-forever-on-crash-mid-dial is the same hazard it
+                    // always was, per holder now.
+                    this.#store.recordHolderAttempt(ownerAgentId, documentId, envelope.envelopeHash, holderAgentId, nowMs + backoffFor(row.attempts));
+                    let outcome;
+                    const graceStartedAt = Date.now();
+                    try {
+                        outcome = await this.#transport.deliver({
+                            peerAgentId: holderAgentId,
                             documentId,
-                            envelopeHash: envelope.envelopeHash,
-                            sends: attempts,
+                            envelope,
+                            ackGraceMs: Math.max(0, graceBudgetRemainingMs),
+                            sessionHint: opts.sessionHints?.get(documentId),
                             correlationId,
-                            // WHAT WAS OBSERVED, not a guess about whose fault it is. This said "Their client may
-                            // not support shared documents yet" — an assertion about the PEER'S SOFTWARE for a
-                            // failure whose measured cause was our own teardown deleting an ack that had already
-                            // arrived and been verified. An exit-point label presented as a diagnosis, and it
-                            // sent the one operator who hit it looking at the wrong machine.
-                            //
-                            // Both named events are ours and are upstream of this line, so the operator has
-                            // somewhere to go before concluding anything about the counterparty.
-                            detail: `this update has been delivered ${attempts} times without the peer's daemon ever ` +
-                                `confirming it — the document has stopped publishing and this update will not be ` +
-                                `retried. The cause may be local: check document.delivery.ack_grace_expired and ` +
-                                `session.content.held.discarded for this session before concluding the peer's ` +
-                                `client is at fault.`,
                         });
                     }
-                }
-                else if (outcome.ok) {
-                    // ACK = the peer's daemon ANSWERED, admitted or not. A rejection is an ack for delivery
-                    // purposes (§3.2's 0x05): the peer has decided, so there is nothing left to retry, and
-                    // retrying would re-trigger their gate and their retry counter until the document stalls
-                    // for reasons the operator cannot see. Supersession is REJECT-1's job, not the worker's.
-                    const first = this.#store.markAcked(ownerAgentId, documentId, envelope.envelopeHash, nowMs);
-                    this.#logger.info("document.delivery.session", {
-                        documentId,
-                        sessionId: outcome.sessionId,
-                        opened: outcome.sessionOpened,
-                        correlationId,
-                    });
-                    if (outcome.admitted) {
-                        this.#logger.info("document.delivery.acked", {
+                    catch (err) {
+                        outcome = {
+                            ok: false,
+                            reason: "document_delivery_threw",
+                            detail: err instanceof Error ? err.message : String(err),
+                        };
+                    }
+                    finally {
+                        graceBudgetRemainingMs -= Date.now() - graceStartedAt;
+                    }
+                    if (outcome.ok && outcome.admitted === null) {
+                        // IN FLIGHT for THIS holder. Parked and live sends want DIFFERENT retry schedules,
+                        // but both LEFT the machine — the sent-vs-never-left surface counts either (review
+                        // M7: reporting relay-parked content as "never left" mislabels a delivery that the
+                        // relay is holding for them).
+                        this.#store.markHolderDelivered(ownerAgentId, documentId, envelope.envelopeHash, holderAgentId, nowMs);
+                        const sends = this.#store.recordHolderSend(ownerAgentId, documentId, envelope.envelopeHash, holderAgentId);
+                        this.#store.scheduleHolderRetry(ownerAgentId, documentId, envelope.envelopeHash, holderAgentId, nowMs + (outcome.parked ? backoffFor(row.attempts) : DELIVERY_ACK_TIMEOUT_MS));
+                        this.#logger.info("document.delivery.sent", {
                             documentId,
                             envelopeHash: envelope.envelopeHash,
+                            holderAgentId,
                             sessionId: outcome.sessionId,
-                            firstAck: first,
+                            sessionOpened: outcome.sessionOpened,
+                            unackedSends: sends,
                             correlationId,
                         });
-                        result.delivered += 1;
+                        result.sent += 1;
+                        if (sends >= DELIVERY_MAX_UNACKED_SENDS) {
+                            // THIS HOLDER is exhausted — retired, announced, and only theirs. The document
+                            // stalls ONLY when every current holder is exhausted: one silent peer stopping a
+                            // living collaboration is the exact availability failure the milestone forbids.
+                            this.#store.abandonSingleHolderDelivery(ownerAgentId, documentId, envelope.envelopeHash, holderAgentId, nowMs);
+                            this.#store.reconcileEnvelopeSettlement(ownerAgentId, documentId, envelope.envelopeHash, nowMs);
+                            this.#logger.error("document.delivery.unacked_limit", {
+                                documentId,
+                                envelopeHash: envelope.envelopeHash,
+                                holderAgentId,
+                                sends,
+                                correlationId,
+                                detail: `this update has been delivered ${sends} times to this holder without their ` +
+                                    `daemon ever confirming it — delivery TO THEM is retired; every other holder ` +
+                                    `is unaffected. Check document.delivery.ack_grace_expired, ` +
+                                    `session.content.held.discarded, and whether their daemon has yet received ` +
+                                    `the amendment that added you (their log would show ` +
+                                    `document.inbound.sender_unknown_epoch_ahead) before concluding their client ` +
+                                    `is at fault.`,
+                            });
+                            const allExhausted = currentHolders
+                                .filter((h) => h !== senderAgentId)
+                                .every((h) => !this.#store.holderHasPending(ownerAgentId, documentId, h));
+                            if (allExhausted) {
+                                this.#store.setDocumentStatus(ownerAgentId, documentId, "stalled");
+                                this.#logger.error("document.delivery.stalled_all_holders", {
+                                    documentId, correlationId,
+                                });
+                            }
+                        }
+                    }
+                    else if (outcome.ok) {
+                        const first = this.#store.ackHolderDelivery(ownerAgentId, documentId, envelope.envelopeHash, holderAgentId, nowMs);
+                        // The envelope-level record follows the ONE terminal rule (review M3).
+                        this.#store.reconcileEnvelopeSettlement(ownerAgentId, documentId, envelope.envelopeHash, nowMs);
+                        this.#logger.info("document.delivery.session", {
+                            documentId, holderAgentId, sessionId: outcome.sessionId,
+                            opened: outcome.sessionOpened, correlationId,
+                        });
+                        if (outcome.admitted) {
+                            this.#logger.info("document.delivery.acked", {
+                                documentId, envelopeHash: envelope.envelopeHash, holderAgentId,
+                                sessionId: outcome.sessionId, firstAck: first, correlationId,
+                            });
+                            result.delivered += 1;
+                        }
+                        else {
+                            this.#logger.warn("document.delivery.rejected", {
+                                documentId, envelopeHash: envelope.envelopeHash, holderAgentId,
+                                sessionId: outcome.sessionId, reason: outcome.rejectionReason, correlationId,
+                            });
+                            result.rejected += 1;
+                        }
                     }
                     else {
-                        this.#logger.warn("document.delivery.rejected", {
-                            documentId,
-                            envelopeHash: envelope.envelopeHash,
-                            sessionId: outcome.sessionId,
-                            reason: outcome.rejectionReason,
+                        this.#logger.warn("document.delivery.failed", {
+                            documentId, envelopeHash: envelope.envelopeHash, holderAgentId,
+                            reason: outcome.reason, detail: outcome.detail, attempts: row.attempts + 1,
                             correlationId,
                         });
-                        result.rejected += 1;
+                        result.failed += 1;
                     }
                 }
-                else {
-                    this.#logger.warn("document.delivery.failed", {
-                        documentId,
-                        envelopeHash: envelope.envelopeHash,
-                        reason: outcome.reason,
-                        detail: outcome.detail,
-                        attempts,
-                        correlationId,
-                    });
-                    result.failed += 1;
-                }
             }
         }
         return result;
     }
-    #defer(ownerAgentId, documentId, envelopes, nowMs) {
-        for (const e of envelopes) {
-            this.#store.recordDeliveryAttempt(ownerAgentId, documentId, e.envelopeHash, nowMs + backoffFor(e.attempts ?? 0));
-        }
-    }
 }
 //# sourceMappingURL=document-delivery.js.map

package/dist/document-delivery.js.map

@@ -1 +1 @@
-{"version":3,"file":"document-delivery.js","sourceRoot":"","sources":["../src/document-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAgHH;;;;;;;;;;;GAWG;AACH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAEnD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;AACrF,MAAM,CAAC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAE3F;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;AAE/D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,uBAAuB,CAAC;AAEtE,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5E,OAAO,mBAAmB,CAAC,GAAG,CAAE,CAAC;AACnC,CAAC;AAaD,MAAM,OAAO,gBAAgB;IAClB,MAAM,CAAgB;IACtB,UAAU,CAA4B;IACtC,OAAO,CAAS;IACzB,SAAS,GAAuC,IAAI,CAAC;IAErD,YAAY,KAAoB,EAAE,SAAoC,EAAE,MAAc;QACpF,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CACR,YAAoB,EACpB,OAA8C,EAC9C,KAAa,EACb,OAKI,EAAE;QAEN,4FAA4F;QAC5F,+FAA+F;QAC/F,+FAA+F;QAC/F,+FAA+F;QAC/F,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CACR,YAAoB,EACpB,OAA8C,EAC9C,KAAa,EACb,IAIC;QAED,4FAA4F;QAC5F,0FAA0F;QAC1F,iEAAiE;QACjE,IAAI,sBAAsB,GAAG,4BAA4B,CAAC;QAC1D,+FAA+F;QAC/F,4FAA4F;QAC5F,6FAA6F;QAC7F,uBAAuB;QACvB,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;QACvF,0FAA0F;QAC1F,gGAAgG;QAChG,0CAA0C;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACvF,MAAM,MAAM,GAAuB;YACjC,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;SACzE,CAAC;QAEF,4FAA4F;QAC5F,6FAA6F;QAC7F,uDAAuD;QACvD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAiC,CAAC;QAC5D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;gBAClB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC;QAED,KAAK,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,UAAU,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;YACxC,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBACzB,2FAA2F;gBAC3F,0FAA0F;gBAC1F,uFAAuF;gBACvF,yFAAyF;gBACzF,2FAA2F;gBAC3F,sFAAsF;gBACtF,gDAAgD;gBAChD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE;oBAC9C,UAAU;oBACV,OAAO,EAAE,SAAS,CAAC,MAAM;oBACzB,aAAa;iBACd,CAAC,CAAC;gBACH,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;oBAC1B,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAC/B,YAAY,EACZ,UAAU,EACV,CAAC,CAAC,YAAY,EACd,KAAK,GAAG,8BAA8B,CACvC,CAAC;gBACJ,CAAC;gBACD,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC;gBAClC,SAAS;YACX,CAAC;YAED,IAAI,KAAoD,CAAC;YACzD,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;YAC5E,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,0FAA0F;gBAC1F,yFAAyF;gBACzF,oEAAoE;gBACpE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,iCAAiC,EAAE;oBACnD,UAAU;oBACV,WAAW;oBACX,aAAa;oBACb,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACzD,CAAC,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;gBACxD,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC;gBACpC,SAAS;YACX,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;gBACrB,wFAAwF;gBACxF,yFAAyF;gBACzF,4FAA4F;gBAC5F,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,oCAAoC,EAC5F,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,CACtE,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;gBACxD,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC;gBACpC,SAAS;YACX,CAAC;YAED,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;gBACtB,0FAA0F;gBAC1F,yFAAyF;gBACzF,mDAAmD;gBACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAChD,YAAY,EACZ,UAAU,EACV,QAAQ,CAAC,YAAY,EACrB,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,CAC3C,CAAC;gBACF,IAAI,OAAkE,CAAC;gBACvE,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACH,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;wBACtC,WAAW;wBACX,UAAU;wBACV,QAAQ;wBACR,sFAAsF;wBACtF,qFAAqF;wBACrF,4CAA4C;wBAC5C,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC;wBAC/C,mFAAmF;wBACnF,oFAAoF;wBACpF,+EAA+E;wBAC/E,qCAAqC;wBACrC,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,UAAU,CAAC;wBAC/C,aAAa;qBACd,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAY,EAAE,CAAC;oBACtB,uFAAuF;oBACvF,oFAAoF;oBACpF,OAAO,GAAG;wBACR,EAAE,EAAE,KAAK;wBACT,MAAM,EAAE,yBAAyB;wBACjC,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACzD,CAAC;gBACJ,CAAC;wBAAS,CAAC;oBACT,wFAAwF;oBACxF,sFAAsF;oBACtF,qFAAqF;oBACrF,qCAAqC;oBACrC,sBAAsB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;gBACxD,CAAC;gBAED,IAAI,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;oBAC5C,6DAA6D;oBAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;oBAClF,yFAAyF;oBACzF,EAAE;oBACF,2FAA2F;oBAC3F,2FAA2F;oBAC3F,yFAAyF;oBACzF,0FAA0F;oBAC1F,sFAAsF;oBACtF,EAAE;oBACF,qFAAqF;oBACrF,sFAAsF;oBACtF,sDAAsD;oBACtD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;oBAC9B,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAC/B,YAAY,EACZ,UAAU,EACV,QAAQ,CAAC,YAAY,EACrB,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAChF,CAAC;oBACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE;wBAC1C,UAAU;wBACV,YAAY,EAAE,QAAQ,CAAC,YAAY;wBACnC,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;wBACpC,YAAY,EAAE,QAAQ;wBACtB,aAAa;qBACd,CAAC,CAAC;oBACH,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;oBAEjB,IAAI,QAAQ,IAAI,0BAA0B,EAAE,CAAC;wBAC3C,wFAAwF;wBACxF,uFAAuF;wBACvF,EAAE;wBACF,wFAAwF;wBACxF,qFAAqF;wBACrF,qFAAqF;wBACrF,sFAAsF;wBACtF,uFAAuF;wBACvF,gFAAgF;wBAChF,EAAE;wBACF,oFAAoF;wBACpF,sFAAsF;wBACtF,sFAAsF;wBACtF,sFAAsF;wBACtF,kEAAkE;wBAClE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;wBACnE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;wBAClF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE;4BACpD,UAAU;4BACV,YAAY,EAAE,QAAQ,CAAC,YAAY;4BACnC,KAAK,EAAE,QAAQ;4BACf,aAAa;4BACb,sFAAsF;4BACtF,mFAAmF;4BACnF,qFAAqF;4BACrF,kFAAkF;4BAClF,iEAAiE;4BACjE,EAAE;4BACF,gFAAgF;4BAChF,qEAAqE;4BACrE,MAAM,EACJ,kCAAkC,QAAQ,wCAAwC;gCAClF,kFAAkF;gCAClF,iFAAiF;gCACjF,+EAA+E;gCAC/E,qBAAqB;yBACxB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;qBAAM,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;oBACtB,wFAAwF;oBACxF,uFAAuF;oBACvF,yFAAyF;oBACzF,yFAAyF;oBACzF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;oBAC5F,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,EAAE;wBAC7C,UAAU;wBACV,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,MAAM,EAAE,OAAO,CAAC,aAAa;wBAC7B,aAAa;qBACd,CAAC,CAAC;oBACH,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;wBACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE;4BAC3C,UAAU;4BACV,YAAY,EAAE,QAAQ,CAAC,YAAY;4BACnC,SAAS,EAAE,OAAO,CAAC,SAAS;4BAC5B,QAAQ,EAAE,KAAK;4BACf,aAAa;yBACd,CAAC,CAAC;wBACH,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;oBACxB,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,4BAA4B,EAAE;4BAC9C,UAAU;4BACV,YAAY,EAAE,QAAQ,CAAC,YAAY;4BACnC,SAAS,EAAE,OAAO,CAAC,SAAS;4BAC5B,MAAM,EAAE,OAAO,CAAC,eAAe;4BAC/B,aAAa;yBACd,CAAC,CAAC;wBACH,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;oBACvB,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,0BAA0B,EAAE;wBAC5C,UAAU;wBACV,YAAY,EAAE,QAAQ,CAAC,YAAY;wBACnC,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,QAAQ;wBACR,aAAa;qBACd,CAAC,CAAC;oBACH,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CACJ,YAAoB,EACpB,UAAkB,EAClB,SAAyC,EACzC,KAAa;QAEb,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAC/B,YAAY,EACZ,UAAU,EACV,CAAC,CAAC,YAAY,EACd,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CACpC,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"document-delivery.js","sourceRoot":"","sources":["../src/document-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAgHH;;;;;;;;;;;GAWG;AACH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAEnD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;AACrF,MAAM,CAAC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAE3F;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;AAE/D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,uBAAuB,CAAC;AAEtE,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5E,OAAO,mBAAmB,CAAC,GAAG,CAAE,CAAC;AACnC,CAAC;AAaD,MAAM,OAAO,gBAAgB;IAClB,MAAM,CAAgB;IACtB,UAAU,CAA4B;IACtC,OAAO,CAAS;IACzB,SAAS,GAAuC,IAAI,CAAC;IAErD,YAAY,KAAoB,EAAE,SAAoC,EAAE,MAAc;QACpF,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH;;;;OAIG;IACH,KAAK,CAAC,IAAI,CACR,YAAoB,EACpB,UAAmD,EACnD,KAAa,EACb,OAKI,EAAE;QAEN,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CACR,YAAoB,EACpB,UAAmD,EACnD,KAAa,EACb,IAIC;QAED,IAAI,sBAAsB,GAAG,4BAA4B,CAAC;QAC1D,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;QACvF,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,YAAY,CAAC;QAEzD,wFAAwF;QACxF,iFAAiF;QACjF,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,YAAY,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;QAE5E,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACzE,MAAM,MAAM,GAAuB;YACjC,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;SACzE,CAAC;QAEF,4FAA4F;QAC5F,0BAA0B;QAC1B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAmF,CAAC;QAC9G,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;gBACpB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YAC1C,IAAI,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;gBAClB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC;QAED,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,UAAU,EAAE,CAAC;YACpD,MAAM,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;YAC9C,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;gBAC5B,sFAAsF;gBACtF,iFAAiF;gBACjF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;oBACjD,UAAU;oBACV,OAAO,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;oBACrE,aAAa;iBACd,CAAC,CAAC;gBACH,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,YAAY,EAAE,CAAC;oBAC1C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;wBACrB,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAC7B,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,EACzD,KAAK,GAAG,8BAA8B,CACvC,CAAC;oBACJ,CAAC;oBACD,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;gBAC/B,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;YAE3C,KAAK,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,YAAY,EAAE,CAAC;gBACjD,iFAAiF;gBACjF,+EAA+E;gBAC/E,iDAAiD;gBACjD,IACE,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC;oBAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,OAAO,EAC1E,CAAC;oBACD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,CACvD,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,CAC/C,CAAC;oBACF,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;wBACjC,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;oBACjF,CAAC;oBACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,gCAAgC,EAAE;wBAClD,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,CAAC,MAAM,EAAE,aAAa;qBACxE,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBAED,IAAI,KAAoD,CAAC;gBACzD,IAAI,CAAC;oBACH,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;gBAC9E,CAAC;gBAAC,OAAO,GAAY,EAAE,CAAC;oBACtB,uFAAuF;oBACvF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,iCAAiC,EAAE;wBACnD,UAAU,EAAE,aAAa,EAAE,aAAa;wBACxC,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACzD,CAAC,CAAC;oBACH,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;wBACrB,kFAAkF;wBAClF,6EAA6E;wBAC7E,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAC7B,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,aAAa,EAChE,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC/B,CAAC;oBACJ,CAAC;oBACD,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC;oBAC/B,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;oBACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,oCAAoC,EAC5F,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,CACnE,CAAC;oBACF,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;wBACrB,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAC7B,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,aAAa,EAChE,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC/B,CAAC;oBACJ,CAAC;oBACD,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC;oBAC/B,SAAS;gBACX,CAAC;gBAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;oBAC9B,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;oBACtB,qFAAqF;oBACrF,8BAA8B;oBAC9B,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAC7B,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,YAAY,EAAE,aAAa,EAC9D,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CACjC,CAAC;oBACF,IAAI,OAAkE,CAAC;oBACvE,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBAClC,IAAI,CAAC;wBACH,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;4BACtC,WAAW,EAAE,aAAa;4BAC1B,UAAU;4BACV,QAAQ;4BACR,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC;4BAC/C,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,UAAU,CAAC;4BAC/C,aAAa;yBACd,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,GAAY,EAAE,CAAC;wBACtB,OAAO,GAAG;4BACR,EAAE,EAAE,KAAK;4BACT,MAAM,EAAE,yBAAyB;4BACjC,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;yBACzD,CAAC;oBACJ,CAAC;4BAAS,CAAC;wBACT,sBAAsB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;oBACxD,CAAC;oBAED,IAAI,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;wBAC5C,mFAAmF;wBACnF,mFAAmF;wBACnF,mFAAmF;wBACnF,8BAA8B;wBAC9B,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAC7B,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,YAAY,EAAE,aAAa,EAAE,KAAK,CACtE,CAAC;wBACF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CACxC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,YAAY,EAAE,aAAa,CAC/D,CAAC;wBACF,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAC7B,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,YAAY,EAAE,aAAa,EAC9D,KAAK,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAC9E,CAAC;wBACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE;4BAC1C,UAAU;4BACV,YAAY,EAAE,QAAQ,CAAC,YAAY;4BACnC,aAAa;4BACb,SAAS,EAAE,OAAO,CAAC,SAAS;4BAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;4BACpC,YAAY,EAAE,KAAK;4BACnB,aAAa;yBACd,CAAC,CAAC;wBACH,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;wBAEjB,IAAI,KAAK,IAAI,0BAA0B,EAAE,CAAC;4BACxC,+EAA+E;4BAC/E,iFAAiF;4BACjF,gFAAgF;4BAChF,IAAI,CAAC,MAAM,CAAC,2BAA2B,CACrC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,YAAY,EAAE,aAAa,EAAE,KAAK,CACtE,CAAC;4BACF,IAAI,CAAC,MAAM,CAAC,2BAA2B,CACrC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,YAAY,EAAE,KAAK,CACvD,CAAC;4BACF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE;gCACpD,UAAU;gCACV,YAAY,EAAE,QAAQ,CAAC,YAAY;gCACnC,aAAa;gCACb,KAAK;gCACL,aAAa;gCACb,MAAM,EACJ,kCAAkC,KAAK,sCAAsC;oCAC7E,8EAA8E;oCAC9E,4DAA4D;oCAC5D,4EAA4E;oCAC5E,qDAAqD;oCACrD,8EAA8E;oCAC9E,cAAc;6BACjB,CAAC,CAAC;4BACH,MAAM,YAAY,GAAG,cAAc;iCAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,aAAa,CAAC;iCAClC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;4BAC5E,IAAI,YAAY,EAAE,CAAC;gCACjB,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;gCACnE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE;oCAC1D,UAAU,EAAE,aAAa;iCAC1B,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC;oBACH,CAAC;yBAAM,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;wBACtB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CACzC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,YAAY,EAAE,aAAa,EAAE,KAAK,CACtE,CAAC;wBACF,uEAAuE;wBACvE,IAAI,CAAC,MAAM,CAAC,2BAA2B,CACrC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,YAAY,EAAE,KAAK,CACvD,CAAC;wBACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,EAAE;4BAC7C,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS;4BACvD,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE,aAAa;yBAC7C,CAAC,CAAC;wBACH,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;4BACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE;gCAC3C,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,aAAa;gCAC9D,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa;6BAC7D,CAAC,CAAC;4BACH,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;wBACxB,CAAC;6BAAM,CAAC;4BACN,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,4BAA4B,EAAE;gCAC9C,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,aAAa;gCAC9D,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,eAAe,EAAE,aAAa;6BAC7E,CAAC,CAAC;4BACH,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;wBACvB,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,0BAA0B,EAAE;4BAC5C,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,aAAa;4BAC9D,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC;4BAC1E,aAAa;yBACd,CAAC,CAAC;wBACH,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/document-frame-router.d.ts

@@ -76,7 +76,7 @@ import type { Logger } from "./types.js";
  * message and fires the doorbell exactly as before. Nothing about the conversation path changes.
  */
 /** Every document frame kind that can arrive on the session channel. */
-export type DocumentFrameKind = "update" | "ack" | "proposal" | "rejection" | "proposal_ack" | "control";
+export type DocumentFrameKind = "update" | "ack" | "proposal" | "rejection" | "proposal_ack" | "control" | "join_offer" | "join_answer" | "amendment";
 export type FrameRouting = {
     consumed: false;
 } | {
@@ -122,6 +122,20 @@ export interface DocumentFrameRouterDeps {
      * with nothing on their screen explaining why.
      */
     recordControl(ownerAgentId: string, wire: Uint8Array, nowMs: number): void;
+    /**
+     * M14B / DOD-MP-JOIN-1 — an admin's offer to a third party. Validated (the invitee REPLAYS the
+     * carried bytes) and recorded — pending or refused-with-reason, never dropped.
+     */
+    recordJoinOffer(ownerAgentId: string, wire: Uint8Array, nowMs: number): void;
+    /** The invitee's signed answer to an offer we authored. Settle-once. */
+    recordJoinAnswer(ownerAgentId: string, wire: Uint8Array, nowMs: number): void;
+    /**
+     * An amendment reaching an EXISTING holder — validated against our own chain
+     * (validate-before-append) and appended, so our derived participant set does not silently
+     * diverge from the amender's (§7-1's hazard). Best-effort delivery at P1; the inbound epoch
+     * gate makes a missed one loud.
+     */
+    recordAmendment(ownerAgentId: string, wire: Uint8Array, nowMs: number): void;
     /**
      * Tell the sender what happened to their envelope — admitted or refused, both of which SETTLE it.
      *

package/dist/document-frame-router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"document-frame-router.d.ts","sourceRoot":"","sources":["../src/document-frame-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AAWH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC;;;;;GAKG;AACH,wEAAwE;AACxE,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,KAAK,GACL,UAAU,GACV,WAAW,GACX,cAAc,GACd,SAAS,CAAC;AAEd,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,GACnB;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9E;;;;;;;GAOG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,GACnB;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAEhD,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,eAAe,CAAC;IACzB,UAAU,EAAE,kBAAkB,CAAC;IAC/B;;;;;OAKG;IACH,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5E,wEAAwE;IACxE,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7E;;;OAGG;IACH,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/E;;;;OAIG;IACH,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3E;;;;;OAKG;IACH;;;;;;OAMG;IACH,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E;;;;;;;;;OASG;IACH,mBAAmB,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1E,iGAAiG;IACjG,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClG,OAAO,CACL,YAAY,EAAE,MAAM;IACpB,+FAA+F;IAC/F,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE;QACP,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,OAAO,CAAC;QAClB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,aAAa,EAAE,MAAM,CAAC;KACvB,GACA,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB;;;;;;;;;;;;;;;;OAgBG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC9C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,mBAAmB;;gBAKlB,IAAI,EAAE,uBAAuB;IAIzC;;;;;;;OAOG;IACH;;;;;;OAMG;IACH,SAAS,CACP,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GACpB,mBAAmB;IA2EtB,oGAAoG;IAC9F,KAAK,CACT,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,YAAY,CAAC;CA2JzB;AAED;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAE5C;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB,QAAkB,CAAC"}
+{"version":3,"file":"document-frame-router.d.ts","sourceRoot":"","sources":["../src/document-frame-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AAcH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC;;;;;GAKG;AACH,wEAAwE;AACxE,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,KAAK,GACL,UAAU,GACV,WAAW,GACX,cAAc,GACd,SAAS,GACT,YAAY,GACZ,aAAa,GACb,WAAW,CAAC;AAEhB,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,GACnB;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9E;;;;;;;GAOG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,GACnB;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAEhD,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,eAAe,CAAC;IACzB,UAAU,EAAE,kBAAkB,CAAC;IAC/B;;;;;OAKG;IACH,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5E,wEAAwE;IACxE,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7E;;;OAGG;IACH,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/E;;;;OAIG;IACH,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3E;;;OAGG;IACH,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7E,wEAAwE;IACxE,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9E;;;;;OAKG;IACH,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7E;;;;;OAKG;IACH;;;;;;OAMG;IACH,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E;;;;;;;;;OASG;IACH,mBAAmB,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1E,iGAAiG;IACjG,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClG,OAAO,CACL,YAAY,EAAE,MAAM;IACpB,+FAA+F;IAC/F,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE;QACP,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,OAAO,CAAC;QAClB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,aAAa,EAAE,MAAM,CAAC;KACvB,GACA,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB;;;;;;;;;;;;;;;;OAgBG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC9C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,mBAAmB;;gBAKlB,IAAI,EAAE,uBAAuB;IAIzC;;;;;;;OAOG;IACH;;;;;;OAMG;IACH,SAAS,CACP,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GACpB,mBAAmB;IA2EtB,oGAAoG;IAC9F,KAAK,CACT,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,YAAY,CAAC;CAuKzB;AAED;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAE5C;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB,QAAkB,CAAC"}

package/dist/document-frame-router.js

@@ -66,7 +66,7 @@
  *
  * The guard must never again be described as what makes hostile input safe. It was, and it was not.
  */
-import { decodeCbor, decodeDocumentUpdateEnvelope, decodeDocumentAck, decodeDocumentProposal, decodeDocumentRejection, decodeDocumentProposalAck, decodeDocumentControl, } from "@cello-protocol/protocol-types";
+import { decodeCbor, decodeDocumentUpdateEnvelope, decodeDocumentAck, decodeDocumentProposal, decodeDocumentRejection, decodeDocumentProposalAck, decodeDocumentControl, decodeDocumentJoinOffer, decodeDocumentJoinAnswer, decodeDocumentAmendment, } from "@cello-protocol/protocol-types";
 export class DocumentFrameRouter {
     #d;
     /** One promise chain per owning agent — the serialization point. See `#enqueue`. */
@@ -295,6 +295,18 @@ export class DocumentFrameRouter {
                 this.#d.recordControl(ownerAgentId, content, nowMs);
                 return { consumed: true, kind, ok: true };
             }
+            if (kind === "join_offer") {
+                this.#d.recordJoinOffer(ownerAgentId, content, nowMs);
+                return { consumed: true, kind, ok: true };
+            }
+            if (kind === "join_answer") {
+                this.#d.recordJoinAnswer(ownerAgentId, content, nowMs);
+                return { consumed: true, kind, ok: true };
+            }
+            if (kind === "amendment") {
+                this.#d.recordAmendment(ownerAgentId, content, nowMs);
+                return { consumed: true, kind, ok: true };
+            }
             const res = this.#d.ackInbound.receive(ownerAgentId, content, nowMs, correlationId);
             return { consumed: true, kind, ok: res.ok, reason: res.ok ? undefined : res.reason };
         }
@@ -415,6 +427,15 @@ function classify(content) {
             case "document_control":
                 decodeDocumentControl(content);
                 return "control";
+            case "document_join_offer":
+                decodeDocumentJoinOffer(content);
+                return "join_offer";
+            case "document_join_answer":
+                decodeDocumentJoinAnswer(content);
+                return "join_answer";
+            case "document_amendment":
+                decodeDocumentAmendment(content);
+                return "amendment";
             default:
                 // A frame type this build does not know. Reported by the caller rather than silently
                 // treated as conversation — see `routeSync`.