@cello-protocol/daemon 0.0.167 → 0.0.169

package/dist/document-join-store.js

@@ -1,197 +0,0 @@
-/**
- * DOD-MP-JOIN-1 (daemon half) — the join-offer store: pending consent, both roles, settle-once.
- *
- * One table for both sides of a join (the `document_proposals` precedent): the INVITEE holds the
- * offer they received — as RECEIVED BYTES, validated before recording — and the INVITER holds the
- * offer they authored plus the invitee's signed answer when it arrives. Keyed on
- * `(owner, amendment_hash)`: the admitting amendment is the fact being consented to, and a
- * re-invitation after a refusal is a new amendment with a new hash — a new row, never a
- * reopened one.
- *
- * A refused-at-arrival offer (bad chain, wrong invitee, version mismatch) is RECORDED refused
- * with its reason rather than dropped — a dropped offer is indistinguishable from an inviter who
- * never sent one.
- */
-import { decodeDocumentJoinOffer, decodeDocumentJoinAnswer, buildDocumentJoinAnswerTbs, } from "@cello-protocol/protocol-types";
-const CREATE_SQL = `
-  CREATE TABLE IF NOT EXISTS document_join_offers (
-    owner_agent_id   TEXT    NOT NULL,
-    document_id      TEXT    NOT NULL,
-    amendment_hash   TEXT    NOT NULL,
-    role             TEXT    NOT NULL,
-    inviter_agent_id TEXT    NOT NULL,
-    invitee_agent_id TEXT    NOT NULL,
-    received_bytes   BLOB    NOT NULL,
-    state            TEXT    NOT NULL,
-    reason           TEXT,
-    answer_bytes     BLOB,
-    created_at       INTEGER NOT NULL,
-    decided_at       INTEGER,
-    PRIMARY KEY (owner_agent_id, amendment_hash)
-  );
-`;
-export class DocumentJoinStore {
-    #db;
-    #logger;
-    constructor(db, logger) {
-        this.#db = db;
-        this.#logger = logger;
-        this.#db.exec(CREATE_SQL);
-    }
-    /**
-     * Record an ARRIVING offer under the invitee's key — already validated by the caller; a
-     * validation refusal is recorded as `refused` with its reason, never dropped. First arrival's
-     * bytes are the permanent record; a redelivery changes nothing.
-     */
-    recordIncoming(ownerAgentId, wire, amendmentHash, verdict, nowMs) {
-        const offer = decodeDocumentJoinOffer(wire);
-        this.#db
-            .prepare(`INSERT INTO document_join_offers
-           (owner_agent_id, document_id, amendment_hash, role, inviter_agent_id, invitee_agent_id,
-            received_bytes, state, reason, created_at, decided_at)
-         VALUES (?, ?, ?, 'invitee', ?, ?, ?, ?, ?, ?, ?)
-         ON CONFLICT (owner_agent_id, amendment_hash) DO NOTHING`)
-            .run(ownerAgentId, offer.document_id, amendmentHash, offer.inviter_agent_id, offer.invitee_agent_id, Buffer.from(wire), verdict.state, verdict.state === "refused" ? verdict.reason : null, nowMs, verdict.state === "refused" ? nowMs : null);
-        // Read back — on a redelivery the INSERT did nothing and the operator's earlier decision
-        // stands; reporting our intended state would announce a decided offer as pending.
-        const stored = this.get(ownerAgentId, amendmentHash);
-        const state = stored?.state ?? verdict.state;
-        const reason = stored?.reason ?? (verdict.state === "refused" ? verdict.reason : undefined);
-        this.#logger.info("document.join.offer_recorded", {
-            documentId: offer.document_id,
-            amendmentHash,
-            state,
-        });
-        return { state, ...(reason ? { reason } : {}) };
-    }
-    /** Record an offer WE authored, pending the invitee's answer. */
-    recordOutgoing(ownerAgentId, wire, amendmentHash, nowMs) {
-        const offer = decodeDocumentJoinOffer(wire);
-        this.#db
-            .prepare(`INSERT INTO document_join_offers
-           (owner_agent_id, document_id, amendment_hash, role, inviter_agent_id, invitee_agent_id,
-            received_bytes, state, reason, created_at, decided_at)
-         VALUES (?, ?, ?, 'inviter', ?, ?, ?, 'pending', NULL, ?, NULL)
-         ON CONFLICT (owner_agent_id, amendment_hash) DO NOTHING`)
-            .run(ownerAgentId, offer.document_id, amendmentHash, offer.inviter_agent_id, offer.invitee_agent_id, Buffer.from(wire), nowMs);
-    }
-    /**
-     * The INVITEE's local decision. Settle-once: only a pending row decides, and the caller learns
-     * whether THIS call decided it — an already-decided offer is a fact to report, not an error.
-     */
-    decide(ownerAgentId, amendmentHash, accepted, reason, nowMs) {
-        const r = this.#db
-            .prepare(`UPDATE document_join_offers
-            SET state = ?, reason = ?, decided_at = ?
-          WHERE owner_agent_id = ? AND amendment_hash = ? AND role = 'invitee' AND state = 'pending'`)
-            .run(accepted ? "accepted" : "refused", reason, nowMs, ownerAgentId, amendmentHash);
-        const stored = this.get(ownerAgentId, amendmentHash);
-        return { decided: (r.changes ?? 0) > 0, state: stored?.state ?? "pending" };
-    }
-    /**
-     * Record the invitee's signed ANSWER on the inviter's side. The caller verifies the signature
-     * against the invitee named in the STORED offer first. Settle-once: a contradicting second
-     * answer is refused with both records retained (the stored answer stands).
-     */
-    recordAnswer(ownerAgentId, wire, verify, nowMs) {
-        const answer = decodeDocumentJoinAnswer(wire);
-        const stored = this.get(ownerAgentId, answer.amendment_hash);
-        if (!stored || stored.role !== "inviter") {
-            return {
-                ok: false,
-                reason: `join_answer_unknown_offer: no offer of ours is settled by amendment ` +
-                    `${answer.amendment_hash.slice(0, 16)}…`,
-            };
-        }
-        if (answer.invitee_agent_id !== stored.inviteeAgentId) {
-            return {
-                ok: false,
-                reason: `join_answer_wrong_invitee: the answer names ${answer.invitee_agent_id} and the ` +
-                    `offer invited ${stored.inviteeAgentId}`,
-            };
-        }
-        if (!verify(stored.inviteeAgentId, buildDocumentJoinAnswerTbs(answer), answer.signature)) {
-            return {
-                ok: false,
-                reason: `join_answer_signature_invalid: the answer does not verify against the invitee ` +
-                    `${stored.inviteeAgentId}`,
-            };
-        }
-        if (stored.state !== "pending") {
-            const contradicts = (stored.state === "accepted") !== answer.accepted;
-            if (contradicts) {
-                this.#logger.error("document.join.answer_contradiction", {
-                    documentId: stored.documentId,
-                    amendmentHash: answer.amendment_hash,
-                    stored: stored.state,
-                    arriving: answer.accepted ? "accepted" : "refused",
-                });
-                return {
-                    ok: false,
-                    reason: "join_answer_contradiction: this offer was already settled with the opposite answer — " +
-                        "settle once; both signed answers are retained in the log",
-                };
-            }
-            return { ok: true, answer, settled: false };
-        }
-        this.#db
-            .prepare(`UPDATE document_join_offers
-            SET state = ?, reason = ?, answer_bytes = ?, decided_at = ?
-          WHERE owner_agent_id = ? AND amendment_hash = ? AND state = 'pending'`)
-            .run(answer.accepted ? "accepted" : "refused", answer.refusal_reason, Buffer.from(wire), nowMs, ownerAgentId, answer.amendment_hash);
-        this.#logger.info("document.join.answer_recorded", {
-            documentId: stored.documentId,
-            amendmentHash: answer.amendment_hash,
-            accepted: answer.accepted,
-        });
-        return { ok: true, answer, settled: true };
-    }
-    get(ownerAgentId, amendmentHash) {
-        const r = this.#db
-            .prepare(`SELECT * FROM document_join_offers WHERE owner_agent_id = ? AND amendment_hash = ?`)
-            .get(ownerAgentId, amendmentHash);
-        return r ? rowToRecord(r) : null;
-    }
-    /** Auto-refused arrivals — surfaced so the refusal sentence reaches an operator. */
-    refusedFor(ownerAgentId) {
-        const rows = this.#db
-            .prepare(`SELECT * FROM document_join_offers
-          WHERE owner_agent_id = ? AND role = 'invitee' AND state = 'refused'
-          ORDER BY created_at ASC`)
-            .all(ownerAgentId);
-        return rows.map(rowToRecord);
-    }
-    /** Offers THIS owner authored — the inviter's view of who has answered what. */
-    outgoingFor(ownerAgentId) {
-        const rows = this.#db
-            .prepare(`SELECT * FROM document_join_offers
-          WHERE owner_agent_id = ? AND role = 'inviter'
-          ORDER BY created_at ASC`)
-            .all(ownerAgentId);
-        return rows.map(rowToRecord);
-    }
-    /** Offers awaiting THIS owner's consent — the inbox surface. */
-    pendingFor(ownerAgentId) {
-        const rows = this.#db
-            .prepare(`SELECT * FROM document_join_offers
-          WHERE owner_agent_id = ? AND role = 'invitee' AND state = 'pending'
-          ORDER BY created_at ASC`)
-            .all(ownerAgentId);
-        return rows.map(rowToRecord);
-    }
-}
-function rowToRecord(r) {
-    return {
-        documentId: r["document_id"],
-        amendmentHash: r["amendment_hash"],
-        role: r["role"],
-        inviterAgentId: r["inviter_agent_id"],
-        inviteeAgentId: r["invitee_agent_id"],
-        offer: decodeDocumentJoinOffer(new Uint8Array(r["received_bytes"])),
-        state: r["state"],
-        reason: r["reason"] ?? null,
-        createdAtMs: r["created_at"],
-        decidedAtMs: r["decided_at"] ?? null,
-    };
-}
-//# sourceMappingURL=document-join-store.js.map

package/dist/document-join-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"document-join-store.js","sourceRoot":"","sources":["../src/document-join-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,GAG3B,MAAM,gCAAgC,CAAC;AAIxC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;CAgBlB,CAAC;AAkBF,MAAM,OAAO,iBAAiB;IACnB,GAAG,CAAiB;IACpB,OAAO,CAAS;IAEzB,YAAY,EAAkB,EAAE,MAAc;QAC5C,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC;IAED;;;;OAIG;IACH,cAAc,CACZ,YAAoB,EACpB,IAAgB,EAChB,aAAqB,EACrB,OAAoE,EACpE,KAAa;QAEb,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG;aACL,OAAO,CACN;;;;iEAIyD,CAC1D;aACA,GAAG,CACF,YAAY,EACZ,KAAK,CAAC,WAAW,EACjB,aAAa,EACb,KAAK,CAAC,gBAAgB,EACtB,KAAK,CAAC,gBAAgB,EACtB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EACjB,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EACnD,KAAK,EACL,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAC3C,CAAC;QACJ,yFAAyF;QACzF,kFAAkF;QAClF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5F,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,8BAA8B,EAAE;YAChD,UAAU,EAAE,KAAK,CAAC,WAAW;YAC7B,aAAa;YACb,KAAK;SACN,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAClD,CAAC;IAED,iEAAiE;IACjE,cAAc,CAAC,YAAoB,EAAE,IAAgB,EAAE,aAAqB,EAAE,KAAa;QACzF,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG;aACL,OAAO,CACN;;;;iEAIyD,CAC1D;aACA,GAAG,CACF,YAAY,EACZ,KAAK,CAAC,WAAW,EACjB,aAAa,EACb,KAAK,CAAC,gBAAgB,EACtB,KAAK,CAAC,gBAAgB,EACtB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EACjB,KAAK,CACN,CAAC;IACN,CAAC;IAED;;;OAGG;IACH,MAAM,CACJ,YAAoB,EACpB,aAAqB,EACrB,QAAiB,EACjB,MAAqB,EACrB,KAAa;QAEb,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG;aACf,OAAO,CACN;;qGAE6F,CAC9F;aACA,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QACrD,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,SAAS,EAAE,CAAC;IAC9E,CAAC;IAED;;;;OAIG;IACH,YAAY,CACV,YAAoB,EACpB,IAAgB,EAChB,MAA4E,EAC5E,KAAa;QAEb,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EACJ,sEAAsE;oBACtE,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG;aAC3C,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,gBAAgB,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;YACtD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,+CAA+C,MAAM,CAAC,gBAAgB,WAAW;oBACvF,iBAAiB,MAAM,CAAC,cAAc,EAAE;aAC3C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,0BAA0B,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACzF,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,gFAAgF;oBACtF,GAAG,MAAM,CAAC,cAAc,EAAE;aAC7B,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,WAAW,GACf,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC;YACpD,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE;oBACvD,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,aAAa,EAAE,MAAM,CAAC,cAAc;oBACpC,MAAM,EAAE,MAAM,CAAC,KAAK;oBACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;iBACnD,CAAC,CAAC;gBACH,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EACJ,uFAAuF;wBACvF,0DAA0D;iBAC7D,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,GAAG;aACL,OAAO,CACN;;gFAEwE,CACzE;aACA,GAAG,CACF,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EACxC,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EACjB,KAAK,EACL,YAAY,EACZ,MAAM,CAAC,cAAc,CACtB,CAAC;QACJ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,+BAA+B,EAAE;YACjD,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,aAAa,EAAE,MAAM,CAAC,cAAc;YACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,GAAG,CAAC,YAAoB,EAAE,aAAqB;QAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG;aACf,OAAO,CACN,oFAAoF,CACrF;aACA,GAAG,CAAC,YAAY,EAAE,aAAa,CAAwC,CAAC;QAC3E,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnC,CAAC;IAED,oFAAoF;IACpF,UAAU,CAAC,YAAoB;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN;;kCAE0B,CAC3B;aACA,GAAG,CAAC,YAAY,CAAmC,CAAC;QACvD,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,gFAAgF;IAChF,WAAW,CAAC,YAAoB;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN;;kCAE0B,CAC3B;aACA,GAAG,CAAC,YAAY,CAAmC,CAAC;QACvD,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,gEAAgE;IAChE,UAAU,CAAC,YAAoB;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN;;kCAE0B,CAC3B;aACA,GAAG,CAAC,YAAY,CAAmC,CAAC;QACvD,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;CACF;AAED,SAAS,WAAW,CAAC,CAA0B;IAC7C,OAAO;QACL,UAAU,EAAE,CAAC,CAAC,aAAa,CAAW;QACtC,aAAa,EAAE,CAAC,CAAC,gBAAgB,CAAW;QAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,CAAkB;QAChC,cAAc,EAAE,CAAC,CAAC,kBAAkB,CAAW;QAC/C,cAAc,EAAE,CAAC,CAAC,kBAAkB,CAAW;QAC/C,KAAK,EAAE,uBAAuB,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAe,CAAC,CAAC;QACjF,KAAK,EAAE,CAAC,CAAC,OAAO,CAAmB;QACnC,MAAM,EAAG,CAAC,CAAC,QAAQ,CAAmB,IAAI,IAAI;QAC9C,WAAW,EAAE,CAAC,CAAC,YAAY,CAAW;QACtC,WAAW,EAAG,CAAC,CAAC,YAAY,CAAmB,IAAI,IAAI;KACxD,CAAC;AACJ,CAAC"}