@cello-protocol/daemon 0.0.181 → 0.0.182

package/dist/manifest-validity.js

@@ -0,0 +1,268 @@
+/**
+ * DOD-M15-MANIFEST-EXPIRY-LIVE-1 — a running daemon notices its own trust anchor expiring.
+ *
+ * ─── The gap ───────────────────────────────────────────────────────────────────────────────────
+ *
+ The consortium manifest's validity window is enforced at boot (`verifyStartupManifest`) and, after
+ * that, in exactly ONE consumer: `signal-submission.ts` re-checks the HELD manifest at request time
+ * and refuses. Nothing else does — not directory identity authentication, not the ceremony roster.
+ *
+ * (An earlier version of this header said nothing re-checked the held manifest at all. That was
+ * wrong — the third false claim I have shipped in three units — and the correction matters, because
+ * the real shape is not "unchecked" but INCONSISTENT: the daemon refuses the lowest-stakes consumer
+ * and permits the two highest-stakes ones, invisibly. See the decision note below.)
+ *
+ * There is also a check that reads like coverage and is not: `http-manifest-poll.ts` refuses to
+ * ADOPT an expired manifest. That checks the manifest being FETCHED, never the one already held — so
+ * a daemon whose anchor has lapsed keeps polling, keeps correctly refusing expired replacements, and
+ * keeps using the expired anchor it already has.
+ *
+ * On the PRODUCTION DEFAULT it is worse: the bundled-manifest path wires no poll scheduler at all
+ * ("the bundled roster is static"), so there is not even a fetch that might have noticed.
+ *
+ * ─── Why it matters, concretely ────────────────────────────────────────────────────────────────
+ *
+ The manifest is the trust anchor for directory identity authentication (step 6) and for the node
+ * roster a threshold ceremony draws from — both re-read `getCurrentManifest()` at request time, so
+ * both genuinely run on whatever is held.
+ *
+ * What expiry means precisely (review F10, correcting my own overstatement): it is the NOTICE that
+ * the anchor may be out of date, not the mechanism by which it becomes so. The daemon trusts the
+ * identical roster the day BEFORE expiry; what keeps a removed node trusted is never having adopted
+ * v+1. So the accurate statement is that past expiry there is NO ASSURANCE the enforced roster is
+ * current — a node removed since then would still be trusted, and nothing here can say whether one
+ * was.
+ *
+ * ─── Found the wrong way round ─────────────────────────────────────────────────────────────────
+ *
+ * `DOD-M15-STALEROSTER-1` shipped a guidance string blaming an expired manifest for a state an
+ * expired manifest cannot reach (that daemon refuses to start). Review corrected it and pointed at
+ * where the hazard actually lives — here. After that unit, a daemon in this state reports its roster
+ * reading as `stale: false`: a confidently fresh measurement taken against a dead anchor, which is
+ * worse than the stale reading that line existed to fix.
+ *
+ * ─── Decision: report, do not kill ─────────────────────────────────────────────────────────────
+ *
+ A daemon does NOT tear itself down at the expiry instant. §2b invariant 2 backs this explicitly —
+ * *"Loud does not mean blocking… treating every failure as fatal is its own defect."*
+ *
+ * But review corrected the FRAMING, and the correction is worth keeping: the availability argument I
+ * originally made does not survive. The fleet-wide stop I claimed to be avoiding happens anyway, at
+ * each operator's next restart, via ADV-002 — report-only DEFERS that outage, it does not prevent
+ * it. The honest reason to warn rather than kill is that a wall-clock boundary is a bad trigger for
+ * tearing down live conversations, not that it avoids the outage.
+ *
+ * The real question was never global report-vs-kill; it is PER CONSUMER, and the repo has already
+ * ruled on one of them inconsistently. `signal-submission.ts` refuses a trust-signal submission on
+ * expiry, while `register-handler.ts` deals a FROST share against a roster re-resolved from the same
+ * lapsed manifest with no gate, and the challenge verifier authenticates a directory against it with
+ * no gate. **The daemon refuses its lowest-stakes consumer and permits its two highest-stakes ones.**
+ * That is not defended anywhere; it is carried as `DOD-M15-EXPIRY-CONSUMER-POLICY-1` rather than
+ * settled inside a reporting unit.
+ */
+/**
+ * How long before expiry the warning starts.
+ *
+ * Warning at the expiry instant is useless — the operator finds out once they are already running
+ * on a dead anchor. Seven days is chosen to cover a weekend plus the working days either side, which
+ * is the realistic floor for noticing an alert and rotating a threshold-signed artefact.
+ */
+export const MANIFEST_EXPIRY_WARNING_MS = 7 * 86_400_000;
+/**
+ * Where does this manifest sit in its validity window, as of `nowMs`?
+ *
+ * Clock injected so the boundaries are tested exactly rather than approximately.
+ */
+export function classifyManifestValidity(manifest, nowMs) {
+    if (!manifest)
+        return { state: "not_configured" };
+    const expiresMs = Date.parse(manifest.expires);
+    /**
+     * AN UNREADABLE EXPIRY IS EXPIRED.
+     *
+     * `new Date("nonsense") <= now` is FALSE — every comparison against NaN is false — so the
+     * startup check's own shape waves a garbage timestamp through as though it were in-window. Valid
+     * is the answer that costs security here, so nothing unmeasurable may reach it.
+     */
+    if (Number.isNaN(expiresMs))
+        return { state: "expired", expires: manifest.expires, secondsSince: 0 };
+    /**
+     * AN UNREADABLE `not_before` FAILS CLOSED TOO — review F3, and it was my own defect sitting
+     * directly under the comment above claiming it could not happen.
+     *
+     * The first cut wrote `if (!Number.isNaN(notBeforeMs) && nowMs < notBeforeMs)`, which SKIPS the
+     * window-open check entirely when the field is garbage and falls through to a possible `valid`.
+     * So `not_before: "2026-13-01T00:00:00Z"` — month thirteen, the shape a hand-edited or
+     * generator-bugged artefact actually has — classified as valid, contributed nothing to the status
+     * surface, and logged nothing. I handled the same case correctly for `expires` eleven lines up and
+     * then wrote the inverted guard for `not_before`, under a comment asserting the property.
+     *
+     * `signal-submission.ts` already had this right (`!Number.isFinite(expiresAt) || expiresAt <= now`)
+     * and is the precedent.
+     */
+    const notBeforeMs = Date.parse(manifest.not_before);
+    if (Number.isNaN(notBeforeMs)) {
+        return { state: "unreadable_window", notBefore: manifest.not_before };
+    }
+    if (nowMs < notBeforeMs) {
+        return { state: "not_yet_valid", notBefore: manifest.not_before };
+    }
+    if (expiresMs <= nowMs) {
+        return { state: "expired", expires: manifest.expires, secondsSince: Math.floor((nowMs - expiresMs) / 1000) };
+    }
+    const remainingMs = expiresMs - nowMs;
+    const secondsRemaining = Math.floor(remainingMs / 1000);
+    // The constant directly, not an injectable parameter — review F9. A `warningMs` argument had no
+    // caller anywhere, and it was the ONE seam by which the two surfaces could ever disagree: the
+    // status path could not pass a custom window while the watch could. An unused knob whose only
+    // possible effect is drift between two readings of the same fact.
+    return remainingMs <= MANIFEST_EXPIRY_WARNING_MS
+        ? { state: "expiring_soon", expires: manifest.expires, secondsRemaining }
+        : { state: "valid", expires: manifest.expires, secondsRemaining };
+}
+/** What to actually DO about a manifest that needs replacing, given where it came from. */
+function remedyFor(origin) {
+    return origin === "bundled"
+        ? "This daemon uses the COMPILED-IN consortium manifest, so there is no file to replace: " +
+            "upgrade the @cello-protocol/connect package to get a newer one. Do NOT repoint " +
+            "CELLO_DIRECTORY_URL to get past this — an endpoint that is not byte-equal to a bundled one " +
+            "makes the daemon start with directory identity authentication switched off, which is a " +
+            "weaker client than the one you are trying to fix."
+        : "Replace the manifest file at CELLO_CONSORTIUM_MANIFEST with a current one.";
+}
+export function describeManifestValidity(v, origin = "file") {
+    /**
+     * `valid` contributes nothing — correct, and the rule this milestone repeats most.
+     *
+     * `not_configured` USED TO collapse into that silence, and it was the same defect one spread
+     * above: a daemon holding NO consortium manifest at all rendered byte-identically to one holding
+     * a fully valid, in-window trust anchor. Found by `DOD-M15-DIRAUTH-1`'s review, which noticed it
+     * is the exact condition that unit was writing 100+ lines to expose — same daemon, same boot.
+     *
+     * "Absent" and "healthy" must not look alike. That is `STALEROSTER-1`'s rule and it applies to the
+     * anchor as much as to the roster reading.
+     */
+    if (v.state === "valid")
+        return undefined;
+    if (v.state === "not_configured") {
+        return {
+            manifest_anchor: "none",
+            manifest_validity_guidance: "There is NO consortium manifest on this daemon, so there is no trust anchor to have a " +
+                "validity window at all — the absence of an expiry warning here is not evidence of a healthy " +
+                "one. Directory identity authentication is off for the same reason; see " +
+                "directory_authentication for what that costs and how to turn it on.",
+        };
+    }
+    if (v.state === "unreadable_window") {
+        return {
+            manifest_expired: false,
+            manifest_window_unreadable: true,
+            manifest_valid_from: v.notBefore,
+            manifest_validity_guidance: `The consortium manifest's not_before field cannot be parsed as a date (got ` +
+                `${JSON.stringify(v.notBefore)}), so this daemon cannot tell whether its trust anchor's ` +
+                "validity window has even opened. This is a MALFORMED manifest rather than a stale one — " +
+                "the usual causes are a hand-edited file or a broken generator. " + remedyFor(origin),
+        };
+    }
+    if (v.state === "not_yet_valid") {
+        return {
+            manifest_expired: false,
+            manifest_not_yet_valid: true,
+            manifest_valid_from: v.notBefore,
+            manifest_validity_guidance: `The consortium manifest does not become valid until ${v.notBefore}, and this daemon is ` +
+                "still running against it. Either this machine's clock is wrong — the common cause, and the " +
+                "one to check first — or a manifest was rotated in ahead of its window. " + remedyFor(origin),
+        };
+    }
+    if (v.state === "expiring_soon") {
+        const days = Math.floor(v.secondsRemaining / 86_400);
+        return {
+            manifest_expired: false,
+            manifest_expires_at: v.expires,
+            manifest_expires_in_days: days,
+            manifest_validity_guidance: `The consortium manifest expires in ${days} day(s), at ${v.expires}. Rotate it before then. ` +
+                "After expiry this daemon KEEPS RUNNING on the old manifest — it does not fail closed the " +
+                "way startup does — so nothing will stop working at the deadline and nothing will announce " +
+                "it except this field and one log line. A daemon RESTARTED after expiry will refuse to " +
+                "start, which is how this usually gets discovered, at the worst moment. " + remedyFor(origin),
+        };
+    }
+    const days = Math.floor(v.secondsSince / 86_400);
+    return {
+        manifest_expired: true,
+        manifest_expires_at: v.expires,
+        manifest_expired_days_ago: days,
+        manifest_validity_guidance: `The consortium manifest EXPIRED at ${v.expires} (${days} day(s) ago) and this daemon is ` +
+            "still running on it. Its signatures no longer warrant the current consortium, so directory " +
+            "identity authentication and the threshold-ceremony roster are both being drawn from an " +
+            "anchor that has lapsed, so this daemon has NO ASSURANCE that the roster it enforces is the " +
+            "current one. A node removed from the consortium since then would still be trusted here, and " +
+            "nothing in this daemon can tell you whether one was. " + remedyFor(origin) + " Do NOT simply " +
+            "restart to clear this — a restart will REFUSE to start (startup fails closed on an expired " +
+            "manifest), so restarting without a fresh manifest turns a degraded daemon into a dead one.",
+    };
+}
+/**
+ * A check to call periodically, which logs each TRANSITION once.
+ *
+ * Returns a function rather than owning a timer: the roster sweep already ticks every 90–180 s on
+ * exactly the path where a manifest provider exists, so this rides it. A second timer measuring the
+ * same subsystem would be two things to stop, two things to test, and two places for the interval
+ * to drift out of agreement with the freshness bound.
+ *
+ * The latch is keyed on the STATE PLUS the expiry string, so rotating the manifest re-arms it. A
+ * bare boolean would mean an operator who rotated once could never be warned again — the warning
+ * would have been spent on a manifest that is no longer installed.
+ */
+export function startManifestValidityWatch(opts) {
+    const { getManifest, logger, now = Date.now } = opts;
+    let lastReported = null;
+    return () => {
+        const v = classifyManifestValidity(getManifest(), now());
+        const key = v.state === "not_configured" ? "not_configured"
+            : v.state === "not_yet_valid" || v.state === "unreadable_window" ? `${v.state}:${v.notBefore}`
+                : `${v.state}:${v.expires}`;
+        if (key === lastReported)
+            return v;
+        lastReported = key;
+        if (v.state === "expired") {
+            logger.error("directory.auth.manifest.expired.live", {
+                expiresAt: v.expires,
+                expiredDaysAgo: Math.floor(v.secondsSince / 86_400),
+                impact: "the daemon is STILL RUNNING on this manifest. Directory identity authentication and the " +
+                    "threshold-ceremony roster are drawn from it at request time, so there is NO ASSURANCE " +
+                    "the enforced roster is the current one — a node removed since then would still be " +
+                    "trusted, and nothing here can say whether one was.",
+                guidance: "Replace the manifest (a file at CELLO_CONSORTIUM_MANIFEST, or an @cello-protocol/connect " +
+                    "upgrade if this daemon uses the compiled-in one). Do not restart to clear it: startup " +
+                    "fails closed on an expired manifest, so a restart without a fresh one turns a degraded " +
+                    "daemon into a dead one.",
+            });
+        }
+        else if (v.state === "expiring_soon") {
+            logger.warn("directory.auth.manifest.expiring", {
+                expiresAt: v.expires,
+                daysRemaining: Math.floor(v.secondsRemaining / 86_400),
+                impact: "after this date the daemon keeps running on the expired manifest rather than failing closed.",
+                guidance: "Rotate before the date. A daemon RESTARTED after it will refuse to start.",
+            });
+        }
+        else if (v.state === "unreadable_window") {
+            logger.error("directory.auth.manifest.window.unreadable", {
+                notBefore: v.notBefore,
+                impact: "the manifest's not_before field does not parse as a date, so this daemon cannot tell " +
+                    "whether its trust anchor's validity window has opened. It is running against it anyway.",
+                guidance: "The manifest is MALFORMED, not stale — a hand-edited file or a broken generator. Replace it.",
+            });
+        }
+        else if (v.state === "not_yet_valid") {
+            logger.error("directory.auth.manifest.not.yet.valid.live", {
+                notBefore: v.notBefore,
+                impact: "the daemon is running against a manifest whose validity window has not opened.",
+                guidance: "Check this machine's clock first — that is the common cause.",
+            });
+        }
+        return v;
+    };
+}
+//# sourceMappingURL=manifest-validity.js.map

package/dist/manifest-validity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-validity.js","sourceRoot":"","sources":["../src/manifest-validity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AAIH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,GAAG,UAAU,CAAC;AAkBzD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAA+E,EAC/E,KAAa;IAEb,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAElD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/C;;;;;;OAMG;IACH,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IAErG;;;;;;;;;;;;;OAaG;IACH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,GAAG,WAAW,EAAE,CAAC;QACxB,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;IACpE,CAAC;IAED,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;IAC/G,CAAC;IAED,MAAM,WAAW,GAAG,SAAS,GAAG,KAAK,CAAC;IACtC,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACxD,gGAAgG;IAChG,8FAA8F;IAC9F,8FAA8F;IAC9F,kEAAkE;IAClE,OAAO,WAAW,IAAI,0BAA0B;QAC9C,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,gBAAgB,EAAE;QACzE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,gBAAgB,EAAE,CAAC;AACtE,CAAC;AAsBD,2FAA2F;AAC3F,SAAS,SAAS,CAAC,MAAsB;IACvC,OAAO,MAAM,KAAK,SAAS;QACzB,CAAC,CAAC,wFAAwF;YACxF,iFAAiF;YACjF,6FAA6F;YAC7F,yFAAyF;YACzF,mDAAmD;QACrD,CAAC,CAAC,4EAA4E,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,CAAmB,EACnB,SAAyB,MAAM;IAE/B;;;;;;;;;;OAUG;IACH,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,CAAC,KAAK,KAAK,gBAAgB,EAAE,CAAC;QACjC,OAAO;YACL,eAAe,EAAE,MAAM;YACvB,0BAA0B,EACxB,wFAAwF;gBACxF,8FAA8F;gBAC9F,yEAAyE;gBACzE,qEAAqE;SACxE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,CAAC,KAAK,KAAK,mBAAmB,EAAE,CAAC;QACpC,OAAO;YACL,gBAAgB,EAAE,KAAK;YACvB,0BAA0B,EAAE,IAAI;YAChC,mBAAmB,EAAE,CAAC,CAAC,SAAS;YAChC,0BAA0B,EACxB,6EAA6E;gBAC7E,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,2DAA2D;gBACzF,0FAA0F;gBAC1F,iEAAiE,GAAG,SAAS,CAAC,MAAM,CAAC;SACxF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;QAChC,OAAO;YACL,gBAAgB,EAAE,KAAK;YACvB,sBAAsB,EAAE,IAAI;YAC5B,mBAAmB,EAAE,CAAC,CAAC,SAAS;YAChC,0BAA0B,EACxB,uDAAuD,CAAC,CAAC,SAAS,uBAAuB;gBACzF,6FAA6F;gBAC7F,yEAAyE,GAAG,SAAS,CAAC,MAAM,CAAC;SAChG,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,GAAG,MAAM,CAAC,CAAC;QACrD,OAAO;YACL,gBAAgB,EAAE,KAAK;YACvB,mBAAmB,EAAE,CAAC,CAAC,OAAO;YAC9B,wBAAwB,EAAE,IAAI;YAC9B,0BAA0B,EACxB,sCAAsC,IAAI,eAAe,CAAC,CAAC,OAAO,2BAA2B;gBAC7F,2FAA2F;gBAC3F,4FAA4F;gBAC5F,wFAAwF;gBACxF,yEAAyE,GAAG,SAAS,CAAC,MAAM,CAAC;SAChG,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,GAAG,MAAM,CAAC,CAAC;IACjD,OAAO;QACL,gBAAgB,EAAE,IAAI;QACtB,mBAAmB,EAAE,CAAC,CAAC,OAAO;QAC9B,yBAAyB,EAAE,IAAI;QAC/B,0BAA0B,EACxB,sCAAsC,CAAC,CAAC,OAAO,KAAK,IAAI,kCAAkC;YAC1F,6FAA6F;YAC7F,yFAAyF;YACzF,6FAA6F;YAC7F,8FAA8F;YAC9F,uDAAuD,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,iBAAiB;YAC/F,6FAA6F;YAC7F,4FAA4F;KAC/F,CAAC;AACJ,CAAC;AASD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAI1C;IACC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACrD,IAAI,YAAY,GAAkB,IAAI,CAAC;IAEvC,OAAO,GAAqB,EAAE;QAC5B,MAAM,CAAC,GAAG,wBAAwB,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACzD,MAAM,GAAG,GACP,CAAC,CAAC,KAAK,KAAK,gBAAgB,CAAC,CAAC,CAAC,gBAAgB;YAC/C,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,eAAe,IAAI,CAAC,CAAC,KAAK,KAAK,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,EAAE;gBAC9F,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QAE9B,IAAI,GAAG,KAAK,YAAY;YAAE,OAAO,CAAC,CAAC;QACnC,YAAY,GAAG,GAAG,CAAC;QAEnB,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE;gBACnD,SAAS,EAAE,CAAC,CAAC,OAAO;gBACpB,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,GAAG,MAAM,CAAC;gBACnD,MAAM,EACJ,0FAA0F;oBAC1F,wFAAwF;oBACxF,oFAAoF;oBACpF,oDAAoD;gBACtD,QAAQ,EACN,2FAA2F;oBAC3F,wFAAwF;oBACxF,yFAAyF;oBACzF,yBAAyB;aAC5B,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;gBAC9C,SAAS,EAAE,CAAC,CAAC,OAAO;gBACpB,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,GAAG,MAAM,CAAC;gBACtD,MAAM,EAAE,8FAA8F;gBACtG,QAAQ,EAAE,2EAA2E;aACtF,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,CAAC,KAAK,KAAK,mBAAmB,EAAE,CAAC;YAC3C,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;gBACxD,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,MAAM,EACJ,uFAAuF;oBACvF,yFAAyF;gBAC3F,QAAQ,EAAE,8FAA8F;aACzG,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE;gBACzD,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,MAAM,EAAE,gFAAgF;gBACxF,QAAQ,EAAE,8DAA8D;aACzE,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;AACJ,CAAC"}

package/dist/notification-handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notification-handlers.d.ts","sourceRoot":"","sources":["../src/notification-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE/G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,YAAY,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,SAAS,GAAG,SAAS,CAAC;IAC9D,mBAAmB,EAAE,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,EAAE,aAAa,CAAC,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACjG,YAAY,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9D,0GAA0G;IAC1G,MAAM,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACjC,0BAA0B,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IACxD,oBAAoB,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACzD,sBAAsB,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC7D,sBAAsB,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC7D;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChH,mGAAmG;IACnG,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACpD;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,uBAAuB,GAAG,IAAI,CAkOhF"}
+{"version":3,"file":"notification-handlers.d.ts","sourceRoot":"","sources":["../src/notification-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE/G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,YAAY,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,SAAS,GAAG,SAAS,CAAC;IAC9D,mBAAmB,EAAE,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,EAAE,aAAa,CAAC,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACjG,YAAY,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9D,0GAA0G;IAC1G,MAAM,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACjC,0BAA0B,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IACxD,oBAAoB,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACzD,sBAAsB,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC7D,sBAAsB,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC7D;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChH,mGAAmG;IACnG,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACpD;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,uBAAuB,GAAG,IAAI,CAiPhF"}

package/dist/notification-handlers.js

@@ -1,3 +1,4 @@
+import { REFUSAL_GUIDANCE } from "./refusal-reasons.js";
 import { resolveNamedAgent } from "./resolve-named-agent.js";
 export function registerNotificationHandlers(deps) {
     const { handlers, logger, sessionNodeManager, getConnState, resolveCurrentAgent, loadedAgents, agents: allAgents, reapExpiredInboundSessions, inboundSessionQueues, expiredSessionRequests, refusedSessionRequests, documentNotices, ownerKeyFor, } = deps;
@@ -113,11 +114,25 @@ export function registerNotificationHandlers(deps) {
             // M12-P18: sessions THIS agent turned away (cap/abuse bound). Local-only visibility so a cap
             // firing does not require reading the daemon log to discover — the failure mode that hid a
             // stranded 297-times-re-pulled message.
+            /**
+             * A refusal an agent can ACT on, not a code it has to look up.
+             *
+             * Most entries here are ordinary capacity or abuse bounds and speak for themselves. Two are
+             * SECURITY refusals from the inbound assignment path, and a bare reason string is the wrong
+             * surface for those — the operator needs to know that something was refused ON PURPOSE, what
+             * it means, and that for one of them the next step happens OUTSIDE this system.
+             */
+            const guidanceFor = (reason) => REFUSAL_GUIDANCE[reason];
+            // Shared with the site that RECORDS the refusal (review N8) — a duplicated literal here
+            // meant a rename on either side silently dropped the guidance and left a bare reason code.
             const refused = (refusedSessionRequests.get(agent) ?? []).map((e) => ({
                 session_id: e.sessionIdHex,
                 from: e.counterpartyPubkeyHex,
                 reason: e.reason,
                 refused_at: e.refusedAt,
+                // `e.reason` is a free-form string on the record (capacity and abuse bounds use their own
+                // codes and speak for themselves); only the security reasons carry guidance.
+                ...(guidanceFor(e.reason) !== undefined ? { guidance: guidanceFor(e.reason) } : {}),
             }));
             const unread = sessionNodeManager.getUnreadSummary(agent);
             const ended_unread = sessionNodeManager.getEndedUnread(agent);

package/dist/notification-handlers.js.map

@@ -1 +1 @@
-{"version":3,"file":"notification-handlers.js","sourceRoot":"","sources":["../src/notification-handlers.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AA+B7D,MAAM,UAAU,4BAA4B,CAAC,IAA6B;IACxE,MAAM,EACJ,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,mBAAmB,EACvE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,sBAAsB,EACjI,eAAe,EAAE,WAAW,GAC7B,GAAG,IAAI,CAAC;IAET,yFAAyF;IACzF,SAAS,eAAe,CAAC,SAAiB;QACxC,IAAI,CAAC,eAAe,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,OAAO;YACL,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpC,WAAW,EAAE,CAAC,CAAC,UAAU;gBACzB,cAAc,EAAE,CAAC,CAAC,OAAO;gBACzB,UAAU,EAAE,CAAC,CAAC,WAAW;aAC1B,CAAC,CAAC;YACH,0FAA0F;YAC1F,yBAAyB,EACvB,0FAA0F;gBAC1F,oFAAoF;gBACpF,iBAAiB;SACpB,CAAC;IACJ,CAAC;IAED,kGAAkG;IAClG,iGAAiG;IACjG,gGAAgG;IAChG,oGAAoG;IACpG,8FAA8F;IAC9F,oEAAoE;IACpE,QAAQ,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;QACvE,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAE1D,+FAA+F;QAC/F,+FAA+F;QAC/F,kGAAkG;QAClG,8FAA8F;QAC9F,+FAA+F;QAC/F,+EAA+E;QAC/E,iGAAiG;QACjG,6FAA6F;QAC7F,iGAAiG;QACjG,8CAA8C;QAC9C,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACnF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,IAAI,SAAS,CAAC;QAE/C,IAAI,UAAoB,CAAC;QACzB,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YACpB,+FAA+F;YAC/F,+FAA+F;YAC/F,sEAAsE;YACtE,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,4FAA4F;YAC5F,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,kBAAkB;oBAC1B,QAAQ,EAAE,6HAA6H;iBACxI,CAAC;YACJ,CAAC;YACD,UAAU,GAAG,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACtC,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,0DAA0D;YAC7F,6FAA6F;YAC7F,+EAA+E;YAC/E,2FAA2F;YAC3F,0FAA0F;YAC1F,6FAA6F;YAC7F,sFAAsF;YACtF,sFAAsF;YACtF,MAAM,OAAO,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClE,UAAU,EAAE,CAAC,CAAC,YAAY;gBAC1B,IAAI,EAAE,CAAC,CAAC,qBAAqB;gBAC7B,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC,CAAC;YACJ,yFAAyF;YACzF,+EAA+E;YAC/E,0FAA0F;YAC1F,4FAA4F;YAC5F,yFAAyF;YACzF,6FAA6F;YAC7F,4FAA4F;YAC5F,8FAA8F;YAC9F,2FAA2F;YAC3F,MAAM,OAAO,GAAG,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpE,UAAU,EAAE,CAAC,CAAC,YAAY;gBAC1B,IAAI,EAAE,CAAC,CAAC,qBAAqB;gBAC7B,UAAU,EAAE,CAAC,CAAC,SAAS;gBACvB,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC,CAAC;YACJ,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClD,iCAAiC,EAC/B,wFAAwF;oBACxF,uFAAuF;oBACvF,4EAA4E;oBAC5E,0FAA0F;oBAC1F,yFAAyF;oBACzF,kDAAkD;aACrD,CAAC;YACF,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClD,iCAAiC,EAC/B,0FAA0F;oBAC1F,wFAAwF;oBACxF,uFAAuF;oBACvF,kFAAkF;aACrF,CAAC;YACF,6FAA6F;YAC7F,2FAA2F;YAC3F,wCAAwC;YACxC,MAAM,OAAO,GAAG,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpE,UAAU,EAAE,CAAC,CAAC,YAAY;gBAC1B,IAAI,EAAE,CAAC,CAAC,qBAAqB;gBAC7B,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,UAAU,EAAE,CAAC,CAAC,SAAS;aACxB,CAAC,CAAC,CAAC;YACJ,MAAM,MAAM,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC1D,MAAM,YAAY,GAAG,kBAAkB,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC9D,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;YACxE,+FAA+F;YAC/F,8FAA8F;YAC9F,4EAA4E;YAC5E,MAAM,cAAc,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5E,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,kBAAkB,EAAE,CAAC,CAAC,OAAO;gBAC7B,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,8FAA8F;gBAC9F,oFAAoF;gBACpF,sFAAsF;gBACtF,wFAAwF;gBACxF,0FAA0F;gBAC1F,4FAA4F;gBAC5F,0DAA0D;gBAC1D,MAAM,EACJ,gBAAgB,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,0BAA0B;oBAC9G,IAAI,CAAC,CAAC,YAAY,sEAAsE;oBACxF,cAAc,CAAC,CAAC,MAAM,gBAAgB,CAAC,CAAC,YAAY,iBAAiB;aACxE,CAAC,CAAC,CAAC;YACJ,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,6FAA6F;gBAC7F,uFAAuF;gBACvF,sFAAsF;gBACtF,iFAAiF;gBACjF,EAAE;gBACF,qFAAqF;gBACrF,6FAA6F;gBAC7F,2FAA2F;gBAC3F,yFAAyF;gBACzF,2FAA2F;gBAC3F,mBAAmB;gBACnB,OAAO;oBACL,KAAK,EAAE,wBAAwB,EAAE,OAAO,EAAE,wBAAwB,EAAE,OAAO;oBAC3E,GAAG,eAAe,EAAE,GAAG,eAAe;oBACtC,wFAAwF;oBACxF,qFAAqF;oBACrF,yFAAyF;oBACzF,sFAAsF;oBACtF,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpE,MAAM;oBACN,YAAY,EAAE,cAAc,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC;oBACvD,0FAA0F;oBAC1F,EAAE;oBACF,2FAA2F;oBAC3F,wFAAwF;oBACxF,sFAAsF;oBACtF,uFAAuF;oBACvF,oFAAoF;oBACpF,2FAA2F;oBAC3F,sDAAsD;oBACtD,EAAE;oBACF,2FAA2F;oBAC3F,oFAAoF;oBACpF,uFAAuF;oBACvF,wFAAwF;oBACxF,+DAA+D;oBAC/D,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACrC,GAAG,CAAC;wBACJ,SAAS,EAAE,CAAC,CAAC,MAAM,KAAK,QAAQ;wBAChC,UAAU,EAAE,CAAC,CAAC,MAAM,KAAK,aAAa;qBACvC,CAAC,CAAC;oBACH,uBAAuB,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC;oBAC7E,qBAAqB,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC;wBAC1E,CAAC,CAAC,mFAAmF;4BACrF,uFAAuF;4BACvF,kFAAkF;4BAClF,uFAAuF;4BACvF,uFAAuF;4BACvF,sFAAsF;4BACtF,sFAAsF;4BACtF,sFAAsF;4BACtF,uFAAuF;4BACvF,yFAAyF;4BACzF,wFAAwF;4BACxF,qFAAqF;4BACrF,yCAAyC;wBACzC,CAAC,CAAC,iFAAiF;4BACjF,qFAAqF;4BACrF,8EAA8E;4BAC9E,8EAA8E;4BAC9E,qGAAqG;iBAC1G,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,OAAO,EAAE,wBAAwB,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,GAAG,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QACxQ,CAAC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QACvE,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,wBAAwB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3F,4FAA4F;QAC5F,yFAAyF;QACzF,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,wBAAwB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3F,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC;QAC1H,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"notification-handlers.js","sourceRoot":"","sources":["../src/notification-handlers.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAKxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AA+B7D,MAAM,UAAU,4BAA4B,CAAC,IAA6B;IACxE,MAAM,EACJ,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,mBAAmB,EACvE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,sBAAsB,EACjI,eAAe,EAAE,WAAW,GAC7B,GAAG,IAAI,CAAC;IAET,yFAAyF;IACzF,SAAS,eAAe,CAAC,SAAiB;QACxC,IAAI,CAAC,eAAe,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,OAAO;YACL,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpC,WAAW,EAAE,CAAC,CAAC,UAAU;gBACzB,cAAc,EAAE,CAAC,CAAC,OAAO;gBACzB,UAAU,EAAE,CAAC,CAAC,WAAW;aAC1B,CAAC,CAAC;YACH,0FAA0F;YAC1F,yBAAyB,EACvB,0FAA0F;gBAC1F,oFAAoF;gBACpF,iBAAiB;SACpB,CAAC;IACJ,CAAC;IAED,kGAAkG;IAClG,iGAAiG;IACjG,gGAAgG;IAChG,oGAAoG;IACpG,8FAA8F;IAC9F,oEAAoE;IACpE,QAAQ,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;QACvE,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAE1D,+FAA+F;QAC/F,+FAA+F;QAC/F,kGAAkG;QAClG,8FAA8F;QAC9F,+FAA+F;QAC/F,+EAA+E;QAC/E,iGAAiG;QACjG,6FAA6F;QAC7F,iGAAiG;QACjG,8CAA8C;QAC9C,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACnF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,IAAI,SAAS,CAAC;QAE/C,IAAI,UAAoB,CAAC;QACzB,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YACpB,+FAA+F;YAC/F,+FAA+F;YAC/F,sEAAsE;YACtE,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,4FAA4F;YAC5F,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,kBAAkB;oBAC1B,QAAQ,EAAE,6HAA6H;iBACxI,CAAC;YACJ,CAAC;YACD,UAAU,GAAG,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACtC,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,0DAA0D;YAC7F,6FAA6F;YAC7F,+EAA+E;YAC/E,2FAA2F;YAC3F,0FAA0F;YAC1F,6FAA6F;YAC7F,sFAAsF;YACtF,sFAAsF;YACtF,MAAM,OAAO,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClE,UAAU,EAAE,CAAC,CAAC,YAAY;gBAC1B,IAAI,EAAE,CAAC,CAAC,qBAAqB;gBAC7B,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC,CAAC;YACJ,yFAAyF;YACzF,+EAA+E;YAC/E,0FAA0F;YAC1F,4FAA4F;YAC5F,yFAAyF;YACzF,6FAA6F;YAC7F,4FAA4F;YAC5F,8FAA8F;YAC9F,2FAA2F;YAC3F,MAAM,OAAO,GAAG,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpE,UAAU,EAAE,CAAC,CAAC,YAAY;gBAC1B,IAAI,EAAE,CAAC,CAAC,qBAAqB;gBAC7B,UAAU,EAAE,CAAC,CAAC,SAAS;gBACvB,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC,CAAC;YACJ,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClD,iCAAiC,EAC/B,wFAAwF;oBACxF,uFAAuF;oBACvF,4EAA4E;oBAC5E,0FAA0F;oBAC1F,yFAAyF;oBACzF,kDAAkD;aACrD,CAAC;YACF,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClD,iCAAiC,EAC/B,0FAA0F;oBAC1F,wFAAwF;oBACxF,uFAAuF;oBACvF,kFAAkF;aACrF,CAAC;YACF,6FAA6F;YAC7F,2FAA2F;YAC3F,wCAAwC;YACxC;;;;;;;eAOG;YACH,MAAM,WAAW,GAAG,CAAC,MAAc,EAAsB,EAAE,CACxD,gBAA2C,CAAC,MAAM,CAAC,CAAC;YACvD,wFAAwF;YACxF,2FAA2F;YAC3F,MAAM,OAAO,GAAG,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpE,UAAU,EAAE,CAAC,CAAC,YAAY;gBAC1B,IAAI,EAAE,CAAC,CAAC,qBAAqB;gBAC7B,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,UAAU,EAAE,CAAC,CAAC,SAAS;gBACvB,0FAA0F;gBAC1F,6EAA6E;gBAC7E,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpF,CAAC,CAAC,CAAC;YACJ,MAAM,MAAM,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC1D,MAAM,YAAY,GAAG,kBAAkB,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC9D,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;YACxE,+FAA+F;YAC/F,8FAA8F;YAC9F,4EAA4E;YAC5E,MAAM,cAAc,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5E,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,kBAAkB,EAAE,CAAC,CAAC,OAAO;gBAC7B,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,8FAA8F;gBAC9F,oFAAoF;gBACpF,sFAAsF;gBACtF,wFAAwF;gBACxF,0FAA0F;gBAC1F,4FAA4F;gBAC5F,0DAA0D;gBAC1D,MAAM,EACJ,gBAAgB,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,0BAA0B;oBAC9G,IAAI,CAAC,CAAC,YAAY,sEAAsE;oBACxF,cAAc,CAAC,CAAC,MAAM,gBAAgB,CAAC,CAAC,YAAY,iBAAiB;aACxE,CAAC,CAAC,CAAC;YACJ,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,6FAA6F;gBAC7F,uFAAuF;gBACvF,sFAAsF;gBACtF,iFAAiF;gBACjF,EAAE;gBACF,qFAAqF;gBACrF,6FAA6F;gBAC7F,2FAA2F;gBAC3F,yFAAyF;gBACzF,2FAA2F;gBAC3F,mBAAmB;gBACnB,OAAO;oBACL,KAAK,EAAE,wBAAwB,EAAE,OAAO,EAAE,wBAAwB,EAAE,OAAO;oBAC3E,GAAG,eAAe,EAAE,GAAG,eAAe;oBACtC,wFAAwF;oBACxF,qFAAqF;oBACrF,yFAAyF;oBACzF,sFAAsF;oBACtF,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpE,MAAM;oBACN,YAAY,EAAE,cAAc,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC;oBACvD,0FAA0F;oBAC1F,EAAE;oBACF,2FAA2F;oBAC3F,wFAAwF;oBACxF,sFAAsF;oBACtF,uFAAuF;oBACvF,oFAAoF;oBACpF,2FAA2F;oBAC3F,sDAAsD;oBACtD,EAAE;oBACF,2FAA2F;oBAC3F,oFAAoF;oBACpF,uFAAuF;oBACvF,wFAAwF;oBACxF,+DAA+D;oBAC/D,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACrC,GAAG,CAAC;wBACJ,SAAS,EAAE,CAAC,CAAC,MAAM,KAAK,QAAQ;wBAChC,UAAU,EAAE,CAAC,CAAC,MAAM,KAAK,aAAa;qBACvC,CAAC,CAAC;oBACH,uBAAuB,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC;oBAC7E,qBAAqB,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC;wBAC1E,CAAC,CAAC,mFAAmF;4BACrF,uFAAuF;4BACvF,kFAAkF;4BAClF,uFAAuF;4BACvF,uFAAuF;4BACvF,sFAAsF;4BACtF,sFAAsF;4BACtF,sFAAsF;4BACtF,uFAAuF;4BACvF,yFAAyF;4BACzF,wFAAwF;4BACxF,qFAAqF;4BACrF,yCAAyC;wBACzC,CAAC,CAAC,iFAAiF;4BACjF,qFAAqF;4BACrF,8EAA8E;4BAC9E,8EAA8E;4BAC9E,qGAAqG;iBAC1G,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,OAAO,EAAE,wBAAwB,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,GAAG,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QACxQ,CAAC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QACvE,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,wBAAwB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3F,4FAA4F;QAC5F,yFAAyF;QACzF,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,wBAAwB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3F,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC;QAC1H,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/outbound-sessions.d.ts

@@ -32,6 +32,25 @@ export interface OutboundSessionDeps {
     waitForSignalingConnected: (mgr: SignalingManager, timeoutMs: number) => Promise<boolean>;
     getFailoverEndpoint: () => Promise<DirectoryEndpoint | null>;
     resolveConsortiumRoster: () => Promise<ConsortiumEndpoint[] | null>;
+    /**
+     * DOD-M15-ERRSTRING-1 — the nodes whose bootstrap probe failed in the last sweep.
+     *
+     * Needed here because a SHORT ROSTER is the cause the DoD line asks these errors to name ("a
+     * roster below threshold says so"), and the negotiator otherwise sees only the reachable subset —
+     * it cannot tell three-of-three from three-of-five. Reachable + unresolved is the declared count,
+     * and majority(declared) is the threshold a ceremony needs.
+     */
+    getUnresolvedNodes?: () => ReadonlyArray<{
+        nodeId: string;
+        reason: string;
+    }>;
+    /**
+     * How many nodes the VERIFIED MANIFEST declares. Review MEDIUM-2: deriving this as
+     * `reachable + unresolved` undercounts, because a node dropped for an invalid endpoint or a
+     * peer-id mismatch appears in neither term — and the note would then affirm that ceremonies can
+     * complete when the true threshold is unmet.
+     */
+    getDeclaredNodeCount?: () => number | null;
     /** The WHOLE seal listener bundle — a visiting stream needs every one of them. */
     registerSealListeners: (signaling: SignalingManager, agentName: string, agentPubkeyHex: string) => () => void;
     sessionNegotiator?: SessionNegotiator;
@@ -44,6 +63,18 @@ export interface OutboundSessionDeps {
         pubkey: string;
     }>;
 }
+/**
+ * How long a session initiation waits for signaling before giving up.
+ *
+ * EXPORTED because it is a CONSTRAINT ON SOMETHING ELSE, not just a local number: every probe
+ * budget on the reconnect path has to fit inside it. `DOD-M15-BOOTSTRAP-1` learned that the hard
+ * way — a retry budget chosen in isolation pushed the resolver past this wait and would have made
+ * `cello_initiate_session` fail on exactly the lossy links the retry was added to help.
+ *
+ * `dod-m15-bootstrap-1.test.ts` asserts the budgets against this value, so changing it here breaks
+ * that test rather than silently breaking the behaviour.
+ */
+export declare const SIGNALING_CONNECT_WAIT_MS = 10000;
 export declare function createOutboundSessions(deps: OutboundSessionDeps): {
     openVisitingConnection: (agentName: string, agentKeyProvider: import("@cello-protocol/crypto").KeyProvider, agentPubkeyHex: string, endpoint: DirectoryEndpoint, correlationId: string, nodeId: string) => {
         mgr: SignalingManager;

package/dist/outbound-sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"outbound-sessions.d.ts","sourceRoot":"","sources":["../src/outbound-sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,gBAAgB,EAAE,KAAK,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAE7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,iBAAiB,EAA4B,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAI1F,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAM7E,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,WAAW,GAAG,SAAS,CAAC;IAC/D,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,yBAAyB,CAAC;IACjE,iBAAiB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,KAAK;QAAE,SAAS,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,MAAM,SAAS,GAAG,IAAI,CAAA;KAAE,CAAC;IACxJ,yBAAyB,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1F,mBAAmB,EAAE,MAAM,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IAC7D,uBAAuB,EAAE,MAAM,OAAO,CAAC,kBAAkB,EAAE,GAAG,IAAI,CAAC,CAAC;IACpE,kFAAkF;IAClF,qBAAqB,EAAE,CAAC,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,KAAK,MAAM,IAAI,CAAC;IAC9G,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,2BAA2B,CAAC;IAChD,kBAAkB,EAAE,MAAM,MAAM,CAAC;IACjC,0DAA0D;IAC1D,YAAY,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/D;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,mBAAmB;wCA2VjD,MAAM,oBACC,OAAO,wBAAwB,EAAE,WAAW,kBAC9C,MAAM,YACZ,iBAAiB,iBACZ,MAAM,UACb,MAAM,KACb;QAAE,GAAG,EAAE,gBAAgB,CAAC;QAAC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE;;;oCAtTxD,gBAAgB,aAChB,MAAM,aACN,MAAM,iBACF,MAAM,KACpB,OAAO,CAAC,gBAAgB,CAAC;EA+lB7B"}
+{"version":3,"file":"outbound-sessions.d.ts","sourceRoot":"","sources":["../src/outbound-sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,gBAAgB,EAAE,KAAK,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAE7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,iBAAiB,EAA4B,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAK1F,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAM7E,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,WAAW,GAAG,SAAS,CAAC;IAC/D,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,yBAAyB,CAAC;IACjE,iBAAiB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,KAAK;QAAE,SAAS,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,MAAM,SAAS,GAAG,IAAI,CAAA;KAAE,CAAC;IACxJ,yBAAyB,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1F,mBAAmB,EAAE,MAAM,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IAC7D,uBAAuB,EAAE,MAAM,OAAO,CAAC,kBAAkB,EAAE,GAAG,IAAI,CAAC,CAAC;IACpE;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,MAAM,aAAa,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7E;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC3C,kFAAkF;IAClF,qBAAqB,EAAE,CAAC,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,KAAK,MAAM,IAAI,CAAC;IAC9G,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,2BAA2B,CAAC;IAChD,kBAAkB,EAAE,MAAM,MAAM,CAAC;IACjC,0DAA0D;IAC1D,YAAY,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/D;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAEhD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,mBAAmB;wCA4ZjD,MAAM,oBACC,OAAO,wBAAwB,EAAE,WAAW,kBAC9C,MAAM,YACZ,iBAAiB,iBACZ,MAAM,UACb,MAAM,KACb;QAAE,GAAG,EAAE,gBAAgB,CAAC;QAAC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE;;;oCA5UxD,gBAAgB,aAChB,MAAM,aACN,MAAM,iBACF,MAAM,KACpB,OAAO,CAAC,gBAAgB,CAAC;EAmuB7B"}