@cello-protocol/daemon 0.0.196 → 0.0.198

package/dist/disconnect-cleanup.d.ts

@@ -0,0 +1,45 @@
+/**
+ * What the daemon forgets, and what it says, when an IPC connection closes.
+ *
+ * Why the close is reported at all — `DOD-M15-IPCVISIBLE-1` — is written below, at the code that
+ * builds the report. It is not repeated here: a paragraph kept in two places is one someone corrects
+ * in one of them.
+ *
+ * The three per-connection maps are released by the module that owns them; this is the reporting
+ * half, and it returns its context rather than logging its own line, because the IPC server merges
+ * it into the single `daemon.ipc.disconnected` entry. A second line under the same name left
+ * neither carrying the whole picture and doubled every count.
+ */
+import type { IpcServer } from "./ipc-server.js";
+import type { NotificationDispatcher } from "./notification-dispatcher.js";
+import type { InboundSessionWaiter } from "./inbound-sessions.js";
+export interface DisconnectCleanupDeps {
+    ipcServer: IpcServer;
+    /** Read this connection's selection before it is forgotten — the log needs what it was attending. */
+    getConnState: (connectionId: string) => {
+        currentAgent: string | null;
+        clientType?: string;
+    } | undefined;
+    /** How many connections still attend an agent, after this one goes. */
+    countAttendanceFor: (agentName: string) => number;
+    /** Releases the three per-connection maps. Lives with the maps, not here. */
+    forgetConnection: (connectionId: string) => void;
+    forgetTakeLedger: (connectionId: string) => void;
+    /** Callers blocked in `cello_await_session` for an agent, so a dying connection releases them. */
+    inboundSessionWaiters: Map<string, InboundSessionWaiter[]>;
+    /**
+     * ⚠️ A GETTER, AND THE REASON IS NOT THE OBVIOUS ONE. The dispatcher is a `const` 82 lines ABOVE
+     * this wiring, so passing it by value would work today. The getter is there so that moving the
+     * construction below cannot break the disconnect path silently — the same shape as `getStop` in
+     * `ipc-surface.ts`.
+     *
+     * An earlier version of this comment said the dispatcher was constructed BELOW. It was not, and a
+     * false worked example of late binding is worse than none: the rule this order paid for is that a
+     * value assigned below a call site must be read through a getter, and the silent shape is a `let`
+     * (a `const` crashes loudly on TDZ). Teaching "getter because it is below" from a value that is
+     * above hands the next reader the wrong discriminator.
+     */
+    getNotificationDispatcher: () => NotificationDispatcher;
+}
+export declare function wireDisconnectCleanup(deps: DisconnectCleanupDeps): void;
+//# sourceMappingURL=disconnect-cleanup.d.ts.map

package/dist/disconnect-cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"disconnect-cleanup.d.ts","sourceRoot":"","sources":["../src/disconnect-cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAElE,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,SAAS,CAAC;IACrB,qGAAqG;IACrG,YAAY,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK;QAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACzG,uEAAuE;IACvE,kBAAkB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,CAAC;IAClD,6EAA6E;IAC7E,gBAAgB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,IAAI,CAAC;IACjD,gBAAgB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,IAAI,CAAC;IACjD,kGAAkG;IAClG,qBAAqB,EAAE,GAAG,CAAC,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC3D;;;;;;;;;;;OAWG;IACH,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;CACzD;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,qBAAqB,GAAG,IAAI,CAiEvE"}

package/dist/disconnect-cleanup.js

@@ -0,0 +1,65 @@
+export function wireDisconnectCleanup(deps) {
+    const { ipcServer, getConnState, countAttendanceFor, forgetConnection, forgetTakeLedger, inboundSessionWaiters, getNotificationDispatcher, } = deps;
+    // MCP-001: Clean up per-connection state when a connection disconnects
+    // MCP-002: Also unregister from notification dispatcher
+    ipcServer.onDisconnect((connectionId) => {
+        /**
+         * DOD-M15-IPCVISIBLE-1: SAY THAT IT CLOSED, and say what it was attending.
+         *
+         * `daemon.ipc.connected` fired on every open and nothing on close, so a live client and a dead
+         * one that was never cleaned up looked identical in the log. The attended agent is the field
+         * that matters: attendance dropping was silent, and an agent losing its last attendee changes
+         * whether away-messages fire and who receives doorbells — so a session that stopped waking is
+         * diagnosable from the log rather than by guesswork.
+         */
+        const closing = getConnState(connectionId);
+        const stillAttending = closing?.currentAgent
+            ? countAttendanceFor(closing.currentAgent) - 1
+            : null;
+        // RETURNED, not logged here — `ipcServer` merges this into its single
+        // `daemon.ipc.disconnected` line. A second line under the same name left neither carrying the
+        // whole picture and doubled every count (review F8).
+        const disconnectContext = {
+            clientType: closing?.clientType ?? "unknown",
+            attendedAgent: closing?.currentAgent ?? null,
+            ...(stillAttending !== null ? { remainingAttendance: stillAttending } : {}),
+            ...(stillAttending === 0
+                ? {
+                    impact: "that agent has no attending session left — inbound sessions are now answered with " +
+                        "its away message rather than a live reply, and its doorbells reach nobody",
+                }
+                : {}),
+        };
+        // The three per-connection maps are released by the module that owns them; the reasons each
+        // must die with its connection live there, beside the containers.
+        forgetConnection(connectionId);
+        // DOD-COATTEND-VISIBLE-1 (review HIGH): the take ledger is connection-scoped for the SAME
+        // reason and must die with the connection too. Leaving it behind made every reconnect look
+        // like a theft: a fresh connection starts at cursor -1, so every take a now-dead connection
+        // ever recorded sits above that bar and was reported as "another session took it" — on the
+        // `cello` CLI, which opens a fresh connection per command, that fired on ordinary use, forever,
+        // with no live sibling anywhere. A signal that fires on the normal case is not a signal, and
+        // this one would have taught the operator to disbelieve the real theft it exists to announce.
+        forgetTakeLedger(connectionId);
+        getNotificationDispatcher().unregisterConnection(connectionId);
+        // Seam 2 (review H2): evict any cello_await_session waiters owned by this connection.
+        // Otherwise enqueueInboundSession would hand the next inbound session to a closed
+        // connection's waiter and the event would be lost. deliver(null) clears the waiter's
+        // timer and resolves its (now-orphaned) promise as a timeout.
+        for (const [agentName, waiters] of inboundSessionWaiters) {
+            const survivors = [];
+            for (const w of waiters) {
+                if (w.connectionId === connectionId)
+                    w.deliver(null);
+                else
+                    survivors.push(w);
+            }
+            if (survivors.length > 0)
+                inboundSessionWaiters.set(agentName, survivors);
+            else
+                inboundSessionWaiters.delete(agentName);
+        }
+        return disconnectContext;
+    });
+}
+//# sourceMappingURL=disconnect-cleanup.js.map

package/dist/disconnect-cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disconnect-cleanup.js","sourceRoot":"","sources":["../src/disconnect-cleanup.ts"],"names":[],"mappings":"AA0CA,MAAM,UAAU,qBAAqB,CAAC,IAA2B;IAC/D,MAAM,EACJ,SAAS,EAAE,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,gBAAgB,EAC/E,qBAAqB,EACrB,yBAAyB,GAC1B,GAAG,IAAI,CAAC;IAET,uEAAuE;IACvE,wDAAwD;IACxD,SAAS,CAAC,YAAY,CAAC,CAAC,YAAY,EAAE,EAAE;QACtC;;;;;;;;WAQG;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAC3C,MAAM,cAAc,GAAG,OAAO,EAAE,YAAY;YAC1C,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC;YAC9C,CAAC,CAAC,IAAI,CAAC;QACT,sEAAsE;QACtE,8FAA8F;QAC9F,qDAAqD;QACrD,MAAM,iBAAiB,GAA4B;YACjD,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,SAAS;YAC5C,aAAa,EAAE,OAAO,EAAE,YAAY,IAAI,IAAI;YAC5C,GAAG,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,cAAc,KAAK,CAAC;gBACtB,CAAC,CAAC;oBACE,MAAM,EACJ,oFAAoF;wBACpF,2EAA2E;iBAC9E;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,4FAA4F;QAC5F,kEAAkE;QAClE,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC/B,0FAA0F;QAC1F,2FAA2F;QAC3F,4FAA4F;QAC5F,2FAA2F;QAC3F,gGAAgG;QAChG,6FAA6F;QAC7F,8FAA8F;QAC9F,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC/B,yBAAyB,EAAE,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC/D,sFAAsF;QACtF,kFAAkF;QAClF,qFAAqF;QACrF,8DAA8D;QAC9D,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,qBAAqB,EAAE,CAAC;YACzD,MAAM,SAAS,GAAmB,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,CAAC,YAAY,KAAK,YAAY;oBAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;;oBAChD,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;gBAAE,qBAAqB,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;;gBACrE,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,iBAAiB,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/document-surface.d.ts

@@ -0,0 +1,32 @@
+import { ReconcileScheduler } from "./document-reconcile-scheduler.js";
+import type { IpcHandler } from "./ipc-server.js";
+import type { Logger } from "./types.js";
+import type { KeyProvider } from "@cello-protocol/crypto";
+import type { SignalingManager } from "@cello-protocol/transport";
+export interface DocumentSurfaceDeps {
+    logger: Logger;
+    handlers: Map<string, IpcHandler>;
+    loadedAgents: ReadonlyArray<{
+        name: string;
+        pubkey: string;
+        keyProvider: KeyProvider;
+    }>;
+    keyProviders: Map<string, KeyProvider>;
+    perConnectionState: ReadonlyMap<string, {
+        currentAgent: string | null;
+    }>;
+    perAgentSignaling: ReadonlyMap<string, {
+        signaling: SignalingManager;
+    }>;
+    resolveCurrentAgent: (connState: {
+        currentAgent: string | null;
+    } | undefined, explicitAgent?: string) => string | null;
+    documentLayer: ReturnType<typeof import("./document-layer.js").createDocumentLayer>;
+    documentOwnerKeyFor: (agentName: string) => string | null;
+    documentTransportFor: (agentName: string) => ReturnType<typeof import("./document-delivery-transport.js").createDocumentDeliveryTransport>;
+}
+export declare function createDocumentSurface(deps: DocumentSurfaceDeps): {
+    reconcileSweepTimer: NodeJS.Timeout;
+    reconcileScheduler: ReconcileScheduler;
+};
+//# sourceMappingURL=document-surface.d.ts.map

package/dist/document-surface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-surface.d.ts","sourceRoot":"","sources":["../src/document-surface.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAEvE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAElE,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC,YAAY,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC;IACxF,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACvC,kBAAkB,EAAE,WAAW,CAAC,MAAM,EAAE;QAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACzE,iBAAiB,EAAE,WAAW,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC;IACxE,mBAAmB,EAAE,CAAC,SAAS,EAAE;QAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,SAAS,EAAE,aAAa,CAAC,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACvH,aAAa,EAAE,UAAU,CAAC,cAAc,qBAAqB,EAAE,mBAAmB,CAAC,CAAC;IACpF,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAC1D,oBAAoB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,UAAU,CAAC,cAAc,kCAAkC,EAAE,+BAA+B,CAAC,CAAC;CAC5I;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,mBAAmB;;;EA+I9D"}

package/dist/document-surface.js

@@ -0,0 +1,150 @@
+/**
+ * The document OPERATOR surface, and the sweep that keeps shared documents converging.
+ *
+ * Registered last of the document wiring, deliberately: this is the only part that can CREATE a
+ * document, and everything it creates has to have somewhere to go. Without the inbound path a peer's
+ * answer is unroutable; without the delivery worker a published update never leaves.
+ *
+ * The reconcile sweep travels with it because it is what makes the surface's promise true over time
+ * — a document published to a peer who was unreachable is not lost, it is retried on a bound.
+ */
+import { DocumentPublish } from "./document-publish.js";
+import { ReconcileScheduler } from "./document-reconcile-scheduler.js";
+import { registerDocumentHandlers } from "./document-handlers.js";
+export function createDocumentSurface(deps) {
+    const { logger, handlers, loadedAgents, keyProviders, perConnectionState, perAgentSignaling, resolveCurrentAgent, documentLayer, documentOwnerKeyFor, documentTransportFor, } = deps;
+    // ⚠️ ASSIGNED HERE AND READ ELSEWHERE. Two modules built EARLIER hold getters over the root's
+    // `let` for this scheduler; the value is produced below and handed back so the root can set it.
+    // Returning it is what keeps those getters correct — they resolve at call time, which is always
+    // after this runs.
+    let reconcileScheduler;
+    // M14 / DOD-DOC-TOOLS-1 — the OPERATOR SURFACE. Registered last of the document wiring, because
+    // it is the only part that can create a document, and everything it creates has to have somewhere
+    // to go: without the inbound path a peer's answer is unroutable, and without the delivery worker a
+    // published update never leaves.
+    const documentPublish = new DocumentPublish({
+        holdersFor: (ownerAgentId, documentId) => documentLayer.holdersFor(ownerAgentId, documentId),
+        governanceFrontierFor: (ownerAgentId, documentId) => documentLayer.governanceFrontierFor(ownerAgentId, documentId),
+        store: documentLayer.store,
+        engine: documentLayer.engine,
+        logger,
+        sign: async (ownerAgentId, tbs) => {
+            // `ownerAgentId` is the owner KEY here, and keyProviders is keyed by NAME — so it is resolved
+            // back through the same map the owner key came from rather than guessed. A miss throws: an
+            // unsigned envelope in an append-only log is worse than a failed publish.
+            const agentName = loadedAgents.find((a) => a.pubkey?.toLowerCase() === ownerAgentId)?.name;
+            const provider = agentName ? keyProviders.get(agentName) : undefined;
+            if (!provider) {
+                throw new Error(`document_publish_unsigned: no key provider for owner ${ownerAgentId.slice(0, 16)}…, ` +
+                    `so this update cannot be signed`);
+            }
+            return provider.sign(tbs);
+        },
+        // M14-D5: our wire sender id IS the owner key. Kept as its own callback because they are
+        // different facts that happen to coincide — see DocumentStore.pendingDeliveries.
+        senderIdFor: (ownerAgentId) => ownerAgentId,
+        canPublish: (ownerAgentId, documentId) => documentLayer.lifecycle.canPublish(ownerAgentId, documentId),
+        // SYNC-P4 (R39's first trigger): each seat gets an initiated reconcile exchange — the
+        // envelope rides the exchange's own difference computation. Fire-and-forget by contract.
+        nudgeSeats: (ownerAgentId, documentId, seats) => {
+            for (const seat of seats) {
+                void documentLayer
+                    .initiateReconcile(ownerAgentId, seat, [documentId])
+                    .then((sent) => {
+                    if (!sent.ok) {
+                        // NOT SILENT (review F3): a lost nudge is legal for correctness (any later
+                        // exchange recomputes the difference — R40), but until P5's sweeps exist this
+                        // line is the only trace an operator has for "my edit never arrived".
+                        logger.warn("document.reconcile.nudge_failed", {
+                            documentId, peerAgentId: seat, reason: sent.reason,
+                        });
+                    }
+                })
+                    .catch((err) => {
+                    logger.warn("document.reconcile.nudge_failed", {
+                        documentId, peerAgentId: seat,
+                        reason: err instanceof Error ? err.message : String(err),
+                    });
+                });
+            }
+        },
+    });
+    registerDocumentHandlers({
+        handlers,
+        logger,
+        layer: documentLayer,
+        publish: documentPublish,
+        transportFor: documentTransportFor,
+        resolveAgent: (connectionId, explicit) => resolveCurrentAgent(perConnectionState.get(connectionId), explicit),
+        ownerKeyFor: documentOwnerKeyFor,
+        sign: async (agentName, tbs) => {
+            const provider = keyProviders.get(agentName);
+            if (!provider)
+                throw new Error(`document_proposal_unsigned: no key provider for ${agentName}`);
+            return provider.sign(tbs);
+        },
+        now: () => Date.now(),
+    });
+    // SYNC-P5 (R39–R43) — WHEN reconciling is attempted: the periodic sweep and the party-became-
+    // reachable trigger. All state volatile (R41); a lost tick costs latency, never correctness.
+    reconcileScheduler = new ReconcileScheduler({
+        now: () => Date.now(),
+        logger,
+        sweepTargets: (ownerAgentId) => documentLayer.sweepTargets(ownerAgentId),
+        pendingFor: (ownerAgentId, documentId, partyAgentId) => documentLayer.pendingFor(ownerAgentId, documentId, partyAgentId),
+        initiateReconcile: (ownerAgentId, peerAgentId, documentIds) => documentLayer.initiateReconcile(ownerAgentId, peerAgentId, documentIds),
+        ...(Number.isFinite(Number(process.env["CELLO_DOCUMENT_RECONCILE_BACKOFF_MS"])) &&
+            Number(process.env["CELLO_DOCUMENT_RECONCILE_BACKOFF_MS"]) >= 250
+            ? { backoffBaseMs: Number(process.env["CELLO_DOCUMENT_RECONCILE_BACKOFF_MS"]) }
+            : {}),
+    });
+    // Overridable for tests (the delivery tick precedent); floored so a misread env cannot busy-loop.
+    const reconcileTickOverride = Number(process.env["CELLO_DOCUMENT_RECONCILE_SWEEP_MS"]);
+    const RECONCILE_SWEEP_MS = Number.isFinite(reconcileTickOverride) && reconcileTickOverride >= 250
+        ? reconcileTickOverride
+        : 120_000;
+    // Review F2: the guard is TIME-STAMPED, not a bare boolean — a pass that never settles (a
+    // dial with no timeout) would otherwise end the sweep silently for the daemon's lifetime,
+    // the exact R42 stall one level above the module that fixed it. Past the bound the wedge is
+    // WARNED and the guard force-released; the abandoned pass's own scheduler marks are
+    // themselves time-bounded, so double-attempts are latency, never correctness.
+    const RECONCILE_PASS_BOUND_MS = 5 * 60_000;
+    let reconcileSweepStartedAt = null;
+    const reconcileSweepTimer = setInterval(() => {
+        if (reconcileSweepStartedAt !== null) {
+            if (Date.now() - reconcileSweepStartedAt < RECONCILE_PASS_BOUND_MS)
+                return;
+            logger.warn("document.reconcile.sweep_wedged", {
+                heldMs: Date.now() - reconcileSweepStartedAt,
+                impact: "a sweep pass never settled; the guard is force-released so sweeping continues",
+            });
+        }
+        reconcileSweepStartedAt = Date.now();
+        void (async () => {
+            try {
+                for (const agentName of perAgentSignaling.keys()) {
+                    const ownerAgentId = documentOwnerKeyFor(agentName);
+                    if (ownerAgentId === null)
+                        continue;
+                    const result = await reconcileScheduler.sweep(ownerAgentId);
+                    if (result.attempted > 0 || result.failed > 0) {
+                        logger.debug("document.reconcile.sweep", { agentName, ...result });
+                    }
+                }
+            }
+            catch (err) {
+                logger.warn("document.reconcile.sweep_threw", {
+                    reason: err instanceof Error ? err.message : String(err),
+                });
+            }
+            finally {
+                reconcileSweepStartedAt = null;
+            }
+        })();
+    }, RECONCILE_SWEEP_MS);
+    reconcileSweepTimer.unref?.();
+    // `documentPublish` is NOT returned: its only consumer is the handler registration inside this
+    // module. Returning it would widen the surface for no caller.
+    return { reconcileSweepTimer, reconcileScheduler };
+}
+//# sourceMappingURL=document-surface.js.map

package/dist/document-surface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-surface.js","sourceRoot":"","sources":["../src/document-surface.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAmBlE,MAAM,UAAU,qBAAqB,CAAC,IAAyB;IAC7D,MAAM,EACJ,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EACnF,mBAAmB,EAAE,aAAa,EAAE,mBAAmB,EAAE,oBAAoB,GAC9E,GAAG,IAAI,CAAC;IACT,8FAA8F;IAC9F,gGAAgG;IAChG,gGAAgG;IAChG,mBAAmB;IACnB,IAAI,kBAAkD,CAAC;IAEvD,gGAAgG;IAChG,kGAAkG;IAClG,mGAAmG;IACnG,iCAAiC;IACjC,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC;QAC1C,UAAU,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC;QAC5F,qBAAqB,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,EAAE,CAClD,aAAa,CAAC,qBAAqB,CAAC,YAAY,EAAE,UAAU,CAAC;QAC/D,KAAK,EAAE,aAAa,CAAC,KAAK;QAC1B,MAAM,EAAE,aAAa,CAAC,MAAM;QAC5B,MAAM;QACN,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE;YAChC,8FAA8F;YAC9F,2FAA2F;YAC3F,0EAA0E;YAC1E,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,YAAY,CAAC,EAAE,IAAI,CAAC;YAC3F,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACrE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CACb,wDAAwD,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK;oBACpF,iCAAiC,CACpC,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,yFAAyF;QACzF,iFAAiF;QACjF,WAAW,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY;QAC3C,UAAU,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC;QACtG,sFAAsF;QACtF,yFAAyF;QACzF,UAAU,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE;YAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,KAAK,aAAa;qBACf,iBAAiB,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC;qBACnD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;oBACb,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;wBACb,2EAA2E;wBAC3E,8EAA8E;wBAC9E,sEAAsE;wBACtE,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;4BAC7C,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;yBACnD,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;oBACtB,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;wBAC7C,UAAU,EAAE,WAAW,EAAE,IAAI;wBAC7B,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACzD,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACP,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IACH,wBAAwB,CAAC;QACvB,QAAQ;QACR,MAAM;QACN,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,eAAe;QACxB,YAAY,EAAE,oBAAoB;QAClC,YAAY,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,EAAE,CACvC,mBAAmB,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC;QACrE,WAAW,EAAE,mBAAmB;QAChC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;YAC7B,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,SAAS,EAAE,CAAC,CAAC;YAC/F,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAC;IAEH,8FAA8F;IAC9F,6FAA6F;IAC7F,kBAAkB,GAAG,IAAI,kBAAkB,CAAC;QAC1C,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;QACrB,MAAM;QACN,YAAY,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,YAAY,CAAC;QACxE,UAAU,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,CACrD,aAAa,CAAC,UAAU,CAAC,YAAY,EAAE,UAAU,EAAE,YAAY,CAAC;QAClE,iBAAiB,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,CAC5D,aAAa,CAAC,iBAAiB,CAAC,YAAY,EAAE,WAAW,EAAE,WAAW,CAAC;QACzE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC,CAAC;YAC/E,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC,IAAI,GAAG;YAC/D,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC,EAAE;YAC/E,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IACH,kGAAkG;IAClG,MAAM,qBAAqB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC,CAAC;IACvF,MAAM,kBAAkB,GACtB,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,qBAAqB,IAAI,GAAG;QACpE,CAAC,CAAC,qBAAqB;QACvB,CAAC,CAAC,OAAO,CAAC;IACd,0FAA0F;IAC1F,0FAA0F;IAC1F,4FAA4F;IAC5F,oFAAoF;IACpF,8EAA8E;IAC9E,MAAM,uBAAuB,GAAG,CAAC,GAAG,MAAM,CAAC;IAC3C,IAAI,uBAAuB,GAAkB,IAAI,CAAC;IAClD,MAAM,mBAAmB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC3C,IAAI,uBAAuB,KAAK,IAAI,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,uBAAuB,GAAG,uBAAuB;gBAAE,OAAO;YAC3E,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;gBAC7C,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,uBAAuB;gBAC5C,MAAM,EAAE,+EAA+E;aACxF,CAAC,CAAC;QACL,CAAC;QACD,uBAAuB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,KAAK,MAAM,SAAS,IAAI,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC;oBACjD,MAAM,YAAY,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;oBACpD,IAAI,YAAY,KAAK,IAAI;wBAAE,SAAS;oBACpC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;oBAC5D,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC9C,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;oBACrE,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;oBAC5C,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACzD,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,uBAAuB,GAAG,IAAI,CAAC;YACjC,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACvB,mBAAmB,CAAC,KAAK,EAAE,EAAE,CAAC;IAE9B,+FAA+F;IAC/F,8DAA8D;IAC9D,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,CAAC;AACrD,CAAC"}

package/dist/document-wiring.d.ts

@@ -0,0 +1,53 @@
+import { type SecurityGatewayClient } from "@cello-protocol/gateway";
+import type { IpcHandler } from "./ipc-server.js";
+import type { SessionNodeManager } from "./session-node-manager.js";
+import type { Logger } from "./types.js";
+import type { LoadedAgent } from "./agent-loader.js";
+import type { KeyProvider } from "@cello-protocol/crypto";
+import type { SignalingManager } from "@cello-protocol/transport";
+import type { NotificationDispatcher } from "./notification-dispatcher.js";
+import type { DiscoveryOutcome } from "./cross-node-negotiation.js";
+export interface DocumentWiringDeps {
+    logger: Logger;
+    sessionNodeManager: SessionNodeManager;
+    /** The LIVE registry — `cello_create_agent` pushes into it, so a new agent works without a restart. */
+    loadedAgents: ReadonlyArray<LoadedAgent>;
+    keyProviders: Map<string, KeyProvider>;
+    /** The gateway itself, not the config that holds it. */
+    securityGateway: SecurityGatewayClient;
+    /** Where the daemon keeps its data; documents live under it. */
+    celloDir: string;
+    deliveryOpens: {
+        begin: (openerPubkey: string, targetPubkey: string) => () => void;
+    };
+    pubkeyOfAgent: (name: string) => string;
+    openSessionFor: (agentName: string, opts: {
+        targetPubkey: string;
+    }) => Promise<unknown>;
+    perAgentSignaling: Map<string, {
+        signaling: SignalingManager;
+    }>;
+    runDiscoveryLookup: (signaling: SignalingManager, targetHex: string, timeoutMs: number, correlationId: string) => Promise<DiscoveryOutcome>;
+    /**
+     * ⚠️ A GETTER, NOT THE VALUE. The scheduler is constructed AFTER this wiring — it consumes the
+     * layer's sweep targets — so at the moment this module is built the binding is `undefined`.
+     * Passing the value captures that `undefined` for the life of the process and
+     * `reconcileScheduler?.noteRefusal(...)` becomes a permanent no-op: refusals still log, backoff
+     * never applies, and the sweep re-asks immediately. Measured cost of that state, from the
+     * scheduler's own notes: 321 attempts against two documents in 85 minutes, refused every time.
+     * Optional chaining makes it silent and the `| undefined` in the type makes it legal, so nothing
+     * but this comment and the test beside it stands between here and that behaviour.
+     */
+    getReconcileScheduler: () => {
+        noteRefusal: (ownerAgentId: string, peerAgentId: string, terminal: boolean) => void;
+    } | undefined;
+    notificationDispatcher: NotificationDispatcher;
+    /** ONE other handler, not the map it lives in. */
+    getCloseSessionHandler: () => IpcHandler | undefined;
+}
+export declare function createDocumentWiring(deps: DocumentWiringDeps): {
+    documentLayer: import("./document-layer.js").DocumentLayer;
+    documentOwnerKeyFor: (agentName: string) => string | null;
+    documentTransportFor: (agentName: string) => import("./document-delivery-transport.js").DocumentDeliveryTransport;
+};
+//# sourceMappingURL=document-wiring.d.ts.map

package/dist/document-wiring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-wiring.d.ts","sourceRoot":"","sources":["../src/document-wiring.ts"],"names":[],"mappings":"AAyBA,OAAO,EAA6B,KAAK,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,uGAAuG;IACvG,YAAY,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;IACzC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACvC,wDAAwD;IACxD,eAAe,EAAE,qBAAqB,CAAC;IACvC,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE;QAAE,KAAK,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,IAAI,CAAA;KAAE,CAAC;IACrF,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACxC,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACxF,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC;IAChE,kBAAkB,EAAE,CAClB,SAAS,EAAE,gBAAgB,EAC3B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,KAClB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/B;;;;;;;;;OASG;IACH,qBAAqB,EAAE,MAAM;QAAE,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAA;KAAE,GAAG,SAAS,CAAC;IACjI,sBAAsB,EAAE,sBAAsB,CAAC;IAC/C,kDAAkD;IAClD,sBAAsB,EAAE,MAAM,UAAU,GAAG,SAAS,CAAC;CACtD;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,kBAAkB;;qCAuBnB,MAAM,KAAG,MAAM,GAAG,IAAI;sCAgJrB,MAAM;EAqJhD"}