@cello-protocol/daemon 0.0.207 → 0.0.209

package/dist/session-node-types.js

@@ -340,6 +340,24 @@ export const REVIVAL_BOUND_SWEEP_MS = 60 * 60 * 1000;
 /** DOD-M12B-SESSION-SEED-1: per-relay deadline when a revived node asks for a circuit reservation.
  *  Three seconds — a relay that has a slot answers well inside it, and one that does not never
  *  answers at all (measured: 10,002ms and still waiting). */
+/**
+ * 055-ONDEMAND — how long a seal will wait to TELL a relay its slot is free.
+ *
+ * Short on purpose. Releasing is a courtesy that frees capacity; a seal is the thing the operator
+ * is waiting for. An undelivered release costs one slot until its reservation TTL, and that is a
+ * far better trade than a seal that waits on an unreachable relay's dial.
+ */
+export const RELEASE_TELL_BUDGET_MS = 3_000;
+/**
+ * 055-ONDEMAND — how long a slot taken to answer an OFFER may sit before the offer is called dead.
+ *
+ * ⚠️ **NOT the directory's 2-second accept clock.** The accept only starts the ceremony: the
+ * assignment still has to be FROST-signed by a threshold of directory nodes and delivered to both
+ * parties before either builds a session node. Releasing on 2 s would take the slot out from under
+ * a session that was about to begin, turning a rare abandoned offer into a common broken session.
+ * Sixty seconds is far past any healthy ceremony and far short of the relay's two-hour TTL.
+ */
+export const OFFER_RESERVATION_GRACE_MS = 60_000;
 export const REVIVE_RESERVATION_TIMEOUT_MS = 3_000;
 /** How many relays a revival will ask before settling for a plain node. Two: the worst case is then
  *  ~6s to a usable session, against a measured "never" for the unbounded form. */
@@ -595,4 +613,53 @@ export const UNREAD_RECEIVED_WHERE = `
            AND t.sequence > COALESCE(w.last_delivered_seq, -1)`;
 export const REFUSED_SESSIONS_CAP = 200;
 export const TERMINAL_STATUSES = `('sealed','abandoned','seal_interrupted_pending','interrupted')`;
+/**
+ * A reservation ask that failed for a CLIENT-SIDE reason, named by the transport.
+ *
+ * ⚠️ **REVIEW HIGH-2 — WITHOUT THIS, A LIBP2P RENAME READS AS A CAPACITY OUTAGE.** When
+ * `listenOnCircuit` throws `transport_manager_unavailable`, the ask never reached the relay at all —
+ * but the generic decline below infers its reason from the connection state, finds the proof
+ * connection still open, and reports `relay_granted_no_reservation` on every relay in the pool. That
+ * string means *"relay CAPACITY, a trustless-cello problem"* in this daemon's own taxonomy, so an
+ * upstream API change would send an operator into the relay fleet while the real cause survived only
+ * as an `error` field on a warn line nothing surfaces.
+ *
+ * These faults are ours. They must be described in our vocabulary, not the relay's.
+ */
+export const CLIENT_SIDE_ASK_FAULTS = new Set(["transport_manager_unavailable", "not_a_circuit_address"]);
+export function clientSideAskFault(err) {
+    const reason = err?.reason;
+    return typeof reason === "string" && CLIENT_SIDE_ASK_FAULTS.has(reason) ? reason : undefined;
+}
+/**
+ * Whether this node holds a granted reservation — i.e. announces a circuit address.
+ *
+ * Review LOW-5: `p2p-circuit` is read as a SEGMENT, the same rule `listenOnCircuit` applies to its
+ * own input. A substring test also matches a host or peer id that happens to contain the text, and
+ * the file should not argue one rule and apply another two lines later.
+ */
+export function holdsCircuit(node) {
+    return node.listenAddresses().some((a) => a.split("/").includes("p2p-circuit"));
+}
+/**
+ * Wait for an abandoned candidate's outstanding work to settle, then stop it — but never wait
+ * forever.
+ *
+ * ⚠️ **REVIEW MEDIUM-4 — `allSettled` ON A PROMISE THAT CANNOT SETTLE NEVER RUNS THE TEARDOWN.**
+ * The teardown is chained onto the candidate's own work because `libp2p.stop()` returns immediately
+ * unless the node is `started`, so stopping a node mid-flight stops nothing. But a relay that
+ * accepts the stream and never answers leaves `listen()` pending forever — that is exactly the case
+ * `msg-027`'s fixture models — and the chained stop would then never fire at all, leaving a live
+ * node on the receiver's seed while the walk builds more nodes on that same seed.
+ *
+ * So: settle OR expire. The grace is generous relative to the ask's own deadline, because the point
+ * is to bound the wait, not to race it — a node that finishes at the last moment must still be
+ * stopped by its own settlement rather than while it is starting.
+ */
+export function stopWhenSettled(node, work, graceMs) {
+    const pending = work.filter((p) => p !== undefined);
+    const settled = Promise.allSettled(pending);
+    const bounded = new Promise((resolve) => { setTimeout(resolve, graceMs).unref?.(); });
+    void Promise.race([settled, bounded]).then(() => node.stop().catch(() => { }));
+}
 //# sourceMappingURL=session-node-types.js.map

package/dist/session-node-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-node-types.js","sourceRoot":"","sources":["../src/session-node-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAOzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAmBlE,8FAA8F;AAC9F;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAC9C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAE5C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAEtC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAExC;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAG5C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAC9C,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAEjD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,8FAA8F;IAC9F,oBAAoB,EAAE,sBAAsB;IAC5C,6DAA6D;IAC7D,mBAAmB,EAAE,qBAAqB;IAC1C;;;;;;;;OAQG;IACH,oBAAoB,EAAE,sBAAsB;IAC5C;;;;;;OAMG;IACH,wBAAwB,EAAE,0BAA0B;IACpD,gGAAgG;IAChG,qBAAqB,EAAE,uBAAuB;IAC9C;;;;;;;OAOG;IACH,uBAAuB,EAAE,yBAAyB;IAClD,wEAAwE;IACxE,iBAAiB,EAAE,mBAAmB;IACtC,sFAAsF;IACtF,uBAAuB,EAAE,yBAAyB;IAClD,6FAA6F;IAC7F,kBAAkB,EAAE,oBAAoB;IACxC;;;;;OAKG;IACH,eAAe,EAAE,qBAAqB;IACtC;;;OAGG;IACH,eAAe,EAAE,iBAAiB;CAC1B,CAAC;AAIX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAmC;IAC/D,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EACrC,iYAAiY;IACnY,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,EACpC,mXAAmX;IACrX,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EACrC,yPAAyP;IAC3P,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,EACzC,+cAA+c;IACjd,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EACtC,saAAsa;IACxa,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,EACxC,6WAA6W;IAC/W,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,EAClC,6MAA6M;IAC/M,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,EACxC,gSAAgS;IAClS,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EACnC,kPAAkP;IACpP,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAChC,oWAAoW;IACtW,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAChC,yQAAyQ;CAC5Q,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAE/C;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAE/C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAE/C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C,yEAAyE;AACzE,MAAM,CAAC,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AAE9D;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,IAAe;IAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAE,SAAS;QAC7C,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,EAAE,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAElD,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAK,GAAG,EAAE,EAAU,EAAE;IAC/C,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACnC,OAAO,IAAI,CAAC;iBACG,CAAC;8BACY,CAAC;qBACV,CAAC,mBAAmB,CAAC;AAC1C,CAAC,CAAC;AACF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAa,EAAU,EAAE,CACrD,4CAA4C,KAAK,QAAQ,UAAU,EAAE,EAAE,CAAC;AAE1E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,cAAc,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,sBAAsB,CAAC;AAyChF,mGAAmG;AACnG,oGAAoG;AACpG,6DAA6D;AAC7D;qGACqG;AACrG,MAAM,CAAC,MAAM,gCAAgC,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,QAAQ;AAC9G;6CAC6C;AAC7C,MAAM,CAAC,MAAM,qCAAqC,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,CAAC,IAAI;AACjH;4FAC4F;AAC5F,MAAM,CAAC,MAAM,iCAAiC,GAAG,EAAE,CAAC;AAgOpD,iFAAiF;AAEjF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AA0BtC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAErD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAErD;;6DAE6D;AAC7D,MAAM,CAAC,MAAM,6BAA6B,GAAG,KAAK,CAAC;AAEnD;kFACkF;AAClF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAE/C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAE5F;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAErD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AA8HrD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,0BAA0B,CAAC;AAE3E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,kBAAkB,CAAC;AAE9D;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,qBAAqB,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,OAAO,CAAC;AACxD,MAAM,CAAC,MAAM,uBAAuB,GAAG,gCAAgC,GAAG,MAAM,CAAC;AAEjF,sFAAsF;AACtF,MAAM,CAAC,MAAM,4BAA4B,GAAG,mBAAmB,CAAC;AAEhE,qGAAqG;AACrG,MAAM,CAAC,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AAetE,MAAM,CAAC,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAS;IACnE,4BAA4B;IAC5B,2BAA2B;CAC5B,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GACnC,iGAAiG;IACjG,gGAAgG;IAChG,iGAAiG;IACjG,+FAA+F;IAC/F,aAAa,CAAC;AAEhB;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,sBAAsB,GACjC,kGAAkG;IAClG,mGAAmG;IACnG,kGAAkG;IAClG,uCAAuC,CAAC;AAE1C;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,CAAa,EAAE,CAAa;IACrD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AAiCD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,WAAmB;IAC/C,OAAO,6BAA6B,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAA+B;IACpE,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACjD,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAGrC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;;+DAE0B,CAAC;AAEhE,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,MAAM,CAAC,MAAM,iBAAiB,GAAG,iEAAiE,CAAC"}
+{"version":3,"file":"session-node-types.js","sourceRoot":"","sources":["../src/session-node-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAOzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAmBlE,8FAA8F;AAC9F;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAC9C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAE5C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAEtC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAExC;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAG5C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAC9C,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAEjD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,8FAA8F;IAC9F,oBAAoB,EAAE,sBAAsB;IAC5C,6DAA6D;IAC7D,mBAAmB,EAAE,qBAAqB;IAC1C;;;;;;;;OAQG;IACH,oBAAoB,EAAE,sBAAsB;IAC5C;;;;;;OAMG;IACH,wBAAwB,EAAE,0BAA0B;IACpD,gGAAgG;IAChG,qBAAqB,EAAE,uBAAuB;IAC9C;;;;;;;OAOG;IACH,uBAAuB,EAAE,yBAAyB;IAClD,wEAAwE;IACxE,iBAAiB,EAAE,mBAAmB;IACtC,sFAAsF;IACtF,uBAAuB,EAAE,yBAAyB;IAClD,6FAA6F;IAC7F,kBAAkB,EAAE,oBAAoB;IACxC;;;;;OAKG;IACH,eAAe,EAAE,qBAAqB;IACtC;;;OAGG;IACH,eAAe,EAAE,iBAAiB;CAC1B,CAAC;AAIX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAmC;IAC/D,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EACrC,iYAAiY;IACnY,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,EACpC,mXAAmX;IACrX,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EACrC,yPAAyP;IAC3P,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,EACzC,+cAA+c;IACjd,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EACtC,saAAsa;IACxa,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,EACxC,6WAA6W;IAC/W,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,EAClC,6MAA6M;IAC/M,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,EACxC,gSAAgS;IAClS,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EACnC,kPAAkP;IACpP,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAChC,oWAAoW;IACtW,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAChC,yQAAyQ;CAC5Q,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAE/C;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAE/C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAE/C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C,yEAAyE;AACzE,MAAM,CAAC,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AAE9D;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,IAAe;IAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAE,SAAS;QAC7C,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,EAAE,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAElD,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAK,GAAG,EAAE,EAAU,EAAE;IAC/C,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACnC,OAAO,IAAI,CAAC;iBACG,CAAC;8BACY,CAAC;qBACV,CAAC,mBAAmB,CAAC;AAC1C,CAAC,CAAC;AACF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAa,EAAU,EAAE,CACrD,4CAA4C,KAAK,QAAQ,UAAU,EAAE,EAAE,CAAC;AAE1E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,cAAc,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,sBAAsB,CAAC;AAyChF,mGAAmG;AACnG,oGAAoG;AACpG,6DAA6D;AAC7D;qGACqG;AACrG,MAAM,CAAC,MAAM,gCAAgC,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,QAAQ;AAC9G;6CAC6C;AAC7C,MAAM,CAAC,MAAM,qCAAqC,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,CAAC,IAAI;AACjH;4FAC4F;AAC5F,MAAM,CAAC,MAAM,iCAAiC,GAAG,EAAE,CAAC;AAyOpD,iFAAiF;AAEjF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AA0BtC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAErD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAErD;;6DAE6D;AAC7D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAE5C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAEjD,MAAM,CAAC,MAAM,6BAA6B,GAAG,KAAK,CAAC;AAEnD;kFACkF;AAClF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAE/C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAE5F;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAErD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AA8HrD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,0BAA0B,CAAC;AAE3E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,kBAAkB,CAAC;AAE9D;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,qBAAqB,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,OAAO,CAAC;AACxD,MAAM,CAAC,MAAM,uBAAuB,GAAG,gCAAgC,GAAG,MAAM,CAAC;AAEjF,sFAAsF;AACtF,MAAM,CAAC,MAAM,4BAA4B,GAAG,mBAAmB,CAAC;AAEhE,qGAAqG;AACrG,MAAM,CAAC,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AAetE,MAAM,CAAC,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAS;IACnE,4BAA4B;IAC5B,2BAA2B;CAC5B,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GACnC,iGAAiG;IACjG,gGAAgG;IAChG,iGAAiG;IACjG,+FAA+F;IAC/F,aAAa,CAAC;AAEhB;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,sBAAsB,GACjC,kGAAkG;IAClG,mGAAmG;IACnG,kGAAkG;IAClG,uCAAuC,CAAC;AAE1C;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,CAAa,EAAE,CAAa;IACrD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AAiCD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,WAAmB;IAC/C,OAAO,6BAA6B,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAA+B;IACpE,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACjD,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAGrC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;;+DAE0B,CAAC;AAEhE,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,MAAM,CAAC,MAAM,iBAAiB,GAAG,iEAAiE,CAAC;AAEnG;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,+BAA+B,EAAE,uBAAuB,CAAC,CAAC,CAAC;AAC1G,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,MAAM,MAAM,GAAI,GAAmC,EAAE,MAAM,CAAC;IAC5D,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,IAAe;IAC1C,OAAO,IAAI,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,IAAe,EAAE,IAAyC,EAAE,OAAe;IACzG,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAqB,CAAC,CAAC,CAAC,CAAC;AACnG,CAAC"}

package/dist/session-relay-client.d.ts

@@ -52,6 +52,7 @@ export interface RelayAuthRefusal {
     /** Present when the relay said when to come back. */
     retryAfterMs?: number;
 }
+export declare function isLocalCredentialRefusal(reason: string): boolean;
 /**
  * Classify a relay's auth refusal: what to tell the operator, and whether another relay would help.
  *
@@ -382,6 +383,26 @@ export declare class AgentRelayClient {
      * on a question already answered. Only a failure that never reached a verdict is retried.
      */
     proveReservation(node: CelloNode): Promise<boolean>;
+    /**
+     * 054-SRSPLIT — **TELL THE RELAY WE ARE DONE WITH OUR SLOT.**
+     *
+     * Resolves whether the relay confirmed it freed one. `false` covers "we held none" and "we could
+     * not reach the relay to say so" alike, and the caller must not read it as failure: releasing is
+     * tidy-up, and one that could not be delivered costs a slot until its TTL rather than breaking
+     * anything the agent is doing. Every path that returns false says why.
+     *
+     * ⚠️ **IT GOES ON THE LONG-LIVED DELIVERY STREAM, NOT A RESERVATION-PURPOSE ONE, AND THAT IS NOT
+     * A STYLE CHOICE.** The first version opened a fresh stream and authenticated with
+     * `purpose: "reservation"` — mirroring the proof. The relay's handler treats that purpose as a
+     * proof and nothing else: it answers `relay_auth_ok`, **closes the stream and returns without
+     * entering the message loop**. So the release frame went into a stream nobody was reading, the
+     * reply never came, and the verb was inert while every test passed. Found in review, not by the
+     * suite.
+     *
+     * ⚠️ **THE FRAME CARRIES NO PEER ID, deliberately.** The relay frees the peer this connection
+     * authenticated as. A peer id on the wire would let any registered agent free another's.
+     */
+    releaseReservation(node: CelloNode): Promise<boolean>;
     /**
      * Submit a session's CONTENT-leaf hash to the relay. Connects/re-connects from `node` if needed.
      * Globally FIFO across the agent's sessions (the ack has no session_id).

package/dist/session-relay-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-relay-client.d.ts","sourceRoot":"","sources":["../src/session-relay-client.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAU,KAAK,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,EAAoB,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACpF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAGzE,eAAO,MAAM,iBAAiB,uBAAuB,CAAC;AAEtD;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,OAAQ,CAAC;AAC1C,eAAO,MAAM,iBAAiB,wBAAwB,CAAC;AACvD,iFAAiF;AACjF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAgBtD,CAAC;AAEH,kFAAkF;AAClF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAE1E;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,OAAO,CAAC;IACzB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAqBD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,EACd,KAAK,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1E,gBAAgB,CA+DlB;AAED,eAAO,MAAM,aAAa,IAAO,CAAC;AAClC,iGAAiG;AACjG,eAAO,MAAM,cAAc,IAAO,CAAC;AACnC,uFAAuF;AACvF,eAAO,MAAM,aAAa,IAAO,CAAC;AAClC,uFAAuF;AACvF,eAAO,MAAM,gBAAgB,IAAO,CAAC;AAKrC;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,UAAU,CAIvF;AAED,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,UAAU,CAAC;IAC5B,eAAe,EAAE,UAAU,CAAC;IAC5B;;;;;OAKG;IACH,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,gDAAgD;AAChD,MAAM,MAAM,YAAY,GACpB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,eAAe,EAAE,MAAM,CAAC;IAKxB,eAAe,CAAC,EAAE,UAAU,CAAC;IAC7B,eAAe,CAAC,EAAE,UAAU,CAAC;IAC7B;;;;;;;;;;;;;OAaG;IACH,gBAAgB,CAAC,EAAE,UAAU,CAAC;CAC/B,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAGN,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,sEAAsE;IACtE,WAAW,EAAE,WAAW,CAAC;IACzB,iFAAiF;IACjF,YAAY,EAAE,UAAU,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;OAIG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,EAAE,MAAM,UAAU,GAAG,SAAS,CAAC;IAC3C;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IACpD;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAClE;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,MAAM,EAAE,oCAAoC,GAAG,gCAAgC,CAAC;IAChF,oGAAoG;IACpG,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,yFAAyF;IACzF,uBAAuB,EAAE,OAAO,CAAC;IACjC;;;OAGG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;OAUG;IACH,UAAU,EAAE,OAAO,CAAC;CACrB;AAqBD;;;;;;GAMG;AACH;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,2DAA2D;IAC3D,cAAc,EAAE,UAAU,CAAC;IAC3B,oEAAoE;IACpE,eAAe,EAAE,UAAU,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,UAAU,CAAC;IACzB,YAAY,EAAE,UAAU,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,mBAAmB,EAAE,UAAU,CAAC;CACjC;AAsDD;;;;GAIG;AACH,qBAAa,gBAAgB;;IAO3B,4EAA4E;IAC5E,kBAAkB,IAAI,MAAM,GAAG,IAAI;IAqDnC,+FAA+F;IAC/F,kBAAkB,IAAI,gBAAgB,GAAG,IAAI;gBAyFjC,IAAI,EAAE,oBAAoB;IA8BtC,2FAA2F;IAC3F,IAAI,eAAe,IAAI,MAAM,CAE5B;IAED;;;;OAIG;IACH,eAAe,CACb,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,SAAS,EACf,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,EACjD,UAAU,CAAC,EAAE,oBAAoB;IACjC;;;;;;;;;;;;;;OAcG;IACH,eAAe,CAAC,EAAE,UAAU,GAC3B,IAAI;IAoCP;;;;;;;;;;;;;;;;;OAiBG;IACG,uBAAuB,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgFtF,0EAA0E;IAC1E,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAM7C,WAAW,IAAI,OAAO;IAItB;;;;;;;;OAQG;IACH,UAAU,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IA6hBzC;;;;OAIG;IACG,OAAO,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAIhD;;;;;;;;;;;;;;;;;OAiBG;IACH;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,gBAAgB,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IA4YzD;;;;;;;;;OASG;IACG,iBAAiB,CACrB,IAAI,EAAE,SAAS,EACf,SAAS,EAAE,UAAU,EACrB,WAAW,EAAE,UAAU;IACvB;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,YAAY,CAAC;IAQxB;;;;;;;;;;;;;;;;;;OAkBG;IACG,mBAAmB,CACvB,IAAI,EAAE,SAAS,EACf,SAAS,EAAE,UAAU,EACrB,WAAW,EAAE,UAAU,EACvB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,YAAY,CAAC;IAIxB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA0CG;IACG,UAAU,CACd,IAAI,EAAE,SAAS,EACf,SAAS,EAAE,UAAU,EACrB,WAAW,EAAE,UAAU,EACvB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,UAAU,GAAG,IAAI;IAC/B;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,YAAY,CAAC;IAggBxB,yFAAyF;IACzF;;;;;;;;;;;;;;;;;;;OAmBG;IACH,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,GAAG,IAAI;IAIvF;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE,GAAG,SAAS;IAIhF;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAMzD;;;;;;OAMG;IACH,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,GAAG,IAAI;IAKhE,KAAK,IAAI,IAAI;CAWd"}
+{"version":3,"file":"session-relay-client.d.ts","sourceRoot":"","sources":["../src/session-relay-client.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAU,KAAK,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,EAAoB,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACpF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAGzE,eAAO,MAAM,iBAAiB,uBAAuB,CAAC;AAEtD;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,OAAQ,CAAC;AAC1C,eAAO,MAAM,iBAAiB,wBAAwB,CAAC;AACvD,iFAAiF;AACjF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAgBtD,CAAC;AAEH,kFAAkF;AAClF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAE1E;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,OAAO,CAAC;IACzB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AA+CD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,EACd,KAAK,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1E,gBAAgB,CA8ElB;AAED,eAAO,MAAM,aAAa,IAAO,CAAC;AAClC,iGAAiG;AACjG,eAAO,MAAM,cAAc,IAAO,CAAC;AACnC,uFAAuF;AACvF,eAAO,MAAM,aAAa,IAAO,CAAC;AAClC,uFAAuF;AACvF,eAAO,MAAM,gBAAgB,IAAO,CAAC;AAKrC;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,UAAU,CAIvF;AAED,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,UAAU,CAAC;IAC5B,eAAe,EAAE,UAAU,CAAC;IAC5B;;;;;OAKG;IACH,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,gDAAgD;AAChD,MAAM,MAAM,YAAY,GACpB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,eAAe,EAAE,MAAM,CAAC;IAKxB,eAAe,CAAC,EAAE,UAAU,CAAC;IAC7B,eAAe,CAAC,EAAE,UAAU,CAAC;IAC7B;;;;;;;;;;;;;OAaG;IACH,gBAAgB,CAAC,EAAE,UAAU,CAAC;CAC/B,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAGN,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,sEAAsE;IACtE,WAAW,EAAE,WAAW,CAAC;IACzB,iFAAiF;IACjF,YAAY,EAAE,UAAU,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;OAIG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,EAAE,MAAM,UAAU,GAAG,SAAS,CAAC;IAC3C;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IACpD;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAClE;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,MAAM,EAAE,oCAAoC,GAAG,gCAAgC,CAAC;IAChF,oGAAoG;IACpG,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,yFAAyF;IACzF,uBAAuB,EAAE,OAAO,CAAC;IACjC;;;OAGG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;OAUG;IACH,UAAU,EAAE,OAAO,CAAC;CACrB;AAqBD;;;;;;GAMG;AACH;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,2DAA2D;IAC3D,cAAc,EAAE,UAAU,CAAC;IAC3B,oEAAoE;IACpE,eAAe,EAAE,UAAU,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,UAAU,CAAC;IACzB,YAAY,EAAE,UAAU,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,mBAAmB,EAAE,UAAU,CAAC;CACjC;AAsDD;;;;GAIG;AACH,qBAAa,gBAAgB;;IAO3B,4EAA4E;IAC5E,kBAAkB,IAAI,MAAM,GAAG,IAAI;IA2DnC,+FAA+F;IAC/F,kBAAkB,IAAI,gBAAgB,GAAG,IAAI;gBA+FjC,IAAI,EAAE,oBAAoB;IA8BtC,2FAA2F;IAC3F,IAAI,eAAe,IAAI,MAAM,CAE5B;IAED;;;;OAIG;IACH,eAAe,CACb,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,SAAS,EACf,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,EACjD,UAAU,CAAC,EAAE,oBAAoB;IACjC;;;;;;;;;;;;;;OAcG;IACH,eAAe,CAAC,EAAE,UAAU,GAC3B,IAAI;IAoCP;;;;;;;;;;;;;;;;;OAiBG;IACG,uBAAuB,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgFtF,0EAA0E;IAC1E,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAM7C,WAAW,IAAI,OAAO;IAItB;;;;;;;;OAQG;IACH,UAAU,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAkiBzC;;;;OAIG;IACG,OAAO,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAIhD;;;;;;;;;;;;;;;;;OAiBG;IACH;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,gBAAgB,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IA0JzD;;;;;;;;;;;;;;;;;;OAkBG;IACG,kBAAkB,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IA6T3D;;;;;;;;;OASG;IACG,iBAAiB,CACrB,IAAI,EAAE,SAAS,EACf,SAAS,EAAE,UAAU,EACrB,WAAW,EAAE,UAAU;IACvB;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,YAAY,CAAC;IAQxB;;;;;;;;;;;;;;;;;;OAkBG;IACG,mBAAmB,CACvB,IAAI,EAAE,SAAS,EACf,SAAS,EAAE,UAAU,EACrB,WAAW,EAAE,UAAU,EACvB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,YAAY,CAAC;IAIxB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA0CG;IACG,UAAU,CACd,IAAI,EAAE,SAAS,EACf,SAAS,EAAE,UAAU,EACrB,WAAW,EAAE,UAAU,EACvB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,UAAU,GAAG,IAAI;IAC/B;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,YAAY,CAAC;IAmjBxB,yFAAyF;IACzF;;;;;;;;;;;;;;;;;;;OAmBG;IACH,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,GAAG,IAAI;IAIvF;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE,GAAG,SAAS;IAIhF;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAMzD;;;;;;OAMG;IACH,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,GAAG,IAAI;IAKhE,KAAK,IAAI,IAAI;CAWd"}

package/dist/session-relay-client.js

@@ -102,6 +102,34 @@ const RELAY_SIDE_REFUSALS = new Set([
      */
     "online_token_no_directory_key",
 ]);
+/**
+ * ─── WHOSE FAULT IS IT? — `DOD-M15-TOKENSTALE-1` ───────────────────────────────────────────────
+ *
+ * A SECOND question about the same refusal, and it is deliberately not `tryAnotherRelay` inverted.
+ * That one asks "would another relay help?"; this asks "is the broken thing ours?". They disagree
+ * on the case that matters: a slot cap is not worth failing over AND is entirely the relay's own
+ * answer about its own table — so reusing the failover flag to mean "our fault" would be right for
+ * the wrong reason, and would start telling operators their machine is broken when it is not.
+ *
+ * The consumer is the submit boundary. `#ensureConnected` returns a BOOLEAN, so every refusal below
+ * used to collapse into `relay_unavailable` — "the relay is unreachable", which is transient,
+ * somebody else's, and the documented reason a send degrades to an unwitnessed leaf and still
+ * reports success. An expired token is none of those. Measured live 2026-09-10: an agent reported
+ * `ok:true, delivered:true` on every send for over two days while the relay refused all thirteen
+ * authentications, and no conversation it held could produce a receipt.
+ *
+ * ⚠️ AN UNKNOWN REASON IS NOT LOCAL, and the direction of that default is a real choice. A future
+ * relay-side reason defaulting to "local" would accuse the reader's own machine, and a wrong
+ * accusation about your own setup costs more than a vague one about someone else's.
+ */
+const LOCAL_CREDENTIAL_REFUSALS = new Set([
+    "online_token_required",
+    "online_token_expired",
+    "online_token_pubkey_mismatch",
+]);
+export function isLocalCredentialRefusal(reason) {
+    return LOCAL_CREDENTIAL_REFUSALS.has(reason);
+}
 /**
  * Classify a relay's auth refusal: what to tell the operator, and whether another relay would help.
  *
@@ -121,8 +149,23 @@ export function classifyRelayAuthRefusal(reason, extra = {}) {
                 "it persists, the agent is not reaching any directory — check that first, not the relay.";
             break;
         case "online_token_expired":
-            advice = "The online token has expired and is refreshed on the next directory connection. If " +
-                "it keeps expiring, this machine's clock or its directory connection is the thing to look at.";
+            /**
+             * ⚠️ THIS SENTENCE USED TO PROMISE A REFRESH THAT DOES NOT HAPPEN, and the promise is why the
+             * condition survived for days. It read: *"refreshed on the next directory connection"*. True,
+             * and useless — the token is issued only in the directory handshake, it lasts ONE HOUR, and a
+             * healthy agent does not make another connection. Measured on one box: a token at
+             * 2026-09-08 09:06 and the next over two days later.
+             *
+             * It now leads with the CONSEQUENCE, because the operator arrives here having been told every
+             * send succeeded, and names the one action that works today. The automatic refresh is
+             * `DOD-M15-TOKENSTALE-1` unit 2 and needs a directory frame that does not exist yet.
+             */
+            advice = "This agent's pass from the directory has expired, so the relay is refusing to " +
+                "witness anything it sends: messages still arrive, but nothing is being recorded as proof " +
+                "and no conversation can produce a receipt until this clears. It is NOT refreshed while the " +
+                "daemon keeps running — restart it (cello logout, then cello login) and the next session " +
+                "will be witnessed again. If it comes back within the hour, this machine's clock or its " +
+                "directory connection is the thing to look at.";
             break;
         case "online_token_signature_invalid":
         case "online_token_malformed":
@@ -313,6 +356,12 @@ export class AgentRelayClient {
      * whether a different relay would do any better.
      */
     #lastAuthRefusal = null;
+    /**
+     * review F6 — which credential refusal we have already explained in full, so a condition that
+     * lasts until a relogin is explained once rather than on every send. Reset with the refusal
+     * itself, so the next occurrence after a recovery is a first occurrence again.
+     */
+    #loggedCredentialRefusal = null;
     /** The last classified auth refusal from this relay, or null if the last attempt succeeded. */
     getLastAuthRefusal() {
         return this.#lastAuthRefusal;
@@ -326,6 +375,7 @@ export class AgentRelayClient {
      * keeps the declared type and says what the reset is for.
      */
     #clearAuthRefusal() {
+        this.#loggedCredentialRefusal = null;
         this.#lastAuthRefusal = null;
     }
     #stream = null;
@@ -376,6 +426,11 @@ export class AgentRelayClient {
      * the same `#submitChain` as submits, guaranteeing no overlap.
      */
     #pendingRecord = null;
+    /**
+     * 054-SRSPLIT — the in-flight `relay_release_reservation`. At most one: releases are rare and
+     * serialized on the shared stream, exactly like `#pendingRecord`, whose ack also carries no id.
+     */
+    #pendingRelease = null;
     /** Serializes submits so only one is in flight at a time across all sessions. */
     #submitChain = Promise.resolve();
     /** session_id hex → { the live node to (re)dial from, inbound leaf handler, Option-B assignment to present }. */
@@ -823,6 +878,14 @@ export class AgentRelayClient {
                 ...(retry_after_ms !== undefined ? { retry_after_ms } : {}),
             });
         }
+        else if (type === "relay_release_ok") {
+            // 054-SRSPLIT. `released` is the relay's own answer to "did I actually hold one?" — a
+            // release of a slot we never had is a true `false`, not a failure, and the caller says so.
+            const r = this.#pendingRelease;
+            this.#pendingRelease = null;
+            if (r)
+                r(frame["released"] === true);
+        }
         else if (type === "assignment_ok") {
             // The relay verified + recorded our client-presented assignment.
             const r = this.#pendingRecord;
@@ -1364,6 +1427,85 @@ export class AgentRelayClient {
             await stream.close().catch(() => { });
         }
     }
+    /**
+     * 054-SRSPLIT — **TELL THE RELAY WE ARE DONE WITH OUR SLOT.**
+     *
+     * Resolves whether the relay confirmed it freed one. `false` covers "we held none" and "we could
+     * not reach the relay to say so" alike, and the caller must not read it as failure: releasing is
+     * tidy-up, and one that could not be delivered costs a slot until its TTL rather than breaking
+     * anything the agent is doing. Every path that returns false says why.
+     *
+     * ⚠️ **IT GOES ON THE LONG-LIVED DELIVERY STREAM, NOT A RESERVATION-PURPOSE ONE, AND THAT IS NOT
+     * A STYLE CHOICE.** The first version opened a fresh stream and authenticated with
+     * `purpose: "reservation"` — mirroring the proof. The relay's handler treats that purpose as a
+     * proof and nothing else: it answers `relay_auth_ok`, **closes the stream and returns without
+     * entering the message loop**. So the release frame went into a stream nobody was reading, the
+     * reply never came, and the verb was inert while every test passed. Found in review, not by the
+     * suite.
+     *
+     * ⚠️ **THE FRAME CARRIES NO PEER ID, deliberately.** The relay frees the peer this connection
+     * authenticated as. A peer id on the wire would let any registered agent free another's.
+     */
+    async releaseReservation(node) {
+        if (this.#closed)
+            return false;
+        if (!(await this.#ensureConnected(node))) {
+            this.#logger.warn("session.relay.reservation_release.failed", {
+                relayPeerId: this.#relayPeerId,
+                reason: "not_connected",
+                impact: "this relay was not told the slot is free, so it holds it until the reservation " +
+                    "TTL expires. Nothing the agent is doing is affected.",
+            });
+            return false;
+        }
+        const stream = this.#stream;
+        if (!stream)
+            return false;
+        let resolveRel;
+        const relPromise = new Promise((r) => { resolveRel = r; });
+        this.#pendingRelease = resolveRel;
+        try {
+            stream.send(lp.encode.single(encodeCbor({ type: "relay_release_reservation" })));
+        }
+        catch (err) {
+            if (this.#pendingRelease === resolveRel)
+                this.#pendingRelease = null;
+            this.#logger.warn("session.relay.reservation_release.failed", {
+                relayPeerId: this.#relayPeerId,
+                reason: "send",
+                error: extractErrorMessage(err),
+                impact: "the relay holds the slot until its TTL expires.",
+            });
+            return false;
+        }
+        let timer;
+        const timeout = new Promise((r) => { timer = setTimeout(() => r("timeout"), HASH_SUBMIT_TIMEOUT_MS); });
+        try {
+            const result = await Promise.race([relPromise, timeout]);
+            if (result === "timeout") {
+                // NOT a stream reset. A release is not ordered against anything — no ack of a later frame
+                // can be settled by a late reply to this one, because the reader clears the resolver — so
+                // tearing the stream down would cost sibling sessions their in-flight submits for a tidy-up.
+                this.#logger.warn("session.relay.reservation_release.failed", {
+                    relayPeerId: this.#relayPeerId,
+                    reason: "no_reply",
+                    impact: "the relay did not answer, so it holds the slot until its TTL expires.",
+                });
+                return false;
+            }
+            this.#logger.info("session.relay.reservation_release.result", {
+                relayPeerId: this.#relayPeerId,
+                nodePeerId: node.getPeerId(),
+                released: result,
+            });
+            return result;
+        }
+        finally {
+            clearTimeout(timer);
+            if (this.#pendingRelease === resolveRel)
+                this.#pendingRelease = null;
+        }
+    }
     /** Ensure an authenticated stream exists, (re)dialing from `node` if needed. */
     async #ensureConnected(node) {
         if (this.#closed)
@@ -1376,6 +1518,22 @@ export class AgentRelayClient {
         return this.#connecting;
     }
     async #connect(node) {
+        /**
+         * ⚠️ DROP THE PREVIOUS ATTEMPT'S VERDICT FIRST — `DOD-M15-TOKENSTALE-1` review F4, and the same
+         * reasoning `#proveReservationOnce` already carries in capitals twelve lines from here.
+         *
+         * `#lastAuthRefusal` is cleared only on auth SUCCESS. Both failure exits below — the dial and
+         * the stream open — are transport failures that never reach a verdict at all, so without this
+         * they return `false` carrying whatever an earlier attempt left behind.
+         *
+         * That was survivable while the submit boundary answered `relay_unavailable` for every `false`.
+         * It is not now: this unit makes that boundary REPORT the stored refusal, so a stale
+         * `online_token_expired` would relabel a relay that is genuinely down as our own dead
+         * credential — sending the operator to restart their daemon over somebody else's outage, and
+         * stripping the seal fallbacks that exist for exactly that outage. Clearing here is what makes
+         * the promotion mean "this attempt's verdict" instead of "some past verdict".
+         */
+        this.#clearAuthRefusal();
         // Best-effort dial: newStream auto-dials a known peer, but the relay's addrs may not
         // be in the peerstore yet, so dial each addr first. One success is enough.
         let dialed = false;
@@ -1595,6 +1753,14 @@ export class AgentRelayClient {
                     if (r)
                         r("closed");
                 }
+                // 054-SRSPLIT: settle an in-flight release too, so it does not wait its full timeout on a
+                // stream that is already gone. `false` is honest — the relay was not told.
+                {
+                    const r = this.#pendingRelease;
+                    this.#pendingRelease = null;
+                    if (r)
+                        r(false);
+                }
                 // A pure-receiver session issues no submit, so it would never trigger a re-dial
                 // after the node that owned the stream is torn down. If sessions remain, proactively
                 // re-establish from any still-live registered session node so queued leaf_delivers
@@ -1927,8 +2093,58 @@ export class AgentRelayClient {
     async #doSubmitOnce(node, sessionId, contentHash, leafKind, contentBytes, carried) {
         if (this.#closed)
             return { ok: false, reason: "relay_client_closed" };
-        if (!(await this.#ensureConnected(node)))
+        if (!(await this.#ensureConnected(node))) {
+            /**
+             * ─── OUR OWN DEAD CREDENTIAL IS NOT A RELAY OUTAGE — `DOD-M15-TOKENSTALE-1` ───────────────
+             *
+             * `#ensureConnected` answers with a BOOLEAN, so every reason a relay ever gave for refusing
+             * us arrived here as `false` and left as `relay_unavailable`. That word is a claim about the
+             * RELAY: unreachable, transient, someone else's, and the documented grounds on which a send
+             * appends an unwitnessed leaf and still reports success.
+             *
+             * An expired online token is the opposite on all four counts, and the cost of the mislabel is
+             * not cosmetic. Measured live 2026-09-10: an agent ran for over two days answering
+             * `ok:true, delivered:true` to every send while the relay refused all thirteen of its
+             * authentications. Nothing it said in that time could ever produce a receipt, and no surface
+             * anywhere said so — because the one place that knew called it a relay problem.
+             *
+             * `#lastAuthRefusal` already held the truth (`cello status` reads it); the submit path simply
+             * never looked. Only LOCAL refusals are promoted: a genuine relay fault keeps
+             * `relay_unavailable`, so this is a split rather than a rename, and the caller's existing
+             * degradation for a real outage is untouched.
+             */
+            const refusal = this.#lastAuthRefusal;
+            if (refusal && isLocalCredentialRefusal(refusal.reason)) {
+                /**
+                 * ⚠️ THE PROSE ONCE PER TRANSITION, THE REASON EVERY TIME — review F6.
+                 *
+                 * This condition lasts until a relogin by construction, and every send retries it. Logging
+                 * several hundred bytes of explanation on each one is the shape `96f3179b` measured four
+                 * commits earlier: a 176 MB log that was 95% one already-fixed defect repeating itself,
+                 * which hid the defect that produced it for eleven hours. The first occurrence carries
+                 * everything; the rest are countable without being unreadable.
+                 */
+                const firstOfThisRun = this.#loggedCredentialRefusal !== refusal.reason;
+                this.#loggedCredentialRefusal = refusal.reason;
+                if (firstOfThisRun) {
+                    this.#logger.error("session.relay.submit.local_credential_refusal", {
+                        relayPeerId: this.#relayPeerId,
+                        reason: refusal.reason,
+                        impact: "the relay refused THIS AGENT'S credential, so nothing it sends can be witnessed and no " +
+                            "conversation can produce a receipt. This is a fault on this machine and it does not " +
+                            "clear on its own — it is NOT the relay being unreachable.",
+                        guidance: refusal.advice,
+                    });
+                }
+                else {
+                    this.#logger.warn("session.relay.submit.local_credential_refusal.again", {
+                        relayPeerId: this.#relayPeerId, reason: refusal.reason,
+                    });
+                }
+                return { ok: false, reason: refusal.reason };
+            }
             return { ok: false, reason: "relay_unavailable" };
+        }
         const sessionIdHex = Buffer.from(sessionId).toString("hex");
         // The relay records the session from the CLIENT-presented assignment. It MUST be recorded BEFORE
         // the first hash_submit — the relay rejects a submit for an unknown session. Idempotent + no-op when