@cello-protocol/daemon 0.0.225 → 0.0.227

package/dist/db-identity-store.js

@@ -1,502 +0,0 @@
-/**
- * DB-backed identity store (the `agents` table).
- *
- * Every piece of an agent's persisted identity — the K_local Ed25519 seed, the ML-DSA keypair, the
- * FROST signing share, the registration record, and the agent↔user link — lives as ONE row of the
- * `agents` table in the SQLCipher-encrypted daemon DB. There is no flat-file home for any of it.
- *
- * `DbRegistrationPersistence` implements the `DaemonRegistrationPersistence` interface the daemon's
- * RegistrationManager and the ceremony/seal signer-reconstruction consume. Writes are AWAITED
- * single-row UPSERTs — never fire-and-forget — so a register-success implies a durably committed row.
- *
- * The K_local seed and FROST/ML-DSA secrets are stored as BLOB columns inside the encrypted DB; they
- * are NEVER written to a flat file and NEVER logged. The row is the only home.
- */
-import { randomUUID } from "node:crypto";
-import { MONIKER_RE, validateMoniker } from "@cello-protocol/protocol-types";
-import { checkChannelFacts } from "./registration-persistence.js";
-const ML_DSA_ALGORITHM = "ML-DSA-44";
-/**
- * The `agents` schema. The store is keyed by a STABLE `agent_id`, never by `agent_name` — durable
- * identity hangs off agent_id; the human name and the pubkey are mutable ATTRIBUTES. A partial unique
- * index makes `agent_name` unique only among NON-retired rows, so removal (state='retired') frees the
- * name for reuse while the retired identity survives for accountability.
- * `state`: 'created' | 'registered' | 'retired'.
- */
-const CREATE_AGENTS_SQL = `
-  CREATE TABLE IF NOT EXISTS agents (
-    agent_id               TEXT PRIMARY KEY,
-    agent_name             TEXT NOT NULL,
-    -- K_local Ed25519 identity: the seed lives ONLY in this BLOB, never on the filesystem.
-    k_local_seed           BLOB NOT NULL,
-    k_local_pubkey         TEXT NOT NULL,
-    -- lifecycle: 'created' (K_local exists, not yet registered) | 'registered' | 'retired'.
-    state                  TEXT NOT NULL DEFAULT 'created',
-    -- ML-DSA keypair.
-    ml_dsa_pubkey          TEXT,
-    ml_dsa_secret          BLOB,
-    ml_dsa_algorithm       TEXT,
-    -- FROST signing share.
-    frost_epoch_id         TEXT,
-    frost_primary_pubkey   TEXT,
-    frost_identifier       TEXT,
-    frost_signing_share    BLOB,
-    frost_threshold        INTEGER,
-    frost_participants     INTEGER,
-    frost_commitments      BLOB,
-    frost_verifying_shares BLOB,
-    frost_dkg_method       TEXT,
-    -- JSON array of the directory nodeIds (Q) the DKG ran among, so a restored signer targets the
-    -- actual share-holders, not the full live roster. NULL for agents registered before quorum DKG.
-    frost_directory_node_ids TEXT,
-    -- Optional outbound-name override. The outbound name defaults to agent_name; this column only
-    -- holds an explicit override. Local-only — never sent to the directory.
-    moniker                TEXT,
-    -- registration record.
-    reg_agent_id           TEXT,
-    reg_primary_pubkey     TEXT,
-    reg_ml_dsa_pubkey      TEXT,
-    reg_registered_at      INTEGER,
-    reg_status             TEXT,
-    -- 038-KEYBIND: hex 64-byte Ed25519 signature by k_local_seed's public half over
-    -- (k_local_pubkey, reg_primary_pubkey). Minted once at the tail of registration — the only
-    -- moment both keys are on this machine together — and never re-derived by a second DKG.
-    reg_key_binding        TEXT,
-    -- M16: 1 when this identity is a broadcast channel (publish-only, never converses), with the
-    -- hex pubkey of the agent that administers it. Written once, from the directory's echo at
-    -- registration; nothing updates either column afterwards.
-    channel                INTEGER NOT NULL DEFAULT 0,
-    admin_pubkey           TEXT NOT NULL DEFAULT '',
-    -- agent↔user link captured at registration.
-    link_agent_id          TEXT,
-    link_pre_auth_token    TEXT,
-    link_linked_at         INTEGER,
-    created_at             INTEGER NOT NULL,
-    updated_at             INTEGER NOT NULL
-  )
-`;
-// A name is unique only among NON-retired agents — the DB-level backstop for "free the name on removal".
-const CREATE_ACTIVE_NAME_INDEX_SQL = "CREATE UNIQUE INDEX IF NOT EXISTS agents_active_name ON agents(agent_name) WHERE state != 'retired'";
-// The columns of the legacy `agents` table (agent_name PK, no agent_id), in order. Used to copy rows
-// verbatim during the one-time re-key rebuild.
-const PRE_REKEY_COLUMNS = [
-    "agent_name",
-    "k_local_seed",
-    "k_local_pubkey",
-    "state",
-    "ml_dsa_pubkey",
-    "ml_dsa_secret",
-    "ml_dsa_algorithm",
-    "frost_epoch_id",
-    "frost_primary_pubkey",
-    "frost_identifier",
-    "frost_signing_share",
-    "frost_threshold",
-    "frost_participants",
-    "frost_commitments",
-    "frost_verifying_shares",
-    "frost_dkg_method",
-    "reg_agent_id",
-    "reg_primary_pubkey",
-    "reg_ml_dsa_pubkey",
-    "reg_registered_at",
-    "reg_status",
-    "link_agent_id",
-    "link_pre_auth_token",
-    "link_linked_at",
-    "created_at",
-    "updated_at",
-];
-/**
- * One-time re-key of a legacy `agents` table (PRIMARY KEY agent_name, no agent_id) to the stable
- * agent_id shape. Rebuilds the table, backfilling a fresh agent_id per existing row. Runs at most once
- * — `ensureIdentitySchema` guards it behind a column-presence check — and is wrapped in a transaction
- * so a crash mid-rebuild leaves the original table intact. Works on node:sqlite (in-memory test
- * handles) and SQLCipher alike.
- */
-function rebuildAgentsToAgentIdPk(db) {
-    const cols = PRE_REKEY_COLUMNS.join(", ");
-    db.exec("BEGIN");
-    try {
-        db.exec("ALTER TABLE agents RENAME TO agents_pre_rekey");
-        db.exec(CREATE_AGENTS_SQL);
-        db.exec(`INSERT INTO agents (agent_id, ${cols})
-       SELECT lower(hex(randomblob(16))), ${cols} FROM agents_pre_rekey`);
-        db.exec("DROP TABLE agents_pre_rekey");
-        db.exec("COMMIT");
-    }
-    catch (err) {
-        try {
-            db.exec("ROLLBACK");
-        }
-        catch { /* the failing statement may have already aborted the txn */ }
-        throw err;
-    }
-}
-/**
- * Idempotent schema for the identity store. Called once at daemon init AND defensively by each
- * DbRegistrationPersistence constructor, so the store works whether or not the composition root has
- * run its own ensure. Creates the table on a fresh DB, re-keys a legacy table to the stable agent_id
- * shape once, and (always) ensures the active-name partial unique index.
- */
-export function ensureIdentitySchema(db) {
-    const cols = db.prepare("PRAGMA table_info(agents)").all();
-    if (cols.length === 0) {
-        db.exec(CREATE_AGENTS_SQL);
-    }
-    else if (!cols.some((c) => c.name === "agent_id")) {
-        // A legacy table exists (agent_name PK). Re-key it once to the stable agent_id shape.
-        rebuildAgentsToAgentIdPk(db);
-    }
-    else {
-        // Additive columns on an existing agent_id table (fresh/rebuilt tables already have them via
-        // CREATE_AGENTS_SQL). SQLite has no ADD COLUMN IF NOT EXISTS, so each is PRAGMA-guarded — and
-        // each guard is an INDEPENDENT `if`: a table missing several must receive every ALTER.
-        if (!cols.some((c) => c.name === "frost_directory_node_ids")) {
-            // Nullable → agents predating quorum DKG keep the full-roster fallback; no data touched.
-            db.exec("ALTER TABLE agents ADD COLUMN frost_directory_node_ids TEXT");
-        }
-        if (!cols.some((c) => c.name === "moniker")) {
-            // Outbound-name override. Nullable → existing agents keep the agent-name default.
-            db.exec("ALTER TABLE agents ADD COLUMN moniker TEXT");
-        }
-        if (!cols.some((c) => c.name === "reg_key_binding")) {
-            // 038-KEYBIND. Nullable, because an operator's existing row cannot grow a signature by a
-            // migration — the value is minted by the daemon holding the seed, on the next registration.
-            //
-            // A null here has no local consequence and nothing detects it: this column is written and
-            // read by nothing yet (see `RegistrationStateRecord.keyBinding`). What makes a pre-038 agent
-            // unusable is the DIRECTORY-side profile having no binding, which both clients refuse an
-            // assignment over — and the remedy for that is the same re-registration that fills this in.
-            db.exec("ALTER TABLE agents ADD COLUMN reg_key_binding TEXT");
-        }
-        if (!cols.some((c) => c.name === "channel")) {
-            // M16: every existing row is an ordinary agent — channels did not exist before this column.
-            db.exec("ALTER TABLE agents ADD COLUMN channel INTEGER NOT NULL DEFAULT 0");
-        }
-        if (!cols.some((c) => c.name === "admin_pubkey")) {
-            db.exec("ALTER TABLE agents ADD COLUMN admin_pubkey TEXT NOT NULL DEFAULT ''");
-        }
-    }
-    db.exec(CREATE_ACTIVE_NAME_INDEX_SQL);
-    // M10-D18: DROP the M8 `trust_signals` scaffold. It held canonical-JSON records keyed by a RAW hash;
-    // M10 wallet signals are canonical CBOR envelopes in `wallet_trust_signals` (TrustSignalStore),
-    // re-derived via deliverWalletSignal. The M8 shape can't migrate (different hash + format) and is
-    // re-mintable (D1), so the scaffold is dropped, not converted. IF EXISTS + no FK children → safe and
-    // idempotent on both fresh and existing operator DBs. This is the forcing-function drop that MINT-
-    // INTERNAL-1 owes; a test asserts the table is GONE.
-    db.exec("DROP TABLE IF EXISTS trust_signals");
-}
-const toBuf = (b) => Buffer.from(b);
-const toBytes = (v) => v instanceof Uint8Array ? new Uint8Array(v) : Buffer.isBuffer(v) ? new Uint8Array(v) : new Uint8Array(0);
-export class DbIdentityStore {
-    #db;
-    #logger;
-    constructor(db, logger) {
-        this.#db = db;
-        this.#logger = logger;
-        ensureIdentitySchema(db);
-    }
-    // M10-D18: `storeTrustSignal` / `getTrustSignal` (the M8 `trust_signals` writer + reader) are RETIRED.
-    // A received wallet signal is now a canonical CBOR envelope, re-verified and stored in
-    // `wallet_trust_signals` by `TrustSignalStore.deliverWalletSignal` (inbound-sessions). The M8 table is
-    // dropped in `ensureIdentitySchema` above.
-    /** True if an ACTIVE (non-retired) agent row with this name exists — the create-collision check. */
-    hasActiveAgent(agentName) {
-        const row = this.#db
-            .prepare("SELECT 1 AS one FROM agents WHERE agent_name = ? AND state != 'retired'")
-            .get(agentName);
-        return row !== undefined;
-    }
-    /**
-     * Create a new agent row holding a fresh K_local seed, keyed by a freshly-minted stable agent_id.
-     * Explicit only — callers generate the seed (crypto) and pass it in. Throws if an ACTIVE agent
-     * already holds the name (no silent overwrite); a RETIRED row with the same name does NOT block —
-     * the name has been freed. Returns the new agent_id.
-     */
-    createAgent(agentName, kLocalSeed, kLocalPubkeyHex) {
-        if (this.hasActiveAgent(agentName)) {
-            throw new Error(`agent '${agentName}' already exists`);
-        }
-        const agentId = randomUUID();
-        const now = Date.now();
-        this.#db
-            .prepare(`INSERT INTO agents (agent_id, agent_name, k_local_seed, k_local_pubkey, state, created_at, updated_at)
-         VALUES (?, ?, ?, ?, 'created', ?, ?)`)
-            .run(agentId, agentName, toBuf(kLocalSeed), kLocalPubkeyHex, now, now);
-        // The seed is NEVER logged — only the agent name, the agent_id, and the PUBLIC key.
-        this.#logger.info("persist.identity.created", { agentName, agentId, agentPubkey: kLocalPubkeyHex });
-        return agentId;
-    }
-    /**
-     * Retire: flip the ACTIVE row for `agentName` to state='retired' WITHOUT deleting the row, its keys,
-     * or its history — accountability must survive a removal. One-way. The name is freed (the partial
-     * unique index excludes retired rows). Returns the retired agent_id, or null if there was no active
-     * agent with that name (fail-loud at the caller).
-     */
-    retireAgent(agentName) {
-        const active = this.#db
-            .prepare("SELECT agent_id FROM agents WHERE agent_name = ? AND state != 'retired'")
-            .get(agentName);
-        if (!active)
-            return null;
-        const res = this.#db
-            .prepare("UPDATE agents SET state = 'retired', updated_at = ? WHERE agent_id = ?")
-            .run(Date.now(), active.agent_id);
-        if (Number(res.changes) === 0)
-            return null;
-        return active.agent_id;
-    }
-    /**
-     * Read the row to act on for a removal / directory-revocation re-push: the ACTIVE row for the name if
-     * one exists (a fresh removal), else the MOST-RECENTLY-retired row (a re-push of an already-retired
-     * agent whose directory revocation did not land). Includes the
-     * K_local seed (to re-sign the revocation) and the DIRECTORY-known reg_agent_id (what the directory is
-     * asked to revoke; null if the agent was never registered). Returns null if no row with this name
-     * exists at all.
-     */
-    getAgentForRevocation(agentName) {
-        const r = this.#db
-            .prepare(`SELECT agent_id, reg_agent_id, k_local_seed, state FROM agents WHERE agent_name = ?
-         ORDER BY (state != 'retired') DESC, updated_at DESC LIMIT 1`)
-            .get(agentName);
-        if (!r)
-            return null;
-        return {
-            localAgentId: r.agent_id,
-            regAgentId: r.reg_agent_id ?? null,
-            kLocalSeed: toBytes(r.k_local_seed),
-            state: r.state,
-        };
-    }
-    /**
-     * Enumerate ACTIVE agents (agent_id + name + seed + pubkey + state) for the daemon's startup loader.
-     * Retired rows are EXCLUDED — they must never be resurrected into the runtime — but remain in the DB
-     * and are readable directly for accountability.
-     */
-    listAgents() {
-        const rows = this.#db
-            .prepare("SELECT agent_id, agent_name, k_local_seed, k_local_pubkey, state, channel, admin_pubkey FROM agents WHERE state != 'retired' ORDER BY agent_name ASC")
-            .all();
-        return rows.map((r) => ({
-            agentId: r.agent_id,
-            agentName: r.agent_name,
-            kLocalSeed: toBytes(r.k_local_seed),
-            kLocalPubkey: r.k_local_pubkey,
-            state: r.state,
-            channel: Number(r.channel) === 1,
-            adminPubkey: r.admin_pubkey,
-        }));
-    }
-    /**
-     * M16: is the ACTIVE agent with this name a broadcast channel? False for an unknown agent: an
-     * unknown agent is not a channel, and it is refused by the gates that require an agent at all.
-     */
-    isChannelAgent(agentName) {
-        const row = this.#db
-            .prepare("SELECT channel FROM agents WHERE agent_name = ? AND state != 'retired'")
-            .get(agentName);
-        return row !== undefined && Number(row.channel) === 1;
-    }
-    /**
-     * Set (or clear, via null) the outbound-name override on the ACTIVE row.
-     * Returns false when no active agent holds the name (fail-loud at the caller — never a silent
-     * no-op success). THROWS on an invalid moniker: callers validate first for a friendly error;
-     * this is the backstop that makes "an invalid value can never be stored" true at the lowest layer.
-     */
-    setMoniker(agentName, moniker) {
-        if (moniker !== null && validateMoniker(moniker) === null) {
-            throw new Error(`invalid moniker for agent '${agentName}': must match ${MONIKER_RE.source}`);
-        }
-        const res = this.#db
-            .prepare("UPDATE agents SET moniker = ?, updated_at = ? WHERE agent_name = ? AND state != 'retired'")
-            .run(moniker, Date.now(), agentName);
-        return Number(res.changes) > 0;
-    }
-    /** The stored override for the ACTIVE agent, or null (no override / no such agent). */
-    getMoniker(agentName) {
-        const row = this.#db
-            .prepare("SELECT moniker FROM agents WHERE agent_name = ? AND state != 'retired'")
-            .get(agentName);
-        return row?.moniker ?? null;
-    }
-    /**
-     * The agent's outbound name — the override when set, else the agent name itself.
-     * There is no separate "self-moniker" concept; the default is valid by construction (the agent
-     * name already satisfies MONIKER_RE at creation). Null only when no active agent holds the name.
-     */
-    getOutboundName(agentName) {
-        const row = this.#db
-            .prepare("SELECT agent_name, moniker FROM agents WHERE agent_name = ? AND state != 'retired'")
-            .get(agentName);
-        if (!row)
-            return null;
-        return row.moniker ?? row.agent_name;
-    }
-}
-/**
- * M16: the "is this local agent a broadcast channel?" accessor, bound to the daemon's DB, for the
- * session openers and the inbound-assignment path. Each call reads the agent's row, so a channel
- * registered after startup is covered without a restart. Lives here rather than in the composition
- * root so `daemon.ts` does not grow.
- */
-export function channelAgentLookup(sessionNodeManager, logger) {
-    return (agentName) => new DbIdentityStore(sessionNodeManager.getDb(), logger).isChannelAgent(agentName);
-}
-/**
- * DB-backed `DaemonRegistrationPersistence`. Scoped to a single agent's row. All persist operations
- * are single-row UPSERTs that update the named agent's row; a register-success therefore implies the
- * material is durably committed. A persist against a non-existent agent throws — the row is created by
- * the agent-creation path before registration runs.
- */
-export class DbRegistrationPersistence {
-    #db;
-    #agentName;
-    #logger;
-    constructor(opts) {
-        this.#db = opts.db;
-        this.#agentName = opts.agentName;
-        this.#logger = opts.logger;
-        ensureIdentitySchema(opts.db);
-    }
-    #updateRow(setClause, params) {
-        const now = Date.now();
-        // Target the ACTIVE row for this name. After name reuse a retired row and a new active
-        // row can share a name; the partial unique index guarantees at most one active row, so this is
-        // unambiguous. A retired identity's registration material is never mutated.
-        const res = this.#db
-            .prepare(`UPDATE agents SET ${setClause}, updated_at = ? WHERE agent_name = ? AND state != 'retired'`)
-            .run(...params, now, this.#agentName);
-        if (Number(res.changes) === 0) {
-            // The agent row must exist (created by the agent-creation path before registration). A missing
-            // row is a real fault, not something to paper over — FAIL LOUD so registration fails.
-            throw new Error(`identity_persist_failed: no agent row for '${this.#agentName}'`);
-        }
-    }
-    async persistMlDsaKeypair(opts) {
-        // secretKeyBlob is written to the encrypted DB only — never logged.
-        this.#updateRow("ml_dsa_pubkey = ?, ml_dsa_secret = ?, ml_dsa_algorithm = ?", [
-            opts.mlDsaPubkey,
-            toBuf(opts.secretKeyBlob),
-            ML_DSA_ALGORITHM,
-        ]);
-        this.#logger.info("registration.mldsa.persisted", { mlDsaPubkey: opts.mlDsaPubkey });
-    }
-    async persistRegistrationState(opts) {
-        const { channel, adminPubkey } = checkChannelFacts(opts, await this.loadRegistrationState());
-        this.#updateRow("reg_agent_id = ?, reg_primary_pubkey = ?, reg_ml_dsa_pubkey = ?, reg_registered_at = ?, reg_key_binding = ?, channel = ?, admin_pubkey = ?, reg_status = 'active', state = 'registered'", [
-            opts.agentId, opts.primaryPubkey, opts.mlDsaPubkey, opts.registeredAt, opts.keyBinding,
-            channel ? 1 : 0, adminPubkey,
-        ]);
-        this.#logger.info("registration.state.persisted", {
-            agentId: opts.agentId,
-            primaryPubkey: opts.primaryPubkey,
-        });
-    }
-    async persistFrostKeyShare(opts) {
-        // signingShare is written to the encrypted DB only — never logged.
-        this.#updateRow(`frost_epoch_id = ?, frost_primary_pubkey = ?, frost_identifier = ?, frost_signing_share = ?,
-       frost_threshold = ?, frost_participants = ?, frost_commitments = ?, frost_verifying_shares = ?,
-       frost_dkg_method = ?, frost_directory_node_ids = ?`, [
-            opts.epochId,
-            opts.primaryPubkey,
-            opts.identifier,
-            toBuf(opts.signingShare),
-            opts.threshold,
-            opts.participants,
-            toBuf(opts.commitmentsCbor),
-            toBuf(opts.verifyingSharesCbor),
-            opts.dkgMethod,
-            opts.directoryNodeIds ? JSON.stringify(opts.directoryNodeIds) : null,
-        ]);
-        this.#logger.info("registration.frost.share.persisted", {
-            epochId: opts.epochId,
-            threshold: opts.threshold,
-            participants: opts.participants,
-            dkgMethod: opts.dkgMethod,
-        });
-    }
-    async persistAgentUserLink(opts) {
-        // The preAuthToken is a bearer ticket — written to the encrypted DB only, never logged.
-        this.#updateRow("link_agent_id = ?, link_pre_auth_token = ?, link_linked_at = ?", [
-            opts.agentId,
-            opts.preAuthToken,
-            opts.linkedAt,
-        ]);
-        this.#logger.info("registration.user_link.persisted", { agentId: opts.agentId });
-    }
-    // ─── Load (restart rehydration) ──────────────────────────────────────────────
-    #row() {
-        // Load the ACTIVE row for this name (never a retired tombstone).
-        return this.#db.prepare("SELECT * FROM agents WHERE agent_name = ? AND state != 'retired'").get(this.#agentName);
-    }
-    async loadRegistrationState() {
-        const r = this.#row();
-        if (!r || r["reg_agent_id"] == null)
-            return null;
-        return {
-            agentId: String(r["reg_agent_id"]),
-            primaryPubkey: String(r["reg_primary_pubkey"]),
-            mlDsaPubkey: String(r["reg_ml_dsa_pubkey"]),
-            registeredAt: Number(r["reg_registered_at"]),
-            status: String(r["reg_status"]),
-            // 038-KEYBIND: null for a row written before this column existed. `String(null)` would hand
-            // callers the four characters "null" as if they were a signature, which is why this is a
-            // typeof check and not the String() every field above uses.
-            keyBinding: typeof r["reg_key_binding"] === "string" ? r["reg_key_binding"] : null,
-            channel: Number(r["channel"]) === 1,
-            adminPubkey: typeof r["admin_pubkey"] === "string" ? r["admin_pubkey"] : "",
-        };
-    }
-    async loadMlDsaKeypair() {
-        const r = this.#row();
-        if (!r || r["ml_dsa_secret"] == null)
-            return null;
-        return {
-            mlDsaPubkey: String(r["ml_dsa_pubkey"]),
-            secretKeyBlob: toBytes(r["ml_dsa_secret"]),
-            algorithm: String(r["ml_dsa_algorithm"]),
-        };
-    }
-    async loadActiveFrostKeyShare() {
-        const r = this.#row();
-        if (!r || r["frost_signing_share"] == null)
-            return null;
-        // The DKG's quorum Q (nodeIds). NULL → undefined → the seal falls back to the full roster.
-        // Defensive parse: malformed data must not break share loading.
-        let directoryNodeIds;
-        const rawIds = r["frost_directory_node_ids"];
-        if (rawIds != null) {
-            try {
-                const parsed = JSON.parse(String(rawIds));
-                if (Array.isArray(parsed) && parsed.every((x) => typeof x === "string")) {
-                    directoryNodeIds = parsed;
-                }
-            }
-            catch { /* malformed → full-roster fallback */ }
-        }
-        return {
-            epochId: String(r["frost_epoch_id"]),
-            primaryPubkey: String(r["frost_primary_pubkey"]),
-            identifier: String(r["frost_identifier"]),
-            signingShare: toBytes(r["frost_signing_share"]),
-            threshold: Number(r["frost_threshold"]),
-            participants: Number(r["frost_participants"]),
-            commitmentsCbor: toBytes(r["frost_commitments"]),
-            verifyingSharesCbor: toBytes(r["frost_verifying_shares"]),
-            dkgMethod: String(r["frost_dkg_method"]),
-            directoryNodeIds,
-        };
-    }
-    async loadAgentUserLink() {
-        const r = this.#row();
-        if (!r || r["link_agent_id"] == null)
-            return null;
-        return {
-            agentId: String(r["link_agent_id"]),
-            preAuthToken: String(r["link_pre_auth_token"]),
-            linkedAt: Number(r["link_linked_at"]),
-        };
-    }
-}
-//# sourceMappingURL=db-identity-store.js.map

package/dist/db-identity-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"db-identity-store.js","sourceRoot":"","sources":["../src/db-identity-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAG7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AASlE,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmDzB,CAAC;AAEF,yGAAyG;AACzG,MAAM,4BAA4B,GAChC,qGAAqG,CAAC;AAExG,qGAAqG;AACrG,+CAA+C;AAC/C,MAAM,iBAAiB,GAAG;IACxB,YAAY;IACZ,cAAc;IACd,gBAAgB;IAChB,OAAO;IACP,eAAe;IACf,eAAe;IACf,kBAAkB;IAClB,gBAAgB;IAChB,sBAAsB;IACtB,kBAAkB;IAClB,qBAAqB;IACrB,iBAAiB;IACjB,oBAAoB;IACpB,mBAAmB;IACnB,wBAAwB;IACxB,kBAAkB;IAClB,cAAc;IACd,oBAAoB;IACpB,mBAAmB;IACnB,mBAAmB;IACnB,YAAY;IACZ,eAAe;IACf,qBAAqB;IACrB,gBAAgB;IAChB,YAAY;IACZ,YAAY;CACJ,CAAC;AAEX;;;;;;GAMG;AACH,SAAS,wBAAwB,CAAC,EAAkB;IAClD,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjB,IAAI,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QACzD,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC3B,EAAE,CAAC,IAAI,CACL,iCAAiC,IAAI;4CACC,IAAI,wBAAwB,CACnE,CAAC;QACF,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACvC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,4DAA4D,CAAC,CAAC;QACnG,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAkB;IACrD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,GAAG,EAA6B,CAAC;IACtF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC7B,CAAC;SAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;QACpD,sFAAsF;QACtF,wBAAwB,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,6FAA6F;QAC7F,8FAA8F;QAC9F,uFAAuF;QACvF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0BAA0B,CAAC,EAAE,CAAC;YAC7D,yFAAyF;YACzF,EAAE,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;YAC5C,kFAAkF;YAClF,EAAE,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,EAAE,CAAC;YACpD,yFAAyF;YACzF,4FAA4F;YAC5F,EAAE;YACF,0FAA0F;YAC1F,6FAA6F;YAC7F,yFAAyF;YACzF,4FAA4F;YAC5F,EAAE,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;YAC5C,4FAA4F;YAC5F,EAAE,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,EAAE,CAAC;YACjD,EAAE,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IACD,EAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACtC,qGAAqG;IACrG,gGAAgG;IAChG,kGAAkG;IAClG,qGAAqG;IACrG,mGAAmG;IACnG,qDAAqD;IACrD,EAAE,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,CAAa,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxD,MAAM,OAAO,GAAG,CAAC,CAAU,EAAc,EAAE,CACzC,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAmB3G,MAAM,OAAO,eAAe;IACjB,GAAG,CAAiB;IACpB,OAAO,CAAS;IAEzB,YAAY,EAAkB,EAAE,MAAc;QAC5C,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,oBAAoB,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,uGAAuG;IACvG,uFAAuF;IACvF,uGAAuG;IACvG,2CAA2C;IAE3C,oGAAoG;IACpG,cAAc,CAAC,SAAiB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,yEAAyE,CAAC;aAClF,GAAG,CAAC,SAAS,CAAgC,CAAC;QACjD,OAAO,GAAG,KAAK,SAAS,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,SAAiB,EAAE,UAAsB,EAAE,eAAuB;QAC5E,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,kBAAkB,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG;aACL,OAAO,CACN;8CACsC,CACvC;aACA,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACzE,oFAAoF;QACpF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC;QACpG,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,SAAiB;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG;aACpB,OAAO,CAAC,yEAAyE,CAAC;aAClF,GAAG,CAAC,SAAS,CAAqC,CAAC;QACtD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,wEAAwE,CAAC;aACjF,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED;;;;;;;OAOG;IACH,qBAAqB,CACnB,SAAiB;QAEjB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG;aACf,OAAO,CACN;qEAC6D,CAC9D;aACA,GAAG,CAAC,SAAS,CAAwG,CAAC;QACzH,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,OAAO;YACL,YAAY,EAAE,CAAC,CAAC,QAAQ;YACxB,UAAU,EAAE,CAAC,CAAC,YAAY,IAAI,IAAI;YAClC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;YACnC,KAAK,EAAE,CAAC,CAAC,KAAK;SACf,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,UAAU;QACR,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN,sJAAsJ,CACvJ;aACA,GAAG,EAGF,CAAC;QACL,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,OAAO,EAAE,CAAC,CAAC,QAAQ;YACnB,SAAS,EAAE,CAAC,CAAC,UAAU;YACvB,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;YACnC,YAAY,EAAE,CAAC,CAAC,cAAc;YAC9B,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;YAChC,WAAW,EAAE,CAAC,CAAC,YAAY;SAC5B,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,SAAiB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,wEAAwE,CAAC;aACjF,GAAG,CAAC,SAAS,CAA6C,CAAC;QAC9D,OAAO,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,SAAiB,EAAE,OAAsB;QAClD,IAAI,OAAO,KAAK,IAAI,IAAI,eAAe,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,8BAA8B,SAAS,iBAAiB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,2FAA2F,CAAC;aACpG,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;QACvC,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,uFAAuF;IACvF,UAAU,CAAC,SAAiB;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,wEAAwE,CAAC;aACjF,GAAG,CAAC,SAAS,CAA2C,CAAC;QAC5D,OAAO,GAAG,EAAE,OAAO,IAAI,IAAI,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,SAAiB;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,oFAAoF,CAAC;aAC7F,GAAG,CAAC,SAAS,CAA+D,CAAC;QAChF,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC;IACvC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,kBAA+C,EAC/C,MAAc;IAEd,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,eAAe,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;AAC1G,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,yBAAyB;IAC3B,GAAG,CAAiB;IACpB,UAAU,CAAS;IACnB,OAAO,CAAS;IAEzB,YAAY,IAA+D;QACzE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC;IAED,UAAU,CAAC,SAAiB,EAAE,MAAiB;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,uFAAuF;QACvF,+FAA+F;QAC/F,4EAA4E;QAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,qBAAqB,SAAS,8DAA8D,CAAC;aACrG,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,+FAA+F;YAC/F,sFAAsF;YACtF,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAAwD;QAChF,oEAAoE;QACpE,IAAI,CAAC,UAAU,CAAC,4DAA4D,EAAE;YAC5E,IAAI,CAAC,WAAW;YAChB,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;YACzB,gBAAgB;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,IAQ9B;QACC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC,CAAC;QAC7F,IAAI,CAAC,UAAU,CACb,yLAAyL,EACzL;YACE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU;YACtF,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW;SAC7B,CACF,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,8BAA8B,EAAE;YAChD,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,IAY1B;QACC,mEAAmE;QACnE,IAAI,CAAC,UAAU,CACb;;0DAEoD,EACpD;YACE,IAAI,CAAC,OAAO;YACZ,IAAI,CAAC,aAAa;YAClB,IAAI,CAAC,UAAU;YACf,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC;YACxB,IAAI,CAAC,SAAS;YACd,IAAI,CAAC,YAAY;YACjB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC;YAC/B,IAAI,CAAC,SAAS;YACd,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI;SACrE,CACF,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oCAAoC,EAAE;YACtD,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,IAAiE;QAC1F,wFAAwF;QACxF,IAAI,CAAC,UAAU,CAAC,gEAAgE,EAAE;YAChF,IAAI,CAAC,OAAO;YACZ,IAAI,CAAC,YAAY;YACjB,IAAI,CAAC,QAAQ;SACd,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,gFAAgF;IAEhF,IAAI;QACF,iEAAiE;QACjE,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAElG,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACjD,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YAClC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;YAC9C,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAC3C,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAC5C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YAC/B,4FAA4F;YAC5F,yFAAyF;YACzF,4DAA4D;YAC5D,UAAU,EAAE,OAAO,CAAC,CAAC,iBAAiB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI;YAClF,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC;YACnC,WAAW,EAAE,OAAO,CAAC,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE;SAC5E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YACvC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YAC1C,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;SACzC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB;QAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACxD,2FAA2F;QAC3F,gEAAgE;QAChE,IAAI,gBAAsC,CAAC;QAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,0BAA0B,CAAC,CAAC;QAC7C,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAY,CAAC;gBACrD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;oBACxE,gBAAgB,GAAG,MAAkB,CAAC;gBACxC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,sCAAsC,CAAC,CAAC;QACpD,CAAC;QACD,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YACpC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;YAChD,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;YACzC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;YAC/C,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACvC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;YAC7C,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAChD,mBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;YACzD,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;YACxC,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YACnC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;YAC9C,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;SACtC,CAAC;IACJ,CAAC;CACF"}

package/dist/delivery-open-registry.d.ts

@@ -1,92 +0,0 @@
-/**
- * DOD-M12B-DELIVERY-QUIET-1 — which sessions this daemon's DOCUMENT DELIVERY worker is opening.
- *
- * ── THE LOOP THIS EXISTS TO BREAK ────────────────────────────────────────────────────────────────
- *
- * Two reachability triggers fire when a session comes up, and both are correct when a PEER caused
- * the session:
- *
- *   1. The initiator half — `onSessionOpened` in `initiate-session-handler.ts`, fired by the side
- *      that dialled.
- *   2. The inbound half — `dispatchSessionStateChangedWithTelegram` on `state === "created"`,
- *      fired by the side that accepted, which ALSO rings the conversation doorbell and pushes a
- *      Telegram notification.
- *
- * Either one calls `ReconcileScheduler.onReachable`, and that is not a nudge: it sets
- * `failures = 0` and `nextAttemptMs = 0` and sweeps every shared document immediately. The stated
- * rationale is sound — "the backoff modeled 'they do not answer', and here they demonstrably just
- * did" (SYNC-P5 R39 trigger 2) — but it is only sound when the peer caused the session.
- *
- * When the DELIVERY WORKER opened it, the "signal" is our own outbound act reflected back at us. We
- * learn nothing about the peer, and we wipe a backoff that a refusal — possibly that same peer's
- * refusal, seconds earlier — had just set. Then:
- *
- *   the sweep needs a session → it opens one → creation fires the trigger → the trigger zeroes the
- *   backoff and sweeps every document → the sweep needs sessions → …
- *
- * Measured 2026-08-17: 321 reconcile attempts in 85 minutes driving 53 sessions and 63 standing-
- * receiver rebuilds. After `DOD-SYNC-REFUSAL-BACKOFF-1` removed the refusal storm, still 55
- * attempts in 20 minutes with 0 refusals — the volume that fix did not reach is this trigger.
- *
- * ── WHY AN INTENT, KEYED ON THE PEER, AND NOT A SESSION ID ───────────────────────────────────────
- *
- * The obvious design is to record the session id the delivery worker opened. It does not work: the
- * id is minted by the DIRECTORY and only reaches the opener at the end of negotiation, whereas the
- * directory has already pushed the assignment to the counterparty — which, when both agents live on
- * one daemon (the measured configuration), is this same process. The inbound doorbell therefore
- * fires BEFORE the opener ever learns the id, so a session-id registry is always too late.
- *
- * So what is registered is the INTENT — "this local agent's delivery worker is opening a session
- * with this peer right now" — before negotiation starts, and released when the open returns.
- *
- * ── THE KNOWN IMPRECISION, STATED RATHER THAN HIDDEN ─────────────────────────────────────────────
- *
- * If a delivery open to peer P is in flight for agent A at the same instant A's OPERATOR opens a
- * session to the same P, the inbound half cannot tell the two assignments apart and will suppress
- * the operator's doorbell too. It is narrow (same local agent, same peer, overlapping windows) and
- * it costs one missed notification for a session the operator started themselves and is therefore
- * already watching. The alternative — suppressing nothing — is the storm. This is the same class of
- * accepted, journaled imprecision as the away-ack coalescing guard in `attendance-wiring.ts`.
- *
- * Counting, not a boolean: two documents can be delivering to the same peer concurrently, and a
- * boolean cleared by whichever finishes first would re-open the loop for the other.
- */
-/** Who caused a session to exist. Decides whether its creation is a signal about the peer. */
-export type SessionOpenedBy = "operator" | "document_delivery";
-export interface DeliveryOpenRegistry {
-    /**
-     * Register that `openerPubkey`'s delivery worker is opening a session with `targetPubkey`.
-     * Returns the release function.
-     */
-    begin(openerPubkey: string, targetPubkey: string): () => void;
-    /**
-     * True while a delivery open from `openerPubkey` toward `targetPubkey` is in flight.
-     *
-     * ORDER IS THE WHOLE THING. The two halves that ask this question stand at opposite ends of the
-     * same dial, so one of them must reverse its own arguments:
-     *
-     *   initiator half — WE opened it:  isDeliveryOpening(us, them)
-     *   inbound half   — THEY opened it: isDeliveryOpening(them, us)
-     *
-     * The first version of this registry keyed on (agent NAME, peer PUBKEY) and both halves passed
-     * their own local agent first. The initiator half matched; the inbound half asked
-     * `(receiver-name, initiator-pubkey)` against a registry holding `(initiator-name, target-pubkey)`
-     * — two tuples that can never be equal — so the doorbell guard read as protection and was
-     * unreachable in production, and the log line meant to prove it worked never fired either.
-     * Pubkeys on BOTH ends is what lets the two halves name the same pair at all.
-     */
-    isDeliveryOpening(openerPubkey: string, targetPubkey: string): boolean;
-    /** In-flight count. Exposed for assertions and for the leak check a test can make. */
-    inFlight(): number;
-}
-/**
- * How long an entry may claim to be "in flight" before it is ignored.
- *
- * `openSessionAs` carries no deadline of its own, so a dial that never settles would leave the
- * intent registered and silence that peer's doorbell for the life of the process — a worse outage
- * than the storm this exists to stop. A dial that has been in flight for two minutes is not in
- * flight; it is stuck, and a stuck dial must not be able to mute anything.
- */
-export declare const DELIVERY_OPEN_STALE_MS = 120000;
-export declare function createDeliveryOpenRegistry(now?: () => number): DeliveryOpenRegistry;
-//# sourceMappingURL=delivery-open-registry.d.ts.map

package/dist/delivery-open-registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"delivery-open-registry.d.ts","sourceRoot":"","sources":["../src/delivery-open-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,8FAA8F;AAC9F,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,mBAAmB,CAAC;AAE/D,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,IAAI,CAAC;IAC9D;;;;;;;;;;;;;;;OAeG;IACH,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;IACvE,sFAAsF;IACtF,QAAQ,IAAI,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,SAAU,CAAC;AAE9C,wBAAgB,0BAA0B,CAAC,GAAG,GAAE,MAAM,MAAiB,GAAG,oBAAoB,CAoD7F"}