@cello-protocol/daemon 0.0.227 → 0.0.228

package/dist/backup-restore.js

@@ -0,0 +1,341 @@
+/**
+ * DOD-M15-BACKUP-1 — export an agent's identity, and put it back on another machine.
+ *
+ * ─── What a backup has to contain, and why the obvious answer is wrong ─────────────────────────
+ *
+ * The DoD line says *"Backup = exporting the SQLCipher database for transport."* Exporting the
+ * database alone produces a file nobody can ever open.
+ *
+ * The database is encrypted and its key is a separate 32-byte file at `<db>.key` — `sqlcipher-db.ts`
+ * calls it "the ONE plaintext key file on disk". A fresh daemon on a new machine mints its own key,
+ * which cannot open a database encrypted under a different one. An operator restoring a
+ * database-only archive would be told it worked, and find out on the day they needed it that the
+ * contents are unreadable forever.
+ *
+ * So the archive carries BOTH, and the round-trip test restores into a directory holding a
+ * different key precisely to prove it.
+ *
+ * ─── The consequence of that, which the tool must say out loud ─────────────────────────────────
+ *
+ * A file containing that key IS the agent. Whoever holds it can sign as them, read every
+ * transcript, and use their identity. Nothing about the word "backup" suggests a file this
+ * dangerous, so the response says it at the moment one is written. `DOD-M15-CLAIM-SCREEN-1`'s rule
+ * applies to affordances as much as claims: silence is not an option.
+ *
+ * ─── Why `VACUUM INTO` rather than copying the file ────────────────────────────────────────────
+ *
+ * The daemon holds the database open with a write lock. Copying the file byte-for-byte while it is
+ * open can capture a torn page or miss a WAL frame, producing an archive that restores into a
+ * corrupt database — the worst outcome available here, because it looks like a successful backup.
+ * `VACUUM INTO` asks SQLite for a consistent snapshot, and on SQLCipher the target inherits the
+ * source's cipher settings, so the snapshot is encrypted under the same key.
+ *
+ * ─── Restore is validated in full BEFORE anything is touched ───────────────────────────────────
+ *
+ * Restore OVERWRITES. A truncated or wrong file that is accepted destroys the working agent the
+ * operator still had — the backup tool becomes the thing that loses the identity. So the container
+ * is parsed, its checksum verified and its payloads decompressed entirely in memory first; only
+ * then does anything reach the disk.
+ *
+ * ─── V1 scope, per the DoD ─────────────────────────────────────────────────────────────────────
+ *
+ * Export plus overwrite-restore. MERGE — restoring onto a device that has its own live state — is
+ * explicitly deferred, and this module does not pretend otherwise: restore replaces, and says so.
+ */
+import { createHash, randomBytes } from "node:crypto";
+import { gzipSync, gunzipSync } from "node:zlib";
+import { readFile, writeFile, rm, mkdir, chmod, open as fsOpen, rename } from "node:fs/promises";
+import { existsSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { openEncryptedDatabase, dbKeyPathFor } from "./sqlcipher-db.js";
+import { extractErrorMessage } from "./error-message.js";
+/**
+ * Write 0600, fsync, rename — and fsync the directory so the rename itself survives a power loss.
+ *
+ * Restore OVERWRITES an identity. A partially written database is the one failure that opens and is
+ * WRONG rather than failing loudly, because page 1 is enough for `sqlite_master` to read. Rename is
+ * atomic: the path is either the old file or the whole new one.
+ */
+async function writeFileDurably(path, bytes) {
+    const tmp = `${path}.restore-${randomBytes(6).toString("hex")}`;
+    const fh = await fsOpen(tmp, "wx", 0o600);
+    try {
+        await fh.write(bytes);
+        await fh.sync();
+    }
+    finally {
+        await fh.close();
+    }
+    await rename(tmp, path);
+    const dir = await fsOpen(dirname(path), "r");
+    try {
+        await dir.sync();
+    }
+    finally {
+        await dir.close();
+    }
+}
+/** Magic + version, so a wrong file is refused by shape before anything else is attempted. */
+const MAGIC = "CELLO-BACKUP-v1";
+/**
+ * THE SENSITIVITY NOTICE. One string, used by every path that writes an archive, so a second call
+ * site cannot ship a quieter version of it.
+ */
+const SENSITIVITY = "TREAT THIS FILE LIKE A PRIVATE KEY. It contains your agent's encrypted database AND the key that " +
+    "opens it, because a backup without the key restores to something nobody can read. Anyone who has " +
+    "this file can sign as your agent and read every transcript in it. Store it where you would store " +
+    "a private key — not a shared drive, not a chat message.";
+/**
+ * Take a consistent snapshot of the live database and write a portable archive.
+ *
+ * `dbPath` is the live database. It may be open in this process; `VACUUM INTO` is safe against that
+ * and is why the snapshot goes through SQLite rather than a file copy.
+ */
+export async function createBackup(opts) {
+    const keyPath = opts.keyPath ?? dbKeyPathFor(opts.dbPath);
+    if (!existsSync(opts.dbPath)) {
+        return {
+            ok: false,
+            reason: "database_not_found",
+            guidance: `No database at ${opts.dbPath}. Start the daemon at least once before taking a backup — there is no identity to export yet.`,
+        };
+    }
+    if (!existsSync(keyPath)) {
+        // Refused rather than exported-without-key: an archive that cannot be opened is worse than no
+        // archive, because the operator stops worrying about it.
+        return {
+            ok: false,
+            reason: "key_file_not_found",
+            guidance: `The database at ${opts.dbPath} has no key file at ${keyPath}. Exporting the database without it would produce a backup nobody can ever open, so nothing was written.`,
+        };
+    }
+    if (existsSync(opts.outPath) && opts.overwrite !== true) {
+        return {
+            ok: false,
+            reason: "archive_exists",
+            guidance: `${opts.outPath} already exists. Replacing a backup silently is a way to lose an identity while believing you hold two copies of it — pass overwrite to replace it deliberately, or choose another path.`,
+        };
+    }
+    // A snapshot beside the real database, then read and discard it. `VACUUM INTO` refuses to write
+    // to an existing path, so the name is fresh per call.
+    // BESIDE THE ARCHIVE, not in the shared temp dir (review F11). On macOS `$TMPDIR` is per-user
+    // 0700, but on Linux it is `/tmp` and SQLite creates the snapshot at `0644 & ~umask`. The contents
+    // are encrypted — verified empirically, the header is ciphertext and it is unopenable without the
+    // key — so that is ciphertext exposure rather than key exposure. It is still a full copy of the
+    // database, and the `finally` below only covers throws: a SIGKILL mid-backup would leave it there.
+    const snapshot = join(dirname(opts.outPath), `.cello-backup-snapshot-${randomBytes(8).toString("hex")}.db`);
+    try {
+        const key = await readFile(keyPath);
+        const db = openEncryptedDatabase(opts.dbPath, new Uint8Array(key));
+        try {
+            db.exec(`VACUUM INTO '${snapshot.replace(/'/g, "''")}'`);
+        }
+        finally {
+            db.close();
+        }
+        const dbBytes = await readFile(snapshot);
+        const envelope = {
+            magic: MAGIC,
+            version: 1,
+            created_at: Date.now(),
+            db_sha256: createHash("sha256").update(dbBytes).digest("hex"),
+            db_b64: dbBytes.toString("base64"),
+            key_b64: key.toString("base64"),
+        };
+        const packed = gzipSync(Buffer.from(JSON.stringify(envelope), "utf8"));
+        await writeFile(opts.outPath, packed, { mode: 0o600 });
+        /**
+         * CHMOD AFTER THE WRITE, because `mode` is honoured only at `O_CREAT` — review F5, measured on
+         * this machine:
+         *
+         *     existing 0644 file + writeFile(mode 0600)  →  still 0644
+         *     existing 0666 file + writeFile(mode 0600)  →  still 0666
+         *     fresh file                                  →  0600
+         *
+         * So the `--force` path — overwriting yesterday's archive — kept whatever mode was already
+         * there. A file that arrived at 0644 (scp, a shell redirect under umask 022, an iCloud
+         * round-trip) would hold a WORLD-READABLE plaintext signing key. The comment claimed the
+         * property; only the create path enforced it.
+         */
+        await chmod(opts.outPath, 0o600);
+        opts.logger.info("agent.backup.written", {
+            path: opts.outPath,
+            bytes: packed.length,
+            impact: "the agent's identity, key shares, contacts, transcripts and seals are now exportable to another machine",
+            guidance: SENSITIVITY,
+        });
+        return { ok: true, path: opts.outPath, bytes: packed.length, guidance: SENSITIVITY };
+    }
+    catch (err) {
+        const reason = extractErrorMessage(err);
+        opts.logger.error("agent.backup.failed", { path: opts.outPath, reason });
+        return {
+            ok: false,
+            reason: "backup_failed",
+            guidance: `The backup could not be written: ${reason}. Nothing was changed on this machine.`,
+        };
+    }
+    finally {
+        await rm(snapshot, { force: true }).catch(() => { });
+    }
+}
+/** Read an archive's metadata without restoring it. */
+export async function inspectBackup(archivePath) {
+    const parsed = await parseArchive(archivePath);
+    if (!parsed.ok)
+        return { ok: false, reason: parsed.reason };
+    return {
+        ok: true,
+        createdAt: parsed.envelope.created_at,
+        hasKey: parsed.envelope.key_b64.length > 0,
+        dbBytes: parsed.dbBytes.length,
+    };
+}
+/**
+ * Parse and FULLY VALIDATE an archive in memory.
+ *
+ * Everything that can fail happens here, before `restoreBackup` touches the disk. That ordering is
+ * the whole safety property: a restore that fails must leave the machine exactly as it was.
+ */
+async function parseArchive(archivePath) {
+    if (!existsSync(archivePath))
+        return { ok: false, reason: "archive_not_found" };
+    let raw;
+    try {
+        raw = await readFile(archivePath);
+    }
+    catch (err) {
+        return { ok: false, reason: `archive_unreadable: ${extractErrorMessage(err)}` };
+    }
+    let json;
+    try {
+        json = gunzipSync(raw).toString("utf8");
+    }
+    catch {
+        // A truncated file usually dies here — gzip carries its own length and CRC, which is why the
+        // container is compressed rather than raw JSON.
+        return { ok: false, reason: "archive_corrupt_or_not_a_cello_backup" };
+    }
+    let envelope;
+    try {
+        envelope = JSON.parse(json);
+    }
+    catch {
+        return { ok: false, reason: "archive_corrupt_or_not_a_cello_backup" };
+    }
+    if (envelope.magic !== MAGIC || envelope.version !== 1) {
+        return { ok: false, reason: "archive_wrong_format_or_version" };
+    }
+    if (typeof envelope.db_b64 !== "string" || typeof envelope.key_b64 !== "string") {
+        return { ok: false, reason: "archive_missing_payload" };
+    }
+    const dbBytes = Buffer.from(envelope.db_b64, "base64");
+    const keyBytes = Buffer.from(envelope.key_b64, "base64");
+    if (dbBytes.length === 0)
+        return { ok: false, reason: "archive_missing_database" };
+    if (keyBytes.length !== 32) {
+        // Without a well-formed key the restored database is unopenable — the exact failure this unit
+        // exists to prevent, so it is refused rather than restored hopefully.
+        return { ok: false, reason: "archive_missing_or_malformed_key" };
+    }
+    const actual = createHash("sha256").update(dbBytes).digest("hex");
+    if (actual !== envelope.db_sha256)
+        return { ok: false, reason: "archive_checksum_mismatch" };
+    return { ok: true, envelope, dbBytes, keyBytes };
+}
+/**
+ * Replace this machine's database and key with the archive's.
+ *
+ * OVERWRITE, not merge — merge is explicitly deferred, and pretending otherwise would silently pick
+ * a winner between two divergent histories. The caller is responsible for the daemon not holding
+ * the database open; the handler enforces that.
+ */
+export async function restoreBackup(opts) {
+    const keyPath = opts.keyPath ?? dbKeyPathFor(opts.dbPath);
+    const parsed = await parseArchive(opts.archivePath);
+    if (!parsed.ok) {
+        opts.logger.error("agent.restore.refused", {
+            archivePath: opts.archivePath,
+            reason: parsed.reason,
+            impact: "nothing was written — the agent currently on this machine is untouched",
+        });
+        return {
+            ok: false,
+            reason: parsed.reason,
+            guidance: `That file was not restored: ${parsed.reason}. NOTHING on this machine was changed — the ` +
+                `archive is validated completely before anything is written, because a restore overwrites ` +
+                `and a bad archive must never be able to destroy the agent you still have.`,
+        };
+    }
+    try {
+        // 0700, matching `resolveDbKey`'s own mkdir. On a fresh machine THIS is what creates the CELLO
+        // directory, and it holds a signing key (review F12).
+        await mkdir(dirname(opts.dbPath), { recursive: true, mode: 0o700 });
+        /**
+         * ORDER AND ATOMICITY — review F6/F7, and the previous comment here had it backwards.
+         *
+         * It said "key first, because a database without its key is the unopenable state". On a machine
+         * that ALREADY has an agent that is true but harmless — a key/db mismatch throws
+         * `db_encryption_key_mismatch`, loudly, and re-running the restore fixes it.
+         *
+         * On a FRESH machine — the actual restore use case — key-first is the dangerous order. Crash
+         * between the two writes and the key is present with NO database, so `resolveDbKey` loads the
+         * key and SQLCipher CREATES A FRESH EMPTY ONE. The daemon boots clean with zero agents and says
+         * nothing. That is the only crash state that opens, is wrong, and is silent.
+         *
+         * Worse, a crash MID-write left a truncated database whose page 1 was present, so
+         * `sqlite_master` read and the open SUCCEEDED against a partial file.
+         *
+         * Both are closed by writing to a temp sibling, fsync'ing, and renaming — rename is atomic, so
+         * the file either is the old one or is the whole new one, never half. The sidecars go first:
+         * stale WAL frames encrypted under the OLD key must not be present when the new database
+         * appears. Then the database, then the key — so the surviving crash state is db-present /
+         * key-absent, which `resolveDbKey` refuses loudly by design.
+         *
+         * The key write is fsync'd for the reason `sqlcipher-db.ts` gives where it writes the same file:
+         * "so a crash right after a fresh install can't lose the key while the encrypted DB exists".
+         * Returning ok:true with the key only in page cache re-opens that hole.
+         */
+        await rm(`${opts.dbPath}-wal`, { force: true }).catch(() => { });
+        await rm(`${opts.dbPath}-shm`, { force: true }).catch(() => { });
+        await writeFileDurably(opts.dbPath, parsed.dbBytes);
+        await writeFileDurably(keyPath, parsed.keyBytes);
+    }
+    catch (err) {
+        const reason = extractErrorMessage(err);
+        opts.logger.error("agent.restore.failed", { archivePath: opts.archivePath, reason });
+        return {
+            ok: false,
+            reason: "restore_write_failed",
+            guidance: `The restore could not complete: ${reason}. The database may be in a partial state — restore again from the same archive before starting the daemon.`,
+        };
+    }
+    // Prove it opens, here, rather than letting the daemon discover it at next boot.
+    try {
+        const db = openEncryptedDatabase(opts.dbPath, new Uint8Array(parsed.keyBytes));
+        db.close();
+    }
+    catch (err) {
+        const reason = extractErrorMessage(err);
+        opts.logger.error("agent.restore.unopenable", { dbPath: opts.dbPath, reason });
+        return {
+            ok: false,
+            reason: "restored_database_unopenable",
+            guidance: `The archive was written but the restored database could not be opened: ${reason}. This should not happen — the archive carries its own key. Keep the archive and report it.`,
+        };
+    }
+    const createdAt = new Date(parsed.envelope.created_at).toISOString();
+    opts.logger.info("agent.restore.completed", {
+        dbPath: opts.dbPath,
+        backupCreatedAt: createdAt,
+        impact: "this machine's agent database and key were REPLACED by the archive's",
+    });
+    return {
+        ok: true,
+        dbPath: opts.dbPath,
+        guidance: `Restored from a backup taken ${createdAt}. This machine's previous agent database was ` +
+            `REPLACED, not merged — anything that happened here since that backup is gone. Restart the ` +
+            `daemon (cello logout && cello login) so it opens the restored database.`,
+    };
+}
+//# sourceMappingURL=backup-restore.js.map

package/dist/backup-restore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-restore.js","sourceRoot":"","sources":["../src/backup-restore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAExE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACzD,MAAM,GAAG,GAAG,GAAG,IAAI,YAAY,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAChE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtB,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAClB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC;QAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AAC1D,CAAC;AAED,8FAA8F;AAC9F,MAAM,KAAK,GAAG,iBAAiB,CAAC;AAoBhC;;;GAGG;AACH,MAAM,WAAW,GACf,mGAAmG;IACnG,mGAAmG;IACnG,mGAAmG;IACnG,yDAAyD,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAOlC;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE1D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,oBAAoB;YAC5B,QAAQ,EAAE,kBAAkB,IAAI,CAAC,MAAM,+FAA+F;SACvI,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,8FAA8F;QAC9F,yDAAyD;QACzD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,oBAAoB;YAC5B,QAAQ,EAAE,mBAAmB,IAAI,CAAC,MAAM,uBAAuB,OAAO,0GAA0G;SACjL,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QACxD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,gBAAgB;YACxB,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,0LAA0L;SACpN,CAAC;IACJ,CAAC;IAED,gGAAgG;IAChG,sDAAsD;IACtD,8FAA8F;IAC9F,mGAAmG;IACnG,kGAAkG;IAClG,gGAAgG;IAChG,mGAAmG;IACnG,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,0BAA0B,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5G,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC;YACH,EAAE,CAAC,IAAI,CAAC,gBAAgB,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAmB;YAC/B,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;YACtB,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7D,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAClC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAChC,CAAC;QAEF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACvE,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD;;;;;;;;;;;;WAYG;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAEjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE;YACvC,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,KAAK,EAAE,MAAM,CAAC,MAAM;YACpB,MAAM,EAAE,yGAAyG;YACjH,QAAQ,EAAE,WAAW;SACtB,CAAC,CAAC;QAEH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACvF,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACzE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,eAAe;YACvB,QAAQ,EAAE,oCAAoC,MAAM,wCAAwC;SAC7F,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAqB,CAAC,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAmB;IAEnB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAC5D,OAAO;QACL,EAAE,EAAE,IAAI;QACR,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU;QACrC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAC1C,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;KAC/B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,YAAY,CACzB,WAAmB;IAEnB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAEhF,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,mBAAmB,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAClF,CAAC;IAED,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,6FAA6F;QAC7F,gDAAgD;QAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IACxE,CAAC;IAED,IAAI,QAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IACxE,CAAC;IAED,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IACnF,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC3B,8FAA8F;QAC9F,sEAAsE;QACtE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClE,IAAI,MAAM,KAAK,QAAQ,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAE7F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAKnC;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE1D,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;YACzC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,wEAAwE;SACjF,CAAC,CAAC;QACH,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EACN,+BAA+B,MAAM,CAAC,MAAM,8CAA8C;gBAC1F,2FAA2F;gBAC3F,2EAA2E;SAC9E,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,+FAA+F;QAC/F,sDAAsD;QACtD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAEpE;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAChE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAChE,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QACrF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,sBAAsB;YAC9B,QAAQ,EAAE,mCAAmC,MAAM,4GAA4G;SAChK,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/E,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,8BAA8B;YACtC,QAAQ,EAAE,0EAA0E,MAAM,6FAA6F;SACxL,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;QAC1C,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,eAAe,EAAE,SAAS;QAC1B,MAAM,EAAE,sEAAsE;KAC/E,CAAC,CAAC;IAEH,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EACN,gCAAgC,SAAS,+CAA+C;YACxF,4FAA4F;YAC5F,yEAAyE;KAC5E,CAAC;AACJ,CAAC"}

package/dist/bin/cello-daemon.d.ts

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+/**
+ * cello-daemon — the long-running CELLO daemon process.
+ *
+ * This binary is spawned by `cello login` as a detached background process.
+ * It manages agent identities, IPC connections, and (future) directory signaling.
+ *
+ * Environment variables:
+ *   CELLO_DIR       Override ~/.cello directory (default: ~/.cello)
+ *   CELLO_VERSION   Version string for lock file (default: from package.json)
+ */
+export {};
+//# sourceMappingURL=cello-daemon.d.ts.map

package/dist/bin/cello-daemon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cello-daemon.d.ts","sourceRoot":"","sources":["../../src/bin/cello-daemon.ts"],"names":[],"mappings":";AACA;;;;;;;;;GASG"}

package/dist/bin/cello-daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cello-daemon.js","sourceRoot":"","sources":["../../src/bin/cello-daemon.ts"],"names":[],"mappings":";AACA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAuB,MAAM,yBAAyB,CAAC;AAC9G,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,mGAAmG;AACnG,qGAAqG;AACrG,kCAAkC;AAClC,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEvF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,2FAA2F;AAC3F,yFAAyF;AACzF,gGAAgG;AAChG,MAAM,sBAAsB,GAAG,kEAAkE,CAAC;AAClG,MAAM,oBAAoB,GAAG,CAAC,GAAG,MAAM,CAAC,CAAE,YAAY;AACtD,MAAM,oBAAoB,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,aAAa;AAEvD,uCAAuC;AACvC,MAAM,YAAY,GAAW;IAC3B,KAAK,CAAC,KAAa,EAAE,OAAgC;QACnD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACjG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,KAAa,EAAE,OAAgC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAChG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,KAAa,EAAE,OAAgC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAChG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,KAAK,CAAC,KAAa,EAAE,OAAgC;QACnD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACjG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC;CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,GAAW,sBAAsB,CAAC,YAAY,CAAC,CAAC;AAE5D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AACpE,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AACjD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AACnD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC;AAErD;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,kBAAkB,CAAC,aAAsB;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,yBAAyB,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IAErE,8FAA8F;IAC9F,gGAAgG;IAChG,gGAAgG;IAChG,8FAA8F;IAC9F,2DAA2D;IAC3D,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;IAChE,IAAI,OAAmC,CAAC;IACxC,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,WAAW,CAAC,CAAC;QACzD,OAAO,GAAG,MAAM,mBAAmB,CAAC;YAClC,UAAU;YACV,GAAG,EAAE;gBACH,sBAAsB,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC;gBACpD,4BAA4B,EAAE,WAAW;gBACzC,0FAA0F;gBAC1F,yFAAyF;gBACzF,yFAAyF;gBACzF,oDAAoD;gBACpD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,4BAA4B,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxF;SACF,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3I,2EAA2E;QAC3E,EAAE;QACF,yFAAyF;QACzF,8FAA8F;QAC9F,2FAA2F;QAC3F,iFAAiF;QACjF,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;YACrC,KAAK,EAAE,OAAO,CAAC,MAAM;YACrB,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC,CAAC;QACH,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAC5C,0FAA0F;YAC1F,2FAA2F;YAC3F,2BAA2B;YAC3B,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,MAAM,EAAE,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACrJ,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACzC,yFAAyF;QACzF,2FAA2F;QAC3F,6FAA6F;QAC7F,0FAA0F;QAC1F,2CAA2C;QAC3C,MAAM,IAAI,GAAI,GAAgC,EAAE,IAAI,IAAI,sBAAsB,CAAC;QAC/E,MAAM,QAAQ,GAAI,GAAoC,EAAE,QAAQ;eAC3D,wFAAwF;gBACxF,2DAA2D,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACrJ,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,QAAQ,YAAY,OAAO,GAAG,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;;;GAOG;AACH,IAAI,aAAqG,CAAC;AAC1G,KAAK,UAAU,iBAAiB;IAC9B,IAAI,CAAC,aAAa;QAAE,OAAO;IAC3B,MAAM,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACnC,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,gFAAgF;IAChF,iFAAiF;IACjF,8EAA8E;IAC9E,0BAA0B;IAC1B,iGAAiG;IACjG,kGAAkG;IAClG,mGAAmG;IACnG,mGAAmG;IACnG,MAAM,yBAAyB,GAAG,+BAA+B,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;IAEpG,6FAA6F;IAC7F,+FAA+F;IAC/F,kGAAkG;IAClG,kGAAkG;IAClG,mGAAmG;IACnG,4FAA4F;IAC5F,mGAAmG;IACnG,2EAA2E;IAC3E,mGAAmG;IACnG,gGAAgG;IAChG,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAE3C,gGAAgG;IAChG,iDAAiD;IACjD,MAAM,QAAQ,GACZ,MAAM,kBAAkB,EAAE,CAAC;IAC7B,aAAa,GAAG,QAAQ,CAAC;IAEzB;;;;;;OAMG;IACH,MAAM,sBAAsB,GAAG,KAAK,EAAE,aAAsB,EAAiB,EAAE;QAC7E,IAAI,QAAQ,CAAC,OAAO;YAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACpD,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,aAAa,CAAC,CAAC;QAC1D,QAAQ,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QACrC,IAAI,CAAC,SAAS,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACxF,CAAC,CAAC;IAEF;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,IAAI,MAAM,GAAmD,IAAI,CAAC;IAClE,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,6FAA6F;YAC7F,qDAAqD;YACrD,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;gBAC9C,MAAM;gBACN,MAAM,EAAE,gLAAgL;aACzL,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;YACrC,OAAO,CAAC,MAAM,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;gBAC1D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC9C,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;oBACtD,MAAM;oBACN,aAAa;oBACb,MAAM,EAAE,0LAA0L;oBAClM,QAAQ,EAAE,kJAAkJ;iBAC7J,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QACD,8FAA8F;QAC9F,4FAA4F;QAC5F,oBAAoB;QACpB,EAAE;QACF,4FAA4F;QAC5F,gGAAgG;QAChG,+FAA+F;QAC/F,wCAAwC;QACxC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,MAA4B,EAAE,EAAE,CAAC,GAAG,EAAE;QACtD,IAAI,CAAC;YACH,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACtC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;oBACrC,MAAM;oBACN,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC;iBAChC,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;gBACrC,MAAM;gBACN,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC;aAChC,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEzC,MAAM,GAAG,MAAM,WAAW,CAAC;QACzB,QAAQ;QACR,UAAU;QACV,YAAY;QACZ,cAAc,EAAE,eAAe;QAC/B,OAAO;QACP,MAAM;QACN,yBAAyB;QACzB,GAAG,QAAQ;QACX,eAAe,EAAE,QAAQ,CAAC,MAAM;QAChC,sBAAsB;QACtB,UAAU,EAAE,iBAAiB;QAC7B,6FAA6F;QAC7F,0FAA0F;QAC1F,8FAA8F;QAC9F,uFAAuF;QACvF,4FAA4F;QAC5F,kFAAkF;QAClF,EAAE;QACF,+FAA+F;QAC/F,4FAA4F;QAC5F,4EAA4E;QAC5E,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC3B,4FAA4F;YAC5F,oFAAoF;YACpF,gFAAgF;YAChF,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACjG,8FAA8F;YAC9F,6FAA6F;YAC7F,mFAAmF;YACnF,YAAY,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;QACD,cAAc,EAAE,sBAAsB;QACtC,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;KACjH,CAAC,CAAC;AAEL,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,kGAAkG;IAClG,8FAA8F;IAC9F,oGAAoG;IACpG,OAAO;IACP,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;QACpC,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC;KAChC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/boot-agents.d.ts

@@ -0,0 +1,64 @@
+import { DbRegistrationPersistence } from "./db-identity-store.js";
+import { SubmissionRetryQueue } from "./submission-retry.js";
+import type { SubmissionOp } from "@cello-protocol/protocol-types";
+import type { AgentInfo, DaemonConfig, Logger } from "./types.js";
+import type { SessionNodeManager } from "./session-node-manager.js";
+import type { SecurityGatewayClient } from "@cello-protocol/gateway";
+import type { SignalingManager } from "@cello-protocol/transport";
+export interface BootAgentsDeps {
+    config: DaemonConfig;
+    logger: Logger;
+    sessionNodeManager: SessionNodeManager;
+    securityGateway: SecurityGatewayClient;
+    /**
+     * ⚠️ THE THREE BELOW ARE GETTERS AND MUST STAY THAT WAY. All three are declared BELOW this phase
+     * in the composition root and read from inside callbacks that run long after boot. By value,
+     * `onlineAgents` freezes as the empty set it is at construction — every agent reads as offline and
+     * no submission ever sends — and the other two freeze as `undefined`.
+     */
+    getFlushAwaitingContent: () => (agentName: string) => Promise<void>;
+    getOnlineAgents: () => ReadonlySet<string>;
+    getSharedSignaling: () => SignalingManager | undefined;
+    getPerAgentSignaling: () => Map<string, {
+        signaling: SignalingManager;
+    }>;
+}
+export declare function startBootAgents(deps: BootAgentsDeps): Promise<{
+    loadedAgents: import("./agent-loader.js").LoadedAgent[];
+    getPersistence: (agentName: string) => DbRegistrationPersistence;
+    agents: AgentInfo[];
+    keyProviders: Map<string, import("@cello-protocol/crypto").KeyProvider>;
+    contentPark: {
+        autoRecoverForAgent: (agentName: string, trigger?: string) => Promise<void>;
+        registerHandlers: (handlers: Map<string, import("./ipc-server.js").IpcHandler>) => void;
+        recoverParkedFromRelay: (recipientAgent: {
+            name: string;
+            pubkey?: string;
+        }, relayPeerId: string, relayAddrs: string[]) => Promise<{
+            ok: true;
+            recovered: number;
+            pulled: number;
+            refused: number;
+            refusals: Array<{
+                contentHash: string;
+                sessionId: string;
+                reason: string;
+            }>;
+        } | {
+            ok: false;
+            reason: string;
+            guidance?: string;
+        }>;
+    };
+    autoRecoverForAgent: (agentName: string, trigger?: string) => Promise<void>;
+    onSignalingConnected: (agentName: string) => void;
+    submissionRetries: SubmissionRetryQueue;
+    recordIssuedSubmission: (agentName: string, agentId: string, s: {
+        submissionId: string;
+        subject: string;
+        op: SubmissionOp;
+        intakeKeyId: string;
+        stored: boolean;
+    }) => void;
+}>;
+//# sourceMappingURL=boot-agents.d.ts.map

package/dist/boot-agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot-agents.d.ts","sourceRoot":"","sources":["../src/boot-agents.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAGnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAK7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAElE,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,eAAe,EAAE,qBAAqB,CAAC;IACvC;;;;;OAKG;IACH,uBAAuB,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,eAAe,EAAE,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3C,kBAAkB,EAAE,MAAM,gBAAgB,GAAG,SAAS,CAAC;IACvD,oBAAoB,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC;CAC1E;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,cAAc;;gCAarB,MAAM,KAAG,yBAAyB;;;;;;;;kBAuKjE,CAAA;;;;;;;;;;;;;;oBASiF,CAAC;;;qCAnI9C,MAAM,YAAY,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;;;wCA2InE,MAAM,WAGR,MAAM,KACZ;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,YAAY,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,KACnG,IAAI;GAwBR"}