@cello-protocol/daemon 0.0.227 → 0.0.228

package/dist/seal-flows.d.ts

@@ -0,0 +1,107 @@
+import { SignalingManager } from "@cello-protocol/transport";
+import type { KeyProvider } from "@cello-protocol/crypto";
+import type { SessionNodeManager } from "./session-node-manager.js";
+import type { AgentInfo, Logger } from "./types.js";
+/**
+ * DOD-FRONTIER-STRAND-1 AC2: a failure may carry the numbers that caused it. `reason` stays the
+ * machine-readable discriminator every caller already switches on; these are additive detail so an
+ * operator is told WHAT disagreed rather than being sent to a counterparty that may be this same
+ * daemon. All optional — a rejection from an older counterparty carries none of them.
+ */
+export interface SealFailureDetail {
+    /** The counterparty's own refusal reason, distinct from OUR terminal `reason`. */
+    rejection_reason?: string;
+    your_leaf_count?: number;
+    their_leaf_count?: number;
+    diverging_leaf_index?: number;
+}
+export type SealFlowResult = {
+    ok: true;
+    sessionId: string;
+    status: "seal_interrupted_pending";
+    /**
+     * DOD-M12B-SEAL-BILATERAL-FIRST-1: which ceremony this commitment belongs to, when we KNOW.
+     *
+     * `relay_bilateral` means the counterparty told us it is on the relay's bilateral ceremony and
+     * was waiting for our half — so a bilateral receipt is already coming, and asking the
+     * directory to notarize with that counterparty marked ABSENT would take the worse artifact.
+     * Absent means "an ordinary interrupted commitment", which escalates as usual.
+     */
+    ceremony?: "relay_bilateral";
+} | ({
+    ok: false;
+    reason: string;
+    guidance: string;
+} & SealFailureDetail);
+export type ActiveSealResult = {
+    ok: true;
+    sessionId: string;
+    status: "seal_interrupted_pending";
+    rootHex: string;
+} | {
+    ok: false;
+    reason: string;
+    guidance: string;
+};
+export interface SealFlowDeps {
+    logger: Logger;
+    sessionNodeManager: SessionNodeManager;
+    agents: AgentInfo[];
+    getKeyProvider: (agentName: string) => KeyProvider | undefined;
+    /** This agent's directory signaling stream, or undefined if it has none. */
+    signalingFor: (agentName: string) => SignalingManager | undefined;
+    sendOver: (agentName: string, frame: Record<string, unknown>) => Promise<{
+        ok: boolean;
+        reason?: string;
+    }>;
+    /**
+     * DOD-FRONTIER-STRAND-1 AC3: retain an observed mismatch so the session list can show it.
+     * REQUIRED, not optional (review M4) — there is exactly one composition root, so optionality
+     * buys nothing and costs the compiler's ability to catch a wiring that was never done. That is
+     * precisely how the responder's missing `clearFrontierMismatch` stayed invisible.
+     */
+    recordFrontierMismatch: (agentName: string, sessionId: string, m: {
+        ours: number;
+        theirs: number;
+        divergingLeafIndex: number;
+    }) => void;
+    /** AC3: a seal that SUCCEEDS proves the frontiers agree — a stale flag would be the same defect inverted. */
+    clearFrontierMismatch: (agentName: string, sessionId: string) => void;
+}
+/**
+ * The operator-visible text for a counterparty's seal-interrupted rejection.
+ *
+ * Extracted from the flow so it can be TESTED. AC2 is worded about the message the INITIATOR shows
+ * — "reports the ACTUAL mismatch … instead of directing the operator to ask the counterparty" — and
+ * that message was previously built inline inside `handleSealInterruptedFlow`, reachable only by
+ * standing up two daemons and driving a real seal exchange. So the clause the AC is actually about
+ * had no test at all (review). A pure function is the honest seam.
+ */
+export declare function renderSealRejection(reason: string, sessionId: string, frontier?: {
+    responder: number;
+    initiator: number;
+    diverging: number;
+}): {
+    guidance: string;
+} & SealFailureDetail;
+export declare function createSealFlows(deps: SealFlowDeps): {
+    awaitSealAck: (sessionId: string, mgr: SignalingManager | undefined) => Promise<{
+        type: "seal_interrupted_ack";
+        sealInterruptedLeaf: Record<string, unknown>;
+        nonce: string | null;
+    } | {
+        type: "seal_interrupted_rejection";
+        reason: string;
+        pendingCeremony?: string;
+        frontier?: {
+            responder: number;
+            initiator: number;
+            diverging: number;
+        };
+    } | {
+        type: "timeout";
+    }>;
+    handleSealInterruptedFlow: (sessionId: string, record: import("./types.js").SessionRecord, correlationId: string, merkleRootAtInterruption: string, via?: SignalingManager) => Promise<SealFlowResult>;
+    handleActiveSealFlow: (sessionId: string, record: import("./types.js").SessionRecord, correlationId: string) => Promise<ActiveSealResult>;
+};
+//# sourceMappingURL=seal-flows.d.ts.map

package/dist/seal-flows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal-flows.d.ts","sourceRoot":"","sources":["../src/seal-flows.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAGpD;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,kFAAkF;IAClF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,cAAc,GACtB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,0BAA0B,CAAC;IACnC;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CAC9B,GACD,CAAC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,iBAAiB,CAAC,CAAC;AAE1E,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,0BAA0B,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACpF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,WAAW,GAAG,SAAS,CAAC;IAC/D,4EAA4E;IAC5E,YAAY,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,gBAAgB,GAAG,SAAS,CAAC;IAClE,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3G;;;;;OAKG;IACH,sBAAsB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,kBAAkB,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACxI,6GAA6G;IAC7G,qBAAqB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;CACvE;AAGD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,iBAAiB,CAoD1C;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,YAAY;8BA0Ef,MAAM,OAAO,gBAAgB,GAAG,SAAS,KAAG,OAAO;cARxE,sBAAsB;6BAAuB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;eAAS,MAAM,GAAG,IAAI;;cAK1F,4BAA4B;gBAAU,MAAM;0BAAoB,MAAM;mBAAa;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE;;cAC9I,SAAS;MAE8E;2CAgDtF,MAAM,UACT,OAAO,YAAY,EAAE,aAAa,iBAC3B,MAAM,4BACK,MAAM,QAa1B,gBAAgB,KACrB,OAAO,CAAC,cAAc,CAAC;sCA8Rb,MAAM,UACT,OAAO,YAAY,EAAE,aAAa,iBAC3B,MAAM,KACpB,OAAO,CAAC,gBAAgB,CAAC;EAmL7B"}