@cello-protocol/daemon 0.0.227 → 0.0.228

package/dist/seal-flows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal-flows.js","sourceRoot":"","sources":["../src/seal-flows.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,8BAA8B,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAM5F,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAyDzD;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAc,EACd,SAAiB,EACjB,QAAsE;IAEtE,6EAA6E;IAC7E,kGAAkG;IAClG,yEAAyE;IACzE,IAAI,QAAQ,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACjD,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;QACrD,OAAO;YACL,gBAAgB,EAAE,MAAM;YACxB,eAAe,EAAE,SAAS;YAC1B,gBAAgB,EAAE,SAAS;YAC3B,oBAAoB,EAAE,SAAS;YAC/B,QAAQ,EACN,+EAA+E,SAAS,IAAI;gBAC5F,aAAa,SAAS,0BAA0B,SAAS,kCAAkC;gBAC3F,qCAAqC,SAAS,8CAA8C;gBAC5F,0FAA0F;gBAC1F,qEAAqE;SACxE,CAAC;IACJ,CAAC;IACD,+FAA+F;IAC/F,iGAAiG;IACjG,kGAAkG;IAClG,8FAA8F;IAC9F,4FAA4F;IAC5F,MAAM,QAAQ,GAA2B;QACvC,iBAAiB,EACf,4SAA4S,SAAS,oBAAoB;YACzU,2WAA2W,SAAS,wDAAwD;QAC9a,sBAAsB,EACpB,oRAAoR,SAAS,qCAAqC;YAClU,qSAAqS;YACrS,siBAAsiB;QACxiB,4BAA4B,EAC1B,uKAAuK,SAAS,6BAA6B;KAChN,CAAC;IACF,gGAAgG;IAChG,gGAAgG;IAChG,6FAA6F;IAC7F,kGAAkG;IAClG,iFAAiF;IACjF,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;IAClE,CAAC;IACD,8FAA8F;IAC9F,iGAAiG;IACjG,gEAAgE;IAChE,OAAO;QACL,gBAAgB,EAAE,MAAM;QACxB,QAAQ,EAAE,MAAM,KAAK,qBAAqB;YACxC,CAAC,CAAC,yPAAyP,SAAS,0EAA0E;YAC9U,CAAC,CAAC,2DAA2D,MAAM,yJAAyJ,SAAS,2CAA2C;KACnR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAkB;IAChD,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,GAAG,IAAI,CAAC;IAC3I,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,cAAc,EAAqD,CAAC;IAEhG,6CAA6C;IAC7C,EAAE;IACF,0FAA0F;IAC1F,EAAE;IACF,iGAAiG;IACjG,6FAA6F;IAC7F,4FAA4F;IAC5F,2EAA2E;IAC3E,EAAE;IACF,+EAA+E;IAC/E,kGAAkG;IAClG,6FAA6F;IAC7F,wFAAwF;IACxF,EAAE;IACF,8FAA8F;IAC9F,2FAA2F;IAC3F,iGAAiG;IACjG,iGAAiG;IACjG,4FAA4F;IAC5F,6BAA6B;IAC7B,EAAE;IACF,mGAAmG;IACnG,kGAAkG;IAClG,mGAAmG;IACnG,0FAA0F;IAC1F,6FAA6F;IAC7F,uFAAuF;IACvF,EAAE;IACF,8FAA8F;IAC9F,uEAAuE;IACvE,EAAE;IACF,6FAA6F;IAC7F,kGAAkG;IAClG,qFAAqF;IACrF,0FAA0F;IAC1F,oEAAoE;IACpE,EAAE;IACF,8FAA8F;IAC9F,kGAAkG;IAClG,mGAAmG;IACnG,kGAAkG;IAClG,+DAA+D;IAC/D,EAAE;IACF,gGAAgG;IAChG,6FAA6F;IAC7F,kGAAkG;IAClG,iGAAiG;IACjG,kGAAkG;IAClG,qCAAqC;IACrC,EAAE;IACF,gGAAgG;IAChG,iGAAiG;IACjG,8DAA8D;IAE9D,yEAAyE;IACzE,qEAAqE;IACrE,gFAAgF;IAChF,gFAAgF;IAChF,iFAAiF;IACjF,6EAA6E;IAC7E,MAAM,2BAA2B,GAAG,MAAM,CAAC;IAU3C,SAAS,YAAY,CAAC,SAAiB,EAAE,GAAiC;QACxE,OAAO,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;YAC5C,gGAAgG;YAChG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACnD,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;gBACpC,UAAU,EAAE,CAAC;gBACb,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YAC/B,CAAC,EAAE,2BAA2B,CAAC,CAAC;YAEhC,MAAM,UAAU,GAAG,GAAG,CAAC,sBAAsB,CAAC,CAAC,KAAK,EAAE,EAAE;gBACtD,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;oBACzF,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;oBAAE,OAAO;gBAEjF,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC5B,UAAU,EAAE,CAAC;gBAEb,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;oBAC1C,OAAO,CAAC;wBACN,IAAI,EAAE,sBAAsB;wBAC5B,mBAAmB,EAAG,KAAK,CAAC,mBAA+C,IAAI,EAAE;wBACjF,KAAK,EAAE,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;qBAC5D,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,yFAAyF;oBACzF,gFAAgF;oBAChF,mFAAmF;oBACnF,oFAAoF;oBACpF,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,kBAAkB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBACvG,MAAM,SAAS,GAAG,KAAK,CAAC,sBAAsB,CAAC,CAAC;oBAChD,MAAM,SAAS,GAAG,KAAK,CAAC,sBAAsB,CAAC,CAAC;oBAChD,MAAM,SAAS,GAAG,KAAK,CAAC,sBAAsB,CAAC,CAAC;oBAChD,MAAM,WAAW,GAAG,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAO,SAAS,KAAK,QAAQ,CAAC;oBACnF,OAAO,CAAC;wBACN,IAAI,EAAE,4BAA4B;wBAClC,MAAM,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;wBACnE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAChE,GAAG,CAAC,WAAW;4BACb,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE;4BAC/H,CAAC,CAAC,EAAE,CAAC;qBACR,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,yBAAyB,CACtC,SAAiB,EACjB,MAA0C,EAC1C,aAAqB,EACrB,wBAAgC;IAChC;;;;;;;;;;;OAWG;IACH,GAAsB;QAEtB,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAE3B,sDAAsD;QACtD,sFAAsF;QACtF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,WAAW,GAAG,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC;QACxC,MAAM,kBAAkB,GAAG,MAAM,CAAC,mBAAmB,CAAC;QAEtD,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,4EAA4E;QAC5E,iEAAiE;QACjE,2EAA2E;QAC3E,sEAAsE;QACtE,4EAA4E;QAC5E,MAAM,YAAY,GAAG,kBAAkB,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACrF,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC;QACpF,MAAM,aAAa,GAAG,UAAU;YAC9B,CAAC,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC;YACxE,CAAC,CAAC,wBAAwB,CAAC;QAE7B,2DAA2D;QAC3D,IAAI,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,KAAK,cAAc,EAAE,CAAC;YAC/D,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;gBAC9C,SAAS;gBACT,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,MAAM,EAAE,wBAAwB;gBAChC,KAAK,EAAE,kCAAkC;gBACzC,aAAa;aACd,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,wBAAwB;gBAChC,QAAQ,EAAE,2NAA2N;aACtO,CAAC;QACJ,CAAC;QAED,gFAAgF;QAChF,MAAM,aAAa,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;gBAC9C,SAAS;gBACT,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,MAAM,EAAE,yBAAyB;gBACjC,KAAK,EAAE,2BAA2B;gBAClC,aAAa;aACd,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,yBAAyB;gBACjC,QAAQ,EAAE,8JAA8J;aACzK,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,8BAA8B,CAAC,aAAa,EAAE;YAClE,SAAS;YACT,SAAS,EAAE,YAAY;YACvB,wBAAwB,EAAE,aAAa;YACvC,eAAe,EAAE,WAAW;SAC7B,CAAC,CAAC;QAEH,sDAAsD;QACtD,MAAM,OAAO,GAAG;YACd,IAAI,EAAE,0BAA0B;YAChC,SAAS;YACT,eAAe,EAAE,WAAW;YAC5B,kBAAkB;YAClB,uBAAuB,EAAE,YAAY;YACrC,wBAAwB,EAAE,aAAa;YACvC,KAAK;SACN,CAAC;QAEF,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjG,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;gBAC9C,SAAS;gBACT,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,MAAM,EAAE,2CAA2C;gBACnD,KAAK,EAAE,UAAU,CAAC,MAAM;gBACxB,aAAa;aACd,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,2CAA2C;gBACnD,QAAQ,EAAE,4KAA4K;aACvL,CAAC;QACJ,CAAC;QAED,gFAAgF;QAChF,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAExF,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;gBAC9C,SAAS;gBACT,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,MAAM,EAAE,2CAA2C;gBACnD,KAAK,EAAE,mCAAmC;gBAC1C,aAAa;aACd,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,2CAA2C;gBACnD,QAAQ,EAAE,4KAA4K;aACvL,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;YACpD,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;gBAC9C,SAAS;gBACT,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,MAAM,EAAE,2CAA2C;gBACnD,KAAK,EAAE,SAAS,CAAC,MAAM;gBACvB,GAAG,CAAC,SAAS,CAAC,QAAQ;oBACpB,CAAC,CAAC;wBACA,kBAAkB,EAAE,SAAS,CAAC,QAAQ,CAAC,SAAS;wBAChD,kBAAkB,EAAE,SAAS,CAAC,QAAQ,CAAC,SAAS;wBAChD,kBAAkB,EAAE,SAAS,CAAC,QAAQ,CAAC,SAAS;qBACjD;oBACD,CAAC,CAAC,EAAE,CAAC;gBACP,aAAa;aACd,CAAC,CAAC;YACH,2FAA2F;YAC3F,6FAA6F;YAC7F,2FAA2F;YAC3F,qEAAqE;YACrE,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACvB,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC;gBAC/D,6FAA6F;gBAC7F,uFAAuF;gBACvF,sBAAsB;gBACtB,sBAAsB,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE;oBACnD,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,kBAAkB,EAAE,SAAS;iBAClE,CAAC,CAAC;gBACH,iFAAiF;gBACjF,wFAAwF;gBACxF,oDAAoD;gBACpD,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;oBACvC,SAAS;oBACT,SAAS,EAAE,MAAM,CAAC,UAAU;oBAC5B,IAAI,EAAE,WAAW;oBACjB,YAAY,EAAE,SAAS;oBACvB,cAAc,EAAE,SAAS;oBACzB,kBAAkB,EAAE,SAAS;oBAC7B,aAAa;iBACd,CAAC,CAAC;YACL,CAAC;YACD,0FAA0F;YAC1F,oFAAoF;YACpF,EAAE;YACF,8FAA8F;YAC9F,wFAAwF;YACxF,2FAA2F;YAC3F,6EAA6E;YAC7E,IAAI,SAAS,CAAC,MAAM,KAAK,8BAA8B,IAAI,SAAS,CAAC,eAAe,KAAK,iBAAiB,EAAE,CAAC;gBAC3G,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;oBAC7C,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU;oBACvC,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,aAAa;iBAC3F,CAAC,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;gBACvG,4FAA4F;gBAC5F,2FAA2F;gBAC3F,6FAA6F;gBAC7F,iCAAiC;gBACjC,IAAI,SAAS,CAAC,EAAE,IAAI,SAAS,CAAC,MAAM,KAAK,kCAAkC,EAAE,CAAC;oBAC5E,oFAAoF;oBACpF,uFAAuF;oBACvF,6EAA6E;oBAC7E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,0BAA0B,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;gBAClG,CAAC;gBACD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,oBAAoB;oBAC5B,gBAAgB,EAAE,SAAS,CAAC,MAAM;oBAClC,QAAQ,EAAE,+KAA+K,SAAS,CAAC,MAAM,6DAA6D,SAAS,8BAA8B;iBAC9S,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,2CAA2C;gBACnD,GAAG,mBAAmB,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC;aACxE,CAAC;QACJ,CAAC;QAED,4CAA4C;QAC5C,CAAC;YACC,MAAM,IAAI,GAAG,SAAS,CAAC,mBAAmB,CAAC;YAE3C,mEAAmE;YACnE,0EAA0E;YAC1E,2EAA2E;YAC3E,0EAA0E;YAC1E,wEAAwE;YACxE,kEAAkE;YAClE,MAAM,QAAQ,GAAG,0BAA0B,CAAC;gBAC1C,IAAI;gBACJ,SAAS,EAAE,KAAK;gBAChB,QAAQ,EAAE,SAAS,CAAC,KAAK;gBACzB,YAAY;gBACZ,0BAA0B,EAAE,MAAM,CAAC,mBAAmB;aACvD,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG;oBAChB,cAAc,EAAE,iCAAiC;oBACjD,mBAAmB,EAAE,sCAAsC;oBAC3D,sBAAsB,EAAE,yCAAyC;iBACzD,CAAC;gBACX,MAAM,WAAW,GAAG;oBAClB,cAAc,EAAE,+KAA+K;oBAC/L,mBAAmB,EAAE,0NAA0N;oBAC/O,sBAAsB,EAAE,iOAAiO;iBACjP,CAAC;gBACX,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;oBAC9C,SAAS;oBACT,SAAS,EAAE,MAAM,CAAC,UAAU;oBAC5B,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAClC,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,aAAa;iBACd,CAAC,CAAC;gBACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACnG,CAAC;YAED,uEAAuE;YACvE,iEAAiE;YACjE,2EAA2E;YAC3E,qEAAqE;YACrE,uEAAuE;YACvE,gDAAgD;YAChD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,gCAAgC,CAAC;gBACnE,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,SAAS;gBACT,IAAI,EAAE,WAAW;gBACjB,OAAO;gBACP,gBAAgB,EAAE,IAAI;gBACtB,UAAU,EAAE,aAAa;gBACzB,KAAK;aACN,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;oBAC9C,SAAS;oBACT,SAAS,EAAE,MAAM,CAAC,UAAU;oBAC5B,MAAM,EAAE,iCAAiC;oBACzC,KAAK,EAAE,2DAA2D;oBAClE,aAAa;iBACd,CAAC,CAAC;gBACH,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,iCAAiC;oBACzC,QAAQ,EAAE,0KAA0K;iBACrL,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;gBACzC,SAAS;gBACT,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,SAAS,EAAE,YAAY;gBACvB,aAAa;aACd,CAAC,CAAC;YACH,4FAA4F;YAC5F,4FAA4F;YAC5F,qEAAqE;YACrE,qBAAqB,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YACpD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;QACrE,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,EAAE;IACF,8BAA8B;IAC9B,gFAAgF;IAChF,6DAA6D;IAC7D,uFAAuF;IACvF,sFAAsF;IACtF,wFAAwF;IACxF,mFAAmF;IACnF,uFAAuF;IACvF,kFAAkF;IAClF,mFAAmF;IACnF,iDAAiD;IACjD,4EAA4E;IAC5E,gFAAgF;IAChF,gFAAgF;IAChF,6EAA6E;IAC7E,+EAA+E;IAE/E,KAAK,UAAU,oBAAoB,CACjC,SAAiB,EACjB,MAA0C,EAC1C,aAAqB;QAErB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,WAAW,GAAG,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAE/C,yEAAyE;QACzE,IAAI,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,KAAK,cAAc,EAAE,CAAC;YAC/D,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,wBAAwB;gBAChC,QAAQ,EAAE,gLAAgL;aAC3L,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC3C,SAAS;gBACT,MAAM,EAAE,yBAAyB;gBACjC,YAAY,EAAE,gEAAgE;gBAC9E,aAAa;aACd,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,yBAAyB;gBACjC,QAAQ,EAAE,6JAA6J;aACxK,CAAC;QACJ,CAAC;QAED,+EAA+E;QAC/E,sEAAsE;QACtE,MAAM,UAAU,GAAG,kBAAkB,CAAC,qBAAqB,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC1F,MAAM,SAAS,GAAG,kBAAkB,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QACzF,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAE3B,yEAAyE;QACzE,8EAA8E;QAC9E,2EAA2E;QAC3E,uEAAuE;QACvE,2EAA2E;QAC3E,IAAI,OAA4B,CAAC;QACjC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,8BAA8B,CAAC,EAAE,EAAE;gBACjD,SAAS;gBACT,SAAS;gBACT,wBAAwB,EAAE,UAAU;gBACpC,eAAe,EAAE,WAAW;aAC7B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC3C,SAAS;gBACT,MAAM,EAAE,0BAA0B;gBAClC,YAAY,EAAE,mBAAmB,CAAC,GAAG,CAAC;gBACtC,aAAa;aACd,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,0BAA0B;gBAClC,QAAQ,EAAE,qHAAqH;aAChI,CAAC;QACJ,CAAC;QAED,6EAA6E;QAC7E,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;YACpC,SAAS;YACT,OAAO,EAAE,UAAU;YACnB,IAAI,EAAE,WAAW;YACjB,aAAa;SACd,CAAC,CAAC;QAEH,8EAA8E;QAC9E,4EAA4E;QAC5E,oEAAoE;QACpE,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE;YACnD,IAAI,EAAE,0BAA0B;YAChC,SAAS;YACT,eAAe,EAAE,WAAW;YAC5B,kBAAkB,EAAE,MAAM,CAAC,mBAAmB;YAC9C,uBAAuB,EAAE,SAAS;YAClC,wBAAwB,EAAE,UAAU;YACpC,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC3C,SAAS;gBACT,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,YAAY,EAAE,UAAU,CAAC,MAAM;gBAC/B,aAAa;aACd,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,uBAAuB;gBACpD,QAAQ,EAAE,UAAU,IAAI,UAAU,IAAI,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ;oBAC3E,CAAC,CAAC,UAAU,CAAC,QAAQ;oBACrB,CAAC,CAAC,gHAAgH;aACrH,CAAC;QACJ,CAAC;QAED,sEAAsE;QACtE,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACjF,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;YACpF,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,+BAA+B,CAAC;YAChH,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC3C,SAAS;gBACT,MAAM;gBACN,YAAY,EAAE,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM;gBACvF,aAAa;aACd,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM;gBACN,QAAQ,EAAE,SAAS,CAAC,IAAI,KAAK,SAAS;oBACpC,CAAC,CAAC,gJAAgJ;oBAClJ,CAAC,CAAC,sIAAsI;aAC3I,CAAC;QACJ,CAAC;QAED,gFAAgF;QAChF,MAAM,QAAQ,GAAG,0BAA0B,CAAC;YAC1C,IAAI,EAAE,SAAS,CAAC,mBAAmB;YACnC,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,SAAS,CAAC,KAAK;YACzB,YAAY,EAAE,SAAS;YACvB,0BAA0B,EAAE,MAAM,CAAC,mBAAmB;SACvD,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC3C,SAAS;gBACT,MAAM,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE;gBACjC,YAAY,EAAE,QAAQ,CAAC,KAAK;gBAC5B,aAAa;aACd,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE;gBACjC,QAAQ,EAAE,gMAAgM;aAC3M,CAAC;QACJ,CAAC;QAED,yEAAyE;QACzE,mEAAmE;QACnE,sFAAsF;QACtF,2EAA2E;QAC3E,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,gCAAgC,CAAC;YACnE,SAAS,EAAE,MAAM,CAAC,UAAU;YAC5B,SAAS;YACT,IAAI,EAAE,WAAW;YACjB,OAAO;YACP,gBAAgB,EAAE,SAAS,CAAC,mBAAmB;YAC/C,UAAU,EAAE,UAAU;YACtB,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC3C,SAAS;gBACT,MAAM,EAAE,qBAAqB;gBAC7B,YAAY,EAAE,mEAAmE;gBACjF,aAAa;aACd,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,qBAAqB;gBAC7B,QAAQ,EAAE,sJAAsJ;aACjK,CAAC;QACJ,CAAC;QAED,+EAA+E;QAC/E,8EAA8E;QAC9E,4EAA4E;QAC5E,iFAAiF;QACjF,MAAM,kBAAkB,CAAC,iBAAiB,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAEzE,4FAA4F;QAC5F,4FAA4F;QAC5F,qEAAqE;QACrE,qBAAqB,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,0BAA0B,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,CAAC;AAC3E,CAAC"}

package/dist/seal-frontier-verify.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Client-side content-frontier re-derivation.
+ *
+ * The directory builds + signs the seal legibility, including each party's
+ * `content_frontier_seq` ("the highest message the party provably received"). The client
+ * must NOT trust that published value: a buggy or malicious directory could inflate it.
+ * The client independently re-derives each party's frontier from the SIGNED leaves the
+ * directory ships on the session_sealed frame, and rejects the certificate
+ * (`certificate_frontier_unverifiable`) if any published frontier EXCEEDS what the signed
+ * leaves support.
+ *
+ * Why signature-verification alone is sufficient to catch inflation: the directory cannot
+ * forge a leaf signed by a participant (it holds no participant key), so it can only ship
+ * REAL signed leaves. The maximum real signed last_seen_seq for a party IS that party's
+ * honest frontier — there is no way to fabricate a higher one. (A malicious directory could
+ * OMIT leaves, lowering the re-derived value and DoS-ing its own seal, but that is a refusal
+ * to seal, not an inflation attack — and Merkle-binding the shipped leaves to the sealed_root
+ * is a further hardening tracked separately.)
+ *
+ * Mirrors the directory's buildSealLegibility frontier derivation
+ * (trustless-cello/packages/directory/src/seal-legibility.ts): max signed last_seen_seq
+ * (Structure 1 index 4) per sender, over that sender's OWN signed leaves.
+ */
+export interface SealFrontierLeaf {
+    structure1_cbor: Uint8Array;
+    sender_pubkey: Uint8Array;
+    sender_signature: Uint8Array;
+}
+export type ReDeriveResult = {
+    ok: true;
+    frontiers: Map<string, number>;
+} | {
+    ok: false;
+    reason: "leaf_signature_invalid" | "leaf_malformed" | "leaf_session_mismatch";
+};
+/**
+ * Re-derive each party's content_frontier_seq from the signed leaves. Verifies every leaf's
+ * Ed25519 signature over its Structure 1 bytes AND that the leaf's SIGNED session_id matches
+ * the session being sealed — otherwise a malicious directory could replay a party's genuinely
+ * signed leaves from a DIFFERENT session (where it reached a higher frontier) to inflate this
+ * session's frontier. An unverifiable or wrong-session leaf fails the whole re-derivation.
+ * Returns a map of lowercase-hex sender pubkey → max signed last_seen_seq.
+ */
+export declare function reDeriveFrontiers(leaves: SealFrontierLeaf[], expectedSessionId: Uint8Array): ReDeriveResult;
+/**
+ * Compare each published per-party content_frontier_seq against the re-derived value. Returns
+ * the first party whose PUBLISHED frontier exceeds what its signed leaves support (inflation —
+ * the certificate_frontier_unverifiable case), or null when every published frontier is honest.
+ */
+export declare function findInflatedFrontier(participants: ReadonlyArray<{
+    pubkey: string;
+    content_frontier_seq: number;
+}>, derived: Map<string, number>): {
+    party: string;
+    publishedFrontier: number;
+    derivedFrontier: number;
+} | null;
+export interface UnilateralFrontierParticipant {
+    pubkey: string;
+    content_frontier_seq: number;
+    attestation_mode: string;
+}
+export interface UnilateralFrontierCheck {
+    /**
+     *  - verified:           leaves present, no CLIENT-VERIFIABLE ('live') frontier exceeded its leaves.
+     *  - corrected:          leaves present, one or more 'live' frontiers were inflated and overridden
+     *                        DOWN to the re-derived value (see `corrections`).
+     *  - directory_attested: no frontier_leaves shipped (an older directory) — the cert stays
+     *                        directory-attested. No correction possible.
+     *  - leaves_invalid:     frontier_leaves are forged / cross-session (reDeriveFrontiers failed) — a
+     *                        tamper signal; persist the directory-attested frontiers, log loudly. NEVER
+     *                        rejected: the unilateral dedup guard makes rejection an unrecoverable
+     *                        dead-end.
+     */
+    status: "verified" | "corrected" | "directory_attested" | "leaves_invalid";
+    /** lowercased pubkey → corrected content_frontier_seq, for inflated 'live' parties. The caller
+     *  lowers the persisted frontier to this before recording the receipt. Empty unless status is 'corrected'. */
+    corrections: Map<string, number>;
+    reason?: string;
+}
+/**
+ * The present party independently re-verifies (and CORRECTS) the UNILATERAL receipt's frontiers.
+ * OVERRIDE, never reject.
+ *
+ * The unilateral legibility is FROST-notarized by the directory but the frontier VALUES are NOT bound
+ * into the seal signature (unlike the bilateral seal, whose signer binds the legibility hash), so the
+ * client must not trust them blindly. Because the directory-side dedup guard makes a client REJECTION
+ * of a unilateral cert unrecoverable (a retry close is silently ignored — no receipt is ever
+ * produced), the client CORRECTS rather than rejects:
+ *   - CLIENT-VERIFIABLE ('live') party: the present (submitting) party carries all its own signed
+ *     leaves, so its content_frontier_seq is fully re-derivable. The directory cannot forge signed
+ *     leaves, so the re-derived value is the provable truth → an inflated published value is OVERRIDDEN
+ *     DOWN to it (inflation neutralized, receipt still persisted).
+ *   - DIRECTORY-ATTESTED ('absent' / anything not 'live') party: its received-frontier remainder
+ *     (acks of the present party's content) lives with the absent party and was never provided, so a
+ *     published value ABOVE what the present party can derive is not provably inflation — left
+ *     untouched, directory-attested (already marked per-participant).
+ *
+ * The caller applies `corrections` to the persisted legibility and logs per `status`; it ALWAYS
+ * persists a receipt (never dead-ends the close).
+ */
+export declare function checkUnilateralFrontier(participants: ReadonlyArray<UnilateralFrontierParticipant>, frontierLeaves: SealFrontierLeaf[] | undefined, sessionId: Uint8Array): UnilateralFrontierCheck;
+//# sourceMappingURL=seal-frontier-verify.d.ts.map

package/dist/seal-frontier-verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal-frontier-verify.d.ts","sourceRoot":"","sources":["../src/seal-frontier-verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAKH,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,UAAU,CAAC;IAC5B,aAAa,EAAE,UAAU,CAAC;IAC1B,gBAAgB,EAAE,UAAU,CAAC;CAC9B;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAC5C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,wBAAwB,GAAG,gBAAgB,GAAG,uBAAuB,CAAA;CAAE,CAAC;AAQjG;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,EAAE,EAAE,iBAAiB,EAAE,UAAU,GAAG,cAAc,CAmC3G;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,aAAa,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,MAAM,CAAA;CAAE,CAAC,EAC7E,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC3B;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAQ9E;AAID,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;;;;;;;OAUG;IACH,MAAM,EAAE,UAAU,GAAG,WAAW,GAAG,oBAAoB,GAAG,gBAAgB,CAAC;IAC3E;kHAC8G;IAC9G,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,aAAa,CAAC,6BAA6B,CAAC,EAC1D,cAAc,EAAE,gBAAgB,EAAE,GAAG,SAAS,EAC9C,SAAS,EAAE,UAAU,GACpB,uBAAuB,CAwBzB"}

package/dist/seal-frontier-verify.js

@@ -0,0 +1,143 @@
+/**
+ * Client-side content-frontier re-derivation.
+ *
+ * The directory builds + signs the seal legibility, including each party's
+ * `content_frontier_seq` ("the highest message the party provably received"). The client
+ * must NOT trust that published value: a buggy or malicious directory could inflate it.
+ * The client independently re-derives each party's frontier from the SIGNED leaves the
+ * directory ships on the session_sealed frame, and rejects the certificate
+ * (`certificate_frontier_unverifiable`) if any published frontier EXCEEDS what the signed
+ * leaves support.
+ *
+ * Why signature-verification alone is sufficient to catch inflation: the directory cannot
+ * forge a leaf signed by a participant (it holds no participant key), so it can only ship
+ * REAL signed leaves. The maximum real signed last_seen_seq for a party IS that party's
+ * honest frontier — there is no way to fabricate a higher one. (A malicious directory could
+ * OMIT leaves, lowering the re-derived value and DoS-ing its own seal, but that is a refusal
+ * to seal, not an inflation attack — and Merkle-binding the shipped leaves to the sealed_root
+ * is a further hardening tracked separately.)
+ *
+ * Mirrors the directory's buildSealLegibility frontier derivation
+ * (trustless-cello/packages/directory/src/seal-legibility.ts): max signed last_seen_seq
+ * (Structure 1 index 4) per sender, over that sender's OWN signed leaves.
+ */
+import { verify } from "@cello-protocol/crypto";
+import { decodeStructure1 } from "@cello-protocol/protocol-types";
+function bytesEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    for (let i = 0; i < a.length; i++)
+        if (a[i] !== b[i])
+            return false;
+    return true;
+}
+/**
+ * Re-derive each party's content_frontier_seq from the signed leaves. Verifies every leaf's
+ * Ed25519 signature over its Structure 1 bytes AND that the leaf's SIGNED session_id matches
+ * the session being sealed — otherwise a malicious directory could replay a party's genuinely
+ * signed leaves from a DIFFERENT session (where it reached a higher frontier) to inflate this
+ * session's frontier. An unverifiable or wrong-session leaf fails the whole re-derivation.
+ * Returns a map of lowercase-hex sender pubkey → max signed last_seen_seq.
+ */
+export function reDeriveFrontiers(leaves, expectedSessionId) {
+    const frontiers = new Map();
+    for (const leaf of leaves) {
+        if (!verify(leaf.sender_pubkey, leaf.structure1_cbor, leaf.sender_signature)) {
+            return { ok: false, reason: "leaf_signature_invalid" };
+        }
+        // Structure 1 = [version, content_hash(32), sender_pubkey(32), session_id(16), last_seen_seq,
+        // ts], plus last_seen_hash(32) at index 6 on a v2 claim (020-ACKHASH). session_id is index 3 and
+        // last_seen_seq index 4 in both — the field was appended, so neither read moved.
+        //
+        // The length check was `< 5`, which admitted an array of any length ≥ 5 and lifted a frontier
+        // number out of it. An unnamed layout is now `leaf_malformed`, the same outcome as undecodable
+        // bytes: a shape this build cannot name must not contribute to a frontier it cannot interpret.
+        //
+        // TWO NARROWINGS CAME WITH THAT, both recorded because they are changes and not merely a
+        // tightening of the length rule (review F7):
+        //   - a non-numeric `last_seen_seq` used to `continue` (skip this leaf, keep verifying the rest)
+        //     and is now `leaf_malformed`, failing the whole re-derivation;
+        //   - a `bigint` `last_seen_seq` used to be coerced with `Number(raw)` and is now refused.
+        // Both are unreachable in practice — the relay refuses `typeof last_seen_seq !== "number"` at
+        // ingest, so no leaf that reaches a seal can carry either shape — and both move in the
+        // fail-closed direction. A frontier is a published claim about how far a party countersigned;
+        // deriving one from a leaf we could not fully read is the thing worth refusing.
+        const s1 = decodeStructure1(leaf.structure1_cbor);
+        if (!s1.ok)
+            return { ok: false, reason: "leaf_malformed" };
+        if (!bytesEqual(s1.fields.sessionId, expectedSessionId)) {
+            return { ok: false, reason: "leaf_session_mismatch" };
+        }
+        const lss = s1.fields.lastSeenSeq;
+        if (!Number.isFinite(lss))
+            continue; // leaf carries no usable signed last_seen
+        const senderHex = Buffer.from(leaf.sender_pubkey).toString("hex").toLowerCase();
+        const cur = frontiers.get(senderHex) ?? 0;
+        if (lss > cur)
+            frontiers.set(senderHex, lss);
+    }
+    return { ok: true, frontiers };
+}
+/**
+ * Compare each published per-party content_frontier_seq against the re-derived value. Returns
+ * the first party whose PUBLISHED frontier exceeds what its signed leaves support (inflation —
+ * the certificate_frontier_unverifiable case), or null when every published frontier is honest.
+ */
+export function findInflatedFrontier(participants, derived) {
+    for (const p of participants) {
+        const d = derived.get(p.pubkey.toLowerCase()) ?? 0;
+        if (p.content_frontier_seq > d) {
+            return { party: p.pubkey, publishedFrontier: p.content_frontier_seq, derivedFrontier: d };
+        }
+    }
+    return null;
+}
+/**
+ * The present party independently re-verifies (and CORRECTS) the UNILATERAL receipt's frontiers.
+ * OVERRIDE, never reject.
+ *
+ * The unilateral legibility is FROST-notarized by the directory but the frontier VALUES are NOT bound
+ * into the seal signature (unlike the bilateral seal, whose signer binds the legibility hash), so the
+ * client must not trust them blindly. Because the directory-side dedup guard makes a client REJECTION
+ * of a unilateral cert unrecoverable (a retry close is silently ignored — no receipt is ever
+ * produced), the client CORRECTS rather than rejects:
+ *   - CLIENT-VERIFIABLE ('live') party: the present (submitting) party carries all its own signed
+ *     leaves, so its content_frontier_seq is fully re-derivable. The directory cannot forge signed
+ *     leaves, so the re-derived value is the provable truth → an inflated published value is OVERRIDDEN
+ *     DOWN to it (inflation neutralized, receipt still persisted).
+ *   - DIRECTORY-ATTESTED ('absent' / anything not 'live') party: its received-frontier remainder
+ *     (acks of the present party's content) lives with the absent party and was never provided, so a
+ *     published value ABOVE what the present party can derive is not provably inflation — left
+ *     untouched, directory-attested (already marked per-participant).
+ *
+ * The caller applies `corrections` to the persisted legibility and logs per `status`; it ALWAYS
+ * persists a receipt (never dead-ends the close).
+ */
+export function checkUnilateralFrontier(participants, frontierLeaves, sessionId) {
+    const corrections = new Map();
+    const haveLeaves = Array.isArray(frontierLeaves) && frontierLeaves.length > 0;
+    // A directory that ships no leaves leaves the cert directory-attested. Never reject — rejecting
+    // would break unilateral seals against a not-yet-upgraded directory during rollout.
+    if (!haveLeaves)
+        return { status: "directory_attested", corrections };
+    const rederived = reDeriveFrontiers(frontierLeaves, sessionId);
+    // Forged / cross-session leaves are the STRONGEST tamper evidence, so they get the strongest
+    // correction: treat them as ZERO trustworthy evidence (an empty derived map), which drives any
+    // 'live' frontier > 0 down to 0. Do NOT leave the published value untouched on invalid leaves —
+    // that would make malformed leaves an EASIER inflation bypass than shipping none. Still never
+    // REJECT (the directory dedup guard makes rejection an unrecoverable dead-end); the caller logs.
+    const derived = rederived.ok ? rederived.frontiers : new Map();
+    // Only CLIENT-VERIFIABLE ('live') parties are re-derivable; override any value above the provable
+    // one DOWN to it. The absent party is directory-attested (its remainder is not re-derivable here).
+    for (const p of participants) {
+        if (p.attestation_mode !== "live")
+            continue;
+        const d = derived.get(p.pubkey.toLowerCase()) ?? 0;
+        if (p.content_frontier_seq > d)
+            corrections.set(p.pubkey.toLowerCase(), d);
+    }
+    if (!rederived.ok)
+        return { status: "leaves_invalid", corrections, reason: rederived.reason };
+    return { status: corrections.size > 0 ? "corrected" : "verified", corrections };
+}
+//# sourceMappingURL=seal-frontier-verify.js.map

package/dist/seal-frontier-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal-frontier-verify.js","sourceRoot":"","sources":["../src/seal-frontier-verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAYlE,SAAS,UAAU,CAAC,CAAa,EAAE,CAAa;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA0B,EAAE,iBAA6B;IACzF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC7E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QACzD,CAAC;QACD,8FAA8F;QAC9F,iGAAiG;QACjG,iFAAiF;QACjF,EAAE;QACF,8FAA8F;QAC9F,+FAA+F;QAC/F,+FAA+F;QAC/F,EAAE;QACF,yFAAyF;QACzF,6CAA6C;QAC7C,iGAAiG;QACjG,oEAAoE;QACpE,2FAA2F;QAC3F,8FAA8F;QAC9F,uFAAuF;QACvF,8FAA8F;QAC9F,gFAAgF;QAChF,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAClD,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAC3D,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,CAAC;YACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QACxD,CAAC;QACD,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,0CAA0C;QAC/E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAChF,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,GAAG,GAAG,GAAG;YAAE,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAA6E,EAC7E,OAA4B;IAE5B,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,oBAAoB,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC,oBAAoB,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;QAC5F,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AA6BD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,uBAAuB,CACrC,YAA0D,EAC1D,cAA8C,EAC9C,SAAqB;IAErB,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9E,gGAAgG;IAChG,oFAAoF;IACpF,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,WAAW,EAAE,CAAC;IAEtE,MAAM,SAAS,GAAG,iBAAiB,CAAC,cAAoC,EAAE,SAAS,CAAC,CAAC;IACrF,6FAA6F;IAC7F,+FAA+F;IAC/F,gGAAgG;IAChG,8FAA8F;IAC9F,iGAAiG;IACjG,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,EAAkB,CAAC;IAE/E,kGAAkG;IAClG,mGAAmG;IACnG,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,gBAAgB,KAAK,MAAM;YAAE,SAAS;QAC5C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,oBAAoB,GAAG,CAAC;YAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;IAC9F,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC;AAClF,CAAC"}

package/dist/seal-leaf.d.ts

@@ -0,0 +1,58 @@
+import type { SealInterruptedLeaf } from "@cello-protocol/protocol-types";
+import type { KeyProvider } from "@cello-protocol/crypto";
+export type SealLeafVerifyReason = "nonce_mismatch" | "leaf_count_mismatch" | "leaf_signature_invalid";
+/**
+ * M7-SESSION-001 (H-1): canonical byte encoding of a SEAL-INTERRUPTED leaf for
+ * Ed25519 signing/verification. Field order is fixed and deterministic. Both the
+ * initiator and the responder, and the verifier, MUST use exactly this encoding —
+ * any drift causes silent signature-verification failure.
+ */
+export declare function canonicalSealInterruptedLeafBytes(leaf: {
+    type: string;
+    sessionId: string;
+    leafCount: number;
+    merkleRootAtInterruption: string;
+    timestamp: number;
+    signerPubkey: string;
+}): Uint8Array;
+/**
+ * M7-SESSION-001 (H-1): construct and K_local-sign a SEAL-INTERRUPTED leaf.
+ * The private key never leaves keyProvider — only the Ed25519 signature is returned.
+ */
+export declare function buildSignedSealInterruptedLeaf(keyProvider: KeyProvider, opts: {
+    sessionId: string;
+    leafCount: number;
+    merkleRootAtInterruption: string;
+    signerPubkeyHex: string;
+}): Promise<SealInterruptedLeaf>;
+/**
+ * M7-SESSION-001 / DAEMON-004: verify a counterparty's SEAL-INTERRUPTED ack leaf.
+ *
+ * Shared by BOTH the interrupted-seal flow (SESSION-001) and the active-session
+ * seal flow (DAEMON-004 finding #1) so the two paths perform an identical
+ * bilateral check. Returns a generic reason; each caller maps it to its own
+ * reason codes / observability events / guidance.
+ *
+ * Checks, in order:
+ *   1. L-2: the ack echoes the exact nonce we sent (replay / stale-response guard).
+ *   2. leafCount agreement: the counterparty's leafCount equals our own — an
+ *      independent value, so a genuine divergence in transcript length is caught.
+ *   3. SI-002 / SI-003: the leaf carries a valid Ed25519 signature produced by the
+ *      counterparty's OWN key (signerPubkey must equal the expected counterparty).
+ *
+ * Crypto: Ed25519 RFC 8032.
+ */
+export declare function verifyCounterpartySealLeaf(opts: {
+    leaf: Record<string, unknown>;
+    sentNonce: string;
+    ackNonce: string | null;
+    ownLeafCount: number;
+    expectedCounterpartyPubkey: string;
+}): {
+    ok: true;
+} | {
+    ok: false;
+    reason: SealLeafVerifyReason;
+    error: string;
+};
+//# sourceMappingURL=seal-leaf.d.ts.map

package/dist/seal-leaf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal-leaf.d.ts","sourceRoot":"","sources":["../src/seal-leaf.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAE1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAG1D,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,GAAG,qBAAqB,GAAG,wBAAwB,CAAC;AAEvG;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAAC,IAAI,EAAE;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB,EAAE,MAAM,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,UAAU,CAWb;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAClD,WAAW,EAAE,WAAW,EACxB,IAAI,EAAE;IACJ,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB,EAAE,MAAM,CAAC;IACjC,eAAe,EAAE,MAAM,CAAC;CACzB,GACA,OAAO,CAAC,mBAAmB,CAAC,CAW9B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,0BAA0B,EAAE,MAAM,CAAC;CACpC,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAoD5E"}

package/dist/seal-leaf.js

@@ -0,0 +1,112 @@
+/**
+ * The SEAL-INTERRUPTED leaf: canonical bytes, K_local signing, and counterparty verification.
+ *
+ * The canonical encoding is the load-bearing part. Field order is fixed and deterministic, and the
+ * initiator, the responder and the verifier MUST all use exactly this encoding — any drift causes a
+ * SILENT signature-verification failure, which is the worst kind. That is why these three live
+ * together in one file: they are one agreement about bytes, and splitting them is how they drift.
+ *
+ * The private key never leaves the KeyProvider. Only the Ed25519 signature comes back.
+ */
+import { Buffer } from "node:buffer";
+import { verify as ed25519Verify } from "@cello-protocol/crypto";
+import { extractErrorMessage } from "./error-message.js";
+/**
+ * M7-SESSION-001 (H-1): canonical byte encoding of a SEAL-INTERRUPTED leaf for
+ * Ed25519 signing/verification. Field order is fixed and deterministic. Both the
+ * initiator and the responder, and the verifier, MUST use exactly this encoding —
+ * any drift causes silent signature-verification failure.
+ */
+export function canonicalSealInterruptedLeafBytes(leaf) {
+    return new TextEncoder().encode(JSON.stringify({
+        type: leaf.type,
+        sessionId: leaf.sessionId,
+        leafCount: leaf.leafCount,
+        merkleRootAtInterruption: leaf.merkleRootAtInterruption,
+        timestamp: leaf.timestamp,
+        signerPubkey: leaf.signerPubkey,
+    }));
+}
+/**
+ * M7-SESSION-001 (H-1): construct and K_local-sign a SEAL-INTERRUPTED leaf.
+ * The private key never leaves keyProvider — only the Ed25519 signature is returned.
+ */
+export async function buildSignedSealInterruptedLeaf(keyProvider, opts) {
+    const partial = {
+        type: "SEAL_INTERRUPTED",
+        sessionId: opts.sessionId,
+        leafCount: opts.leafCount,
+        merkleRootAtInterruption: opts.merkleRootAtInterruption,
+        timestamp: Date.now(),
+        signerPubkey: opts.signerPubkeyHex,
+    };
+    const sig = await keyProvider.sign(canonicalSealInterruptedLeafBytes(partial));
+    return { ...partial, signature: Buffer.from(sig).toString("hex") };
+}
+/**
+ * M7-SESSION-001 / DAEMON-004: verify a counterparty's SEAL-INTERRUPTED ack leaf.
+ *
+ * Shared by BOTH the interrupted-seal flow (SESSION-001) and the active-session
+ * seal flow (DAEMON-004 finding #1) so the two paths perform an identical
+ * bilateral check. Returns a generic reason; each caller maps it to its own
+ * reason codes / observability events / guidance.
+ *
+ * Checks, in order:
+ *   1. L-2: the ack echoes the exact nonce we sent (replay / stale-response guard).
+ *   2. leafCount agreement: the counterparty's leafCount equals our own — an
+ *      independent value, so a genuine divergence in transcript length is caught.
+ *   3. SI-002 / SI-003: the leaf carries a valid Ed25519 signature produced by the
+ *      counterparty's OWN key (signerPubkey must equal the expected counterparty).
+ *
+ * Crypto: Ed25519 RFC 8032.
+ */
+export function verifyCounterpartySealLeaf(opts) {
+    const { leaf, sentNonce, ackNonce, ownLeafCount, expectedCounterpartyPubkey } = opts;
+    // 1. L-2: the counterparty MUST echo the exact nonce we sent.
+    if (ackNonce !== sentNonce) {
+        return { ok: false, reason: "nonce_mismatch", error: "ack nonce did not match the request nonce" };
+    }
+    // 2. leafCount agreement against our own independent count.
+    const cpLeafCount = typeof leaf["leafCount"] === "number" ? leaf["leafCount"] : null;
+    if (cpLeafCount !== ownLeafCount) {
+        return {
+            ok: false,
+            reason: "leaf_count_mismatch",
+            error: `counterparty leafCount ${String(cpLeafCount)} != own leafCount ${ownLeafCount}`,
+        };
+    }
+    // 3. SI-002/SI-003: verify the counterparty's Ed25519 signature on its OWN leaf.
+    try {
+        const signerPubkeyHex = typeof leaf["signerPubkey"] === "string" ? leaf["signerPubkey"] : null;
+        const signatureHex = typeof leaf["signature"] === "string" ? leaf["signature"] : null;
+        if (!signerPubkeyHex || !signatureHex) {
+            throw new Error("leaf missing signerPubkey or signature");
+        }
+        if (signerPubkeyHex !== expectedCounterpartyPubkey) {
+            throw new Error(`leaf signerPubkey ${signerPubkeyHex.slice(0, 16)} does not match counterparty ${expectedCounterpartyPubkey.slice(0, 16)}`);
+        }
+        const canonicalLeaf = {
+            type: leaf["type"],
+            sessionId: leaf["sessionId"],
+            leafCount: leaf["leafCount"],
+            merkleRootAtInterruption: leaf["merkleRootAtInterruption"],
+            timestamp: leaf["timestamp"],
+            signerPubkey: leaf["signerPubkey"],
+        };
+        const leafBytes = new TextEncoder().encode(JSON.stringify(canonicalLeaf));
+        const pubkeyBytes = new Uint8Array(Buffer.from(signerPubkeyHex, "hex"));
+        const sigBytes = new Uint8Array(Buffer.from(signatureHex, "hex"));
+        if (!ed25519Verify(pubkeyBytes, leafBytes, sigBytes)) {
+            return { ok: false, reason: "leaf_signature_invalid", error: "Ed25519 signature verification failed on SEAL-INTERRUPTED leaf" };
+        }
+        return { ok: true };
+    }
+    catch (verifyErr) {
+        return {
+            ok: false,
+            reason: "leaf_signature_invalid",
+            error: extractErrorMessage(verifyErr),
+        };
+    }
+}
+//# sourceMappingURL=seal-leaf.js.map

package/dist/seal-leaf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal-leaf.js","sourceRoot":"","sources":["../src/seal-leaf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAIzD;;;;;GAKG;AACH,MAAM,UAAU,iCAAiC,CAAC,IAOjD;IACC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAC7B,IAAI,CAAC,SAAS,CAAC;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;QACvD,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY,EAAE,IAAI,CAAC,YAAY;KAChC,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,WAAwB,EACxB,IAKC;IAED,MAAM,OAAO,GAAG;QACd,IAAI,EAAE,kBAA2B;QACjC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;QACvD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,YAAY,EAAE,IAAI,CAAC,eAAe;KACnC,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,iCAAiC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/E,OAAO,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACrE,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAM1C;IACC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,0BAA0B,EAAE,GAAG,IAAI,CAAC;IAErF,8DAA8D;IAC9D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC;IACrG,CAAC;IAED,4DAA4D;IAC5D,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,WAAW,CAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IACjG,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,qBAAqB;YAC7B,KAAK,EAAE,0BAA0B,MAAM,CAAC,WAAW,CAAC,qBAAqB,YAAY,EAAE;SACxF,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,cAAc,CAAY,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3G,MAAM,YAAY,GAAG,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,WAAW,CAAY,CAAC,CAAC,CAAC,IAAI,CAAC;QAClG,IAAI,CAAC,eAAe,IAAI,CAAC,YAAY,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,eAAe,KAAK,0BAA0B,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,qBAAqB,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,gCAAgC,0BAA0B,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAC3H,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG;YACpB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;YAClB,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC;YAC5B,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC;YAC5B,wBAAwB,EAAE,IAAI,CAAC,0BAA0B,CAAC;YAC1D,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC;YAC5B,YAAY,EAAE,IAAI,CAAC,cAAc,CAAC;SACnC,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC;QAC1E,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,KAAK,EAAE,gEAAgE,EAAE,CAAC;QAClI,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,SAAkB,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,wBAAwB;YAChC,KAAK,EAAE,mBAAmB,CAAC,SAAS,CAAC;SACtC,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/seal-legibility-tbs.d.ts

@@ -0,0 +1,25 @@
+/** The legibility shape this hash reads — pubkeys may be Uint8Array or Buffer (CBOR-decoded). */
+export interface LegibilityForHash {
+    participants: Array<{
+        pubkey: unknown;
+        content_frontier_seq: unknown;
+        last_authored_seq: unknown;
+        attestation_mode: unknown;
+    }>;
+    final_message: {
+        sender_pubkey: unknown;
+        seq: unknown;
+        answered: unknown;
+    };
+}
+export declare function canonicalLegibilityBytes(legibility: LegibilityForHash): Buffer;
+/** SHA-256 of the canonical legibility bytes (32 bytes). */
+export declare function canonicalLegibilityHash(legibility: LegibilityForHash): Uint8Array;
+/**
+ * Build the seal TBS bytes WITH the legibility binding: the plain seal TBS concatenated with
+ * the 32-byte legibility hash. When `legibility` is absent (the unilateral seal carries none),
+ * returns the plain TBS unchanged — so the unilateral path keeps signing/verifying the plain TBS
+ * and only the bilateral path (which always carries legibility) is bound.
+ */
+export declare function bindLegibilityToTbs(tbs: Uint8Array, legibility: LegibilityForHash | null | undefined): Uint8Array;
+//# sourceMappingURL=seal-legibility-tbs.d.ts.map

package/dist/seal-legibility-tbs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal-legibility-tbs.d.ts","sourceRoot":"","sources":["../src/seal-legibility-tbs.ts"],"names":[],"mappings":"AAsBA,iGAAiG;AACjG,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,KAAK,CAAC;QAClB,MAAM,EAAE,OAAO,CAAC;QAChB,oBAAoB,EAAE,OAAO,CAAC;QAC9B,iBAAiB,EAAE,OAAO,CAAC;QAC3B,gBAAgB,EAAE,OAAO,CAAC;KAC3B,CAAC,CAAC;IACH,aAAa,EAAE;QACb,aAAa,EAAE,OAAO,CAAC;QACvB,GAAG,EAAE,OAAO,CAAC;QACb,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC;CACH;AA0BD,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,iBAAiB,GAAG,MAAM,CAY9E;AAED,4DAA4D;AAC5D,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,iBAAiB,GAAG,UAAU,CAEjF;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,iBAAiB,GAAG,IAAI,GAAG,SAAS,GAAG,UAAU,CAOjH"}

package/dist/seal-legibility-tbs.js

@@ -0,0 +1,77 @@
+/**
+ * CELLO-M7 — canonical hash of the seal-certificate legibility object, for binding it into
+ * the FROST-signed seal TBS (tamper-evidence). MUST stay byte-for-byte identical to the
+ * directory's copy (`trustless-cello/packages/directory/src/seal-legibility.ts`
+ * canonicalLegibilityHash) — the live bilateral seal SELF-CHECKS agreement: directory and
+ * daemon each fold this hash into the signed TBS, and the seal verifies only if they match.
+ *
+ * Design: an EXPLICIT, fixed byte layout (NOT canonical CBOR) so there is zero dependence on
+ * a CBOR library's determinism. Only the TAMPERABLE facts are bound — the per-party frontiers
+ * + attestation_mode and the final_message. The constants (attests / disclaimer) are NOT bound:
+ * the daemon re-asserts attests as a literal, and the disclaimer is informational.
+ *
+ * Hash = SHA-256( domain || u32(participantCount) ||
+ *   for each participant (in array order): pubkey[32] || u32(content_frontier_seq) ||
+ *     u32(last_authored_seq) || modeByte ||
+ *   final_message.sender_pubkey[32] || u32(seq) || answeredByte )
+ *
+ * Participants are hashed in array order, so a MITM that REORDERS the participants array also
+ * changes the hash → the seal signature fails. Crypto ref: SHA-256 FIPS 180-4.
+ */
+import { createHash } from "node:crypto";
+const DOMAIN = Buffer.from("CELLO-SEAL-LEGIBILITY-v1", "utf8");
+/** Coerce any byte-ish value to a 32-byte Buffer (zero-padded/truncated). Both sides do this. */
+function pubkey32(v) {
+    const out = Buffer.alloc(32);
+    if (v instanceof Uint8Array)
+        Buffer.from(v).copy(out, 0, 0, 32);
+    else if (Buffer.isBuffer(v))
+        v.copy(out, 0, 0, 32);
+    else if (typeof v === "string" && /^[0-9a-fA-F]{64}$/.test(v))
+        Buffer.from(v, "hex").copy(out, 0, 0, 32);
+    return out;
+}
+/** Coerce to uint32 the SAME way on both sides (handles bigint/number; >>>0 normalises). */
+function u32(v) {
+    const n = typeof v === "bigint" ? Number(v) : typeof v === "number" ? v : 0;
+    const out = Buffer.alloc(4);
+    out.writeUInt32BE((n >>> 0), 0);
+    return out;
+}
+function modeByte(v) {
+    const b = v === "live" ? 1 : v === "recovered" ? 2 : v === "absent" ? 3 : 0;
+    return Buffer.from([b]);
+}
+export function canonicalLegibilityBytes(legibility) {
+    const parts = [DOMAIN];
+    const participants = Array.isArray(legibility.participants) ? legibility.participants : [];
+    const count = Buffer.alloc(4);
+    count.writeUInt32BE(participants.length >>> 0, 0);
+    parts.push(count);
+    for (const p of participants) {
+        parts.push(pubkey32(p.pubkey), u32(p.content_frontier_seq), u32(p.last_authored_seq), modeByte(p.attestation_mode));
+    }
+    const fm = legibility.final_message ?? { sender_pubkey: undefined, seq: 0, answered: false };
+    parts.push(pubkey32(fm.sender_pubkey), u32(fm.seq), Buffer.from([fm.answered === true ? 1 : 0]));
+    return Buffer.concat(parts);
+}
+/** SHA-256 of the canonical legibility bytes (32 bytes). */
+export function canonicalLegibilityHash(legibility) {
+    return new Uint8Array(createHash("sha256").update(canonicalLegibilityBytes(legibility)).digest());
+}
+/**
+ * Build the seal TBS bytes WITH the legibility binding: the plain seal TBS concatenated with
+ * the 32-byte legibility hash. When `legibility` is absent (the unilateral seal carries none),
+ * returns the plain TBS unchanged — so the unilateral path keeps signing/verifying the plain TBS
+ * and only the bilateral path (which always carries legibility) is bound.
+ */
+export function bindLegibilityToTbs(tbs, legibility) {
+    if (!legibility)
+        return tbs;
+    const h = canonicalLegibilityHash(legibility);
+    const out = new Uint8Array(tbs.length + h.length);
+    out.set(tbs, 0);
+    out.set(h, tbs.length);
+    return out;
+}
+//# sourceMappingURL=seal-legibility-tbs.js.map

package/dist/seal-legibility-tbs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal-legibility-tbs.js","sourceRoot":"","sources":["../src/seal-legibility-tbs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAiBzC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAC;AAE/D,iGAAiG;AACjG,SAAS,QAAQ,CAAC,CAAU;IAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,YAAY,UAAU;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;SAC3D,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAG,CAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;SAC1D,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACzG,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4FAA4F;AAC5F,SAAS,GAAG,CAAC,CAAU;IACrB,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,UAA6B;IACpE,MAAM,KAAK,GAAa,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,oBAAoB,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACtH,CAAC;IACD,MAAM,EAAE,GAAG,UAAU,CAAC,aAAa,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7F,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,uBAAuB,CAAC,UAA6B;IACnE,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACpG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAe,EAAE,UAAgD;IACnG,IAAI,CAAC,UAAU;QAAE,OAAO,GAAG,CAAC;IAC5B,MAAM,CAAC,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAClD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAChB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACvB,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/seal-local-terminus.d.ts

@@ -0,0 +1,41 @@
+import type { SealCarryLeaf } from "./session-seal-leaf-store.js";
+export interface LocalSealTerminusInput {
+    /** The relay's ordered log as this side holds it, ascending. Both parties' leaves. */
+    carry: readonly SealCarryLeaf[];
+    /** This agent's K_local pubkey, hex — who the terminus is authored by. */
+    ownPubkeyHex: string;
+    /** The same key as bytes, for the Structure 1 claim. */
+    ownPubkey: Uint8Array;
+    /** The RELAY session id the carried leaves are recorded under. */
+    sessionIdBytes: Uint8Array;
+    /** The session's agreed starting point — what both links fall back to before anyone has spoken. */
+    genesis: Uint8Array;
+    /** The content-only root this side signs, hex. */
+    finalRootHex: string;
+    closeTimestamp: number;
+    sign: (bytes: Uint8Array) => Promise<Uint8Array>;
+}
+export type LocalSealTerminusResult = {
+    ok: true;
+    leaf: SealCarryLeaf;
+    payload: Uint8Array;
+    contentHashHex: string;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Refusals, and each one is a case where writing a leaf anyway would make things worse:
+ *
+ *   `seal_carry_empty`          nothing was ever witnessed, so there is no record to close.
+ *   `seal_carry_noncontiguous`  a witnessed leaf never reached us; a terminus over a record with a
+ *                               hole in it would be signing a history we know is not the history.
+ *   `seal_carry_own_ctrl_present` we already closed. A SECOND control leaf from one party makes the
+ *                               session unsealable by any directory, permanently — the caller must
+ *                               reuse the one that is there, never add to it.
+ *   `seal_carry_unreadable`     a leaf this daemon cannot decode is one it cannot chain onto.
+ *   `seal_carry_leaf_kind_unknown` a leaf kind this build cannot name has no domain to hash in, and
+ *                               a guessed one yields a root nobody else computes.
+ */
+export declare function buildLocalSealTerminus(input: LocalSealTerminusInput): Promise<LocalSealTerminusResult>;
+//# sourceMappingURL=seal-local-terminus.d.ts.map