@cello-protocol/daemon 0.0.227 → 0.0.228

package/dist/trust-signal-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-signal-store.js","sourceRoot":"","sources":["../src/trust-signal-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,qBAAqB,EAA4B,MAAM,gCAAgC,CAAC;AAEjG,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAAqB,MAAM,wBAAwB,CAAC;AAE3G,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAczD,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC1B;IAArB,YAAqB,MAA+B,EAAE,MAAc;QAClE,KAAK,CAAC,mBAAmB,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC;QAD3B,WAAM,GAAN,MAAM,CAAyB;QAElD,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAiGD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,gBAAgB,GAAG;;;;;;;;;;;;kCAYS,CAAC;AAEnC;iEACiE;AACjE,MAAM,iBAAiB,GAAG;;MAEpB,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;CAyBrB,CAAC;AAEF,MAAM,mBAAmB,GAAG;;;;MAItB,gBAAgB;;;;;;;;;;;CAWrB,CAAC;AAEF;;;;GAIG;AACH;;;;;;;;;;;;;;GAcG;AACH,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;CAgBzB,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,EAAkB,EAAE,OAAe;IACzE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC3B,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC7B,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC3B,8FAA8F;IAC9F,2EAA2E;IAC3E,EAAE,CAAC,IAAI,CAAC,uGAAuG,CAAC,CAAC;IACjH,kFAAkF;IAClF,IAAI,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAC;IACpG,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;IAC5C,CAAC;IACD,mGAAmG;IACnG,EAAE;IACF,kGAAkG;IAClG,iGAAiG;IACjG,kGAAkG;IAClG,6FAA6F;IAC7F,kFAAkF;IAClF,EAAE;IACF,iGAAiG;IACjG,kGAAkG;IAClG,mDAAmD;IACnD,KAAK,MAAM,KAAK,IAAI,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC;YACH,EAAE,CAAC,IAAI,CAAC,eAAe,KAAK,sDAAsD,CAAC,CAAC;QACtF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2DAA2D;YAC3D,EAAE;YACF,6FAA6F;YAC7F,gGAAgG;YAChG,+FAA+F;YAC/F,uDAAuD;YACvD,EAAE;YACF,+FAA+F;YAC/F,4FAA4F;YAC5F,gGAAgG;YAChG,gGAAgG;YAChG,oFAAoF;YACpF,EAAE;YACF,2FAA2F;YAC3F,4FAA4F;YAC5F,mEAAmE;YACnE,MAAM,IAAI,GAAI,EAAE,CAAC,OAAO,CAAC,qBAAqB,KAAK,GAAG,CAAC,CAAC,GAAG,EAA8B;iBACtF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CACb,kCAAkC,KAAK,sDAAsD;oBAC7F,iDAAiD,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAC5E,CAAC;YACJ,CAAC;YACD,6FAA6F;YAC7F,6FAA6F;YAC7F,yBAAyB;QAC3B,CAAC;IACH,CAAC;IACD,gGAAgG;IAChG,+FAA+F;IAC/F,6FAA6F;IAC7F,6EAA6E;IAC7E,4BAA4B,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,CAAa,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAExD;;;;;;;;;GASG;AACH,MAAM,OAAO,GAAG,CAAC,CAAU,EAAc,EAAE;IACzC,IAAI,CAAC,YAAY,UAAU;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACjD,MAAM,IAAI,KAAK,CACb,yDAAyD,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;QACzF,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,qCAAqC;QACrG,qGAAqG,CACtG,CAAC;AACJ,CAAC,CAAC;AA0BF;;;;;;;;;GASG;AACH,SAAS,qBAAqB,CAAC,KAAyB,EAAE,MAAc;IACtE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,kEAAkE;YACzE,gFAAgF,CACnF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,CAAgB;IACnC,OAAO;QACL,UAAU,EAAE,CAAC,CAAC,WAAW;QACzB,YAAY,EAAG,CAA0C,CAAC,aAA6B;QACvF,YAAY,EAAG,CAA2C,CAAC,aAAa,KAAK,CAAC;QAC9E,WAAW,EAAE,CAAC,CAAC,YAAmC;QAClD,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,UAAU,EAAE,CAAC,CAAC,WAAiC;QAC/C,YAAY,EAAE,CAAC,CAAC,aAAa;QAC7B,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,aAAa,EAAE,CAAC,CAAC,cAAc;QAC/B,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3B,QAAQ,EAAE,CAAC,CAAC,SAAS;QACrB,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,cAAc,EAAE,CAAC,CAAC,eAAe;QACjC,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,UAAU,EAAE,CAAC,CAAC,WAAW;QACzB,sFAAsF;QACtF,cAAc,EAAE,CAAC,CAAC,eAAe,KAAK,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,gBAAgB;IAClB,GAAG,CAAiB;IACpB,OAAO,CAAS;IAEzB;;;;;;OAMG;IACH,YAAY,EAAkB,EAAE,MAAc;QAC5C,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,CAAC;IAED;;;;;;;;OAQG;IACH;6BACyB;IACzB,eAAe,CAAC,CAAoB;QAClC,gFAAgF;QAChF,MAAM,cAAc,GAAG,CAAC,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CACN;;;;iEAIyD,CAC1D;aACA,GAAG,CACF,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,EAC7F,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,EACjF,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtB,2FAA2F;QAC3F,wFAAwF;QACxF,yFAAyF;QACzF,0FAA0F;QAC1F,2FAA2F;QAC3F,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,EACvD,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAChC,CAAC;QACJ,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE;gBACxC,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;aAC7F,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;gBAC7B,2FAA2F;gBAC3F,0EAA0E;gBAC1E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE;oBAC1C,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;iBACrG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;IACzB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,mBAAmB,CAAC,QAA6B,EAAE,WAAmB;QACpE,gGAAgG;QAChG,kGAAkG;QAClG,2FAA2F;QAC3F,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YAClG,MAAM,IAAI,sBAAsB,CAAC,wBAAwB,EAAE,8CAA8C,WAAW,EAAE,CAAC,CAAC;QAC1H,CAAC;QACD,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,+BAA+B,EAAE;gBACjD,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,YAAY;aACrE,CAAC,CAAC;YACH,MAAM,IAAI,sBAAsB,CAAC,eAAe,EAAE,mDAAmD,WAAW,EAAE,CAAC,CAAC;QACtH,CAAC;QACD,MAAM,cAAc,GAAG,QAAQ,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxH,kGAAkG;QAClG,kFAAkF;QAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;YACpC,UAAU,EAAE,WAAW;YACvB,WAAW,EAAE,QAAQ,CAAC,YAAY;YAClC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,UAAU,EAAE,QAAQ,CAAC,WAAW;YAChC,YAAY,EAAE,QAAQ,CAAC,aAAa;YACpC,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,aAAa,EAAE,QAAQ,CAAC,cAAc;YACtC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,QAAQ,EAAE,QAAQ,CAAC,SAAS;YAC5B,SAAS,EAAE,QAAQ,CAAC,UAAU;YAC9B,cAAc;YACd,0FAA0F;YAC1F,gGAAgG;YAChG,2FAA2F;YAC3F,gGAAgG;YAChG,+DAA+D;YAC/D,YAAY,EAAE,QAAQ,CAAC,aAAa;YACpC,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,IAAI,QAAQ,EAAE,CAAC;YACb,iFAAiF;YACjF,EAAE;YACF,+FAA+F;YAC/F,+FAA+F;YAC/F,8FAA8F;YAC9F,6FAA6F;YAC7F,6FAA6F;YAC7F,8EAA8E;YAC9E,EAAE;YACF,yFAAyF;YACzF,0FAA0F;YAC1F,6FAA6F;YAC7F,+FAA+F;YAC/F,+FAA+F;YAC/F,2FAA2F;YAC3F,qBAAqB;YACrB,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,YAAY,KAAK,gBAAgB,CAAC;YACvF,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;YACjE,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,EAAE;oBAC7C,UAAU,EAAE,WAAW;oBACvB,UAAU,EAAE,QAAQ,CAAC,WAAW;oBAChC,MAAM,EAAE,4DAA4D;iBACrE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAED;;;;;;OAMG;IACH,kBAAkB,CAChB,QAA6G,EAC7G,WAAmB,EACnB,cAA6B;QAE7B,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;YACpD,+FAA+F;YAC/F,gFAAgF;YAChF,MAAM,UAAU,GAAG,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,aAAa,CAAC;YACrF,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,CAAC,eAAe,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,0BAA0B,EAAE;oBAC5C,UAAU,EAAE,WAAW;oBACvB,cAAc;oBACd,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB;oBAC/D,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;oBAC9C,YAAY,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;iBACxE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,+FAA+F;QAC/F,+FAA+F;QAC/F,4FAA4F;QAC5F,+FAA+F;QAC/F,IAAI,CAAC,GAAG;aACL,OAAO,CACN;;;;;kCAK0B,CAC3B;aACA,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IACtG,CAAC;IAED,eAAe,CAAC,UAAkB;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,0DAA0D,CAAC;aACnE,GAAG,CAAC,UAAU,CAA8B,CAAC;QAChD,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,UAAkB,EAAE,MAAoB;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CACN;;;6DAGqD,CACtD;aACA,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACnC,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QACD,8FAA8F;QAC9F,sFAAsF;QACtF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG;aACrB,OAAO,CAAC,+DAA+D,CAAC;aACxE,GAAG,CAAC,UAAU,CAAmC,CAAC;QACrD,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACzC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,qCAAqC,EAAE;gBACvD,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM;gBACtD,MAAM,EAAE,qFAAqF;aAC9F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,eAAe,CAAC,IAAoE;QAClF,uFAAuF;QACvF,2FAA2F;QAC3F,6FAA6F;QAC7F,6FAA6F;QAC7F,8FAA8F;QAC9F,8FAA8F;QAC9F,6FAA6F;QAC7F,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN;;;;;mCAK2B,gBAAgB,GAAG,CAC/C;aACA,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,cAAc,CAA+B,CAAC;QAClF,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,oBAAoB;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CAAC,8EAA8E,CAAC;aACvF,GAAG,EAAgC,CAAC;QACvC,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,uBAAuB,CAAC,MAAc;QACpC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CAAC,6DAA6D,CAAC;aACtE,GAAG,CAAC,MAAM,GAAG,GAAG,CAA+B,CAAC;QACnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,aAAa,IAAI,CAAC,MAAM,mCAAmC,CAAC,CAAC;QAClI,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IAED;;;;;;OAMG;IACH,kBAAkB,CAAC,UAAkB;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,wDAAwD,CAAC;aACjE,GAAG,CAAC,UAAU,CAAC,CAAC;QACnB,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwCG;IACH,aAAa,CAAC,IAKb;QACC,iGAAiG;QACjG,gGAAgG;QAChG,gGAAgG;QAChG,EAAE;QACF,6FAA6F;QAC7F,gGAAgG;QAChG,6FAA6F;QAC7F,oFAAoF;QACpF,6FAA6F;QAC7F,gGAAgG;QAChG,eAAe;QACf,qBAAqB,CAAC,IAAI,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN;;;;mCAI2B,gBAAgB,GAAG,CAC/C;aACA,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,wBAAwB,CAA+B,CAAC;QAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC7C,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,oBAAoB,CAAC,wBAAgC,EAAE,MAAe;QACpE,MAAM,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN;;;;mCAI2B,gBAAgB,GAAG,CAC/C;aACA,GAAG,CAAC,GAAG,EAAE,wBAAwB,CAA4B,CAAC;QACjE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;;OAOG;IACH,eAAe,CAAC,UAAkB,EAAE,KAAmB;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,yEAAyE,CAAC;aAClF,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAC1B,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QAEjF,+FAA+F;QAC/F,8FAA8F;QAC9F,gGAAgG;QAChG,wFAAwF;QACxF,uDAAuD;QACvD,IAAI,KAAK,KAAK,gBAAgB,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YAC7C,IAAI,GAAG,EAAE,CAAC;gBACR,IAAI,CAAC,kBAAkB,CACrB;oBACE,YAAY,EAAE,GAAG,CAAC,WAAW;oBAC7B,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,WAAW,EAAE,GAAG,CAAC,UAAU;oBAC3B,aAAa,EAAE,GAAG,CAAC,YAAY;iBAChC,EACD,UAAU,EACV,GAAG,CAAC,cAAc,CACnB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,oBAAoB,CAAC,cAAsB,EAAE,MAAc;QACzD,qBAAqB,CAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN;;;;;;;mCAO2B,CAC5B;aACA,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,cAAc,EAAE,MAAM,CAA+B,CAAC;QAC5F,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAED,kBAAkB,CAAC,cAAsB;QACvC,qBAAqB,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN;;;;;mCAK2B,CAC5B;aACA,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,cAAc,CAA+B,CAAC;QACpF,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACH,sBAAsB,CAAC,cAAsB;QAC3C,qBAAqB,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CACN;;;;;gEAKwD,CACzD;aACA,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,cAAc,CAAkB,CAAC;QACvE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAED,6FAA6F;IAC7F,mBAAmB,CAAC,cAAsB;QACxC,qBAAqB,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO;QACN,0FAA0F;QAC1F,4FAA4F;QAC5F,qFAAqF;QACrF;;;;;;gEAMwD,CACzD;aACA,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,cAAc,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAChH,OAAO,CAAC,CAAC;IACX,CAAC;IAED,wEAAwE;IACxE,iBAAiB,CAAC,UAAkB,EAAE,KAAc;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,2EAA2E,CAAC;aACpF,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;YAClG,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;OAOG;IACH;;;;;;;OAOG;IACH,sBAAsB,CAAC,CAAwB;QAC7C,IAAI,CAAC,GAAG;aACL,OAAO,CACN;;;sFAG8E,CAC/E;aACA,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACtG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,4BAA4B,EAAE;YAC9C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM;SAC7E,CAAC,CAAC;IACL,CAAC;IAED,oFAAoF;IACpF,qBAAqB,CAAC,OAAe;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN;iFACyE,CAC1E;aACA,GAAG,CAAC,OAAO,CAAmC,CAAC;QAClD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC9B,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YACxC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YAC1C,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAqB;YACvC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YACvC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YACzB,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;SACvC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,iBAAiB,CAAC,CAAsB;QACtC,IAAI,CAAC,GAAG;aACL,OAAO,CACN;;;;;;;;;;;;;;iEAcyD,CAC1D;aACA,GAAG,CACF,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,EAChF,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS;QAClF,+FAA+F;QAC/F,iGAAiG;QACjG,oFAAoF;QACpF,8FAA8F;QAC9F,4FAA4F;QAC5F,2EAA2E;QAC3E,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CACvF,CAAC;QACJ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE;YAC1C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;YACpF,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,IAA0F;QAC1G,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CACN;;;6DAGqD,CACtD;aACA,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACpF,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,gCAAgC,EAAE;gBAClD,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;aACxE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,YAAY,CAAC,IAAgD;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN,+EAA+E,CAChF;aACA,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAA+B,CAAC;QACvE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACpB,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAC/C,OAAO;gBACL,GAAG,QAAQ;gBACX,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,UAAU,EAAE,CAAC,CAAC,WAAW;gBACzB,OAAO,EAAE,MAAsB;aAChC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/trust-signal-sweep-tick.d.ts

@@ -0,0 +1,60 @@
+import type { Logger } from "./types.js";
+import type { TrustSignalSweep } from "./trust-signal-sweep.js";
+/**
+ * How often a connected, online agent re-sweeps the other nodes.
+ *
+ * FIVE MINUTES, and the trade is real in both directions. Each tick opens an authenticated visiting
+ * connection to every OTHER node in the fleet and triggers that node's drain, so the cost scales
+ * with fleet size and agent count — too frequent is load on every directory for nothing. Too rare
+ * and this defect survives in a slower form: the worst case for a signal is one whole interval, and
+ * the thing being fixed is a 23-minute wait.
+ *
+ * Five minutes puts the worst case an order of magnitude under what was observed while keeping the
+ * steady-state cost at a handful of connections an hour per agent. Move it knowingly.
+ *
+ * ⚠️ **AND SOMETHING ELSE DEPENDS ON THIS CADENCE NOW — DOD-M15-TOKENRACE-1.**
+ *
+ * The visiting connection each tick opens is authenticated, so the directory hands it a fresh relay
+ * credential on `signaling_auth_ok`. Since `057-STALECRED` that credential is STORED, and it is what
+ * keeps an agent able to reach a relay at all — for taking a slot, for sending, for sealing, and for
+ * parked mail. The reason it has to come from somewhere is that the credential rides the HANDSHAKE
+ * and lives one hour, while a healthy home stream never handshakes again: measured at 8.4 hours
+ * between credentials with no disconnect in between.
+ *
+ * So the margin is load-bearing: **five minutes against a sixty-minute lifetime**. Raising this
+ * interval past that lifetime, or removing the tick, silently expires every agent's relay access
+ * while every connection still reports healthy. `dod-m15-tokenrace-1-visiting-refreshes-credential`
+ * pins the wiring; nothing pins this number, so this note is what stands between it and a change
+ * made for trust-signal reasons alone.
+ */
+export declare const SWEEP_TICK_INTERVAL_MS: number;
+export interface TrustSignalSweepTickerDeps {
+    logger: Logger;
+    /** The C2 sweep, unmodified. Its in-flight guard is what makes overlap safe. */
+    sweep: TrustSignalSweep;
+    /**
+     * Whether this agent is ONLINE — started through `cello_start_agent` and not switched off.
+     *
+     * Not "is its signaling connected": an agent taken offline by the kill switch keeps its signaling
+     * manager, and collecting trust signals for an agent the operator switched off is the kill switch
+     * failing to switch something off.
+     */
+    isAgentOnline: (agentName: string) => boolean;
+    /** Overridable for tests only; production uses SWEEP_TICK_INTERVAL_MS. */
+    intervalMs?: number;
+}
+export interface TrustSignalSweepTicker {
+    /**
+     * Sweep NOW and arm the periodic tick for this agent. Idempotent per agent — a flapping stream
+     * fires the connect trigger repeatedly and must not stack intervals.
+     *
+     * Same signature as `TrustSignalSweep`, so it substitutes at the existing call site.
+     */
+    sweepAndTick: TrustSignalSweep;
+    /** End one agent's tick. */
+    stop: (agentName: string) => void;
+    /** End every tick — daemon shutdown. */
+    stopAll: () => void;
+}
+export declare function createTrustSignalSweepTicker(deps: TrustSignalSweepTickerDeps): TrustSignalSweepTicker;
+//# sourceMappingURL=trust-signal-sweep-tick.d.ts.map

package/dist/trust-signal-sweep-tick.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-signal-sweep-tick.d.ts","sourceRoot":"","sources":["../src/trust-signal-sweep-tick.ts"],"names":[],"mappings":"AAiDA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAGhE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,sBAAsB,QAAa,CAAC;AAEjD,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,KAAK,EAAE,gBAAgB,CAAC;IACxB;;;;;;OAMG;IACH,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IAC9C,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC;;;;;OAKG;IACH,YAAY,EAAE,gBAAgB,CAAC;IAC/B,4BAA4B;IAC5B,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,wCAAwC;IACxC,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,0BAA0B,GAAG,sBAAsB,CA0ErG"}

package/dist/trust-signal-sweep-tick.js

@@ -0,0 +1,101 @@
+import { extractErrorMessage } from "./error-message.js";
+/**
+ * How often a connected, online agent re-sweeps the other nodes.
+ *
+ * FIVE MINUTES, and the trade is real in both directions. Each tick opens an authenticated visiting
+ * connection to every OTHER node in the fleet and triggers that node's drain, so the cost scales
+ * with fleet size and agent count — too frequent is load on every directory for nothing. Too rare
+ * and this defect survives in a slower form: the worst case for a signal is one whole interval, and
+ * the thing being fixed is a 23-minute wait.
+ *
+ * Five minutes puts the worst case an order of magnitude under what was observed while keeping the
+ * steady-state cost at a handful of connections an hour per agent. Move it knowingly.
+ *
+ * ⚠️ **AND SOMETHING ELSE DEPENDS ON THIS CADENCE NOW — DOD-M15-TOKENRACE-1.**
+ *
+ * The visiting connection each tick opens is authenticated, so the directory hands it a fresh relay
+ * credential on `signaling_auth_ok`. Since `057-STALECRED` that credential is STORED, and it is what
+ * keeps an agent able to reach a relay at all — for taking a slot, for sending, for sealing, and for
+ * parked mail. The reason it has to come from somewhere is that the credential rides the HANDSHAKE
+ * and lives one hour, while a healthy home stream never handshakes again: measured at 8.4 hours
+ * between credentials with no disconnect in between.
+ *
+ * So the margin is load-bearing: **five minutes against a sixty-minute lifetime**. Raising this
+ * interval past that lifetime, or removing the tick, silently expires every agent's relay access
+ * while every connection still reports healthy. `dod-m15-tokenrace-1-visiting-refreshes-credential`
+ * pins the wiring; nothing pins this number, so this note is what stands between it and a change
+ * made for trust-signal reasons alone.
+ */
+export const SWEEP_TICK_INTERVAL_MS = 5 * 60_000;
+export function createTrustSignalSweepTicker(deps) {
+    const { logger, sweep, isAgentOnline } = deps;
+    const intervalMs = deps.intervalMs ?? SWEEP_TICK_INTERVAL_MS;
+    const timers = new Map();
+    function arm(agentName, agentKeyProvider, agentPubkeyHex, homeNodeId) {
+        if (timers.has(agentName))
+            return;
+        // Whether the PREVIOUS tick skipped, so the skip line marks a transition rather than repeating.
+        let wasSkipping = false;
+        const timer = setInterval(() => {
+            if (!isAgentOnline(agentName)) {
+                // ONCE PER OFFLINE STRETCH, not once per tick. An operator asking why a signal has not
+                // arrived needs to see that we deliberately did not look — they need it once. Review
+                // measured the alternative: the tick is armed for EVERY loaded agent at boot, online or
+                // not, so an operator running one of four agents would get three timers writing this line
+                // every five minutes forever — 864 lines a day stating that the system is working as
+                // designed. `daemon.log` reaching 176 MB of one condition talking to itself is a defect
+                // this milestone already has an order open for; adding a second source of it while fixing
+                // a different bug is not a trade worth making.
+                if (!wasSkipping) {
+                    logger.info("trust_signal.sweep.tick_skipped", { agentName, reason: "agent_offline" });
+                    wasSkipping = true;
+                }
+                return;
+            }
+            if (wasSkipping) {
+                logger.info("trust_signal.sweep.tick_resumed", { agentName });
+                wasSkipping = false;
+            }
+            // Never awaited — nothing here is on a path an operator waits on. The catch LOGS, because a
+            // background sweep that fails in silence is how the original defect survived for weeks.
+            //
+            // Failure must not end the tick. This is the only thing running collection for a long-lived
+            // daemon, so a swallowed-and-stopped tick would put the agent back to reconnect-only
+            // collection after appearing to work — a worse version of the bug, because it starts healthy.
+            // homeNodeId CAPTURED, not dropped. Nothing supplies it today — `signaling-wiring.ts` types
+            // the getter as three arguments — so this is inert. It is here because skipping the node whose
+            // drain already ran is the obvious next optimisation on this exact path, and the moment
+            // someone wires it the connect sweep would skip home while every tick visited it, with
+            // nothing asserting the divergence.
+            void sweep(agentName, agentKeyProvider, agentPubkeyHex, homeNodeId, "tick").catch((err) => {
+                logger.warn("trust_signal.sweep.tick_failed", { agentName, reason: extractErrorMessage(err) });
+            });
+        }, intervalMs);
+        // Do not hold the daemon open for up to a whole interval after everything else has shut down.
+        timer.unref?.();
+        timers.set(agentName, timer);
+        logger.info("trust_signal.sweep.tick_armed", { agentName, intervalMs });
+    }
+    return {
+        sweepAndTick: (agentName, agentKeyProvider, agentPubkeyHex, homeNodeId) => {
+            arm(agentName, agentKeyProvider, agentPubkeyHex, homeNodeId);
+            // "connect", explicitly. This is the `onConnected` path and its log line has to say so, or the
+            // tick's line cannot be told apart from it — which is exactly why this unit was unverifiable.
+            return sweep(agentName, agentKeyProvider, agentPubkeyHex, homeNodeId, "connect");
+        },
+        stop: (agentName) => {
+            const timer = timers.get(agentName);
+            if (!timer)
+                return;
+            clearInterval(timer);
+            timers.delete(agentName);
+            logger.info("trust_signal.sweep.tick_stopped", { agentName });
+        },
+        stopAll: () => {
+            for (const timer of timers.values())
+                clearInterval(timer);
+            timers.clear();
+        },
+    };
+}
+//# sourceMappingURL=trust-signal-sweep-tick.js.map

package/dist/trust-signal-sweep-tick.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-signal-sweep-tick.js","sourceRoot":"","sources":["../src/trust-signal-sweep-tick.ts"],"names":[],"mappings":"AAmDA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAG,MAAM,CAAC;AAgCjD,MAAM,UAAU,4BAA4B,CAAC,IAAgC;IAC3E,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,sBAAsB,CAAC;IAC7D,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEjD,SAAS,GAAG,CACV,SAAiB,EACjB,gBAA6B,EAC7B,cAAsB,EACtB,UAA8B;QAE9B,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO;QAClC,gGAAgG;QAChG,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC7B,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC9B,uFAAuF;gBACvF,qFAAqF;gBACrF,wFAAwF;gBACxF,0FAA0F;gBAC1F,qFAAqF;gBACrF,wFAAwF;gBACxF,0FAA0F;gBAC1F,+CAA+C;gBAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;oBACvF,WAAW,GAAG,IAAI,CAAC;gBACrB,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC9D,WAAW,GAAG,KAAK,CAAC;YACtB,CAAC;YACD,4FAA4F;YAC5F,wFAAwF;YACxF,EAAE;YACF,4FAA4F;YAC5F,qFAAqF;YACrF,8FAA8F;YAC9F,4FAA4F;YAC5F,+FAA+F;YAC/F,wFAAwF;YACxF,uFAAuF;YACvF,oCAAoC;YACpC,KAAK,KAAK,CAAC,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACjG,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjG,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,UAAU,CAAC,CAAC;QACf,8FAA8F;QAC9F,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO;QACL,YAAY,EAAE,CAAC,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE;YACxE,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;YAC7D,+FAA+F;YAC/F,8FAA8F;YAC9F,OAAO,KAAK,CAAC,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,EAAE,CAAC,SAAiB,EAAE,EAAE;YAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,EAAE,GAAG,EAAE;YACZ,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE;gBAAE,aAAa,CAAC,KAAK,CAAC,CAAC;YAC1D,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/trust-signal-sweep.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Collecting trust signals parked at nodes this daemon is not connected to.
+ *
+ * ─── WHY A SWEEP IS NEEDED AT ALL ──────────────────────────────────────────────────────────────
+ *
+ * `pickup_queue` is node-local by design and does NOT replicate, so a signal delivered to one
+ * directory is collectable only from that directory. The one thing that collects it is a stream
+ * AUTHENTICATING there, because the drain runs on auth. An agent connects to a single directory —
+ * chosen at random on every start — so a signal parked anywhere else simply waited.
+ *
+ * C1 made a visiting connection able to receive pickups at all. This makes it deterministic rather
+ * than incidental: without it, collection happens only if you happen to start a session with
+ * someone who lives on that node.
+ *
+ * ─── WHAT THIS DELIBERATELY IS NOT ─────────────────────────────────────────────────────────────
+ *
+ * Not on the login path. The home stream drains inline on its own auth, as it always has; this runs
+ * in the background afterwards. The signaling wait is already the reason bootstrap needed a fast
+ * probe, and n round trips added to it would be felt on every start for a benefit that is never
+ * urgent — a signal that has waited for a directory to be visited can wait another few seconds.
+ *
+ * Not a node list. The roster comes from the signed manifest the daemon already polls, so a fleet
+ * of five sweeps five with no code change.
+ */
+import type { KeyProvider } from "@cello-protocol/crypto";
+import type { Logger } from "./types.js";
+import type { ConsortiumEndpoint } from "./directory-bootstrap.js";
+/** What a sweep found, per node. Never collapsed into a single boolean — see `unreachable`. */
+export interface SweepResult {
+    /** Nodes that answered and said their drain was finished. */
+    visited: string[];
+    /** Nodes that could not be dialled at all. */
+    unreachable: string[];
+    /** Nodes that answered but never said they were finished — we hit the ceiling instead. */
+    incomplete: string[];
+    /** True when the manifest could not be resolved, so we do not know who to ask. */
+    rosterUnavailable: boolean;
+}
+export interface TrustSignalSweepDeps {
+    logger: Logger;
+    resolveConsortiumRoster: () => Promise<ConsortiumEndpoint[] | null>;
+    /**
+     * Nodes the manifest declares that could NOT be resolved this sweep.
+     *
+     * Without this the `unreachable` bucket can never fill, because the roster is already the
+     * REACHABLE SUBSET — `manifestNodesToEndpoints` drops a node whose /bootstrap probe failed. A
+     * dead node therefore appeared in no bucket at all and the sweep reported "visited 2,
+     * unreachable 0" for a three-node fleet, which is exactly the false negative the order forbids:
+     * the operator is told nothing is waiting when nobody looked.
+     */
+    getUnresolvedNodes?: () => ReadonlyArray<{
+        nodeId: string;
+        reason: string;
+    }>;
+    openVisitingConnection: (agentName: string, agentKeyProvider: KeyProvider, agentPubkeyHex: string, endpoint: {
+        peerId: string;
+        multiaddr: string;
+    }, correlationId: string, nodeId: string) => {
+        mgr: {
+            registerInboundHandler: (h: (f: Record<string, unknown>) => void) => void;
+            /** "connected" once the stream is authenticated; the manager connects asynchronously. */
+            readonly status?: string;
+        };
+        stop: (reason: string) => Promise<void>;
+    };
+    /** How long to wait for a node's end-of-drain frame before closing anyway. */
+    ceilingMs?: number;
+}
+/**
+ * WHY THE TRIGGER IS A PARAMETER (048-SWEEPTICK, added after the unit could not be verified).
+ *
+ * The tick and `onConnected` produced byte-identical log lines, so on a live daemon there was no way
+ * to tell which one had swept — and signaling turns its stream over often enough that a tick's sweep
+ * lands inside a burst of reconnect-driven ones. The unit's own live check was therefore impossible:
+ * every candidate observation was equally explained by the trigger it was meant to replace.
+ *
+ * That is the failure this unit exists to prevent, one level up. 043-C2's sweep was correct and
+ * unobservable, so nobody noticed it ran once per connection; 048's tick was correct and
+ * unobservable, so nobody could show it ran at all.
+ */
+export type SweepTrigger = "connect" | "tick";
+export type TrustSignalSweep = (agentName: string, agentKeyProvider: KeyProvider, agentPubkeyHex: string, 
+/**
+ * The node this daemon is already connected to, skipped because its drain ran on its own auth.
+ *
+ * Optional because the caller does not always know it. When it is unknown every node is visited,
+ * including home — which costs one extra connection whose drain immediately reports nothing left,
+ * not a wrong answer. A wasted round trip in the background beats guessing which node to skip.
+ */
+homeNodeId?: string, 
+/** What caused this sweep. Defaults to `connect`, which is the only caller that passes nothing. */
+trigger?: SweepTrigger) => Promise<SweepResult>;
+export declare function createTrustSignalSweep(deps: TrustSignalSweepDeps): TrustSignalSweep;
+//# sourceMappingURL=trust-signal-sweep.d.ts.map

package/dist/trust-signal-sweep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-signal-sweep.d.ts","sourceRoot":"","sources":["../src/trust-signal-sweep.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAGnE,+FAA+F;AAC/F,MAAM,WAAW,WAAW;IAC1B,6DAA6D;IAC7D,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,8CAA8C;IAC9C,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,0FAA0F;IAC1F,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,kFAAkF;IAClF,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,uBAAuB,EAAE,MAAM,OAAO,CAAC,kBAAkB,EAAE,GAAG,IAAI,CAAC,CAAC;IACpE;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,MAAM,aAAa,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7E,sBAAsB,EAAE,CACtB,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,WAAW,EAC7B,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAC/C,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,KACX;QACH,GAAG,EAAE;YACH,sBAAsB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK,IAAI,CAAC;YAC1E,yFAAyF;YACzF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;SAC1B,CAAC;QACF,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KACzC,CAAC;IACF,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,MAAM,CAAC;AAE9C,MAAM,MAAM,gBAAgB,GAAG,CAC7B,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,WAAW,EAC7B,cAAc,EAAE,MAAM;AACtB;;;;;;GAMG;AACH,UAAU,CAAC,EAAE,MAAM;AACnB,mGAAmG;AACnG,OAAO,CAAC,EAAE,YAAY,KACnB,OAAO,CAAC,WAAW,CAAC,CAAC;AAE1B,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,oBAAoB,GAAG,gBAAgB,CA0JnF"}

package/dist/trust-signal-sweep.js

@@ -0,0 +1,147 @@
+import { extractErrorMessage } from "./error-message.js";
+export function createTrustSignalSweep(deps) {
+    const { logger, resolveConsortiumRoster, openVisitingConnection, getUnresolvedNodes } = deps;
+    const ceilingMs = deps.ceilingMs ?? 10_000;
+    // One sweep per agent at a time. `onConnected` fires on every reconnect, so a flapping stream
+    // would otherwise stack sweeps, each holding up to N authenticated visiting streams and
+    // re-triggering every node's drain. Duplicate delivery is safe — the wallet write is
+    // content-addressed and the drain deletes only on ACK — so this is load, not corruption, but it
+    // is load that arrives exactly when the network is already struggling.
+    const inFlight = new Set();
+    /**
+     * 048-SWEEPTICK — the problem set this agent reported LAST time, so a steady state is stated once.
+     *
+     * This module was written for a once-per-connection cadence and logs like it: a warn per
+     * unreachable-or-unresolved node per run, plus a `finished` line per run. Since 048 it runs every
+     * five minutes for the life of the daemon, so a node that is delisted but still in the manifest
+     * turned two warns a day into roughly 1,150 — and the next incident is found by grepping
+     * `daemon.log`, which would then return a wall of a condition nobody is going to act on. A warning
+     * that fires on a steady state has stopped being a signal.
+     *
+     * So the CHANGE is warned, the repeat is debugged. Nothing is hidden: the full result is still
+     * returned to the caller and `finished` still carries every count.
+     */
+    const lastProblems = new Map();
+    return async (agentName, agentKeyProvider, agentPubkeyHex, homeNodeId, trigger = "connect") => {
+        if (inFlight.has(agentName)) {
+            logger.info("trust_signal.sweep.already_running", { agentName, trigger });
+            return { visited: [], unreachable: [], incomplete: [], rosterUnavailable: false };
+        }
+        inFlight.add(agentName);
+        try {
+            return await run(agentName, agentKeyProvider, agentPubkeyHex, homeNodeId, trigger);
+        }
+        finally {
+            inFlight.delete(agentName);
+        }
+    };
+    async function run(agentName, agentKeyProvider, agentPubkeyHex, homeNodeId, trigger) {
+        const result = { visited: [], unreachable: [], incomplete: [], rosterUnavailable: false };
+        // Which nodes were already a problem last time. A node's FIRST bad sweep warns; the same node
+        // still bad five minutes later is debug. See `lastProblems` — this is the per-node half of it.
+        const previously = new Set((lastProblems.get(agentName) ?? "").split(/[,|]/).filter(Boolean));
+        const problem = (nodeId) => (previously.has(nodeId) ? (logger.debug ?? logger.warn) : logger.warn);
+        // Declared-but-unresolvable nodes, named BEFORE any dialling. These never reach the loop below
+        // because the roster excludes them, and saying nothing about them is how one dead node makes
+        // "nothing waiting" look true.
+        for (const n of getUnresolvedNodes?.() ?? []) {
+            if (n.nodeId === homeNodeId)
+                continue;
+            result.unreachable.push(n.nodeId);
+            problem(n.nodeId)("trust_signal.sweep.node_unreachable", { agentName, node: n.nodeId, reason: n.reason, trigger });
+        }
+        const roster = await resolveConsortiumRoster();
+        if (!roster) {
+            // NOT the same as "nobody had anything". We do not know who to ask, and saying nothing was
+            // waiting would be a claim we cannot support.
+            result.rosterUnavailable = true;
+            logger.warn("trust_signal.sweep.roster_unavailable", { agentName, trigger });
+            return result;
+        }
+        // Skip home when we know it: its drain already ran on this stream's own auth, so visiting it
+        // would open a second authenticated connection to a node we are already on, for nothing.
+        const targets = homeNodeId ? roster.filter((n) => n.nodeId !== homeNodeId) : roster;
+        if (targets.length === 0)
+            return result;
+        for (const node of targets) {
+            const correlationId = `sweep-${agentName}-${node.nodeId}-${Date.now()}`;
+            let conn;
+            try {
+                conn = openVisitingConnection(agentName, agentKeyProvider, agentPubkeyHex, { peerId: node.peerId, multiaddr: node.multiaddr }, correlationId, node.nodeId);
+            }
+            catch (err) {
+                // openVisitingConnection connects ASYNCHRONOUSLY, so in practice it does not throw on a
+                // dial failure — that case is caught after the ceiling instead. This catches a synchronous
+                // fault while it wires the connection up, where `conn` is undefined and there is nothing to
+                // stop. One node failing must never end the sweep.
+                result.unreachable.push(node.nodeId);
+                problem(node.nodeId)("trust_signal.sweep.node_unreachable", { agentName, node: node.nodeId, reason: extractErrorMessage(err), trigger });
+                continue;
+            }
+            // try/finally, because the teardown is not optional. A throw between here and `stop()` would
+            // leave an AUTHENTICATED visiting connection open — and the order names the consequence
+            // directly: the directory drains its durable notification queue down any such stream, which
+            // is a bug this connection type has already caused once.
+            try {
+                // Register BEFORE the promise, so a throw here cannot reject it and skip the teardown.
+                let onComplete;
+                conn.mgr.registerInboundHandler((frame) => {
+                    if (frame["type"] !== "trust_signal_drain_complete")
+                        return;
+                    onComplete?.();
+                });
+                // Wait for the node to say the drain is finished — or give up at the ceiling.
+                //
+                // The terminal frame is what makes this correct: a timer alone truncates a slow drain and
+                // re-drops the remainder on the next sweep, forever, because the directory deletes on ACK
+                // and an un-acked row simply comes back. The ceiling is the backstop for a node that never
+                // sends one, including any directory older than that change.
+                const completed = await new Promise((resolve) => {
+                    const timer = setTimeout(() => resolve(false), ceilingMs);
+                    // Do not hold the process open waiting on a node that has gone quiet.
+                    timer.unref?.();
+                    onComplete = () => { clearTimeout(timer); resolve(true); };
+                });
+                if (completed)
+                    result.visited.push(node.nodeId);
+                else if (conn.mgr.status !== undefined && conn.mgr.status !== "connected") {
+                    // NEVER CONNECTED, so this is a transport failure and not a slow drain. Filing it as
+                    // `incomplete` would name the directory's drain for something that is the network —
+                    // an exit-point label standing in for the real cause, which is the reading an operator
+                    // would then act on.
+                    result.unreachable.push(node.nodeId);
+                    problem(node.nodeId)("trust_signal.sweep.node_unreachable", {
+                        agentName, node: node.nodeId, reason: "never_connected", ceilingMs, trigger,
+                    });
+                }
+                else {
+                    // Connected and answering, but never said it was done. We may have collected everything
+                    // or only part of it and cannot tell — a different answer from a clean sweep, recorded
+                    // as one.
+                    result.incomplete.push(node.nodeId);
+                    problem(node.nodeId)("trust_signal.sweep.no_terminal_frame", { agentName, node: node.nodeId, ceilingMs, trigger });
+                }
+            }
+            finally {
+                // `stop` awaits any in-flight pickup handler before tearing the stream down (C1 review), so
+                // a signal still being opened and stored is not cut off by this close.
+                await conn.stop("sweep_finished");
+            }
+        }
+        // The signature of anything an operator might act on. `visited` is deliberately absent: a node
+        // moving from unreachable back to visited changes this string via the other two buckets.
+        const problems = [...result.unreachable].sort().join(",") + "|" + [...result.incomplete].sort().join(",");
+        const changed = lastProblems.get(agentName) !== problems;
+        lastProblems.set(agentName, problems);
+        // `trigger` FIRST after the agent, because it is the field that makes this line answer the
+        // question the unit is judged on: did the tick run, or was that a reconnect?
+        const line = { agentName, trigger, visited: result.visited.length, unreachable: result.unreachable.length, incomplete: result.incomplete.length };
+        if (changed)
+            logger.info("trust_signal.sweep.finished", line);
+        else
+            logger.debug?.("trust_signal.sweep.finished", { ...line, repeat: true });
+        return result;
+    }
+    ;
+}
+//# sourceMappingURL=trust-signal-sweep.js.map

package/dist/trust-signal-sweep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-signal-sweep.js","sourceRoot":"","sources":["../src/trust-signal-sweep.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AA4EzD,MAAM,UAAU,sBAAsB,CAAC,IAA0B;IAC/D,MAAM,EAAE,MAAM,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;IAC7F,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAC3C,8FAA8F;IAC9F,wFAAwF;IACxF,qFAAqF;IACrF,gGAAgG;IAChG,uEAAuE;IACvE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC;;;;;;;;;;;;OAYG;IACH,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE/C,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,GAAG,SAAS,EAAE,EAAE;QAC5F,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YAC1E,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;QACpF,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACrF,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,UAAU,GAAG,CAChB,SAAiB,EACjB,gBAA6B,EAC7B,cAAsB,EACtB,UAA8B,EAC9B,OAAqB;QAErB,MAAM,MAAM,GAAgB,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;QAEvG,8FAA8F;QAC9F,+FAA+F;QAC/F,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9F,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE3G,+FAA+F;QAC/F,6FAA6F;QAC7F,+BAA+B;QAC/B,KAAK,MAAM,CAAC,IAAI,kBAAkB,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU;gBAAE,SAAS;YACtC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAClC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,qCAAqC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACrH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,uBAAuB,EAAE,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,2FAA2F;YAC3F,8CAA8C;YAC9C,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7E,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,6FAA6F;QAC7F,yFAAyF;QACzF,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACpF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QAExC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,aAAa,GAAG,SAAS,SAAS,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACxE,IAAI,IAA4E,CAAC;YACjF,IAAI,CAAC;gBACH,IAAI,GAAG,sBAAsB,CAC3B,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAC3C,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,CAC/E,CAAC;YACJ,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,wFAAwF;gBACxF,2FAA2F;gBAC3F,4FAA4F;gBAC5F,mDAAmD;gBACnD,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,qCAAqC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,mBAAmB,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;gBACzI,SAAS;YACX,CAAC;YAED,6FAA6F;YAC7F,wFAAwF;YACxF,4FAA4F;YAC5F,yDAAyD;YACzD,IAAI,CAAC;gBACH,uFAAuF;gBACvF,IAAI,UAAoC,CAAC;gBACzC,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,KAAK,EAAE,EAAE;oBACxC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,6BAA6B;wBAAE,OAAO;oBAC5D,UAAU,EAAE,EAAE,CAAC;gBACjB,CAAC,CAAC,CAAC;gBAEH,8EAA8E;gBAC9E,EAAE;gBACF,0FAA0F;gBAC1F,0FAA0F;gBAC1F,2FAA2F;gBAC3F,6DAA6D;gBAC7D,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;oBACvD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;oBAC1D,sEAAsE;oBACtE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;oBAChB,UAAU,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7D,CAAC,CAAC,CAAC;gBAEH,IAAI,SAAS;oBAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;qBAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;oBAC1E,qFAAqF;oBACrF,oFAAoF;oBACpF,uFAAuF;oBACvF,qBAAqB;oBACrB,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACrC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,qCAAqC,EAAE;wBAC1D,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,OAAO;qBAC5E,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,wFAAwF;oBACxF,uFAAuF;oBACvF,UAAU;oBACV,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACpC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,sCAAsC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;gBACrH,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,4FAA4F;gBAC5F,uEAAuE;gBACvE,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAED,+FAA+F;QAC/F,yFAAyF;QACzF,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1G,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC;QACzD,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAEtC,2FAA2F;QAC3F,6EAA6E;QAC7E,MAAM,IAAI,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QAClJ,IAAI,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,IAAI,CAAC,CAAC;;YACzD,MAAM,CAAC,KAAK,EAAE,CAAC,6BAA6B,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,OAAO,MAAM,CAAC;IAChB,CAAC;IAAA,CAAC;AACJ,CAAC"}

package/dist/type-registry.d.ts

@@ -0,0 +1,42 @@
+/**
+ * DOD-REGISTRY-1 (client half) — in-memory type registry cache.
+ *
+ * The registry is a signed canonical-JSON document mapping signal type strings to their
+ * classification (class, lifecycle, default TTL, display label). The daemon polls the
+ * directory for new versions and keeps the latest verified document here.
+ *
+ * INV-TYPE-CARRY: an absent type is valid-but-unclassified, never an error. This is the
+ * whole reason the registry is DATA not code — adding a new type requires no release.
+ */
+export interface RegistryTypeEntry {
+    class: number;
+    label: string;
+    lifecycle: string;
+    default_ttl_days: number | null;
+}
+export interface RegistryDocument {
+    version: number;
+    types: Record<string, RegistryTypeEntry>;
+    signature: string;
+}
+export interface TypeClassification {
+    type: string;
+    class: number;
+    label: string;
+    lifecycle: string;
+    defaultTtlDays: number | null;
+    classified: true;
+}
+export interface UnclassifiedType {
+    type: string;
+    classified: false;
+}
+export type TypeLookupResult = TypeClassification | UnclassifiedType;
+export declare class TypeRegistry {
+    #private;
+    get currentVersion(): number | null;
+    get currentDocument(): RegistryDocument | null;
+    update(doc: RegistryDocument): void;
+    classify(type: string): TypeLookupResult;
+}
+//# sourceMappingURL=type-registry.d.ts.map

package/dist/type-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"type-registry.d.ts","sourceRoot":"","sources":["../src/type-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACzC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,KAAK,CAAC;CACnB;AAED,MAAM,MAAM,gBAAgB,GAAG,kBAAkB,GAAG,gBAAgB,CAAC;AAErE,qBAAa,YAAY;;IAGvB,IAAI,cAAc,IAAI,MAAM,GAAG,IAAI,CAElC;IAED,IAAI,eAAe,IAAI,gBAAgB,GAAG,IAAI,CAE7C;IAED,MAAM,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI;IAInC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB;CAczC"}

package/dist/type-registry.js

@@ -0,0 +1,37 @@
+/**
+ * DOD-REGISTRY-1 (client half) — in-memory type registry cache.
+ *
+ * The registry is a signed canonical-JSON document mapping signal type strings to their
+ * classification (class, lifecycle, default TTL, display label). The daemon polls the
+ * directory for new versions and keeps the latest verified document here.
+ *
+ * INV-TYPE-CARRY: an absent type is valid-but-unclassified, never an error. This is the
+ * whole reason the registry is DATA not code — adding a new type requires no release.
+ */
+export class TypeRegistry {
+    #doc = null;
+    get currentVersion() {
+        return this.#doc?.version ?? null;
+    }
+    get currentDocument() {
+        return this.#doc;
+    }
+    update(doc) {
+        this.#doc = doc;
+    }
+    classify(type) {
+        if (!this.#doc || !(type in this.#doc.types)) {
+            return { type, classified: false };
+        }
+        const entry = this.#doc.types[type];
+        return {
+            type,
+            class: entry.class,
+            label: entry.label,
+            lifecycle: entry.lifecycle,
+            defaultTtlDays: entry.default_ttl_days,
+            classified: true,
+        };
+    }
+}
+//# sourceMappingURL=type-registry.js.map

package/dist/type-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"type-registry.js","sourceRoot":"","sources":["../src/type-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA+BH,MAAM,OAAO,YAAY;IACvB,IAAI,GAA4B,IAAI,CAAC;IAErC,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,IAAI,CAAC;IACpC,CAAC;IAED,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,MAAM,CAAC,GAAqB;QAC1B,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,QAAQ,CAAC,IAAY;QACnB,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACrC,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO;YACL,IAAI;YACJ,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,cAAc,EAAE,KAAK,CAAC,gBAAgB;YACtC,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;CACF"}