@cello-protocol/daemon 0.0.227 → 0.0.228

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,2BAA2B,EAC3B,aAAa,EACb,eAAe,EAChB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAKrE,YAAY,EAAE,qBAAqB,EAAE,CAAC;AAGtC,YAAY,EACV,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,2BAA2B,GAC5B,CAAC;AAGF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAIlE,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC7D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5D,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC9D;AAID,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAID,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAED,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,gBAAgB,CAAC;AAI3D,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,eAAe,CAAC;AAIrD;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,EAAG,uBAAgC,CAAC;AAI7E;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,UAAU,GAClB,aAAa,GACb,cAAc,GACd,SAAS,GACT,QAAQ,GACR,YAAY,GACZ,YAAY,GACZ,QAAQ,CAAC;AAEb,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,8BAA8B,CAAC,EAAE,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,aAAa,GAAG,QAAQ,CAAC;IAC9F;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAID,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,YAAY,CAAC;AAE5E,MAAM,WAAW,cAAc;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAID,MAAM,MAAM,uBAAuB,GAAG,WAAW,GAAG,cAAc,GAAG,MAAM,CAAC;AAE5E,MAAM,WAAW,mBAAmB;IAClC,wFAAwF;IACxF,UAAU,EAAE,MAAM,CAAC;IACnB,4FAA4F;IAC5F,OAAO,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,SAAS,CAAC;IAClB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,mBAAmB,EAAE,uBAAuB,CAAC;IAC7C,MAAM,EAAE,SAAS,EAAE,CAAC;IAIpB;;;;OAIG;IACH,uBAAuB,EAAE,OAAO,CAAC;IACjC;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,oBAAoB,EAAE,sBAAsB,EAAE,CAAC;IAC/C;;;;OAIG;IACH,eAAe,EAAE,iBAAiB,EAAE,CAAC;CACtC;AAGD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,GAClB;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AACnG;;;;;;;;GAQG;GACD;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,kFAAkF;AAClF,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;qGAGiG;IACjG,QAAQ,EAAE,OAAO,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;IACpD,qFAAqF;IACrF,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;;;;OAOG;IACH,aAAa,EAAE,iBAAiB,CAAC;IACjC;;mGAE+F;IAC/F,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACxD;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IAC7C,kFAAkF;IAClF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;;;;;;OAYG;IACH,sBAAsB,CAAC,EAAE,UAAU,GAAG,YAAY,GAAG,SAAS,CAAC;CAChE;AAID,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;IACrC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,oBAAoB,CAAC,EAAE,qBAAqB,CAAC;IAC7C;;;OAGG;IACH,qBAAqB,CAAC,EAAE,sBAAsB,CAAC;IAC/C;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,2BAA2B,CAAC;IAChD;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IAChD;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,MAAM,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IACpE;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,OAAO,2BAA2B,EAAE,mBAAmB,CAAC;IAC7E;;;;;;;;;;;;OAYG;IACH,aAAa,CAAC,EAAE,OAAO,kBAAkB,EAAE,MAAM,CAAC;IAClD;;;;;;;OAOG;IACH,0BAA0B,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,wBAAwB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvF;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;OAKG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC;;;;OAIG;IACH,cAAc,CAAC,EAAE,eAAe,CAAC;IACjC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,MAAM,MAAM,CAAC;IACtC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;;;;;;;;;;;OAYG;IACH,eAAe,EAAE,qBAAqB,CAAC;IACvC;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,OAAO,2BAA2B,EAAE,sBAAsB,CAAC;IACnF;;;;;;;;;OASG;IACH,oBAAoB,CAAC,EAAE,OAAO,2BAA2B,EAAE,sBAAsB,CAAC;IAClF;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB;AAID;;GAEG;AACH,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,aAAa,GACrB,QAAQ,GACR,QAAQ,GACR,aAAa,GACb,0BAA0B,GAI1B,WAAW,CAAC;AAEhB,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAE9E,MAAM,WAAW,aAAa;IAC5B;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,yBAAyB,CAAC,EAAE,uBAAuB,CAAC;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,aAAa,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,aAAa,EAAE,MAAM,CAAC;IACtB,+DAA+D;IAC/D,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,iEAAiE;AACjE,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,qFAAqF;IACrF,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;;;;;;;;OAWG;IACH,aAAa,EAAE,iBAAiB,CAAC;CAClC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;OAQG;IACH,mBAAmB,CAAC,EAAE,KAAK,CAAC;IAC5B;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,KAAK,CAAC;IACzB,8FAA8F;IAC9F,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,aAAa,CAAC;IACtB,yFAAyF;IACzF,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACvC;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,kBAAkB,EAAE,MAAM,CAAC;QAC3B,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IAEF;;;;;;;;;;;;;OAaG;IACH,sBAAsB,CAAC,EAAE,UAAU,GAAG,YAAY,GAAG,SAAS,CAAC;IAC/D,iFAAiF;IACjF,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,uEAAuE;IACvE,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;;;;;;;;;OAYG;IACH,aAAa,EAAE,OAAO,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,CAAC;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,gBAAgB,EAAE,CAAC;CAC9B"}

package/dist/types.js

@@ -0,0 +1,20 @@
+/**
+ * CELLO Daemon IPC Types
+ *
+ * IPC framing: JSON-newline-delimited over Unix domain socket.
+ * Requests: {id, method, params}
+ * Responses: {id, result} or {id, error: {code, message, guidance}}
+ */
+// --- Session node sentinel ---
+/**
+ * Sentinel agentName used for the standing receiver node before any agent
+ * transitions to Online. The IPC socket opens after initialize() completes,
+ * so no agent can call cello_start_agent before the standing receiver exists.
+ */
+export const STANDING_RECEIVER_AGENT_NAME = "__standing_receiver__";
+// --- Session node types ---
+/**
+ * Maximum number of concurrent session nodes per daemon.
+ */
+export const MAX_SESSION_NODES = 32;
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAgFH,gCAAgC;AAEhC;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,uBAAgC,CAAC;AAsf7E,6BAA6B;AAE7B;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC"}

package/dist/unresolved-nodes-report.d.ts

@@ -0,0 +1,14 @@
+import type { RosterFreshness } from "./roster-freshness.js";
+import type { NodeResolveFailure } from "./directory-bootstrap.js";
+export interface UnresolvedNodesDeps {
+    getUnresolvedNodes: () => NodeResolveFailure[];
+    getUnresolvedSweptAt: () => string | null;
+    lastRosterSweepError: () => RosterFreshness["last_sweep_error"] | undefined;
+    manifestConfigured: boolean;
+}
+export declare function createUnresolvedNodesReport(deps: UnresolvedNodesDeps): {
+    unresolvedNodesForStatus: () => {
+        directory_endpoints_unresolved: unknown;
+    } | undefined;
+};
+//# sourceMappingURL=unresolved-nodes-report.d.ts.map

package/dist/unresolved-nodes-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unresolved-nodes-report.d.ts","sourceRoot":"","sources":["../src/unresolved-nodes-report.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEnE,MAAM,WAAW,mBAAmB;IAClC,kBAAkB,EAAE,MAAM,kBAAkB,EAAE,CAAC;IAC/C,oBAAoB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC1C,oBAAoB,EAAE,MAAM,eAAe,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC;IAC5E,kBAAkB,EAAE,OAAO,CAAC;CAC7B;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,mBAAmB;oCAe9B;QAAE,8BAA8B,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS;EAkE7F"}

package/dist/unresolved-nodes-report.js

@@ -0,0 +1,96 @@
+/**
+ * The directory-reachability block a status read carries — and the rule for when it says nothing.
+ *
+ * Silence is reserved for ONE state: a reading taken recently enough to speak for the present, which
+ * found nothing wrong. Every other combination emits, including an EMPTY node list, because an empty
+ * list is not proof of health — it also means nothing has looked, or looked too long ago to say. So
+ * the presence of this block does not mean nodes are failing; `measurement` is the field to read
+ * first, and only then the list.
+ *
+ * Two consumers, which is why it is a module rather than a closure: the MCP `cello_status` handler
+ * and the daemon-wide `getStatus()` the CLI renders. That second one is the surface that was silent
+ * on 2026-07-31 while every session failed.
+ */
+import { classifyRosterReading, describeRosterFreshness } from "./roster-freshness.js";
+export function createUnresolvedNodesReport(deps) {
+    const { getUnresolvedNodes, getUnresolvedSweptAt, lastRosterSweepError, manifestConfigured } = deps;
+    // ─── MCP-001: cello_status (per-connection perspective) ───
+    /**
+     * The directory-reachability block for `cello_status`.
+     *
+     * `undefined` — i.e. silence — is reserved for ONE state: a reading taken recently enough to
+     * speak for the present, which found nothing wrong. Every other combination emits, including an
+     * EMPTY node list, because an empty list is not proof of health: it also means nothing has
+     * looked, or looked too long ago to say. `DOD-M15-STALEROSTER-1`.
+     *
+     * So presence of this block does NOT mean nodes are failing. Read `measurement` first —
+     * `current` | `stale` | `never` | `not_configured` — and only then the node list.
+     */
+    function unresolvedNodesForStatus() {
+        const failures = getUnresolvedNodes();
+        /**
+         * DOD-M15-STALEROSTER-1 — the block is now gated on the AGE of the reading, not just on whether
+         * it found anything.
+         *
+         * `if (failures.length === 0) return undefined` made two different states render identically:
+         * "all three nodes answered a moment ago" and "nothing has ever looked". The second is
+         * reachable — `verifyStartupManifest` returns without sweeping when the consortium manifest is
+         * missing, not yet valid, EXPIRED, or rolled back — so a daemon with an expired manifest
+         * reported no directory trouble at all.
+         *
+         * Silence is therefore reserved for the one case that has earned it: a RECENT reading that
+         * found nothing wrong. Every other case says why it cannot make that claim.
+         */
+        const freshness = describeRosterFreshness(classifyRosterReading(getUnresolvedSweptAt(), Date.now()), {
+            // REVIEW F2: "no manifest configured" is DESIGNED (local dev, the e2e harness, or a
+            // CELLO_DIRECTORY_URL that is not byte-equal to a bundled endpoint) and must not be dressed
+            // as an alarm — it would fire on every local run. It still EMITS, because the line forbids
+            // hiding the field; what differs is what the operator is told.
+            manifestConfigured,
+            ...(lastRosterSweepError() ? { lastSweepError: lastRosterSweepError() } : {}),
+        });
+        if (failures.length === 0 && freshness.measurement === "current")
+            return undefined;
+        return {
+            directory_endpoints_unresolved: {
+                // WHEN this was measured, and whether that is recent enough to mean anything. Without it the
+                // block asserts the PRESENT, and a transient blip reads as an ongoing outage: on 2026-08-09
+                // all three endpoints failed with ENETUNREACH for under a minute — a network transition on
+                // the operator's machine — and the block went on reporting them unreachable long after they
+                // answered again. True when taken, false when read.
+                ...freshness,
+                // DOD-M15-BOOTSTRAP-1: `attempts` distinguishes a node that answered definitively (one
+                // probe — a 404, a bad payload, its configuration) from one that never answered at all
+                // (every probe spent — the path to it). Those call for opposite responses, and without the
+                // count they rendered identically here.
+                nodes: failures.map((f) => ({ node: f.nodeId, endpoint: f.endpoint, reason: f.reason, detail: f.detail, attempts: f.attempts })),
+                guidance: failures.length === 0
+                    // The block is present with an EMPTY node list, which before DOD-M15-STALEROSTER-1 could
+                    // not happen. Saying "could not resolve these endpoints" here would be a flat lie — there
+                    // are no endpoints listed and the point is that nothing was measured. The empty list is
+                    // the ABSENCE of a reading, not a clean bill of health, and freshness_guidance above says
+                    // which of the two it is.
+                    ? "This block is present with NO nodes listed, which does not mean the nodes are healthy — " +
+                        "it means this reading cannot support that claim. See freshness_guidance above for " +
+                        "whether the daemon has never measured, or measured too long ago to speak for the " +
+                        "present. Directory reachability is what threshold ceremonies depend on, so an " +
+                        "unmeasured roster is an unknown, not an all-clear."
+                    : "AS OF checked_at (this is a point-in-time reading, not necessarily now), this daemon could not "
+                        + "resolve these directory endpoints, so the consortium roster was short and " +
+                        "threshold ceremonies will fail — sessions surface that as home_node_reports_no_receiver, " +
+                        "home_node_not_in_reachable_roster, directory_named_no_home, directory_below_threshold or " +
+                        "ceremony_exhausted, none of which name the real cause on their own (DOD-M15-ERRSTRING-1 " +
+                        "renamed the first three; they now append this shortfall to their own guidance). " +
+                        "Agents can still show 'online': signaling dials multiaddrs and does not need DNS. " +
+                        "If reason is dns_error after a directory restart or wake, the resolver is holding a cached " +
+                        "negative answer — flush it (macOS: sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder). " +
+                        "Verify with node -e 'require(\"dns\").lookup(host,console.log)', NOT dig: dig bypasses the " +
+                        "cache this daemon is stuck behind, so it reports success while the daemon still fails. "
+                        + "attempts:1 means the node ANSWERED and the answer was unusable — look at that node. "
+                        + "attempts:2+ means it never answered — look at the path to it.",
+            },
+        };
+    }
+    return { unresolvedNodesForStatus };
+}
+//# sourceMappingURL=unresolved-nodes-report.js.map

package/dist/unresolved-nodes-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unresolved-nodes-report.js","sourceRoot":"","sources":["../src/unresolved-nodes-report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAWvF,MAAM,UAAU,2BAA2B,CAAC,IAAyB;IACnE,MAAM,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;IAEpG,6DAA6D;IAC7D;;;;;;;;;;OAUG;IACH,SAAS,wBAAwB;QAC/B,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;QACtC;;;;;;;;;;;;WAYG;QACH,MAAM,SAAS,GAAG,uBAAuB,CAAC,qBAAqB,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE;YACnG,oFAAoF;YACpF,4FAA4F;YAC5F,2FAA2F;YAC3F,+DAA+D;YAC/D,kBAAkB;YAClB,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,oBAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9E,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,WAAW,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACnF,OAAO;YACL,8BAA8B,EAAE;gBAC9B,6FAA6F;gBAC7F,4FAA4F;gBAC5F,2FAA2F;gBAC3F,4FAA4F;gBAC5F,oDAAoD;gBACpD,GAAG,SAAS;gBACZ,uFAAuF;gBACvF,uFAAuF;gBACvF,2FAA2F;gBAC3F,wCAAwC;gBACxC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAChI,QAAQ,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;oBAC7B,yFAAyF;oBACzF,0FAA0F;oBAC1F,wFAAwF;oBACxF,0FAA0F;oBAC1F,0BAA0B;oBAC1B,CAAC,CAAC,0FAA0F;wBAC1F,oFAAoF;wBACpF,mFAAmF;wBACnF,gFAAgF;wBAChF,oDAAoD;oBACtD,CAAC,CAAC,iGAAiG;0BACjG,4EAA4E;wBAC9E,2FAA2F;wBAC3F,2FAA2F;wBAC3F,0FAA0F;wBAC1F,kFAAkF;wBAClF,oFAAoF;wBACpF,6FAA6F;wBAC7F,qGAAqG;wBACrG,6FAA6F;wBAC7F,yFAAyF;0BACvF,sFAAsF;0BACtF,+DAA+D;aACpE;SACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,wBAAwB,EAAE,CAAC;AACtC,CAAC"}

package/dist/vocabulary.d.ts

@@ -0,0 +1,150 @@
+/**
+ * The ONE vocabulary.
+ *
+ * A capability has exactly one name, and that name renders differently on each surface:
+ *
+ *     capability "agents"  →  MCP tool `cello_agents`  ·  CLI command `cello agents`
+ *
+ * The rule: **an MCP tool's name is `cello_` + the CLI command name**, snake_cased, keeping any
+ * sub-verb. Humans and agents learn a capability ONCE.
+ *
+ * Why this table exists rather than three lists of string literals:
+ *
+ *  - the CLI registry names its commands,
+ *  - the connect shim names its MCP tools,
+ *  - and the DAEMON names them BACK to you in ~50 error-guidance strings.
+ *
+ * That third one is the trap. The daemon is where a new user actually MEETS these names — a
+ * refused send says "call cello_receive first". Rename the tools without touching the daemon and
+ * every one of those strings points at a tool that no longer exists: an error message that hands
+ * you a wrong instruction is worse than no error message. So the names live HERE, once, and the
+ * daemon RENDERS them for whichever surface is asking (it knows: `clientType` is recorded at
+ * `ipc.connect`). A CLI caller is told `cello use-agent`; an MCP caller is told `cello_use_agent`.
+ *
+ * Enforced by dod-onboard-help-1-vocabulary.test.ts:
+ *  - every entry obeys the `cello_` + command rule (no hand-typed exceptions),
+ *  - every `cello_*` token in a daemon guidance string resolves here (a stale/typo'd name FAILS
+ *    the build rather than shipping a dead instruction),
+ *  - the CLI registry's command names == the CLI names here,
+ *  - the connect shim's tool names == the MCP names here.
+ */
+/** A capability reachable from BOTH surfaces. `mcp` is the tool name; `cli` is the command line. */
+export interface DualSurfaceVerb {
+    mcp: string;
+    cli: string;
+}
+/**
+ * Is this IPC method name one of the document verbs?
+ *
+ * Lives HERE, in the file that owns every tool name, and not at the call site — `ipc-server.ts` needs
+ * the answer to name the right cause when a gated verb arrives, and a `"cello_doc_"` literal there is
+ * flagged by the source audit as a dead tool name. Correctly flagged: a bare prefix is not a tool, and
+ * the audit cannot tell it from a typo'd one. `vocabulary.ts` is the one file that audit excludes,
+ * because defining names is its job.
+ *
+ * ⚠️ THIS SENTENCE USED TO SAY *"answers by NAME, not by membership of `DOCUMENT_VERBS`"* AND THE BODY
+ * BELOW IS EXACTLY MEMBERSHIP OF `DOCUMENT_VERBS`. It meant `DUAL_SURFACE_VERBS`, and it shipped inside
+ * the commit whose whole subject was comments asserting what the code does not do. Rewritten rather than
+ * deleted, because a wrong comment in that commit is the evidence that the habit survives being named.
+ *
+ * What it actually does: answers from `DOCUMENT_VERBS` directly, never from `DUAL_SURFACE_VERBS`. The
+ * caller asks precisely when the gate is closed, and the document rows are not in that table then.
+ */
+export declare function isDocumentVerbName(method: string): boolean;
+/**
+ * Every capability with BOTH an MCP tool and a CLI command, for THIS process.
+ *
+ * Read at module load, which is where every other consumer of this table already reads it — the CLI
+ * renders its help in a fresh process per invocation, and the daemon builds its handler map once at
+ * boot. "Read once at startup" and "read at module load" are the same act here.
+ */
+export declare const DUAL_SURFACE_VERBS: readonly DualSurfaceVerb[];
+/**
+ * Tools that exist ONLY on the MCP surface. Listed so the audit test can tell "known MCP-only" from
+ * "stale name".
+ *
+ * ⚠️ THIS COMMENT USED TO READ *"Their daemon handlers return `not_implemented`, so there is
+ * deliberately no CLI command to build a second broken path to."* That was true of all three when it
+ * was written and is now true of NONE of them — `cello_backup` and `cello_restore` were implemented
+ * by `DOD-M15-BACKUP-1`, and `cello_get_inclusion_proof` by `DOD-M15-INCLUSION-1`, which also added
+ * `cello_verify_inclusion_proof`. Rewritten rather than deleted, per the claim-truth lens: the
+ * sentence is the evidence that "MCP-only" was once a synonym for "unimplemented", and a reader who
+ * still believes that would take a working tool for a stub.
+ *
+ * What the list means NOW: these are implemented capabilities with no CLI twin. Membership is a
+ * statement about SURFACE, not about readiness.
+ */
+export declare const MCP_ONLY_TOOLS: readonly string[];
+/**
+ * `cello_*` identifiers that are NOT tools and must never be mistaken for one.
+ *
+ * `cello_message` is the doorbell NOTIFICATION frame type (and the stem of the
+ * `notification.cello_message.dispatch.failed` log event). It is wire vocabulary and log taxonomy,
+ * never a command an operator could run — so the audit must recognise it rather than demand it be
+ * renamed to a tool that would not exist.
+ */
+export declare const NON_TOOL_IDENTIFIERS: readonly string[];
+/** Every `cello_*` token the daemon is ALLOWED to name in guidance. Anything else is a bug. */
+export declare function knownToolNames(): ReadonlySet<string>;
+/**
+ * CLI verbs that DO NOT EXIST. No string anywhere may hand one of these to an operator.
+ *
+ * This list is needed IN ADDITION to the tool audit: that audit matches `cello_*` tokens, so it is
+ * structurally BLIND to a dead *CLI* verb — `cello register` is just prose to it. A user handed a
+ * command that does not dispatch is worse off than one handed nothing.
+ *
+ * Anchoring is by NEGATIVE LOOKAHEAD, not a trailing space — see deadCliVerbPattern().
+ */
+export declare const DEAD_CLI_VERBS: readonly string[];
+/**
+ * Match any dead CLI verb, wherever it is SPOKEN — the one regex both audits share.
+ *
+ * The negative lookahead `(?![-\w])` is load-bearing; do NOT weaken it to a trailing SPACE. A verb
+ * followed by a quote, period, backtick, paren or comma would slip straight through, and dead verbs
+ * appear inside quotes and at end of sentence in real guidance strings. An audit defeated by a full
+ * stop is not an audit.
+ *
+ * The lookahead still lets the LIVE commands through, because each dead verb is a strict prefix of
+ * its replacement: `cello register-agent`, `cello close-session`, `cello initiate-session` all have
+ * a `-` right where the lookahead refuses one.
+ */
+export declare function deadCliVerbPattern(): RegExp;
+/**
+ * MCP tool names that DO NOT EXIST. Nothing may hand one of these to an agent.
+ *
+ * Distinct from `knownToolNames()` (an allowlist: "every cello_* token must be in the table"). That
+ * allowlist works inside the daemon, where every `cello_*` token IS a tool name — but it cannot be
+ * used across the CLI package, where `cello_*` tokens are also IPC WIRE method names
+ * (`client.send("cello_list_agents")`, which deliberately do not move) and, in the scaffolded Hermes
+ * assets, plain config identifiers (`cello_socket_path`, `cello_dir`). An allowlist there would
+ * either drown in false positives or be so riddled with exceptions it stopped meaning anything.
+ *
+ * So outside the daemon assert the DENYLIST instead: whatever else a string says, it must not name a
+ * deleted tool. The exposure is real — non-code assets ship to the operator's disk and instruct
+ * their agent (the Hermes `platform_hint` is a live example).
+ */
+export declare const RENAMED_AWAY_TOOLS: readonly string[];
+/**
+ * Rewrite MCP tool names in a guidance string into the CLI verbs an operator would type.
+ *
+ * Only `cello_*` tokens in DUAL_SURFACE_VERBS are rewritten. An MCP-only tool has no CLI verb to
+ * offer, so it is left alone — inventing one would send the operator to a command that does not
+ * exist, which is the exact failure this whole mechanism prevents.
+ */
+export declare function toCliGuidance(text: string): string;
+/** The client surfaces the daemon renders guidance for. Recorded per connection at `ipc.connect`. */
+export type ClientSurface = "cli" | "mcp";
+/**
+ * Render a handler's response for the surface that asked.
+ *
+ * Applied ONCE, at the IPC response boundary (daemon.ts wraps every handler), so a new handler
+ * cannot forget it and a new guidance string cannot drift. MCP callers get the response verbatim —
+ * the source strings already hold the canonical MCP names.
+ *
+ * MUST RECURSE into nested objects and arrays; rewriting only a TOP-LEVEL `guidance` is not enough.
+ * Real instructions live deep — `cello inbox`'s rename notices sit at
+ * `agents[i].rename_notices[j].notice`. A choke point that only covers the easy shape is not a choke
+ * point; it just moves the leak somewhere less visible.
+ */
+export declare function renderForSurface(result: unknown, surface: ClientSurface): unknown;
+//# sourceMappingURL=vocabulary.d.ts.map

package/dist/vocabulary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vocabulary.d.ts","sourceRoot":"","sources":["../src/vocabulary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,oGAAoG;AACpG,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAoGD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,eAAe,EAEtC,CAAC;AAEpB;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAK3C,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAAsB,CAAC;AAEzE,+FAA+F;AAC/F,wBAAgB,cAAc,IAAI,WAAW,CAAC,MAAM,CAAC,CAMpD;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAc3C,CAAC;AASF;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAI3C;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAW/C,CAAC;AAwCF;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAUlD;AAED,qGAAqG;AACrG,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,KAAK,CAAC;AAmB1C;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAGjF"}