@cello-protocol/daemon 0.0.227 → 0.0.228

package/dist/document-write-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-write-path.js","sourceRoot":"","sources":["../src/document-write-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,cAAc,EAAkB,MAAM,oBAAoB,CAAC;AAC9G,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE3H,8FAA8F;AAC9F,MAAM,SAAS,GAAG,SAAS,CAAC;AAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC;AAGxB;;;;;;GAMG;AACH,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAExF,gGAAgG;AAChG,MAAM,CAAC,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC,CAAC;AAE9F;;;;;;;GAOG;AACH,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,4EAA4E;AAC5E,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAYpC,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,MAAM,CAAuB;IAC7B,MAAM,CAAS;IACxB,YAAY,MAA4B,EAAE,MAAc;QACtD,KAAK,CAAC,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAWD,MAAM,OAAO,iBAAiB;IACnB,MAAM,CAAiB;IACvB,KAAK,CAAS;IACd,OAAO,CAAS;IAEzB,YAAY,MAAsB,EAAE,aAAqB,EAAE,MAAc;QACvE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,OAAe,EAAE,UAAkB,EAAE,YAAoB;QAChE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACpC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,6FAA6F;IAC7F,UAAU,CAAC,YAAoB;QAC7B,MAAM,SAAS,GAAG,wBAAwB,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,kBAAkB,CAC1B,2BAA2B,EAC3B,mDAAmD,YAAY,GAAG,CACnE,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,kBAAkB,CAAC,OAAe,EAAE,UAAkB,EAAE,YAAoB;QAChF,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,SAAS,KAAK,gBAAgB;YAAE,OAAO;QAE3C,MAAM,KAAK,GAA4B;YACrC;gBACE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,UAAU,IAAI,gBAAgB,EAAE,CAAC;gBAC9D,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,UAAU,IAAI,SAAS,EAAE,CAAC;aACxD;YACD;gBACE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,UAAU,IAAI,gBAAgB,aAAa,CAAC;gBACnF,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC;aACxD;SACF,CAAC;QAEF,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,sEAAsE;YAClF,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,EAAE,CAAC,CAAC;gBACjB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,4CAA4C;gBAC7E,SAAS;YACX,CAAC;YAAC,MAAM,CAAC;gBACP,4DAA4D;YAC9D,CAAC;YACD,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACvB,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,UAAkB,EAAE,YAAoB,EAAE,GAAU;QACrF,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACjD,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,UAAkB,EAAE,YAAoB,EAAE,GAAU;QACjF,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QAEjF,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,kBAAkB,CAC1B,uBAAuB,EACvB,uCAAuC,UAAU,qCAAqC,CACvF,CAAC;QACJ,CAAC;QAED,6FAA6F;QAC7F,6FAA6F;QAC7F,0FAA0F;QAC1F,oEAAoE;QACpE,8FAA8F;QAC9F,+FAA+F;QAC/F,8FAA8F;QAC9F,+FAA+F;QAC/F,6FAA6F;QAC7F,yCAAyC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACjD,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,kBAAkB,CAC1B,qBAAqB,EACrB,+BAA+B,UAAU,kDAAkD;gBACzF,kFAAkF;gBAClF,sCAAsC,CACzC,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,IAAI,CAAC;QAC3E,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,KAAK,CACT,OAAe,EACf,UAAkB,EAClB,YAAoB,EACpB,GAAU,EACV,QAAoB;QAEpB,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QAE9D,0DAA0D;QAC1D,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,6FAA6F;YAC7F,2FAA2F;YAC3F,gEAAgE;YAChE,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtD,MAAM,IAAI,kBAAkB,CAC1B,0BAA0B,EAC1B,gBAAgB,UAAU,uBAAwB,GAA6B,EAAE,IAAI,IAAI,SAAS,MAAM;oBACtG,8EAA8E,CACjF,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QAED,8FAA8F;QAC9F,2FAA2F;QAC3F,kEAAkE;QAClE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QACjF,IAAI,MAAM,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YAC3C,MAAM,IAAI,kBAAkB,CAC1B,6BAA6B,EAC7B,uCAAuC,UAAU,sCAAsC;gBACrF,+EAA+E,CAClF,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,GAAwC,IAAI,CAAC;QAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,UAAW,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;YAClE,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM;gBAAE,SAAS,GAAG,MAAM,CAAC;iBAC9C,IAAI,MAAM;gBAAE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI;oBAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjE,CAAC;QAED,4FAA4F;QAC5F,oFAAoF;QACpF,2FAA2F;QAC3F,4FAA4F;QAC5F,uFAAuF;QACvF,6FAA6F;QAC7F,6DAA6D;QAC7D,MAAM,QAAQ,GAAwC,EAAE,CAAC;QACzD,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,MAAM,MAAM,GAAG,CAAC,KAAmB,EAAQ,EAAE;YAC3C,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;qBAClD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;oBAClE,oFAAoF;oBACpF,oFAAoF;oBACpF,wFAAwF;oBACxF,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,IAAI,MAAM,EAAE,CAAC;wBAC1C,SAAS,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;oBACrG,CAAC;oBACD,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;gBAChC,CAAC;qBAAM,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACtC,sFAAsF;oBACtF,wFAAwF;oBACxF,qDAAqD;oBACrD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACvB,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,IAAI,MAAM,EAAE,CAAC;wBAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC;wBAC3E,SAAS,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,GAAG,KAAK,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;oBACzE,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,CAAC,KAA2B,EAAQ,EAAE;YAClD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,WAAW;gBAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC,CAAC;QAEF,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACvB,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QAED,4FAA4F;QAC5F,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,6FAA6F;YAC7F,4FAA4F;YAC5F,sDAAsD;YACtD,IAAI,SAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,IAAI,kBAAkB,CAC1B,0BAA0B,EAC1B,gBAAgB,UAAU,sCAAsC;oBAC9D,IAAK,GAA6B,EAAE,IAAI,IAAI,SAAS,uCAAuC,CAC/F,CAAC;YACJ,CAAC;YACD,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;gBACzB,MAAM,IAAI,kBAAkB,CAC1B,oCAAoC,EACpC,gBAAgB,UAAU,+DAA+D;oBACvF,8CAA8C,CACjD,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QAEtE,8EAA8E;QAC9E,4FAA4F;QAC5F,yFAAyF;QACzF,4FAA4F;QAC5F,yCAAyC;QACzC,MAAM,MAAM,GAAG,SAAS,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM;YACpB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC;gBAChE,sFAAsF;gBACtF,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;YAC5D,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAElD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACnF,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACjF,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;IAED,6EAA6E;IAE7E,QAAQ,CAAC,GAAU,EAAE,YAAoB;QACvC,IAAI,mBAAmB,CAAC,YAAY,CAAC,KAAK,KAAK,EAAE,CAAC;YAChD,6FAA6F;YAC7F,2FAA2F;YAC3F,4FAA4F;YAC5F,OAAO,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAe,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,KAAK,CACH,GAAU,EACV,UAAkB,EAClB,MAAc,EACd,YAAoB;QAEpB,IAAI,mBAAmB,CAAC,YAAY,CAAC,KAAK,KAAK,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3C,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED;;;;;;;;;OASG;IACH,SAAS,CAAC,GAAU,EAAE,UAAkB,EAAE,MAAc;QACtD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,QAAQ,EAAE,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAE5C,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEpC,qDAAqD;QACrD,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE;YAChB,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBACxC,IAAI,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI;oBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrE,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;oBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAClE,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,2FAA2F;QAC3F,uBAAuB;QACvB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,GAAG,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACnC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;YAC/B,MAAM,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACrC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC1B,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1B,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED;;;;;;;OAOG;IACH,SAAS,CAAC,GAAU,EAAE,MAAc;QAClC,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,kBAAkB,CAC1B,2BAA2B,EAC3B,2CAA2C,MAAM,CAAC,MAAM,EAAE,CAC3D,CAAC;QACJ,CAAC;QACD,OAAO,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjE,CAAC;IAED;sCACkC;IAClC,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,IAAY,EAAE,OAAe;QAC/D,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC;QAC1B,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,OAAe,EAAE,UAAkB,EAAE,YAAoB;QACvE,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;IAC1G,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,UAAkB,EAAE,YAAoB,EAAE,OAAe;QAC9F,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QACrE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,SAAS,CAAC,GAAG,IAAI,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,MAAM,CAAC,GAAG,IAAI,MAAM,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,UAAkB,EAAE,YAAoB;QAC7E,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QACzF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAY,EAAE,UAAkB;QAClD,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,kBAAkB,CAC1B,uBAAuB,EACvB,qCAAqC,UAAU,OAAO,IAAI,qCAAqC,CAChG,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,gBAAgB,CAAC,YAAoB;QACnC,IAAI,mBAAmB,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,kBAAkB,CAC1B,2BAA2B,EAC3B,yBAAyB,YAAY,uBAAuB,CAAC,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3G,CAAC;QACJ,CAAC;IACH,CAAC;IAED,SAAS,CAAC,KAAa,EAAE,KAAa;QACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,kBAAkB,CAC1B,qBAAqB,EACrB,GAAG,KAAK,6EAA6E;gBACnF,uCAAuC,CAC1C,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,SAAS,CACvB,MAAc,EACd,KAAa;IAEb,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IAEhC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE1B,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,uFAAuF;QACvF,+BAA+B;QAC/B,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,OAAO,GAAa,CAAC,CAAC,CAAC,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAEjF,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACT,UAAU,CAAC,MAAM,EAAE;QACjB,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAE;QACxB,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAE;QACpB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;KAC3C,CAAC,CACH;SACA,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAS,UAAU,CACjB,MAAc,EACd,IAAkD;IAElD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACjD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAExB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,OAAO,MAAM,GAAG,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,EAAE,CAAC;IAE1E,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;IAC5E,OACE,MAAM,GAAG,SAAS;QAClB,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,EAC3E,CAAC;QACD,MAAM,EAAE,CAAC;IACX,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,MAAM;QACxB,EAAE,EAAE,IAAI,CAAC,EAAE,GAAG,MAAM;QACpB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;KACrD,CAAC;AACJ,CAAC"}

package/dist/error-message.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Extract a real message from a thrown value. libp2p / cross-package errors are not
+ * always `instanceof Error` in this realm (multi-version split), so fall back to a
+ * `message` property or JSON — never the useless "[object Object]".
+ */
+export declare function extractErrorMessage(err: unknown): string;
+//# sourceMappingURL=error-message.d.ts.map

package/dist/error-message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-message.d.ts","sourceRoot":"","sources":["../src/error-message.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAUxD"}

package/dist/error-message.js

@@ -0,0 +1,19 @@
+/**
+ * Extract a real message from a thrown value. libp2p / cross-package errors are not
+ * always `instanceof Error` in this realm (multi-version split), so fall back to a
+ * `message` property or JSON — never the useless "[object Object]".
+ */
+export function extractErrorMessage(err) {
+    if (err instanceof Error)
+        return err.message;
+    if (err && typeof err === "object" && typeof err.message === "string") {
+        return err.message;
+    }
+    try {
+        return JSON.stringify(err);
+    }
+    catch {
+        return String(err);
+    }
+}
+//# sourceMappingURL=error-message.js.map

package/dist/error-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-message.js","sourceRoot":"","sources":["../src/error-message.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,IAAI,GAAG,YAAY,KAAK;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IAC7C,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAQ,GAA6B,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACjG,OAAQ,GAA2B,CAAC,OAAO,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/file-manifest-provider.d.ts

@@ -0,0 +1,37 @@
+import type { ConsortiumManifest } from "@cello-protocol/protocol-types";
+import { type ConsortiumManifestInput } from "@cello-protocol/crypto";
+import type { IManifestProvider } from "@cello-protocol/transport";
+export declare class ManifestLoadError extends Error {
+    readonly reason: string;
+    constructor(reason: string, detail?: string);
+}
+export interface FileManifestProviderOpts {
+    /** Absolute path to the consortium manifest JSON. */
+    path: string;
+}
+export declare class FileManifestProvider implements IManifestProvider {
+    #private;
+    constructor(opts: FileManifestProviderOpts);
+    loadAndVerify(rootKeys: readonly string[], threshold: number): Promise<ConsortiumManifest>;
+    getCurrentManifest(): ConsortiumManifest | null;
+    updateManifest(manifest: ConsortiumManifest): void;
+}
+/**
+ * EmbeddedManifestProvider — the production provider for the COMPILED-IN consortium roster
+ * (FINDING-4). Identical trust gate to FileManifestProvider (threshold officer-signature
+ * verification via `verifyManifest`, rejects an empty node set) but the manifest is an in-memory
+ * constant compiled into the client rather than a file on disk. This is what the daemon wires by
+ * default (no CELLO_CONSORTIUM_MANIFEST override), so the roster and step-6 directory-auth anchor
+ * are always present — they cannot be lost by a missing package file or a skipped build-copy step,
+ * and a corrupt/mis-signed embedded manifest fails CLOSED at load (ADV-002) rather than silently
+ * degrading. Expiry / version monotonicity remain the daemon's policy layer, exactly as for
+ * FileManifestProvider (see that class's note) — this provider does structure + signatures only.
+ */
+export declare class EmbeddedManifestProvider implements IManifestProvider {
+    #private;
+    constructor(input: ConsortiumManifestInput);
+    loadAndVerify(rootKeys: readonly string[], threshold: number): Promise<ConsortiumManifest>;
+    getCurrentManifest(): ConsortiumManifest | null;
+    updateManifest(manifest: ConsortiumManifest): void;
+}
+//# sourceMappingURL=file-manifest-provider.d.ts.map

package/dist/file-manifest-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-manifest-provider.d.ts","sourceRoot":"","sources":["../src/file-manifest-provider.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAkB,KAAK,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAGnE,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBACZ,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;CAK5C;AAED,MAAM,WAAW,wBAAwB;IACvC,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,qBAAa,oBAAqB,YAAW,iBAAiB;;gBAIhD,IAAI,EAAE,wBAAwB;IAIpC,aAAa,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA2BhG,kBAAkB,IAAI,kBAAkB,GAAG,IAAI;IAI/C,cAAc,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI;CAGnD;AAED;;;;;;;;;;GAUG;AACH,qBAAa,wBAAyB,YAAW,iBAAiB;;gBAIpD,KAAK,EAAE,uBAAuB;IAI1C,aAAa,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAS1F,kBAAkB,IAAI,kBAAkB,GAAG,IAAI;IAI/C,cAAc,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI;CAGnD"}

package/dist/file-manifest-provider.js

@@ -0,0 +1,105 @@
+/**
+ * FileManifestProvider — the production IManifestProvider (M7-MANIFEST-001/002).
+ *
+ * Reads a consortium manifest JSON from disk, verifies its threshold officer
+ * signatures against the configured root keys (RFC 8032 / Ed25519 via
+ * `verifyManifest`), enforces the not_before/expires validity window, and caches
+ * the result for getCurrentManifest(). This is the real counterpart to the
+ * test-only `TestManifestProvider` (which skips verification): it is what the
+ * cello-daemon binary wires when a manifest is configured, so step-6 directory
+ * auth (DOD-AUTH-1) reads node pubkeys from a manifest that has actually been
+ * verified, and a tampered / expired / rolled-back manifest is refused at load
+ * (DOD-AUTH-2 / TUF).
+ *
+ * Scope — signatures + structure ONLY. loadAndVerify verifies the threshold officer
+ * signatures and rejects an empty node set; it deliberately does NOT enforce the
+ * not_before/expires validity window or version monotonicity. That policy lives in
+ * the daemon (startDaemon), which checks the window after loadAndVerify returns and
+ * emits the named events `directory.auth.manifest.expired` /
+ * `directory.auth.manifest.version.rollback`. If this provider threw on expiry, it
+ * would preempt those named events (the daemon would only see `manifest.load.failed`)
+ * and make the daemon's policy layer dead code. Anchoring to the daemon's actual
+ * behaviour keeps the observability taxonomy intact (DOD-INV-6/8).
+ */
+import { readFileSync } from "node:fs";
+import { verifyManifest } from "@cello-protocol/crypto";
+import { extractErrorMessage } from "./error-message.js";
+export class ManifestLoadError extends Error {
+    reason;
+    constructor(reason, detail) {
+        super(detail ? `${reason}: ${detail}` : reason);
+        this.name = "ManifestLoadError";
+        this.reason = reason;
+    }
+}
+export class FileManifestProvider {
+    #path;
+    #manifest = null;
+    constructor(opts) {
+        this.#path = opts.path;
+    }
+    async loadAndVerify(rootKeys, threshold) {
+        let raw;
+        try {
+            raw = readFileSync(this.#path, "utf8");
+        }
+        catch (err) {
+            throw new ManifestLoadError("manifest_unreadable", extractErrorMessage(err));
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch (err) {
+            throw new ManifestLoadError("manifest_malformed", extractErrorMessage(err));
+        }
+        // Threshold officer-signature verification (RFC 8032). verifyManifest also
+        // rejects an empty node set. This is the TUF root-of-trust gate. Expiry / version
+        // monotonicity are enforced by the daemon (named events), not here.
+        const result = verifyManifest(parsed, rootKeys, threshold);
+        if (!result.ok) {
+            throw new ManifestLoadError("manifest_signature_invalid", result.detail);
+        }
+        this.#manifest = parsed;
+        return parsed;
+    }
+    getCurrentManifest() {
+        return this.#manifest;
+    }
+    updateManifest(manifest) {
+        this.#manifest = manifest;
+    }
+}
+/**
+ * EmbeddedManifestProvider — the production provider for the COMPILED-IN consortium roster
+ * (FINDING-4). Identical trust gate to FileManifestProvider (threshold officer-signature
+ * verification via `verifyManifest`, rejects an empty node set) but the manifest is an in-memory
+ * constant compiled into the client rather than a file on disk. This is what the daemon wires by
+ * default (no CELLO_CONSORTIUM_MANIFEST override), so the roster and step-6 directory-auth anchor
+ * are always present — they cannot be lost by a missing package file or a skipped build-copy step,
+ * and a corrupt/mis-signed embedded manifest fails CLOSED at load (ADV-002) rather than silently
+ * degrading. Expiry / version monotonicity remain the daemon's policy layer, exactly as for
+ * FileManifestProvider (see that class's note) — this provider does structure + signatures only.
+ */
+export class EmbeddedManifestProvider {
+    #input;
+    #manifest = null;
+    constructor(input) {
+        this.#input = input;
+    }
+    loadAndVerify(rootKeys, threshold) {
+        const result = verifyManifest(this.#input, rootKeys, threshold);
+        if (!result.ok) {
+            return Promise.reject(new ManifestLoadError("manifest_signature_invalid", result.detail));
+        }
+        this.#manifest = this.#input;
+        return Promise.resolve(this.#manifest);
+    }
+    getCurrentManifest() {
+        return this.#manifest;
+    }
+    updateManifest(manifest) {
+        this.#manifest = manifest;
+    }
+}
+//# sourceMappingURL=file-manifest-provider.js.map

package/dist/file-manifest-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-manifest-provider.js","sourceRoot":"","sources":["../src/file-manifest-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,cAAc,EAAgC,MAAM,wBAAwB,CAAC;AAEtF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,MAAM,CAAS;IACxB,YAAY,MAAc,EAAE,MAAe;QACzC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAOD,MAAM,OAAO,oBAAoB;IACtB,KAAK,CAAS;IACvB,SAAS,GAA8B,IAAI,CAAC;IAE5C,YAAY,IAA8B;QACxC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAA2B,EAAE,SAAiB;QAChE,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QACjD,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,CAAC;QAED,2EAA2E;QAC3E,kFAAkF;QAClF,oEAAoE;QACpE,MAAM,MAAM,GAAG,cAAc,CAAC,MAA4C,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACjG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,iBAAiB,CAAC,4BAA4B,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,cAAc,CAAC,QAA4B;QACzC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,wBAAwB;IAC1B,MAAM,CAA0B;IACzC,SAAS,GAA8B,IAAI,CAAC;IAE5C,YAAY,KAA8B;QACxC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,aAAa,CAAC,QAA2B,EAAE,SAAiB;QAC1D,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,iBAAiB,CAAC,4BAA4B,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,MAAuC,CAAC;QAC9D,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,cAAc,CAAC,QAA4B;QACzC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;CACF"}

package/dist/frame-values.d.ts

@@ -0,0 +1,3 @@
+export declare function frameValueToHex(v: unknown): string | null;
+export declare function normalizeLegibility(raw: unknown): unknown | undefined;
+//# sourceMappingURL=frame-values.d.ts.map

package/dist/frame-values.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frame-values.d.ts","sourceRoot":"","sources":["../src/frame-values.ts"],"names":[],"mappings":"AAUA,wBAAgB,eAAe,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAKzD;AAQD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,CAsDrE"}

package/dist/frame-values.js

@@ -0,0 +1,84 @@
+/**
+ * Wire-frame value helpers, shared by the seal coordinator and the session-event handlers.
+ *
+ * Pure: no daemon state, no closure. They lived inside startDaemon only because everything did.
+ */
+import { Buffer } from "node:buffer";
+// CBOR-decoded byte fields arrive as Uint8Array or Buffer; a field may also already be
+// a hex string. Hex strings are lowercased so the case-sensitive agent-pubkey match
+// (agents store lowercase hex) cannot silently miss (review L2).
+export function frameValueToHex(v) {
+    if (v instanceof Uint8Array)
+        return Buffer.from(v).toString("hex");
+    if (Buffer.isBuffer(v))
+        return Buffer.from(v).toString("hex");
+    if (typeof v === "string")
+        return v.toLowerCase();
+    return null;
+}
+// M7-SESSION-004 (AC-005): normalise the wire `legibility` object — CBOR-decoded, so pubkeys
+// arrive as Uint8Array/Buffer — into a JSON-safe certificate with hex-encoded pubkeys. Returns
+// undefined for an absent or structurally-implausible object (pre-M7 frame, or a malformed
+// field), in which case nothing is persisted and the seal still completes. The constants
+// (attests/disclaimer) and the integers/booleans are carried
+// verbatim; only the byte fields are re-encoded. The daemon never invents or alters the
+// certificate's meaning — it is the directory's derivation, surfaced.
+export function normalizeLegibility(raw) {
+    if (!raw || typeof raw !== "object")
+        return undefined;
+    const o = raw;
+    if (o["attests"] !== "receipt")
+        return undefined;
+    const participantsRaw = o["participants"];
+    const finalRaw = o["final_message"];
+    if (!Array.isArray(participantsRaw) || !finalRaw || typeof finalRaw !== "object")
+        return undefined;
+    // Review finding (low): the disclaimer states what the certificate attests; a non-string value
+    // means a malformed/tampered frame, so REJECT the whole cert rather than surface a half-formed one.
+    if (typeof o["disclaimer"] !== "string" || o["disclaimer"].length === 0)
+        return undefined;
+    // Review finding (low): validate attestation_mode against the closed enum — never surface an
+    // arbitrary string from a malformed frame on the cert read surface (defensive parity with the
+    // coerced fields). An out-of-enum value rejects the whole cert.
+    const VALID_MODES = new Set(["live", "recovered", "absent"]);
+    const participants = [];
+    for (const p of participantsRaw) {
+        const pp = p;
+        const mode = pp["attestation_mode"];
+        if (typeof mode !== "string" || !VALID_MODES.has(mode))
+            return undefined;
+        participants.push({
+            pubkey: frameValueToHex(pp["pubkey"]),
+            content_frontier_seq: typeof pp["content_frontier_seq"] === "number" ? pp["content_frontier_seq"] : null,
+            last_authored_seq: typeof pp["last_authored_seq"] === "number" ? pp["last_authored_seq"] : null,
+            attestation_mode: mode,
+        });
+    }
+    const fm = finalRaw;
+    const final_message = {
+        sender_pubkey: frameValueToHex(fm["sender_pubkey"]),
+        seq: typeof fm["seq"] === "number" ? fm["seq"] : null,
+        answered: fm["answered"] === true,
+    };
+    return {
+        attests: "receipt",
+        disclaimer: o["disclaimer"],
+        participants,
+        final_message,
+        /**
+         * ⚠️ `countersigned_through_seq` IS DELIBERATELY NOT SET HERE — `DOD-M15-UNILATERAL-1`, F2.
+         *
+         * It was, computed from the participants just above, and described as "recomputed, cannot be
+         * steered". Those participants come off the WIRE. On a solo seal the certificate's TBS binds no
+         * legibility at all, and the client verifies only the live party's frontier — so the absent
+         * party's numbers, which are exactly the ones that decide this boundary, arrive unchecked.
+         * Deriving from them looked like verification and was arithmetic on somebody else's claim.
+         *
+         * The boundary is stamped by the seal coordinator instead, from this daemon's own signed carry
+         * (`countersignedThroughSeqFromCarry`), where the counterparty's own signature covers both
+         * inputs. Absent here means "not yet derived", and a receipt that reaches persistence without it
+         * says the boundary could not be established rather than guessing one.
+         */
+    };
+}
+//# sourceMappingURL=frame-values.js.map

package/dist/frame-values.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frame-values.js","sourceRoot":"","sources":["../src/frame-values.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,uFAAuF;AACvF,oFAAoF;AACpF,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAAC,CAAU;IACxC,IAAI,CAAC,YAAY,UAAU;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC;AACD,6FAA6F;AAC7F,+FAA+F;AAC/F,2FAA2F;AAC3F,yFAAyF;AACzF,6DAA6D;AAC7D,wFAAwF;AACxF,sEAAsE;AACtE,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACjD,MAAM,eAAe,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACnG,+FAA+F;IAC/F,oGAAoG;IACpG,IAAI,OAAO,CAAC,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1F,6FAA6F;IAC7F,8FAA8F;IAC9F,gEAAgE;IAChE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7D,MAAM,YAAY,GAEb,EAAE,CAAC;IACR,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,CAA4B,CAAC;QACxC,MAAM,IAAI,GAAG,EAAE,CAAC,kBAAkB,CAAC,CAAC;QACpC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACzE,YAAY,CAAC,IAAI,CAAC;YAChB,MAAM,EAAE,eAAe,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;YACrC,oBAAoB,EAAE,OAAO,EAAE,CAAC,sBAAsB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,IAAI;YACxG,iBAAiB,EAAE,OAAO,EAAE,CAAC,mBAAmB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI;YAC/F,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE,GAAG,QAAmC,CAAC;IAC/C,MAAM,aAAa,GAAG;QACpB,aAAa,EAAE,eAAe,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC;QACnD,GAAG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;QACrD,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,IAAI;KAClC,CAAC;IACF,OAAO;QACL,OAAO,EAAE,SAAkB;QAC3B,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC;QAC3B,YAAY;QACZ,aAAa;QACb;;;;;;;;;;;;;WAaG;KACJ,CAAC;AACJ,CAAC"}

package/dist/frontier-mismatch.d.ts

@@ -0,0 +1,73 @@
+/**
+ * DOD-FRONTIER-STRAND-1 AC3 — a frontier mismatch, once seen, STAYS seen.
+ *
+ * Session `dbb93dfc…` sat unsealable for a week and nothing anywhere said so. A close was attempted,
+ * refused with `seal_interrupted_rejected_by_counterparty`, and that was the end of it: the refusal
+ * was a transient string in one command's output. `cello_sessions` went on listing the session as
+ * plain `interrupted` — indistinguishable from one that is merely paused and will seal fine the
+ * moment both parties are online. The operator had no way to tell "waiting" from "will never seal".
+ *
+ * So detection is not the gap; RETENTION is. The two frontiers can only be compared when the two
+ * sides talk, which is the seal attempt — that is inherent, not a defect. What was missing is that
+ * the answer was thrown away the instant it was produced, so the only way to learn the session was
+ * stranded was to attempt another close and read the error again.
+ *
+ * This is in-memory on purpose, and the trade is stated rather than hidden: it survives for the
+ * daemon's lifetime, not across a restart. Persisting it means a client-side schema migration on
+ * every operator's machine (AC3 does not ask for one), and a mismatch is re-detected by the very
+ * next close attempt anyway — so a restart costs one re-detection, never a wrong answer. What it
+ * must never do is report a mismatch that is no longer true, which is why `clear()` exists and the
+ * seal path calls it on success.
+ */
+/** The two frontiers, as the parties reported them, plus where they part company. */
+export interface FrontierMismatch {
+    /** Leaf count on THIS side. */
+    readonly ours: number;
+    /** Leaf count the counterparty reported. */
+    readonly theirs: number;
+    /** First index at which the two records can differ — the shorter side simply stops there. */
+    readonly divergingLeafIndex: number;
+    /** Epoch ms, so the operator can see whether this is fresh or a week old. */
+    readonly observedAtMs: number;
+}
+/**
+ * Eviction is FIFO-BY-WRITE, not LRU (review L2). `record()` refreshes an entry's position;
+ * `get()` does not. Named accurately because the victim differs: a long-lived strand READ daily
+ * but never re-observed is evicted ahead of a fresher unread one. That is acceptable here — a
+ * mismatch is re-recorded on every close attempt, so anything actively being worked on is written,
+ * not merely read — but calling it LRU would set the wrong expectation for whoever tunes it next.
+ */
+export declare class FrontierMismatchStore {
+    #private;
+    /**
+     * Record a mismatch observed during a seal exchange. Overwrites any prior observation for the
+     * same session — the newest numbers are the true ones, and a stale pair would be worse than none.
+     */
+    record(agentName: string, sessionId: string, m: Omit<FrontierMismatch, "observedAtMs">, nowMs: number): void;
+    /** What was observed for this session, or null. */
+    get(agentName: string, sessionId: string): FrontierMismatch | null;
+    /**
+     * Forget a session's mismatch.
+     *
+     * Called when a seal SUCCEEDS: the frontiers evidently agree now, so continuing to flag the
+     * session would be the same defect pointing the other way — an operator told a healthy session is
+     * stranded stops believing the flag, and the next real strand reads as noise.
+     */
+    clear(agentName: string, sessionId: string): void;
+}
+/**
+ * Render a retained mismatch for the session list.
+ *
+ * Extracted rather than left inline in `daemon.ts` so it can be TESTED: the AC asks for a
+ * `cello_sessions` field, and an inline closure inside `buildInterruptedSessions` can only be
+ * reached by standing up a whole daemon and driving a real seal exchange. A pure function is the
+ * honest seam — the store is tested above, this is tested directly, and `daemon.ts` just calls it.
+ */
+export declare function renderFrontierMismatch(m: FrontierMismatch, sessionId: string): {
+    ours: number;
+    theirs: number;
+    divergingLeafIndex: number;
+    observedAt: string;
+    guidance: string;
+};
+//# sourceMappingURL=frontier-mismatch.d.ts.map

package/dist/frontier-mismatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontier-mismatch.d.ts","sourceRoot":"","sources":["../src/frontier-mismatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAC/B,+BAA+B;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6FAA6F;IAC7F,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,6EAA6E;IAC7E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AASD;;;;;;GAMG;AAEH,qBAAa,qBAAqB;;IAOhC;;;OAGG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,cAAc,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAW5G,mDAAmD;IACnD,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAIlE;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;CAGlD;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,CAAC,EAAE,gBAAgB,EACnB,SAAS,EAAE,MAAM,GAChB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAUpG"}

package/dist/frontier-mismatch.js

@@ -0,0 +1,89 @@
+/**
+ * DOD-FRONTIER-STRAND-1 AC3 — a frontier mismatch, once seen, STAYS seen.
+ *
+ * Session `dbb93dfc…` sat unsealable for a week and nothing anywhere said so. A close was attempted,
+ * refused with `seal_interrupted_rejected_by_counterparty`, and that was the end of it: the refusal
+ * was a transient string in one command's output. `cello_sessions` went on listing the session as
+ * plain `interrupted` — indistinguishable from one that is merely paused and will seal fine the
+ * moment both parties are online. The operator had no way to tell "waiting" from "will never seal".
+ *
+ * So detection is not the gap; RETENTION is. The two frontiers can only be compared when the two
+ * sides talk, which is the seal attempt — that is inherent, not a defect. What was missing is that
+ * the answer was thrown away the instant it was produced, so the only way to learn the session was
+ * stranded was to attempt another close and read the error again.
+ *
+ * This is in-memory on purpose, and the trade is stated rather than hidden: it survives for the
+ * daemon's lifetime, not across a restart. Persisting it means a client-side schema migration on
+ * every operator's machine (AC3 does not ask for one), and a mismatch is re-detected by the very
+ * next close attempt anyway — so a restart costs one re-detection, never a wrong answer. What it
+ * must never do is report a mismatch that is no longer true, which is why `clear()` exists and the
+ * seal path calls it on success.
+ */
+/**
+ * Bound: a daemon can hold many sessions over its lifetime and this map is never swept by anything
+ * else. An unstated cap is a silent truncation, so it is named here and enforced by eviction of the
+ * least-recently-written entry.
+ */
+const MAX_TRACKED_SESSIONS = 256;
+/**
+ * Eviction is FIFO-BY-WRITE, not LRU (review L2). `record()` refreshes an entry's position;
+ * `get()` does not. Named accurately because the victim differs: a long-lived strand READ daily
+ * but never re-observed is evicted ahead of a fresher unread one. That is acceptable here — a
+ * mismatch is re-recorded on every close attempt, so anything actively being worked on is written,
+ * not merely read — but calling it LRU would set the wrong expectation for whoever tunes it next.
+ */
+export class FrontierMismatchStore {
+    #byKey = new Map();
+    static #key(agentName, sessionId) {
+        return `${agentName}\u0000${sessionId}`;
+    }
+    /**
+     * Record a mismatch observed during a seal exchange. Overwrites any prior observation for the
+     * same session — the newest numbers are the true ones, and a stale pair would be worse than none.
+     */
+    record(agentName, sessionId, m, nowMs) {
+        const key = FrontierMismatchStore.#key(agentName, sessionId);
+        this.#byKey.delete(key); // re-insert so this session moves to the young end of the eviction order
+        this.#byKey.set(key, { ...m, observedAtMs: nowMs });
+        while (this.#byKey.size > MAX_TRACKED_SESSIONS) {
+            const oldest = this.#byKey.keys().next();
+            if (oldest.done === true)
+                break;
+            this.#byKey.delete(oldest.value);
+        }
+    }
+    /** What was observed for this session, or null. */
+    get(agentName, sessionId) {
+        return this.#byKey.get(FrontierMismatchStore.#key(agentName, sessionId)) ?? null;
+    }
+    /**
+     * Forget a session's mismatch.
+     *
+     * Called when a seal SUCCEEDS: the frontiers evidently agree now, so continuing to flag the
+     * session would be the same defect pointing the other way — an operator told a healthy session is
+     * stranded stops believing the flag, and the next real strand reads as noise.
+     */
+    clear(agentName, sessionId) {
+        this.#byKey.delete(FrontierMismatchStore.#key(agentName, sessionId));
+    }
+}
+/**
+ * Render a retained mismatch for the session list.
+ *
+ * Extracted rather than left inline in `daemon.ts` so it can be TESTED: the AC asks for a
+ * `cello_sessions` field, and an inline closure inside `buildInterruptedSessions` can only be
+ * reached by standing up a whole daemon and driving a real seal exchange. A pure function is the
+ * honest seam — the store is tested above, this is tested directly, and `daemon.ts` just calls it.
+ */
+export function renderFrontierMismatch(m, sessionId) {
+    return {
+        ours: m.ours,
+        theirs: m.theirs,
+        divergingLeafIndex: m.divergingLeafIndex,
+        observedAt: new Date(m.observedAtMs).toISOString(),
+        // Says what is wrong, then what to do, then why it is terminal — an operator reading this on a
+        // week-old session needs all three, and the old refusal gave none of them.
+        guidance: `This session cannot seal: you hold ${m.ours} messages, the counterparty holds ${m.theirs}, and the records diverge at leaf ${m.divergingLeafIndex}. Compare that message on both transcripts with cello_transcript ${sessionId}. A leaf that only one side recorded can never be co-signed.`,
+    };
+}
+//# sourceMappingURL=frontier-mismatch.js.map

package/dist/frontier-mismatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontier-mismatch.js","sourceRoot":"","sources":["../src/frontier-mismatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAcH;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAEjC;;;;;;GAMG;AAEH,MAAM,OAAO,qBAAqB;IACvB,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEtD,MAAM,CAAC,IAAI,CAAC,SAAiB,EAAE,SAAiB;QAC9C,OAAO,GAAG,SAAS,SAAS,SAAS,EAAE,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,SAAiB,EAAE,SAAiB,EAAE,CAAyC,EAAE,KAAa;QACnG,MAAM,GAAG,GAAG,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,yEAAyE;QAClG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,oBAAoB,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;gBAAE,MAAM;YAChC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,GAAG,CAAC,SAAiB,EAAE,SAAiB;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC;IACnF,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAiB,EAAE,SAAiB;QACxC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IACvE,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,CAAmB,EACnB,SAAiB;IAEjB,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;QACxC,UAAU,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE;QAClD,+FAA+F;QAC/F,2EAA2E;QAC3E,QAAQ,EAAE,sCAAsC,CAAC,CAAC,IAAI,qCAAqC,CAAC,CAAC,MAAM,qCAAqC,CAAC,CAAC,kBAAkB,oEAAoE,SAAS,8DAA8D;KACxS,CAAC;AACJ,CAAC"}

package/dist/gateway-config-handlers.d.ts

@@ -0,0 +1,26 @@
+import type { IpcHandler } from "./ipc-server.js";
+import type { Logger } from "./types.js";
+/** The five keys the gateway reads. Kept here so the surface can list them without a store open. */
+export declare const GATEWAY_CONFIG_KEYS: readonly ["autonomous_override", "pii_whitelist", "language_allow", "rate_max_per_window", "rate_window_ms"];
+export interface GatewayConfigHandlerDeps {
+    handlers: Map<string, IpcHandler>;
+    celloDir: string;
+    logger: Logger;
+    /** Read this connection's declared client type — `"mcp"` or `"cli"` (M9B-D15). */
+    getClientType: (connectionId: string) => string | undefined;
+    /**
+     * Restart the screening sidecar so a stored change actually applies (M9B-D17). Supplied by the
+     * composition root, which owns the sidecar's lifecycle. Absent in tests that assert storage only.
+     */
+    restartSecurityGateway?: (correlationId?: string) => Promise<void>;
+}
+/**
+ * Release the held store handles (review F9). Safe in production either way — the bin calls
+ * `process.exit(0)` and a sqlcipher handle blocks nothing — but `stop()` had no way to let go, and
+ * the daemon explicitly supports in-process callers (vitest, embedders) for exactly this class of
+ * leak. MUST run AFTER `onShutdown` tears the sidecar down: while the sidecar lives, closing here
+ * would be the very unlink that F1/F2 is about.
+ */
+export type GatewayConfigDisposer = () => void;
+export declare function registerGatewayConfigHandlers(deps: GatewayConfigHandlerDeps): GatewayConfigDisposer;
+//# sourceMappingURL=gateway-config-handlers.d.ts.map

package/dist/gateway-config-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-config-handlers.d.ts","sourceRoot":"","sources":["../src/gateway-config-handlers.ts"],"names":[],"mappings":"AAyDA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAIzC,oGAAoG;AACpG,eAAO,MAAM,mBAAmB,8GAMtB,CAAC;AAWX,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,aAAa,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAC5D;;;OAGG;IACH,sBAAsB,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpE;AAiED;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC;AAE/C,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,wBAAwB,GAAG,qBAAqB,CAiTnG"}