@cello-protocol/daemon 0.0.227 → 0.0.228

package/dist/retry-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry-queue.js","sourceRoot":"","sources":["../src/retry-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,gEAAgE;AAChE,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AAoFpC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC;AAEzF,MAAM,OAAO,UAAU;IACZ,GAAG,CAAiB;IACpB,OAAO,CAAS;IACzB,uFAAuF;IACvF,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC/C,4DAA4D;IAC5D,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,6EAA6E;IAC7E,SAAS,GAAG,IAAI,GAAG,EAAkC,CAAC;IAEtD,YAAY,EAAkB,EAAE,MAAc;QAC5C,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QAEtB,sEAAsE;QACtE,iGAAiG;QACjG,8FAA8F;QAC9F,sDAAsD;QACtD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;KAqBb,CAAC,CAAC;QACH,+FAA+F;QAC/F,2FAA2F;QAC3F,qDAAqD;QACrD;;;;;;;;WAQG;QACH,KAAK,MAAM,GAAG,IAAI;YAChB,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,EAAE;YACzC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,EAAE;YACzC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE;YACxC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;YACtC,2FAA2F;YAC3F,4FAA4F;YAC5F,kFAAkF;YAClF,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE;SAC3C,EAAE,CAAC;YACF,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,sCAAsC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9E,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBACrC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC;YACrD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;;;KAGb,CAAC,CAAC;QACH,2FAA2F;QAC3F,kGAAkG;QAClG,EAAE;QACF,kGAAkG;QAClG,0FAA0F;QAC1F,2FAA2F;QAC3F,uFAAuF;QACvF,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;;;KAGb,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IACrE,GAAG,CAAC,OAAe,EAAE,SAAiB;QACpC,OAAO,GAAG,OAAO,OAAO,SAAS,EAAE,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CAAC,uPAAuP,CAAC;aAChQ,GAAG,EAeF,CAAC;QAEL,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAEvB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;gBAC3B,4FAA4F;gBAC5F,yFAAyF;gBACzF,8FAA8F;gBAC9F,gGAAgG;gBAChG,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;oBAC1B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE;wBACpD,SAAS,EAAE,GAAG,CAAC,UAAU;wBACzB,KAAK,EAAE,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,SAAS;wBAC5C,MAAM,EAAE,wDAAwD;qBACjE,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,GAAyB;oBAClC,OAAO,EAAE,GAAG,CAAC,QAAQ;oBACrB,SAAS,EAAE,GAAG,CAAC,UAAU;oBACzB,cAAc,EAAE,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,SAAS;oBACrD,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;oBAC9D,yFAAyF;oBACzF,qFAAqF;oBACrF,cAAc,EAAE,GAAG,CAAC,gBAAgB,IAAI,SAAS;oBACjD,cAAc,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS;oBACtF,cAAc,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS;oBACtF,mBAAmB,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS;oBACzF,QAAQ,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;oBACpC,QAAQ,EAAE,GAAG,CAAC,SAAS;oBACvB,QAAQ,EAAE,GAAG,CAAC,QAAQ;iBACvB,CAAC;gBACF,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;gBACnD,qFAAqF;gBACrF,wFAAwF;gBACxF,8EAA8E;gBAC9E,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;gBACxD,IAAI,GAAG,CAAC,QAAQ,GAAG,WAAW;oBAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC7E,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC/B,IAAI,CAAC,CAAC,EAAE,CAAC;oBAAC,CAAC,GAAG,EAAE,CAAC;oBAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBAAC,CAAC;gBAC9C,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACd,SAAS;YACX,CAAC;YAED,sFAAsF;YACtF,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACnE,IAAI,GAAG,CAAC,QAAQ,GAAG,UAAU;gBAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YAExF,MAAM,KAAK,GAAoB;gBAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,QAAQ,EAAE,GAAG,CAAC,SAAS;gBACvB,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAC9D,QAAQ,EAAE,GAAG,CAAC,SAAS;gBACvB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACvB,CAAC;YAEF,IAAI,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACrD,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,YAAY,GAAG,EAAE,CAAC;gBAClB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YAClD,CAAC;YACD,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH;;;OAGG;IACH,SAAS,CAAC,CAAa;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,SAAS,CAAC,CAAa;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,SAAiB,EAAE,KAAiB,EAAE,WAAuB;QACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEpD,IAAI,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,YAAY,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC5C,CAAC;QAED,4CAA4C;QAC5C,IAAI,YAAY,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,iBAAiB;YACjB,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG;qBACL,OAAO,CAAC,+DAA+D,CAAC;qBACxE,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;oBACjD,SAAS;oBACT,KAAK,EAAE,MAAM,CAAC,QAAQ;oBACtB,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC;iBAChC,CAAC,CAAC;YACL,CAAC;YACD,+CAA+C;YAC/C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,uBAAuB,EAAE;gBACzC,SAAS;gBACT,KAAK,EAAE,MAAM,CAAC,QAAQ;gBACtB,UAAU,EAAE,eAAe;aAC5B,CAAC,CAAC;YACH,wBAAwB;YACxB,YAAY,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QAED,wBAAwB;QACxB,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,UAAU,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAEpD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAoB;YAC7B,SAAS;YACT,QAAQ;YACR,WAAW;YACX,QAAQ;YACR,QAAQ,EAAE,CAAC;YACX,QAAQ,EAAE,YAAY;SACvB,CAAC;QAEF,uBAAuB;QACvB,IAAI,CAAC;YACH,IAAI,CAAC,GAAG;iBACL,OAAO,CACN;qCAC2B,CAC5B;iBACA,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;QACnG,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBACjD,SAAS;gBACT,KAAK,EAAE,QAAQ;gBACf,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC;aAChC,CAAC,CAAC;YACH,qEAAqE;QACvE,CAAC;QAED,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE;YACxC,SAAS;YACT,KAAK,EAAE,QAAQ;YACf,UAAU,EAAE,YAAY,CAAC,MAAM;SAChC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,MAAgB;QACpD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,CAAC;QACX,CAAC;QAED,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,sEAAsE;QACtE,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAE/C,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACtB,uEAAuE;gBACvE,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,IAAI,CAAC,GAAG;yBACL,OAAO,CAAC,4EAA4E,CAAC;yBACrF,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACpD,CAAC;gBAAC,OAAO,GAAY,EAAE,CAAC;oBACtB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;wBACjD,SAAS;wBACT,KAAK,EAAE,KAAK,CAAC,QAAQ;wBACrB,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC;qBAChC,CAAC,CAAC;gBACL,CAAC;gBACD,+DAA+D;gBAC/D,MAAM;YACR,CAAC;YAED,0BAA0B;YAC1B,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG;qBACL,OAAO,CAAC,gEAAgE,CAAC;qBACzE,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACpC,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;oBACjD,SAAS;oBACT,KAAK,EAAE,KAAK,CAAC,QAAQ;oBACrB,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC;iBAChC,CAAC,CAAC;YACL,CAAC;YAED,qBAAqB;YACrB,YAAY,CAAC,KAAK,EAAE,CAAC;YAErB,iCAAiC;YACjC,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;YAEzC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE;gBAC3C,SAAS;gBACT,KAAK,EAAE,KAAK,CAAC,QAAQ;gBACrB,aAAa;aACd,CAAC,CAAC;YAEH,SAAS,EAAE,CAAC;QACd,CAAC;QAED,6BAA6B;QAC7B,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,mBAAmB,CAAC,SAAiB,EAAE,cAAsC;QAC3E,gGAAgG;QAChG,4FAA4F;QAC5F,6FAA6F;QAC7F,8FAA8F;QAC9F,+FAA+F;QAC/F,OAAO;QACP,IAAI,MAAoC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,GAAG;iBACd,OAAO,CAAC,6EAA6E,CAAC;iBACtF,GAAG,CAAC,SAAS,CAA4C,CAAC;QAC/D,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBACjD,SAAS;gBACT,SAAS,EAAE,sBAAsB;gBACjC,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC;gBAC/B,MAAM,EAAE,uFAAuF;aAChG,CAAC,CAAC;YACH,OAAO,CAAC,CAAC;QACX,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,6FAA6F;YAC7F,4FAA4F;YAC5F,0EAA0E;YAC1E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/B,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzC,OAAO,CAAC,CAAC;QACX,CAAC;QAED,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG;iBACpB,OAAO,CAAC,mEAAmE,CAAC;iBAC5E,GAAG,CAAC,SAAS,CAA6C,CAAC;YAC9D,4FAA4F;YAC5F,6FAA6F;YAC7F,kEAAkE;YAClE,IAAI,MAAM,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;gBAClC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;oBACjD,SAAS;oBACT,SAAS,EAAE,sBAAsB;oBACjC,KAAK,EAAE,0CAA0C;oBACjD,MAAM,EAAE,6EAA6E;iBACtF,CAAC,CAAC;YACL,CAAC;YACD,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,yFAAyF;YACzF,0EAA0E;YAC1E,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBACjD,SAAS;gBACT,SAAS,EAAE,sBAAsB;gBACjC,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC;gBAC/B,MAAM,EAAE,6EAA6E;aACtF,CAAC,CAAC;YACH,OAAO,CAAC,CAAC;QACX,CAAC;QAED,+FAA+F;QAC/F,oDAAoD;QACpD,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oCAAoC,EAAE;gBACtD,SAAS;gBACT,KAAK,EAAE,GAAG,CAAC,SAAS;gBACpB,MAAM,EAAE,cAAc;gBACtB,MAAM,EAAE,2FAA2F;aACpG,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEzC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,EAAE;YAC7C,SAAS;YACT,UAAU,EAAE,OAAO;YACnB,MAAM,EAAE,cAAc;SACvB,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,2BAA2B;QACzB,IAAI,IAAmD,CAAC;QACxD,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,GAAG;iBACZ,OAAO,CACN;;;;sDAI4C,CAC7C;iBACA,GAAG,EAA8D,CAAC;QACvE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBACjD,SAAS,EAAE,4BAA4B;gBACvC,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC;gBAC/B,MAAM,EAAE,gFAAgF;aACzF,CAAC,CAAC;YACH,OAAO,CAAC,CAAC;QACX,CAAC;QAED,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,KAAK,IAAI,IAAI,CAAC,mBAAmB,CAC/B,GAAG,CAAC,UAAU,EACd,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CACjD,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,uCAAuC,EAAE;gBACzD,YAAY,EAAE,IAAI,CAAC,MAAM;gBACzB,UAAU,EAAE,KAAK;aAClB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mDAAmD;IACnD,aAAa;QACX,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;QACxB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gDAAgD;IAChD,eAAe,CAAC,SAAiB;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;IAClD,CAAC;IAED,+FAA+F;IAC/F,iBAAiB,CAAC,SAAiB;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjC,CAAC;IAED,4CAA4C;IAE5C;;;;OAIG;IACH;;;;;;OAMG;IACH;;;;;;;;;OASG;IACH,sBAAsB,CAAC,OAAe,EAAE,SAAiB,EAAE,WAAuB,EAAE,WAAuB,EAAE,cAAsC,EAAE,cAAsC,EAAE,cAAkC,EAAE,mBAAgC,EAAE,QAAiB;QAClR,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACvF,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC,EAAE,CAAC;YAAC,CAAC,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QAC9C,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,cAAc,CAAC,EAAE,CAAC;YACvD,8FAA8F;YAC9F,6FAA6F;YAC7F,6FAA6F;YAC7F,yFAAyF;YACzF,mFAAmF;YACnF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,+BAA+B,EAAE;gBACjD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc;gBAC/C,MAAM,EAAE,wFAAwF;aACjG,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,UAAU,GAAG,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE5B,iGAAiG;QACjG,kGAAkG;QAClG,gGAAgG;QAChG,+FAA+F;QAC/F,gGAAgG;QAChG,IAAI,CAAC;YACH,IAAI,CAAC,GAAG;iBACL,OAAO,CACN;6DACmD,CACpD;iBACA,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,cAAc,EACnH,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,EACnD,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,EACnD,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,EAC7D,QAAQ,IAAI,IAAI,EAChB,cAAc,IAAI,IAAI,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBACjD,OAAO;gBACP,SAAS;gBACT,KAAK,EAAE,cAAc;gBACrB,KAAK,EAAE,MAAM;gBACb,MAAM,EAAE,2EAA2E;aACpF,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChI,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qEAAqE;IACrE,gBAAgB,CAAC,OAAe,EAAE,SAAiB,EAAE,WAAuB;QAC1E,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,CAAC;YACN,MAAM,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,cAAc,CAAC,CAAC;YACpE,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,GAAG;iBACL,OAAO,CAAC,6GAA6G,CAAC;iBACtH,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBACjD,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC;aAClE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,gBAAgB,CAAC,OAAe,EAAE,SAAiB;QACjD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;IACvE,CAAC;IAED,mGAAmG;IACnG,mBAAmB;QACjB,MAAM,GAAG,GAAkD,EAAE,CAAC;QAC9D,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAe,EACf,SAAiB,EACjB,MAAc;IACd;;;;;;;;OAQG;IACH,YAA6C;QAE7C,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QACnC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC3B,IAAI,MAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9D,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;oBACjE,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;gBACnE,CAAC;gBACD,yEAAyE;gBACzE,yEAAyE;gBACzE,4FAA4F;gBAC5F,4FAA4F;gBAC5F,cAAc;gBACd,IAAI,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC9C,yFAAyF;oBACzF,yFAAyF;oBACzF,sEAAsE;oBACtE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE;wBAC3C,OAAO;wBACP,SAAS;wBACT,WAAW,EAAE,KAAK,CAAC,cAAc;wBACjC,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,MAAM,EAAE,wIAAwI;qBACjJ,CAAC,CAAC;oBACH,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC9B,IAAI,IAAI,KAAK,CAAC,CAAC;wBAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;oBACnC,IAAI,CAAC;wBACH,IAAI,CAAC,GAAG;6BACL,OAAO,CAAC,6GAA6G,CAAC;6BACtH,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;oBACnD,CAAC;oBAAC,OAAO,GAAY,EAAE,CAAC;wBACtB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;4BACjD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,qBAAqB;4BACjF,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC;4BAC/B,MAAM,EAAE,2EAA2E;yBACpF,CAAC,CAAC;oBACL,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE;oBACvC,OAAO;oBACP,SAAS;oBACT,WAAW,EAAE,KAAK,CAAC,cAAc;oBACjC,KAAK,EAAE,MAAM,CAAC,KAAK;iBACpB,CAAC,CAAC;gBACH,SAAS,CAAC,0CAA0C;YACtD,CAAC;YACD,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG;qBACL,OAAO,CAAC,6GAA6G,CAAC;qBACtH,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;YACnD,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;oBACjD,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC;iBACxE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,CAAC,CAAC;QACd,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9C,wEAAwE;QACxE,IAAI,eAAe,GAAG,CAAC;YAAE,YAAY,EAAE,CAAC,eAAe,CAAC,CAAC;QACzD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/roster-freshness.d.ts

@@ -0,0 +1,160 @@
+/**
+ * DOD-M15-STALEROSTER-1 — a directory-roster reading that refuses to present itself as current.
+ *
+ * ─── The defect, measured twice on two machines ────────────────────────────────────────────────
+ *
+ * Both daemons displayed directory node failures from minutes long past while `curl` reached all
+ * three nodes in 37–184 ms. The operator debugs an outage that ended before they looked.
+ *
+ * ─── The cause, CORRECTED after review ─────────────────────────────────────────────────────────
+ *
+ * This file first said the sweep had ONE caller — the failover path — and therefore ran only while
+ * the daemon was unhealthy. **That is false, and a thirty-second grep falsifies it.**
+ * `resolveConsortiumRoster` has ten callers: the failover resolver, four session and seal ceremony
+ * handlers, the seal auto-ack broker reconnect, `cello_refresh`, `cello_get_submission_results`,
+ * three cross-node session-setup paths, and the seal broker.
+ *
+ * The real shape is **an IDLE daemon never re-measures**. Every one of those callers is
+ * activity-driven, so the reading is refreshed by ceremonies and session setup and by nothing else.
+ * A daemon that sits still — which is what a daemon does between conversations — keeps the reading
+ * it was seeded with at boot, for as long as it stays still. The measured symptom is that startup
+ * seeded a failing reading and nothing happened afterwards to overwrite it.
+ *
+ * The fix is unchanged by the correction: a time-driven sweep is exactly what an activity-driven
+ * producer lacks. But the wrong map had a cost — believing there was a single writer is why the
+ * concurrent-sweep race below was not considered until review found it.
+ *
+ * ─── Two halves, because "no reading" and "an old reading" are different lies ───────────────────
+ *
+ * 1. `startRosterSweep` keeps measuring on a slow timer even when everything is healthy, so the
+ *    reading cannot freeze.
+ * 2. `classifyRosterReading` / `describeRosterFreshness` make the reading state its own age, so a
+ *    sweep that has stopped (or never started) is visible rather than inferred.
+ *
+ * The line rules out the tempting third option: *"Do not fix it by hiding the field when stale —
+ * absent and healthy must not look alike."* Suppressing a stale block trades a wrong answer for no
+ * answer, and no answer renders exactly like health.
+ *
+ * ─── Why "no reading" is a distinct kind, and the SECOND thing review corrected ─────────────────
+ *
+ * This file also claimed an EXPIRED manifest reaches the unmeasured state. It does not: a daemon
+ * whose manifest fails verification **refuses to start** (`daemon.ts`, ADV-002 — "an operator who
+ * configures manifestProvider has opted INTO manifest enforcement"). Not-yet-valid, rollback and
+ * load-failure are the same. Shipping that sentence in operator guidance sent the reader hunting a
+ * manifest problem, through a log family that has no lines on the only path that can actually get
+ * here. Error substitution, in brand-new prose, inside the fix for error substitution.
+ *
+ * The one reachable route is **no manifest provider at all**, and it is DESIGNED and BENIGN:
+ * `manifest-deps.ts` returns `{}` when `CELLO_DIRECTORY_URL` is not byte-equal to a bundled
+ * endpoint — local dev, the e2e harness, or an operator who used a DNS hostname for a bundled node.
+ * So it gets its own kind and its own calm wording. Treating it as an alarm would fire on every
+ * local run and every harness spin-up: a signal on the designed normal case, which this same file
+ * forbids two paragraphs down.
+ *
+ * Both kinds still EMIT — the line rules out hiding the field, because absent and healthy must not
+ * look alike. What changes between them is what the operator is told to do about it.
+ */
+export declare const ROSTER_STALE_AFTER_MS: number;
+/** How often the background sweep re-measures. Comfortably inside `ROSTER_STALE_AFTER_MS`. */
+export declare const ROSTER_SWEEP_INTERVAL_MS = 90000;
+export type RosterReading = {
+    kind: "never_measured";
+} | {
+    kind: "fresh";
+    sweptAt: string;
+    ageMs: number;
+} | {
+    kind: "stale";
+    sweptAt: string;
+    ageMs: number;
+};
+/**
+ * How old is this reading, and may it still speak in the present tense?
+ *
+ * Pure and clock-injected: `nowMs` is a parameter so the boundary can be tested exactly rather than
+ * approximately, and so a test never has to sleep.
+ */
+export declare function classifyRosterReading(sweptAt: string | null, nowMs: number, staleAfterMs?: number): RosterReading;
+export interface RosterFreshness {
+    /** ISO timestamp of the reading, or null when nothing has ever been measured. */
+    checked_at: string | null;
+    /** Whole seconds since the reading, or null when there is no reading (or its age is unknowable). */
+    age_seconds: number | null;
+    /** True when this reading must not be read as the present tense. */
+    stale: boolean;
+    /**
+     * WHICH of the non-current states this is, because they call for different responses:
+     *   `current`         — measured recently; the only state that may speak in the present tense.
+     *   `stale`           — measured, too long ago to be trusted as now.
+     *   `never`           — a manifest IS configured but no sweep has completed yet.
+     *   `not_configured`  — no consortium manifest, so there is no roster to measure. DESIGNED.
+     */
+    measurement: "current" | "stale" | "never" | "not_configured";
+    /** Present ONLY when the reading is not current — a flag on every reading is not a flag. */
+    freshness_guidance?: string;
+    /**
+     * The last sweep failure, when the background sweep is erroring — DOD-M15-STALEROSTER-1 review F4.
+     *
+     * The log alone was not enough: a sweep failing every 90–180 s leaves the reading inside its
+     * 5-minute freshness bound for the first two or three failures, so the block reports
+     * `stale: false` and hands over a frozen reading as current. That is the defect this whole line
+     * exists to end, arriving through the new code's own failure path. The agent response carries the
+     * cause, and the log line stays.
+     */
+    last_sweep_error?: {
+        event: string;
+        error: string;
+        at: string;
+        consecutive: number;
+    };
+}
+/**
+ * Render a reading's age for an operator-facing response.
+ *
+ * A FRESH reading is deliberately left undecorated. A staleness marker attached to every reading
+ * fires on the ordinary case, which is the failure this milestone keeps re-finding: it is not a
+ * signal, and it teaches the reader to skip past the one that is real.
+ */
+export declare function describeRosterFreshness(reading: RosterReading, opts?: {
+    manifestConfigured: boolean;
+    lastSweepError?: RosterFreshness["last_sweep_error"];
+}): RosterFreshness;
+/** Minimal structural logger — `domain.noun.verb` taxonomy, injected, never imported. */
+export interface RosterSweepLogger {
+    info(event: string, ctx?: Record<string, unknown>): void;
+    warn(event: string, ctx?: Record<string, unknown>): void;
+    error(event: string, ctx?: Record<string, unknown>): void;
+}
+export interface RosterSweepScheduler {
+    scheduleNext(callbackFn: () => Promise<void>): void;
+    cancel(): void;
+}
+/**
+ * Keep measuring directory reachability on a slow timer, whether or not anything is broken.
+ *
+ * This is the half that actually fixes the freeze: every existing caller of the sweep is
+ * activity-driven (ceremonies, session setup, `cello_refresh`), so an IDLE daemon never
+ * re-measures — and sitting idle is what a daemon does between conversations. A time-driven sweep
+ * is precisely what an activity-driven producer lacks.
+ *
+ * Mirrors `startHttpManifestPoll`'s shape deliberately — same re-arm discipline, same
+ * never-throw-out-of-the-tick rule, same stop function.
+ */
+export declare function startRosterSweep(opts: {
+    scheduler: RosterSweepScheduler;
+    sweep: () => Promise<unknown>;
+    logger: RosterSweepLogger;
+    /**
+     * REVIEW F4 — where a sweep failure becomes visible to the AGENT, not only to the log.
+     *
+     * Invariant 2 asks for both, and the log alone was measurably not enough here: the freshness
+     * bound is five minutes and the sweep runs every 90–180 s, so the first two or three consecutive
+     * failures all land while the reading still reports `stale: false`. The operator is handed a
+     * frozen reading presented as current — this line's own defect, arriving through the fix's
+     * failure path. The bound that prevents flapping is the same window that blinds it.
+     */
+    onSweepError?: (e: NonNullable<RosterFreshness["last_sweep_error"]>) => void;
+    onSweepSuccess?: () => void;
+    now?: () => number;
+}): () => void;
+//# sourceMappingURL=roster-freshness.d.ts.map

package/dist/roster-freshness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roster-freshness.d.ts","sourceRoot":"","sources":["../src/roster-freshness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAYH,eAAO,MAAM,qBAAqB,QAAa,CAAC;AAEhD,8FAA8F;AAC9F,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAE/C,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAC1B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,KAAK,EAAE,MAAM,EACb,YAAY,GAAE,MAA8B,GAC3C,aAAa,CAkBf;AAED,MAAM,WAAW,eAAe;IAC9B,iFAAiF;IACjF,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,oGAAoG;IACpG,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,oEAAoE;IACpE,KAAK,EAAE,OAAO,CAAC;IACf;;;;;;OAMG;IACH,WAAW,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,gBAAgB,CAAC;IAC9D,4FAA4F;IAC5F,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CACtF;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,aAAa,EACtB,IAAI,GAAE;IAAE,kBAAkB,EAAE,OAAO,CAAC;IAAC,cAAc,CAAC,EAAE,eAAe,CAAC,kBAAkB,CAAC,CAAA;CAExF,GACA,eAAe,CA2EjB;AAED,yFAAyF;AACzF,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzD,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzD,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3D;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,CAAC,UAAU,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACpD,MAAM,IAAI,IAAI,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,SAAS,EAAE,oBAAoB,CAAC;IAChC,KAAK,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,EAAE,iBAAiB,CAAC;IAC1B;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW,CAAC,eAAe,CAAC,kBAAkB,CAAC,CAAC,KAAK,IAAI,CAAC;IAC7E,cAAc,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,MAAM,IAAI,CAiEb"}

package/dist/roster-freshness.js

@@ -0,0 +1,250 @@
+/**
+ * DOD-M15-STALEROSTER-1 — a directory-roster reading that refuses to present itself as current.
+ *
+ * ─── The defect, measured twice on two machines ────────────────────────────────────────────────
+ *
+ * Both daemons displayed directory node failures from minutes long past while `curl` reached all
+ * three nodes in 37–184 ms. The operator debugs an outage that ended before they looked.
+ *
+ * ─── The cause, CORRECTED after review ─────────────────────────────────────────────────────────
+ *
+ * This file first said the sweep had ONE caller — the failover path — and therefore ran only while
+ * the daemon was unhealthy. **That is false, and a thirty-second grep falsifies it.**
+ * `resolveConsortiumRoster` has ten callers: the failover resolver, four session and seal ceremony
+ * handlers, the seal auto-ack broker reconnect, `cello_refresh`, `cello_get_submission_results`,
+ * three cross-node session-setup paths, and the seal broker.
+ *
+ * The real shape is **an IDLE daemon never re-measures**. Every one of those callers is
+ * activity-driven, so the reading is refreshed by ceremonies and session setup and by nothing else.
+ * A daemon that sits still — which is what a daemon does between conversations — keeps the reading
+ * it was seeded with at boot, for as long as it stays still. The measured symptom is that startup
+ * seeded a failing reading and nothing happened afterwards to overwrite it.
+ *
+ * The fix is unchanged by the correction: a time-driven sweep is exactly what an activity-driven
+ * producer lacks. But the wrong map had a cost — believing there was a single writer is why the
+ * concurrent-sweep race below was not considered until review found it.
+ *
+ * ─── Two halves, because "no reading" and "an old reading" are different lies ───────────────────
+ *
+ * 1. `startRosterSweep` keeps measuring on a slow timer even when everything is healthy, so the
+ *    reading cannot freeze.
+ * 2. `classifyRosterReading` / `describeRosterFreshness` make the reading state its own age, so a
+ *    sweep that has stopped (or never started) is visible rather than inferred.
+ *
+ * The line rules out the tempting third option: *"Do not fix it by hiding the field when stale —
+ * absent and healthy must not look alike."* Suppressing a stale block trades a wrong answer for no
+ * answer, and no answer renders exactly like health.
+ *
+ * ─── Why "no reading" is a distinct kind, and the SECOND thing review corrected ─────────────────
+ *
+ * This file also claimed an EXPIRED manifest reaches the unmeasured state. It does not: a daemon
+ * whose manifest fails verification **refuses to start** (`daemon.ts`, ADV-002 — "an operator who
+ * configures manifestProvider has opted INTO manifest enforcement"). Not-yet-valid, rollback and
+ * load-failure are the same. Shipping that sentence in operator guidance sent the reader hunting a
+ * manifest problem, through a log family that has no lines on the only path that can actually get
+ * here. Error substitution, in brand-new prose, inside the fix for error substitution.
+ *
+ * The one reachable route is **no manifest provider at all**, and it is DESIGNED and BENIGN:
+ * `manifest-deps.ts` returns `{}` when `CELLO_DIRECTORY_URL` is not byte-equal to a bundled
+ * endpoint — local dev, the e2e harness, or an operator who used a DNS hostname for a bundled node.
+ * So it gets its own kind and its own calm wording. Treating it as an alarm would fire on every
+ * local run and every harness spin-up: a signal on the designed normal case, which this same file
+ * forbids two paragraphs down.
+ *
+ * Both kinds still EMIT — the line rules out hiding the field, because absent and healthy must not
+ * look alike. What changes between them is what the operator is told to do about it.
+ */
+/**
+ * How old a reading may be before it stops claiming the present tense.
+ *
+ * Five minutes is chosen against the SWEEP interval, not against operator patience: the sweep is
+ * slow by design (it probes every node in the consortium), so the bound has to be comfortably
+ * longer than one sweep period or a healthy daemon would flap between fresh and stale between
+ * ticks. It is the answer to "could this have changed without us noticing", and at five minutes the
+ * answer is still usually no.
+ */
+import { extractErrorMessage } from "./error-message.js";
+export const ROSTER_STALE_AFTER_MS = 5 * 60_000;
+/** How often the background sweep re-measures. Comfortably inside `ROSTER_STALE_AFTER_MS`. */
+export const ROSTER_SWEEP_INTERVAL_MS = 90_000;
+/**
+ * How old is this reading, and may it still speak in the present tense?
+ *
+ * Pure and clock-injected: `nowMs` is a parameter so the boundary can be tested exactly rather than
+ * approximately, and so a test never has to sleep.
+ */
+export function classifyRosterReading(sweptAt, nowMs, staleAfterMs = ROSTER_STALE_AFTER_MS) {
+    // No measurement at all — a different fact from an old measurement, and the only one that can
+    // hide an expired manifest. See the header.
+    if (sweptAt === null)
+        return { kind: "never_measured" };
+    const takenMs = Date.parse(sweptAt);
+    // An unparseable timestamp is a reading whose age cannot be established. FRESH is the one answer
+    // that must never be reachable by accident — it is the claim that costs the operator an
+    // investigation — so anything unmeasurable falls to stale.
+    if (Number.isNaN(takenMs))
+        return { kind: "stale", sweptAt, ageMs: Number.NaN };
+    const ageMs = nowMs - takenMs;
+    // A reading from the FUTURE is not infinitely fresh. Clock skew, a restored snapshot or an
+    // operator moving the system clock would otherwise satisfy the freshness bound forever — the
+    // freeze this whole unit exists to end, arriving by a different door.
+    if (ageMs < 0)
+        return { kind: "stale", sweptAt, ageMs };
+    return ageMs > staleAfterMs ? { kind: "stale", sweptAt, ageMs } : { kind: "fresh", sweptAt, ageMs };
+}
+/**
+ * Render a reading's age for an operator-facing response.
+ *
+ * A FRESH reading is deliberately left undecorated. A staleness marker attached to every reading
+ * fires on the ordinary case, which is the failure this milestone keeps re-finding: it is not a
+ * signal, and it teaches the reader to skip past the one that is real.
+ */
+export function describeRosterFreshness(reading, opts = {
+    manifestConfigured: true,
+}) {
+    const errorField = opts.lastSweepError ? { last_sweep_error: opts.lastSweepError } : {};
+    if (reading.kind === "never_measured") {
+        // DESIGNED AND BENIGN — the calm branch. Firing an alarm here would fire it on every local-dev
+        // daemon and every e2e-harness spin-up, which is a signal on the normal case.
+        if (!opts.manifestConfigured) {
+            return {
+                checked_at: null,
+                age_seconds: null,
+                stale: false,
+                measurement: "not_configured",
+                freshness_guidance: "Directory reachability is NOT MEASURED on this daemon because no consortium manifest is " +
+                    "configured, so there is no node roster to probe. This is expected in local development " +
+                    "and in the e2e harness. It also happens against a real directory when " +
+                    "CELLO_DIRECTORY_URL is not byte-equal to a bundled endpoint — a DNS hostname for a " +
+                    "bundled node does NOT match, and turns this off along with directory identity " +
+                    "authentication. Look for daemon.manifest.bundled.skipped in the log; if it is there with " +
+                    "a non-local URL, this client is weaker than you think it is. The empty node list below " +
+                    "is the absence of a measurement, not a clean bill of health.",
+                ...errorField,
+            };
+        }
+        return {
+            checked_at: null,
+            age_seconds: null,
+            stale: true,
+            measurement: "never",
+            freshness_guidance: "A consortium manifest IS configured, but no directory-reachability sweep has completed " +
+                "yet, so the absence of failures below is not evidence of health — nothing has finished " +
+                "looking. Immediately after startup this is normal and resolves within a couple of minutes. " +
+                "If it persists, the background sweep is not completing: look for " +
+                "directory.roster.sweep.failed in the log, and see last_sweep_error here if it is present.",
+            ...errorField,
+        };
+    }
+    if (reading.kind === "fresh") {
+        return {
+            checked_at: reading.sweptAt,
+            age_seconds: Math.floor(reading.ageMs / 1000),
+            stale: false,
+            measurement: "current",
+            ...errorField,
+        };
+    }
+    const ageKnown = Number.isFinite(reading.ageMs) && reading.ageMs >= 0;
+    return {
+        checked_at: reading.sweptAt,
+        age_seconds: ageKnown ? Math.floor(reading.ageMs / 1000) : null,
+        stale: true,
+        measurement: "stale",
+        freshness_guidance: (ageKnown
+            ? `This reading is ${Math.floor(reading.ageMs / 1000)} seconds old. `
+            : `This reading's age could not be established (checked_at is ${Number.isNaN(reading.ageMs) ? "unparseable" : "in the future — check the system clock"}). `) +
+            "Anything reported below MAY NO LONGER BE TRUE: the nodes listed may already have recovered. " +
+            "Do not begin an investigation from it — this has been measured twice, on two machines, where " +
+            "a daemon showed node failures from minutes past while all three nodes answered in under " +
+            "200 ms. " +
+            // REVIEW F12: the first draft said "the background sweep has stopped; look for
+            // directory.roster.sweep.failed" — but the likeliest cause by far is a laptop that slept,
+            // where the sweep did not FAIL, it did not RUN, and that log line will not be there. Sending
+            // the operator to look for a line that cannot exist is the same substitution as F1, smaller.
+            "The sweep did not complete on schedule. Two causes: the process was suspended (a laptop " +
+            "asleep is the common one, and needs nothing — the next sweep corrects it), or the sweep is " +
+            "erroring, in which case last_sweep_error appears above and directory.roster.sweep.failed is " +
+            "in the log.",
+        ...errorField,
+    };
+}
+/**
+ * Keep measuring directory reachability on a slow timer, whether or not anything is broken.
+ *
+ * This is the half that actually fixes the freeze: every existing caller of the sweep is
+ * activity-driven (ceremonies, session setup, `cello_refresh`), so an IDLE daemon never
+ * re-measures — and sitting idle is what a daemon does between conversations. A time-driven sweep
+ * is precisely what an activity-driven producer lacks.
+ *
+ * Mirrors `startHttpManifestPoll`'s shape deliberately — same re-arm discipline, same
+ * never-throw-out-of-the-tick rule, same stop function.
+ */
+export function startRosterSweep(opts) {
+    const { scheduler, sweep, logger, onSweepError, onSweepSuccess, now = Date.now } = opts;
+    let stopped = false;
+    let consecutive = 0;
+    const tick = async () => {
+        if (stopped)
+            return;
+        try {
+            await sweep();
+            /**
+             * RE-CHECK AFTER THE AWAIT — review F10, partial.
+             *
+             * A sweep takes up to ~16 s with a node down, so a `stop()` landing mid-sweep is ordinary,
+             * not exotic. Without this the completing sweep still fires its callbacks and still logs,
+             * against a daemon that has already reported itself stopped — which in-process means writing
+             * through a logger whose test has finished, and in production means status side effects after
+             * teardown.
+             *
+             * This does NOT abort the outbound probes: `fetchBootstrapResult` owns a per-request
+             * AbortController for its own deadline and takes no external signal, so cancelling them means
+             * threading one through `manifestNodesToEndpoints`. Carried as
+             * `DOD-M15-SWEEP-ABORT-1` rather than done here — the probes are read-only GETs against
+             * `/bootstrap` and the process is exiting; what mattered was not acting on the result.
+             */
+            if (stopped)
+                return;
+            consecutive = 0;
+            onSweepSuccess?.();
+        }
+        catch (err) {
+            if (stopped)
+                return;
+            consecutive++;
+            onSweepError?.({
+                event: "directory.roster.sweep.failed",
+                error: extractErrorMessage(err),
+                at: new Date(now()).toISOString(),
+                consecutive,
+            });
+            /**
+             * LOUD, and then RE-ARMED. Swallowing this would leave the reading frozen with nothing
+             * saying measurement had stopped — the original defect, silently reintroduced. Skipping the
+             * re-arm would do the same thing more permanently: one bad probe and the clock stops for the
+             * life of the process.
+             *
+             * The upstream cause is carried into the log rather than replaced with a label, because
+             * "the sweep failed" does not tell an operator whether their resolver is down, their network
+             * is gone, or a node is refusing them.
+             */
+            logger.error("directory.roster.sweep.failed", {
+                error: extractErrorMessage(err),
+                impact: "directory reachability was not re-measured this cycle, so cello_status is answering " +
+                    "from an older reading. It will say so: a reading past its bound reports stale:true.",
+                guidance: "If this repeats, the roster reading in cello_status cannot be trusted as current — " +
+                    "check DNS resolution for the directory endpoints from this machine.",
+            });
+        }
+        // OUTSIDE the try. A re-arm that lives in the success path is how a sweep stops forever.
+        if (!stopped)
+            scheduler.scheduleNext(tick);
+    };
+    scheduler.scheduleNext(tick);
+    return () => {
+        stopped = true;
+        scheduler.cancel();
+    };
+}
+//# sourceMappingURL=roster-freshness.js.map

package/dist/roster-freshness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roster-freshness.js","sourceRoot":"","sources":["../src/roster-freshness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAEH;;;;;;;;GAQG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAG,MAAM,CAAC;AAEhD,8FAA8F;AAC9F,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAO/C;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAsB,EACtB,KAAa,EACb,eAAuB,qBAAqB;IAE5C,8FAA8F;IAC9F,4CAA4C;IAC5C,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;IAExD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,iGAAiG;IACjG,wFAAwF;IACxF,2DAA2D;IAC3D,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;IAEhF,MAAM,KAAK,GAAG,KAAK,GAAG,OAAO,CAAC;IAC9B,2FAA2F;IAC3F,6FAA6F;IAC7F,sEAAsE;IACtE,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAExD,OAAO,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACtG,CAAC;AA+BD;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAsB,EACtB,OAA8F;IAC5F,kBAAkB,EAAE,IAAI;CACzB;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAExF,IAAI,OAAO,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACtC,+FAA+F;QAC/F,8EAA8E;QAC9E,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,OAAO;gBACL,UAAU,EAAE,IAAI;gBAChB,WAAW,EAAE,IAAI;gBACjB,KAAK,EAAE,KAAK;gBACZ,WAAW,EAAE,gBAAgB;gBAC7B,kBAAkB,EAChB,0FAA0F;oBAC1F,yFAAyF;oBACzF,wEAAwE;oBACxE,qFAAqF;oBACrF,gFAAgF;oBAChF,2FAA2F;oBAC3F,yFAAyF;oBACzF,8DAA8D;gBAChE,GAAG,UAAU;aACd,CAAC;QACJ,CAAC;QACD,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,OAAO;YACpB,kBAAkB,EAChB,yFAAyF;gBACzF,yFAAyF;gBACzF,6FAA6F;gBAC7F,mEAAmE;gBACnE,2FAA2F;YAC7F,GAAG,UAAU;SACd,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO;YACL,UAAU,EAAE,OAAO,CAAC,OAAO;YAC3B,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;YAC7C,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,SAAS;YACtB,GAAG,UAAU;SACd,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;IACtE,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,OAAO;QAC3B,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QAC/D,KAAK,EAAE,IAAI;QACX,WAAW,EAAE,OAAO;QACpB,kBAAkB,EAChB,CAAC,QAAQ;YACP,CAAC,CAAC,mBAAmB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,gBAAgB;YACrE,CAAC,CAAC,8DACE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,wCAChD,KAAK,CAAC;YACV,8FAA8F;YAC9F,+FAA+F;YAC/F,0FAA0F;YAC1F,UAAU;YACV,+EAA+E;YAC/E,0FAA0F;YAC1F,6FAA6F;YAC7F,6FAA6F;YAC7F,0FAA0F;YAC1F,6FAA6F;YAC7F,8FAA8F;YAC9F,aAAa;QACf,GAAG,UAAU;KACd,CAAC;AACJ,CAAC;AAcD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAgBhC;IACC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACxF,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACrC,IAAI,OAAO;YAAE,OAAO;QACpB,IAAI,CAAC;YACH,MAAM,KAAK,EAAE,CAAC;YACd;;;;;;;;;;;;;;eAcG;YACH,IAAI,OAAO;gBAAE,OAAO;YACpB,WAAW,GAAG,CAAC,CAAC;YAChB,cAAc,EAAE,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,OAAO;gBAAE,OAAO;YACpB,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;gBACb,KAAK,EAAE,+BAA+B;gBACtC,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC;gBAC/B,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;gBACjC,WAAW;aACZ,CAAC,CAAC;YACH;;;;;;;;;eASG;YACH,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;gBAC5C,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC;gBAC/B,MAAM,EACJ,sFAAsF;oBACtF,qFAAqF;gBACvF,QAAQ,EACN,qFAAqF;oBACrF,qEAAqE;aACxE,CAAC,CAAC;QACL,CAAC;QACD,yFAAyF;QACzF,IAAI,CAAC,OAAO;YAAE,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,GAAG,EAAE;QACV,OAAO,GAAG,IAAI,CAAC;QACf,SAAS,CAAC,MAAM,EAAE,CAAC;IACrB,CAAC,CAAC;AACJ,CAAC"}

package/dist/screening-status.d.ts

@@ -0,0 +1,15 @@
+import type { ScreeningStatusInfo } from "./types.js";
+/**
+ * Never throws: a screener check that could break `cello status` would be a worse defect than the
+ * gap it reports. A failure is REPORTED as `unknown` with its cause, never omitted.
+ *
+ */
+export declare function screeningStatus(): Promise<ScreeningStatusInfo>;
+/**
+ * The line an agent sees on a session while the classifier is absent — essential when the caller is
+ * a stranger. Empty when both layers are running, so a healthy inbox stays quiet.
+ */
+export declare function screeningSessionNotice(): Promise<string | undefined>;
+/** The decision, with its source injected — so the states can be tested without a model on disk. */
+export declare function screeningSessionNoticeFrom(read: () => Promise<ScreeningStatusInfo | undefined>): Promise<string | undefined>;
+//# sourceMappingURL=screening-status.d.ts.map

package/dist/screening-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"screening-status.d.ts","sourceRoot":"","sources":["../src/screening-status.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAetD;;;;GAIG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAepE;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAE1E;AAED,oGAAoG;AACpG,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,MAAM,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,GACnD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAU7B"}

package/dist/screening-status.js

@@ -0,0 +1,65 @@
+/**
+ * DOD-M9C-SCREENINSTALL-1 — which screening layers are actually running, for `cello_status`.
+ *
+ * Its own module because `daemon-status-report.ts` is at its line cap, and because the answer has
+ * exactly one source: the gateway's `screenerState`, the same function the CLI prints and the
+ * gateway's startup line carries. Three surfaces computing this three ways is how "installed" came
+ * to mean three different things.
+ */
+import { screenerState, screenerModelDir, runtimeAvailable, describeScreenerState } from "@cello-protocol/gateway";
+import { extractErrorMessage } from "./error-message.js";
+/**
+ * Verifying digests means hashing 131 MB, which is too much for a poll that fires on a timer — so
+ * the VERDICT is cached for a minute and every surface serves the cached one.
+ *
+ * What it must never do is compute a CHEAPER answer for the poll. It did: the notification path
+ * skipped digests, so five right-sized, wrong-byte files read as `ready` and the inbox stayed
+ * silent while `cello status` called the same install `broken`. A surface that answers a question
+ * it did not ask is worse than one that stays quiet.
+ */
+const CACHE_MS = 60_000;
+let cached;
+/**
+ * Never throws: a screener check that could break `cello status` would be a worse defect than the
+ * gap it reports. A failure is REPORTED as `unknown` with its cause, never omitted.
+ *
+ */
+export async function screeningStatus() {
+    const now = Date.now();
+    if (cached && now - cached.at < CACHE_MS && cached.value)
+        return cached.value;
+    try {
+        const s = await screenerState({ dir: screenerModelDir(), runtimePresent: await runtimeAvailable() });
+        const value = { classifier: s.state, summary: describeScreenerState(s), ...(s.problem ? { problem: s.problem } : {}) };
+        cached = { at: now, value };
+        return value;
+    }
+    catch (err) {
+        // ABSENT IS NOT FINE. Omitting the block made a permissions error on ~/.cello/screener render
+        // exactly like a build that does not report screening at all — and this block exists precisely
+        // so that absence cannot be read as health.
+        const message = extractErrorMessage(err);
+        return { classifier: "unknown", summary: `Screening: state UNKNOWN — the screener check failed: ${message}`, problem: message };
+    }
+}
+/**
+ * The line an agent sees on a session while the classifier is absent — essential when the caller is
+ * a stranger. Empty when both layers are running, so a healthy inbox stays quiet.
+ */
+export async function screeningSessionNotice() {
+    return screeningSessionNoticeFrom(() => screeningStatus());
+}
+/** The decision, with its source injected — so the states can be tested without a model on disk. */
+export async function screeningSessionNoticeFrom(read) {
+    const s = await read();
+    if (!s || s.classifier === "ready")
+        return undefined;
+    if (s.classifier === "broken") {
+        return `Screening: the classifier is BROKEN and did NOT judge this content: ${s.problem ?? "unknown fault"}. Fix it with: cello screener install --repair`;
+    }
+    if (s.classifier === "unknown") {
+        return `Screening: state UNKNOWN — ${s.problem ?? "the check failed"}. This content may have been judged by one layer only.`;
+    }
+    return "Screening: 1 of 2 layers active (classifier not installed). Recommended: cello screener install";
+}
+//# sourceMappingURL=screening-status.js.map

package/dist/screening-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"screening-status.js","sourceRoot":"","sources":["../src/screening-status.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEnH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD;;;;;;;;GAQG;AACH,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,IAAI,MAA0E,CAAC;AAE/E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,EAAE,GAAG,QAAQ,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,cAAc,EAAE,MAAM,gBAAgB,EAAE,EAAE,CAAC,CAAC;QACrG,MAAM,KAAK,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACvH,MAAM,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,8FAA8F;QAC9F,+FAA+F;QAC/F,4CAA4C;QAC5C,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,yDAAyD,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAClI,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,OAAO,0BAA0B,CAAC,GAAG,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,IAAoD;IAEpD,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC;IACvB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACrD,IAAI,CAAC,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,uEAAuE,CAAC,CAAC,OAAO,IAAI,eAAe,gDAAgD,CAAC;IAC7J,CAAC;IACD,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,8BAA8B,CAAC,CAAC,OAAO,IAAI,kBAAkB,wDAAwD,CAAC;IAC/H,CAAC;IACD,OAAO,iGAAiG,CAAC;AAC3G,CAAC"}

package/dist/seal-carried-close.d.ts

@@ -0,0 +1,37 @@
+import { type SealCarryLeaf } from "./session-seal-leaf-store.js";
+import type { SessionSealContext } from "./session-seal.js";
+import type { DaemonDatabase } from "./sqlcipher-db.js";
+/** What the carried close needs from the seal path, and nothing more. */
+export interface CarriedCloseDeps {
+    readonly ctx: SessionSealContext;
+    readonly db: DaemonDatabase | null;
+    readonly getSealCarry: (agentPubkeyHex: string, sessionIdHex: string) => SealCarryLeaf[];
+}
+/**
+ * ═══ 070-CARRIEDSEAL — THE CLOSE THAT DOES NOT NEED ANYONE ELSE TO BE AWAKE ═══
+ *
+ * Returns the escalation values for a seal closed over evidence this side already holds, or
+ * `null` when this is not that situation and the caller should fail exactly as it did before.
+ *
+ * ⚠️ `null` IS THE DEFAULT, AND THAT IS THE SAFETY PROPERTY. Every way out of here that is not a
+ * successfully written terminus returns `null`, so the caller's original refusal stands with its
+ * original reason. A bug in this method costs the receipt this order was written to save; it
+ * cannot turn a relay's ruling into a seal.
+ *
+ * The first gate is the important one: `RELAY_GAVE_NO_ANSWER` separates a relay that was not there
+ * from one that considered the leaf and declined it. Routing around a ruling is the thing a trust
+ * layer must never do, and "the submit failed" alone does not tell the two apart.
+ */
+export declare function closeOverCarriedEvidence(deps: CarriedCloseDeps, agentName: string, sessionId: string, cause: string, correlationId?: string, 
+/**
+ * The relay's standing verdict about THIS AGENT, when there is a relay client to ask. The reason
+ * string cannot carry it — see `relayRefusedUs` — so it is passed alongside.
+ */
+standingRefusal?: {
+    reason: string;
+} | null): Promise<{
+    ok: true;
+    sequenceNumber: number;
+    reportedRootHex: string;
+} | null>;
+//# sourceMappingURL=seal-carried-close.d.ts.map

package/dist/seal-carried-close.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal-carried-close.d.ts","sourceRoot":"","sources":["../src/seal-carried-close.ts"],"names":[],"mappings":"AAUA,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,8BAA8B,CAAC;AACxF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,yEAAyE;AACzE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;IACjC,QAAQ,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,aAAa,EAAE,CAAC;CAC1F;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,gBAAgB,EACtB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,aAAa,CAAC,EAAE,MAAM;AACtB;;;GAGG;AACH,eAAe,CAAC,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GAC1C,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAuJ/E"}