@cello-protocol/daemon 0.0.3 → 0.0.5

package/dist/nonce-dedup.d.ts

@@ -0,0 +1,68 @@
+/**
+ * CELLO Daemon — NonceDedupStore
+ *
+ * Per-session LRU set of already-seen incoming nonces. When an incoming message
+ * arrives, the daemon checks its nonce here BEFORE delivering to cello_receive.
+ * Duplicates are silently discarded.
+ *
+ * Persistence: SQLCipher table `session_seen_nonces`.
+ * Cap: 10,000 nonces per session (LRU eviction).
+ *
+ * Pseudocode (SPARC Phase P):
+ *
+ * 1. constructor(db, logger):
+ *    - Store db handle and logger reference
+ *    - Initialize empty per-session Map<sessionId, Map<nonceHex, seenAt>>
+ *    - Create session_seen_nonces table IF NOT EXISTS
+ *    - Create index on (session_id, seen_at ASC) for LRU eviction
+ *
+ * 2. loadFromDb():
+ *    - SELECT all rows from session_seen_nonces ORDER BY session_id, seen_at ASC
+ *    - Group into per-session Maps of nonceHex → seenAt
+ *    - This populates the in-memory LRU for duplicate checks
+ *
+ * 3. has(sessionId, nonce: Uint8Array):
+ *    - Convert nonce to hex: Buffer.from(nonce).toString('hex')
+ *    - Return whether the session's set contains this nonceHex
+ *
+ * 4. add(sessionId, nonce: Uint8Array, senderPubkey: Uint8Array):
+ *    - Convert to hex strings
+ *    - If already present: log message.nonce.duplicate DEBUG, return true (is duplicate)
+ *    - If session set size >= 10,000: LRU evict oldest (lowest seen_at)
+ *      - DELETE from session_seen_nonces WHERE session_id AND nonce_hex = oldest
+ *      - Remove from in-memory map
+ *    - INSERT into session_seen_nonces
+ *    - Add to in-memory map
+ *    - Return false (not a duplicate)
+ *
+ * 5. checkAndAdd(sessionId, nonce: Uint8Array, senderPubkey: Uint8Array):
+ *    - If has(sessionId, nonce): log duplicate, return true (duplicate)
+ *    - Otherwise: add, return false (new)
+ *    - Combined check-and-add for atomic dedup logic
+ */
+import type { DatabaseSync } from "node:sqlite";
+import type { Logger } from "./types.js";
+/** LRU cap per outline.md Resource Caps. */
+export declare const NONCE_DEDUP_CAP = 10000;
+export declare class NonceDedupStore {
+    #private;
+    constructor(db: DatabaseSync, logger: Logger);
+    /**
+     * Load all nonce entries from SQLCipher into memory.
+     * Must complete BEFORE the IPC socket opens (AC-007).
+     */
+    loadFromDb(): void;
+    /**
+     * Check if a nonce has been seen for a session.
+     */
+    has(sessionId: string, nonce: Uint8Array): boolean;
+    /**
+     * Check if nonce is a duplicate; if not, add it to the store.
+     * Returns true if the nonce is a DUPLICATE (should be discarded).
+     * Returns false if the nonce is NEW (should be delivered).
+     *
+     * This is the combined check-and-add for the daemon's inbound message path.
+     */
+    checkAndAdd(sessionId: string, nonce: Uint8Array, senderPubkey: Uint8Array): boolean;
+}
+//# sourceMappingURL=nonce-dedup.d.ts.map

package/dist/nonce-dedup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce-dedup.d.ts","sourceRoot":"","sources":["../src/nonce-dedup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC,4CAA4C;AAC5C,eAAO,MAAM,eAAe,QAAS,CAAC;AAQtC,qBAAa,eAAe;;gBAUd,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM;IAoB5C;;;OAGG;IACH,UAAU,IAAI,IAAI;IA0BlB;;OAEG;IACH,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO;IAOlD;;;;;;OAMG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,GAAG,OAAO;CAoGrF"}

package/dist/nonce-dedup.js

@@ -0,0 +1,204 @@
+/**
+ * CELLO Daemon — NonceDedupStore
+ *
+ * Per-session LRU set of already-seen incoming nonces. When an incoming message
+ * arrives, the daemon checks its nonce here BEFORE delivering to cello_receive.
+ * Duplicates are silently discarded.
+ *
+ * Persistence: SQLCipher table `session_seen_nonces`.
+ * Cap: 10,000 nonces per session (LRU eviction).
+ *
+ * Pseudocode (SPARC Phase P):
+ *
+ * 1. constructor(db, logger):
+ *    - Store db handle and logger reference
+ *    - Initialize empty per-session Map<sessionId, Map<nonceHex, seenAt>>
+ *    - Create session_seen_nonces table IF NOT EXISTS
+ *    - Create index on (session_id, seen_at ASC) for LRU eviction
+ *
+ * 2. loadFromDb():
+ *    - SELECT all rows from session_seen_nonces ORDER BY session_id, seen_at ASC
+ *    - Group into per-session Maps of nonceHex → seenAt
+ *    - This populates the in-memory LRU for duplicate checks
+ *
+ * 3. has(sessionId, nonce: Uint8Array):
+ *    - Convert nonce to hex: Buffer.from(nonce).toString('hex')
+ *    - Return whether the session's set contains this nonceHex
+ *
+ * 4. add(sessionId, nonce: Uint8Array, senderPubkey: Uint8Array):
+ *    - Convert to hex strings
+ *    - If already present: log message.nonce.duplicate DEBUG, return true (is duplicate)
+ *    - If session set size >= 10,000: LRU evict oldest (lowest seen_at)
+ *      - DELETE from session_seen_nonces WHERE session_id AND nonce_hex = oldest
+ *      - Remove from in-memory map
+ *    - INSERT into session_seen_nonces
+ *    - Add to in-memory map
+ *    - Return false (not a duplicate)
+ *
+ * 5. checkAndAdd(sessionId, nonce: Uint8Array, senderPubkey: Uint8Array):
+ *    - If has(sessionId, nonce): log duplicate, return true (duplicate)
+ *    - Otherwise: add, return false (new)
+ *    - Combined check-and-add for atomic dedup logic
+ */
+/** LRU cap per outline.md Resource Caps. */
+export const NONCE_DEDUP_CAP = 10_000;
+export class NonceDedupStore {
+    #db;
+    #logger;
+    /**
+     * Per-session ordered map: nonceHex → NonceEntry.
+     * Insertion order approximates LRU (oldest first in iteration).
+     * For exact LRU we track seenAt and find the minimum.
+     */
+    #sessions = new Map();
+    constructor(db, logger) {
+        this.#db = db;
+        this.#logger = logger;
+        // Create table + index if not exists (inline migration — not Flyway)
+        this.#db.exec(`
+      CREATE TABLE IF NOT EXISTS session_seen_nonces (
+        session_id      TEXT    NOT NULL,
+        nonce_hex       TEXT    NOT NULL,
+        sender_pubkey   TEXT    NOT NULL,
+        seen_at         INTEGER NOT NULL,
+        PRIMARY KEY (session_id, nonce_hex)
+      )
+    `);
+        this.#db.exec(`
+      CREATE INDEX IF NOT EXISTS seen_nonces_by_session_seen_at
+        ON session_seen_nonces(session_id, seen_at ASC)
+    `);
+    }
+    /**
+     * Load all nonce entries from SQLCipher into memory.
+     * Must complete BEFORE the IPC socket opens (AC-007).
+     */
+    loadFromDb() {
+        const rows = this.#db
+            .prepare("SELECT session_id, nonce_hex, sender_pubkey, seen_at FROM session_seen_nonces ORDER BY session_id, seen_at ASC")
+            .all();
+        this.#sessions.clear();
+        for (const row of rows) {
+            let sessionMap = this.#sessions.get(row.session_id);
+            if (!sessionMap) {
+                sessionMap = new Map();
+                this.#sessions.set(row.session_id, sessionMap);
+            }
+            sessionMap.set(row.nonce_hex, {
+                nonceHex: row.nonce_hex,
+                senderPubkey: row.sender_pubkey,
+                seenAt: row.seen_at,
+            });
+        }
+    }
+    /**
+     * Check if a nonce has been seen for a session.
+     */
+    has(sessionId, nonce) {
+        const nonceHex = Buffer.from(nonce).toString("hex");
+        const sessionMap = this.#sessions.get(sessionId);
+        if (!sessionMap)
+            return false;
+        return sessionMap.has(nonceHex);
+    }
+    /**
+     * Check if nonce is a duplicate; if not, add it to the store.
+     * Returns true if the nonce is a DUPLICATE (should be discarded).
+     * Returns false if the nonce is NEW (should be delivered).
+     *
+     * This is the combined check-and-add for the daemon's inbound message path.
+     */
+    checkAndAdd(sessionId, nonce, senderPubkey) {
+        const nonceHex = Buffer.from(nonce).toString("hex");
+        const senderPubkeyHex = Buffer.from(senderPubkey).toString("hex");
+        let sessionMap = this.#sessions.get(sessionId);
+        if (!sessionMap) {
+            sessionMap = new Map();
+            this.#sessions.set(sessionId, sessionMap);
+        }
+        // Check for duplicate
+        if (sessionMap.has(nonceHex)) {
+            this.#logger.debug("message.nonce.duplicate", {
+                sessionId,
+                nonce: nonceHex,
+                senderPubkey: senderPubkeyHex,
+            });
+            return true; // duplicate — discard
+        }
+        // LRU eviction if at cap
+        if (sessionMap.size >= NONCE_DEDUP_CAP) {
+            this.#evictOldest(sessionId, sessionMap);
+        }
+        // Add new nonce
+        const seenAt = Date.now();
+        const entry = { nonceHex, senderPubkey: senderPubkeyHex, seenAt };
+        sessionMap.set(nonceHex, entry);
+        // Persist to SQLCipher
+        try {
+            this.#db
+                .prepare(`INSERT INTO session_seen_nonces (session_id, nonce_hex, sender_pubkey, seen_at)
+           VALUES (?, ?, ?, ?)`)
+                .run(sessionId, nonceHex, senderPubkeyHex, seenAt);
+        }
+        catch (err) {
+            this.#logger.error("message.nonce.persist.failed", {
+                sessionId,
+                nonce: nonceHex,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+        return false; // new — deliver
+    }
+    /**
+     * Evict the oldest entry (lowest seen_at) for a session.
+     * Uses the SQLite index on (session_id, seen_at ASC) for O(log n) lookup
+     * instead of O(n) in-memory scan.
+     */
+    #evictOldest(sessionId, sessionMap) {
+        // Use indexed query to find the oldest — O(log n) via the seen_at index
+        let oldestHex = null;
+        try {
+            const row = this.#db
+                .prepare("SELECT nonce_hex FROM session_seen_nonces WHERE session_id = ? ORDER BY seen_at ASC LIMIT 1")
+                .get(sessionId);
+            if (row) {
+                oldestHex = row.nonce_hex;
+            }
+        }
+        catch (err) {
+            this.#logger.error("message.nonce.persist.failed", {
+                sessionId,
+                nonce: "eviction_query",
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+        // Fallback: if DB query failed, scan in-memory
+        if (!oldestHex) {
+            let oldest = null;
+            for (const entry of sessionMap.values()) {
+                if (!oldest || entry.seenAt < oldest.seenAt) {
+                    oldest = entry;
+                }
+            }
+            if (!oldest)
+                return;
+            oldestHex = oldest.nonceHex;
+        }
+        // Delete from DB
+        try {
+            this.#db
+                .prepare("DELETE FROM session_seen_nonces WHERE session_id = ? AND nonce_hex = ?")
+                .run(sessionId, oldestHex);
+        }
+        catch (err) {
+            this.#logger.error("message.nonce.persist.failed", {
+                sessionId,
+                nonce: oldestHex,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+        // Remove from memory
+        sessionMap.delete(oldestHex);
+    }
+}
+//# sourceMappingURL=nonce-dedup.js.map

package/dist/nonce-dedup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce-dedup.js","sourceRoot":"","sources":["../src/nonce-dedup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAKH,4CAA4C;AAC5C,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AAQtC,MAAM,OAAO,eAAe;IACjB,GAAG,CAAe;IAClB,OAAO,CAAS;IACzB;;;;OAIG;IACH,SAAS,GAAG,IAAI,GAAG,EAAmC,CAAC;IAEvD,YAAY,EAAgB,EAAE,MAAc;QAC1C,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QAEtB,qEAAqE;QACrE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;;;;;;;;KAQb,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;;;KAGb,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CAAC,gHAAgH,CAAC;aACzH,GAAG,EAKF,CAAC;QAEL,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAEvB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACpD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,UAAU,GAAG,IAAI,GAAG,EAAE,CAAC;gBACvB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YACjD,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE;gBAC5B,QAAQ,EAAE,GAAG,CAAC,SAAS;gBACvB,YAAY,EAAE,GAAG,CAAC,aAAa;gBAC/B,MAAM,EAAE,GAAG,CAAC,OAAO;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,SAAiB,EAAE,KAAiB;QACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAC9B,OAAO,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED;;;;;;OAMG;IACH,WAAW,CAAC,SAAiB,EAAE,KAAiB,EAAE,YAAwB;QACxE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAElE,IAAI,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,UAAU,GAAG,IAAI,GAAG,EAAE,CAAC;YACvB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC5C,CAAC;QAED,sBAAsB;QACtB,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBAC5C,SAAS;gBACT,KAAK,EAAE,QAAQ;gBACf,YAAY,EAAE,eAAe;aAC9B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,CAAC,sBAAsB;QACrC,CAAC;QAED,yBAAyB;QACzB,IAAI,UAAU,CAAC,IAAI,IAAI,eAAe,EAAE,CAAC;YACvC,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC3C,CAAC;QAED,gBAAgB;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;QAC9E,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAEhC,uBAAuB;QACvB,IAAI,CAAC;YACH,IAAI,CAAC,GAAG;iBACL,OAAO,CACN;+BACqB,CACtB;iBACA,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBACjD,SAAS;gBACT,KAAK,EAAE,QAAQ;gBACf,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC,CAAC,gBAAgB;IAChC,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,SAAiB,EAAE,UAAmC;QACjE,wEAAwE;QACxE,IAAI,SAAS,GAAkB,IAAI,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;iBACjB,OAAO,CAAC,6FAA6F,CAAC;iBACtG,GAAG,CAAC,SAAS,CAAsC,CAAC;YACvD,IAAI,GAAG,EAAE,CAAC;gBACR,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;YAC5B,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBACjD,SAAS;gBACT,KAAK,EAAE,gBAAgB;gBACvB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;QAED,+CAA+C;QAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,MAAM,GAAsB,IAAI,CAAC;YACrC,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;oBAC5C,MAAM,GAAG,KAAK,CAAC;gBACjB,CAAC;YACH,CAAC;YACD,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC9B,CAAC;QAED,iBAAiB;QACjB,IAAI,CAAC;YACH,IAAI,CAAC,GAAG;iBACL,OAAO,CAAC,wEAAwE,CAAC;iBACjF,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBACjD,SAAS;gBACT,KAAK,EAAE,SAAS;gBAChB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;QAED,qBAAqB;QACrB,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/dist/notification-dispatcher.d.ts

@@ -0,0 +1,65 @@
+/**
+ * CELLO Daemon — NotificationDispatcher
+ *
+ * Owns the routing table for MCP notifications. Applies per-notification-type
+ * routing rules:
+ *   - agent_state_changed → ALL active IPC connections
+ *   - agent_current_changed → triggering connection ONLY
+ *   - session_state_changed → connections where affected agent is current
+ *
+ * Pseudocode (SPARC Phase P):
+ *
+ * registerConnection(connectionId, socket):
+ *   1. Add entry to routing table: { connectionId → { socket, currentAgent: null } }
+ *
+ * unregisterConnection(connectionId):
+ *   1. Remove entry from routing table
+ *
+ * setCurrentAgent(connectionId, agentName):
+ *   1. Update currentAgent for the connection entry
+ *
+ * dispatchAgentStateChanged(agentName, state, reason):
+ *   1. Build notification: { notification: "agent_state_changed", data: { agent, type, agentName, state, reason } }
+ *   2. For each connection in routing table: write notification to socket
+ *   3. On write error: log notification.dispatch.failed at DEBUG, discard for that connection
+ *
+ * dispatchAgentCurrentChanged(connectionId, fromAgent, toAgent):
+ *   1. Build notification: { notification: "agent_current_changed", data: { agent: toAgent, type, fromAgent, toAgent } }
+ *   2. Write to the ONE connection identified by connectionId
+ *   3. On write error: log notification.dispatch.failed at DEBUG
+ *
+ * dispatchSessionStateChanged(agentName, sessionId, state, counterpartyPubkey):
+ *   1. Build notification: { notification: "session_state_changed", data: { agent, type, agentName, sessionId, state, counterpartyPubkey } }
+ *   2. For each connection where currentAgent === agentName: write notification
+ *   3. On write error: log notification.dispatch.failed at DEBUG, discard for that connection
+ */
+import type { Logger, IpcNotification } from "./types.js";
+export type NotificationSender = (connectionId: string, notification: IpcNotification) => boolean;
+export interface NotificationDispatcherConfig {
+    logger: Logger;
+    sendNotification: NotificationSender;
+    getConnectionIds: () => string[];
+}
+export declare class NotificationDispatcher {
+    #private;
+    constructor(config: NotificationDispatcherConfig);
+    registerConnection(connectionId: string): void;
+    unregisterConnection(connectionId: string): void;
+    setCurrentAgent(connectionId: string, agentName: string | null): void;
+    /**
+     * Broadcast agent_state_changed to ALL active IPC connections.
+     * Routing rule: all connections receive this, including those with no current agent.
+     */
+    dispatchAgentStateChanged(agentName: string, state: "online" | "offline", reason: string): void;
+    /**
+     * Send agent_current_changed to the triggering connection ONLY.
+     * Routing rule: only the connection that called cello_use_agent receives this.
+     */
+    dispatchAgentCurrentChanged(connectionId: string, fromAgent: string | null, toAgent: string | null): void;
+    /**
+     * Send session_state_changed to connections where the affected agent is current.
+     * Routing rule: only connections with currentAgent === agentName receive this.
+     */
+    dispatchSessionStateChanged(agentName: string, sessionId: string, state: string, counterpartyPubkey: string | null): void;
+}
+//# sourceMappingURL=notification-dispatcher.d.ts.map

package/dist/notification-dispatcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-dispatcher.d.ts","sourceRoot":"","sources":["../src/notification-dispatcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE1D,MAAM,MAAM,kBAAkB,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,KAAK,OAAO,CAAC;AAElG,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,kBAAkB,CAAC;IACrC,gBAAgB,EAAE,MAAM,MAAM,EAAE,CAAC;CAClC;AAED,qBAAa,sBAAsB;;gBAOrB,MAAM,EAAE,4BAA4B;IAMhD,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAI9C,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAIhD,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAMrE;;;OAGG;IACH,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAkB/F;;;OAGG;IACH,2BAA2B,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAczG;;;OAGG;IACH,2BAA2B,CACzB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,kBAAkB,EAAE,MAAM,GAAG,IAAI,GAChC,IAAI;CAuCR"}

package/dist/notification-dispatcher.js

@@ -0,0 +1,138 @@
+/**
+ * CELLO Daemon — NotificationDispatcher
+ *
+ * Owns the routing table for MCP notifications. Applies per-notification-type
+ * routing rules:
+ *   - agent_state_changed → ALL active IPC connections
+ *   - agent_current_changed → triggering connection ONLY
+ *   - session_state_changed → connections where affected agent is current
+ *
+ * Pseudocode (SPARC Phase P):
+ *
+ * registerConnection(connectionId, socket):
+ *   1. Add entry to routing table: { connectionId → { socket, currentAgent: null } }
+ *
+ * unregisterConnection(connectionId):
+ *   1. Remove entry from routing table
+ *
+ * setCurrentAgent(connectionId, agentName):
+ *   1. Update currentAgent for the connection entry
+ *
+ * dispatchAgentStateChanged(agentName, state, reason):
+ *   1. Build notification: { notification: "agent_state_changed", data: { agent, type, agentName, state, reason } }
+ *   2. For each connection in routing table: write notification to socket
+ *   3. On write error: log notification.dispatch.failed at DEBUG, discard for that connection
+ *
+ * dispatchAgentCurrentChanged(connectionId, fromAgent, toAgent):
+ *   1. Build notification: { notification: "agent_current_changed", data: { agent: toAgent, type, fromAgent, toAgent } }
+ *   2. Write to the ONE connection identified by connectionId
+ *   3. On write error: log notification.dispatch.failed at DEBUG
+ *
+ * dispatchSessionStateChanged(agentName, sessionId, state, counterpartyPubkey):
+ *   1. Build notification: { notification: "session_state_changed", data: { agent, type, agentName, sessionId, state, counterpartyPubkey } }
+ *   2. For each connection where currentAgent === agentName: write notification
+ *   3. On write error: log notification.dispatch.failed at DEBUG, discard for that connection
+ */
+export class NotificationDispatcher {
+    #logger;
+    #sendNotification;
+    #getConnectionIds;
+    // Maps connectionId → currentAgent name (null if not set)
+    #currentAgentMap = new Map();
+    constructor(config) {
+        this.#logger = config.logger;
+        this.#sendNotification = config.sendNotification;
+        this.#getConnectionIds = config.getConnectionIds;
+    }
+    registerConnection(connectionId) {
+        this.#currentAgentMap.set(connectionId, null);
+    }
+    unregisterConnection(connectionId) {
+        this.#currentAgentMap.delete(connectionId);
+    }
+    setCurrentAgent(connectionId, agentName) {
+        if (this.#currentAgentMap.has(connectionId)) {
+            this.#currentAgentMap.set(connectionId, agentName);
+        }
+    }
+    /**
+     * Broadcast agent_state_changed to ALL active IPC connections.
+     * Routing rule: all connections receive this, including those with no current agent.
+     */
+    dispatchAgentStateChanged(agentName, state, reason) {
+        const notification = {
+            notification: "agent_state_changed",
+            data: {
+                agent: agentName,
+                type: "agent_state_changed",
+                agentName,
+                state,
+                reason,
+            },
+        };
+        for (const connectionId of this.#getConnectionIds()) {
+            if (!this.#currentAgentMap.has(connectionId))
+                continue;
+            this.#safeSend(connectionId, notification, "agent_state_changed");
+        }
+    }
+    /**
+     * Send agent_current_changed to the triggering connection ONLY.
+     * Routing rule: only the connection that called cello_use_agent receives this.
+     */
+    dispatchAgentCurrentChanged(connectionId, fromAgent, toAgent) {
+        const notification = {
+            notification: "agent_current_changed",
+            data: {
+                agent: toAgent,
+                type: "agent_current_changed",
+                fromAgent,
+                toAgent,
+            },
+        };
+        this.#safeSend(connectionId, notification, "agent_current_changed");
+    }
+    /**
+     * Send session_state_changed to connections where the affected agent is current.
+     * Routing rule: only connections with currentAgent === agentName receive this.
+     */
+    dispatchSessionStateChanged(agentName, sessionId, state, counterpartyPubkey) {
+        const notification = {
+            notification: "session_state_changed",
+            data: {
+                agent: agentName,
+                type: "session_state_changed",
+                agentName,
+                sessionId,
+                state,
+                counterpartyPubkey,
+            },
+        };
+        for (const connectionId of this.#getConnectionIds()) {
+            const currentAgent = this.#currentAgentMap.get(connectionId);
+            if (currentAgent === agentName) {
+                this.#safeSend(connectionId, notification, "session_state_changed");
+            }
+        }
+    }
+    #safeSend(connectionId, notification, notificationType) {
+        try {
+            const success = this.#sendNotification(connectionId, notification);
+            if (!success) {
+                this.#logger.debug("notification.dispatch.failed", {
+                    connectionId,
+                    notificationType,
+                    error: "sendNotification returned false",
+                });
+            }
+        }
+        catch (err) {
+            this.#logger.debug("notification.dispatch.failed", {
+                connectionId,
+                notificationType,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+    }
+}
+//# sourceMappingURL=notification-dispatcher.js.map

package/dist/notification-dispatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-dispatcher.js","sourceRoot":"","sources":["../src/notification-dispatcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAYH,MAAM,OAAO,sBAAsB;IACxB,OAAO,CAAS;IAChB,iBAAiB,CAAqB;IACtC,iBAAiB,CAAiB;IAC3C,0DAA0D;IACjD,gBAAgB,GAAG,IAAI,GAAG,EAAyB,CAAC;IAE7D,YAAY,MAAoC;QAC9C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,CAAC;QACjD,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,CAAC;IACnD,CAAC;IAED,kBAAkB,CAAC,YAAoB;QACrC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,oBAAoB,CAAC,YAAoB;QACvC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7C,CAAC;IAED,eAAe,CAAC,YAAoB,EAAE,SAAwB;QAC5D,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,yBAAyB,CAAC,SAAiB,EAAE,KAA2B,EAAE,MAAc;QACtF,MAAM,YAAY,GAAoB;YACpC,YAAY,EAAE,qBAAqB;YACnC,IAAI,EAAE;gBACJ,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,qBAAqB;gBAC3B,SAAS;gBACT,KAAK;gBACL,MAAM;aACP;SACF,CAAC;QAEF,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC;gBAAE,SAAS;YACvD,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,YAAY,EAAE,qBAAqB,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,2BAA2B,CAAC,YAAoB,EAAE,SAAwB,EAAE,OAAsB;QAChG,MAAM,YAAY,GAAoB;YACpC,YAAY,EAAE,uBAAuB;YACrC,IAAI,EAAE;gBACJ,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,uBAAuB;gBAC7B,SAAS;gBACT,OAAO;aACR;SACF,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,YAAY,EAAE,uBAAuB,CAAC,CAAC;IACtE,CAAC;IAED;;;OAGG;IACH,2BAA2B,CACzB,SAAiB,EACjB,SAAiB,EACjB,KAAa,EACb,kBAAiC;QAEjC,MAAM,YAAY,GAAoB;YACpC,YAAY,EAAE,uBAAuB;YACrC,IAAI,EAAE;gBACJ,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,uBAAuB;gBAC7B,SAAS;gBACT,SAAS;gBACT,KAAK;gBACL,kBAAkB;aACnB;SACF,CAAC;QAEF,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACpD,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC7D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,YAAY,EAAE,uBAAuB,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,CAAC,YAAoB,EAAE,YAA6B,EAAE,gBAAwB;QACrF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;YACnE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;oBACjD,YAAY;oBACZ,gBAAgB;oBAChB,KAAK,EAAE,iCAAiC;iBACzC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBACjD,YAAY;gBACZ,gBAAgB;gBAChB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/registration-context.d.ts

@@ -0,0 +1,69 @@
+/**
+ * DaemonRegistrationContext — CELLO-M7-REGISTRATION (Action 2, step c part 2).
+ *
+ * Implements the RegistrationManager's RegistrationContext seam against daemon
+ * internals. The one non-trivial piece is the signaling bridge: the client wrote
+ * directly to a raw persistent libp2p Stream and ran its own read loop; the
+ * daemon's directory signaling lives behind SignalingManager. So this context:
+ *   - sends frames via SignalingManager.sendRaw (which CBOR/length-prefix-encodes),
+ *   - registers ONE inbound handler that routes the registration reply frames
+ *     (dkg_ready / register_success / register_error) to whichever pending
+ *     resolver RegistrationManager.register() has currently armed.
+ *
+ * register() drives the two stages strictly sequentially (await dkg_ready, then
+ * await register_success), so at most one resolver is armed at any moment — which
+ * is why a bare register_error can be routed to "whichever stage is waiting".
+ */
+import type { CelloNode } from "@cello-protocol/transport";
+import type { IThresholdSigner, KeyProvider } from "@cello-protocol/crypto";
+import type { Logger } from "./types.js";
+import type { DaemonRegistrationPersistence } from "./registration-persistence.js";
+import type { RegistrationContext, SignalingSendResult } from "./registration-manager.js";
+/**
+ * Structural slice of SignalingManager this context needs. The real
+ * SignalingManager satisfies this (status getter; sendRaw → OperationResult,
+ * assignable to SignalingSendResult; registerInboundHandler → unregister fn),
+ * and a fake satisfies it in tests.
+ */
+export interface SignalingSeam {
+    readonly status: string;
+    sendRaw(frame: unknown): Promise<SignalingSendResult>;
+    registerInboundHandler(handler: (frame: Record<string, unknown>) => void): () => void;
+}
+export declare class DaemonRegistrationContext implements RegistrationContext {
+    #private;
+    readonly keyProvider: KeyProvider;
+    readonly logger: Logger;
+    readonly persistence: DaemonRegistrationPersistence | null;
+    readonly mlDsaKeyFile: string | undefined;
+    constructor(opts: {
+        signaling: SignalingSeam;
+        getDirectoryNode: () => CelloNode | null;
+        getDirectoryEndpoint: () => {
+            peer_id: string;
+            multiaddrs: string[];
+        } | null;
+        keyProvider: KeyProvider;
+        persistence: DaemonRegistrationPersistence | null;
+        logger: Logger;
+        mlDsaKeyFile?: string | undefined;
+    });
+    getNode(): CelloNode | null;
+    getMyPubkeyHex(): string | null;
+    setMyPubkeyHex(hex: string): void;
+    getDirectoryEndpoint(): {
+        peer_id: string;
+        multiaddrs: string[];
+    } | null;
+    getThresholdSigner(): IThresholdSigner | undefined;
+    setThresholdSigner(signer: IThresholdSigner): void;
+    getMyPrimaryPubkey(): Uint8Array | null;
+    setMyPrimaryPubkey(pubkey: Uint8Array): void;
+    isSignalingConnected(): boolean;
+    sendSignalingFrame(frame: Record<string, unknown>): Promise<SignalingSendResult>;
+    setPendingDkgReadyResolve(resolve: ((frame: Record<string, unknown>) => void) | null): void;
+    setPendingRegisterResolve(resolve: ((frame: Record<string, unknown>) => void) | null): void;
+    /** Stop routing inbound frames (call when the owning agent is torn down). */
+    dispose(): void;
+}
+//# sourceMappingURL=registration-context.d.ts.map

package/dist/registration-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration-context.d.ts","sourceRoot":"","sources":["../src/registration-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AACnF,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAE1F;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACtD,sBAAsB,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACvF;AAID,qBAAa,yBAA0B,YAAW,mBAAmB;;IACnE,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,6BAA6B,GAAG,IAAI,CAAC;IAC3D,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;gBAa9B,IAAI,EAAE;QAChB,SAAS,EAAE,aAAa,CAAC;QACzB,gBAAgB,EAAE,MAAM,SAAS,GAAG,IAAI,CAAC;QACzC,oBAAoB,EAAE,MAAM;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,EAAE,CAAA;SAAE,GAAG,IAAI,CAAC;QAC7E,WAAW,EAAE,WAAW,CAAC;QACzB,WAAW,EAAE,6BAA6B,GAAG,IAAI,CAAC;QAClD,MAAM,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACnC;IAaD,OAAO,IAAI,SAAS,GAAG,IAAI;IAI3B,cAAc,IAAI,MAAM,GAAG,IAAI;IAI/B,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIjC,oBAAoB,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI;IAIxE,kBAAkB,IAAI,gBAAgB,GAAG,SAAS;IAIlD,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAIlD,kBAAkB,IAAI,UAAU,GAAG,IAAI;IAIvC,kBAAkB,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAM5C,oBAAoB,IAAI,OAAO;IAIzB,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAItF,yBAAyB,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI;IAI3F,yBAAyB,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI;IAI3F,6EAA6E;IAC7E,OAAO,IAAI,IAAI;CAuChB"}