@cello-protocol/daemon 0.0.53 → 0.0.55

package/dist/session-read-handlers.js

@@ -0,0 +1,233 @@
+import { classifySession } from "./session-category.js";
+import { validateSessionName } from "./session-name.js";
+export function registerSessionReadHandlers(deps) {
+    const { handlers, logger, sessionNodeManager, loadedAgents, getConnState, resolveCurrentAgent, NO_CURRENT_AGENT_RESPONSE, resolveWho, safeCursorAdvance, safeWatermarkAdvance, reapDeadHalfOpenSessions, } = deps;
+    // ─── M7-SESSION-004 (AC-005/AC-006): read the sealed certificate's legibility ───
+    // The cert-read surface: returns the receipt-not-assent certificate for a sealed session —
+    // per-party content frontiers, attestation modes, and whether the final message was answered.
+    // Reads the PERSISTED record, so it works after a daemon restart and from a DIFFERENT process
+    // than the one that built the certificate (an arbitrator reading the receiving side). The
+    // legibility states, as a first-class machine-readable property, that a signature attests
+    // receipt — never assent (implies_assent: false); a malicious unanswered tail reads as
+    // delivered-but-unanswered (final_message.answered: false), never agreed.
+    handlers.set("cello_get_sealed_receipt", async (params, connectionId) => {
+        // cello-mcp forwards this as { session_id } (snake_case, matching the other session tools).
+        const sessionId = params?.["session_id"];
+        if (!sessionId || typeof sessionId !== "string") {
+            return { ok: false, reason: "missing_session_id", guidance: "Provide the session_id (hex) of the sealed session. Check cello_sessions for sealed sessions." };
+        }
+        // DOD-LOOP-1: the certificate is keyed by (agent, session_id) — read the current agent's.
+        const connState = getConnState(connectionId);
+        // CC-3 / M8C-AUTOSTART-1 F18: resolve the target agent — explicit { agent } wins, else this
+        // connection's current agent, else the sole online agent (removes the no_current_agent papercut
+        // after a /mcp reconnect when exactly one agent is online). 2+ online with none selected → null.
+        const agentName = resolveCurrentAgent(connState, params?.agent);
+        if (!agentName) {
+            return NO_CURRENT_AGENT_RESPONSE;
+        }
+        const cert = sessionNodeManager.getSealCertificate(agentName, sessionId);
+        if (cert) {
+            // DOD-SESSION-NAME-1 (AC-A12): echo the name so the output is self-describing — you already
+            // hold the id, so the name is free context. It is display only: nothing in the certificate,
+            // the sealed root, or the legibility object is derived from it.
+            const sessionName = sessionNodeManager.getSessionRecord(agentName, sessionId)?.session_name ?? null;
+            return { ok: true, session_id: sessionId, session_name: sessionName, sealed_root: cert.sealed_root, legibility: cert.legibility };
+        }
+        // M8C-INBOX-1 (F4): the single `sealed_receipt_not_found` conflated four distinct causes, so a
+        // caller could not tell a typo from a not-sealed-yet session from a wrong-agent selection.
+        // Split them (full session ids on cello_list_sessions / cello_status already let a pasted id match).
+        if (sessionNodeManager.getSessionRecord(agentName, sessionId)) {
+            // The session is THIS agent's — it simply has no seal certificate yet.
+            return {
+                ok: false,
+                reason: "not_sealed_yet",
+                guidance: "This session exists but is not sealed yet. Close it with cello_close_session and confirm it reports sealed (or wait for the counterparty to co-seal), then retry.",
+            };
+        }
+        // Owned by a DIFFERENT loaded agent → the caller has the wrong current agent selected.
+        const owner = loadedAgents.find((a) => a.name !== agentName && sessionNodeManager.getSessionRecord(a.name, sessionId));
+        if (owner) {
+            return {
+                ok: false,
+                reason: "wrong_agent",
+                guidance: `This session belongs to agent '${owner.name}', not the current agent '${agentName}'. Call cello_use_agent('${owner.name}') then retry cello_sealed_receipt.`,
+            };
+        }
+        // A truncated paste: the id is a strict prefix of one of this agent's real session ids.
+        const truncated = sessionNodeManager
+            .getSessionsForAgent(agentName)
+            .some((s) => s.session_id.startsWith(sessionId) && s.session_id.length > sessionId.length);
+        if (truncated) {
+            return {
+                ok: false,
+                reason: "session_id_too_short",
+                guidance: "That looks like a truncated session id. cello_sessions and cello status show the FULL id — copy the complete id and retry.",
+            };
+        }
+        return {
+            ok: false,
+            reason: "unknown_session",
+            guidance: "No session with this id belongs to the current agent. Run cello_sessions to see the full ids of this agent's sessions.",
+        };
+    });
+    // DOD-LOG-1 (PERSIST-LOG-001): read the durable, decrypted conversation transcript for a session —
+    // the readable sent+received messages in canonical-sequence order, recovered AFTER a daemon restart
+    // (not just the opaque hash chain). The plaintext is decrypted from the encrypted-at-rest store here,
+    // in the daemon; the relay/directory never held it (INV-3).
+    handlers.set("cello_get_transcript", async (params, connectionId) => {
+        const sessionId = params?.["session_id"];
+        if (!sessionId || typeof sessionId !== "string") {
+            return { ok: false, reason: "missing_session_id", guidance: "Provide the session_id (hex) whose transcript to read. See cello_sessions." };
+        }
+        const connState = getConnState(connectionId);
+        // CC-3 / M8C-AUTOSTART-1 F18: explicit { agent } > this connection's current > sole online agent.
+        const agentName = resolveCurrentAgent(connState, params?.agent);
+        if (!agentName) {
+            return NO_CURRENT_AGENT_RESPONSE;
+        }
+        const { messages, undecryptable } = sessionNodeManager.readTranscript(agentName, sessionId);
+        // undecryptable > 0 means some rows failed GCM auth (tamper / wrong key) — surfaced, not hidden,
+        // so the reader can tell a real gap from an empty transcript.
+        // M8C-CURSOR-1: this is the ONLY reader that covers BOTH directions (sent + received), so it's
+        // the correct general catch-up path — e.g. a second attended connection on the same agent
+        // catching up on a message a DIFFERENT local connection sent (since_seq is received-only and
+        // would never surface it). Route through safeCursorAdvance rather than trusting the raw max —
+        // reviewer HIGH finding (aa5928e2/a9099571): recordTranscriptMessage swallows a DB write
+        // failure without rolling back the tree's leaf count, so a hole in `messages` is possible in
+        // principle; the contiguous-run walk refuses to vault the cursor past such a hole even here.
+        const deliveredSeqs = new Set(messages.map((m) => m.sequence));
+        safeCursorAdvance(connectionId, sessionId, deliveredSeqs);
+        // DOD-CURSOR-DURABLE-1 (AC3): reading the full history IS reading — so this must advance the
+        // PERSISTED watermark too, not just this connection's in-memory cursor. Previously it advanced
+        // only the cursor, which made the gate's own guidance ("call cello_get_transcript, then retry")
+        // a dead end for any stateless client: a fresh process reads the transcript, exits, and the next
+        // process still presents an unread count. Same contiguous-run safety as the cursor — never vault
+        // past a gap (an undecryptable row is absent from `messages`, so the walk stops there and those
+        // messages correctly stay unread).
+        safeWatermarkAdvance(agentName, sessionId, deliveredSeqs);
+        // DOD-SESSION-NAME-1 (AC-A12): the name rides along so a transcript dump says what it is of.
+        const transcriptName = sessionNodeManager.getSessionRecord(agentName, sessionId)?.session_name ?? null;
+        return { ok: true, session_id: sessionId, session_name: transcriptName, messages, undecryptable };
+    });
+    // cello_list_sessions: the discovery surface — every persisted session for the
+    // current agent (active, interrupted, sealed, seal_interrupted_pending), newest
+    // updated first. This is where cello_get_transcript / cello_get_sealed_receipt
+    // get their session ids; without it those by-id reads have no starting point,
+    // and the guidance strings that point here ("See cello_list_sessions") dead-end.
+    // Read from the persisted SQLite store, so it works after a daemon restart and
+    // from a fresh MCP connection (no in-memory session-node required).
+    // Classify → filter → cap a set of session rows into a SessionListResponse. Shared by the
+    // per-agent MCP surface (cello_list_sessions) and the daemon-wide CLI surface (list_sessions),
+    // so the operator-facing categories (open/closed/failed) and the default cap never drift.
+    // Default filter = "open" (live/resumable only — the common case); default limit bounds the
+    // response so a long-lived agent's history can't balloon it. `all` includes failed/closed.
+    const DEFAULT_LIST_LIMIT = 50;
+    const MAX_LIST_LIMIT = 500;
+    function selectSessions(rows, params) {
+        const rawFilter = typeof params?.filter === "string" ? params.filter : "open";
+        const filter = rawFilter === "closed" || rawFilter === "failed" || rawFilter === "all" ? rawFilter : "open";
+        let limit = Number(params?.limit);
+        if (!Number.isFinite(limit) || limit < 1)
+            limit = DEFAULT_LIST_LIMIT;
+        limit = Math.min(Math.floor(limit), MAX_LIST_LIMIT);
+        const classified = rows.map((row) => {
+            const messageCount = row.message_count ?? 0;
+            const category = classifySession(row.status, messageCount);
+            return { row, messageCount, category };
+        });
+        const matched = filter === "all" ? classified : classified.filter((c) => c.category === filter);
+        const sessions = matched.slice(0, limit).map(({ row, messageCount, category }) => ({
+            sessionId: row.session_id,
+            // DOD-SESSION-NAME-1 (AC-A13): SECOND, immediately after the id — not last. Every list surface
+            // renders as JSON, and JSON.stringify preserves insertion order, so key position IS layout: at
+            // the end of the entry the name prints ~11 lines below the id it belongs to, and scanning a
+            // 50-session dump for "which one was the deploy" is the exact problem this column exists to
+            // solve. Alongside the id, never instead of it — the id is what you paste into the next command.
+            sessionName: row.session_name ?? null,
+            agentName: row.agent_name,
+            counterpartyPubkey: row.counterparty_pubkey,
+            // MONIKER-5 AC1: the same resolution the doorbell uses — pet name ?? offered ?? fingerprint.
+            ...resolveWho(row.agent_name, row.counterparty_pubkey, row.session_id),
+            status: row.status,
+            category,
+            messageCount,
+            createdAt: new Date(row.created_at).toISOString(),
+            updatedAt: new Date(row.updated_at).toISOString(),
+            // interrupted_at is the canonical ISO interruption stamp; null for any
+            // session that was never interrupted (active/sealed).
+            interruptedAt: row.interrupted_at ?? null,
+        }));
+        return { ok: true, filter, limit, totalMatched: matched.length, sessions };
+    }
+    // cello_list_sessions (MCP, per current agent): the discovery surface for the by-id reads
+    // (cello_get_transcript / cello_get_sealed_receipt). Accepts { filter?: open|closed|failed|all,
+    // limit?: number } — defaults to open + DEFAULT_LIST_LIMIT so failed/dead handshakes don't drown
+    // the live ones. Read from persisted SQLite, so it survives a daemon restart / fresh connection.
+    handlers.set("cello_list_sessions", async (params, connectionId) => {
+        const connState = getConnState(connectionId);
+        // CC-3 / M8C-AUTOSTART-1 F18: explicit { agent } > this connection's current > sole online agent.
+        const agentName = resolveCurrentAgent(connState, params?.agent);
+        if (!agentName) {
+            return NO_CURRENT_AGENT_RESPONSE;
+        }
+        reapDeadHalfOpenSessions(agentName); // CC-5/F21: drop provably-dead half-open sessions before listing
+        return selectSessions(sessionNodeManager.getSessionsForAgent(agentName), params);
+    });
+    // ─── DOD-SESSION-NAME-1: cello_name_session — set or clear THIS agent's label for a session ───
+    // Set-or-clear-by-null, mirroring cello_contact_set_moniker. Works in ANY status: naming a
+    // long-sealed session for archival clarity is the point of the tool, not an edge case. The only
+    // scope is ownership — the (agent_id, session_id) row must be this agent's, which for the loopback
+    // case correctly means each of the operator's two agents renames only its OWN row.
+    handlers.set("cello_name_session", async (params, connectionId) => {
+        const connState = getConnState(connectionId);
+        const agentName = resolveCurrentAgent(connState, params?.agent);
+        if (!agentName)
+            return NO_CURRENT_AGENT_RESPONSE;
+        const sessionId = params?.session_id;
+        // `session_name` must be PRESENT (null is how you clear it) — an omitted key is a caller that
+        // forgot the argument, not a caller asking to clear. Same distinction cello_contact_set_moniker
+        // draws with its `"moniker" in params` check.
+        if (!sessionId || !params || !("session_name" in params)) {
+            return {
+                ok: false,
+                reason: "missing_params",
+                guidance: "Provide 'session_id' (hex) and 'session_name' — a string to name the session, or null to clear it.",
+            };
+        }
+        const check = validateSessionName(params.session_name);
+        if (!check.ok) {
+            logger.warn("session.name.rejected", {
+                agentId: sessionNodeManager.resolveAgentId(agentName), sessionId, reason: check.reason, source: "rename",
+                nameLength: typeof params.session_name === "string" ? params.session_name.length : null,
+            });
+            return { ok: false, reason: check.reason, guidance: check.guidance };
+        }
+        const written = sessionNodeManager.setSessionName(agentName, sessionId, check.value);
+        if (!written) {
+            // The UPDATE matched no row: this agent holds no session with that id. Fail loud rather than
+            // report a success for a write that landed nowhere.
+            return {
+                ok: false,
+                reason: "session_not_found",
+                guidance: "No session with this ID belongs to this agent. Check cello_sessions for its sessions and their IDs.",
+            };
+        }
+        // AC-A16: the LENGTH, never the text. A session name carries the subject of a private
+        // conversation ("Acquisition of Northwind Traders"), and daemon logs are not confidential.
+        const agentId = sessionNodeManager.getSessionRecord(agentName, sessionId)?.agent_id;
+        if (check.value === null) {
+            logger.info("session.name.cleared", { agentId, sessionId, source: "rename" });
+        }
+        else {
+            logger.info("session.name.set", { agentId, sessionId, nameLength: check.value.length, source: "rename" });
+        }
+        return { ok: true, session_id: sessionId, session_name: check.value };
+    });
+    // list_sessions (daemon-wide, for the `cello sessions` CLI which has no current agent): same
+    // filter/limit semantics, across ALL agents.
+    handlers.set("list_sessions", async (params) => {
+        return selectSessions(sessionNodeManager.getAllSessions(), params);
+    });
+    // DAEMON-003 IPC handlers: queue_failed_send and check_nonce (AC-010)
+}
+//# sourceMappingURL=session-read-handlers.js.map

package/dist/session-read-handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-read-handlers.js","sourceRoot":"","sources":["../src/session-read-handlers.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,eAAe,EAAwB,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAkBxD,MAAM,UAAU,2BAA2B,CAAC,IAAqB;IAC/D,MAAM,EACJ,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,YAAY,EAAE,mBAAmB,EACrF,yBAAyB,EAAE,UAAU,EAAE,iBAAiB,EAAE,oBAAoB,EAC9E,wBAAwB,GACzB,GAAG,IAAI,CAAC;IAET,mFAAmF;IACnF,2FAA2F;IAC3F,8FAA8F;IAC9F,8FAA8F;IAC9F,0FAA0F;IAC1F,0FAA0F;IAC1F,uFAAuF;IACvF,0EAA0E;IAC1E,QAAQ,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;QACtE,4FAA4F;QAC5F,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,YAAY,CAAuB,CAAC;QAC/D,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,+FAA+F,EAAE,CAAC;QAChK,CAAC;QACD,0FAA0F;QAC1F,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,4FAA4F;QAC5F,gGAAgG;QAChG,iGAAiG;QACjG,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,KAA2B,CAAC,CAAC;QACtF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,yBAAyB,CAAC;QACnC,CAAC;QACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACzE,IAAI,IAAI,EAAE,CAAC;YACT,4FAA4F;YAC5F,4FAA4F;YAC5F,gEAAgE;YAChE,MAAM,WAAW,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,IAAI,IAAI,CAAC;YACpG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QACpI,CAAC;QACD,+FAA+F;QAC/F,2FAA2F;QAC3F,qGAAqG;QACrG,IAAI,kBAAkB,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;YAC9D,uEAAuE;YACvE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,gBAAgB;gBACxB,QAAQ,EAAE,mKAAmK;aAC9K,CAAC;QACJ,CAAC;QACD,uFAAuF;QACvF,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QACvH,IAAI,KAAK,EAAE,CAAC;YACV,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,aAAa;gBACrB,QAAQ,EAAE,kCAAkC,KAAK,CAAC,IAAI,6BAA6B,SAAS,4BAA4B,KAAK,CAAC,IAAI,qCAAqC;aACxK,CAAC;QACJ,CAAC;QACD,wFAAwF;QACxF,MAAM,SAAS,GAAG,kBAAkB;aACjC,mBAAmB,CAAC,SAAS,CAAC;aAC9B,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC7F,IAAI,SAAS,EAAE,CAAC;YACd,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,sBAAsB;gBAC9B,QAAQ,EAAE,4HAA4H;aACvI,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,iBAAiB;YACzB,QAAQ,EAAE,wHAAwH;SACnI,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,mGAAmG;IACnG,oGAAoG;IACpG,sGAAsG;IACtG,4DAA4D;IAC5D,QAAQ,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;QAClE,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,YAAY,CAAuB,CAAC;QAC/D,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,4EAA4E,EAAE,CAAC;QAC7I,CAAC;QACD,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,kGAAkG;QAClG,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,KAA2B,CAAC,CAAC;QACtF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,yBAAyB,CAAC;QACnC,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,kBAAkB,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC5F,iGAAiG;QACjG,8DAA8D;QAC9D,+FAA+F;QAC/F,0FAA0F;QAC1F,6FAA6F;QAC7F,8FAA8F;QAC9F,yFAAyF;QACzF,6FAA6F;QAC7F,6FAA6F;QAC7F,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/D,iBAAiB,CAAC,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QAC1D,6FAA6F;QAC7F,+FAA+F;QAC/F,gGAAgG;QAChG,iGAAiG;QACjG,iGAAiG;QACjG,gGAAgG;QAChG,mCAAmC;QACnC,oBAAoB,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QAC1D,6FAA6F;QAC7F,MAAM,cAAc,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,IAAI,IAAI,CAAC;QACvG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;IACpG,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,gFAAgF;IAChF,+EAA+E;IAC/E,8EAA8E;IAC9E,iFAAiF;IACjF,+EAA+E;IAC/E,oEAAoE;IACpE,0FAA0F;IAC1F,+FAA+F;IAC/F,0FAA0F;IAC1F,4FAA4F;IAC5F,2FAA2F;IAC3F,MAAM,kBAAkB,GAAG,EAAE,CAAC;IAC9B,MAAM,cAAc,GAAG,GAAG,CAAC;IAC3B,SAAS,cAAc,CACrB,IAAqB,EACrB,MAA2C;QAE3C,MAAM,SAAS,GAAG,OAAO,MAAM,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9E,MAAM,MAAM,GACV,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/F,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,KAAK,GAAG,kBAAkB,CAAC;QACrE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,CAAC;QAEpD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAClC,MAAM,YAAY,GAAG,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAoB,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YAC5E,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GACX,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAuB,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;YACrG,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,+FAA+F;YAC/F,+FAA+F;YAC/F,4FAA4F;YAC5F,4FAA4F;YAC5F,iGAAiG;YACjG,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI;YACrC,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,kBAAkB,EAAE,GAAG,CAAC,mBAAmB;YAC3C,6FAA6F;YAC7F,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,UAAU,CAAC;YACtE,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ;YACR,YAAY;YACZ,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;YACjD,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;YACjD,uEAAuE;YACvE,sDAAsD;YACtD,aAAa,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;SAC1C,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC7E,CAAC;IAED,0FAA0F;IAC1F,gGAAgG;IAChG,iGAAiG;IACjG,iGAAiG;IACjG,QAAQ,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;QACjE,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,kGAAkG;QAClG,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,KAA2B,CAAC,CAAC;QACtF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,yBAAyB,CAAC;QACnC,CAAC;QACD,wBAAwB,CAAC,SAAS,CAAC,CAAC,CAAC,iEAAiE;QACtG,OAAO,cAAc,CACnB,kBAAkB,CAAC,mBAAmB,CAAC,SAAS,CAAC,EACjD,MAA6C,CAC9C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,iGAAiG;IACjG,2FAA2F;IAC3F,gGAAgG;IAChG,mGAAmG;IACnG,mFAAmF;IACnF,QAAQ,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;QAChE,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,KAA2B,CAAC,CAAC;QACtF,IAAI,CAAC,SAAS;YAAE,OAAO,yBAAyB,CAAC;QAEjD,MAAM,SAAS,GAAG,MAAM,EAAE,UAAgC,CAAC;QAC3D,8FAA8F;QAC9F,gGAAgG;QAChG,8CAA8C;QAC9C,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,cAAc,IAAI,MAAM,CAAC,EAAE,CAAC;YACzD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,gBAAgB;gBACxB,QAAQ,EAAE,oGAAoG;aAC/G,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;gBACnC,OAAO,EAAE,kBAAkB,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ;gBACxG,UAAU,EAAE,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;aACxF,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;QACvE,CAAC;QAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACrF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,6FAA6F;YAC7F,oDAAoD;YACpD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,mBAAmB;gBAC3B,QAAQ,EAAE,qGAAqG;aAChH,CAAC;QACJ,CAAC;QAED,sFAAsF;QACtF,2FAA2F;QAC3F,MAAM,OAAO,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,QAAQ,CAAC;QACpF,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChF,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,6FAA6F;IAC7F,6CAA6C;IAC7C,QAAQ,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC7C,OAAO,cAAc,CACnB,kBAAkB,CAAC,cAAc,EAAE,EACnC,MAA6C,CAC9C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,sEAAsE;AACxE,CAAC"}

package/dist/session-relay-client.d.ts

@@ -28,7 +28,7 @@ export interface LeafDeliverFrame {
     structure1_cbor: Uint8Array;
     structure2_cbor: Uint8Array;
     /**
-     * M7-UPGRADE-002: true when the relay echoed back OUR OWN submitted leaf (sender_pubkey ===
+     * True when the relay echoed back OUR OWN submitted leaf (sender_pubkey ===
      * our K_local), false when it is a genuine COUNTERPARTY leaf. The auto-acknowledge gate uses
      * this to never auto-co-sign in response to its own SEAL ctrl leaf (which would loop). An
      * explicit field — the consumer must not have to re-decode structure1_cbor to learn it.
@@ -54,13 +54,13 @@ export interface AgentRelayClientOpts {
     senderPubkey: Uint8Array;
     logger: Logger;
     /**
-     * DOD-RELAYSIG-1: durable store for the relay's signed ordering-record receipts. When present, each
+     * Durable store for the relay's signed ordering-record receipts. When present, each
      * verified `hash_submit_ack` is recorded immutably (the client's evidence of the relay's sequence
      * attestation, carried to the directory at seal time). Optional — when absent, ACKs are not recorded.
      */
     receiptStore?: RelayReceiptStore;
     /**
-     * FED-OPTIONB-SEAL-001: the per-session leaf log a unilateral seal carries to the directory. When
+     * The per-session leaf log a unilateral seal carries to the directory. When
      * present, every leaf this client sees — its OWN submits (with the relay receipt) and the COUNTERPARTY's
      * delivered leaves (no receipt) — is recorded so a later unilateral seal presents the full chain for the
      * directory's OFFLINE tree rebuild. Optional — when absent, no leaf log is kept.
@@ -68,8 +68,8 @@ export interface AgentRelayClientOpts {
     sealLeafStore?: SessionSealLeafStore;
 }
 /**
- * FED-OPTIONB-SETUP-001 (Option B): the directory-signed relay assignment a client presents to its
- * chosen relay (a `client_record_assignment` frame), replacing the old directory→relay dial. The relay
+ * The directory-signed relay assignment a client presents to its chosen relay (a
+ * `client_record_assignment` frame). The relay
  * reconstructs the relay TBS from these fields and verifies `assignmentSignature` (the directory's
  * per-node relayDirSig) against any consortium directory pubkey. Field order/presence MUST match the
  * directory producer (directory-node.ts) and the relay verifier (relay-node.ts recordAssignment).
@@ -96,12 +96,12 @@ export declare function extractErrorMessage(err: unknown): string;
 export declare class AgentRelayClient {
     #private;
     constructor(opts: AgentRelayClientOpts);
-    /** The agent's K_local public key as hex — the responder identity for auto-acknowledge (UPGRADE-002). */
+    /** The agent's K_local public key as hex — the responder identity for auto-acknowledge. */
     get senderPubkeyHex(): string;
     /**
      * Register a session's inbound leaf handler + a live node to (re)dial the relay from
      * (idempotent). Storing the node per session lets a pure-receiver session re-establish
-     * the shared stream if the node that originally dialed is torn down (L5).
+     * the shared stream if the node that originally dialed is torn down.
      */
     registerSession(sessionIdHex: string, node: CelloNode, onLeafDeliver?: (frame: LeafDeliverFrame) => void, assignment?: RelayAssignmentCarry): void;
     /** Remove a session; caller closes the client when no sessions remain. */
@@ -120,7 +120,7 @@ export declare class AgentRelayClient {
     submitMessageHash(node: CelloNode, sessionId: Uint8Array, contentHash: Uint8Array): Promise<SubmitResult>;
     /**
      * Submit a leaf hash of a given kind (0x00 message / 0x02 control) to the relay. The SEAL
-     * ctrl leaf (DOD-SPINE-7) rides this path: two distinct-sender ctrl leaves in the relay's
+     * ctrl leaf rides this path: two distinct-sender ctrl leaves in the relay's
      * log trigger the directory's FROST notarization (relay `#maybeProcessSeal`).
      */
     submitLeaf(node: CelloNode, sessionId: Uint8Array, contentHash: Uint8Array, leafKind: number): Promise<SubmitResult>;

package/dist/session-relay-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-relay-client.d.ts","sourceRoot":"","sources":["../src/session-relay-client.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAoB,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACpF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAIzE,eAAO,MAAM,iBAAiB,uBAAuB,CAAC;AACtD,eAAO,MAAM,iBAAiB,wBAAwB,CAAC;AACvD,iFAAiF;AACjF,eAAO,MAAM,aAAa,IAAO,CAAC;AAClC,iGAAiG;AACjG,eAAO,MAAM,cAAc,IAAO,CAAC;AAKnC;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,UAAU,CAIvF;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,UAAU,EACvB,YAAY,EAAE,UAAU,EACxB,SAAS,EAAE,UAAU,EACrB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,UAAU,CAEZ;AAED,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,UAAU,CAAC;IAC5B,eAAe,EAAE,UAAU,CAAC;IAC5B;;;;;OAKG;IACH,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,gDAAgD;AAChD,MAAM,MAAM,YAAY,GACpB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,eAAe,EAAE,MAAM,CAAC;IAKxB,eAAe,CAAC,EAAE,UAAU,CAAC;IAC7B,eAAe,CAAC,EAAE,UAAU,CAAC;CAC9B,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAGlC,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,sEAAsE;IACtE,WAAW,EAAE,WAAW,CAAC;IACzB,iFAAiF;IACjF,YAAY,EAAE,UAAU,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;CACtC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,UAAU,CAAC;IACzB,YAAY,EAAE,UAAU,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,mBAAmB,EAAE,UAAU,CAAC;CACjC;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAUxD;AA8BD;;;;GAIG;AACH,qBAAa,gBAAgB;;gBAqDf,IAAI,EAAE,oBAAoB;IAUtC,yGAAyG;IACzG,IAAI,eAAe,IAAI,MAAM,CAE5B;IAED;;;;OAIG;IACH,eAAe,CACb,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,SAAS,EACf,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,EACjD,UAAU,CAAC,EAAE,oBAAoB,GAChC,IAAI;IA6FP,0EAA0E;IAC1E,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAK7C,WAAW,IAAI,OAAO;IAuNtB;;;;OAIG;IACG,OAAO,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IA4JhD;;;OAGG;IACG,iBAAiB,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC;IAI/G;;;;OAIG;IACG,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAoE1H,yFAAyF;IACzF,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM;IAIzC,KAAK,IAAI,IAAI;CAWd"}
+{"version":3,"file":"session-relay-client.d.ts","sourceRoot":"","sources":["../src/session-relay-client.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAoB,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACpF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAGzE,eAAO,MAAM,iBAAiB,uBAAuB,CAAC;AACtD,eAAO,MAAM,iBAAiB,wBAAwB,CAAC;AACvD,iFAAiF;AACjF,eAAO,MAAM,aAAa,IAAO,CAAC;AAClC,iGAAiG;AACjG,eAAO,MAAM,cAAc,IAAO,CAAC;AAKnC;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,UAAU,CAIvF;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,UAAU,EACvB,YAAY,EAAE,UAAU,EACxB,SAAS,EAAE,UAAU,EACrB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,UAAU,CAEZ;AAED,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,UAAU,CAAC;IAC5B,eAAe,EAAE,UAAU,CAAC;IAC5B;;;;;OAKG;IACH,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,gDAAgD;AAChD,MAAM,MAAM,YAAY,GACpB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,eAAe,EAAE,MAAM,CAAC;IAKxB,eAAe,CAAC,EAAE,UAAU,CAAC;IAC7B,eAAe,CAAC,EAAE,UAAU,CAAC;CAC9B,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAGlC,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,sEAAsE;IACtE,WAAW,EAAE,WAAW,CAAC;IACzB,iFAAiF;IACjF,YAAY,EAAE,UAAU,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;CACtC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,UAAU,CAAC;IACzB,YAAY,EAAE,UAAU,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,mBAAmB,EAAE,UAAU,CAAC;CACjC;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAUxD;AA8BD;;;;GAIG;AACH,qBAAa,gBAAgB;;gBAqDf,IAAI,EAAE,oBAAoB;IAUtC,2FAA2F;IAC3F,IAAI,eAAe,IAAI,MAAM,CAE5B;IAED;;;;OAIG;IACH,eAAe,CACb,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,SAAS,EACf,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,EACjD,UAAU,CAAC,EAAE,oBAAoB,GAChC,IAAI;IA6FP,0EAA0E;IAC1E,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAK7C,WAAW,IAAI,OAAO;IAuNtB;;;;OAIG;IACG,OAAO,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IA4JhD;;;OAGG;IACG,iBAAiB,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC;IAI/G;;;;OAIG;IACG,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAmE1H,yFAAyF;IACzF,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM;IAIzC,KAAK,IAAI,IAAI;CAWd"}

package/dist/session-relay-client.js

@@ -1,5 +1,5 @@
 /**
- * M7 DOD-SPINE-6 / MSG-001-3b — daemon-side relay witness client (PER AGENT).
+ * Daemon-side relay witness client (PER AGENT).
  *
  * In CELLO the relay is the ordering/witness authority (Structure 2): it never sees
  * plaintext (content is peer↔peer), only the SIGNED content-hash leaves. It assigns
@@ -21,18 +21,17 @@
  *
  * The stream is (re)dialed from whatever live session node is current at submit time, so it
  * survives individual session teardown (the relay treats a same-pubkey reconnect as a
- * reconnect, re-auths, and re-drains). Reuses only proven wire shapes:
- *   - auth: mirror of the retired client's relay challenge-response (proven against this relay)
- *   - Structure 1 + hash_submit: mirror of the retired client's seal-leaf submit path
- *   - server contract: `packages/relay/src/relay-node.ts`
+ * reconnect, re-auths, and re-drains).
+ *
+ * The server contract this must match: `packages/relay/src/relay-node.ts`.
  *
  * Crypto: Ed25519 RFC 8032. Relay auth domain: "CELLO-RELAY-AUTH-v1".
  */
 import { createHash } from "node:crypto";
 import * as lp from "it-length-prefixed";
-import { Encoder, decode } from "cbor-x";
+import { decode } from "cbor-x";
+import { encodeCbor } from "@cello-protocol/protocol-types";
 import { evaluateRelayAck } from "./relay-receipt-store.js";
-const CBOR_ENC = new Encoder({ tagUint8Array: false });
 export const RELAY_PROTOCOL_ID = "/cello/relay/1.0.0";
 export const RELAY_AUTH_DOMAIN = "CELLO-RELAY-AUTH-v1";
 /** Structure 1 leaf kind: 0x00 = message, 0x02 = control (matches the relay). */
@@ -58,7 +57,7 @@ export function buildRelayAuthPayload(nonce, pubkey) {
  * so the encoded bytes — not a re-encoding — are what gets signed and sent.
  */
 export function encodeStructure1(contentHash, senderPubkey, sessionId, lastSeenSeq, timestamp) {
-    return CBOR_ENC.encode([1, contentHash, senderPubkey, sessionId, lastSeenSeq, timestamp]);
+    return encodeCbor([1, contentHash, senderPubkey, sessionId, lastSeenSeq, timestamp]);
 }
 /**
  * Extract a real message from a thrown value. libp2p / cross-package errors are not
@@ -129,16 +128,16 @@ export class AgentRelayClient {
     #lastSeen = new Map();
     /** The one outstanding submit's resolver (global FIFO — ack carries no session_id). */
     #pendingAck = null;
-    // DOD-MSG-4: the sender-signed structure1_cbor of the in-flight submit, paired with its ack so the
+    // The sender-signed structure1_cbor of the in-flight submit, paired with its ack so the
     // SubmitResult can carry it (the ack itself only returns the relay's structure2_cbor).
     #pendingStructure1 = null;
-    // FED-OPTIONB-SEAL-001: the in-flight submit's leaf kind (0x00 msg / 0x02 ctrl), paired with its ack so
+    // The in-flight submit's leaf kind (0x00 msg / 0x02 ctrl), paired with its ack so
     // #captureReceipt can persist it alongside the Structure2/Structure1 carry bytes for the unilateral seal.
     #pendingLeafKind = null;
     /** The session_id hex of the in-flight submit, so its ack updates the right #lastSeen. */
     #pendingAckSessionHex = null;
     /**
-     * FED-OPTIONB-SETUP-001: resolver for the in-flight `client_record_assignment` ack. The ack carries
+     * Resolver for the in-flight `client_record_assignment` ack. The ack carries
      * no session_id (like hash_submit_ack), so at most one record is in flight; records are serialized on
      * the same `#submitChain` as submits, guaranteeing no overlap.
      */
@@ -156,14 +155,14 @@ export class AgentRelayClient {
         this.#receiptStore = opts.receiptStore;
         this.#sealLeafStore = opts.sealLeafStore;
     }
-    /** The agent's K_local public key as hex — the responder identity for auto-acknowledge (UPGRADE-002). */
+    /** The agent's K_local public key as hex — the responder identity for auto-acknowledge. */
     get senderPubkeyHex() {
         return Buffer.from(this.#senderPubkey).toString("hex");
     }
     /**
      * Register a session's inbound leaf handler + a live node to (re)dial the relay from
      * (idempotent). Storing the node per session lets a pure-receiver session re-establish
-     * the shared stream if the node that originally dialed is torn down (L5).
+     * the shared stream if the node that originally dialed is torn down.
      */
     registerSession(sessionIdHex, node, onLeafDeliver, assignment) {
         const existing = this.#sessions.get(sessionIdHex);
@@ -175,10 +174,10 @@ export class AgentRelayClient {
             recorded: existing?.recorded ?? false,
             recordRejected: existing?.recordRejected ?? false,
         });
-        // FED-OPTIONB-SETUP-001 (Option B): eagerly present the assignment so the relay records the session
-        // (binds peer IDs, creates the session entry) BEFORE the first hash_submit or the counterparty's
-        // leaves arrive — matching the timing the old directory→relay recordAssignment dial provided.
-        // Best-effort + serialized on the submit chain (the ack carries no session_id, so no overlap).
+        // Eagerly present the assignment so the relay records the session (binds peer IDs, creates the
+        // session entry) BEFORE the first hash_submit or the counterparty's leaves arrive — the relay
+        // rejects frames for a session it has not recorded. Best-effort + serialized on the submit chain
+        // (the ack carries no session_id, so no overlap).
         if (assignment) {
             this.#submitChain = this.#submitChain
                 .then(() => this.#doRecord(node, sessionIdHex))
@@ -186,7 +185,7 @@ export class AgentRelayClient {
         }
     }
     /**
-     * FED-OPTIONB-SETUP-001: present the directory-signed assignment to the relay (Option B). Idempotent
+     * Present the directory-signed assignment to the relay. Idempotent
      * (no-op once `recorded`, or when the session has no assignment — direct/persisted/legacy sessions).
      * The relay reconstructs the TBS and verifies the per-node directory signature against any consortium
      * key. On success the session is recorded; the send/ack is single-in-flight (mirrors #doSubmit).
@@ -199,7 +198,7 @@ export class AgentRelayClient {
             return true;
         if (sess.recorded)
             return true;
-        // Terminal rejection (code-review M1): a relay that cleanly rejected this assignment will reject it
+        // Terminal rejection: a relay that cleanly rejected this assignment will reject it
         // again — stop re-presenting so a misconfigured/forged case can't storm the shared stream.
         if (sess.recordRejected)
             return false;
@@ -209,7 +208,7 @@ export class AgentRelayClient {
         if (!stream)
             return false;
         const a = sess.assignment;
-        const frame = CBOR_ENC.encode({
+        const frame = encodeCbor({
             type: "client_record_assignment",
             session_id: new Uint8Array(Buffer.from(sessionIdHex, "hex")),
             participant_a: a.participantA,
@@ -322,7 +321,7 @@ export class AgentRelayClient {
         }
     }
     /**
-     * RELAYSIG-1: verify a relay `hash_submit_ack`'s signed ordering record and durably store the receipt.
+     * Verify a relay `hash_submit_ack`'s signed ordering record and durably store the receipt.
      * The relay signs TBS = SHA-256(content_hash || seq_BE4 || ts_BE8) with its ack-signing key, whose hex is
      * `relay_id`. We verify SELF-CONSISTENCY (the signature binds the sequence ⇒ a FORGED sequence fails) and
      * record the immutable receipt. The authoritative registered-relay check is the directory's at seal
@@ -355,8 +354,8 @@ export class AgentRelayClient {
         });
         switch (ev.kind) {
             case "unsigned":
-                // A relay that SHOULD sign (PERSIST-012) but didn't → no durable witness for this message. Not an
-                // error per the DoD (unsigned ACKs are optional), but make it diagnosable instead of invisible.
+                // A relay that SHOULD sign but didn't → no durable witness for this message. Unsigned ACKs are
+                // tolerated, but make it diagnosable instead of invisible.
                 this.#logger.debug("relay.receipt.unsigned", { seq, hashShort: Buffer.from(contentHash).toString("hex").slice(0, 16) });
                 return false;
             case "bad_relay_id":
@@ -365,7 +364,7 @@ export class AgentRelayClient {
             case "invalid_signature":
                 // FORGED / corrupt ACK — the signature does not bind (hash, seq, ts). REJECT the submit so the send
                 // does NOT settle ok on an unverified sequence (a forged ordering record must not drive ordering),
-                // and store nothing (DoD: "a forged sequence is rejected"). The send still completes via the direct
+                // and store nothing. The send still completes via the direct
                 // content path — the relay witness simply degrades to absent for this leaf.
                 this.#logger.warn("relay.receipt.signature_invalid", { seq });
                 return true;
@@ -377,7 +376,7 @@ export class AgentRelayClient {
                     if (wrote) {
                         this.#logger.info("relay.receipt.stored", { seq, hashShort: ev.receipt.hashHex.slice(0, 16), relayShort: ev.receipt.relayId.slice(0, 16) });
                     }
-                    // FED-OPTIONB-SEAL-001: record this OWN leaf in the seal-leaf log WITH its relay receipt (the
+                    // Record this OWN leaf in the seal-leaf log WITH its relay receipt (the
                     // relay's signature pins content_hash→seq — the teeth that stop a supplier reordering its own
                     // leaves). structure2_cbor rides the ack we just verified; structure1Cbor + the leaf kind are this
                     // submit's paired in-flight values. Best-effort + separate from the receipt write.
@@ -397,7 +396,7 @@ export class AgentRelayClient {
                 }
                 catch (err) {
                     // A durable-evidence write failure must be LOUD — the relay will not re-emit this ack, so a
-                    // swallowed write permanently loses a verified receipt (fallback #4).
+                    // swallowed write permanently loses a verified receipt.
                     this.#logger.error("relay.receipt.store_failed", { seq, error: err instanceof Error ? err.message : String(err) });
                 }
                 return false;
@@ -409,17 +408,17 @@ export class AgentRelayClient {
         if (type === "hash_submit_ack") {
             const seq = typeof frame["sequence_number"] === "number" ? frame["sequence_number"] : -1;
             // DO NOT advance #lastSeen here: the ack is for OUR OWN leaf. last_seen_seq must track
-            // the highest COUNTERPARTY sequence we've observed (the directory's causal check —
-            // SESSION-003 SI-003 — rejects a leaf whose last_seen_seq exceeds the max sequence of
-            // OTHER-sender leaves before it). Advancing on our own ack would inflate it and trip
-            // causal_chain_violated on a subsequent submit (e.g. the SEAL leaf after a sent message).
-            // DOD-MSG-4: pair the relay's committed structure2_cbor with our in-flight structure1_cbor so
+            // the highest COUNTERPARTY sequence we've observed — the directory's causal check rejects a leaf
+            // whose last_seen_seq exceeds the max sequence of OTHER-sender leaves before it. Advancing on our
+            // own ack would inflate it and trip causal_chain_violated on a subsequent submit (e.g. the SEAL
+            // leaf after a sent message).
+            // Pair the relay's committed structure2_cbor with our in-flight structure1_cbor so
             // the SubmitResult carries the full signed ordering record for the self-ordering content frame.
             // Captured BEFORE #settlePending clears #pendingStructure1.
             const s2 = frame["structure2_cbor"];
             const structure2Cbor = s2 instanceof Uint8Array ? s2 : undefined;
             const structure1Cbor = this.#pendingStructure1 ?? undefined;
-            // RELAYSIG-1: verify the relay's signed ordering record and durably store the receipt BEFORE
+            // Verify the relay's signed ordering record and durably store the receipt BEFORE
             // settling (which clears #pendingStructure1, the source of the content hash + session id). A
             // signed-but-INVALID ACK rejects the submit so the send does not settle ok on an unverified sequence.
             const rejectSubmit = this.#captureReceipt(frame, structure1Cbor, seq);
@@ -434,7 +433,7 @@ export class AgentRelayClient {
             this.#settlePending({ ok: false, reason });
         }
         else if (type === "assignment_ok") {
-            // FED-OPTIONB-SETUP-001: the relay verified + recorded our client-presented assignment.
+            // The relay verified + recorded our client-presented assignment.
             const r = this.#pendingRecord;
             this.#pendingRecord = null;
             if (r)
@@ -458,7 +457,7 @@ export class AgentRelayClient {
             const authoredByUs = this.#isOwnLeaf(s1);
             if (seq >= 0 && !authoredByUs)
                 this.#bumpLastSeen(sidHex, seq);
-            // FED-OPTIONB-SEAL-001: record the COUNTERPARTY's delivered leaf in the seal-leaf log (no relay
+            // Record the COUNTERPARTY's delivered leaf in the seal-leaf log (no relay
             // receipt — the relay does not ack-sign a delivery to the recipient). It is pinned at seal by the
             // absent party's sender_signature (unforgeable) + sequence contiguity against our receipt-pinned own
             // leaves. Our OWN echoed leaf is skipped here (it is recorded WITH its receipt on the ack path).
@@ -497,7 +496,7 @@ export class AgentRelayClient {
                     leaf_kind: typeof frame["leaf_kind"] === "number" ? frame["leaf_kind"] : LEAF_KIND_MSG,
                     structure1_cbor: s1,
                     structure2_cbor: toU8(frame["structure2_cbor"]),
-                    // M7-UPGRADE-002: tell the consumer whether this is our own echoed leaf (so the
+                    // Tell the consumer whether this is our own echoed leaf (so the
                     // auto-acknowledge gate never co-signs in response to its own SEAL ctrl leaf).
                     authored_by_us: authoredByUs,
                 });
@@ -591,7 +590,7 @@ export class AgentRelayClient {
         }
         const authSig = await this.#keyProvider.sign(buildRelayAuthPayload(nonce, this.#senderPubkey));
         try {
-            stream.send(lp.encode.single(CBOR_ENC.encode({ type: "relay_auth_response", pubkey: this.#senderPubkey, signature: authSig })));
+            stream.send(lp.encode.single(encodeCbor({ type: "relay_auth_response", pubkey: this.#senderPubkey, signature: authSig })));
         }
         catch (err) {
             this.#logger.warn("session.relay.auth.failed", { relayPeerId: this.#relayPeerId, reason: "response_send", error: extractErrorMessage(err) });
@@ -649,7 +648,7 @@ export class AgentRelayClient {
                 if (this.#stream === stream)
                     this.#stream = null;
                 this.#settlePending({ ok: false, reason: "relay_stream_closed" });
-                // FED-OPTIONB-SETUP-001 (code-review L4): settle an in-flight record too, so #doRecord doesn't
+                // Settle an in-flight record too, so #doRecord doesn't
                 // wait the full timeout on a dropped stream. "closed" is transient (not a directory rejection) ⇒
                 // recorded stays false and it is retried after reconnect.
                 {
@@ -658,7 +657,7 @@ export class AgentRelayClient {
                     if (r)
                         r("closed");
                 }
-                // L5: a pure-receiver session issues no submit, so it would never trigger a re-dial
+                // A pure-receiver session issues no submit, so it would never trigger a re-dial
                 // after the node that owned the stream is torn down. If sessions remain, proactively
                 // re-establish from any still-live registered session node so queued leaf_delivers
                 // are drained (the relay queues by pubkey and re-delivers on reconnect).
@@ -686,7 +685,7 @@ export class AgentRelayClient {
     }
     /**
      * Submit a leaf hash of a given kind (0x00 message / 0x02 control) to the relay. The SEAL
-     * ctrl leaf (DOD-SPINE-7) rides this path: two distinct-sender ctrl leaves in the relay's
+     * ctrl leaf rides this path: two distinct-sender ctrl leaves in the relay's
      * log trigger the directory's FROST notarization (relay `#maybeProcessSeal`).
      */
     async submitLeaf(node, sessionId, contentHash, leafKind) {
@@ -703,10 +702,9 @@ export class AgentRelayClient {
         if (!(await this.#ensureConnected(node)))
             return { ok: false, reason: "relay_unavailable" };
         const sessionIdHex = Buffer.from(sessionId).toString("hex");
-        // FED-OPTIONB-SETUP-001 (Option B): the relay records the session from the CLIENT-presented
-        // assignment (the directory no longer dials the relay). Ensure it is recorded BEFORE the first
-        // hash_submit — the relay rejects a submit for an unknown session. Idempotent + no-op when there is
-        // no assignment to present (direct/persisted/legacy). Runs inline on the submit chain (no re-chaining
+        // The relay records the session from the CLIENT-presented assignment. It MUST be recorded BEFORE
+        // the first hash_submit — the relay rejects a submit for an unknown session. Idempotent + no-op when
+        // there is no assignment to present (direct/persisted sessions). Runs inline on the submit chain (no re-chaining
         // — #doSubmit is already a chain link), and may reset the stream on failure, so capture #stream after.
         await this.#doRecord(node, sessionIdHex);
         const stream = this.#stream;
@@ -717,7 +715,7 @@ export class AgentRelayClient {
         const lastSeenForSession = this.#lastSeen.get(sessionIdHex) ?? 0;
         const structure1 = encodeStructure1(contentHash, this.#senderPubkey, sessionId, lastSeenForSession, Date.now());
         const signature = await this.#keyProvider.sign(structure1);
-        const frame = CBOR_ENC.encode({
+        const frame = encodeCbor({
             type: "hash_submit",
             session_id: sessionId,
             leaf_kind: leafKind,
@@ -730,7 +728,7 @@ export class AgentRelayClient {
         const ackPromise = new Promise((r) => { resolveAck = r; });
         this.#pendingAck = resolveAck;
         this.#pendingAckSessionHex = sessionIdHex;
-        // DOD-MSG-4: remember this submit's sender-signed structure1_cbor so its ack can return the full
+        // Remember this submit's sender-signed structure1_cbor so its ack can return the full
         // ordering record (the ack itself carries only the relay's structure2_cbor).
         this.#pendingStructure1 = structure1;
         this.#pendingLeafKind = leafKind;
@@ -775,7 +773,7 @@ export class AgentRelayClient {
     close() {
         this.#closed = true;
         this.#settlePending({ ok: false, reason: "relay_client_closed" });
-        // FED-OPTIONB-SETUP-001 (code-review L4): settle any in-flight record so #doRecord resolves promptly.
+        // Settle any in-flight record so #doRecord resolves promptly.
         {
             const r = this.#pendingRecord;
             this.#pendingRecord = null;