@cello-protocol/daemon 0.0.58 → 0.0.60

package/dist/sqlcipher-db.js

@@ -242,8 +242,81 @@ export function openEncryptedDatabase(dbPath, dbKey, logger) {
     catch (err) {
         logger?.warn("persist.db.wal.unavailable", { error: err instanceof Error ? err.message : String(err) });
     }
+    // M10-D19: FOREIGN KEY enforcement. SQLite defaults this OFF — and with it off, a declared
+    // `FOREIGN KEY` is DECORATIVE: SQLite happily accepts an orphan row, so a schema that looks like it
+    // enforces a relationship enforces nothing. INV-AGENT-SCOPED depends on this being real (a received
+    // trust signal cannot exist except hung off one agent's contact row — `contact_trust_signals` FKs to
+    // `contacts(agent_id, pubkey)`), and ON DELETE CASCADE only fires when it is on.
+    //
+    // It is per-CONNECTION, not per-database, so it belongs here at open — not in a migration, which
+    // would set it for exactly one connection and leave every later one unguarded.
+    //
+    // Safe to enable on existing databases: the daemon declared ZERO foreign keys before this, so there
+    // is no pre-existing constraint that enforcement could retroactively violate.
+    inner.pragma("foreign_keys = ON");
+    const fkOn = inner.pragma("foreign_keys", { simple: true });
+    if (fkOn !== 1 && fkOn !== true) {
+        // Refuse to run with a silently-unenforced schema. If FKs cannot be turned on, every FK in the
+        // DB is a lie and INV-AGENT-SCOPED is unenforced — that is not a degraded mode we announce and
+        // continue through, it is a broken security property. ABSENT IS NOT FINE.
+        try {
+            inner.close();
+        }
+        catch { /* ignore */ }
+        throw new DbEncryptionError("db_open_failed", `PRAGMA foreign_keys did not take effect (reported ${String(fkOn)})`, "This SQLite build will not enforce foreign keys, so per-agent scoping of received trust signals cannot be guaranteed. The daemon will not run with an unenforced schema.");
+    }
     return new SqlcipherDatabase(inner);
 }
+/**
+ * Run a table REBUILD (the create-copy-drop-rename recipe) with foreign keys safely disabled.
+ *
+ * THE TRAP THIS EXISTS TO CLOSE. With `PRAGMA foreign_keys = ON` (M10-D19), SQLite treats
+ * `DROP TABLE parent` as an implicit `DELETE FROM parent` — which **fires `ON DELETE CASCADE` and
+ * silently empties every child table**. No error. No log. The rebuild's own row-count guards count
+ * the table being rebuilt, not its children, so they pass. Measured:
+ *
+ *     children before rebuild: 1
+ *     PRAGMA foreign_keys = OFF  (inside BEGIN)  -> still reports 1   <-- A SILENT NO-OP
+ *     DROP TABLE contacts                        -> children: 0       <-- cascade fired
+ *
+ * And the obvious mitigation does not work: **`PRAGMA foreign_keys` is a no-op inside a
+ * transaction.** SQLite ignores it and says nothing. Since every rebuild in this codebase runs
+ * inside one `BEGIN…COMMIT` (agent-id-migration.ts rebuilds seven tables, `contacts` among them),
+ * a rebuild that "disabled" FKs in the usual place would still cascade.
+ *
+ * So the pragma must be toggled OUTSIDE the transaction, which is what this helper enforces — and it
+ * VERIFIES the toggle took effect rather than assuming it, because the failure is silent by nature.
+ * On the way out it re-enables FKs and runs `PRAGMA foreign_key_check`: a rebuild that left a
+ * dangling reference (e.g. `ALTER TABLE parent RENAME` rewrites children's FK clauses to point at
+ * the renamed table) is a loud failure here rather than a mystery on some later insert.
+ */
+export function withForeignKeysOff(db, logger, fn) {
+    db.exec("PRAGMA foreign_keys = OFF");
+    // Verify. If we are inside a transaction the pragma was silently ignored, and proceeding would
+    // cascade-delete children on the first DROP. Refuse — do not rebuild with FKs live.
+    const off = db.prepare("PRAGMA foreign_keys").get();
+    if (off?.foreign_keys !== 0) {
+        throw new Error("table rebuild refused: PRAGMA foreign_keys = OFF did not take effect (still " +
+            `${String(off?.foreign_keys)}). PRAGMA foreign_keys is a NO-OP inside a transaction — this ` +
+            "helper must be called OUTSIDE any BEGIN. Rebuilding with FKs live makes DROP TABLE <parent> " +
+            "cascade-delete every child row, silently.");
+    }
+    try {
+        return fn();
+    }
+    finally {
+        db.exec("PRAGMA foreign_keys = ON");
+        const violations = db.prepare("PRAGMA foreign_key_check").all();
+        if (violations.length > 0) {
+            // The rebuild left dangling references. Loud — an FK that points at a table that no longer
+            // exists (or a renamed one) fails on some unrelated insert much later, naming the wrong
+            // subsystem entirely.
+            logger?.error("persist.db.rebuild.fk_violation", { violations: violations.length });
+            throw new Error(`table rebuild left ${violations.length} foreign-key violation(s) — PRAGMA foreign_key_check ` +
+                "is non-empty. The rebuilt table's children now reference a parent that is missing or renamed.");
+        }
+    }
+}
 /**
  * Convenience used by tests and tooling: resolve the key file beside `dbPath` and open. Throws if
  * the key file is absent (it does NOT generate one) — callers inspecting an existing DB always have

package/dist/sqlcipher-db.js.map

@@ -1 +1 @@
-{"version":3,"file":"sqlcipher-db.js","sourceRoot":"","sources":["../src/sqlcipher-db.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EACL,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,SAAS,EACT,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,YAAY,GAAG,EAAE,CAAC,CAAC,UAAU;AA0BnC,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,CAAc;IAC3B,mFAAmF;IAC1E,QAAQ,CAAS;IAC1B,YAAY,IAAiB,EAAE,OAAe,EAAE,QAAgB;QAC9D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAwBD,mFAAmF;AAEnF,MAAM,kBAAkB;IACb,MAAM,CAAkB;IACjC,YAAY,KAAsB;QAChC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,GAAG,CAAC,GAAG,MAAiB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,GAAG,CAAC,GAAG,MAAiB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,GAAG,CAAC,GAAG,MAAiB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;CACF;AAED,MAAM,iBAAiB;IACZ,MAAM,CAAiB;IAChC,YAAY,KAAqB;QAC/B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,GAAW;QACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,GAAW;QACjB,OAAO,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,CAAC,MAAc,EAAE,OAA8B;QACnD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF;AAED,yFAAyF;AACzF,6FAA6F;AAC7F,iGAAiG;AACjG,sDAAsD;AACtD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAEpG,wFAAwF;AACxF,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,2FAA2F;YAC3F,MAAM,SAAS,GAAG,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAChE,IAAI,SAAS,GAAG,YAAY,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;QACpD,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AACnC,CAAC;AAED,oFAAoF;AAEpF;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,OAAe;IAC1D,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAChC,MAAM,IAAI,iBAAiB,CACzB,4BAA4B,EAC5B,yBAAyB,GAAG,CAAC,MAAM,oBAAoB,YAAY,EAAE,EACrE,mBAAmB,OAAO,uFAAuF,CAClH,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,iBAAiB,CACzB,4BAA4B,EAC5B,sBAAsB,MAAM,wCAAwC,EACpE,iEAAiE,OAAO,wFAAwF,CACjK,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,MAAM,GAAG,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,oBAAoB,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9F,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACnB,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,6FAA6F;QAC7F,6DAA6D;QAC7D,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,IAAI,CAAC;YACH,UAAU,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,IAAI,CAAC;QACH,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,UAAU,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,kGAAkG;IAClG,6FAA6F;IAC7F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,SAAS,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,oFAAoF;AAEpF;;;;GAIG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,sBAAsB,CAAiB,CAAC;IACzD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,iBAAiB,CACzB,0BAA0B,EAC1B,wCAAwC,MAAM,EAAE,EAChD,wGAAwG,CACzG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,KAAiB,EACjB,MAAyE;IAEzE,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC;IAEzC,IAAI,KAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,MAAM,EAAE,uCAAuC,MAAM,GAAG,CAAC,CAAC;IAC1G,CAAC;IAED,kGAAkG;IAClG,iGAAiG;IACjG,iGAAiG;IACjG,gBAAgB;IAChB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,KAAK,CAAC,MAAM,CAAC,YAAY,MAAM,IAAI,CAAC,CAAC;IAErC,IAAI,CAAC;QACH,0FAA0F;QAC1F,KAAK,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,8FAA8F;QAC9F,2DAA2D;QAC3D,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,iBAAiB,CACzB,4BAA4B,EAC5B,mDAAmD,MAAM,GAAG,EAC5D,mIAAmI,CACpI,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,4FAA4F;YAC5F,2FAA2F;YAC3F,MAAM,EAAE,IAAI,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,EAAE,IAAI,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1G,CAAC;IAED,OAAO,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAc,EAAE,OAAgB;IAC1E,MAAM,EAAE,GAAG,OAAO,IAAI,GAAG,MAAM,MAAM,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,iBAAiB,CACzB,4BAA4B,EAC5B,mCAAmC,EAAE,EAAE,EACvC,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC7B,OAAO,qBAAqB,CAAC,MAAM,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,GAAG,MAAM,MAAM,CAAC;AACzB,CAAC"}
+{"version":3,"file":"sqlcipher-db.js","sourceRoot":"","sources":["../src/sqlcipher-db.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EACL,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,SAAS,EACT,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,YAAY,GAAG,EAAE,CAAC,CAAC,UAAU;AA0BnC,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,CAAc;IAC3B,mFAAmF;IAC1E,QAAQ,CAAS;IAC1B,YAAY,IAAiB,EAAE,OAAe,EAAE,QAAgB;QAC9D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAwBD,mFAAmF;AAEnF,MAAM,kBAAkB;IACb,MAAM,CAAkB;IACjC,YAAY,KAAsB;QAChC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,GAAG,CAAC,GAAG,MAAiB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,GAAG,CAAC,GAAG,MAAiB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,GAAG,CAAC,GAAG,MAAiB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;CACF;AAED,MAAM,iBAAiB;IACZ,MAAM,CAAiB;IAChC,YAAY,KAAqB;QAC/B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,GAAW;QACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,GAAW;QACjB,OAAO,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,CAAC,MAAc,EAAE,OAA8B;QACnD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF;AAED,yFAAyF;AACzF,6FAA6F;AAC7F,iGAAiG;AACjG,sDAAsD;AACtD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAEpG,wFAAwF;AACxF,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,2FAA2F;YAC3F,MAAM,SAAS,GAAG,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAChE,IAAI,SAAS,GAAG,YAAY,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;QACpD,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AACnC,CAAC;AAED,oFAAoF;AAEpF;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,OAAe;IAC1D,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAChC,MAAM,IAAI,iBAAiB,CACzB,4BAA4B,EAC5B,yBAAyB,GAAG,CAAC,MAAM,oBAAoB,YAAY,EAAE,EACrE,mBAAmB,OAAO,uFAAuF,CAClH,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,iBAAiB,CACzB,4BAA4B,EAC5B,sBAAsB,MAAM,wCAAwC,EACpE,iEAAiE,OAAO,wFAAwF,CACjK,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,MAAM,GAAG,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,oBAAoB,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9F,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACnB,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,6FAA6F;QAC7F,6DAA6D;QAC7D,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,IAAI,CAAC;YACH,UAAU,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,IAAI,CAAC;QACH,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,UAAU,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,kGAAkG;IAClG,6FAA6F;IAC7F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,SAAS,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,oFAAoF;AAEpF;;;;GAIG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,sBAAsB,CAAiB,CAAC;IACzD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,iBAAiB,CACzB,0BAA0B,EAC1B,wCAAwC,MAAM,EAAE,EAChD,wGAAwG,CACzG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,KAAiB,EACjB,MAAyE;IAEzE,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC;IAEzC,IAAI,KAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,MAAM,EAAE,uCAAuC,MAAM,GAAG,CAAC,CAAC;IAC1G,CAAC;IAED,kGAAkG;IAClG,iGAAiG;IACjG,iGAAiG;IACjG,gBAAgB;IAChB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,KAAK,CAAC,MAAM,CAAC,YAAY,MAAM,IAAI,CAAC,CAAC;IAErC,IAAI,CAAC;QACH,0FAA0F;QAC1F,KAAK,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,8FAA8F;QAC9F,2DAA2D;QAC3D,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,iBAAiB,CACzB,4BAA4B,EAC5B,mDAAmD,MAAM,GAAG,EAC5D,mIAAmI,CACpI,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,4FAA4F;YAC5F,2FAA2F;YAC3F,MAAM,EAAE,IAAI,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,EAAE,IAAI,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1G,CAAC;IAED,2FAA2F;IAC3F,oGAAoG;IACpG,oGAAoG;IACpG,qGAAqG;IACrG,iFAAiF;IACjF,EAAE;IACF,iGAAiG;IACjG,+EAA+E;IAC/E,EAAE;IACF,oGAAoG;IACpG,8EAA8E;IAC9E,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAChC,+FAA+F;QAC/F,+FAA+F;QAC/F,0EAA0E;QAC1E,IAAI,CAAC;YAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,IAAI,iBAAiB,CACzB,gBAAgB,EAChB,qDAAqD,MAAM,CAAC,IAAI,CAAC,GAAG,EACpE,0KAA0K,CAC3K,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,kBAAkB,CAAI,EAAkB,EAAE,MAA0B,EAAE,EAAW;IAC/F,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAErC,+FAA+F;IAC/F,oFAAoF;IACpF,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAA2C,CAAC;IAC7F,IAAI,GAAG,EAAE,YAAY,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,8EAA8E;YAC9E,GAAG,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,gEAAgE;YAC5F,8FAA8F;YAC9F,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,GAAG,EAAe,CAAC;QAC7E,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,2FAA2F;YAC3F,wFAAwF;YACxF,sBAAsB;YACtB,MAAM,EAAE,KAAK,CAAC,iCAAiC,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YACpF,MAAM,IAAI,KAAK,CACb,sBAAsB,UAAU,CAAC,MAAM,uDAAuD;gBAC9F,+FAA+F,CAChG,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAc,EAAE,OAAgB;IAC1E,MAAM,EAAE,GAAG,OAAO,IAAI,GAAG,MAAM,MAAM,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,iBAAiB,CACzB,4BAA4B,EAC5B,mCAAmC,EAAE,EAAE,EACvC,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC7B,OAAO,qBAAqB,CAAC,MAAM,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,GAAG,MAAM,MAAM,CAAC;AACzB,CAAC"}

package/dist/trust-signal-store.d.ts

@@ -0,0 +1,164 @@
+/**
+ * M10 / DOD-STORE-CLIENT-1 — the daemon's two trust-signal tables.
+ *
+ * TWO tables, never one with a role flag (M10-D4). They answer different questions and obey
+ * different scoping rules, and a single table with a `role` column is how one set of rules ends up
+ * applied to the other's rows.
+ *
+ *   `wallet_trust_signals`  — signals ABOUT this daemon's agents, held so they can be PRESENTED.
+ *   `contact_trust_signals` — signals OTHER agents PRESENTED TO one of my agents.
+ *
+ * THE WALLET CARRIES NO AGENT ASSOCIATION (M10-D14). PK = `signal_hash`; one row per signal per
+ * daemon, and nothing more. It is the envelope's own HASHED `subject_kind`/`subject` that decides
+ * who may present it, evaluated at presentation time — not a local attribution decided at delivery
+ * time. That is the whole point: an account-subject signal (phone, email) serves every agent under
+ * the account, so **adding an agent to an existing daemon is ZERO signal work** — no assignment
+ * sweep, no re-attribution at renewal, no copies to keep in step at expiry. A per-agent column
+ * would quietly reintroduce every one of those chores.
+ *
+ * THE RECEIVED STORE IS PER-AGENT, AND THE DATABASE ENFORCES IT (INV-AGENT-SCOPED). Consent is
+ * genuinely per-agent here: a signal Bob showed to my agent `alice` must be invisible to my agent
+ * `bob` on the same daemon. `agent_id` is NOT NULL and the row hangs off a contact row by composite
+ * FK, so an unscoped row cannot be written at all — as opposed to being merely discouraged by a
+ * query convention that every future caller must remember. (This requires `PRAGMA foreign_keys = ON`,
+ * set at open in sqlcipher-db.ts — M10-D19. Without it the FK is decorative.) This is where the M8
+ * scaffold's `agent_id = null` defect dies.
+ *
+ * EVIDENCE, NOT AN INPUT (M10-D4 / INV-STATELESS-RECIPIENT). Received rows are re-checkable evidence
+ * of what was presented and when we verified it. They are NEVER an input to policy evaluation, which
+ * consumes only the currently-presented set, and they are never trusted for freshness (that is
+ * re-checked on use). This module therefore exposes no "is this contact trusted?" read — the absence
+ * is deliberate and structural. Do not add one.
+ *
+ * OPAQUE THROUGHOUT (INV-ZERO-BUMP / INV-TYPE-CARRY). `type` is a TEXT column with no CHECK, no
+ * enum, and no index predicated on a type value; `payload` is a BLOB that is never parsed and whose
+ * fields are never hoisted into columns. A type string this code has never seen stores, reads, and
+ * presents exactly like a known one. Adding a signal type must require no change to this file.
+ */
+import type { DaemonDatabase } from "./sqlcipher-db.js";
+import type { Logger } from "./types.js";
+/** Status lives OUTSIDE the hash — it is mutable after minting, which is exactly why it is not in
+ *  the preimage. If it were hashed, revoking a signal would change its hash and the directory could
+ *  never find it again. */
+export type SignalStatus = "active" | "revoked" | "superseded";
+/** The envelope, as this store takes and returns it. Mirrors `TrustSignalEnvelope` in
+ *  protocol-types, plus the two non-hashed local columns. */
+export interface WalletSignalInput {
+    signalHash: string;
+    subjectKind: "account" | "agent";
+    subject: string;
+    issuerKind: "portal" | "agent";
+    issuerPubkey: string;
+    /** OPAQUE. Never gated on, never enumerated. */
+    type: string;
+    schemaVersion: number;
+    /** OPAQUE bytes. Never parsed. */
+    payload: Uint8Array;
+    issuedAt: number;
+    expiresAt: number | null;
+    supersedesHash: string | null;
+    status: SignalStatus | string;
+}
+export interface WalletSignalRow extends WalletSignalInput {
+    receivedAt: number;
+}
+/**
+ * A signal a contact PRESENTED to one of my agents, as it is stored after verification.
+ *
+ * ⚠️ NOTE WHAT IS ABSENT: there is no `status` field, and this type deliberately does NOT extend
+ * `WalletSignalInput`.
+ *
+ * `status` is outside the hash preimage — that is what makes it mutable, and it also means it is
+ * **NOT AUTHENTICATED BY THE SIGNAL HASH**. A presenter can claim any status they like. If this type
+ * simply extended the wallet's, the peer's claimed `status` would ride in the same struct as the
+ * envelope fields and the natural call site would pass it straight through to the database.
+ *
+ * The attack that permits: Bob presents signal H; we verify it, find it REVOKED at the directory,
+ * and store that as evidence. Next session Bob re-presents the same hash claiming `status: active`.
+ * An upsert on the peer's value overwrites the one durable record that says we caught it — the party
+ * a revocation indicts gets to erase the indictment. Evidence an adversary can rewrite is not
+ * evidence.
+ *
+ * So the stored status is OUR verification verdict (`verdict`), produced by the verification seam
+ * (DOD-VERIFY-1) from what the DIRECTORY said — never a field the peer controls. Removing `status`
+ * from the input type makes that structural: there is no pass-through to forget to block.
+ */
+export interface ReceivedSignalInput extends Omit<WalletSignalInput, "status"> {
+    agentId: string;
+    contactPubkey: string;
+    verifiedAt: number;
+    /** OUR verdict from re-checking the directory — never the presenter's claim. */
+    verdict: SignalStatus;
+}
+export interface ReceivedSignalRow extends ReceivedSignalInput {
+    receivedAt: number;
+}
+/**
+ * Idempotent schema. Must run AFTER `contacts` exists — the composite FK's parent. SQLite resolves
+ * an FK's parent at DML time, not at DDL time, so creating this first would not fail here; it would
+ * fail later, on the first insert, which is a far worse place to find out.
+ */
+export declare function ensureTrustSignalSchema(db: DaemonDatabase, _logger: Logger): void;
+export declare class TrustSignalStore {
+    #private;
+    /**
+     * Does NOT create the schema. `SessionNodeManager.initialize()` owns it, and must — the received
+     * table's FK parent is `contacts`, which that init creates. A store that created its own schema
+     * would happily build `contact_trust_signals` on any handle lacking `contacts`, producing a
+     * dangling FK that then fails on the first INSERT with `no such table: main.contacts` — an error
+     * that names the wrong subsystem, at the wrong time, far from the cause.
+     */
+    constructor(db: DaemonDatabase, logger: Logger);
+    /**
+     * Store a signal this daemon holds about one of its agents.
+     *
+     * `INSERT OR IGNORE`, and that is a correctness property, not a convenience: the row is keyed by
+     * its own content hash, so a second delivery of the same hash is by definition the same signal.
+     * If the bytes really differed, the hash would differ. A differing payload under an identical hash
+     * is therefore a liar, and it must not overwrite the truth. This is also what makes duplicate
+     * delivery a no-op and wallet rows safely mergeable across a user's daemons (spec §14.11).
+     */
+    putWalletSignal(s: WalletSignalInput): void;
+    getWalletSignal(signalHash: string): WalletSignalRow | null;
+    /**
+     * Status is the ONE mutable field — it lives outside the hash precisely so this is possible.
+     *
+     * REVOCATION IS TERMINAL. A revoked signal can never go back to `active`. Without that guard this
+     * is a blind UPDATE, and a stale or replayed directory read reporting `active` for a hash we
+     * already revoked would resurrect it — and `listPresentable` would start offering it again. The
+     * directory is the authority on revocation, but a LATE answer from it is not a NEW answer; the
+     * monotonic rule makes out-of-order responses harmless instead of dangerous.
+     *
+     * `superseded` may still be overtaken by `revoked` (a superseded signal can also be revoked), but
+     * never the reverse, and never back to `active`.
+     */
+    setWalletStatus(signalHash: string, status: SignalStatus): void;
+    /**
+     * The signals `agentId` may present, resolved from the ENVELOPE, not from a stored attribution:
+     * an `account`-subject row is presentable by every agent under `accountId`; an `agent`-subject row
+     * only by its own subject (M10-D5/M10-D14).
+     *
+     * Excludes expired and non-active rows. Selective disclosure (all / some / none) is the CALLER's
+     * choice on top of this — DOD-PRESENT-1; this returns what is *eligible*, never what to send.
+     */
+    listPresentable(opts: {
+        agentId: string;
+        accountId: string;
+        nowSec?: number;
+    }): WalletSignalRow[];
+    /**
+     * Store a signal a contact PRESENTED to one of my agents, after it was verified.
+     *
+     * The FK refuses a row for a contact that does not exist — an unscoped received signal is not
+     * merely discouraged, it is unwritable. `verified_at` is RE-STAMPED on re-presentation: it records
+     * when WE last re-verified, and a stale value that looked fresh would be worse than no value at
+     * all (freshness is re-checked on use — M10-D4).
+     */
+    putReceivedSignal(s: ReceivedSignalInput): void;
+    /** Evidence only. Never an input to policy — see the header. */
+    listReceived(opts: {
+        agentId: string;
+        contactPubkey: string;
+    }): ReceivedSignalRow[];
+}
+//# sourceMappingURL=trust-signal-store.d.ts.map

package/dist/trust-signal-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-signal-store.d.ts","sourceRoot":"","sources":["../src/trust-signal-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC;;2BAE2B;AAC3B,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,SAAS,GAAG,YAAY,CAAC;AAE/D;6DAC6D;AAC7D,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,SAAS,GAAG,OAAO,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,kCAAkC;IAClC,OAAO,EAAE,UAAU,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,YAAY,GAAG,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,mBAAoB,SAAQ,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,OAAO,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,WAAW,iBAAkB,SAAQ,mBAAmB;IAC5D,UAAU,EAAE,MAAM,CAAC;CACpB;AAmDD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAMjF;AAiED,qBAAa,gBAAgB;;IAI3B;;;;;;OAMG;gBACS,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM;IAK9C;;;;;;;;OAQG;IACH,eAAe,CAAC,CAAC,EAAE,iBAAiB,GAAG,IAAI;IAmB3C,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI;IAO3D;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI;IA0B/D;;;;;;;OAOG;IACH,eAAe,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,eAAe,EAAE;IAqBjG;;;;;;;OAOG;IACH,iBAAiB,CAAC,CAAC,EAAE,mBAAmB,GAAG,IAAI;IA8B/C,gEAAgE;IAChE,YAAY,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,iBAAiB,EAAE;CAiBpF"}

package/dist/trust-signal-store.js

@@ -0,0 +1,284 @@
+/**
+ * M10 / DOD-STORE-CLIENT-1 — the daemon's two trust-signal tables.
+ *
+ * TWO tables, never one with a role flag (M10-D4). They answer different questions and obey
+ * different scoping rules, and a single table with a `role` column is how one set of rules ends up
+ * applied to the other's rows.
+ *
+ *   `wallet_trust_signals`  — signals ABOUT this daemon's agents, held so they can be PRESENTED.
+ *   `contact_trust_signals` — signals OTHER agents PRESENTED TO one of my agents.
+ *
+ * THE WALLET CARRIES NO AGENT ASSOCIATION (M10-D14). PK = `signal_hash`; one row per signal per
+ * daemon, and nothing more. It is the envelope's own HASHED `subject_kind`/`subject` that decides
+ * who may present it, evaluated at presentation time — not a local attribution decided at delivery
+ * time. That is the whole point: an account-subject signal (phone, email) serves every agent under
+ * the account, so **adding an agent to an existing daemon is ZERO signal work** — no assignment
+ * sweep, no re-attribution at renewal, no copies to keep in step at expiry. A per-agent column
+ * would quietly reintroduce every one of those chores.
+ *
+ * THE RECEIVED STORE IS PER-AGENT, AND THE DATABASE ENFORCES IT (INV-AGENT-SCOPED). Consent is
+ * genuinely per-agent here: a signal Bob showed to my agent `alice` must be invisible to my agent
+ * `bob` on the same daemon. `agent_id` is NOT NULL and the row hangs off a contact row by composite
+ * FK, so an unscoped row cannot be written at all — as opposed to being merely discouraged by a
+ * query convention that every future caller must remember. (This requires `PRAGMA foreign_keys = ON`,
+ * set at open in sqlcipher-db.ts — M10-D19. Without it the FK is decorative.) This is where the M8
+ * scaffold's `agent_id = null` defect dies.
+ *
+ * EVIDENCE, NOT AN INPUT (M10-D4 / INV-STATELESS-RECIPIENT). Received rows are re-checkable evidence
+ * of what was presented and when we verified it. They are NEVER an input to policy evaluation, which
+ * consumes only the currently-presented set, and they are never trusted for freshness (that is
+ * re-checked on use). This module therefore exposes no "is this contact trusted?" read — the absence
+ * is deliberate and structural. Do not add one.
+ *
+ * OPAQUE THROUGHOUT (INV-ZERO-BUMP / INV-TYPE-CARRY). `type` is a TEXT column with no CHECK, no
+ * enum, and no index predicated on a type value; `payload` is a BLOB that is never parsed and whose
+ * fields are never hoisted into columns. A type string this code has never seen stores, reads, and
+ * presents exactly like a known one. Adding a signal type must require no change to this file.
+ */
+/**
+ * ⚠️ TWO TIME UNITS LIVE IN THESE TABLES, AND MIXING THEM SILENTLY PRESENTS EXPIRED SIGNALS.
+ *
+ *   issued_at / expires_at  — epoch **SECONDS**. These are ENVELOPE fields: they are HASHED, so the
+ *                             protocol fixed the unit and we do not get to choose it.
+ *   received_at / verified_at — epoch **MILLISECONDS** (`Date.now()`). Local bookkeeping only, never
+ *                             hashed, and matching the house convention of every other daemon table
+ *                             (`contacts.added_at`, `sessions.updated_at`).
+ *
+ * A factor-of-1000 error between them does not throw. Compared against a 1970 timestamp, every
+ * expiry is still in the future — so the failure mode is an expired signal being cheerfully
+ * presented. Anything that compares against `expires_at` must be in SECONDS; see `listPresentable`.
+ */
+const ENVELOPE_COLUMNS = `
+    signal_hash     TEXT NOT NULL,
+    subject_kind    TEXT NOT NULL,
+    subject         TEXT NOT NULL,
+    issuer_kind     TEXT NOT NULL,
+    issuer_pubkey   TEXT NOT NULL,
+    type            TEXT NOT NULL,
+    schema_version  INTEGER NOT NULL,
+    payload         BLOB NOT NULL,
+    issued_at       INTEGER NOT NULL,
+    expires_at      INTEGER,
+    supersedes_hash TEXT,
+    status          TEXT NOT NULL`;
+/** Content-addressed: the row IS its hash (spec §14.11 — this is what makes wallet rows portable
+ *  between a user's daemons, and duplicate delivery a no-op). */
+const CREATE_WALLET_SQL = `
+  CREATE TABLE IF NOT EXISTS wallet_trust_signals (
+    ${ENVELOPE_COLUMNS},
+    received_at     INTEGER NOT NULL,
+    PRIMARY KEY (signal_hash)
+  );
+`;
+const CREATE_RECEIVED_SQL = `
+  CREATE TABLE IF NOT EXISTS contact_trust_signals (
+    agent_id        TEXT NOT NULL,
+    contact_pubkey  TEXT NOT NULL,
+    ${ENVELOPE_COLUMNS},
+    verified_at     INTEGER NOT NULL,
+    received_at     INTEGER NOT NULL,
+    PRIMARY KEY (agent_id, contact_pubkey, signal_hash),
+    FOREIGN KEY (agent_id, contact_pubkey) REFERENCES contacts(agent_id, pubkey) ON DELETE CASCADE
+  );
+`;
+/**
+ * Idempotent schema. Must run AFTER `contacts` exists — the composite FK's parent. SQLite resolves
+ * an FK's parent at DML time, not at DDL time, so creating this first would not fail here; it would
+ * fail later, on the first insert, which is a far worse place to find out.
+ */
+export function ensureTrustSignalSchema(db, _logger) {
+    db.exec(CREATE_WALLET_SQL);
+    db.exec(CREATE_RECEIVED_SQL);
+    // Presentation reads by subject; nothing reads by `type`, and nothing may (INV-ZERO-BUMP — an
+    // index predicated on a type VALUE is a per-type construct in the schema).
+    db.exec("CREATE INDEX IF NOT EXISTS idx_wallet_signals_subject ON wallet_trust_signals (subject_kind, subject)");
+}
+const toBuf = (b) => Buffer.from(b);
+/**
+ * The payload column is `BLOB NOT NULL`, so an unrecognized shape coming back from the driver means
+ * something is wrong — NOT that the payload is empty.
+ *
+ * Returning `new Uint8Array(0)` here (the previous behavior) is the silent-fallback pattern: a signal
+ * whose payload failed to materialise would flow on to presentation and verification looking like a
+ * perfectly valid signal that simply has no content. Its hash would then not match, and the operator
+ * would be sent to hunt a canonicalization bug that does not exist. ABSENT IS NOT FINE — refuse, and
+ * name the actual cause.
+ */
+const toBytes = (v) => {
+    if (v instanceof Uint8Array)
+        return new Uint8Array(v);
+    if (Buffer.isBuffer(v))
+        return new Uint8Array(v);
+    throw new Error(`signal_payload_not_bytes: the payload column returned ${v === null ? "null" : typeof v}` +
+        `${v && typeof v === "object" ? ` (${v.constructor?.name})` : ""}, but the column is BLOB NOT NULL. ` +
+        "This is a storage-layer fault, not an empty payload — an empty payload would be a zero-length BLOB.");
+};
+function toWalletRow(r) {
+    return {
+        signalHash: r.signal_hash,
+        subjectKind: r.subject_kind,
+        subject: r.subject,
+        issuerKind: r.issuer_kind,
+        issuerPubkey: r.issuer_pubkey,
+        type: r.type,
+        schemaVersion: r.schema_version,
+        payload: toBytes(r.payload),
+        issuedAt: r.issued_at,
+        expiresAt: r.expires_at,
+        supersedesHash: r.supersedes_hash,
+        status: r.status,
+        receivedAt: r.received_at,
+    };
+}
+export class TrustSignalStore {
+    #db;
+    #logger;
+    /**
+     * Does NOT create the schema. `SessionNodeManager.initialize()` owns it, and must — the received
+     * table's FK parent is `contacts`, which that init creates. A store that created its own schema
+     * would happily build `contact_trust_signals` on any handle lacking `contacts`, producing a
+     * dangling FK that then fails on the first INSERT with `no such table: main.contacts` — an error
+     * that names the wrong subsystem, at the wrong time, far from the cause.
+     */
+    constructor(db, logger) {
+        this.#db = db;
+        this.#logger = logger;
+    }
+    /**
+     * Store a signal this daemon holds about one of its agents.
+     *
+     * `INSERT OR IGNORE`, and that is a correctness property, not a convenience: the row is keyed by
+     * its own content hash, so a second delivery of the same hash is by definition the same signal.
+     * If the bytes really differed, the hash would differ. A differing payload under an identical hash
+     * is therefore a liar, and it must not overwrite the truth. This is also what makes duplicate
+     * delivery a no-op and wallet rows safely mergeable across a user's daemons (spec §14.11).
+     */
+    putWalletSignal(s) {
+        const res = this.#db
+            .prepare(`INSERT OR IGNORE INTO wallet_trust_signals
+           (signal_hash, subject_kind, subject, issuer_kind, issuer_pubkey, type, schema_version,
+            payload, issued_at, expires_at, supersedes_hash, status, received_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+            .run(s.signalHash, s.subjectKind, s.subject, s.issuerKind, s.issuerPubkey, s.type, s.schemaVersion, toBuf(s.payload), s.issuedAt, s.expiresAt, s.supersedesHash, s.status, Date.now());
+        if (res.changes > 0) {
+            this.#logger.info("signal.wallet.stored", {
+                signalHash: s.signalHash, type: s.type, subjectKind: s.subjectKind, issuerKind: s.issuerKind,
+            });
+        }
+    }
+    getWalletSignal(signalHash) {
+        const row = this.#db
+            .prepare("SELECT * FROM wallet_trust_signals WHERE signal_hash = ?")
+            .get(signalHash);
+        return row ? toWalletRow(row) : null;
+    }
+    /**
+     * Status is the ONE mutable field — it lives outside the hash precisely so this is possible.
+     *
+     * REVOCATION IS TERMINAL. A revoked signal can never go back to `active`. Without that guard this
+     * is a blind UPDATE, and a stale or replayed directory read reporting `active` for a hash we
+     * already revoked would resurrect it — and `listPresentable` would start offering it again. The
+     * directory is the authority on revocation, but a LATE answer from it is not a NEW answer; the
+     * monotonic rule makes out-of-order responses harmless instead of dangerous.
+     *
+     * `superseded` may still be overtaken by `revoked` (a superseded signal can also be revoked), but
+     * never the reverse, and never back to `active`.
+     */
+    setWalletStatus(signalHash, status) {
+        const res = this.#db
+            .prepare(`UPDATE wallet_trust_signals SET status = ?
+          WHERE signal_hash = ?
+            AND status != 'revoked'
+            AND NOT (status = 'superseded' AND ? = 'active')`)
+            .run(status, signalHash, status);
+        if (res.changes > 0) {
+            this.#logger.info("signal.wallet.status.changed", { signalHash, status });
+            return;
+        }
+        // No change is not necessarily an error (the row may already hold this status), but a REFUSED
+        // downgrade is worth surfacing — it means something tried to resurrect a dead signal.
+        const current = this.#db
+            .prepare("SELECT status FROM wallet_trust_signals WHERE signal_hash = ?")
+            .get(signalHash);
+        if (current && current.status !== status) {
+            this.#logger.warn("signal.wallet.status.change_refused", {
+                signalHash, current: current.status, attempted: status,
+                reason: "revocation is terminal — a revoked or superseded signal is never returned to active",
+            });
+        }
+    }
+    /**
+     * The signals `agentId` may present, resolved from the ENVELOPE, not from a stored attribution:
+     * an `account`-subject row is presentable by every agent under `accountId`; an `agent`-subject row
+     * only by its own subject (M10-D5/M10-D14).
+     *
+     * Excludes expired and non-active rows. Selective disclosure (all / some / none) is the CALLER's
+     * choice on top of this — DOD-PRESENT-1; this returns what is *eligible*, never what to send.
+     */
+    listPresentable(opts) {
+        // `nowSec` is epoch SECONDS, and it is named for its unit deliberately. The envelope's
+        // `issued_at`/`expires_at` are seconds (they are HASHED, and the protocol fixed the unit);
+        // `Date.now()` is milliseconds. An unnamed `now` here invites a caller to pass one where the
+        // other is meant, and a factor-of-1000 error in an expiry check does not throw — it silently
+        // presents an EXPIRED signal (compared against a 1970 timestamp, every expiry is still in the
+        // future). The first version of this method took `now` and its own test passed seconds into a
+        // parameter that was divided by 1000; it only went green because the fixture's expiry was 1.
+        const nowSec = opts.nowSec ?? Math.floor(Date.now() / 1000);
+        const rows = this.#db
+            .prepare(`SELECT * FROM wallet_trust_signals
+          WHERE status = 'active'
+            AND (expires_at IS NULL OR expires_at > ?)
+            AND ( (subject_kind = 'account' AND subject = ?)
+               OR (subject_kind = 'agent'   AND subject = ?) )`)
+            .all(nowSec, opts.accountId, opts.agentId);
+        return rows.map(toWalletRow);
+    }
+    /**
+     * Store a signal a contact PRESENTED to one of my agents, after it was verified.
+     *
+     * The FK refuses a row for a contact that does not exist — an unscoped received signal is not
+     * merely discouraged, it is unwritable. `verified_at` is RE-STAMPED on re-presentation: it records
+     * when WE last re-verified, and a stale value that looked fresh would be worse than no value at
+     * all (freshness is re-checked on use — M10-D4).
+     */
+    putReceivedSignal(s) {
+        this.#db
+            .prepare(`INSERT INTO contact_trust_signals
+           (agent_id, contact_pubkey, signal_hash, subject_kind, subject, issuer_kind, issuer_pubkey,
+            type, schema_version, payload, issued_at, expires_at, supersedes_hash, status,
+            verified_at, received_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+         ON CONFLICT (agent_id, contact_pubkey, signal_hash)
+           DO UPDATE SET
+             verified_at = excluded.verified_at,
+             -- OUR verdict may only ever get WORSE, never better. A re-presentation cannot launder a
+             -- signal we already caught as revoked/superseded back to active: the party a revocation
+             -- indicts does not get to erase the indictment. (The envelope fields are not updated at
+             -- all — they are hashed, so an identical signal_hash means identical envelope bytes; a
+             -- differing value under the same hash is a liar and must not win.)
+             status = CASE WHEN contact_trust_signals.status = 'active' THEN excluded.status
+                           ELSE contact_trust_signals.status END`)
+            .run(s.agentId, s.contactPubkey, s.signalHash, s.subjectKind, s.subject, s.issuerKind, s.issuerPubkey, s.type, s.schemaVersion, toBuf(s.payload), s.issuedAt, s.expiresAt, s.supersedesHash, s.verdict, s.verifiedAt, Date.now());
+        this.#logger.info("signal.received.stored", {
+            agentId: s.agentId, signalHash: s.signalHash, type: s.type, issuerKind: s.issuerKind,
+            verdict: s.verdict,
+        });
+    }
+    /** Evidence only. Never an input to policy — see the header. */
+    listReceived(opts) {
+        const rows = this.#db
+            .prepare(`SELECT * FROM contact_trust_signals WHERE agent_id = ? AND contact_pubkey = ?`)
+            .all(opts.agentId, opts.contactPubkey);
+        return rows.map((r) => {
+            const { status, ...envelope } = toWalletRow(r);
+            return {
+                ...envelope,
+                agentId: opts.agentId,
+                contactPubkey: opts.contactPubkey,
+                verifiedAt: r.verified_at,
+                verdict: status,
+            };
+        });
+    }
+}
+//# sourceMappingURL=trust-signal-store.js.map

package/dist/trust-signal-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-signal-store.js","sourceRoot":"","sources":["../src/trust-signal-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAkEH;;;;;;;;;;;;GAYG;AACH,MAAM,gBAAgB,GAAG;;;;;;;;;;;;kCAYS,CAAC;AAEnC;iEACiE;AACjE,MAAM,iBAAiB,GAAG;;MAEpB,gBAAgB;;;;CAIrB,CAAC;AAEF,MAAM,mBAAmB,GAAG;;;;MAItB,gBAAgB;;;;;;CAMrB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAkB,EAAE,OAAe;IACzE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC3B,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC7B,8FAA8F;IAC9F,2EAA2E;IAC3E,EAAE,CAAC,IAAI,CAAC,uGAAuG,CAAC,CAAC;AACnH,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,CAAa,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAExD;;;;;;;;;GASG;AACH,MAAM,OAAO,GAAG,CAAC,CAAU,EAAc,EAAE;IACzC,IAAI,CAAC,YAAY,UAAU;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACjD,MAAM,IAAI,KAAK,CACb,yDAAyD,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;QACzF,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,qCAAqC;QACrG,qGAAqG,CACtG,CAAC;AACJ,CAAC,CAAC;AAyBF,SAAS,WAAW,CAAC,CAAgB;IACnC,OAAO;QACL,UAAU,EAAE,CAAC,CAAC,WAAW;QACzB,WAAW,EAAE,CAAC,CAAC,YAAmC;QAClD,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,UAAU,EAAE,CAAC,CAAC,WAAiC;QAC/C,YAAY,EAAE,CAAC,CAAC,aAAa;QAC7B,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,aAAa,EAAE,CAAC,CAAC,cAAc;QAC/B,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3B,QAAQ,EAAE,CAAC,CAAC,SAAS;QACrB,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,cAAc,EAAE,CAAC,CAAC,eAAe;QACjC,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,UAAU,EAAE,CAAC,CAAC,WAAW;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,gBAAgB;IAClB,GAAG,CAAiB;IACpB,OAAO,CAAS;IAEzB;;;;;;OAMG;IACH,YAAY,EAAkB,EAAE,MAAc;QAC5C,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,CAAC;IAED;;;;;;;;OAQG;IACH,eAAe,CAAC,CAAoB;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CACN;;;wDAGgD,CACjD;aACA,GAAG,CACF,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,EAC7F,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAClF,CAAC;QACJ,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE;gBACxC,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;aAC7F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,eAAe,CAAC,UAAkB;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CAAC,0DAA0D,CAAC;aACnE,GAAG,CAAC,UAAU,CAA8B,CAAC;QAChD,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,UAAkB,EAAE,MAAoB;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;aACjB,OAAO,CACN;;;6DAGqD,CACtD;aACA,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACnC,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QACD,8FAA8F;QAC9F,sFAAsF;QACtF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG;aACrB,OAAO,CAAC,+DAA+D,CAAC;aACxE,GAAG,CAAC,UAAU,CAAmC,CAAC;QACrD,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACzC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,qCAAqC,EAAE;gBACvD,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM;gBACtD,MAAM,EAAE,qFAAqF;aAC9F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,eAAe,CAAC,IAA6D;QAC3E,uFAAuF;QACvF,2FAA2F;QAC3F,6FAA6F;QAC7F,6FAA6F;QAC7F,8FAA8F;QAC9F,8FAA8F;QAC9F,6FAA6F;QAC7F,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN;;;;+DAIuD,CACxD;aACA,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAA+B,CAAC;QAC3E,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;;;OAOG;IACH,iBAAiB,CAAC,CAAsB;QACtC,IAAI,CAAC,GAAG;aACL,OAAO,CACN;;;;;;;;;;;;;;iEAcyD,CAC1D;aACA,GAAG,CACF,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,EAChF,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,EAClF,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CACtD,CAAC;QACJ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE;YAC1C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;YACpF,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAC;IACL,CAAC;IAED,gEAAgE;IAChE,YAAY,CAAC,IAAgD;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN,+EAA+E,CAChF;aACA,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAA+B,CAAC;QACvE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACpB,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAC/C,OAAO;gBACL,GAAG,QAAQ;gBACX,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,UAAU,EAAE,CAAC,CAAC,WAAW;gBACzB,OAAO,EAAE,MAAsB;aAChC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cello-protocol/daemon",
-  "version": "0.0.58",
+  "version": "0.0.60",
   "private": false,
   "type": "module",
   "engines": {
@@ -30,10 +30,10 @@
     "@signalapp/sqlcipher": "^3.3.5",
     "cbor-x": "^1.6.0",
     "it-length-prefixed": "^10.0.1",
-    "@cello-protocol/crypto": "0.0.21",
-    "@cello-protocol/gateway": "0.0.3",
-    "@cello-protocol/protocol-types": "0.0.22",
-    "@cello-protocol/transport": "0.0.22"
+    "@cello-protocol/crypto": "0.0.22",
+    "@cello-protocol/gateway": "0.0.4",
+    "@cello-protocol/protocol-types": "0.0.23",
+    "@cello-protocol/transport": "0.0.23"
   },
   "devDependencies": {
     "@types/node": "^25.6.2",