@cello-protocol/protocol-types 0.0.4 → 0.0.6

package/dist/content-delivery.d.ts

@@ -0,0 +1,132 @@
+/**
+ * CELLO-M7-MSG-001 — Content-delivery wire types.
+ *
+ * Three families of frames:
+ *
+ *   1. Delivery ACK (D-c) — on the Noise-authenticated SESSION channel.
+ *      Unsigned, transport-authenticated. Levels form an OPEN ladder
+ *      (received → persisted → future). The protocol acts on 'persisted' ONLY.
+ *
+ *   2. Content recovery reverse-channel — on the SESSION channel.
+ *      The receiver asks the sender to resend the content behind a known
+ *      content_hash (the persisted-ACK channel running in reverse).
+ *
+ *   3. Park / store-and-forward — on the RELAY channel. The relay holds only
+ *      ciphertext (SI-001); every datum gets its own named slot (API parsimony).
+ *
+ * The application content size cap is the existing MAX_CONTENT_BYTES (1 MB),
+ * re-exported from ./envelope.js — a single named constant used at both the send
+ * and inbound-decode enforcement points (AC-018). It is strictly below the
+ * it-length-prefixed transport default below so the app cap always fires first.
+ */
+/**
+ * The default maximum frame size of it-length-prefixed (`it-length-prefixed`)
+ * decoding used by the transport content stream. The application content cap
+ * (MAX_CONTENT_BYTES) must stay strictly below this so oversize content is
+ * rejected with a clear error before the bare transport decode can fire (SI-003).
+ */
+export declare const IT_LENGTH_PREFIX_DEFAULT_MAX: number;
+/** libp2p protocol id for the relay store-and-forward content-park queue. */
+export declare const CONTENT_PARK_PROTOCOL_ID = "/cello/content-park/1.0.0";
+/**
+ * Domain separator for the content-park pull/confirm auth signature (I1). The caller
+ * signs SHA-256(utf8(CONTENT_PARK_AUTH_DOMAIN) || nonce(32) || recipient_pubkey(32))
+ * with its Ed25519 identity key to prove ownership before the relay serves/deletes.
+ */
+export declare const CONTENT_PARK_AUTH_DOMAIN = "CELLO-CONTENT-PARK-AUTH-v1";
+/**
+ * Canonical content-park auth message: SHA-256( utf8(CONTENT_PARK_AUTH_DOMAIN) ||
+ * nonce(32) || recipient_pubkey(32) ). Single source of truth for BOTH the client
+ * (signs this with its identity key on pull/confirm) and the relay (verifies it). If
+ * this construction ever drifts between the two repos, pull/confirm auth silently
+ * breaks — so both sides import this one function (M1: no per-repo redeclaration).
+ */
+export declare function buildContentParkAuthMsg(nonce: Uint8Array, recipientPubkey: Uint8Array): Uint8Array;
+/**
+ * Delivery-ACK ladder level. OPEN enum: 'received' and 'persisted' are defined
+ * today; future levels can be added without a wire break. The protocol acts on
+ * 'persisted' ONLY (AC-002). The string-template member keeps the union open.
+ */
+export type ContentAckLevel = "received" | "persisted" | (string & {});
+/**
+ * Unsigned delivery ACK emitted by the receiver AFTER it durably persists the
+ * content AND its content_hash cross-check succeeds. Carries NO signature —
+ * authentication is the Noise session channel (D-c, SI-004). Never an input to
+ * the seal, the Merkle tree, or last_seen_seq.
+ */
+export interface ContentDeliveryAck {
+    type: "content_delivery_ack";
+    /** Session identifier (raw bytes as carried on the session channel). */
+    session_id: Uint8Array;
+    /** SHA-256 content hash this ACK acknowledges (32 bytes). */
+    content_hash: Uint8Array;
+    /** Ladder level; the sender acts on 'persisted' only. */
+    level: ContentAckLevel;
+}
+/**
+ * Receiver → sender resend request over the session channel. The receiver drained
+ * a hash leaf but never got the matching content; it asks the sender to resend
+ * the content behind content_hash. Recovery, not desync (AC-009).
+ */
+export interface ContentResendRequest {
+    type: "content_resend_request";
+    session_id: Uint8Array;
+    content_hash: Uint8Array;
+}
+/**
+ * Sender → relay: deposit ENCRYPTED content into the recipient-keyed
+ * store-and-forward queue. The relay holds only ciphertext (SI-001).
+ */
+export interface ContentParkDeposit {
+    type: "content_park_deposit";
+    /** Recipient's stable identity pubkey — the store key (32 bytes). */
+    recipient_pubkey: Uint8Array;
+    /** SHA-256 hash of the PLAINTEXT content (the relay already sees the hash layer). */
+    content_hash: Uint8Array;
+    /** Session this content belongs to (so the recipient can route it on pull). */
+    session_id: Uint8Array;
+    /** The sealed (E2E-encrypted) content blob. Its own named slot — never buried. */
+    ciphertext: Uint8Array;
+}
+/** Relay → sender: deposit confirmation / failure. */
+export interface ContentParkDepositAck {
+    type: "content_park_deposit_ack";
+    content_hash: Uint8Array;
+    ok: boolean;
+    /** Present only when ok === false. */
+    reason?: string;
+}
+/**
+ * Relay → recipient: a notification that parked content is available. Fires when
+ * an online (or newly-reconnected) recipient has entries in its queue.
+ */
+export interface ContentParkNotify {
+    type: "content_park_notify";
+    recipient_pubkey: Uint8Array;
+    content_hash: Uint8Array;
+}
+/**
+ * Recipient → relay: pull request. When content_hash is omitted the relay returns
+ * all parked entries for the recipient; when present it returns that one entry.
+ */
+export interface ContentParkPullRequest {
+    type: "content_park_pull_request";
+    recipient_pubkey: Uint8Array;
+    content_hash?: Uint8Array;
+}
+/**
+ * Relay → recipient: a single parked entry (ciphertext). `found` is false when no
+ * matching entry exists (recovery falls back to "never parked"). delete-on-pickup
+ * happens after the recipient confirms a successful cross-check.
+ */
+export interface ContentParkPullResponse {
+    type: "content_park_pull_response";
+    found: boolean;
+    content_hash: Uint8Array;
+    session_id?: Uint8Array;
+    ciphertext?: Uint8Array;
+}
+export declare function isContentDeliveryAck(frame: unknown): frame is ContentDeliveryAck;
+export declare function isContentResendRequest(frame: unknown): frame is ContentResendRequest;
+export declare function isContentParkDeposit(frame: unknown): frame is ContentParkDeposit;
+//# sourceMappingURL=content-delivery.d.ts.map

package/dist/content-delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-delivery.d.ts","sourceRoot":"","sources":["../src/content-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,QAAkB,CAAC;AAE5D,6EAA6E;AAC7E,eAAO,MAAM,wBAAwB,8BAA8B,CAAC;AAEpE;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,+BAA+B,CAAC;AAErE;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,GAAG,UAAU,CAOlG;AAID;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,WAAW,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,wEAAwE;IACxE,UAAU,EAAE,UAAU,CAAC;IACvB,6DAA6D;IAC7D,YAAY,EAAE,UAAU,CAAC;IACzB,yDAAyD;IACzD,KAAK,EAAE,eAAe,CAAC;CACxB;AAID;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,UAAU,EAAE,UAAU,CAAC;IACvB,YAAY,EAAE,UAAU,CAAC;CAC1B;AAID;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,qEAAqE;IACrE,gBAAgB,EAAE,UAAU,CAAC;IAC7B,qFAAqF;IACrF,YAAY,EAAE,UAAU,CAAC;IACzB,+EAA+E;IAC/E,UAAU,EAAE,UAAU,CAAC;IACvB,kFAAkF;IAClF,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,sDAAsD;AACtD,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,0BAA0B,CAAC;IACjC,YAAY,EAAE,UAAU,CAAC;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,sCAAsC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,gBAAgB,EAAE,UAAU,CAAC;IAC7B,YAAY,EAAE,UAAU,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,2BAA2B,CAAC;IAClC,gBAAgB,EAAE,UAAU,CAAC;IAC7B,YAAY,CAAC,EAAE,UAAU,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,4BAA4B,CAAC;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,EAAE,UAAU,CAAC;IACzB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAQD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAShF;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,oBAAoB,CAQpF;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAShF"}

package/dist/content-delivery.js

@@ -0,0 +1,83 @@
+/**
+ * CELLO-M7-MSG-001 — Content-delivery wire types.
+ *
+ * Three families of frames:
+ *
+ *   1. Delivery ACK (D-c) — on the Noise-authenticated SESSION channel.
+ *      Unsigned, transport-authenticated. Levels form an OPEN ladder
+ *      (received → persisted → future). The protocol acts on 'persisted' ONLY.
+ *
+ *   2. Content recovery reverse-channel — on the SESSION channel.
+ *      The receiver asks the sender to resend the content behind a known
+ *      content_hash (the persisted-ACK channel running in reverse).
+ *
+ *   3. Park / store-and-forward — on the RELAY channel. The relay holds only
+ *      ciphertext (SI-001); every datum gets its own named slot (API parsimony).
+ *
+ * The application content size cap is the existing MAX_CONTENT_BYTES (1 MB),
+ * re-exported from ./envelope.js — a single named constant used at both the send
+ * and inbound-decode enforcement points (AC-018). It is strictly below the
+ * it-length-prefixed transport default below so the app cap always fires first.
+ */
+import { createHash } from "node:crypto";
+/**
+ * The default maximum frame size of it-length-prefixed (`it-length-prefixed`)
+ * decoding used by the transport content stream. The application content cap
+ * (MAX_CONTENT_BYTES) must stay strictly below this so oversize content is
+ * rejected with a clear error before the bare transport decode can fire (SI-003).
+ */
+export const IT_LENGTH_PREFIX_DEFAULT_MAX = 4 * 1024 * 1024;
+/** libp2p protocol id for the relay store-and-forward content-park queue. */
+export const CONTENT_PARK_PROTOCOL_ID = "/cello/content-park/1.0.0";
+/**
+ * Domain separator for the content-park pull/confirm auth signature (I1). The caller
+ * signs SHA-256(utf8(CONTENT_PARK_AUTH_DOMAIN) || nonce(32) || recipient_pubkey(32))
+ * with its Ed25519 identity key to prove ownership before the relay serves/deletes.
+ */
+export const CONTENT_PARK_AUTH_DOMAIN = "CELLO-CONTENT-PARK-AUTH-v1";
+/**
+ * Canonical content-park auth message: SHA-256( utf8(CONTENT_PARK_AUTH_DOMAIN) ||
+ * nonce(32) || recipient_pubkey(32) ). Single source of truth for BOTH the client
+ * (signs this with its identity key on pull/confirm) and the relay (verifies it). If
+ * this construction ever drifts between the two repos, pull/confirm auth silently
+ * breaks — so both sides import this one function (M1: no per-repo redeclaration).
+ */
+export function buildContentParkAuthMsg(nonce, recipientPubkey) {
+    const domain = new TextEncoder().encode(CONTENT_PARK_AUTH_DOMAIN);
+    const msg = new Uint8Array(domain.length + nonce.length + recipientPubkey.length);
+    msg.set(domain, 0);
+    msg.set(nonce, domain.length);
+    msg.set(recipientPubkey, domain.length + nonce.length);
+    return new Uint8Array(createHash("sha256").update(msg).digest());
+}
+// ─── Type guards ────────────────────────────────────────────────────────────
+function hasBytes(v) {
+    return v instanceof Uint8Array || (typeof Buffer !== "undefined" && Buffer.isBuffer(v));
+}
+export function isContentDeliveryAck(frame) {
+    if (frame === null || typeof frame !== "object")
+        return false;
+    const f = frame;
+    return (f["type"] === "content_delivery_ack" &&
+        hasBytes(f["session_id"]) &&
+        hasBytes(f["content_hash"]) &&
+        typeof f["level"] === "string");
+}
+export function isContentResendRequest(frame) {
+    if (frame === null || typeof frame !== "object")
+        return false;
+    const f = frame;
+    return (f["type"] === "content_resend_request" &&
+        hasBytes(f["session_id"]) &&
+        hasBytes(f["content_hash"]));
+}
+export function isContentParkDeposit(frame) {
+    if (frame === null || typeof frame !== "object")
+        return false;
+    const f = frame;
+    return (f["type"] === "content_park_deposit" &&
+        hasBytes(f["recipient_pubkey"]) &&
+        hasBytes(f["content_hash"]) &&
+        hasBytes(f["ciphertext"]));
+}
+//# sourceMappingURL=content-delivery.js.map

package/dist/content-delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-delivery.js","sourceRoot":"","sources":["../src/content-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE5D,6EAA6E;AAC7E,MAAM,CAAC,MAAM,wBAAwB,GAAG,2BAA2B,CAAC;AAEpE;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,4BAA4B,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAiB,EAAE,eAA2B;IACpF,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAClF,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnB,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IACvD,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACnE,CAAC;AAoGD,+EAA+E;AAE/E,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,CAAC,YAAY,UAAU,IAAI,CAAC,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,CAAC,CAAC,MAAM,CAAC,KAAK,sBAAsB;QACpC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACzB,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,CAAC,CAAC,MAAM,CAAC,KAAK,wBAAwB;QACtC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACzB,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAC5B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,CAAC,CAAC,MAAM,CAAC,KAAK,sBAAsB;QACpC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAC/B,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QAC3B,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAC1B,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -2,8 +2,8 @@ export type { MessageEnvelope, MessageEnvelopeV1, EnvelopeError, BuildResult, Bu
 export { MAX_CONTENT_BYTES, buildEnvelope, serializeEnvelope, deserializeEnvelope, validateEnvelope, buildEnvelopeV1, serializeEnvelopeV1, deserializeEnvelopeV1, validateEnvelopeV1, extractStructure1, } from "./envelope.js";
 export type { ScanResultSentinel, Structure2, BuildStructure2Result } from "./structure2.js";
 export { SCAN_RESULT_SENTINEL, buildStructure2, encodeStructure2, encodeScanResultSentinel, verifyStructure2Signature, } from "./structure2.js";
-export { computeGenesisPrevRoot, encodeSealPayload, decodeSealPayload, buildSessionEstablishmentTbs, buildSealTbs } from "./session.js";
-export type { SessionAssignment, SessionAssignmentFrost, SessionAssignmentSingle, ParticipantInfo, RelayEndpointInfo, SealPayload, SessionAbandoned, SessionSealedSingle, SessionSealedFrost, SessionSealed, SealRejectionReason, SessionSealRejected, SealVerified, } from "./session.js";
+export { computeGenesisPrevRoot, encodeSealPayload, decodeSealPayload, buildSessionEstablishmentTbs, buildSealTbs, SEAL_RECEIPT_DISCLAIMER } from "./session.js";
+export type { SessionAssignment, SessionAssignmentFrost, SessionAssignmentSingle, ParticipantInfo, RelayEndpointInfo, SealPayload, SessionAbandoned, SessionSealedSingle, SessionSealedFrost, SessionSealed, SealRejectionReason, SessionSealRejected, SealVerified, AttestationMode, SealLegibility, SealLegibilityParticipant, SealLegibilityFinalMessage, } from "./session.js";
 export type { MlDsaKeyProvider, MlDsaVerifier, PseudonymBinding, Endorsement, Attestation, ConnectionPackage, EndorsementValidationStatus, AttestationValidationStatus, ValidatedEndorsement, ValidatedAttestation, PackageValidationResult, BuildPseudonymBindingResult, SignalCondition, SignalRequirement, ConnectionPolicy, DirectoryContext, } from "./connection-package.js";
 export { MAX_PSEUDONYM_LABEL_BYTES, ML_DSA_PUBKEY_BYTES, ML_DSA_SIGNATURE_BYTES, buildPseudonymBinding, verifyPseudonymBinding, verifyEndorsement, verifyAttestation, validateConnectionPackage, encodeConnectionPackage, decodeConnectionPackage, } from "./connection-package.js";
 export type { RegisterRequest, DkgComplete, DkgReady, RegisterSuccess, RegisterError, RegisterErrorReason, AgentProfile, RegistrationState, } from "./registration.js";
@@ -11,4 +11,9 @@ export type { ConnectionRequest, ConnectionRequestInbound, ConnectionResponse, C
 export type { DkgRound1Broadcast, DkgRound2Share, FrostDkgRound1Request, FrostDkgRound1Response, FrostDkgRound2Request, FrostDkgRound2Response, FrostDkgRound3Request, FrostDkgRound3Response, FrostDkgRequest, FrostDkgResponse, } from "./frost-dkg.js";
 export type { ConsortiumManifest, ConsortiumNode, OfficerSignature, ManifestError, } from "./manifest.js";
 export { MANIFEST_SIGNATURE_INVALID, MANIFEST_VERSION_ROLLBACK, MANIFEST_EXPIRED, } from "./manifest.js";
+export type { SealInterruptedLeaf, SealInterruptedRequest, SealInterruptedAck, SealInterruptedRejection, SessionInterruptedFrame, SealInterruptedSignalingMessage, } from "./seal-interrupted.js";
+export type { ContentAckLevel, ContentDeliveryAck, ContentResendRequest, ContentParkDeposit, ContentParkDepositAck, ContentParkNotify, ContentParkPullRequest, ContentParkPullResponse, } from "./content-delivery.js";
+export { IT_LENGTH_PREFIX_DEFAULT_MAX, CONTENT_PARK_PROTOCOL_ID, CONTENT_PARK_AUTH_DOMAIN, buildContentParkAuthMsg, isContentDeliveryAck, isContentResendRequest, isContentParkDeposit, } from "./content-delivery.js";
+export type { SessionLiveness, SessionLivenessQuery, SessionLivenessResponse, } from "./session-liveness.js";
+export { encodeSessionLivenessQuery, decodeSessionLivenessQuery, encodeSessionLivenessResponse, decodeSessionLivenessResponse, } from "./session-liveness.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAEvB,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAC7F,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACxI,YAAY,EACV,iBAAiB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EACnH,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,aAAa,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,YAAY,GACjI,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,2BAA2B,EAC3B,2BAA2B,EAC3B,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,2BAA2B,EAC3B,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAGjC,YAAY,EACV,eAAe,EACf,WAAW,EACX,QAAQ,EACR,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,YAAY,EACZ,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,4BAA4B,EAC5B,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AAEjC,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAGxB,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,aAAa,GACd,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAEvB,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAC7F,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACjK,YAAY,EACV,iBAAiB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EACnH,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,aAAa,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,YAAY,EAChI,eAAe,EAAE,cAAc,EAAE,yBAAyB,EAAE,0BAA0B,GACvF,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,2BAA2B,EAC3B,2BAA2B,EAC3B,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,2BAA2B,EAC3B,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAGjC,YAAY,EACV,eAAe,EACf,WAAW,EACX,QAAQ,EACR,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,YAAY,EACZ,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,4BAA4B,EAC5B,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AAEjC,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAGxB,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,aAAa,GACd,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAGvB,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,uBAAuB,CAAC;AAG/B,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,eAAe,EACf,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC"}

package/dist/index.js

@@ -1,6 +1,8 @@
 export { MAX_CONTENT_BYTES, buildEnvelope, serializeEnvelope, deserializeEnvelope, validateEnvelope, buildEnvelopeV1, serializeEnvelopeV1, deserializeEnvelopeV1, validateEnvelopeV1, extractStructure1, } from "./envelope.js";
 export { SCAN_RESULT_SENTINEL, buildStructure2, encodeStructure2, encodeScanResultSentinel, verifyStructure2Signature, } from "./structure2.js";
-export { computeGenesisPrevRoot, encodeSealPayload, decodeSealPayload, buildSessionEstablishmentTbs, buildSealTbs } from "./session.js";
+export { computeGenesisPrevRoot, encodeSealPayload, decodeSealPayload, buildSessionEstablishmentTbs, buildSealTbs, SEAL_RECEIPT_DISCLAIMER } from "./session.js";
 export { MAX_PSEUDONYM_LABEL_BYTES, ML_DSA_PUBKEY_BYTES, ML_DSA_SIGNATURE_BYTES, buildPseudonymBinding, verifyPseudonymBinding, verifyEndorsement, verifyAttestation, validateConnectionPackage, encodeConnectionPackage, decodeConnectionPackage, } from "./connection-package.js";
 export { MANIFEST_SIGNATURE_INVALID, MANIFEST_VERSION_ROLLBACK, MANIFEST_EXPIRED, } from "./manifest.js";
+export { IT_LENGTH_PREFIX_DEFAULT_MAX, CONTENT_PARK_PROTOCOL_ID, CONTENT_PARK_AUTH_DOMAIN, buildContentParkAuthMsg, isContentDeliveryAck, isContentResendRequest, isContentParkDeposit, } from "./content-delivery.js";
+export { encodeSessionLivenessQuery, decodeSessionLivenessQuery, encodeSessionLivenessResponse, decodeSessionLivenessResponse, } from "./session-liveness.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAyBxI,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAyDjC,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AA0BjK,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAyDjC,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAuBvB,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC"}

package/dist/seal-interrupted.d.ts

@@ -0,0 +1,117 @@
+/**
+ * M7-SESSION-001 — Seal-Interrupted Protocol Types
+ *
+ * Types for the bilateral seal-interrupted flow:
+ *   1. SealInterruptedRequest: initiator → counterparty via directory signaling
+ *   2. SealInterruptedAck: counterparty → initiator with signed control leaf
+ *   3. SealInterruptedRejection: counterparty → initiator (declined)
+ *   4. SealInterruptedLeaf: the SEAL-INTERRUPTED control leaf structure
+ *
+ * These are signaling-layer frames routed via the directory pass-through.
+ * The directory does not validate payloads — it only routes by target pubkey.
+ *
+ * Design authority: outline.md §Resolved Design Questions Q4.
+ * session_interrupted is relay-originated, not a seal. No auto-seal on receipt.
+ * The seal-interrupted flow is operator-initiated bilateral agreement.
+ *
+ * Leaf construction (implementation_notes):
+ *   - leafCount in the leaf DEFINITION = message leaves at interruption (before SEAL-INTERRUPTED appended)
+ *   - After appending: total leaf count = leafCountAtInterruption + 1
+ *   - merkleRootAtInterruption = root AFTER appending the SEAL-INTERRUPTED leaf
+ *   - FROST TBS leaf_count = leafCountAtInterruption + 1 (same as total after appending)
+ */
+/**
+ * SEAL-INTERRUPTED control leaf — a new Merkle control leaf type.
+ * Both sides produce one of these before the FROST seal ceremony.
+ * Signed by the producing agent's K_local.
+ */
+export interface SealInterruptedLeaf {
+    type: "SEAL_INTERRUPTED";
+    /** Hex-encoded session identifier */
+    sessionId: string;
+    /** Number of message leaves at interruption (before this leaf is appended) */
+    leafCount: number;
+    /** Hex-encoded Merkle root AFTER appending this SEAL-INTERRUPTED leaf */
+    merkleRootAtInterruption: string;
+    /** Unix ms timestamp when the leaf was constructed */
+    timestamp: number;
+    /** Hex-encoded K_local public key of the signing agent */
+    signerPubkey: string;
+    /** Hex-encoded Ed25519 signature over the canonical leaf content */
+    signature: string;
+}
+/**
+ * SealInterruptedRequest: initiator → counterparty via directory signaling.
+ * Sent when an operator calls cello_close_session on an interrupted session.
+ */
+export interface SealInterruptedRequest {
+    type: "seal_interrupted_request";
+    sessionId: string;
+    initiatorPubkey: string;
+    counterpartyPubkey: string;
+    leafCountAtInterruption: number;
+    /**
+     * Hex-encoded Merkle root the initiator computed at interruption. The
+     * initiator's client (the holder of the session Merkle tree) supplies this;
+     * the daemon itself does not compute Merkle roots. Carried so the counterparty
+     * co-signs over the same root. Empty string when the initiator's client did not
+     * supply one (the bilateral commitment then binds leafCount only).
+     */
+    merkleRootAtInterruption: string;
+    /**
+     * Liveness nonce. The counterparty MUST echo this back in its ack so the
+     * initiator can reject a stale or replayed response (L-2).
+     */
+    nonce: string;
+}
+/**
+ * SealInterruptedAck: counterparty → initiator via directory signaling.
+ * Contains the counterparty's signed SEAL-INTERRUPTED leaf.
+ */
+export interface SealInterruptedAck {
+    type: "seal_interrupted_ack";
+    sessionId: string;
+    /**
+     * Hex-encoded K_local public key of the original initiator. The directory's
+     * signaling decoder routes the reply back by looking up this pubkey, so it is
+     * REQUIRED on the wire (the directory does not infer it from session state).
+     */
+    initiatorPubkey: string;
+    /**
+     * The nonce from the originating SealInterruptedRequest, echoed verbatim. The
+     * initiator rejects the ack if this does not match the nonce it sent (L-2).
+     */
+    nonce: string;
+    sealInterruptedLeaf: SealInterruptedLeaf;
+}
+/**
+ * SealInterruptedRejection: counterparty → initiator via directory signaling.
+ * The counterparty declines the seal-interrupted request.
+ */
+export interface SealInterruptedRejection {
+    type: "seal_interrupted_rejection";
+    sessionId: string;
+    /**
+     * Hex-encoded K_local public key of the original initiator. The directory's
+     * signaling decoder routes the reply back by looking up this pubkey, so it is
+     * REQUIRED on the wire (the directory does not infer it from session state).
+     */
+    initiatorPubkey: string;
+    reason: string;
+}
+/**
+ * SessionInterruptedFrame: relay → client control frame.
+ * Relay-originated when a participant disconnects mid-session.
+ * NOT a seal — no Merkle root, no FROST ceremony.
+ */
+export interface SessionInterruptedFrame {
+    type: "session_interrupted";
+    sessionId: string;
+    reason: "peer_disconnected" | "timeout";
+}
+/**
+ * Union of seal-interrupted signaling message types.
+ * Used by the directory pass-through and the daemon frame handler.
+ */
+export type SealInterruptedSignalingMessage = SealInterruptedRequest | SealInterruptedAck | SealInterruptedRejection;
+//# sourceMappingURL=seal-interrupted.d.ts.map

package/dist/seal-interrupted.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal-interrupted.d.ts","sourceRoot":"","sources":["../src/seal-interrupted.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,kBAAkB,CAAC;IACzB,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,wBAAwB,EAAE,MAAM,CAAC;IACjC,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,YAAY,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;CACnB;AAID;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,0BAA0B,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,uBAAuB,EAAE,MAAM,CAAC;IAChC;;;;;;OAMG;IACH,wBAAwB,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB,EAAE,mBAAmB,CAAC;CAC1C;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,4BAA4B,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,mBAAmB,GAAG,SAAS,CAAC;CACzC;AAED;;;GAGG;AACH,MAAM,MAAM,+BAA+B,GACvC,sBAAsB,GACtB,kBAAkB,GAClB,wBAAwB,CAAC"}

package/dist/seal-interrupted.js

@@ -0,0 +1,24 @@
+/**
+ * M7-SESSION-001 — Seal-Interrupted Protocol Types
+ *
+ * Types for the bilateral seal-interrupted flow:
+ *   1. SealInterruptedRequest: initiator → counterparty via directory signaling
+ *   2. SealInterruptedAck: counterparty → initiator with signed control leaf
+ *   3. SealInterruptedRejection: counterparty → initiator (declined)
+ *   4. SealInterruptedLeaf: the SEAL-INTERRUPTED control leaf structure
+ *
+ * These are signaling-layer frames routed via the directory pass-through.
+ * The directory does not validate payloads — it only routes by target pubkey.
+ *
+ * Design authority: outline.md §Resolved Design Questions Q4.
+ * session_interrupted is relay-originated, not a seal. No auto-seal on receipt.
+ * The seal-interrupted flow is operator-initiated bilateral agreement.
+ *
+ * Leaf construction (implementation_notes):
+ *   - leafCount in the leaf DEFINITION = message leaves at interruption (before SEAL-INTERRUPTED appended)
+ *   - After appending: total leaf count = leafCountAtInterruption + 1
+ *   - merkleRootAtInterruption = root AFTER appending the SEAL-INTERRUPTED leaf
+ *   - FROST TBS leaf_count = leafCountAtInterruption + 1 (same as total after appending)
+ */
+export {};
+//# sourceMappingURL=seal-interrupted.js.map

package/dist/seal-interrupted.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal-interrupted.js","sourceRoot":"","sources":["../src/seal-interrupted.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG"}

package/dist/session-liveness.d.ts

@@ -0,0 +1,44 @@
+/**
+ * CELLO-M7-SESSION-003 — session-path liveness wire types + codec
+ *
+ * The relay is the session-path liveness authority for relay-mode sessions. The
+ * client queries it over the relay protocol stream with a session_liveness_query
+ * frame and receives a session_liveness_response.
+ *
+ * WIRE CONVENTION (cross-ref SESSION-001 L-1): on-wire keys are snake_case,
+ * matching every other relay frame. session_id is the 16-byte binary session id
+ * and counterparty_pubkey is the 32-byte Ed25519 pubkey — identical to the keys
+ * the relay uses for its delivery queue. The relay (trustless-cello) re-encodes
+ * the SAME shape independently in relay-frames.ts (it cannot import this
+ * unpublished package); the two MUST agree byte-for-byte. These tests pin the
+ * shape.
+ *
+ * liveness is exactly 'alive' | 'gone' | 'unknown':
+ *   - 'alive'   : the relay currently holds the recipient's standing connection
+ *   - 'gone'    : the relay positively observed the recipient's disconnect with
+ *                 no subsequent reconnect
+ *   - 'unknown' : the relay has no tracked entry for the recipient. The relay
+ *                 NEVER fabricates 'gone' from a missing entry (no observation is
+ *                 'unknown', not 'gone').
+ */
+export type SessionLiveness = "alive" | "gone" | "unknown";
+export interface SessionLivenessQuery {
+    type: "session_liveness_query";
+    /** 16-byte binary session id */
+    session_id: Uint8Array;
+    /** 32-byte Ed25519 pubkey of the counterparty whose liveness is queried */
+    counterparty_pubkey: Uint8Array;
+}
+export interface SessionLivenessResponse {
+    type: "session_liveness_response";
+    session_id: Uint8Array;
+    counterparty_pubkey: Uint8Array;
+    liveness: SessionLiveness;
+    /** Unix ms timestamp of the relay's most recent observation for this recipient */
+    observed_at: number;
+}
+export declare function encodeSessionLivenessQuery(frame: SessionLivenessQuery): Uint8Array;
+export declare function decodeSessionLivenessQuery(bytes: Uint8Array): SessionLivenessQuery | null;
+export declare function encodeSessionLivenessResponse(frame: SessionLivenessResponse): Uint8Array;
+export declare function decodeSessionLivenessResponse(bytes: Uint8Array): SessionLivenessResponse | null;
+//# sourceMappingURL=session-liveness.d.ts.map

package/dist/session-liveness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-liveness.d.ts","sourceRoot":"","sources":["../src/session-liveness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAMH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAE3D,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,gCAAgC;IAChC,UAAU,EAAE,UAAU,CAAC;IACvB,2EAA2E;IAC3E,mBAAmB,EAAE,UAAU,CAAC;CACjC;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,2BAA2B,CAAC;IAClC,UAAU,EAAE,UAAU,CAAC;IACvB,mBAAmB,EAAE,UAAU,CAAC;IAChC,QAAQ,EAAE,eAAe,CAAC;IAC1B,kFAAkF;IAClF,WAAW,EAAE,MAAM,CAAC;CACrB;AAYD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,oBAAoB,GAAG,UAAU,CAMlF;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,UAAU,GAAG,oBAAoB,GAAG,IAAI,CAezF;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,uBAAuB,GAAG,UAAU,CAQxF;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,UAAU,GAAG,uBAAuB,GAAG,IAAI,CAmB/F"}

package/dist/session-liveness.js

@@ -0,0 +1,100 @@
+/**
+ * CELLO-M7-SESSION-003 — session-path liveness wire types + codec
+ *
+ * The relay is the session-path liveness authority for relay-mode sessions. The
+ * client queries it over the relay protocol stream with a session_liveness_query
+ * frame and receives a session_liveness_response.
+ *
+ * WIRE CONVENTION (cross-ref SESSION-001 L-1): on-wire keys are snake_case,
+ * matching every other relay frame. session_id is the 16-byte binary session id
+ * and counterparty_pubkey is the 32-byte Ed25519 pubkey — identical to the keys
+ * the relay uses for its delivery queue. The relay (trustless-cello) re-encodes
+ * the SAME shape independently in relay-frames.ts (it cannot import this
+ * unpublished package); the two MUST agree byte-for-byte. These tests pin the
+ * shape.
+ *
+ * liveness is exactly 'alive' | 'gone' | 'unknown':
+ *   - 'alive'   : the relay currently holds the recipient's standing connection
+ *   - 'gone'    : the relay positively observed the recipient's disconnect with
+ *                 no subsequent reconnect
+ *   - 'unknown' : the relay has no tracked entry for the recipient. The relay
+ *                 NEVER fabricates 'gone' from a missing entry (no observation is
+ *                 'unknown', not 'gone').
+ */
+import { Encoder, decode as cborDecode } from "cbor-x";
+const CBOR_ENC = new Encoder({ tagUint8Array: false });
+function toUint8Array(v) {
+    if (v instanceof Uint8Array)
+        return v;
+    if (Buffer.isBuffer(v))
+        return new Uint8Array(v);
+    return null;
+}
+function isLiveness(v) {
+    return v === "alive" || v === "gone" || v === "unknown";
+}
+export function encodeSessionLivenessQuery(frame) {
+    return CBOR_ENC.encode({
+        type: "session_liveness_query",
+        session_id: frame.session_id,
+        counterparty_pubkey: frame.counterparty_pubkey,
+    });
+}
+export function decodeSessionLivenessQuery(bytes) {
+    let obj;
+    try {
+        obj = cborDecode(bytes);
+    }
+    catch {
+        return null;
+    }
+    if (typeof obj !== "object" || obj === null)
+        return null;
+    const o = obj;
+    if (o["type"] !== "session_liveness_query")
+        return null;
+    const session_id = toUint8Array(o["session_id"]);
+    const counterparty_pubkey = toUint8Array(o["counterparty_pubkey"]);
+    if (!session_id || session_id.length !== 16)
+        return null;
+    if (!counterparty_pubkey || counterparty_pubkey.length !== 32)
+        return null;
+    return { type: "session_liveness_query", session_id, counterparty_pubkey };
+}
+export function encodeSessionLivenessResponse(frame) {
+    return CBOR_ENC.encode({
+        type: "session_liveness_response",
+        session_id: frame.session_id,
+        counterparty_pubkey: frame.counterparty_pubkey,
+        liveness: frame.liveness,
+        observed_at: frame.observed_at,
+    });
+}
+export function decodeSessionLivenessResponse(bytes) {
+    let obj;
+    try {
+        obj = cborDecode(bytes);
+    }
+    catch {
+        return null;
+    }
+    if (typeof obj !== "object" || obj === null)
+        return null;
+    const o = obj;
+    if (o["type"] !== "session_liveness_response")
+        return null;
+    const session_id = toUint8Array(o["session_id"]);
+    const counterparty_pubkey = toUint8Array(o["counterparty_pubkey"]);
+    const liveness = o["liveness"];
+    const observed_at = o["observed_at"];
+    if (!session_id || session_id.length !== 16)
+        return null;
+    if (!counterparty_pubkey || counterparty_pubkey.length !== 32)
+        return null;
+    if (!isLiveness(liveness))
+        return null;
+    if (typeof observed_at !== "number")
+        return null;
+    return { type: "session_liveness_response", session_id, counterparty_pubkey, liveness, observed_at };
+}
+//# sourceMappingURL=session-liveness.js.map

package/dist/session-liveness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-liveness.js","sourceRoot":"","sources":["../src/session-liveness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEvD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;AAqBvD,SAAS,YAAY,CAAC,CAAU;IAC9B,IAAI,CAAC,YAAY,UAAU;QAAE,OAAO,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,CAAU;IAC5B,OAAO,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,SAAS,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAA2B;IACpE,OAAO,QAAQ,CAAC,MAAM,CAAC;QACrB,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;KAC/C,CAAe,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAiB;IAC1D,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,wBAAwB;QAAE,OAAO,IAAI,CAAC;IACxD,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IACjD,MAAM,mBAAmB,GAAG,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,CAAC,mBAAmB,IAAI,mBAAmB,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3E,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,UAAU,EAAE,mBAAmB,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAA8B;IAC1E,OAAO,QAAQ,CAAC,MAAM,CAAC;QACrB,IAAI,EAAE,2BAA2B;QACjC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAe,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAiB;IAC7D,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,2BAA2B;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IACjD,MAAM,mBAAmB,GAAG,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,CAAC,mBAAmB,IAAI,mBAAmB,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3E,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,EAAE,IAAI,EAAE,2BAA2B,EAAE,UAAU,EAAE,mBAAmB,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACvG,CAAC"}

package/dist/session.d.ts

@@ -95,6 +95,11 @@ interface SessionAssignmentCommon {
     session_timestamp: number;
     directory_pubkey: Uint8Array;
     directory_signature: Uint8Array;
+    initiator_session_peer_id?: string;
+    initiator_session_addrs?: string[];
+    counterparty_session_peer_id?: string;
+    counterparty_session_addrs?: string[];
+    transport_mode?: 'direct' | 'relay';
 }
 /**
  * SESSION-004: FROST-signed assignment. `signer_pubkey` is the initiator's
@@ -126,18 +131,28 @@ export type SessionAssignment = SessionAssignmentFrost | SessionAssignmentSingle
  * (verifier) use identical canonical CBOR encoding. Any drift would silently
  * break verification.
  *
- * TBS = canonical CBOR([session_id, agent_A_pubkey, agent_B_pubkey, genesis_prev_root, timestamp])
+ * Legacy (M1–M6) TBS = canonical CBOR([session_id, pubA, pubB, genesis_prev_root, timestamp])
+ * M7+ TBS = canonical CBOR([session_id, pubA, pubB, genesis_prev_root, timestamp,
+ *   initiatorSessionPeerId, JSON.stringify(initiatorSessionAddrs.slice().sort()),
+ *   counterpartySessionPeerId, JSON.stringify(counterpartySessionAddrs.slice().sort()),
+ *   transportMode])
  *
  * Per CONTEXT.md: tagUint8Array: false. Timestamp encoded as BigInt when > 0xffffffff.
+ * Address arrays are sorted and JSON-stringified for canonical ordering.
  *
  * @param sessionId - 16-byte session identifier
  * @param pubA - 32-byte K_local pubkey of participant A
  * @param pubB - 32-byte K_local pubkey of participant B
  * @param genesisPrevRoot - 32-byte genesis prev_root (output of computeGenesisPrevRoot)
  * @param timestamp - session_timestamp in Unix milliseconds
+ * @param initiatorSessionPeerId - M7: session node Peer ID of initiator (optional for backward compat)
+ * @param initiatorSessionAddrs - M7: multiaddrs of initiator session node (optional for backward compat)
+ * @param counterpartySessionPeerId - M7: session node Peer ID of counterparty (optional for backward compat)
+ * @param counterpartySessionAddrs - M7: multiaddrs of counterparty session node (optional for backward compat)
+ * @param transportMode - M7: 'direct' or 'relay' (optional for backward compat)
  * @returns canonical CBOR bytes of the TBS array
  */
-export declare function buildSessionEstablishmentTbs(sessionId: Uint8Array, pubA: Uint8Array, pubB: Uint8Array, genesisPrevRoot: Uint8Array, timestamp: number | bigint): Uint8Array;
+export declare function buildSessionEstablishmentTbs(sessionId: Uint8Array, pubA: Uint8Array, pubB: Uint8Array, genesisPrevRoot: Uint8Array, timestamp: number | bigint, initiatorSessionPeerId?: string, initiatorSessionAddrs?: string[], counterpartySessionPeerId?: string, counterpartySessionAddrs?: string[], transportMode?: 'direct' | 'relay'): Uint8Array;
 /**
  * SEAL control payload carried as the content_bytes of a ctrl leaf.
  * Canonical CBOR encoding: [session_id, final_root, close_timestamp, "PENDING"].
@@ -190,6 +205,7 @@ export interface SessionSealedSingle {
     sealed_root: Uint8Array;
     directory_signature: Uint8Array;
     close_timestamp: number;
+    legibility?: SealLegibility;
 }
 /**
  * M2 session_sealed frame (FROST-notarized ceremony signature).
@@ -204,9 +220,65 @@ export interface SessionSealedFrost {
     signer_pubkey: Uint8Array;
     close_timestamp: number;
     leaf_count?: number;
+    legibility?: SealLegibility;
 }
 /** Discriminated union: M2 sends SessionSealedFrost; old M1 wire format is SessionSealedSingle. */
 export type SessionSealed = SessionSealedSingle | SessionSealedFrost;
+/**
+ * Per-attestation marker.
+ *   'live'      — the participant produced their SEAL acknowledgement leaf
+ *                 contemporaneously in this ceremony (full-bilateral / present-party).
+ *   'absent'    — the participant produced no acknowledgement (counterparty ABSENT;
+ *                 populated by the unilateral-notarization flow, Workstream A).
+ *   'recovered' — the acknowledgement was added post-hoc on return (populated by the
+ *                 bilateral-upgrade flow, Workstream C).
+ */
+export type AttestationMode = "live" | "recovered" | "absent";
+/**
+ * Canonical, human-readable receipt-not-assent disclaimer carried on every seal
+ * certificate. Constant — the receipt-not-assent property is not session-specific.
+ */
+export declare const SEAL_RECEIPT_DISCLAIMER: string;
+export interface SealLegibilityParticipant {
+    /** 32-byte K_local pubkey of this participant. */
+    pubkey: Uint8Array;
+    /**
+     * The highest counterparty sequence number this party PROVABLY received —
+     * the maximum signed last_seen_seq across that party's OWN signed leaves.
+     * Tree sequence numbers greater than this were merely sent/committed, not
+     * provably received by this party.
+     */
+    content_frontier_seq: number;
+    /** The highest sequence number this party authored. */
+    last_authored_seq: number;
+    /** Per-attestation live-vs-recovered-vs-absent marker. */
+    attestation_mode: AttestationMode;
+}
+export interface SealLegibilityFinalMessage {
+    /** 32-byte pubkey of the author of the highest-sequence content (non-control) leaf. */
+    sender_pubkey: Uint8Array;
+    /** Sequence number of that final content leaf. */
+    seq: number;
+    /**
+     * false => the final-message-unanswered case: composition + submission is
+     * proven, receipt by the counterparty is not. A malicious tail
+     * ("…you agreed to send me $1000") reads as delivered-but-unanswered.
+     */
+    answered: boolean;
+}
+/**
+ * Reader-facing legibility object attached to the SessionSealed certificate.
+ * Built by the directory at seal time; persisted client-side; exposed intact to
+ * any reader (human, agent, arbitrator). NO field asserts, implies, or can be
+ * parsed as agreement; `implies_assent` is always the literal `false`.
+ */
+export interface SealLegibility {
+    attests: "receipt";
+    implies_assent: false;
+    disclaimer: string;
+    participants: SealLegibilityParticipant[];
+    final_message: SealLegibilityFinalMessage;
+}
 export type SealRejectionReason = "merkle_root_mismatch" | "leaf_signature_invalid" | "prev_root_chain_broken" | "causal_chain_violated" | "seal_leaves_invalid" | "seal_signature_invalid";
 export interface SessionSealRejected {
     type: "session_seal_rejected";

package/dist/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AASH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,+DAA+D;AAC/D,UAAU,uBAAuB;IAC/B,UAAU,EAAE,UAAU,CAAC;IACvB,aAAa,EAAE,eAAe,CAAC;IAC/B,aAAa,EAAE,eAAe,CAAC;IAC/B,cAAc,EAAE,iBAAiB,CAAC;IAClC,kBAAkB,EAAE,iBAAiB,CAAC;IACtC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,UAAU,CAAC;IAC7B,mBAAmB,EAAE,UAAU,CAAC;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAuB,SAAQ,uBAAuB;IACrE,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,EAAE,UAAU,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,uBAAwB,SAAQ,uBAAuB;IACtE,cAAc,EAAE,QAAQ,CAAC;CAE1B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG,sBAAsB,GAAG,uBAAuB,CAAC;AAIjF;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,UAAU,EACrB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,UAAU,EAChB,eAAe,EAAE,UAAU,EAC3B,SAAS,EAAE,MAAM,GAAG,MAAM,GACzB,UAAU,CAQZ;AAID;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,UAAU,CAAC;IACvB,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,SAAS,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,WAAW,GAAG,UAAU,CASlE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,GAAG,IAAI,CAiBvE;AAID;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,CAC1B,SAAS,EAAE,UAAU,EACrB,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,UAAU,CAOZ;AAMD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,UAAU,EAAE,UAAU,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,gBAAgB,CAAC;IACvB,cAAc,EAAE,QAAQ,CAAC;IACzB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC;IACxB,mBAAmB,EAAE,UAAU,CAAC;IAChC,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,gBAAgB,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC;IACxB,eAAe,EAAE,UAAU,CAAC;IAC5B,aAAa,EAAE,UAAU,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,mGAAmG;AACnG,MAAM,MAAM,aAAa,GAAG,mBAAmB,GAAG,kBAAkB,CAAC;AAErE,MAAM,MAAM,mBAAmB,GAC3B,sBAAsB,GACtB,wBAAwB,GACxB,wBAAwB,GACxB,uBAAuB,GACvB,qBAAqB,GACrB,wBAAwB,CAAC;AAE7B,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,mBAAmB,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,eAAe,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAID;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,UAAU,EACrB,kBAAkB,EAAE,MAAM,GAAG,MAAM,GAClC,UAAU,CAiBZ"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AASH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,+DAA+D;AAC/D,UAAU,uBAAuB;IAC/B,UAAU,EAAE,UAAU,CAAC;IACvB,aAAa,EAAE,eAAe,CAAC;IAC/B,aAAa,EAAE,eAAe,CAAC;IAC/B,cAAc,EAAE,iBAAiB,CAAC;IAClC,kBAAkB,EAAE,iBAAiB,CAAC;IACtC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,UAAU,CAAC;IAC7B,mBAAmB,EAAE,UAAU,CAAC;IAEhC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC;IACtC,cAAc,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;CACrC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAuB,SAAQ,uBAAuB;IACrE,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,EAAE,UAAU,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,uBAAwB,SAAQ,uBAAuB;IACtE,cAAc,EAAE,QAAQ,CAAC;CAE1B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG,sBAAsB,GAAG,uBAAuB,CAAC;AAIjF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,UAAU,EACrB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,UAAU,EAChB,eAAe,EAAE,UAAU,EAC3B,SAAS,EAAE,MAAM,GAAG,MAAM,EAC1B,sBAAsB,CAAC,EAAE,MAAM,EAC/B,qBAAqB,CAAC,EAAE,MAAM,EAAE,EAChC,yBAAyB,CAAC,EAAE,MAAM,EAClC,wBAAwB,CAAC,EAAE,MAAM,EAAE,EACnC,aAAa,CAAC,EAAE,QAAQ,GAAG,OAAO,GACjC,UAAU,CAiCZ;AAID;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,UAAU,CAAC;IACvB,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,SAAS,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,WAAW,GAAG,UAAU,CASlE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,GAAG,IAAI,CAiBvE;AAID;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,CAC1B,SAAS,EAAE,UAAU,EACrB,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,UAAU,CAOZ;AAMD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,UAAU,EAAE,UAAU,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,gBAAgB,CAAC;IACvB,cAAc,EAAE,QAAQ,CAAC;IACzB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC;IACxB,mBAAmB,EAAE,UAAU,CAAC;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,cAAc,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,gBAAgB,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC;IACxB,eAAe,EAAE,UAAU,CAAC;IAC5B,aAAa,EAAE,UAAU,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,cAAc,CAAC;CAC7B;AAED,mGAAmG;AACnG,MAAM,MAAM,aAAa,GAAG,mBAAmB,GAAG,kBAAkB,CAAC;AAiBrE;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,uBAAuB,QAIsD,CAAC;AAE3F,MAAM,WAAW,yBAAyB;IACxC,kDAAkD;IAClD,MAAM,EAAE,UAAU,CAAC;IACnB;;;;;OAKG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uDAAuD;IACvD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,0DAA0D;IAC1D,gBAAgB,EAAE,eAAe,CAAC;CACnC;AAED,MAAM,WAAW,0BAA0B;IACzC,uFAAuF;IACvF,aAAa,EAAE,UAAU,CAAC;IAC1B,kDAAkD;IAClD,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,SAAS,CAAC;IACnB,cAAc,EAAE,KAAK,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,yBAAyB,EAAE,CAAC;IAC1C,aAAa,EAAE,0BAA0B,CAAC;CAC3C;AAED,MAAM,MAAM,mBAAmB,GAC3B,sBAAsB,GACtB,wBAAwB,GACxB,wBAAwB,GACxB,uBAAuB,GACvB,qBAAqB,GACrB,wBAAwB,CAAC;AAE7B,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,mBAAmB,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,eAAe,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAID;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,UAAU,EACrB,kBAAkB,EAAE,MAAM,GAAG,MAAM,GAClC,UAAU,CAiBZ"}

package/dist/session.js

@@ -87,24 +87,55 @@ const CBOR_ENC = new Encoder({ tagUint8Array: false });
  * (verifier) use identical canonical CBOR encoding. Any drift would silently
  * break verification.
  *
- * TBS = canonical CBOR([session_id, agent_A_pubkey, agent_B_pubkey, genesis_prev_root, timestamp])
+ * Legacy (M1–M6) TBS = canonical CBOR([session_id, pubA, pubB, genesis_prev_root, timestamp])
+ * M7+ TBS = canonical CBOR([session_id, pubA, pubB, genesis_prev_root, timestamp,
+ *   initiatorSessionPeerId, JSON.stringify(initiatorSessionAddrs.slice().sort()),
+ *   counterpartySessionPeerId, JSON.stringify(counterpartySessionAddrs.slice().sort()),
+ *   transportMode])
  *
  * Per CONTEXT.md: tagUint8Array: false. Timestamp encoded as BigInt when > 0xffffffff.
+ * Address arrays are sorted and JSON-stringified for canonical ordering.
  *
  * @param sessionId - 16-byte session identifier
  * @param pubA - 32-byte K_local pubkey of participant A
  * @param pubB - 32-byte K_local pubkey of participant B
  * @param genesisPrevRoot - 32-byte genesis prev_root (output of computeGenesisPrevRoot)
  * @param timestamp - session_timestamp in Unix milliseconds
+ * @param initiatorSessionPeerId - M7: session node Peer ID of initiator (optional for backward compat)
+ * @param initiatorSessionAddrs - M7: multiaddrs of initiator session node (optional for backward compat)
+ * @param counterpartySessionPeerId - M7: session node Peer ID of counterparty (optional for backward compat)
+ * @param counterpartySessionAddrs - M7: multiaddrs of counterparty session node (optional for backward compat)
+ * @param transportMode - M7: 'direct' or 'relay' (optional for backward compat)
  * @returns canonical CBOR bytes of the TBS array
  */
-export function buildSessionEstablishmentTbs(sessionId, pubA, pubB, genesisPrevRoot, timestamp) {
+export function buildSessionEstablishmentTbs(sessionId, pubA, pubB, genesisPrevRoot, timestamp, initiatorSessionPeerId, initiatorSessionAddrs, counterpartySessionPeerId, counterpartySessionAddrs, transportMode) {
+    const tsEncoded = typeof timestamp === "bigint" || timestamp > 0xffffffff ? BigInt(timestamp) : timestamp;
+    // M7+: when all new fields are provided, encode all 10 fields
+    if (initiatorSessionPeerId !== undefined &&
+        initiatorSessionAddrs !== undefined &&
+        counterpartySessionPeerId !== undefined &&
+        counterpartySessionAddrs !== undefined &&
+        transportMode !== undefined) {
+        return CBOR_ENC.encode([
+            sessionId,
+            pubA,
+            pubB,
+            genesisPrevRoot,
+            tsEncoded,
+            initiatorSessionPeerId,
+            JSON.stringify(initiatorSessionAddrs.slice().sort()),
+            counterpartySessionPeerId,
+            JSON.stringify(counterpartySessionAddrs.slice().sort()),
+            transportMode,
+        ]);
+    }
+    // Legacy (M1–M6): encode only the original 5 fields
     return CBOR_ENC.encode([
         sessionId,
         pubA,
         pubB,
         genesisPrevRoot,
-        typeof timestamp === "bigint" || timestamp > 0xffffffff ? BigInt(timestamp) : timestamp,
+        tsEncoded,
     ]);
 }
 /**
@@ -172,6 +203,14 @@ export function buildSealTbs(sessionId, sealedRoot, leafCount, timestamp) {
         timestamp > 0xffffffff ? BigInt(timestamp) : timestamp,
     ]);
 }
+/**
+ * Canonical, human-readable receipt-not-assent disclaimer carried on every seal
+ * certificate. Constant — the receipt-not-assent property is not session-specific.
+ */
+export const SEAL_RECEIPT_DISCLAIMER = "This certificate attests faithful receipt, integrity, and ordering of the " +
+    "transcript. No signature in this certificate implies agreement to, or assent " +
+    "to, the contents of any message. Agreement is always a separate, explicit act " +
+    "(its own signed reply). A sealed transcript is a receipt, never a record of agreement.";
 // ─── End session outcome notification frame types ─────────────────────────────
 /**
  * Compute the genesis prev_root for a two-party CELLO session.

package/dist/session.js.map

@@ -1 +1 @@
-{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEvD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;AAsDvD,iFAAiF;AAEjF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,4BAA4B,CAC1C,SAAqB,EACrB,IAAgB,EAChB,IAAgB,EAChB,eAA2B,EAC3B,SAA0B;IAE1B,OAAO,QAAQ,CAAC,MAAM,CAAC;QACrB,SAAS;QACT,IAAI;QACJ,IAAI;QACJ,eAAe;QACf,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;KACxF,CAAe,CAAC;AACnB,CAAC;AAgBD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAoB;IACpD,OAAO,QAAQ,CAAC,MAAM,CAAC;QACrB,OAAO,CAAC,UAAU;QAClB,OAAO,CAAC,UAAU;QAClB,OAAO,CAAC,eAAe,GAAG,UAAU;YAClC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;YACjC,CAAC,CAAC,OAAO,CAAC,eAAe;QAC3B,OAAO,CAAC,WAAW;KACpB,CAAe,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAiB;IACjD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9G,MAAM,IAAI,GAAG,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnH,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,EAAE,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxF,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;AAC5F,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,YAAY,CAC1B,SAAqB,EACrB,UAAsB,EACtB,SAAiB,EACjB,SAAiB;IAEjB,OAAO,QAAQ,CAAC,MAAM,CAAC;QACrB,SAAS;QACT,UAAU;QACV,SAAS;QACT,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;KACvD,CAAe,CAAC;AACnB,CAAC;AAsED,iFAAiF;AAEjF;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAmB,EACnB,OAAmB,EACnB,SAAqB,EACrB,kBAAmC;IAEnC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAE/B,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAE/D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,gBAAgB,CAAC,OAAO,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAEhH,OAAO,IAAI,UAAU,CACnB,UAAU,CAAC,QAAQ,CAAC;SACjB,MAAM,CAAC,GAAG,CAAC;SACX,MAAM,CAAC,GAAG,CAAC;SACX,MAAM,CAAC,SAAS,CAAC;SACjB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,EAAE,CACZ,CAAC;AACJ,CAAC"}
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEvD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;AA4DvD,iFAAiF;AAEjF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,4BAA4B,CAC1C,SAAqB,EACrB,IAAgB,EAChB,IAAgB,EAChB,eAA2B,EAC3B,SAA0B,EAC1B,sBAA+B,EAC/B,qBAAgC,EAChC,yBAAkC,EAClC,wBAAmC,EACnC,aAAkC;IAElC,MAAM,SAAS,GAAG,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1G,8DAA8D;IAC9D,IACE,sBAAsB,KAAK,SAAS;QACpC,qBAAqB,KAAK,SAAS;QACnC,yBAAyB,KAAK,SAAS;QACvC,wBAAwB,KAAK,SAAS;QACtC,aAAa,KAAK,SAAS,EAC3B,CAAC;QACD,OAAO,QAAQ,CAAC,MAAM,CAAC;YACrB,SAAS;YACT,IAAI;YACJ,IAAI;YACJ,eAAe;YACf,SAAS;YACT,sBAAsB;YACtB,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;YACpD,yBAAyB;YACzB,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;YACvD,aAAa;SACd,CAAe,CAAC;IACnB,CAAC;IAED,oDAAoD;IACpD,OAAO,QAAQ,CAAC,MAAM,CAAC;QACrB,SAAS;QACT,IAAI;QACJ,IAAI;QACJ,eAAe;QACf,SAAS;KACV,CAAe,CAAC;AACnB,CAAC;AAgBD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAoB;IACpD,OAAO,QAAQ,CAAC,MAAM,CAAC;QACrB,OAAO,CAAC,UAAU;QAClB,OAAO,CAAC,UAAU;QAClB,OAAO,CAAC,eAAe,GAAG,UAAU;YAClC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;YACjC,CAAC,CAAC,OAAO,CAAC,eAAe;QAC3B,OAAO,CAAC,WAAW;KACpB,CAAe,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAiB;IACjD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9G,MAAM,IAAI,GAAG,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnH,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,EAAE,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxF,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;AAC5F,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,YAAY,CAC1B,SAAqB,EACrB,UAAsB,EACtB,SAAiB,EACjB,SAAiB;IAEjB,OAAO,QAAQ,CAAC,MAAM,CAAC;QACrB,SAAS;QACT,UAAU;QACV,SAAS;QACT,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;KACvD,CAAe,CAAC;AACnB,CAAC;AAuED;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAClC,4EAA4E;IAC5E,+EAA+E;IAC/E,gFAAgF;IAChF,wFAAwF,CAAC;AAwE3F,iFAAiF;AAEjF;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAmB,EACnB,OAAmB,EACnB,SAAqB,EACrB,kBAAmC;IAEnC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAE/B,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAE/D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,gBAAgB,CAAC,OAAO,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAEhH,OAAO,IAAI,UAAU,CACnB,UAAU,CAAC,QAAQ,CAAC;SACjB,MAAM,CAAC,GAAG,CAAC;SACX,MAAM,CAAC,GAAG,CAAC;SACX,MAAM,CAAC,SAAS,CAAC;SACjB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,EAAE,CACZ,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cello-protocol/protocol-types",
-  "version": "0.0.4",
+  "version": "0.0.6",
   "private": false,
   "type": "module",
   "engines": {
@@ -23,7 +23,7 @@
   ],
   "dependencies": {
     "cbor-x": "^1.6.4",
-    "@cello-protocol/crypto": "0.0.8"
+    "@cello-protocol/crypto": "0.0.9"
   },
   "devDependencies": {
     "@claude-flow/testing": "3.0.0-alpha.6",