@cello-protocol/protocol-types 0.0.53 → 0.0.55

package/dist/document-multisig.js

@@ -0,0 +1,185 @@
+/**
+ * DOD-MP-SIG-1 — the multi-signature primitive: N Ed25519 signatures over ONE preimage.
+ *
+ * A collection is COMPLETE only when every signer in the required set has a verifying signature —
+ * no more, no fewer, no substitutes. Anything short of that is a partial collection: storable
+ * while signatures are being gathered, never valid. Completeness is computed independently by any
+ * holder from the collection alone plus a verifier; there is no coordinator whose word settles it.
+ *
+ * ── GENERIC BY CONSTRUCTION ───────────────────────────────────────────────────────────────────
+ *
+ * Nothing in this module knows what an amendment is. The subject is carried as
+ * `(subject_kind, subject_hash)` — the hash of the subject's OWN to-be-signed structure — so the
+ * amendment record (its first consumer) and Tier 2's N-way quiescence agreement (its named second)
+ * use the same preimage builder and the same completeness rule. Anything subject-specific growing
+ * in here is the drift the M14B Tier-2-readiness lens blocks.
+ *
+ * ── THE PREIMAGE COMMITS TO WHO MUST SIGN ─────────────────────────────────────────────────────
+ *
+ * `required_signers` is inside the signed bytes, sorted so the set — not the order it was typed
+ * in — is what is committed. Each signer therefore signs knowing exactly which co-signatures the
+ * collection needs: a signature given as "the sole required signer" cannot be replayed into a
+ * collection claiming a different signer set, because the preimage differs and the signature
+ * stops verifying. Replay across chain positions is the SUBJECT's job to prevent (its TBS chains
+ * to its predecessor), not this layer's.
+ *
+ * Signatures are Ed25519 (RFC 8032) over the SHA-256 of the preimage array, matching the sibling
+ * envelope builders. Verification is injected — the same seam the proposal path uses — so this
+ * module stays pure types + bytes.
+ */
+import { createHash } from "node:crypto";
+import { encodeCbor, decodeCbor } from "./cbor.js";
+/** Domain tag in slot 0 of the to-be-signed array. Distinct from every sibling envelope domain. */
+export const DOCUMENT_MULTISIG_DOMAIN = "CELLO-DOCUMENT-MULTISIG-v1";
+/**
+ * The signer set, validated and canonicalized: non-empty, no duplicates, sorted.
+ *
+ * Duplicates are REFUSED rather than deduped — a duplicate in a required set is a builder bug,
+ * and silently collapsing it would change the preimage under a caller who believes they know
+ * what they asked N parties to sign.
+ */
+function canonicalSigners(signers) {
+    if (signers.length === 0) {
+        throw new Error("multisig_empty_signer_set: a collection nobody is required to sign is not a rule — " +
+            "the required set must name at least one signer");
+    }
+    const sorted = [...signers].sort();
+    for (let i = 1; i < sorted.length; i++) {
+        if (sorted[i] === sorted[i - 1]) {
+            throw new Error(`multisig_duplicate_signer: ${sorted[i]} appears more than once in the required set`);
+        }
+    }
+    for (const s of sorted) {
+        if (typeof s !== "string" || s.length === 0) {
+            throw new Error("multisig_signer_type: every required signer must be a non-empty string");
+        }
+    }
+    return sorted;
+}
+/**
+ * The canonical to-be-signed preimage: a fixed-order CBOR ARRAY with the domain in slot 0.
+ * SHA-256 pre-hashed by default, matching the sibling builders.
+ */
+export function buildDocumentMultisigTbs(subject, opts = {}) {
+    const preimage = encodeCbor([
+        DOCUMENT_MULTISIG_DOMAIN,
+        subject.document_id,
+        subject.subject_kind,
+        subject.subject_hash,
+        canonicalSigners(subject.required_signers),
+    ]);
+    if (opts.preHash === false)
+        return preimage;
+    return new Uint8Array(createHash("sha256").update(preimage).digest());
+}
+/**
+ * Completeness, computed from the collection alone plus an injected verifier.
+ *
+ * Every defect class is NAMED rather than folded into a boolean, because the operator-facing
+ * question differs: "waiting on C" (missing), "B's signature is bad" (invalid), "someone outside
+ * the arrangement signed" (unknown — refused because extra names must not make a collection look
+ * more agreed than the rule it commits to), and "B signed twice" (duplicate).
+ */
+export function collectionStatus(collection, verify) {
+    const required = new Set(canonicalSigners(collection.required_signers));
+    const tbs = buildDocumentMultisigTbs(collection);
+    const seen = new Set();
+    const invalidSigners = [];
+    const unknown = [];
+    const duplicates = [];
+    for (const { signer_agent_id, signature } of collection.signatures) {
+        if (seen.has(signer_agent_id)) {
+            duplicates.push(signer_agent_id);
+            continue;
+        }
+        seen.add(signer_agent_id);
+        if (!required.has(signer_agent_id)) {
+            unknown.push(signer_agent_id);
+            continue;
+        }
+        if (!verify(signer_agent_id, tbs, signature)) {
+            invalidSigners.push(signer_agent_id);
+        }
+    }
+    // A signer whose signature failed is INVALID, not missing — the two send the operator to
+    // different fixes — so missing is strictly "no row present at all".
+    const missing = [...required].filter((id) => !seen.has(id));
+    return {
+        complete: missing.length === 0 &&
+            invalidSigners.length === 0 &&
+            unknown.length === 0 &&
+            duplicates.length === 0,
+        missing,
+        invalidSigners,
+        unknown,
+        duplicates,
+    };
+}
+export function encodeMultisigCollection(collection) {
+    return encodeCbor({
+        document_id: collection.document_id,
+        subject_kind: collection.subject_kind,
+        subject_hash: collection.subject_hash,
+        required_signers: canonicalSigners(collection.required_signers),
+        signatures: collection.signatures.map((s) => ({
+            signer_agent_id: s.signer_agent_id,
+            signature: s.signature,
+        })),
+    });
+}
+function present(map, field) {
+    if (!(field in map)) {
+        throw new Error(`multisig_missing_field: ${field} is mandatory and was not present`);
+    }
+    return map[field];
+}
+function str(map, field) {
+    const v = present(map, field);
+    if (typeof v !== "string" || v.length === 0) {
+        throw new Error(`multisig_field_type: ${field} must be a non-empty text string`);
+    }
+    return v;
+}
+function bytes(map, field) {
+    const v = present(map, field);
+    if (!(v instanceof Uint8Array)) {
+        throw new Error(`multisig_field_type: ${field} must be a CBOR byte string`);
+    }
+    // Copied — cbor-x returns views into the decoded buffer.
+    return new Uint8Array(v);
+}
+export function decodeMultisigCollection(input) {
+    const decoded = decodeCbor(input);
+    if (typeof decoded !== "object" || decoded === null || Array.isArray(decoded)) {
+        throw new Error("multisig_malformed: not a CBOR map");
+    }
+    const map = decoded;
+    const rawSigners = present(map, "required_signers");
+    if (!Array.isArray(rawSigners) || rawSigners.some((s) => typeof s !== "string")) {
+        throw new Error("multisig_field_type: required_signers must be an array of strings");
+    }
+    const rawSignatures = present(map, "signatures");
+    if (!Array.isArray(rawSignatures)) {
+        throw new Error("multisig_field_type: signatures must be an array");
+    }
+    const signatures = rawSignatures.map((entry, i) => {
+        if (typeof entry !== "object" || entry === null || Array.isArray(entry)) {
+            throw new Error(`multisig_field_type: signatures[${i}] must be a CBOR map`);
+        }
+        const e = entry;
+        return {
+            signer_agent_id: str(e, "signer_agent_id"),
+            signature: bytes(e, "signature"),
+        };
+    });
+    return {
+        document_id: str(map, "document_id"),
+        subject_kind: str(map, "subject_kind"),
+        subject_hash: bytes(map, "subject_hash"),
+        // Canonicalized on decode as well — a wire producer that shipped duplicates or an empty set
+        // is refused here, before any completeness question is asked.
+        required_signers: canonicalSigners(rawSigners),
+        signatures,
+    };
+}
+//# sourceMappingURL=document-multisig.js.map

package/dist/document-multisig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-multisig.js","sourceRoot":"","sources":["../src/document-multisig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnD,mGAAmG;AACnG,MAAM,CAAC,MAAM,wBAAwB,GAAG,4BAA4B,CAAC;AAwBrE;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,OAA0B;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,qFAAqF;YACnF,gDAAgD,CACnD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,8BAA8B,MAAM,CAAC,CAAC,CAAC,6CAA6C,CACrF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAwB,EACxB,OAA8B,EAAE;IAEhC,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC1B,wBAAwB;QACxB,OAAO,CAAC,WAAW;QACnB,OAAO,CAAC,YAAY;QACpB,OAAO,CAAC,YAAY;QACpB,gBAAgB,CAAC,OAAO,CAAC,gBAAgB,CAAC;KAC3C,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5C,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACxE,CAAC;AAeD;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAA8B,EAC9B,MAA4E;IAE5E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IAEjD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,KAAK,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QACnE,IAAI,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;YAC9B,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACjC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC;YAC7C,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,yFAAyF;IACzF,oEAAoE;IACpE,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5D,OAAO;QACL,QAAQ,EACN,OAAO,CAAC,MAAM,KAAK,CAAC;YACpB,cAAc,CAAC,MAAM,KAAK,CAAC;YAC3B,OAAO,CAAC,MAAM,KAAK,CAAC;YACpB,UAAU,CAAC,MAAM,KAAK,CAAC;QACzB,OAAO;QACP,cAAc;QACd,OAAO;QACP,UAAU;KACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,UAA8B;IACrE,OAAO,UAAU,CAAC;QAChB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,gBAAgB,EAAE,gBAAgB,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAC/D,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5C,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC;KACJ,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,GAA4B,EAAE,KAAa;IAC1D,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,mCAAmC,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,GAAG,CAAC,GAA4B,EAAE,KAAa;IACtD,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,kCAAkC,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,KAAK,CAAC,GAA4B,EAAE,KAAa;IACxD,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,6BAA6B,CAAC,CAAC;IAC9E,CAAC;IACD,yDAAyD;IACzD,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAiB;IACxD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,GAAG,GAAG,OAAkC,CAAC;IAE/C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,UAAU,GAAwB,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACrE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,sBAAsB,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,OAAO;YACL,eAAe,EAAE,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC;YAC1C,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC;SACjC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC;QACpC,YAAY,EAAE,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC;QACtC,YAAY,EAAE,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC;QACxC,4FAA4F;QAC5F,8DAA8D;QAC9D,gBAAgB,EAAE,gBAAgB,CAAC,UAAsB,CAAC;QAC1D,UAAU;KACX,CAAC;AACJ,CAAC"}

package/dist/document-proposal.d.ts

@@ -12,7 +12,7 @@
  *
  * ── THE SEAM (§3.4, §11.1) ────────────────────────────────────────────────────────────────────
  *
- * Three properties are DECLARED in V1 but support exactly one value each, and the pattern is
+ * Seam properties are DECLARED with a closed accepted-value set, and the pattern is
  * deliberate — §3.3 chose it for `schema_enforcement` and §16.1 generalized it. Declaring a field
  * that only accepts one value looks redundant until you need the second value: the field is
  * already on the wire and already signed, so V2 is a validation change rather than a wire break
@@ -31,17 +31,27 @@
  * answered and the operator sees a hang. `documentFeatureIncompatibility` turns that into "your
  * peer's client doesn't support shared documents yet — ask them to upgrade".
  */
+import type { ArrangementGenesis } from "./document-amendment.js";
 /** Domain tag in slot 0 of the to-be-signed array. Distinct from the UPDATE envelope's domain. */
 export declare const DOCUMENT_PROPOSAL_DOMAIN = "CELLO-DOCUMENT-PROPOSAL-v1";
 /**
  * The document feature version this build speaks. Bumped when the document wire changes in a way
  * a peer must understand; see `documentFeatureIncompatibility` for what a mismatch produces.
  */
-export declare const DOCUMENT_FEATURE_VERSION = 1;
+export declare const DOCUMENT_FEATURE_VERSION = 2;
 /** §6 — Tier 1. Tier 2 (attested) is V2; the field exists so V2 is a validation change. */
 export declare const ASSURANCE_TIER_V1 = "authenticated";
-/** §11 — the pairwise two-document form. Mesh is deferred (§11.1). */
-export declare const TOPOLOGY_V1 = "hub-and-spoke";
+/**
+ * DOD-MP-TOPOLOGY-1 (ruling D4, 2026-08-13): `mesh` is the DEFAULT — one document, N holders,
+ * everyone delivers to everyone, which is what the M14B machinery does regardless of the label.
+ * `hub-and-spoke` survives as an accepted VALUE only (the wire field is signed into
+ * `document_id`, and a document so labeled behaves identically — the broker case is served by
+ * construction: two ordinary documents). Nothing else is accepted; the refusal names the
+ * mismatch at BOTH ends, because the proposer and accepter run different builds and one-sided
+ * validation lets whichever side is newer decide for both.
+ */
+export declare const TOPOLOGY_DEFAULT = "mesh";
+export declare const SUPPORTED_TOPOLOGIES: ReadonlySet<string>;
 export type DocumentConsentState = "pending" | "accepted" | "refused";
 /**
  * The properties agreed at handshake (§3.4). **Immutable after accept** — a property change is an
@@ -54,7 +64,7 @@ export interface DocumentProperties {
     assurance_tier: string;
     /** Only `false` in V1 — the schema-as-first-update path (§3.3) is V2. */
     schema_enforcement: boolean;
-    /** Only `hub-and-spoke` in V1. */
+    /** `mesh` (the default) or `hub-and-spoke` — anything else refuses at both ends. */
     topology: string;
     /** Receiver-local append-only enforcement (§16.7-1). Freely settable — not a seam field. */
     append_only: boolean;
@@ -71,6 +81,15 @@ export interface DocumentProperties {
      * 412" is not.
      */
     content_profile?: string;
+    /**
+     * M14B / DOD-MP-AMEND-1 — the admin set fixed at creation (ruling D2, 2026-08-11): the
+     * pubkey-hex identities holding admin power over this document's arrangement. Signed into the
+     * preimage — and therefore into `document_id` — because WHO governs the document is part of
+     * what the invitee consents to. Absent means EVERY genesis participant is an admin (the
+     * bilateral default: either party can invite). The set is canonicalized sorted; membership
+     * must be ⊆ the genesis participants, enforced at accept and again at every replay.
+     */
+    admin_set?: string[];
 }
 export interface DocumentProposalEnvelope {
     type: "document_proposal";
@@ -93,15 +112,6 @@ export interface DocumentProposalEnvelope {
     /** Ed25519 (RFC 8032) over `buildDocumentProposalTbs`. */
     signature: Uint8Array;
 }
-/**
- * The canonical to-be-signed preimage: a fixed-order CBOR ARRAY with the domain in slot 0.
- *
- * The properties are flattened into their own slots rather than nested as a map. `encodeCbor` is
- * not deterministic for maps — keys follow insertion order — so a nested `properties` object would
- * make the signature depend on the order the proposer happened to build it in, and two honest
- * builds of the same proposal would produce different `document_id`s. For this envelope that is
- * worse than a bad signature: the id IS the hash, so the two parties would be on two documents.
- */
 export declare function buildDocumentProposalTbs(env: DocumentProposalEnvelope, opts?: {
     preHash?: boolean;
 }): Uint8Array;
@@ -137,4 +147,9 @@ export declare function encodeDocumentProposal(env: DocumentProposalEnvelope): U
  * version exists to replace.
  */
 export declare function decodeDocumentProposal(input: Uint8Array): DocumentProposalEnvelope;
+/**
+ * The genesis PROPOSAL as the fold's anchor (SYNC-P1). Lived in the join-offer module until D5
+ * deleted it; the conversion belongs to the proposal itself — every derivation starts here.
+ */
+export declare function arrangementGenesisFromProposal(genesis: DocumentProposalEnvelope): ArrangementGenesis;
 //# sourceMappingURL=document-proposal.d.ts.map

package/dist/document-proposal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"document-proposal.d.ts","sourceRoot":"","sources":["../src/document-proposal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAKH,kGAAkG;AAClG,eAAO,MAAM,wBAAwB,+BAA+B,CAAC;AAErE;;;GAGG;AACH,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C,2FAA2F;AAC3F,eAAO,MAAM,iBAAiB,kBAAkB,CAAC;AACjD,sEAAsE;AACtE,eAAO,MAAM,WAAW,kBAAkB,CAAC;AAE3C,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,kCAAkC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,kBAAkB,EAAE,OAAO,CAAC;IAC5B,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,4FAA4F;IAC5F,WAAW,EAAE,OAAO,CAAC;IACrB;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,mGAAmG;IACnG,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,kBAAkB,CAAC;IAC/B;;;;OAIG;IACH,gBAAgB,EAAE,UAAU,GAAG,IAAI,CAAC;IACpC,yFAAyF;IACzF,KAAK,EAAE,UAAU,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,SAAS,EAAE,UAAU,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,wBAAwB,EAC7B,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAC/B,UAAU,CAyCZ;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,wBAAwB,GAAG,MAAM,CAI5E;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,GAAG,IAAI,CAoCtE;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAoB/F;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,wBAAwB,GAAG,UAAU,CAkBhF;AA6BD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,UAAU,GAAG,wBAAwB,CA8DlF"}
+{"version":3,"file":"document-proposal.d.ts","sourceRoot":"","sources":["../src/document-proposal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAIH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE,kGAAkG;AAClG,eAAO,MAAM,wBAAwB,+BAA+B,CAAC;AAErE;;;GAGG;AACH,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C,2FAA2F;AAC3F,eAAO,MAAM,iBAAiB,kBAAkB,CAAC;AACjD;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,SAAS,CAAC;AACvC,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAAsC,CAAC;AAE5F,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,kCAAkC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,kBAAkB,EAAE,OAAO,CAAC;IAC5B,oFAAoF;IACpF,QAAQ,EAAE,MAAM,CAAC;IACjB,4FAA4F;IAC5F,WAAW,EAAE,OAAO,CAAC;IACrB;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,mGAAmG;IACnG,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,kBAAkB,CAAC;IAC/B;;;;OAIG;IACH,gBAAgB,EAAE,UAAU,GAAG,IAAI,CAAC;IACpC,yFAAyF;IACzF,KAAK,EAAE,UAAU,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,SAAS,EAAE,UAAU,CAAC;CACvB;AAgCD,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,wBAAwB,EAC7B,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAC/B,UAAU,CA8CZ;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,wBAAwB,GAAG,MAAM,CAI5E;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,GAAG,IAAI,CAkDtE;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAoB/F;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,wBAAwB,GAAG,UAAU,CA4BhF;AA6BD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,UAAU,GAAG,wBAAwB,CAoFlF;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,wBAAwB,GAChC,kBAAkB,CAgBpB"}

package/dist/document-proposal.js

@@ -12,7 +12,7 @@
  *
  * ── THE SEAM (§3.4, §11.1) ────────────────────────────────────────────────────────────────────
  *
- * Three properties are DECLARED in V1 but support exactly one value each, and the pattern is
+ * Seam properties are DECLARED with a closed accepted-value set, and the pattern is
  * deliberate — §3.3 chose it for `schema_enforcement` and §16.1 generalized it. Declaring a field
  * that only accepts one value looks redundant until you need the second value: the field is
  * already on the wire and already signed, so V2 is a validation change rather than a wire break
@@ -39,11 +39,20 @@ export const DOCUMENT_PROPOSAL_DOMAIN = "CELLO-DOCUMENT-PROPOSAL-v1";
  * The document feature version this build speaks. Bumped when the document wire changes in a way
  * a peer must understand; see `documentFeatureIncompatibility` for what a mismatch produces.
  */
-export const DOCUMENT_FEATURE_VERSION = 1;
+export const DOCUMENT_FEATURE_VERSION = 2;
 /** §6 — Tier 1. Tier 2 (attested) is V2; the field exists so V2 is a validation change. */
 export const ASSURANCE_TIER_V1 = "authenticated";
-/** §11 — the pairwise two-document form. Mesh is deferred (§11.1). */
-export const TOPOLOGY_V1 = "hub-and-spoke";
+/**
+ * DOD-MP-TOPOLOGY-1 (ruling D4, 2026-08-13): `mesh` is the DEFAULT — one document, N holders,
+ * everyone delivers to everyone, which is what the M14B machinery does regardless of the label.
+ * `hub-and-spoke` survives as an accepted VALUE only (the wire field is signed into
+ * `document_id`, and a document so labeled behaves identically — the broker case is served by
+ * construction: two ordinary documents). Nothing else is accepted; the refusal names the
+ * mismatch at BOTH ends, because the proposer and accepter run different builds and one-sided
+ * validation lets whichever side is newer decide for both.
+ */
+export const TOPOLOGY_DEFAULT = "mesh";
+export const SUPPORTED_TOPOLOGIES = new Set(["mesh", "hub-and-spoke"]);
 /**
  * The canonical to-be-signed preimage: a fixed-order CBOR ARRAY with the domain in slot 0.
  *
@@ -53,6 +62,24 @@ export const TOPOLOGY_V1 = "hub-and-spoke";
  * builds of the same proposal would produce different `document_id`s. For this envelope that is
  * worse than a bad signature: the id IS the hash, so the two parties would be on two documents.
  */
+/** Sorted, duplicate-refusing canonical form — the SET is what is signed, not the typing order. */
+function canonicalAdminSet(adminSet) {
+    const sorted = [...adminSet].sort();
+    for (let i = 0; i < sorted.length; i++) {
+        // 64-hex ENFORCED, not assumed. The TBS folds the set to a ","-joined scalar, and the join is
+        // collision-free only because a pubkey cannot contain the separator — an unvalidated entry
+        // like "aa,bb" would let two different admin sets share one preimage, one document_id, and
+        // one valid signature. The charset IS the boundary.
+        if (typeof sorted[i] !== "string" || !/^[0-9a-f]{64}$/.test(sorted[i])) {
+            throw new Error("document_proposal_admin_set: every admin must be a 64-hex Ed25519 pubkey — got " +
+                JSON.stringify(sorted[i]));
+        }
+        if (i > 0 && sorted[i] === sorted[i - 1]) {
+            throw new Error(`document_proposal_admin_set: ${sorted[i]} appears more than once`);
+        }
+    }
+    return sorted;
+}
 export function buildDocumentProposalTbs(env, opts = {}) {
     const preimage = encodeCbor([
         DOCUMENT_PROPOSAL_DOMAIN,
@@ -77,6 +104,11 @@ export function buildDocumentProposalTbs(env, opts = {}) {
         // `null` when the proposer named none, so the slot is always occupied and no field's meaning
         // depends on whether the one before it was present.
         env.properties.content_profile ?? null,
+        // DOD-MP-AMEND-1's slot, feature_version 2. A SCALAR — sorted-unique pubkeys joined with
+        // "," (hex carries no comma) — because this preimage's flatness invariant (no nested
+        // containers, pinned by test) is what keeps the id independent of any container encoding.
+        // `null` when the proposer named none, so the slot is always occupied.
+        env.properties.admin_set === undefined ? null : canonicalAdminSet(env.properties.admin_set).join(","),
         env.starting_content,
         env.nonce,
         // BIGINT past 0xffffffff — the same coercion three sibling builders carry and which
@@ -139,9 +171,22 @@ export function seamViolation(props) {
         return (`content_profile must be a profile NAME (a string) or absent; this build cannot agree a ` +
             `document whose character space is declared as something else`);
     }
-    if (props.topology !== TOPOLOGY_V1) {
-        return (`document_seam_topology: this version supports "${TOPOLOGY_V1}" only, and the proposal asks ` +
-            `for "${props.topology}" — mesh documents (§11.1) are not yet built`);
+    if (props.admin_set !== undefined) {
+        if (!Array.isArray(props.admin_set) || props.admin_set.length === 0) {
+            return ("document_proposal_admin_set: when declared, the admin set must be a non-empty list of " +
+                "pubkeys — an empty list is a document nobody can ever amend");
+        }
+        try {
+            canonicalAdminSet(props.admin_set);
+        }
+        catch (err) {
+            return err instanceof Error ? err.message : String(err);
+        }
+    }
+    if (!SUPPORTED_TOPOLOGIES.has(props.topology)) {
+        return (`document_seam_topology: this version supports ${[...SUPPORTED_TOPOLOGIES]
+            .map((v) => `"${v}"`)
+            .join(" and ")}, and the proposal asks for "${props.topology}"`);
     }
     return null;
 }
@@ -178,6 +223,16 @@ export function encodeDocumentProposal(env) {
             schema_enforcement: env.properties.schema_enforcement,
             topology: env.properties.topology,
             append_only: env.properties.append_only,
+            // Present only when declared — the TBS signs this slot (`?? null`), so an encoding that
+            // drops it has the receiver rebuild a different preimage and refuse the signature of every
+            // profiled proposal. Absent stays absent so profile-less proposals keep their pre-profile
+            // byte encoding.
+            ...(env.properties.content_profile !== undefined
+                ? { content_profile: env.properties.content_profile }
+                : {}),
+            ...(env.properties.admin_set !== undefined
+                ? { admin_set: canonicalAdminSet(env.properties.admin_set) }
+                : {}),
         },
         starting_content: env.starting_content,
         nonce: env.nonce,
@@ -242,6 +297,22 @@ export function decodeDocumentProposal(input) {
     if (typeof appendOnly !== "boolean") {
         throw new Error("document_proposal_field_type: properties.append_only must be a boolean");
     }
+    // OPTIONAL, unlike the seam fields above — documents agreed before profiles existed carry none,
+    // and `present` would refuse every one of them. When declared it must be a name; membership in
+    // the closed set is the gate's question (`seamViolation` checks shape, the daemon checks names).
+    // CANONICAL FORM: absent is the only encoding of "no profile". The TBS folds absent and null to
+    // the same signed slot, but an explicit `content_profile: null` on the wire is REFUSED here —
+    // one preimage, one decodable byte encoding. A second implementation must emit absent, not null.
+    const adminSet = "admin_set" in p ? p["admin_set"] : undefined;
+    if (adminSet !== undefined) {
+        if (!Array.isArray(adminSet) || adminSet.length === 0 || adminSet.some((s) => typeof s !== "string")) {
+            throw new Error("document_proposal_field_type: properties.admin_set must be a non-empty array of strings when present");
+        }
+    }
+    const contentProfile = "content_profile" in p ? p["content_profile"] : undefined;
+    if (contentProfile !== undefined && (typeof contentProfile !== "string" || contentProfile.length === 0)) {
+        throw new Error("document_proposal_field_type: properties.content_profile must be a non-empty text string when present");
+    }
     const startingContent = present(map, "starting_content");
     if (startingContent !== null && !(startingContent instanceof Uint8Array)) {
         throw new Error("document_proposal_field_type: starting_content must be a CBOR byte string or explicit null");
@@ -261,6 +332,8 @@ export function decodeDocumentProposal(input) {
             schema_enforcement: schemaEnforcement,
             topology: str(p, "topology"),
             append_only: appendOnly,
+            ...(contentProfile !== undefined ? { content_profile: contentProfile } : {}),
+            ...(adminSet !== undefined ? { admin_set: canonicalAdminSet(adminSet) } : {}),
         },
         starting_content: startingContent === null ? null : new Uint8Array(startingContent),
         nonce: bytes(map, "nonce"),
@@ -268,4 +341,25 @@ export function decodeDocumentProposal(input) {
         signature: bytes(map, "signature"),
     };
 }
+/**
+ * The genesis PROPOSAL as the fold's anchor (SYNC-P1). Lived in the join-offer module until D5
+ * deleted it; the conversion belongs to the proposal itself — every derivation starts here.
+ */
+export function arrangementGenesisFromProposal(genesis) {
+    return {
+        documentId: documentIdFromProposal(genesis),
+        proposerAgentId: genesis.proposer_agent_id,
+        peerAgentId: genesis.peer_agent_id,
+        adminSet: genesis.properties.admin_set ?? [genesis.proposer_agent_id, genesis.peer_agent_id],
+        properties: {
+            assurance_tier: genesis.properties.assurance_tier,
+            schema_enforcement: genesis.properties.schema_enforcement,
+            topology: genesis.properties.topology,
+            append_only: genesis.properties.append_only,
+            ...(genesis.properties.content_profile !== undefined
+                ? { content_profile: genesis.properties.content_profile }
+                : {}),
+        },
+    };
+}
 //# sourceMappingURL=document-proposal.js.map

package/dist/document-proposal.js.map

@@ -1 +1 @@
-{"version":3,"file":"document-proposal.js","sourceRoot":"","sources":["../src/document-proposal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnD,kGAAkG;AAClG,MAAM,CAAC,MAAM,wBAAwB,GAAG,4BAA4B,CAAC;AAErE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C,2FAA2F;AAC3F,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAC;AACjD,sEAAsE;AACtE,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC;AAwD3C;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAA6B,EAC7B,OAA8B,EAAE;IAEhC,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC1B,wBAAwB;QACxB,GAAG,CAAC,eAAe;QACnB,GAAG,CAAC,iBAAiB;QACrB,GAAG,CAAC,aAAa;QACjB,GAAG,CAAC,aAAa;QACjB,GAAG,CAAC,UAAU,CAAC,cAAc;QAC7B,GAAG,CAAC,UAAU,CAAC,kBAAkB;QACjC,GAAG,CAAC,UAAU,CAAC,QAAQ;QACvB,GAAG,CAAC,UAAU,CAAC,WAAW;QAC1B,yFAAyF;QACzF,6FAA6F;QAC7F,mEAAmE;QACnE,EAAE;QACF,4FAA4F;QAC5F,8FAA8F;QAC9F,2FAA2F;QAC3F,6FAA6F;QAC7F,kEAAkE;QAClE,EAAE;QACF,6FAA6F;QAC7F,oDAAoD;QACpD,GAAG,CAAC,UAAU,CAAC,eAAe,IAAI,IAAI;QACtC,GAAG,CAAC,gBAAgB;QACpB,GAAG,CAAC,KAAK;QACT,oFAAoF;QACpF,4FAA4F;QAC5F,2FAA2F;QAC3F,+FAA+F;QAC/F,6EAA6E;QAC7E,EAAE;QACF,0FAA0F;QAC1F,4FAA4F;QAC5F,8CAA8C;QAC9C,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,IAAI,GAAG,CAAC,cAAc,GAAG,UAAU;YACvE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;YAC5B,CAAC,CAAC,GAAG,CAAC,cAAc;KACvB,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5C,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAA6B;IAClE,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,wBAAwB,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;SACzD,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,IAAI,KAAK,CAAC,cAAc,KAAK,iBAAiB,EAAE,CAAC;QAC/C,OAAO,CACL,wDAAwD,iBAAiB,kBAAkB;YAC3F,sBAAsB,KAAK,CAAC,cAAc,sDAAsD,CACjG,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;QACvC,OAAO,CACL,2FAA2F;YAC3F,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,iGAAiG;IACjG,8FAA8F;IAC9F,gGAAgG;IAChG,4FAA4F;IAC5F,EAAE;IACF,gGAAgG;IAChG,4FAA4F;IAC5F,gGAAgG;IAChG,4FAA4F;IAC5F,0BAA0B;IAC1B,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;QACrF,OAAO,CACL,yFAAyF;YACzF,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,CACL,kDAAkD,WAAW,gCAAgC;YAC7F,QAAQ,KAAK,CAAC,QAAQ,8CAA8C,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAAC,kBAAiC;IAC9E,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,CACL,6FAA6F;YAC7F,mCAAmC,CACpC,CAAC;IACJ,CAAC;IACD,IAAI,kBAAkB,GAAG,wBAAwB,EAAE,CAAC;QAClD,OAAO,CACL,sDAAsD,kBAAkB,gBAAgB;YACxF,UAAU,wBAAwB,iDAAiD,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,kBAAkB,GAAG,wBAAwB,EAAE,CAAC;QAClD,OAAO,CACL,sDAAsD,kBAAkB,gBAAgB;YACxF,UAAU,wBAAwB,wBAAwB,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAA6B;IAClE,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,UAAU,EAAE;YACV,cAAc,EAAE,GAAG,CAAC,UAAU,CAAC,cAAc;YAC7C,kBAAkB,EAAE,GAAG,CAAC,UAAU,CAAC,kBAAkB;YACrD,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,QAAQ;YACjC,WAAW,EAAE,GAAG,CAAC,UAAU,CAAC,WAAW;SACxC;QACD,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,GAA4B,EAAE,KAAa;IAC1D,iGAAiG;IACjG,4EAA4E;IAC5E,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,mCAAmC,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,GAAG,CAAC,GAA4B,EAAE,KAAa;IACtD,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,kCAAkC,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,KAAK,CAAC,GAA4B,EAAE,KAAa;IACxD,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,6BAA6B,CAAC,CAAC;IACvF,CAAC;IACD,+FAA+F;IAC/F,0FAA0F;IAC1F,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAiB;IACtD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAAG,OAAkC,CAAC;IAE/C,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,2DAA2D,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACvD,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,KAAK,CACb,sEAAsE,MAAM,CAAC,cAAc,CAAC,EAAE,CAC/F,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC5C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,CAAC,GAAG,QAAmC,CAAC;IAC9C,MAAM,iBAAiB,GAAG,OAAO,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC3D,IAAI,OAAO,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAC7C,IAAI,OAAO,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACzD,IAAI,eAAe,KAAK,IAAI,IAAI,CAAC,CAAC,eAAe,YAAY,UAAU,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAClD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IAED,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,eAAe,EAAE,cAAc;QAC/B,iBAAiB,EAAE,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC;QAChD,aAAa,EAAE,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC;QACxC,aAAa,EAAE,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC;QACxC,UAAU,EAAE;YACV,cAAc,EAAE,GAAG,CAAC,CAAC,EAAE,gBAAgB,CAAC;YACxC,kBAAkB,EAAE,iBAAiB;YACrC,QAAQ,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC;YAC5B,WAAW,EAAE,UAAU;SACxB;QACD,gBAAgB,EAAE,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC;QACnF,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC;QAC1B,cAAc,EAAE,UAAU;QAC1B,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC;KACnC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"document-proposal.js","sourceRoot":"","sources":["../src/document-proposal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAGnD,kGAAkG;AAClG,MAAM,CAAC,MAAM,wBAAwB,GAAG,4BAA4B,CAAC;AAErE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C,2FAA2F;AAC3F,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAC;AACjD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACvC,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;AAiE5F;;;;;;;;GAQG;AACH,mGAAmG;AACnG,SAAS,iBAAiB,CAAC,QAA2B;IACpD,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,8FAA8F;QAC9F,2FAA2F;QAC3F,2FAA2F;QAC3F,oDAAoD;QACpD,IAAI,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CACb,iFAAiF;gBAC/E,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAC5B,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,GAA6B,EAC7B,OAA8B,EAAE;IAEhC,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC1B,wBAAwB;QACxB,GAAG,CAAC,eAAe;QACnB,GAAG,CAAC,iBAAiB;QACrB,GAAG,CAAC,aAAa;QACjB,GAAG,CAAC,aAAa;QACjB,GAAG,CAAC,UAAU,CAAC,cAAc;QAC7B,GAAG,CAAC,UAAU,CAAC,kBAAkB;QACjC,GAAG,CAAC,UAAU,CAAC,QAAQ;QACvB,GAAG,CAAC,UAAU,CAAC,WAAW;QAC1B,yFAAyF;QACzF,6FAA6F;QAC7F,mEAAmE;QACnE,EAAE;QACF,4FAA4F;QAC5F,8FAA8F;QAC9F,2FAA2F;QAC3F,6FAA6F;QAC7F,kEAAkE;QAClE,EAAE;QACF,6FAA6F;QAC7F,oDAAoD;QACpD,GAAG,CAAC,UAAU,CAAC,eAAe,IAAI,IAAI;QACtC,yFAAyF;QACzF,qFAAqF;QACrF,0FAA0F;QAC1F,uEAAuE;QACvE,GAAG,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACrG,GAAG,CAAC,gBAAgB;QACpB,GAAG,CAAC,KAAK;QACT,oFAAoF;QACpF,4FAA4F;QAC5F,2FAA2F;QAC3F,+FAA+F;QAC/F,6EAA6E;QAC7E,EAAE;QACF,0FAA0F;QAC1F,4FAA4F;QAC5F,8CAA8C;QAC9C,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,IAAI,GAAG,CAAC,cAAc,GAAG,UAAU;YACvE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;YAC5B,CAAC,CAAC,GAAG,CAAC,cAAc;KACvB,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5C,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAA6B;IAClE,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,wBAAwB,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;SACzD,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,IAAI,KAAK,CAAC,cAAc,KAAK,iBAAiB,EAAE,CAAC;QAC/C,OAAO,CACL,wDAAwD,iBAAiB,kBAAkB;YAC3F,sBAAsB,KAAK,CAAC,cAAc,sDAAsD,CACjG,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;QACvC,OAAO,CACL,2FAA2F;YAC3F,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,iGAAiG;IACjG,8FAA8F;IAC9F,gGAAgG;IAChG,4FAA4F;IAC5F,EAAE;IACF,gGAAgG;IAChG,4FAA4F;IAC5F,gGAAgG;IAChG,4FAA4F;IAC5F,0BAA0B;IAC1B,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;QACrF,OAAO,CACL,yFAAyF;YACzF,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,OAAO,CACL,wFAAwF;gBACxF,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,OAAO,CACL,iDAAiD,CAAC,GAAG,oBAAoB,CAAC;aACvE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;aACpB,IAAI,CAAC,OAAO,CAAC,gCAAgC,KAAK,CAAC,QAAQ,GAAG,CAClE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAAC,kBAAiC;IAC9E,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,CACL,6FAA6F;YAC7F,mCAAmC,CACpC,CAAC;IACJ,CAAC;IACD,IAAI,kBAAkB,GAAG,wBAAwB,EAAE,CAAC;QAClD,OAAO,CACL,sDAAsD,kBAAkB,gBAAgB;YACxF,UAAU,wBAAwB,iDAAiD,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,kBAAkB,GAAG,wBAAwB,EAAE,CAAC;QAClD,OAAO,CACL,sDAAsD,kBAAkB,gBAAgB;YACxF,UAAU,wBAAwB,wBAAwB,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAA6B;IAClE,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,UAAU,EAAE;YACV,cAAc,EAAE,GAAG,CAAC,UAAU,CAAC,cAAc;YAC7C,kBAAkB,EAAE,GAAG,CAAC,UAAU,CAAC,kBAAkB;YACrD,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,QAAQ;YACjC,WAAW,EAAE,GAAG,CAAC,UAAU,CAAC,WAAW;YACvC,wFAAwF;YACxF,2FAA2F;YAC3F,0FAA0F;YAC1F,iBAAiB;YACjB,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,eAAe,KAAK,SAAS;gBAC9C,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,UAAU,CAAC,eAAe,EAAE;gBACrD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE,SAAS,EAAE,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE;gBAC5D,CAAC,CAAC,EAAE,CAAC;SACR;QACD,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,GAA4B,EAAE,KAAa;IAC1D,iGAAiG;IACjG,4EAA4E;IAC5E,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,mCAAmC,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,GAAG,CAAC,GAA4B,EAAE,KAAa;IACtD,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,kCAAkC,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,KAAK,CAAC,GAA4B,EAAE,KAAa;IACxD,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,6BAA6B,CAAC,CAAC;IACvF,CAAC;IACD,+FAA+F;IAC/F,0FAA0F;IAC1F,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAiB;IACtD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAAG,OAAkC,CAAC;IAE/C,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,2DAA2D,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACvD,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,KAAK,CACb,sEAAsE,MAAM,CAAC,cAAc,CAAC,EAAE,CAC/F,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC5C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,CAAC,GAAG,QAAmC,CAAC;IAC9C,MAAM,iBAAiB,GAAG,OAAO,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC3D,IAAI,OAAO,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAC7C,IAAI,OAAO,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,gGAAgG;IAChG,+FAA+F;IAC/F,iGAAiG;IACjG,gGAAgG;IAChG,8FAA8F;IAC9F,iGAAiG;IACjG,MAAM,QAAQ,GAAG,WAAW,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YACrG,MAAM,IAAI,KAAK,CACb,sGAAsG,CACvG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAG,iBAAiB,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,IAAI,cAAc,KAAK,SAAS,IAAI,CAAC,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACxG,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACzD,IAAI,eAAe,KAAK,IAAI,IAAI,CAAC,CAAC,eAAe,YAAY,UAAU,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAClD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IAED,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,eAAe,EAAE,cAAc;QAC/B,iBAAiB,EAAE,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC;QAChD,aAAa,EAAE,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC;QACxC,aAAa,EAAE,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC;QACxC,UAAU,EAAE;YACV,cAAc,EAAE,GAAG,CAAC,CAAC,EAAE,gBAAgB,CAAC;YACxC,kBAAkB,EAAE,iBAAiB;YACrC,QAAQ,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC;YAC5B,WAAW,EAAE,UAAU;YACvB,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,iBAAiB,CAAC,QAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1F;QACD,gBAAgB,EAAE,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC;QACnF,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC;QAC1B,cAAc,EAAE,UAAU;QAC1B,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC;KACnC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAiC;IAEjC,OAAO;QACL,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC;QAC3C,eAAe,EAAE,OAAO,CAAC,iBAAiB;QAC1C,WAAW,EAAE,OAAO,CAAC,aAAa;QAClC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,aAAa,CAAC;QAC5F,UAAU,EAAE;YACV,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC,cAAc;YACjD,kBAAkB,EAAE,OAAO,CAAC,UAAU,CAAC,kBAAkB;YACzD,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,QAAQ;YACrC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,WAAW;YAC3C,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,eAAe,KAAK,SAAS;gBAClD,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,UAAU,CAAC,eAAe,EAAE;gBACzD,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC;AACJ,CAAC"}

package/dist/document-reconcile.d.ts

@@ -0,0 +1,100 @@
+/**
+ * SYNC-P3 (R10–R16) — the reconcile frame: ONE wire shape for all three exchange steps.
+ *
+ * | Step | Direction | Carries |
+ * |------|-----------|---------|
+ * | 1    | A → B     | per document: A's positions + A's refusal set (payload arrays empty) |
+ * | 2    | B → A     | entries/envelopes A lacks, plus B's positions + refusal set |
+ * | 3    | A → B     | entries/envelopes B lacks — sent only if B is behind |
+ *
+ * One shape means a lost reply degrades to a fresh exchange; there is no half-open protocol
+ * state to wedge, and reconciling stays idempotent by construction (R15).
+ *
+ * POSITION IS THE R7 PRIMITIVE, both halves:
+ * - governance: per author, the highest CONTIGUOUS entry seq held, with the head hash(es) at
+ *   that seq — plural heads make a forked (equivocating) author visible on the wire instead of
+ *   silently divergent (the Entry 48 §3 finding).
+ * - content: per author, the length of that author's own envelope chain held, with its head —
+ *   the store's chain-linkage invariant already guarantees every sender's links form one
+ *   unbroken chain, so the primitive is the same shape. Refused envelopes occupy chain
+ *   positions (they are bridged as payload-less stubs); the refusal set is what stops their
+ *   payloads from being re-offered (R36).
+ *
+ * NOT SIGNED, deliberately: the frame rides an authenticated session, and a position is
+ * advisory by design (R44 — no correctness decision reads it; a peer lying about its position
+ * earns wasted bytes, spec §5). What is load-bearing — every entry and envelope carried — is
+ * individually signed by its author, and the receiver verifies each itself (R2: forwarding
+ * confers no trust).
+ */
+/** R11: a version mismatch is refused BY NAME at both ends, with both versions in the sentence. */
+export declare const DOCUMENT_RECONCILE_EXCHANGE_VERSION = 1;
+/** R16 batching ceiling — one frame cannot be made unbounded by naming every document at once. */
+export declare const MAX_RECONCILE_DOCUMENTS = 32;
+export interface GovernancePosition {
+    author: string;
+    /** Highest contiguous entry seq held from this author (R13: contiguous, never highest-received). */
+    seq: number;
+    /** Entry hash(es) at that seq. More than one = a fork, visible by design. */
+    head_hashes: string[];
+}
+export interface ContentPosition {
+    author: string;
+    /** How many of this author's own-chain envelopes are held (refused stubs included). */
+    count: number;
+    /** The envelope hash at the head of this author's chain as held. */
+    head_hash: string;
+}
+export interface DocumentReconcileBlock {
+    document_id: string;
+    governance: GovernancePosition[];
+    content: ContentPosition[];
+    /** Hashes this holder has refused (entries or envelopes) — never re-offer these (R36). */
+    refused: string[];
+    /** Governance entry wires the peer lacks. Empty on step 1. */
+    entries: Uint8Array[];
+    /** Content envelope wires the peer lacks. Empty on step 1. */
+    envelopes: Uint8Array[];
+    /**
+     * SYNC-R35: this holder's OWN signed refusal records (document_rejection wires) for this
+     * document — the refusal travels by the ordinary exchange like anything else, so a third
+     * holder wedged behind a refused hash can learn its name and reason from any reply, not only
+     * from the refuser's one-shot frame. Few by construction (each is a retry round); attached
+     * whole and deduplicated by the receiver.
+     */
+    refusals?: Uint8Array[];
+    /**
+     * The signed genesis proposal, included when the peer's position shows them holding NOTHING —
+     * a joiner is simply very far behind (spec §4), and the anchor everything derives from is the
+     * one record that is not an entry. Harmless when they already hold it: the bootstrap is
+     * idempotent, like everything else in the exchange.
+     */
+    genesis?: Uint8Array;
+    /**
+     * A PER-DOCUMENT refusal (P3 review F4): in a batched frame, one document's stranger or
+     * removed ruling must not be silenced by another document's ordinary reply — refused-by-name
+     * is per document, so the refusal rides the block. May coexist with entries: a removed
+     * holder's block carries their own removal's closure AND the terminal ruling (R32 + R17).
+     */
+    refusal?: {
+        reason: string;
+        terminal: boolean;
+    };
+}
+export interface DocumentReconcileFrame {
+    type: "document_reconcile";
+    exchange_version: number;
+    documents: DocumentReconcileBlock[];
+    /**
+     * R11: a refusal rides the SAME frame — a version mismatch (or an entitlement refusal) is
+     * answered by name with a sentence, never by silence, and inventing a second frame kind for
+     * "no" would be the second carrier this design exists to avoid. A refusal reply carries no
+     * documents.
+     */
+    refusal?: {
+        reason: string;
+        terminal: boolean;
+    };
+}
+export declare function encodeDocumentReconcile(frame: DocumentReconcileFrame): Uint8Array;
+export declare function decodeDocumentReconcile(input: Uint8Array): DocumentReconcileFrame;
+//# sourceMappingURL=document-reconcile.d.ts.map

package/dist/document-reconcile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-reconcile.d.ts","sourceRoot":"","sources":["../src/document-reconcile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAIH,mGAAmG;AACnG,eAAO,MAAM,mCAAmC,IAAI,CAAC;AAErD,kGAAkG;AAClG,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAE1C,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,oGAAoG;IACpG,GAAG,EAAE,MAAM,CAAC;IACZ,6EAA6E;IAC7E,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,KAAK,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,0FAA0F;IAC1F,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,8DAA8D;IAC9D,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,8DAA8D;IAC9D,SAAS,EAAE,UAAU,EAAE,CAAC;IACxB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;IACxB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB;;;;;OAKG;IACH,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;CACjD;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,sBAAsB,EAAE,CAAC;IACpC;;;;;OAKG;IACH,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;CACjD;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,sBAAsB,GAAG,UAAU,CA6BjF;AA6DD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,UAAU,GAAG,sBAAsB,CAsFjF"}