@jungjaehoon/mama-os 0.75.0 → 0.77.0

package/dist/api/member-notice-actions.d.ts

@@ -0,0 +1,18 @@
+import { type ActionRegistration, type DatabaseInstance, type JudgmentAccess } from '@jungjaehoon/mama-core';
+import type { Mailbox } from '@jungjaehoon/mama-core/runtime/mailbox';
+import type { NoticeRef } from '../runtime/personal-notices.js';
+import type { TimeZoneSetting } from '../runtime/timezone.js';
+export interface MemberNoticePorts {
+    mailbox(): Mailbox;
+    /** Wakes host/native delivery without waiting for any member lane in the caller. */
+    wake(principalId: string): void;
+}
+export declare function memberNoticeRegistrations(ports: {
+    adapter: DatabaseInstance;
+    ownerPrincipalId: string;
+    ownerAccess(): JudgmentAccess;
+    timeZone: TimeZoneSetting;
+    notices?: MemberNoticePorts;
+    read(ref: NoticeRef, access: JudgmentAccess): Promise<boolean>;
+}): ActionRegistration[];
+//# sourceMappingURL=member-notice-actions.d.ts.map

package/dist/api/member-notice-actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-notice-actions.d.ts","sourceRoot":"","sources":["../../src/api/member-notice-actions.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wCAAwC,CAAC;AACtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAIhE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,WAAW,iBAAiB;IAChC,OAAO,IAAI,OAAO,CAAC;IACnB,oFAAoF;IACpF,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AACD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,OAAO,EAAE,gBAAgB,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,IAAI,cAAc,CAAC;IAC9B,QAAQ,EAAE,eAAe,CAAC;IAC1B,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAChE,GAAG,kBAAkB,EAAE,CA+LvB"}

package/dist/api/member-notice-actions.js

@@ -0,0 +1,184 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.memberNoticeRegistrations = memberNoticeRegistrations;
+const node_crypto_1 = require("node:crypto");
+const mama_core_1 = require("@jungjaehoon/mama-core");
+const principal_access_js_1 = require("../runtime/principal-access.js");
+const stimulus_delivery_js_1 = require("../runtime/stimulus-delivery.js");
+const turn_orders_js_1 = require("../runtime/turn-orders.js");
+function memberNoticeRegistrations(ports) {
+    const common = (context) => {
+        if (context.access.principalId !== ports.ownerPrincipalId)
+            throw Object.assign(new Error('Only the common session may use this action'), {
+                name: 'denied',
+            });
+    };
+    return [
+        {
+            contract: {
+                name: 'member.directory',
+                summary: 'Read the member directory in any common turn: principal ids, display names, statuses, roles and granted partitions. No transport identities, enrollment receipts or personal records.',
+                inputSchema: { type: 'object', additionalProperties: false, properties: {} },
+            },
+            exec: (_input, context) => {
+                common(context);
+                const repo = (0, mama_core_1.createPrincipalRepository)(ports.adapter);
+                return {
+                    members: repo.listMembers().map(({ principalId, displayName, status }) => ({
+                        principalId,
+                        ...(displayName === undefined ? {} : { displayName }),
+                        status,
+                        roles: repo.listRoles(principalId).map(({ role }) => role),
+                        grants: repo
+                            .listRetainedGrants(principalId)
+                            .flatMap(({ scope }) => (scope.kind === 'memory' ? [scope] : [])),
+                    })),
+                };
+            },
+        },
+        {
+            contract: {
+                name: 'member.notice',
+                summary: 'Queue one personal notice candidate when a common fact concerns a member: assigned to them, mentions them, or in a partition they hold. Use member.directory and cite source observation refs and the work record ids you wrote. The recipient reads only refs under its own current access and privately decides whether to tell it. No reason, summary or preview; replay never queues notices. Repeated calls for the same recipient and source turn are already queued.',
+                inputSchema: {
+                    type: 'object',
+                    additionalProperties: false,
+                    required: ['principalId', 'refs'],
+                    properties: {
+                        principalId: { type: 'string', pattern: '\\S' },
+                        refs: {
+                            type: 'array',
+                            minItems: 1,
+                            maxItems: 500,
+                            items: {
+                                oneOf: [
+                                    {
+                                        type: 'object',
+                                        additionalProperties: false,
+                                        required: ['observationRef'],
+                                        properties: {
+                                            observationRef: { type: 'string', pattern: '\\S' },
+                                            source: { type: 'string', pattern: '\\S' },
+                                        },
+                                    },
+                                    {
+                                        type: 'object',
+                                        additionalProperties: false,
+                                        required: ['memory_id'],
+                                        properties: { memory_id: { type: 'string', pattern: '\\S' } },
+                                    },
+                                ],
+                            },
+                        },
+                    },
+                },
+            },
+            exec: async (input, context) => {
+                common(context);
+                const refused = (reason) => ({ queued: false, reason });
+                if (context.session?.replaySourceEndMs !== undefined)
+                    return refused('replay');
+                if (!ports.notices)
+                    return refused('notices_unavailable');
+                const ref = context.session?.sourceMessageRef;
+                if (!ref)
+                    return refused('source_stimulus_required');
+                const mailbox = ports.notices.mailbox();
+                const row = mailbox.readInput(ref, ports.ownerPrincipalId);
+                if (!row)
+                    return refused('source_stimulus_required');
+                const record = (0, stimulus_delivery_js_1.isRecordOrderRow)(row) ? (0, turn_orders_js_1.parseRecordOrder)(row.payload) : null;
+                const sources = record
+                    ? [
+                        row,
+                        ...(0, turn_orders_js_1.recordOrderBatches)(record).map((batch) => mailbox.readInput(batch.deltaStimulusId, ports.ownerPrincipalId)),
+                    ]
+                    : [row];
+                if (sources.some((source) => source?.payload &&
+                    typeof source.payload === 'object' &&
+                    !Array.isArray(source.payload) &&
+                    source.payload.replay !== undefined))
+                    return refused('replay');
+                const { principalId, refs } = input;
+                const source = record?.deltaStimulusId ?? ref;
+                const noticeId = (sourceId) => `notice:${principalId}:${(0, node_crypto_1.createHash)('sha256').update(sourceId).digest('hex')}`;
+                const id = noticeId(source);
+                const alreadyQueued = (sourceId = source) => {
+                    const key = noticeId(sourceId);
+                    return (mailbox.readInput(key, principalId) ||
+                        ports.adapter.prepare('SELECT 1 FROM mailbox_seen WHERE ref_id=?').get(key) ||
+                        ports.adapter
+                            .prepare('SELECT 1 FROM command_bindings WHERE command_id=? AND principal_id=?')
+                            .get(`notice-close:${key}`, principalId));
+                };
+                // Check before reading refs: core rejects a duplicate identity with changed payload.
+                if (alreadyQueued())
+                    return refused('already_queued');
+                const repo = (0, mama_core_1.createPrincipalRepository)(ports.adapter);
+                const person = repo.findById(principalId);
+                if (person?.kind !== 'member' || person.status !== 'active')
+                    return refused('recipient_not_active_member');
+                const notifiedObservations = new Set((record?.carried ?? [])
+                    .filter((batch) => alreadyQueued(batch.deltaStimulusId))
+                    .flatMap((batch) => batch.observationRefs));
+                const filtered = refs.filter((evidence) => !('observationRef' in evidence) ||
+                    record?.observationRefs.includes(evidence.observationRef) ||
+                    !notifiedObservations.has(evidence.observationRef));
+                // Work record ids accompany the observations they came from: when every cited
+                // observation was already noticed, the records were too.
+                const observed = (list) => list.some((evidence) => 'observationRef' in evidence);
+                const freshRefs = observed(refs) && !observed(filtered) ? [] : filtered;
+                if (freshRefs.length === 0)
+                    return refused('already_queued');
+                const access = (0, principal_access_js_1.resolvePrincipalAccess)(principalId, {
+                    adapter: ports.adapter,
+                    ownerAccess: ports.ownerAccess(),
+                    agentId: `member-agent:${principalId}`,
+                });
+                const readable = [];
+                for (const evidence of freshRefs)
+                    if ((await ports.read(evidence, context.access)) && (await ports.read(evidence, access)))
+                        readable.push(evidence);
+                if (readable.length === 0)
+                    return refused('no_readable_refs');
+                if (repo.findById(principalId)?.status !== 'active')
+                    return refused('recipient_not_active_member');
+                if (alreadyQueued())
+                    return refused('already_queued');
+                const carried = (record?.carried ?? []).filter((batch) => readable.some((evidence) => 'observationRef' in evidence &&
+                    batch.observationRefs.includes(evidence.observationRef)));
+                const accepted = ports.adapter.transaction(() => {
+                    const accepted = mailbox.enqueue({
+                        id,
+                        kind: 'scheduled',
+                        principalId,
+                        channelKey: 'notice',
+                        occurredAt: Date.now(),
+                        payload: {
+                            refs: readable,
+                            timeZone: ports.timeZone.get(),
+                            lifecycleVersion: repo.lifecycleVersion(principalId),
+                        },
+                    });
+                    if (accepted === null)
+                        return null;
+                    // Commit carried-batch markers with the notice without spending its 500-ref budget.
+                    // Their input binding also keeps P9 erasure and uncertain-input retention intact.
+                    const seen = ports.adapter.prepare('INSERT OR IGNORE INTO mailbox_seen (ref_id, seen_at, principal_id) VALUES (?, ?, ?)');
+                    const bind = ports.adapter.prepare('INSERT OR IGNORE INTO mailbox_input_refs (input_id, ref_id, observation_ref) VALUES (?, ?, NULL)');
+                    for (const batch of carried) {
+                        const key = noticeId(batch.deltaStimulusId);
+                        seen.run(key, Date.now(), principalId);
+                        bind.run(accepted, key);
+                    }
+                    return accepted;
+                });
+                if (accepted === null)
+                    return refused('already_queued');
+                ports.notices.wake(principalId);
+                return { queued: true };
+            },
+        },
+    ];
+}
+//# sourceMappingURL=member-notice-actions.js.map

package/dist/api/member-notice-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-notice-actions.js","sourceRoot":"","sources":["../../src/api/member-notice-actions.ts"],"names":[],"mappings":";;AAoBA,8DAsMC;AA1ND,6CAAyC;AACzC,sDAMgC;AAGhC,wEAAwE;AACxE,0EAAmE;AACnE,8DAAiF;AAQjF,SAAgB,yBAAyB,CAAC,KAOzC;IACC,MAAM,MAAM,GAAG,CAAC,OAAsB,EAAE,EAAE;QACxC,IAAI,OAAO,CAAC,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,gBAAgB;YACvD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,EAAE;gBAC5E,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;IACP,CAAC,CAAC;IACF,OAAO;QACL;YACE,QAAQ,EAAE;gBACR,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EACL,uLAAuL;gBACzL,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE;aAC7E;YACD,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;gBACxB,MAAM,CAAC,OAAO,CAAC,CAAC;gBAChB,MAAM,IAAI,GAAG,IAAA,qCAAyB,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACtD,OAAO;oBACL,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;wBACzE,WAAW;wBACX,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;wBACrD,MAAM;wBACN,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;wBAC1D,MAAM,EAAE,IAAI;6BACT,kBAAkB,CAAC,WAAW,CAAC;6BAC/B,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;qBACpE,CAAC,CAAC;iBACJ,CAAC;YACJ,CAAC;SACF;QACD;YACE,QAAQ,EAAE;gBACR,IAAI,EAAE,eAAe;gBACrB,OAAO,EACL,6cAA6c;gBAC/c,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,oBAAoB,EAAE,KAAK;oBAC3B,QAAQ,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC;oBACjC,UAAU,EAAE;wBACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE;wBAC/C,IAAI,EAAE;4BACJ,IAAI,EAAE,OAAO;4BACb,QAAQ,EAAE,CAAC;4BACX,QAAQ,EAAE,GAAG;4BACb,KAAK,EAAE;gCACL,KAAK,EAAE;oCACL;wCACE,IAAI,EAAE,QAAQ;wCACd,oBAAoB,EAAE,KAAK;wCAC3B,QAAQ,EAAE,CAAC,gBAAgB,CAAC;wCAC5B,UAAU,EAAE;4CACV,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE;4CAClD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE;yCAC3C;qCACF;oCACD;wCACE,IAAI,EAAE,QAAQ;wCACd,oBAAoB,EAAE,KAAK;wCAC3B,QAAQ,EAAE,CAAC,WAAW,CAAC;wCACvB,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;qCAC9D;iCACF;6BACF;yBACF;qBACF;iBACF;aACF;YACD,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBAC7B,MAAM,CAAC,OAAO,CAAC,CAAC;gBAChB,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;gBAChE,IAAI,OAAO,CAAC,OAAO,EAAE,iBAAiB,KAAK,SAAS;oBAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC/E,IAAI,CAAC,KAAK,CAAC,OAAO;oBAAE,OAAO,OAAO,CAAC,qBAAqB,CAAC,CAAC;gBAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC;gBAC9C,IAAI,CAAC,GAAG;oBAAE,OAAO,OAAO,CAAC,0BAA0B,CAAC,CAAC;gBACrD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBAC3D,IAAI,CAAC,GAAG;oBAAE,OAAO,OAAO,CAAC,0BAA0B,CAAC,CAAC;gBACrD,MAAM,MAAM,GAAG,IAAA,uCAAgB,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,iCAAgB,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC5E,MAAM,OAAO,GAAG,MAAM;oBACpB,CAAC,CAAC;wBACE,GAAG;wBACH,GAAG,IAAA,mCAAkB,EAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,gBAAgB,CAAC,CACjE;qBACF;oBACH,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACV,IACE,OAAO,CAAC,IAAI,CACV,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,EAAE,OAAO;oBACf,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;oBAClC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;oBAC9B,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CACtC;oBAED,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC3B,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,KAAmD,CAAC;gBAClF,MAAM,MAAM,GAAG,MAAM,EAAE,eAAe,IAAI,GAAG,CAAC;gBAC9C,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAE,EAAE,CACpC,UAAU,WAAW,IAAI,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjF,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC5B,MAAM,aAAa,GAAG,CAAC,QAAQ,GAAG,MAAM,EAAE,EAAE;oBAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBAC/B,OAAO,CACL,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC;wBACnC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;wBAC3E,KAAK,CAAC,OAAO;6BACV,OAAO,CAAC,sEAAsE,CAAC;6BAC/E,GAAG,CAAC,gBAAgB,GAAG,EAAE,EAAE,WAAW,CAAC,CAC3C,CAAC;gBACJ,CAAC,CAAC;gBACF,qFAAqF;gBACrF,IAAI,aAAa,EAAE;oBAAE,OAAO,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBACtD,MAAM,IAAI,GAAG,IAAA,qCAAyB,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACtD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAC1C,IAAI,MAAM,EAAE,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;oBACzD,OAAO,OAAO,CAAC,6BAA6B,CAAC,CAAC;gBAChD,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAClC,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;qBACpB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;qBACvD,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAC7C,CAAC;gBACF,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAC1B,CAAC,QAAQ,EAAE,EAAE,CACX,CAAC,CAAC,gBAAgB,IAAI,QAAQ,CAAC;oBAC/B,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;oBACzD,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CACrD,CAAC;gBACF,8EAA8E;gBAC9E,yDAAyD;gBACzD,MAAM,QAAQ,GAAG,CAAC,IAAiB,EAAE,EAAE,CACrC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,gBAAgB,IAAI,QAAQ,CAAC,CAAC;gBACxD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACxE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBAC7D,MAAM,MAAM,GAAG,IAAA,4CAAsB,EAAC,WAAW,EAAE;oBACjD,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;oBAChC,OAAO,EAAE,gBAAgB,WAAW,EAAE;iBACvC,CAAC,CAAC;gBACH,MAAM,QAAQ,GAAgB,EAAE,CAAC;gBACjC,KAAK,MAAM,QAAQ,IAAI,SAAS;oBAC9B,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;wBACtF,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC5B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,OAAO,CAAC,kBAAkB,CAAC,CAAC;gBAC9D,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,KAAK,QAAQ;oBACjD,OAAO,OAAO,CAAC,6BAA6B,CAAC,CAAC;gBAChD,IAAI,aAAa,EAAE;oBAAE,OAAO,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBACtD,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CACvD,QAAQ,CAAC,IAAI,CACX,CAAC,QAAQ,EAAE,EAAE,CACX,gBAAgB,IAAI,QAAQ;oBAC5B,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAC1D,CACF,CAAC;gBACF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE;oBAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;wBAC/B,EAAE;wBACF,IAAI,EAAE,WAAW;wBACjB,WAAW;wBACX,UAAU,EAAE,QAAQ;wBACpB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;wBACtB,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE;4BAC9B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC;yBACrD;qBACF,CAAC,CAAC;oBACH,IAAI,QAAQ,KAAK,IAAI;wBAAE,OAAO,IAAI,CAAC;oBACnC,oFAAoF;oBACpF,kFAAkF;oBAClF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAChC,qFAAqF,CACtF,CAAC;oBACF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAChC,kGAAkG,CACnG,CAAC;oBACF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;wBAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;wBAC5C,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;wBACvC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;oBAC1B,CAAC;oBACD,OAAO,QAAQ,CAAC;gBAClB,CAAC,CAAC,CAAC;gBACH,IAAI,QAAQ,KAAK,IAAI;oBAAE,OAAO,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBACxD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAChC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC1B,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/api/member-records.d.ts

@@ -2,11 +2,14 @@ import { type ActionRegistration, type JudgmentAccess } from '@jungjaehoon/mama-
 import type { DatabaseInstance } from '@jungjaehoon/mama-core/db-manager';
 import type { Mailbox, MailboxRow } from '@jungjaehoon/mama-core/runtime/mailbox';
 import type { RawStore } from '../storage/source-archive.js';
-import type { OwnerMessageLedger } from '../gateways/telegram-message-ledger.js';
+import { type OwnerMessageLedger } from '../gateways/telegram-message-ledger.js';
+import type { OwnerHostExchangeInput } from '../gateways/turn-contract.js';
 import type { createSerialTurnChain } from '../runtime/principal-sessions.js';
 import type { TelegramFileSender } from './file-delivery.js';
 export interface MemberRecordsTelegram extends TelegramFileSender {
     sendMemberText(access: JudgmentAccess, text: string, operationId: string): Promise<boolean>;
+    memberTextDelivered(access: JudgmentAccess, operationId: string): boolean;
+    retireMemberJobText(operationId: string): void;
 }
 export interface MemberRecordsPorts {
     root: string;
@@ -15,12 +18,15 @@ export interface MemberRecordsPorts {
     ledger(): OwnerMessageLedger | undefined;
     telegram(): MemberRecordsTelegram | undefined;
     access(id: string): JudgmentAccess;
-    turnChain: ReturnType<typeof createSerialTurnChain>;
+    turnChain(id: string): ReturnType<typeof createSerialTurnChain>;
     retire(id: string): Promise<void>;
     serve(id: string): void;
     isStopping(): boolean;
+    isReady(): boolean;
     resumeQueued(): void;
     recordExchange(id: string, kind: 'export' | 'erase', ref: string, text: string, deliveryVerified: boolean): void;
+    /** Write a member's personal copy of a host exchange (a management or enrollment receipt). */
+    writeHostExchange(id: string, exchange: OwnerHostExchangeInput): void;
 }
 export declare function createMemberRecords(options: {
     adapter: DatabaseInstance;
@@ -29,6 +35,15 @@ export declare function createMemberRecords(options: {
 }): {
     registrations: ActionRegistration[];
     isBusy: () => boolean;
+    excludePrincipals: () => string[];
+    /**
+     * Keep a personal write for after this member's erasure once its export snapshot is taken;
+     * false means the caller writes it now (no erasure, or one whose export will still hold it).
+     */
+    deferWhileErasing: (id: string, exchange: OwnerHostExchangeInput) => boolean;
+    recover: () => void;
+    startRecovery: () => void;
+    stopRecovery: () => void;
     isBlocked: (id: string) => boolean;
     onSettled: (row: MailboxRow) => void;
     onDead: (row: MailboxRow, reason: string) => void;

package/dist/api/member-records.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"member-records.d.ts","sourceRoot":"","sources":["../../src/api/member-records.ts"],"names":[],"mappings":"AAGA,OAAO,EAKL,KAAK,kBAAkB,EACvB,KAAK,cAAc,EAEpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAO7D,MAAM,WAAW,qBAAsB,SAAQ,kBAAkB;IAC/D,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7F;AACD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,IAAI,OAAO,CAAC;IACnB,MAAM,IAAI,kBAAkB,GAAG,SAAS,CAAC;IACzC,QAAQ,IAAI,qBAAqB,GAAG,SAAS,CAAC;IAC9C,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,CAAC;IACnC,SAAS,EAAE,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC;IACpD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,IAAI,OAAO,CAAC;IACtB,YAAY,IAAI,IAAI,CAAC;IACrB,cAAc,CACZ,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,QAAQ,GAAG,OAAO,EACxB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,OAAO,GACxB,IAAI,CAAC;CACT;AA0ED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE;IAC3C,OAAO,EAAE,gBAAgB,CAAC;IAC1B,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IACzD,KAAK,CAAC,EAAE,kBAAkB,CAAC;CAC5B;;;oBAqUmB,MAAM;qBACL,UAAU;kBASb,UAAU,UAAU,MAAM;uBACrB,UAAU,UAAU,MAAM;;EAKhD"}
+{"version":3,"file":"member-records.d.ts","sourceRoot":"","sources":["../../src/api/member-records.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,KAAK,kBAAkB,EACvB,KAAK,cAAc,EAEpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AACpG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAO7D,MAAM,WAAW,qBAAsB,SAAQ,kBAAkB;IAC/D,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5F,mBAAmB,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1E,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAChD;AACD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,IAAI,OAAO,CAAC;IACnB,MAAM,IAAI,kBAAkB,GAAG,SAAS,CAAC;IACzC,QAAQ,IAAI,qBAAqB,GAAG,SAAS,CAAC;IAC9C,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,CAAC;IACnC,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC;IAChE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,IAAI,OAAO,CAAC;IACtB,OAAO,IAAI,OAAO,CAAC;IACnB,YAAY,IAAI,IAAI,CAAC;IACrB,cAAc,CACZ,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,QAAQ,GAAG,OAAO,EACxB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,OAAO,GACxB,IAAI,CAAC;IACR,8FAA8F;IAC9F,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,sBAAsB,GAAG,IAAI,CAAC;CACvE;AA+FD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE;IAC3C,OAAO,EAAE,gBAAgB,CAAC;IAC1B,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IACzD,KAAK,CAAC,EAAE,kBAAkB,CAAC;CAC5B;;;;IA8oBG;;;OAGG;4BACqB,MAAM,YAAY,sBAAsB,KAAG,OAAO;;;;oBA8B1D,MAAM;qBACL,UAAU;kBAuBb,UAAU,UAAU,MAAM;uBACrB,UAAU,UAAU,MAAM;;EAKhD"}