@moltzap/client 2026.812.0 → 2026.902.0

package/dist/endpoint/router-worker/types.d.ts

@@ -0,0 +1,183 @@
+/** @file Private Router worker contracts shared by orchestration and transport. */
+import type { AgentId, AgentSigningAuthority, MessageId, SignedMessage, VerifiedAgentCard, VerifiedSignedMessage } from "@moltzap/identity";
+import type { Registry } from "@moltzap/identity/registry";
+import type { PollCursor, Router, RouterInstanceId } from "@moltzap/router";
+import { type Context, type Effect, type SubscriptionRef } from "effect";
+import type { DecodedOuterBody } from "../representation.js";
+import type { EndpointStore } from "../store.js";
+declare const RouterWorkerAuthenticationError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "RouterWorkerAuthenticationError";
+} & Readonly<A>;
+/** An outer sender card could not be resolved, pinned, or authenticated. */
+export declare class RouterWorkerAuthenticationError extends RouterWorkerAuthenticationError_base {
+}
+declare const RouterWorkerPersistenceError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "RouterWorkerPersistenceError";
+} & Readonly<A>;
+/** Endpoint state needed for cursor advancement could not be persisted. */
+export declare class RouterWorkerPersistenceError extends RouterWorkerPersistenceError_base {
+}
+declare const RouterWorkerPayloadInvalidError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "RouterWorkerPayloadInvalidError";
+} & Readonly<A>;
+/** An authenticated outer body is not one closed Client protocol value. */
+export declare class RouterWorkerPayloadInvalidError extends RouterWorkerPayloadInvalidError_base {
+}
+declare const RouterWorkerTransportError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "RouterWorkerTransportError";
+} & Readonly<A>;
+/** Router communication exhausted its bounded retry allowance. */
+export declare class RouterWorkerTransportError extends RouterWorkerTransportError_base {
+}
+declare const RouterWorkerProtocolError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "RouterWorkerProtocolError";
+} & Readonly<A>;
+/** A Router outcome or local envelope violated the private worker contract. */
+export declare class RouterWorkerProtocolError extends RouterWorkerProtocolError_base {
+}
+declare const RouterWorkerRecoveryError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "RouterWorkerRecoveryError";
+} & Readonly<A>;
+/** Certified-history recovery did not complete for the current Router tail. */
+export declare class RouterWorkerRecoveryError extends RouterWorkerRecoveryError_base {
+}
+declare const RouterWorkerDiscontinuityError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "RouterWorkerDiscontinuityError";
+} & Readonly<A>;
+/** A caller must resume protocol work from the recovered certified position. */
+export declare class RouterWorkerDiscontinuityError extends RouterWorkerDiscontinuityError_base {
+}
+declare const RouterWorkerUnavailableError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "RouterWorkerUnavailableError";
+} & Readonly<A>;
+/** A normal send was attempted while certified-history recovery owns the worker. */
+export declare class RouterWorkerUnavailableError extends RouterWorkerUnavailableError_base {
+}
+/** Closed reason for abandoning process-local protocol folds. */
+export type RouterDiscontinuityReason = "feed_gap" | "cursor_invalid" | "router_restarted";
+/** Empty-tail Router position learned from an omitted-cursor poll. */
+export interface RouterTailAnchor {
+    readonly routerInstanceId: RouterInstanceId;
+    readonly pollCursor: PollCursor;
+}
+/** A verified protocol input either changed durable state or was conclusively irrelevant. */
+export type RouterIngressDisposition = "accepted" | "ignored";
+/** Closed failures returned by initial and recovery sends. */
+export type RouterWorkerSendError = RouterWorkerAuthenticationError | RouterWorkerPersistenceError | RouterWorkerTransportError | RouterWorkerProtocolError | RouterWorkerRecoveryError | RouterWorkerDiscontinuityError | RouterWorkerUnavailableError;
+/** Closed failures returned by one poll/recovery transition. */
+export type RouterWorkerPollError = RouterWorkerAuthenticationError | RouterWorkerPersistenceError | RouterWorkerTransportError | RouterWorkerProtocolError | RouterWorkerRecoveryError | RouterWorkerDiscontinuityError | RouterWorkerUnavailableError;
+/** Verified outer message and its decoded private Client payload. */
+export interface RouterWorkerIngress<Payload> {
+    readonly routerInstanceId: RouterInstanceId;
+    readonly message: VerifiedSignedMessage;
+    readonly senderCard: VerifiedAgentCard;
+    readonly payload: Payload;
+}
+/** Discontinuity recovery input after learning the new empty tail. */
+export interface RouterWorkerRecovery {
+    readonly reason: RouterDiscontinuityReason;
+    readonly anchor: RouterTailAnchor;
+    readonly resume: (outboundId: string) => Effect.Effect<void, RouterWorkerSendError>;
+    readonly send: (input: RouterWorkerRecoverySend) => Effect.Effect<void, RouterWorkerSendError>;
+}
+/** One recovery-only message before its complete outer envelope is retained. */
+export interface RouterWorkerRecoverySend {
+    readonly conversationId: string;
+    readonly message: SignedMessage;
+}
+/** Durable operations required by the Router transport and no other worker path. */
+type RouterWorkerOutbox = Pick<EndpointStore, "enqueueOutbound" | "beginOutbound" | "replaceOutbound" | "completeOutbound">;
+/** Private endpoint callbacks around the Router worker's ordering boundary. */
+export interface RouterWorkerCallbacks<Payload = DecodedOuterBody> {
+    readonly pinSenderCard: (card: VerifiedAgentCard) => Effect.Effect<void, RouterWorkerPersistenceError>;
+    readonly decodePayload: (message: VerifiedSignedMessage) => Effect.Effect<Payload, RouterWorkerPayloadInvalidError>;
+    readonly acceptPayload: (input: RouterWorkerIngress<Payload>) => Effect.Effect<RouterIngressDisposition, RouterWorkerPersistenceError>;
+    readonly acceptRecoveryPayload: (input: RouterWorkerIngress<Payload>) => Effect.Effect<RouterIngressDisposition, RouterWorkerPersistenceError>;
+    readonly abandonVolatileFolds: (reason: RouterDiscontinuityReason) => Effect.Effect<void>;
+    readonly recoverCertifiedHistory: (input: RouterWorkerRecovery) => Effect.Effect<void, RouterWorkerRecoveryError | RouterWorkerSendError>;
+}
+/** Focused test seams that retain production postconditions. */
+interface RouterWorkerOverrides {
+    readonly verifyOuter?: (input: {
+        readonly signedMessage: SignedMessage;
+        readonly agentCard: VerifiedAgentCard;
+    }) => Effect.Effect<VerifiedSignedMessage, RouterWorkerAuthenticationError>;
+    readonly rewrapOuter?: (input: {
+        readonly signedMessage: SignedMessage;
+        readonly messageId: MessageId;
+    }) => Effect.Effect<SignedMessage, RouterWorkerProtocolError>;
+    readonly makeMessageId?: () => Effect.Effect<MessageId, RouterWorkerProtocolError>;
+}
+/** Complete private construction input for one registered endpoint. */
+export interface RouterWorkerInput<Payload = DecodedOuterBody> {
+    readonly callerAgentId: AgentId;
+    readonly callerAgentCard: VerifiedAgentCard;
+    /** Durable membership cards available before Registry connectivity. */
+    readonly pinnedSenderCards: readonly VerifiedAgentCard[];
+    readonly signingAuthority: AgentSigningAuthority;
+    readonly outbox: RouterWorkerOutbox;
+    readonly callbacks: RouterWorkerCallbacks<Payload>;
+    /** Test seams preserve production postconditions and are not process configuration. */
+    readonly overrides?: RouterWorkerOverrides;
+}
+/** One endpoint-wide Router worker. */
+export interface RouterWorker {
+    readonly currentAnchor: Effect.Effect<RouterTailAnchor, RouterWorkerUnavailableError>;
+    /**
+     * The active anchor as soon as one exists: the current anchor while the
+     * worker is active, otherwise the anchor the next completed recovery
+     * publishes. Callers bound the wait; the worker itself never gives up.
+     */
+    readonly awaitAnchor: Effect.Effect<RouterTailAnchor>;
+    readonly pollOnce: Effect.Effect<void, RouterWorkerPollError>;
+    readonly run: Effect.Effect<never, RouterWorkerPollError>;
+    readonly send: (outboundId: string) => Effect.Effect<void, RouterWorkerSendError>;
+}
+/** Volatile cursor state for an active Router instance. */
+export interface RouterWorkerActiveState {
+    readonly kind: "active";
+    readonly generation: number;
+    readonly anchor: RouterTailAnchor;
+}
+/** Volatile discontinuity state while certified history is reconciled. */
+export interface RouterWorkerRecoveringState {
+    readonly kind: "recovering";
+    readonly generation: number;
+    readonly reason: RouterDiscontinuityReason;
+    readonly priorRouterInstanceId?: RouterInstanceId;
+    readonly volatileFoldsAbandoned: boolean;
+    readonly anchor?: RouterTailAnchor;
+}
+/** Closed volatile lifecycle of the Router worker. */
+export type RouterWorkerState = RouterWorkerActiveState | RouterWorkerRecoveringState;
+/** Resolved public capabilities consumed by private worker mechanics. */
+export interface RouterWorkerServices {
+    readonly router: Context.Tag.Service<typeof Router>;
+    readonly registry: Context.Tag.Service<typeof Registry>;
+}
+/** Shared mutable worker runtime, guarded by its three semaphores. */
+export interface RouterWorkerRuntime<Payload> extends RouterWorkerServices {
+    readonly input: RouterWorkerInput<Payload>;
+    readonly cards: Map<AgentId, VerifiedAgentCard>;
+    readonly state: SubscriptionRef.SubscriptionRef<RouterWorkerState>;
+    readonly pollGate: Effect.Semaphore;
+    readonly stateGate: Effect.Semaphore;
+    readonly recoveryGate: Effect.Semaphore;
+}
+/** Outer message with both sender card and signature verified. */
+export interface RouterWorkerVerifiedIngress {
+    readonly message: VerifiedSignedMessage;
+    readonly senderCard: VerifiedAgentCard;
+}
+/** Router send outcome relevant above transport representation. */
+export type RouterWorkerSendOutcome = Readonly<{
+    kind: "accepted";
+}> | Readonly<{
+    kind: "restarted";
+}>;
+/** Complete number of attempts for one ambiguous transport operation. */
+export declare const routerWorkerRetryAttempts = 3;
+/** Fixed interruptible spacing between bounded attempts. */
+export declare const routerWorkerRetryDelay = "25 millis";
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/endpoint/router-worker/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/endpoint/router-worker/types.ts"],"names":[],"mappings":"AAAA,mFAAmF;AAEnF,OAAO,KAAK,EACV,OAAO,EACP,qBAAqB,EACrB,SAAS,EACT,aAAa,EACb,iBAAiB,EACjB,qBAAqB,EACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,KAAK,OAAO,EAAQ,KAAK,MAAM,EAAE,KAAK,eAAe,EAAE,MAAM,QAAQ,CAAC;AAC/E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;;;;AAEjD,4EAA4E;AAC5E,qBAAa,+BAAgC,SAAQ,oCAEpD;CAAG;;;;AAEJ,2EAA2E;AAC3E,qBAAa,4BAA6B,SAAQ,iCAEjD;CAAG;;;;AAEJ,2EAA2E;AAC3E,qBAAa,+BAAgC,SAAQ,oCAEpD;CAAG;;;;AAEJ,kEAAkE;AAClE,qBAAa,0BAA2B,SAAQ,+BAE/C;CAAG;;;;AAEJ,+EAA+E;AAC/E,qBAAa,yBAA0B,SAAQ,8BAE9C;CAAG;;;;AAEJ,+EAA+E;AAC/E,qBAAa,yBAA0B,SAAQ,8BAE9C;CAAG;;;;AAEJ,gFAAgF;AAChF,qBAAa,8BAA+B,SAAQ,mCAEnD;CAAG;;;;AAEJ,oFAAoF;AACpF,qBAAa,4BAA6B,SAAQ,iCAEjD;CAAG;AAEJ,iEAAiE;AACjE,MAAM,MAAM,yBAAyB,GACjC,UAAU,GACV,gBAAgB,GAChB,kBAAkB,CAAC;AAEvB,sEAAsE;AACtE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED,6FAA6F;AAC7F,MAAM,MAAM,wBAAwB,GAAG,UAAU,GAAG,SAAS,CAAC;AAE9D,8DAA8D;AAC9D,MAAM,MAAM,qBAAqB,GAC7B,+BAA+B,GAC/B,4BAA4B,GAC5B,0BAA0B,GAC1B,yBAAyB,GACzB,yBAAyB,GACzB,8BAA8B,GAC9B,4BAA4B,CAAC;AAEjC,gEAAgE;AAChE,MAAM,MAAM,qBAAqB,GAC7B,+BAA+B,GAC/B,4BAA4B,GAC5B,0BAA0B,GAC1B,yBAAyB,GACzB,yBAAyB,GACzB,8BAA8B,GAC9B,4BAA4B,CAAC;AAEjC,qEAAqE;AACrE,MAAM,WAAW,mBAAmB,CAAC,OAAO;IAC1C,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,sEAAsE;AACtE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,CACf,UAAU,EAAE,MAAM,KACf,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IAChD,QAAQ,CAAC,IAAI,EAAE,CACb,KAAK,EAAE,wBAAwB,KAC5B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;CACjD;AAED,gFAAgF;AAChF,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;CACjC;AAED,oFAAoF;AACpF,KAAK,kBAAkB,GAAG,IAAI,CAC5B,aAAa,EACb,iBAAiB,GAAG,eAAe,GAAG,iBAAiB,GAAG,kBAAkB,CAC7E,CAAC;AAEF,+EAA+E;AAC/E,MAAM,WAAW,qBAAqB,CAAC,OAAO,GAAG,gBAAgB;IAC/D,QAAQ,CAAC,aAAa,EAAE,CACtB,IAAI,EAAE,iBAAiB,KACpB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;IACvD,QAAQ,CAAC,aAAa,EAAE,CACtB,OAAO,EAAE,qBAAqB,KAC3B,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC;IAC7D,QAAQ,CAAC,aAAa,EAAE,CACtB,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,KAChC,MAAM,CAAC,MAAM,CAAC,wBAAwB,EAAE,4BAA4B,CAAC,CAAC;IAC3E,QAAQ,CAAC,qBAAqB,EAAE,CAC9B,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,KAChC,MAAM,CAAC,MAAM,CAAC,wBAAwB,EAAE,4BAA4B,CAAC,CAAC;IAC3E,QAAQ,CAAC,oBAAoB,EAAE,CAC7B,MAAM,EAAE,yBAAyB,KAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,QAAQ,CAAC,uBAAuB,EAAE,CAChC,KAAK,EAAE,oBAAoB,KACxB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,yBAAyB,GAAG,qBAAqB,CAAC,CAAC;CAC7E;AAED,gEAAgE;AAChE,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE;QAC7B,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;QACtC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;KACvC,KAAK,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,+BAA+B,CAAC,CAAC;IAC5E,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE;QAC7B,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;QACtC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;KAC/B,KAAK,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;IAC9D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,CAC1C,SAAS,EACT,yBAAyB,CAC1B,CAAC;CACH;AAED,uEAAuE;AACvE,MAAM,WAAW,iBAAiB,CAAC,OAAO,GAAG,gBAAgB;IAC3D,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,iBAAiB,CAAC;IAC5C,uEAAuE;IACvE,QAAQ,CAAC,iBAAiB,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACzD,QAAQ,CAAC,gBAAgB,EAAE,qBAAqB,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACnD,uFAAuF;IACvF,QAAQ,CAAC,SAAS,CAAC,EAAE,qBAAqB,CAAC;CAC5C;AAED,uCAAuC;AACvC,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CACnC,gBAAgB,EAChB,4BAA4B,CAC7B,CAAC;IACF;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACtD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IAC9D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IAC1D,QAAQ,CAAC,IAAI,EAAE,CACb,UAAU,EAAE,MAAM,KACf,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;CACjD;AAED,2DAA2D;AAC3D,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC;AAED,0EAA0E;AAC1E,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAC3C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,gBAAgB,CAAC;IAClD,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;CACpC;AAED,sDAAsD;AACtD,MAAM,MAAM,iBAAiB,GACzB,uBAAuB,GACvB,2BAA2B,CAAC;AAEhC,yEAAyE;AACzE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,MAAM,CAAC,CAAC;IACpD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,QAAQ,CAAC,CAAC;CACzD;AAED,sEAAsE;AACtE,MAAM,WAAW,mBAAmB,CAAC,OAAO,CAAE,SAAQ,oBAAoB;IACxE,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;IACnE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC;CACzC;AAED,kEAAkE;AAClE,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;CACxC;AAED,mEAAmE;AACnE,MAAM,MAAM,uBAAuB,GAC/B,QAAQ,CAAC;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,GAC9B,QAAQ,CAAC;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC;AAEpC,yEAAyE;AACzE,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAC3C,4DAA4D;AAC5D,eAAO,MAAM,sBAAsB,cAAc,CAAC"}

package/dist/endpoint/router-worker/types.js

@@ -0,0 +1,31 @@
+/** @file Private Router worker contracts shared by orchestration and transport. */
+import { Data } from "effect";
+/** An outer sender card could not be resolved, pinned, or authenticated. */
+export class RouterWorkerAuthenticationError extends Data.TaggedError("RouterWorkerAuthenticationError") {
+}
+/** Endpoint state needed for cursor advancement could not be persisted. */
+export class RouterWorkerPersistenceError extends Data.TaggedError("RouterWorkerPersistenceError") {
+}
+/** An authenticated outer body is not one closed Client protocol value. */
+export class RouterWorkerPayloadInvalidError extends Data.TaggedError("RouterWorkerPayloadInvalidError") {
+}
+/** Router communication exhausted its bounded retry allowance. */
+export class RouterWorkerTransportError extends Data.TaggedError("RouterWorkerTransportError") {
+}
+/** A Router outcome or local envelope violated the private worker contract. */
+export class RouterWorkerProtocolError extends Data.TaggedError("RouterWorkerProtocolError") {
+}
+/** Certified-history recovery did not complete for the current Router tail. */
+export class RouterWorkerRecoveryError extends Data.TaggedError("RouterWorkerRecoveryError") {
+}
+/** A caller must resume protocol work from the recovered certified position. */
+export class RouterWorkerDiscontinuityError extends Data.TaggedError("RouterWorkerDiscontinuityError") {
+}
+/** A normal send was attempted while certified-history recovery owns the worker. */
+export class RouterWorkerUnavailableError extends Data.TaggedError("RouterWorkerUnavailableError") {
+}
+/** Complete number of attempts for one ambiguous transport operation. */
+export const routerWorkerRetryAttempts = 3;
+/** Fixed interruptible spacing between bounded attempts. */
+export const routerWorkerRetryDelay = "25 millis";
+//# sourceMappingURL=types.js.map

package/dist/endpoint/router-worker/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/endpoint/router-worker/types.ts"],"names":[],"mappings":"AAAA,mFAAmF;AAYnF,OAAO,EAAgB,IAAI,EAAqC,MAAM,QAAQ,CAAC;AAI/E,4EAA4E;AAC5E,MAAM,OAAO,+BAAgC,SAAQ,IAAI,CAAC,WAAW,CACnE,iCAAiC,CAClC;CAAG;AAEJ,2EAA2E;AAC3E,MAAM,OAAO,4BAA6B,SAAQ,IAAI,CAAC,WAAW,CAChE,8BAA8B,CAC/B;CAAG;AAEJ,2EAA2E;AAC3E,MAAM,OAAO,+BAAgC,SAAQ,IAAI,CAAC,WAAW,CACnE,iCAAiC,CAClC;CAAG;AAEJ,kEAAkE;AAClE,MAAM,OAAO,0BAA2B,SAAQ,IAAI,CAAC,WAAW,CAC9D,4BAA4B,CAC7B;CAAG;AAEJ,+EAA+E;AAC/E,MAAM,OAAO,yBAA0B,SAAQ,IAAI,CAAC,WAAW,CAC7D,2BAA2B,CAC5B;CAAG;AAEJ,+EAA+E;AAC/E,MAAM,OAAO,yBAA0B,SAAQ,IAAI,CAAC,WAAW,CAC7D,2BAA2B,CAC5B;CAAG;AAEJ,gFAAgF;AAChF,MAAM,OAAO,8BAA+B,SAAQ,IAAI,CAAC,WAAW,CAClE,gCAAgC,CACjC;CAAG;AAEJ,oFAAoF;AACpF,MAAM,OAAO,4BAA6B,SAAQ,IAAI,CAAC,WAAW,CAChE,8BAA8B,CAC/B;CAAG;AA4LJ,yEAAyE;AACzE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAC3C,4DAA4D;AAC5D,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAAC"}

package/dist/endpoint/store/anchors.d.ts

@@ -0,0 +1,83 @@
+/** @file Atomic identity, post-intent, foundation, and Router-anchor transitions. */
+import type { DatabaseSync } from "node:sqlite";
+import type { CompletedReanchor, ConversationFoundation, EmptyConversationRestart, IdentityBinding, PostIntentBinding, ProposalLock, RestartedEmptyConversation, StagedReanchor, StoreMutation } from "./types.js";
+import { readStoredIdentity } from "./rows/index.js";
+/** Singleton identity binding operations. */
+export declare const bindIdentity: Readonly<{
+    read: typeof readStoredIdentity;
+    write: typeof writeIdentity;
+}>;
+/**
+ * Durably binds one author-scoped post to its immutable canonical intent.
+ *
+ * @param database Exclusively owned endpoint database.
+ * @param binding Canonical post recovery identity and optional new foundation.
+ * @returns Whether the same binding was inserted or already durable.
+ */
+export declare function bindPostIntent(database: DatabaseSync, binding: PostIntentBinding): StoreMutation;
+/**
+ * Atomically persists the immutable membership and genesis Router anchor.
+ *
+ * @param database Exclusively owned endpoint database.
+ * @param foundation Verified immutable conversation foundation.
+ * @returns Whether the same foundation was inserted or already durable.
+ */
+export declare function putConversationFoundation(database: DatabaseSync, foundation: ConversationFoundation): StoreMutation;
+/**
+ * Commits the first valid Router-ordered action for one predecessor.
+ *
+ * A caller signs only after this operation succeeds, so an endpoint cannot
+ * sign two actions for the same predecessor across crashes or restarts.
+ *
+ * @param database Exclusively owned endpoint database.
+ * @param proposal Verified action core selected in Router order.
+ * @returns Whether the lock was inserted or the same lock already existed.
+ */
+export declare function lockProposal(database: DatabaseSync, proposal: ProposalLock): StoreMutation;
+/**
+ * Atomically retains a verified GENESIS foundation and its first-candidate lock.
+ *
+ * @param database Exclusively owned endpoint database.
+ * @param foundation Verified immutable membership and Router anchor.
+ * @param proposal Verified gap-free GENESIS action selected in Router order.
+ * @returns Whether either exact durable component was inserted.
+ */
+export declare function lockGenesisProposal(database: DatabaseSync, foundation: ConversationFoundation, proposal: ProposalLock): StoreMutation;
+/**
+ * Replaces an uncommitted conversation's Router-instance foundation.
+ *
+ * The exact old foundation and empty certified head prevent this cleanup from
+ * erasing committed history or a concurrently advanced anchor.
+ *
+ * @param database Exclusively owned endpoint database.
+ * @param restart Expected old and verified replacement genesis foundations.
+ * @returns The replacement foundation and immutable retained post intents.
+ */
+export declare function restartEmptyConversation(database: DatabaseSync, restart: EmptyConversationRestart): RestartedEmptyConversation;
+/**
+ * Durably stages at most one re-anchor proposal for one Router-instance scope.
+ *
+ * @param database Exclusively owned endpoint database.
+ * @param reanchor Verified proposal body and stable hash.
+ * @returns Whether the same proposal was inserted or already durable.
+ */
+export declare function stageReanchor(database: DatabaseSync, reanchor: StagedReanchor): StoreMutation;
+/**
+ * Atomically makes a staged threshold-complete Router anchor current.
+ *
+ * @param database Exclusively owned endpoint database.
+ * @param reanchor Verified completed re-anchor and threshold evidence.
+ * @returns Whether completion advanced the current anchor or was idempotent.
+ */
+export declare function completeReanchor(database: DatabaseSync, reanchor: CompletedReanchor): StoreMutation;
+/**
+ * Atomically stages and completes exactly one verified catch-up anchor item.
+ *
+ * @param database Exclusively owned endpoint database.
+ * @param reanchor One verified completed re-anchor from catch-up.
+ * @returns Whether any durable state was added.
+ */
+export declare function applyCatchUpReanchor(database: DatabaseSync, reanchor: CompletedReanchor): StoreMutation;
+declare function writeIdentity(database: DatabaseSync, binding: IdentityBinding): StoreMutation;
+export {};
+//# sourceMappingURL=anchors.d.ts.map

package/dist/endpoint/store/anchors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchors.d.ts","sourceRoot":"","sources":["../../../src/endpoint/store/anchors.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EACV,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,eAAe,EAEf,iBAAiB,EACjB,YAAY,EACZ,0BAA0B,EAC1B,cAAc,EACd,aAAa,EACd,MAAM,YAAY,CAAC;AAapB,OAAO,EAGL,kBAAkB,EAInB,MAAM,iBAAiB,CAAC;AAIzB,6CAA6C;AAC7C,eAAO,MAAM,YAAY;;;EAGvB,CAAC;AAEH;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,iBAAiB,GACzB,aAAa,CAyBf;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,YAAY,EACtB,UAAU,EAAE,sBAAsB,GACjC,aAAa,CAIf;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,YAAY,GACrB,aAAa,CAKf;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,YAAY,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,YAAY,GACrB,aAAa,CAkBf;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,wBAAwB,GAChC,0BAA0B,CAc5B;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,cAAc,GACvB,aAAa,CAKf;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,iBAAiB,GAC1B,aAAa,CAKf;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,iBAAiB,GAC1B,aAAa,CASf;AA4CD,iBAAS,aAAa,CACpB,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,eAAe,GACvB,aAAa,CAkBf"}