@monoes/monomindcli 2.10.29 → 2.10.31

package/dist/src/orgrt/broker.js

@@ -2,9 +2,19 @@
 // monolean: file-based local broker for cross-process org discovery (different
 // `monomind org` processes / project directories, same machine). Upgrade path:
 // a real network registry when cross-machine discovery is needed.
-import { mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from 'node:fs';
+import { mkdirSync, readFileSync, realpathSync, renameSync, unlinkSync, writeFileSync, } from 'node:fs';
 import { homedir } from 'node:os';
-import { join } from 'node:path';
+import { join, resolve } from 'node:path';
+/** M4: canonical form of a project root for trust-domain comparison. */
+export function normalizeRoot(root) {
+    const abs = resolve(root);
+    try {
+        return realpathSync(abs);
+    }
+    catch {
+        return abs;
+    }
+}
 // DNS label limits: 1-63 chars, must start alphanumerically (RFC 1034 + RFC 1123)
 // Requires at least 2 chars total (backward compatibility with original regex)
 const SAFE_NAME = /^[a-z0-9][a-z0-9_-]{1,63}$/i;
@@ -68,7 +78,7 @@ export function removeOperatorCredential(name, dir = defaultOperatorDir()) {
 /** Publish that this process hosts org `name`, reachable via `url`. Call again periodically (heartbeat) — see BrokerLease.
  *  Writes via tmp+rename (same-directory rename is atomic on POSIX/NTFS) so a concurrent lookupOrg() never observes a
  *  partially-written entry — this file is rewritten every heartbeat (default 20s) while other processes may read it. */
-export function registerOrg(name, url, dir = defaultRegistryDir(), credential) {
+export function registerOrg(name, url, dir = defaultRegistryDir(), credential, root) {
     mkdirSync(dir, { recursive: true });
     const normalizedCred = normalizeCredential(credential);
     const entry = {
@@ -76,6 +86,7 @@ export function registerOrg(name, url, dir = defaultRegistryDir(), credential) {
         pid: process.pid,
         updatedAt: Date.now(),
         ...(normalizedCred ? { credential: normalizedCred } : {}),
+        ...(root ? { root: normalizeRoot(root) } : {}),
     };
     // SEC: the entry carries this org's agent credential in plaintext —
     // restrict to owner-only so other local users can't read it off disk.
@@ -113,17 +124,21 @@ export class BrokerLease {
     intervalMs;
     credential;
     operator;
+    root;
     timer = null;
-    constructor(name, url, dir = defaultRegistryDir(), intervalMs = 20_000, credential, operator) {
+    constructor(name, url, dir = defaultRegistryDir(), intervalMs = 20_000, credential, operator, 
+    /** M4: the daemon's project root, published in the registry entry. */
+    root) {
         this.name = name;
         this.url = url;
         this.dir = dir;
         this.intervalMs = intervalMs;
         this.credential = credential;
         this.operator = operator;
+        this.root = root;
     }
     publish() {
-        registerOrg(this.name, this.url, this.dir, this.credential);
+        registerOrg(this.name, this.url, this.dir, this.credential, this.root);
         if (this.operator)
             writeOperatorCredential(this.name, this.operator.credential, this.operator.dir);
     }

package/dist/src/orgrt/broker.js.map

@@ -1 +1 @@
-{"version":3,"file":"broker.js","sourceRoot":"","sources":["../../../src/orgrt/broker.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,+EAA+E;AAC/E,+EAA+E;AAC/E,kEAAkE;AAClE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AASjC,kFAAkF;AAClF,+EAA+E;AAC/E,MAAM,SAAS,GAAG,6BAA6B,CAAC;AAChD,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CAAC,IAAwB;IAC1D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC;IACnE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;AAC/F,CAAC;AAED;;;;qEAIqE;AACrE,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,GAAW;IAC1C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC;IAC5F,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,uFAAuF;AACvF,SAAS,UAAU,CAAC,IAAY,EAAE,IAAa;IAC7C,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC;AAED;sEACsE;AACtE,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,UAAkB,EAClB,GAAG,GAAG,kBAAkB,EAAE;IAE1B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,GAAG,GAAG,kBAAkB,EAAE;IAE1B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAA4B,CAAC;QAChG,OAAO,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAE,GAAG,GAAG,kBAAkB,EAAE;IAC/E,IAAI,CAAC;QACH,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;AACH,CAAC;AAED;;wHAEwH;AACxH,MAAM,UAAU,WAAW,CACzB,IAAY,EACZ,GAAW,EACX,GAAG,GAAG,kBAAkB,EAAE,EAC1B,UAAmB;IAEnB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,cAAc,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,KAAK,GAAgB;QACzB,GAAG;QACH,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;IACF,oEAAoE;IACpE,sEAAsE;IACtE,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,GAAG,GAAG,kBAAkB,EAAE;IACpE,IAAI,CAAC;QACH,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;AACH,CAAC;AAED,qJAAqJ;AACrJ,MAAM,UAAU,SAAS,CACvB,IAAY,EACZ,GAAG,GAAG,kBAAkB,EAAE,EAC1B,OAAO,GAAG,gBAAgB;IAE1B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAgB,CAAC;QACpF,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;yCAGyC;AACzC,MAAM,OAAO,WAAW;IAIZ,IAAI;IACJ,GAAG;IACH,GAAG;IACH,UAAU;IACV,UAAU;IACV,QAAQ;IARV,KAAK,GAA0C,IAAI,CAAC;IAE5D,YACU,IAAY,EACZ,GAAW,EACX,GAAG,GAAW,kBAAkB,EAAE,EAClC,UAAU,GAAG,MAAM,EACnB,UAAmB,EACnB,QAA+C;oBAL/C,IAAI;mBACJ,GAAG;mBACH,GAAG;0BACH,UAAU;0BACV,UAAU;wBACV,QAAQ;IACf,CAAC;IAEI,OAAO;QACb,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,QAAQ;YACf,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACpF,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,QAAQ;YAAE,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5E,CAAC;CACF"}
+{"version":3,"file":"broker.js","sourceRoot":"","sources":["../../../src/orgrt/broker.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,+EAA+E;AAC/E,+EAA+E;AAC/E,kEAAkE;AAClE,OAAO,EACL,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAW1C,wEAAwE;AACxE,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,+EAA+E;AAC/E,MAAM,SAAS,GAAG,6BAA6B,CAAC;AAChD,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CAAC,IAAwB;IAC1D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC;IACnE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;AAC/F,CAAC;AAED;;;;qEAIqE;AACrE,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,GAAW;IAC1C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC;IAC5F,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,uFAAuF;AACvF,SAAS,UAAU,CAAC,IAAY,EAAE,IAAa;IAC7C,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC;AAED;sEACsE;AACtE,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,UAAkB,EAClB,GAAG,GAAG,kBAAkB,EAAE;IAE1B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,GAAG,GAAG,kBAAkB,EAAE;IAE1B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAA4B,CAAC;QAChG,OAAO,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAE,GAAG,GAAG,kBAAkB,EAAE;IAC/E,IAAI,CAAC;QACH,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;AACH,CAAC;AAED;;wHAEwH;AACxH,MAAM,UAAU,WAAW,CACzB,IAAY,EACZ,GAAW,EACX,GAAG,GAAG,kBAAkB,EAAE,EAC1B,UAAmB,EACnB,IAAa;IAEb,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,cAAc,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,KAAK,GAAgB;QACzB,GAAG;QACH,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAC;IACF,oEAAoE;IACpE,sEAAsE;IACtE,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,GAAG,GAAG,kBAAkB,EAAE;IACpE,IAAI,CAAC;QACH,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;AACH,CAAC;AAED,qJAAqJ;AACrJ,MAAM,UAAU,SAAS,CACvB,IAAY,EACZ,GAAG,GAAG,kBAAkB,EAAE,EAC1B,OAAO,GAAG,gBAAgB;IAE1B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAgB,CAAC;QACpF,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;yCAGyC;AACzC,MAAM,OAAO,WAAW;IAIZ,IAAI;IACJ,GAAG;IACH,GAAG;IACH,UAAU;IACV,UAAU;IACV,QAAQ;IAER,IAAI;IAVN,KAAK,GAA0C,IAAI,CAAC;IAE5D,YACU,IAAY,EACZ,GAAW,EACX,GAAG,GAAW,kBAAkB,EAAE,EAClC,UAAU,GAAG,MAAM,EACnB,UAAmB,EACnB,QAA+C;IACvD,sEAAsE;IAC9D,IAAa;oBAPb,IAAI;mBACJ,GAAG;mBACH,GAAG;0BACH,UAAU;0BACV,UAAU;wBACV,QAAQ;oBAER,IAAI;IACX,CAAC;IAEI,OAAO;QACb,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,IAAI,CAAC,QAAQ;YACf,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACpF,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,QAAQ;YAAE,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5E,CAAC;CACF"}

package/dist/src/orgrt/checkpoint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checkpoint.d.ts","sourceRoot":"","sources":["../../../src/orgrt/checkpoint.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE5D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C,+CAA+C;AAC/C,MAAM,WAAW,cAAc;IAC7B,8DAA8D;IAC9D,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,qCAAqC;IACrC,aAAa,EAAE,OAAO,CAAC;IACvB;;2CAEuC;IACvC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,6CAA6C;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gCAAgC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB;IACnB,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;IACxC,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,iFAAiF;IACjF,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,YAAY,EAAE,MAAM,CAAC;IACrB;+EAC2E;IAC3E,sBAAsB,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpF;yCACqC;IACrC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B;;+EAE2E;IAC3E,YAAY,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACnD;AAED,uCAAuC;AACvC,MAAM,WAAW,aAAa;IAC5B;;gDAE4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC1C,yCAAyC;IACzC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;mEAC+D;IAC/D,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAClB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;wEAGwE;AACxE,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC,4BAA4B;AAC5B,eAAO,MAAM,iBAAiB,QAAsB,CAAC;AAyBrD;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,UAAU,EACf,MAAM,GAAE,SAAS,GAAG,SAAS,GAAG,SAAqB,GACpD,aAAa,CAiDf;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,aAAa,GAAG,OAAO,CAYrE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,aAAa,EACzB,KAAK,GAAE,MAA0B,GAChC,OAAO,CAIT;AAWD;;;;;;;;;;wCAUwC;AACxC,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,aAAa,GAAG,aAAa,GAAG,IAAI,CAsBjF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,GAAG,MAAM,CAG/E;AAeD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAIhF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,UAAU,EACf,UAAU,EAAE,aAAa,EACzB,gBAAgB,GAAE,OAAc,EAChC,aAAa,GAAE,OAAc,GAC5B,IAAI,CAwCN"}
+{"version":3,"file":"checkpoint.d.ts","sourceRoot":"","sources":["../../../src/orgrt/checkpoint.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE5D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C,+CAA+C;AAC/C,MAAM,WAAW,cAAc;IAC7B,8DAA8D;IAC9D,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,qCAAqC;IACrC,aAAa,EAAE,OAAO,CAAC;IACvB;;2CAEuC;IACvC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,6CAA6C;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gCAAgC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB;IACnB,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;IACxC,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,iFAAiF;IACjF,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,YAAY,EAAE,MAAM,CAAC;IACrB;+EAC2E;IAC3E,sBAAsB,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpF;yCACqC;IACrC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B;;+EAE2E;IAC3E,YAAY,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACnD;AAED,uCAAuC;AACvC,MAAM,WAAW,aAAa;IAC5B;;gDAE4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC1C,yCAAyC;IACzC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;mEAC+D;IAC/D,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAClB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;wEAGwE;AACxE,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC,4BAA4B;AAC5B,eAAO,MAAM,iBAAiB,QAAsB,CAAC;AA2BrD;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,UAAU,EACf,MAAM,GAAE,SAAS,GAAG,SAAS,GAAG,SAAqB,GACpD,aAAa,CAoDf;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,aAAa,GAAG,OAAO,CAYrE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,aAAa,EACzB,KAAK,GAAE,MAA0B,GAChC,OAAO,CAIT;AAWD;;;;;;;;;;wCAUwC;AACxC,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,aAAa,GAAG,aAAa,GAAG,IAAI,CAsBjF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,GAAG,MAAM,CAG/E;AAeD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAIhF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,UAAU,EACf,UAAU,EAAE,aAAa,EACzB,gBAAgB,GAAE,OAAc,EAChC,aAAa,GAAE,OAAc,GAC5B,IAAI,CAwCN"}

package/dist/src/orgrt/checkpoint.js.map

@@ -1 +1 @@
-{"version":3,"file":"checkpoint.js","sourceRoot":"","sources":["../../../src/orgrt/checkpoint.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,kFAAkF;AAElF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAgExD;;;wEAGwE;AACxE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC,4BAA4B;AAC5B,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,mBAAmB;AAEzE;;;yEAGyE;AACzE,SAAS,iBAAiB,CACxB,QAAkG,EAClG,SAAuF;IAEvF,MAAM,GAAG,GAAgE,EAAE,CAAC;IAC5E,IAAI,SAAS,CAAC,OAAO,KAAK,QAAQ,EAAE,OAAO,IAAI,SAAS,CAAC,OAAO;QAAE,GAAG,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;IAClG,IACE,SAAS,CAAC,cAAc,EAAE,KAAK,KAAK,QAAQ,EAAE,cAAc,EAAE,KAAK;QACnE,SAAS,CAAC,cAAc,EAAE,KAAK;QAE/B,GAAG,CAAC,KAAK,GAAG,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC;IAC7C,IACE,SAAS,CAAC,cAAc,EAAE,QAAQ,KAAK,QAAQ,EAAE,cAAc,EAAE,QAAQ;QACzE,SAAS,CAAC,cAAc,EAAE,QAAQ;QAElC,GAAG,CAAC,YAAY,GAAG,SAAS,CAAC,cAAc,CAAC,QAAQ,CAAC;IACvD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAe,EACf,MAAM,GAAsC,SAAS;IAErD,MAAM,SAAS,GAAmC,EAAE,CAAC;IACrD,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,uCAAuC;IACvC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,SAAS,CAAC,MAAM,CAAC,GAAG;YAClB,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK;YAC/C,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;YACvC,kBAAkB,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW;YAC/C,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK;YAChC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO;YAChC,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,6DAA6D;YAC3F,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE;YAC1C,UAAU,EAAE,IAAI,EAAE,UAAU,IAAI,CAAC;YACjC,YAAY,EAAE,IAAI,EAAE,YAAY,IAAI,CAAC;YACrC,sBAAsB,EAAE,IAAI;gBAC1B,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC;gBACnF,CAAC,CAAC,EAAE;YACN,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,IAAI,EAAE;YAC9C,YAAY,EAAE,IAAI,EAAE,YAAY,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;SAC9D,CAAC;IACJ,CAAC;IAED,0CAA0C;IAC1C,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QACpD,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,0CAA0C;IAC1C,MAAM,OAAO,GAAoC;QAC/C,OAAO,EAAE,kBAAkB;QAC3B,MAAM;QACN,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACjC,SAAS;QACT,YAAY;QACZ,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE;KAC7B,CAAC;IAEF,mCAAmC;IACnC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAE3C,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAyB;IAC1D,IAAI,UAAU,CAAC,OAAO,KAAK,kBAAkB,EAAE,CAAC;QAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YACpD,OAAO,CAAC,KAAK,CACX,2CAA2C,UAAU,CAAC,OAAO,IAAI,MAAM,gBAAgB,kBAAkB,EAAE,CAC5G,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,GAAG,UAAU,CAAC;IAC1C,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,QAAQ,KAAK,UAAU,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAyB,EACzB,KAAK,GAAW,iBAAiB;IAEjC,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO,GAAG,GAAG,OAAO,GAAG,KAAK,CAAC;AAC/B,CAAC;AAED;;;gFAGgF;AAChF,SAAS,oBAAoB,CAAC,UAAyB;IACrD,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,GAAG,UAAU,CAAC;IAC1C,OAAO,QAAQ,KAAK,gBAAgB,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;wCAUwC;AACxC,MAAM,UAAU,iBAAiB,CAAC,UAAyB;IACzD,IAAI,UAAU,CAAC,OAAO,KAAK,kBAAkB;QAAE,OAAO,UAAU,CAAC;IACjE,IAAI,UAAU,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,SAAS,GAAmC,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,SAAS,CAAC,MAAM,CAAC,GAAG;YAClB,GAAG,GAAG;YACN,UAAU,EAAE,CAAC;YACb,YAAY,EAAE,CAAC;YACf,sBAAsB,EAAE,EAAE;YAC1B,gBAAgB,EAAE,EAAE;YACpB,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;SACxC,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,UAAU,CAAC;IACvD,MAAM,QAAQ,GAAoC;QAChD,GAAG,IAAI;QACP,OAAO,EAAE,kBAAkB;QAC3B,SAAS;KACV,CAAC;IACF,OAAO,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAsC;IACrE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;4DAC4D;AAC5D,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC5D,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxE,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,UAAU;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,eAAe,CAAE,KAAiC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAqB,EAAE,KAAe;IACxE,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAe,EACf,UAAyB,EACzB,gBAAgB,GAAY,IAAI,EAChC,aAAa,GAAY,IAAI;IAE7B,4CAA4C;IAC5C,KAAK,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACvE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO;YAAE,SAAS,CAAC,0CAA0C;QAElE,wBAAwB;QACxB,IAAI,gBAAgB,IAAI,SAAS,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;QACvD,CAAC;QAED,gEAAgE;QAChE,8DAA8D;QAC9D,kEAAkE;QAClE,uEAAuE;QACvE,qEAAqE;QACrE,qCAAqC;QACrC,IACE,SAAS,CAAC,aAAa;YACvB,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ;YACzB,CAAC,wBAAwB,CAAC,SAAS,CAAC,kBAAkB,CAAC,EACvD,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACtD,CAAC;QAED,gCAAgC;QAChC,IAAI,aAAa,IAAI,SAAS,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;YAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,GAAG,YAAY,CAAC;YACjD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;gBACb,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,OAAO,CAAC,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QAC5C,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,aAAa,CAAC;QAChD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QAClC,IAAI,SAAS,CAAC,KAAK;YAAE,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;IACvD,CAAC;AACH,CAAC"}
+{"version":3,"file":"checkpoint.js","sourceRoot":"","sources":["../../../src/orgrt/checkpoint.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,kFAAkF;AAElF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAgExD;;;wEAGwE;AACxE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC,4BAA4B;AAC5B,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,mBAAmB;AAEzE;;;yEAGyE;AACzE,SAAS,iBAAiB,CACxB,QAEa,EACb,SAAuF;IAEvF,MAAM,GAAG,GAAgE,EAAE,CAAC;IAC5E,IAAI,SAAS,CAAC,OAAO,KAAK,QAAQ,EAAE,OAAO,IAAI,SAAS,CAAC,OAAO;QAAE,GAAG,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;IAClG,IACE,SAAS,CAAC,cAAc,EAAE,KAAK,KAAK,QAAQ,EAAE,cAAc,EAAE,KAAK;QACnE,SAAS,CAAC,cAAc,EAAE,KAAK;QAE/B,GAAG,CAAC,KAAK,GAAG,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC;IAC7C,IACE,SAAS,CAAC,cAAc,EAAE,QAAQ,KAAK,QAAQ,EAAE,cAAc,EAAE,QAAQ;QACzE,SAAS,CAAC,cAAc,EAAE,QAAQ;QAElC,GAAG,CAAC,YAAY,GAAG,SAAS,CAAC,cAAc,CAAC,QAAQ,CAAC;IACvD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAe,EACf,MAAM,GAAsC,SAAS;IAErD,MAAM,SAAS,GAAmC,EAAE,CAAC;IACrD,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,uCAAuC;IACvC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,SAAS,CAAC,MAAM,CAAC,GAAG;YAClB,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK;YAC/C,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;YACvC,kBAAkB,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW;YAC/C,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK;YAChC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO;YAChC,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,6DAA6D;YAC3F,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE;YAC1C,UAAU,EAAE,IAAI,EAAE,UAAU,IAAI,CAAC;YACjC,YAAY,EAAE,IAAI,EAAE,YAAY,IAAI,CAAC;YACrC,sBAAsB,EAAE,IAAI;gBAC1B,CAAC,CAAC,iBAAiB,CACf,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAC1C,IAAI,CAAC,aAAa,CACnB;gBACH,CAAC,CAAC,EAAE;YACN,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,IAAI,EAAE;YAC9C,YAAY,EAAE,IAAI,EAAE,YAAY,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;SAC9D,CAAC;IACJ,CAAC;IAED,0CAA0C;IAC1C,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QACpD,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,0CAA0C;IAC1C,MAAM,OAAO,GAAoC;QAC/C,OAAO,EAAE,kBAAkB;QAC3B,MAAM;QACN,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACjC,SAAS;QACT,YAAY;QACZ,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE;KAC7B,CAAC;IAEF,mCAAmC;IACnC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAE3C,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAyB;IAC1D,IAAI,UAAU,CAAC,OAAO,KAAK,kBAAkB,EAAE,CAAC;QAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YACpD,OAAO,CAAC,KAAK,CACX,2CAA2C,UAAU,CAAC,OAAO,IAAI,MAAM,gBAAgB,kBAAkB,EAAE,CAC5G,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,GAAG,UAAU,CAAC;IAC1C,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,QAAQ,KAAK,UAAU,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAyB,EACzB,KAAK,GAAW,iBAAiB;IAEjC,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO,GAAG,GAAG,OAAO,GAAG,KAAK,CAAC;AAC/B,CAAC;AAED;;;gFAGgF;AAChF,SAAS,oBAAoB,CAAC,UAAyB;IACrD,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,GAAG,UAAU,CAAC;IAC1C,OAAO,QAAQ,KAAK,gBAAgB,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;wCAUwC;AACxC,MAAM,UAAU,iBAAiB,CAAC,UAAyB;IACzD,IAAI,UAAU,CAAC,OAAO,KAAK,kBAAkB;QAAE,OAAO,UAAU,CAAC;IACjE,IAAI,UAAU,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,SAAS,GAAmC,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,SAAS,CAAC,MAAM,CAAC,GAAG;YAClB,GAAG,GAAG;YACN,UAAU,EAAE,CAAC;YACb,YAAY,EAAE,CAAC;YACf,sBAAsB,EAAE,EAAE;YAC1B,gBAAgB,EAAE,EAAE;YACpB,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;SACxC,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,UAAU,CAAC;IACvD,MAAM,QAAQ,GAAoC;QAChD,GAAG,IAAI;QACP,OAAO,EAAE,kBAAkB;QAC3B,SAAS;KACV,CAAC;IACF,OAAO,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAsC;IACrE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;4DAC4D;AAC5D,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC5D,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxE,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,UAAU;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,eAAe,CAAE,KAAiC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAqB,EAAE,KAAe;IACxE,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAe,EACf,UAAyB,EACzB,gBAAgB,GAAY,IAAI,EAChC,aAAa,GAAY,IAAI;IAE7B,4CAA4C;IAC5C,KAAK,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACvE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO;YAAE,SAAS,CAAC,0CAA0C;QAElE,wBAAwB;QACxB,IAAI,gBAAgB,IAAI,SAAS,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;QACvD,CAAC;QAED,gEAAgE;QAChE,8DAA8D;QAC9D,kEAAkE;QAClE,uEAAuE;QACvE,qEAAqE;QACrE,qCAAqC;QACrC,IACE,SAAS,CAAC,aAAa;YACvB,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ;YACzB,CAAC,wBAAwB,CAAC,SAAS,CAAC,kBAAkB,CAAC,EACvD,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACtD,CAAC;QAED,gCAAgC;QAChC,IAAI,aAAa,IAAI,SAAS,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;YAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,GAAG,YAAY,CAAC;YACjD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;gBACb,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,OAAO,CAAC,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QAC5C,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,aAAa,CAAC;QAChD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QAClC,IAAI,SAAS,CAAC,KAAK;YAAE,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;IACvD,CAAC;AACH,CAAC"}

package/dist/src/orgrt/cross-org.d.ts

@@ -1,4 +1,6 @@
 import { type OrgDaemon, type RunningOrg } from './daemon.js';
+/** `federation.allow_*` membership: absent list = unrestricted, '*' = any. */
+export declare function federationAllows(list: string[] | undefined, org: string): boolean;
 /**
  * Resolves an org_send `to` address ("role" for same-org, "org:role" for
  * cross-org) into its parts. Centralizes the one addressing rule that
@@ -25,11 +27,22 @@ export declare function mailBody(root: string, orgName: string, org: RunningOrg
  *  emitted the audit event) or the recipient can't take mail. */
 export declare function pushMessage(daemon: OrgDaemon, orgName: string, org: RunningOrg, toRole: string, from: string, subject: string, body: string, id: string): Promise<boolean>;
 /** Route a message. to = "role" (same org) or "org:role" (cross-org). Returns a receipt string. */
-export declare function deliver(daemon: OrgDaemon, fromOrg: string, fromRole: string, to: string, subject: string, body: string): Promise<string>;
+export declare function deliver(daemon: OrgDaemon, fromOrg: string, fromRole: string, to: string, subject: string, body: string, opts?: {
+    messageId?: string;
+}): Promise<string>;
+export interface ReceiveRemoteOpts {
+    /** The caller presented the OPERATOR credential: skip the broker sender
+     *  identity check and trust `fromQualified` as given (M3). */
+    operator?: boolean;
+    /** Origin message id (M3) — generated here when the sender sent none. */
+    messageId?: string;
+    /** M4: the sending daemon's project root (xdeliver body `fromRoot`). */
+    fromRoot?: string;
+}
 /** Inbound handler for cross-process delivery — called by the server's POST /api/xdeliver route
  *  when ANOTHER process's deliverRemote() reaches this daemon. Pushes straight into the target
  *  agent's mailbox; the agent picks it up on its own next turn (see Mailbox — never interrupts). */
-export declare function receiveRemote(daemon: OrgDaemon, toOrg: string, toRole: string, fromQualified: string, subject: string, body: string, fromCredential?: string): Promise<{
+export declare function receiveRemote(daemon: OrgDaemon, toOrg: string, toRole: string, fromQualified: string, subject: string, body: string, fromCredential?: string, opts?: ReceiveRemoteOpts): Promise<{
     ok: true;
     receipt: string;
 } | {

package/dist/src/orgrt/cross-org.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cross-org.d.ts","sourceRoot":"","sources":["../../../src/orgrt/cross-org.ts"],"names":[],"mappings":"AAOA,OAAO,EAAmB,KAAK,SAAS,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AA2D/E;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,MAAM,GACT;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAMtE;AAED;;;mEAGmE;AACnE,wBAAgB,QAAQ,CACtB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,UAAU,GAAG,SAAS,EAC3B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,GACT,MAAM,CAWR;AAED;;;;;iEAKiE;AACjE,wBAAsB,WAAW,CAC/B,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,OAAO,CAAC,CAgClB;AAED,mGAAmG;AACnG,wBAAsB,OAAO,CAC3B,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,CAqQjB;AA2JD;;oGAEoG;AACpG,wBAAsB,aAAa,CACjC,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAwKvE"}
+{"version":3,"file":"cross-org.d.ts","sourceRoot":"","sources":["../../../src/orgrt/cross-org.ts"],"names":[],"mappings":"AAOA,OAAO,EAAmB,KAAK,SAAS,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAS/E,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAGjF;AAsED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,MAAM,GACT;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAMtE;AAED;;;mEAGmE;AACnE,wBAAgB,QAAQ,CACtB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,UAAU,GAAG,SAAS,EAC3B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,GACT,MAAM,CAWR;AAED;;;;;iEAKiE;AACjE,wBAAsB,WAAW,CAC/B,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,OAAO,CAAC,CAoClB;AAUD,mGAAmG;AACnG,wBAAsB,OAAO,CAC3B,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,MAAM,CAAC,CA6RjB;AAwMD,MAAM,WAAW,iBAAiB;IAChC;kEAC8D;IAC9D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;oGAEoG;AACpG,wBAAsB,aAAa,CACjC,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,cAAc,CAAC,EAAE,MAAM,EACvB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CA6NvE"}

package/dist/src/orgrt/cross-org.js

@@ -1,14 +1,40 @@
 // packages/@monomind/cli/src/orgrt/cross-org.ts
 // Extracted from daemon.ts — message delivery, cross-org routing, remote delivery.
 import { timingSafeEqual } from 'node:crypto';
-import { mkdirSync, writeFileSync } from 'node:fs';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { checkResources, waitForCapacity } from '../utils/resource-governor.js';
-import { lookupOrg } from './broker.js';
+import { lookupOrg, normalizeRoot } from './broker.js';
 import { activeRoleCount } from './daemon.js';
+import { clearEndpointWait, deliverToEndpoint, findEndpointRole } from './endpoint-roles.js';
 import { scanMessage } from './fence.js';
-import { queueMessage } from './inbox.js';
+import { newMessageId, queueMessage } from './inbox.js';
+import { parseTraceLine } from './tool-providers.js';
 import { ORG_DIR } from './types.js';
+// ── M4 federation ───────────────────────────────────────────────────────
+/** `federation.allow_*` membership: absent list = unrestricted, '*' = any. */
+export function federationAllows(list, org) {
+    if (list === undefined)
+        return true;
+    return list.includes('*') || list.includes(org);
+}
+/** The org def for federation checks: the running def, else the one on disk. */
+function federationDef(daemon, org) {
+    const running = daemon.orgs.get(org);
+    if (running)
+        return running.def;
+    if (!daemon.hasOrgDef(org))
+        return undefined;
+    const path = join(daemon.root, ORG_DIR, `${org}.json`);
+    try {
+        if (!existsSync(path))
+            return undefined;
+        return JSON.parse(readFileSync(path, 'utf8'));
+    }
+    catch {
+        return undefined;
+    }
+}
 /** Bodies larger than this are digested to a .mail file (see mailBody). */
 const MAIL_BODY_MAX = 4096;
 /** How much of an oversized body stays inline in the digest. */
@@ -112,19 +138,49 @@ export async function pushMessage(daemon, orgName, org, toRole, from, subject, b
     const slot = org.roleSlots?.get(toRole);
     if (slot?.phase === 'draining') {
         slot.queuedDuringSwap.push(mail);
+        recordTrace(org, toRole, body);
+        clearEndpointWait(org, orgName, from);
         return true;
     }
     const agent = org.agents.get(toRole);
     if (!agent || agent.mailbox.isClosed)
         return false;
     agent.mailbox.push(mail);
+    recordTrace(org, toRole, body);
+    clearEndpointWait(org, orgName, from);
     return true;
 }
+/** M1: remember the chain trace of the latest traced message a role got. */
+function recordTrace(org, toRole, body) {
+    const trace = parseTraceLine(body);
+    if (!trace)
+        return;
+    if (!org.traces)
+        org.traces = new Map();
+    org.traces.set(toRole, trace);
+}
 /** Route a message. to = "role" (same org) or "org:role" (cross-org). Returns a receipt string. */
-export async function deliver(daemon, fromOrg, fromRole, to, subject, body) {
+export async function deliver(daemon, fromOrg, fromRole, to, subject, body, opts = {}) {
+    // M3: one id per logical message, stamped on every bus copy and queue entry.
+    const messageId = opts.messageId ?? newMessageId();
     const { cross, orgName: targetOrgName, role: targetRole, qualified: toQualified, } = resolveAddress(fromOrg, to);
     const targetOrg = daemon.orgs.get(targetOrgName);
     const src = daemon.orgs.get(fromOrg);
+    // M2: an endpoint role has no mailbox — POST to its endpoint instead.
+    const endpointRole = targetOrg ? findEndpointRole(targetOrg.def, targetRole) : undefined;
+    if (targetOrg && endpointRole) {
+        return deliverToEndpoint(daemon, {
+            orgName: targetOrgName,
+            org: targetOrg,
+            role: endpointRole,
+            from: cross ? `${fromOrg}:${fromRole}` : fromRole,
+            subject,
+            body,
+            messageId,
+            src,
+            eventTo: toQualified,
+        });
+    }
     // Lazy spawn: if the role is pending (not yet spawned), spawn it now.
     // ATOMIC GUARD: Check spawning Set to prevent duplicate spawns from concurrent messages
     const spawning = daemon.spawning.get(targetOrgName) ?? new Set();
@@ -155,6 +211,7 @@ export async function deliver(daemon, fromOrg, fromRole, to, subject, body) {
                 subject,
                 body,
                 ts: Date.now(),
+                messageId,
             });
             if (!queued) {
                 src?.bus.emit({
@@ -190,6 +247,7 @@ export async function deliver(daemon, fromOrg, fromRole, to, subject, body) {
                     subject,
                     body,
                     ts: Date.now(),
+                    messageId,
                 });
                 if (!queued) {
                     src?.bus.emit({
@@ -216,7 +274,7 @@ export async function deliver(daemon, fromOrg, fromRole, to, subject, body) {
     }
     if (!targetOrg?.agents.has(targetRole)) {
         if (cross && daemon.opts.crossProcess)
-            return deliverRemote(daemon, fromOrg, fromRole, targetOrgName, targetRole, toQualified, subject, body, src);
+            return deliverRemote(daemon, fromOrg, fromRole, targetOrgName, targetRole, toQualified, subject, body, src, messageId);
         // Queue + auto-wake: if the org definition exists locally but isn't running, spool the message and start it
         if (cross && daemon.hasOrgDef(targetOrgName)) {
             const queued = queueMessage(daemon.root, targetOrgName, {
@@ -225,6 +283,7 @@ export async function deliver(daemon, fromOrg, fromRole, to, subject, body) {
                 subject,
                 body,
                 ts: Date.now(),
+                messageId,
             });
             if (!queued) {
                 src?.bus.emit({
@@ -242,7 +301,7 @@ export async function deliver(daemon, fromOrg, fromRole, to, subject, body) {
                 to: toQualified,
                 subject,
                 msg: body,
-                data: { queued: true },
+                data: { queued: true, messageId },
             });
             daemon.autoWake(targetOrgName);
             return `queued for ${toQualified} (org starting)`;
@@ -258,6 +317,7 @@ export async function deliver(daemon, fromOrg, fromRole, to, subject, body) {
                 subject,
                 body,
                 ts: Date.now(),
+                messageId,
             });
             if (!queued) {
                 src?.bus.emit({
@@ -315,6 +375,7 @@ export async function deliver(daemon, fromOrg, fromRole, to, subject, body) {
             subject,
             body,
             ts: Date.now(),
+            messageId,
         });
         src?.bus.emit({
             type: 'audit',
@@ -334,6 +395,7 @@ export async function deliver(daemon, fromOrg, fromRole, to, subject, body) {
         subject,
         msg: body,
         parentId,
+        data: { messageId },
     };
     const emitted = src?.bus.emit({ type: cross ? 'xorg' : 'message', ...evt });
     if (cross && targetOrg !== src)
@@ -361,9 +423,26 @@ export async function deliver(daemon, fromOrg, fromRole, to, subject, body) {
     }
     return `delivered to ${toQualified}`;
 }
+/** M4: the sender's allow_to check for a cross-root delivery. Returns the
+ *  ERROR receipt when denied (and emits the audit event), else undefined. */
+function federationDenied(daemon, fromOrg, fromRole, targetOrgName, to, subject, src) {
+    const allowTo = (src?.def ?? federationDef(daemon, fromOrg))?.federation?.allow_to;
+    if (federationAllows(allowTo, targetOrgName))
+        return undefined;
+    const from = `${fromOrg}:${fromRole}`;
+    src?.bus.emit({
+        type: 'audit',
+        from: fromRole,
+        to,
+        reason: 'federation-denied',
+        msg: `federation: ${from} may not send to ${to} (${subject})`,
+        data: { direction: 'to', from, to },
+    });
+    return `ERROR: federation: ${from} may not send to ${to}`;
+}
 /** Cross-process leg of deliver(): ask the machine-local broker who hosts targetOrgName, then POST over HTTP.
  *  `to` here is always the fully-qualified "org:role" display form (resolveAddress already normalized it). */
-async function deliverRemote(daemon, fromOrg, fromRole, targetOrgName, targetRole, to, subject, body, src) {
+async function deliverRemote(daemon, fromOrg, fromRole, targetOrgName, targetRole, to, subject, body, src, messageId) {
     const remote = lookupOrg(targetOrgName, daemon.opts.brokerDir);
     if (!remote) {
         // No remote host either — queue + auto-wake if the org def exists locally
@@ -374,6 +453,7 @@ async function deliverRemote(daemon, fromOrg, fromRole, targetOrgName, targetRol
                 subject,
                 body,
                 ts: Date.now(),
+                messageId,
             });
             if (!queued) {
                 src?.bus.emit({
@@ -391,7 +471,7 @@ async function deliverRemote(daemon, fromOrg, fromRole, targetOrgName, targetRol
                 to,
                 subject,
                 msg: body,
-                data: { queued: true },
+                data: { queued: true, messageId },
             });
             daemon.autoWake(targetOrgName);
             return `queued for ${to} (org starting)`;
@@ -401,6 +481,10 @@ async function deliverRemote(daemon, fromOrg, fromRole, targetOrgName, targetRol
             const { lookupRemoteOrg, deliverRemote: sshDeliver } = await import('./remote.js');
             const remoteHost = lookupRemoteOrg(targetOrgName, daemon.root);
             if (remoteHost) {
+                // M4: another host is always another trust domain.
+                const denied = federationDenied(daemon, fromOrg, fromRole, targetOrgName, to, subject, src);
+                if (denied)
+                    return denied;
                 const result = await sshDeliver(targetOrgName, `${fromOrg}:${fromRole}`, subject, body, remoteHost);
                 if (result.ok) {
                     src?.bus.emit({
@@ -409,7 +493,7 @@ async function deliverRemote(daemon, fromOrg, fromRole, targetOrgName, targetRol
                         to,
                         subject,
                         msg: body,
-                        data: { remote: 'ssh', host: remoteHost.host },
+                        data: { remote: 'ssh', host: remoteHost.host, messageId },
                     });
                     return `delivered to ${to} via SSH (${remoteHost.host})`;
                 }
@@ -435,6 +519,13 @@ async function deliverRemote(daemon, fromOrg, fromRole, targetOrgName, targetRol
         });
         return `ERROR: unknown recipient "${to}" (no local org, no process on this machine, and no SSH remote configured for "${targetOrgName}")`;
     }
+    // M4: a target under a different project root is another trust domain —
+    // honour the sender's federation.allow_to. Same root is never restricted.
+    if (remote.root !== normalizeRoot(daemon.root)) {
+        const denied = federationDenied(daemon, fromOrg, fromRole, targetOrgName, to, subject, src);
+        if (denied)
+            return denied;
+    }
     try {
         // BUG 2 FIX: attach fromOrg's OWN registered credential as proof of
         // sender identity — separate from the `x-monomind-cred` header above,
@@ -452,16 +543,25 @@ async function deliverRemote(daemon, fromOrg, fromRole, targetOrgName, targetRol
                 fromOrg,
                 fromRole,
                 fromCredential: fromEntry?.credential,
+                fromRoot: normalizeRoot(daemon.root),
                 toOrg: targetOrgName,
                 toRole: targetRole,
                 subject,
                 body,
+                messageId,
             }),
             signal: AbortSignal.timeout(10_000),
         });
         const data = (await res.json().catch(() => ({})));
         if (res.ok && data.ok) {
-            src?.bus.emit({ type: 'xorg', from: `${fromOrg}:${fromRole}`, to, subject, msg: body });
+            src?.bus.emit({
+                type: 'xorg',
+                from: `${fromOrg}:${fromRole}`,
+                to,
+                subject,
+                msg: body,
+                data: { messageId },
+            });
             return data.receipt ?? `delivered to ${to} (remote)`;
         }
         src?.bus.emit({
@@ -498,20 +598,48 @@ function credentialMatches(supplied, expected) {
 /** Inbound handler for cross-process delivery — called by the server's POST /api/xdeliver route
  *  when ANOTHER process's deliverRemote() reaches this daemon. Pushes straight into the target
  *  agent's mailbox; the agent picks it up on its own next turn (see Mailbox — never interrupts). */
-export async function receiveRemote(daemon, toOrg, toRole, fromQualified, subject, body, fromCredential) {
+export async function receiveRemote(daemon, toOrg, toRole, fromQualified, subject, body, fromCredential, opts = {}) {
+    const messageId = opts.messageId ?? newMessageId();
     // BUG 2 FIX: the HTTP auth gate in server.ts only proves the caller knows a
     // credential this daemon accepts (the target org's, or the operator's) — it
     // says nothing about who the caller claims to be. Verify the claimed sender
     // actually owns the credential registered for it in the broker before
     // trusting anything else. Credentials are per-org, so a sibling org hosted
     // by the same daemon can't reuse its own to pass as `fromOrg`.
+    //
+    // M3: an OPERATOR-authenticated call (server.ts saw the operator credential)
+    // carries human authority and may speak as any sender — the org need not be
+    // registered (e.g. `workflow:<exec>` or an automation role's reply).
     const claimedFromOrg = fromQualified.split(':', 1)[0];
-    const fromEntry = lookupOrg(claimedFromOrg, daemon.opts.brokerDir);
-    if (!fromEntry?.credential || !credentialMatches(fromCredential, fromEntry.credential)) {
-        return {
-            ok: false,
-            error: `sender "${claimedFromOrg}" failed identity verification (unregistered or credential mismatch)`,
+    if (!opts.operator) {
+        const fromEntry = lookupOrg(claimedFromOrg, daemon.opts.brokerDir);
+        if (!fromEntry?.credential || !credentialMatches(fromCredential, fromEntry.credential)) {
+            return {
+                ok: false,
+                error: `sender "${claimedFromOrg}" failed identity verification (unregistered or credential mismatch)`,
+            };
+        }
+        // M4 federation (operator-authenticated calls are exempt).
+        const fromRoot = opts.fromRoot ? normalizeRoot(opts.fromRoot) : undefined;
+        const reject = (error) => {
+            daemon.orgs.get(toOrg)?.bus.emit({
+                type: 'audit',
+                from: toRole,
+                reason: 'federation-denied',
+                msg: `${error} (from ${fromQualified})`,
+                data: { direction: 'from', from: fromQualified, fromRoot: fromRoot ?? null },
+            });
+            return { ok: false, error };
         };
+        // A sender that states no root (an older daemon, a hand-rolled client)
+        // is not a mismatch — it is simply treated as another root below.
+        if (fromEntry.root && fromRoot !== undefined && fromRoot !== fromEntry.root)
+            return reject('federation: root mismatch');
+        if (fromRoot !== normalizeRoot(daemon.root)) {
+            const allowFrom = federationDef(daemon, toOrg)?.federation?.allow_from;
+            if (!federationAllows(allowFrom, claimedFromOrg))
+                return reject('federation: sender not allowed');
+        }
     }
     const org = daemon.orgs.get(toOrg);
     if (!org) {
@@ -523,6 +651,7 @@ export async function receiveRemote(daemon, toOrg, toRole, fromQualified, subjec
                 subject,
                 body,
                 ts: Date.now(),
+                messageId,
             });
             if (!queued) {
                 return {
@@ -535,6 +664,26 @@ export async function receiveRemote(daemon, toOrg, toRole, fromQualified, subjec
         }
         return { ok: false, error: `org "${toOrg}" not hosted here` };
     }
+    // M2: an endpoint role has no mailbox — POST to its endpoint instead.
+    const endpointRole = findEndpointRole(org.def, toRole);
+    if (endpointRole) {
+        const from = fromQualified.startsWith(`${toOrg}:`)
+            ? fromQualified.slice(toOrg.length + 1)
+            : fromQualified;
+        const receipt = await deliverToEndpoint(daemon, {
+            orgName: toOrg,
+            org,
+            role: endpointRole,
+            from,
+            subject,
+            body,
+            messageId,
+            eventTo: `${toOrg}:${toRole}`,
+        });
+        return receipt.startsWith('ERROR:')
+            ? { ok: false, error: receipt.slice('ERROR: '.length) }
+            : { ok: true, receipt };
+    }
     // Lazy-spawn pending roles on cross-process delivery (matches deliver/answerQuestion)
     // ATOMIC GUARD: Check spawning Set to prevent duplicate spawns from concurrent messages
     const spawning = daemon.spawning.get(toOrg) ?? new Set();
@@ -561,6 +710,7 @@ export async function receiveRemote(daemon, toOrg, toRole, fromQualified, subjec
                 subject,
                 body,
                 ts: Date.now(),
+                messageId,
             });
             if (!queued) {
                 return {
@@ -592,6 +742,7 @@ export async function receiveRemote(daemon, toOrg, toRole, fromQualified, subjec
                 subject,
                 body,
                 ts: Date.now(),
+                messageId,
             });
             if (!queued) {
                 return {
@@ -624,6 +775,7 @@ export async function receiveRemote(daemon, toOrg, toRole, fromQualified, subjec
             subject,
             body,
             ts: Date.now(),
+            messageId,
         });
         if (!queued) {
             return {
@@ -652,6 +804,7 @@ export async function receiveRemote(daemon, toOrg, toRole, fromQualified, subjec
         to: `${toOrg}:${toRole}`,
         subject,
         msg: body,
+        data: { messageId },
     });
     agent.lastMessageId = messageEvent.id; // Track last message ID for response threading
     const pushed = await pushMessage(daemon, toOrg, org, toRole, fromQualified, subject, body, messageEvent.id);