@real-life/trust-protocol 0.4.0 → 0.5.0

package/dist/adapters/vti-mediator.js.map

@@ -1 +1 @@
-{"version":3,"file":"vti-mediator.js","sourceRoot":"","sources":["../../src/adapters/vti-mediator.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,4EAA4E;AAC5E,EAAE;AACF,4EAA4E;AAC5E,8DAA8D;AAC9D,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AACxE,yEAAyE;AACzE,EAAE;AACF,qEAAqE;AACrE,kDAAkD;AAClD,0DAA0D;AAC1D,EAAE;AACF,kCAAkC;AAClC,6DAA6D;AAC7D,oEAAoE;AACpE,mDAAmD;AACnD,qEAAqE;AACrE,mEAAmE;AACnE,8DAA8D;AAC9D,uDAAuD;AACvD,gEAAgE;AAChE,oCAAoC;AAEpC,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAA;AAChC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAKhF,uEAAuE;AACvE,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,eAAe,EAAE,EAAE,GAAG,SAAS;IAC/B,eAAe,EAAE,MAAM;IACvB,eAAe,EAAE,EAAE;IACnB,eAAe,EAAE,SAAS;IAC1B,aAAa,EAAE,UAAU;IACzB,iBAAiB,EAAE,EAAE,GAAG,UAAU;CAC1B,CAAA;AAMV,MAAM,OAAO,SAAU,SAAQ,KAAK;IAClC,IAAI,CAAe;IACnB,YAAa,IAAmB,EAAE,OAAgB;QAChD,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAA;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;CACF;AAwBD,uEAAuE;AACvE,gEAAgE;AAChE,MAAM,sBAAsB,GAAqC,IAAI,GAAG,CAAsB;IAC5F,kBAAkB,EAAE,iBAAiB,EAAE,eAAe;IACtD,cAAc,EAAE,gBAAgB,EAAE,kBAAkB;CACrD,CAAC,CAAA;AASF;6EAC6E;AAC7E,MAAM,UAAU,gBAAgB,CAAE,MAAc,EAAE,EAAmB;IACnE,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,KAAK,oBAAoB,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAA;QAC7F,KAAK,UAAU,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;QACtD,KAAK,WAAW,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAA;QACvE,KAAK,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,KAAK,sBAAsB;YACxD,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;YAC7E,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAA;IACrD,CAAC;AACH,CAAC;AAuBD,MAAM,GAAG,GAAG,CAAC,CAAa,EAAU,EAAE,CACpC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAEhE,kDAAkD;AAClD,MAAM,GAAG,GAAG,MAAM,CAAC,+BAA+B,CAAC,CAAA;AAEnD,wEAAwE;AACxE,MAAM,OAAO,sBAAsB;IACjC,mEAAmE;IACnE,kEAAkE;IAClE,0CAA0C;IAC1C,UAAU,CAAQ;IAClB,cAAc,CAAQ;IACtB,UAAU,CAAQ;IAClB,IAAI,SAAS,KAAc,OAAO,IAAI,CAAC,UAAU,CAAA,CAAC,CAAC;IACnD,IAAI,aAAa,KAAc,OAAO,IAAI,CAAC,cAAc,CAAA,CAAC,CAAC;IAC3D,IAAI,SAAS,KAAc,OAAO,IAAI,CAAC,UAAU,CAAA,CAAC,CAAC;IACnD,KAAK,CAAc;IACnB,OAAO,GAAoB,IAAI,CAAA;IAC/B,MAAM,GAAG,MAAM,CAAC,iBAAiB,CAAA;IACjC,OAAO,GAAG,KAAK,CAAA;IAEf,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAA;IACrC,SAAS,GAAG,IAAI,GAAG,EAAiB,CAAA;IACpC,OAAO,GAAG,CAAC,CAAA;IAEX,aAAa,GAAoB,IAAI,CAAA;IACrC,cAAc,GAAG,KAAK,CAAA;IACtB,eAAe,GAAG,KAAK,CAAA;IAEvB,MAAM,GAAoB,EAAE,CAAA;IAC5B,WAAW,GAAG,CAAC,CAAA;IACf,aAAa,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,YAAY,GAAG,IAAI,GAAG,EAAsC,CAAA;IAC5D,iBAAiB,GAAG,CAAC,CAAA;IACrB,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAA;IACtC,YAAY,GAAG,IAAI,GAAG,EAAU,CAAA;IAChC,WAAW,GAAG,IAAI,GAAG,EAAU,CAAA,CAAG,0CAA0C;IAC5E,SAAS,GAAG,KAAK,CAAA;IACjB,UAAU,GAAG,CAAC,CAAA;IAEd,YAAY,GAA2C,EAAE,CAAA;IAEzD;;;;kDAI8C;IAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,OAAmB,EAAE,OAAe,EAAE,KAAiB,EACvD,IAAkB,EAAE,QAAmB,EAAE,UAAmB;QAE5D,iEAAiE;QACjE,gEAAgE;QAChE,qCAAqC;QACrC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAA;QACnC,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;QAC/B,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;QACzD,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,CAAC,CAAA;QAC7E,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAA;QACrE,OAAO,IAAI,sBAAsB,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAA;IACnG,CAAC;IAED,YACE,GAAW,EACX,SAA2B,EAC3B,UAAiC,EACjC,MAA6B,EAC7B,IAAkB,EAClB,QAAmB,EACnB,UAAmB;QAEnB,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;QAChH,CAAC;QACD,IAAI,UAAU,CAAC,KAAK,KAAK,YAAY,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;QAChE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QACxE,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAA;QACpG,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC,SAAS,CAAA;QACrC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,CAAA;QACpC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,GAAG,CAAA;QAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACjB,IAAI,QAAQ,EAAE,CAAC;YACb,gEAAgE;YAChE,8DAA8D;YAC9D,gEAAgE;YAChE,qDAAqD;YACrD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;YAC7E,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YACrB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YACzC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;YAC/D,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBACnB,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAA;gBAClG,CAAC;YACH,CAAC;YACD,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC1D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,UAAU,EAAE,CAAC;oBAC9D,0DAA0D;oBAC1D,+CAA+C;oBAC/C,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;gBACvF,CAAC;gBACD,6DAA6D;gBAC7D,6DAA6D;gBAC7D,wDAAwD;gBACxD,sDAAsD;gBACtD,IAAI,UAAU,GAAG,WAAW,IAAI,QAAQ,CAAC,iBAAiB;oBAAE,SAAQ;gBACpE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;gBACzC,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;oBAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAC1D,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACjC,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAM;YACxB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,CAAA;YACzB,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;YACrC,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAM;YACxB,wDAAwD;YACxD,0DAA0D;YAC1D,+DAA+D;YAC/D,8DAA8D;YAC9D,mCAAmC;YACnC,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAChD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;oBAC7B,IAAI,CAAC,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC,iBAAiB,EAAE,CAAC;oBAC3D,mDAAmD;oBACnD,yDAAyD;oBACzD,uDAAuD;oBACvD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;oBAC9B,OAAM;gBACR,CAAC;gBACD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;gBAC/B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACnC,CAAC;YACD,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAM;YAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE;gBAAE,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;oBAAE,OAAM;YAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAA;YACtD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,eAAe;gBAC9D,IAAI,GAAG,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,eAAe,CAAA;YACjD,MAAM,QAAQ,GAAG,IAAI,GAAG,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,aAAa,CAAA;YAC9D,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ;gBAAE,OAAM;YACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;YACpC,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,MAAM,CAAA;YAChC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACjC,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,CAAE,GAAW;QACf,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QAC7D,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAA;QACxC,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAED,KAAK,KAAY,IAAI,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA,CAAC,CAAC;IAEjF,MAAM,CAAE,CAAgB;QACtB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC3B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACrB,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAChD,CAAC;IAED,mEAAmE;IACnE,kEAAkE;IAClE,gEAAgE;IAChE,iEAAiE;IACjE,QAAQ,GAA2B,IAAI,CAAA;IAEvC,WAAW,CAAE,GAAW;QACtB,IAAI,IAAI,CAAC,OAAO,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QACxG,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAA;QACvC,MAAM,GAAG,GAAG,CAAC,KAAK,IAAqB,EAAE;YACvC,IAAI,IAAI,CAAC,OAAO,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBACxD,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;oBACrE,IAAI,IAAI,CAAC,OAAO;wBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAA,CAAG,mCAAmC;oBAClF,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA;oBACxB,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAA;gBACjC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IAAI,IAAI,CAAC,OAAO;wBAAE,MAAM,CAAC,CAAA;oBACzB,gEAAgE;oBAChE,kEAAkE;oBAClE,IAAI,CAAC,YAAY,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC;wBAAE,MAAM,CAAC,CAAA;oBACnG,mEAAmE;oBACnE,yDAAyD;oBACzD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;gBACrB,CAAC;YACH,CAAC;YACD,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YACpF,IAAI,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAA,CAAG,kDAAkD;YACjG,IAAI,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAA;YAChG,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAA;QACjC,CAAC,CAAC,EAAE,CAAA;QACJ,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA,CAAC,CAAC,CAAC,CAAA;QAC3D,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAED,mEAAmE;IACnE;;+BAE2B;IAC3B,QAAQ,CAAE,KAAe,EAAE,MAAc;QACvC,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC7B,IAAI,CAAC,aAAa,GAAG,CAAC,GAAG,KAAK,CAAC,CAAA;QAC/B,IAAI,CAAC,cAAc,GAAG,KAAK,CAAA;QAC3B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAA;IAC7B,CAAC;IAED,IAAI,aAAa;QACf,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,OAAO,IAAI,CAAC,cAAc,CAAA;IAC5B,CAAC;IAED,iBAAiB,CAAE,GAAW;QAC5B,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI;YAAE,OAAM;QACtF,IAAI,CAAC,eAAe,GAAG,IAAI,CAAA;QAC3B,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAA;QACtC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE;YACtB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;gBACzC,IAAI,IAAI,CAAC,OAAO;oBAAE,OAAM;gBACxB,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;gBAC7C,kDAAkD;gBAClD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI;oBAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAA;gBAC5B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,mCAAmC;YACrC,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,eAAe,GAAG,KAAK,CAAA;YAC9B,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,CAAA;IACP,CAAC;IAED,mEAAmE;IACnE;;qEAEiE;IACjE,MAAM,CAAE,aAAyB,EAAE,MAAc;QAC/C,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC7B,MAAM,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;QAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,IAAI,CAAA;QACpD,MAAM,GAAG,GAAe;YACtB,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE;YAC5B,WAAW,EAAE,GAAG;YAChB,gBAAgB,EAAE,IAAI;YACtB,QAAQ,EAAE,IAAI;YACd,EAAE,EAAE,IAAI;SACT,CAAA;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QACvB,IAAI,CAAC,YAAY;YAAE,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QAC/C,OAAO,EAAE,CAAA;IACX,CAAC;IAED;;uCAEmC;IACnC,cAAc,CAAE,QAA+C,EAAE,MAAc;QAC7E,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,IAAI,OAAO,QAAQ,EAAE,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;QAC5H,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QAC1F,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAE,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAA;QACtD,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAA;IAClD,CAAC;IAED;;yEAEqE;IACrE,MAAM,CAAE,EAAU;QAChB,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC1B,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,MAAM,CAAA;QACzC,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;QACpG,OAAO,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACrC,CAAC;IAED,GAAG,CAAE,EAAU;QACb,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC3B,CAAC;IAED,aAAa,CAAE,GAAe,EAAE,GAAW;QACzC,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI;YAAE,OAAM;QACzC,GAAG,CAAC,gBAAgB,GAAG,GAAG,CAAA;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAA,CAAC,CAAC,CAAC,CAAC,CAAA;IACrF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAE,GAAe,EAAE,GAAW;QAC1C,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,oBAAoB;YAAE,OAAM;QACpE,IAAI,IAAqB,CAAA;QACzB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;YACzC,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAM,CAAG,kEAAkE;YAC7F,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;YAC3D,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAA;YACnB,IAAI,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;QAC9B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,GAAkB,CAAC,YAAY,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAA;YAC3E,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAA;YACnB,IAAI,GAAG,IAAI,KAAK,UAAU;gBACxB,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE;gBACzC,CAAC,CAAC;oBACE,KAAK,EAAE,oBAAoB;oBAC3B,MAAM,EAAE,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,2BAA2B;iBACvF,CAAA;QACP,CAAC;QACD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAM;QACxB,8DAA8D;QAC9D,+DAA+D;QAC/D,6DAA6D;QAC7D,gEAAgE;QAChE,yBAAyB;QACzB,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,oBAAoB;YAAE,GAAG,CAAC,EAAE,GAAG,IAAI,CAAA;IAC7E,CAAC;IAED;;;;0DAIsD;IACtD,KAAK,CAAC,MAAM;QACV,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC;YAAE,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;IACxE,CAAC;IAED;;;;;;;;;;;+DAW2D;IAC3D,MAAM,CAAE,EAAU;QAChB,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9B,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,oBAAoB;YAAE,OAAO,GAAG,CAAC,EAAE,CAAA;QAC3E,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC;YACpC,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;QAC3D,CAAC;QACD,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI;YAC7B,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,gBAAgB,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;YACnE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAA;QACzE,CAAC;QACD,OAAO,GAAG,CAAC,EAAE,CAAA;IACf,CAAC;IAED,YAAY,CAAE,EAAU;QACtB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAM;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9B,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,IAAI,GAAG,CAAC,EAAE,EAAE,KAAK,KAAK,WAAW;YAAE,OAAM,CAAG,4DAA4D;QACxG,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,EAAE,KAAK,KAAK,QAAQ,CAAA;QACvC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;QACrC,IAAI,IAAI;YAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAA;IAC3D,CAAC;IAED;;;;;iEAK6D;IAC7D,eAAe,CAAE,EAAU,EAAE,IAAyB;QACpD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAM;QACxB,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAA;QACvG,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9B,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,2DAA2D;QAC3D,6DAA6D;QAC7D,6DAA6D;QAC7D,uDAAuD;QACvD,0DAA0D;QAC1D,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,oBAAoB,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,UAAU;YAAE,OAAM;QACnG,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAA;IACpE,CAAC;IAED,gBAAgB;QACd,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC;IAED,mEAAmE;IACnE,OAAO,CAAE,MAAc;QACrB,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACjB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACnC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,WAAW,CAAA;QAC1C,IAAI,CAAC,WAAW,GAAG,CAAC,CAAA;QACpB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAA;QAC1B,MAAM,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAA;QAClC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACpE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;IACpD,CAAC;IAED,QAAQ,CAAE,UAA0B,EAAE,MAAc;QAClD,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAChD,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QACvC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YAChC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAA;YAC3C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;YACtC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACrC,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IAED,QAAQ;QACN,OAAO;YACL,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAC3F,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;SAChC,CAAA;IACH,CAAC;IAED,WAAW,CAAE,GAAW;QACtB,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC;YAAE,OAAM;QAC1D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;QACrB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YAC3D,IAAI,CAAC,SAAS,GAAG,KAAK,CAAA;YACtB,+DAA+D;YAC/D,+DAA+D;YAC/D,0DAA0D;YAC1D,WAAW;YACX,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;wBAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBAAC,MAAK;oBAAC,CAAC;gBACjE,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC,CAAA;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAE,GAAW,EAAE,GAAa;QAC1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;YACzC,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAM;YACxB,2DAA2D;YAC3D,8DAA8D;YAC9D,6DAA6D;YAC7D,+DAA+D;YAC/D,qDAAqD;YACrD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;gBAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;gBAClC,OAAO,EAAE,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,QAAQ,CAAC,iBAAiB,CAAA;YAC1E,CAAC,CAAC,CAAA;YACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAM;YAC7B,KAAK,MAAM,EAAE,IAAI,IAAI;gBAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC/C,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;gBACzC,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,KAAK,MAAM,EAAE,IAAI,IAAI;wBAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACxE,CAAC;oBAAS,CAAC;gBACT,KAAK,MAAM,EAAE,IAAI,IAAI;oBAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;gBAClD,2DAA2D;gBAC3D,uDAAuD;gBACvD,wDAAwD;gBACxD,4DAA4D;gBAC5D,kDAAkD;gBAClD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBAClB,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;wBACtB,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;wBAClC,IAAI,EAAE,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,QAAQ,CAAC,iBAAiB,EAAE,CAAC;4BACvE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;4BAC1B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;wBAC9B,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yDAAyD;QAC3D,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,OAAO,CAAE,MAAc;QACrB,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,oBAAoB,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,UAAU,CAAA;YACpG,IAAI,CAAC,IAAI;gBAAE,SAAQ;YACnB,IAAI,GAAG,GAAG,GAAG,CAAC,WAAW,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;gBACtD,yDAAyD;gBACzD,8DAA8D;gBAC9D,2BAA2B;gBAC3B,2DAA2D;gBAC3D,4DAA4D;gBAC5D,6DAA6D;gBAC7D,6DAA6D;gBAC7D,iDAAiD;gBACjD,GAAG,CAAC,EAAE,GAAG;oBACP,KAAK,EAAE,QAAQ;oBACf,MAAM,EAAE,GAAG,CAAC,QAAQ,KAAK,mBAAmB,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI;wBACzE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,IAAI;wBACjC,CAAC,CAAC,YAAY;wBACd,CAAC,CAAC,2BAA2B;iBAChC,CAAA;gBACD,SAAQ;YACV,CAAC;YACD,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,UAAU;gBAAE,SAAQ;YAC5D,+DAA+D;YAC/D,4DAA4D;YAC5D,2CAA2C;YAC3C,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,IAAI;gBAAE,SAAQ;YAC7C,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI;gBAAE,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACjE,CAAC;QACD,+DAA+D;QAC/D,gEAAgE;QAChE,+DAA+D;QAC/D,6DAA6D;QAC7D,gDAAgD;QAChD,KAAK,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3C,IAAI,GAAG,GAAG,EAAE,IAAI,QAAQ,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5E,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;gBAC9B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YAClC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IAED;;;;mBAIe;IACf,KAAK,KAAY,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA,CAAC,CAAC;IAEtC,IAAI,MAAM,KAAe,OAAO,IAAI,CAAC,OAAO,CAAA,CAAC,CAAC;CAC/C;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAAE,KAAiB,EAAmB,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA","sourcesContent":["// RLTP transport adapter: VTI mediator — published as\n// @real-life/trust-protocol/adapters/vti-mediator (lib Stage 2, note §4.6).\n//\n// Its reports reach the holder as the ports' DeliveryReport: submitOutbound\n// files an Outbound under its document digest and returns the\n// SubmissionRef (submission id ↔ digest); report(id) maps the adapter's\n// SubmissionState onto DeliveryReport (deliveryReportOf), which the app\n// hands to holder.report(). An adapter's `delivered` is its claim about\n// transport; the holder's receive core verifies the delivery-ack itself.\n//\n// Profile: spec/adapter-vti-mediator.md v0.23 (twenty-third casting;\n// round journals under design/adapter-review*). A\n// transport adapter contract — NOT a carrier at the port.\n//\n// Structural rules (reviews 3+4):\n//   · No port operation ever awaits the mediator — including\n//     register: keylist synchronization is a recorded intent with a\n//     tracked background task, retried by advance.\n//   · No report is invented, and absence is ABSENT: before the first\n//     honest report exists, status() returns null (§6.1 grants the\n//     window; representing it as a queryable fourth value was\n//     review-4 B2). has() distinguishes an unknown id.\n//   · A retired instance mutates nothing and refuses everything\n//     except reading its ack state.\n\nimport { jcs } from '../core.js'\nimport { sha } from '../crypto.js'\nimport { carrierPrincipal, carrierScopedIdentity } from '../carrier-identity.js'\nimport type { CarrierPrincipal, CarrierScopedIdentity } from '../carrier-identity.js'\nimport type { DeliveryReport, Outbound, ReceiverRefusalCode, SubmissionRef } from '../ports.js'\nexport type { ReceiverRefusalCode } from '../ports.js'\n\n// ── Declared constants (profile §2) — promises of THIS casting ──────\nexport const DECLARED = {\n  giveUpHorizonMs: 72 * 3_600_000,\n  statusHorizonMs: 60_000,\n  queueFloorCount: 64,\n  queueFloorBytes: 1_048_576,\n  maxQueueBytes: 16_777_216,\n  duplicateWindowMs: 30 * 86_400_000,\n} as const\n\n// ── The injected wire ────────────────────────────────────────────────\nexport type WireErrorKind =\n  | 'unreachable' | 'refused-retriable' | 'refused-admission' | 'oversize'\n\nexport class WireError extends Error {\n  kind: WireErrorKind\n  constructor (kind: WireErrorKind, message?: string) {\n    super(message ?? kind)\n    this.kind = kind\n  }\n}\n\nexport interface MediatorWire {\n  authChallenge (did: string): Promise<{ challenge: string, sessionId: string }>\n  authenticate (answer: { did: string, challenge: string, sessionId: string }): Promise<TokenSet>\n  // A transient failure MUST be a WireError 'unreachable' or\n  // 'refused-retriable' (the tokens are kept); any other error means the\n  // mediator refused the refresh token (the adapter re-runs the handshake).\n  refresh (refreshToken: string): Promise<TokenSet>\n  keylistUpdate (accessToken: string, rkids: string[]): Promise<void>\n  deposit (accessToken: string, bytes: Uint8Array, egressDid: string): Promise<void>\n  ackReceived (accessToken: string, queueIds: string[]): Promise<void>\n  onDeliver (cb: (bytes: Uint8Array) => Promise<void>): void\n  /** Optional truthful connectivity signal; absent means unknown. */\n  offline? (): boolean\n}\n\nexport interface TokenSet {\n  accessToken: string\n  accessExpiresAt: number\n  refreshToken: string\n  refreshExpiresAt: number\n}\n\n// ── Sender states (§6.1 — the closed sets, nothing else) ────────────\n// ReceiverRefusalCode is the ports' (one closed set, one place)\nconst RECEIVER_REFUSAL_CODES: ReadonlySet<ReceiverRefusalCode> = new Set<ReceiverRefusalCode>([\n  'malformedRequest', 'unsupportedType', 'proofRequired',\n  'proofInvalid', 'wrongRecipient', 'identityMismatch',\n])\n\nexport type SubmissionState =\n  | { state: 'awaiting-transport', reason: 'offline' | 'transport-unreachable' | 'carrier-refused-retriable' }\n  | { state: 'accepted' }\n  | { state: 'delivered', late: boolean }\n  | { state: 'failed', reason: 'unroutable' | 'oversize' | 'expired-by-adapter-policy' }\n  | { state: 'failed', reason: 'rejected-by-receiver', code: ReceiverRefusalCode }\n\n/** The ports' DeliveryReport for a document `digest` in adapter state `st`\n *  (Delivery §6.1): one-to-one, `late` and the refusal code carried over. */\nexport function deliveryReportOf (digest: string, st: SubmissionState): DeliveryReport {\n  switch (st.state) {\n    case 'awaiting-transport': return { digest, status: 'awaiting-transport', reason: st.reason }\n    case 'accepted': return { digest, status: 'accepted' }\n    case 'delivered': return { digest, status: 'delivered', late: st.late }\n    case 'failed': return st.reason === 'rejected-by-receiver'\n      ? { digest, status: 'failed', reason: 'rejected-by-receiver', code: st.code }\n      : { digest, status: 'failed', reason: st.reason }\n  }\n}\n\nexport interface CollectedItem { bytes: Uint8Array, queueId: string }\nexport interface Collection { id: string, items: CollectedItem[] }\n\n/** Ack state for the host to persist (profile §4). Invariant: every\n *  pending id names a concluded entry; violations are refused at\n *  construction (fail-closed). */\nexport interface AckState {\n  concluded: Array<{ queueId: string, concludedAt: number }>\n  pending: string[]\n}\n\ninterface Submission {\n  /** the document digest, for submissions filed by submitOutbound */\n  digest?: string\n  bytes: Uint8Array\n  submittedAt: number\n  attemptStartedAt: number | null\n  lastKind: WireErrorKind | null\n  st: SubmissionState | null   // null = no honest report exists yet\n}\n\nconst hex = (b: Uint8Array): string =>\n  Array.from(b, (x) => x.toString(16).padStart(2, '0')).join('')\n\n// construction capability: only create() holds it\nconst KEY = Symbol('MediatorCarrierAdapter.create')\n\n// ── The adapter ──────────────────────────────────────────────────────\nexport class MediatorCarrierAdapter {\n  // JS-hard identity fields: TS `readonly` is a compile-time promise\n  // only, and §8 claims runtime unforgeability — so the values live\n  // in true privates behind getters (R8-B1)\n  #principal: string\n  #connectionDid: string\n  #egressDid: string\n  get principal (): string { return this.#principal }\n  get connectionDid (): string { return this.#connectionDid }\n  get egressDid (): string { return this.#egressDid }\n  #wire: MediatorWire\n  #tokens: TokenSet | null = null\n  #clock = Number.NEGATIVE_INFINITY\n  #closed = false\n\n  #subs = new Map<string, Submission>()\n  #inflight = new Set<Promise<void>>()\n  #nextId = 1\n\n  #desiredRkids: string[] | null = null\n  #keylistSynced = false\n  #keylistSyncing = false\n\n  #inbox: CollectedItem[] = []\n  #inboxBytes = 0\n  #inboxDigests = new Set<string>()\n  #outstanding = new Map<string, Map<string, CollectedItem>>()\n  #outstandingBytes = 0\n  #concluded = new Map<string, number>()\n  #pendingAcks = new Set<string>()\n  #flightAcks = new Set<string>()   // ids inside the in-flight flush snapshot\n  #flushing = false\n  #nextColId = 1\n\n  #transitions: Array<{ id: string, to: 'delivered' }> = []\n\n  /** The only way to build an adapter: the trio is DERIVED here from\n   *  one root, one carrier, one nonce — so principal, connection DID\n   *  and egress identity cannot come from different relationships\n   *  (R7-B2: the coupling is enforced by construction, not by\n   *  inspecting caller-supplied identities). */\n  static async create (\n    rootIkm: Uint8Array, carrier: string, nonce: Uint8Array,\n    wire: MediatorWire, restored?: AckState, restoredAt?: number,\n  ): Promise<MediatorCarrierAdapter> {\n    // ONE tuple, snapshotted at entry: a caller mutating its buffers\n    // between the three awaited derivations must not be able to mix\n    // identities from two tuples (R8-B2)\n    const ikm = new Uint8Array(rootIkm)\n    const n = new Uint8Array(nonce)\n    const principal = await carrierPrincipal(ikm, carrier, n)\n    const connection = await carrierScopedIdentity(ikm, carrier, n, 'connection')\n    const egress = await carrierScopedIdentity(ikm, carrier, n, 'egress')\n    return new MediatorCarrierAdapter(KEY, principal, connection, egress, wire, restored, restoredAt)\n  }\n\n  constructor (\n    key: symbol,\n    principal: CarrierPrincipal,\n    connection: CarrierScopedIdentity,\n    egress: CarrierScopedIdentity,\n    wire: MediatorWire,\n    restored?: AckState,\n    restoredAt?: number,\n  ) {\n    if (key !== KEY) {\n      throw new Error('use MediatorCarrierAdapter.create — the identity trio must be derived, not supplied (5a.10)')\n    }\n    if (connection.scope !== 'connection' || egress.scope !== 'egress') {\n      throw new Error('scoped identities passed in the wrong roles')\n    }\n    const three = new Set([principal.principal, connection.did, egress.did])\n    if (three.size !== 3) {\n      throw new Error('principal, connection DID and egress identity must be pairwise distinct (5a.10)')\n    }\n    this.#principal = principal.principal\n    this.#connectionDid = connection.did\n    this.#egressDid = egress.did\n    this.#wire = wire\n    if (restored) {\n      // The restore instant anchors the duplicate-window: an expired,\n      // debt-free entry is dropped HERE, not at the first advance —\n      // otherwise a redelivery arriving before any port call would be\n      // absorbed beyond the declared window (review-4 B4).\n      if (typeof restoredAt !== 'number' || !Number.isFinite(restoredAt)) {\n        throw new Error('restoring ack state requires a finite restoredAt instant')\n      }\n      this.#now(restoredAt)\n      const pending = new Set(restored.pending)\n      const known = new Set(restored.concluded.map((c) => c.queueId))\n      for (const id of pending) {\n        if (!known.has(id)) {\n          throw new Error('ack snapshot violates its invariant: pending intent without a concluded entry')\n        }\n      }\n      for (const { queueId, concludedAt } of restored.concluded) {\n        if (!Number.isFinite(concludedAt) || concludedAt > restoredAt) {\n          // a conclusion \"from the future\" would stretch the window\n          // past its declared span (R5-B4) — fail closed\n          throw new Error('ack snapshot: conclusion instant is non-finite or after restoredAt')\n        }\n        // the window beats everything (round-14 B): an expired entry\n        // falls at the restore instant, owed or not — a phantom debt\n        // from an ack that landed just before a close can never\n        // outlive the window and delete a fresh copy (R14-B2)\n        if (restoredAt - concludedAt >= DECLARED.duplicateWindowMs) continue\n        this.#concluded.set(queueId, concludedAt)\n        if (pending.has(queueId)) this.#pendingAcks.add(queueId)\n      }\n    }\n    this.#wire.onDeliver(async (raw) => {\n      if (this.#closed) return\n      const bytes = raw.slice()\n      const queueId = hex(await sha(bytes))\n      if (this.#closed) return\n      // Absorption is WINDOW-checked at the moment it happens\n      // (R11-B1), and the window beats everything (round-14 B):\n      // beyond it, entry AND any leftover intent fall, and the frame\n      // is a new item — so no acknowledgement, owed or phantom, can\n      // ever delete the only fresh copy.\n      const concludedAt = this.#concluded.get(queueId)\n      if (concludedAt !== undefined) {\n        if (this.#flightAcks.has(queueId) ||\n            this.#clock - concludedAt < DECLARED.duplicateWindowMs) {\n          // inside the window — or deferred: an id inside an\n          // in-flight flush keeps absorbing until that flush ends,\n          // because its irrecallable ack may still land (R15-B1)\n          this.#pendingAcks.add(queueId)\n          return\n        }\n        this.#concluded.delete(queueId)\n        this.#pendingAcks.delete(queueId)\n      }\n      if (this.#inboxDigests.has(queueId)) return\n      for (const col of this.#outstanding.values()) if (col.has(queueId)) return\n      const held = this.#inboxBytes + this.#outstandingBytes\n      const underFloor = this.#inbox.length < DECLARED.queueFloorCount &&\n        held + bytes.length <= DECLARED.queueFloorBytes\n      const underCap = held + bytes.length <= DECLARED.maxQueueBytes\n      if (!underFloor && !underCap) return\n      this.#inbox.push({ bytes, queueId })\n      this.#inboxBytes += bytes.length\n      this.#inboxDigests.add(queueId)\n    })\n  }\n\n  #now (raw: number): number {\n    if (!Number.isFinite(raw)) throw new Error('non-finite time')\n    if (raw > this.#clock) this.#clock = raw\n    return this.#clock\n  }\n\n  #open (): void { if (this.#closed) throw new Error('retired (5a.10 lifecycle)') }\n\n  #track (p: Promise<void>): void {\n    const t = p.catch(() => {})\n    this.#inflight.add(t)\n    void t.finally(() => this.#inflight.delete(t))\n  }\n\n  // ── auth: silent carrier policy ─────────────────────────────────\n  // Single-flight: concurrent callers share one handshake — the ATM\n  // challenge/response is a session, and two interleaved sessions\n  // under one connection DID would answer each other's challenges.\n  #authing: Promise<string> | null = null\n\n  #ensureAuth (now: number): Promise<string> {\n    if (this.#tokens && now < this.#tokens.accessExpiresAt) return Promise.resolve(this.#tokens.accessToken)\n    if (this.#authing) return this.#authing\n    const run = (async (): Promise<string> => {\n      if (this.#tokens && now < this.#tokens.refreshExpiresAt) {\n        try {\n          const refreshed = await this.#wire.refresh(this.#tokens.refreshToken)\n          if (this.#closed) throw new Error('retired')   // as on the handshake path (R6-B1)\n          this.#tokens = refreshed\n          return this.#tokens.accessToken\n        } catch (e) {\n          if (this.#closed) throw e\n          // a transient failure (mediator unreachable, retriable refusal)\n          // says nothing about the token: keep it for the next attempt (#9)\n          if (e instanceof WireError && (e.kind === 'unreachable' || e.kind === 'refused-retriable')) throw e\n          // a refused refresh (revoked before its expiry) is never replayed:\n          // drop the tokens and take the challenge handshake below\n          this.#tokens = null\n        }\n      }\n      const { challenge, sessionId } = await this.#wire.authChallenge(this.#connectionDid)\n      if (this.#closed) throw new Error('retired')   // nothing new starts, not even the answer (R6-B1)\n      this.#tokens = await this.#wire.authenticate({ did: this.#connectionDid, challenge, sessionId })\n      return this.#tokens.accessToken\n    })()\n    this.#authing = run.finally(() => { this.#authing = null })\n    return this.#authing\n  }\n\n  // ── transport registration (profile §3 — NOT §5a.3) ─────────────\n  /** Records the desired keylist and returns; synchronization runs\n   *  as a tracked background task and advance retries it until it\n   *  lands (review-4 B1). */\n  register (rkids: string[], rawNow: number): void {\n    this.#open()\n    const now = this.#now(rawNow)\n    this.#desiredRkids = [...rkids]\n    this.#keylistSynced = false\n    this.#startKeylistSync(now)\n  }\n\n  get keylistSynced (): boolean {\n    this.#open()\n    return this.#keylistSynced\n  }\n\n  #startKeylistSync (now: number): void {\n    if (this.#keylistSyncing || this.#keylistSynced || this.#desiredRkids === null) return\n    this.#keylistSyncing = true\n    const wanted = [...this.#desiredRkids]\n    this.#track((async () => {\n      try {\n        const token = await this.#ensureAuth(now)\n        if (this.#closed) return\n        await this.#wire.keylistUpdate(token, wanted)\n        // land only if the desire has not moved meanwhile\n        if (!this.#closed && this.#desiredRkids !== null &&\n            wanted.join(' ') === this.#desiredRkids.join(' ')) {\n          this.#keylistSynced = true\n        }\n      } catch {\n        // intent survives; advance retries\n      } finally {\n        this.#keylistSyncing = false\n      }\n    })())\n  }\n\n  // ── sender side ─────────────────────────────────────────────────\n  /** Returns the submission id synchronously. Before the first\n   *  honest report exists, status() returns null — §6.1's own\n   *  pre-report window, represented as absence, not as a value. */\n  submit (envelopeBytes: Uint8Array, rawNow: number): string {\n    this.#open()\n    const now = this.#now(rawNow)\n    const id = 's' + this.#nextId++\n    const knownOffline = this.#wire.offline?.() === true\n    const sub: Submission = {\n      bytes: envelopeBytes.slice(),\n      submittedAt: now,\n      attemptStartedAt: null,\n      lastKind: null,\n      st: null,\n    }\n    this.#subs.set(id, sub)\n    if (!knownOffline) this.#startAttempt(sub, now)\n    return id\n  }\n\n  /** Files an Outbound (its envelope as JCS bytes) and returns the\n   *  SubmissionRef the holder's reports are keyed by: submission id ↔\n   *  document digest (note §4.3). */\n  submitOutbound (outbound: Pick<Outbound, 'digest' | 'envelope'>, rawNow: number): SubmissionRef {\n    this.#open()\n    if (typeof outbound?.digest !== 'string' || outbound.digest === '') throw new Error('an outbound needs its document digest')\n    const submissionId = this.submit(new TextEncoder().encode(jcs(outbound.envelope)), rawNow)\n    this.#subs.get(submissionId)!.digest = outbound.digest\n    return { submissionId, digest: outbound.digest }\n  }\n\n  /** The current state as the ports' DeliveryReport for holder.report(),\n   *  or null while no honest report exists (and for an unknown id). A\n   *  submission filed without a digest (submit) has no report form. */\n  report (id: string): DeliveryReport | null {\n    const st = this.status(id)\n    if (st === null) return null\n    const digest = this.#subs.get(id)!.digest\n    if (digest === undefined) throw new Error('submitted without a document digest: use submitOutbound')\n    return deliveryReportOf(digest, st)\n  }\n\n  has (id: string): boolean {\n    this.#open()\n    return this.#subs.has(id)\n  }\n\n  #startAttempt (sub: Submission, now: number): void {\n    if (sub.attemptStartedAt !== null) return\n    sub.attemptStartedAt = now\n    this.#track(this.#trySend(sub, now).finally(() => { sub.attemptStartedAt = null }))\n  }\n\n  async #trySend (sub: Submission, now: number): Promise<void> {\n    if (sub.st !== null && sub.st.state !== 'awaiting-transport') return\n    let next: SubmissionState\n    try {\n      const token = await this.#ensureAuth(now)\n      if (this.#closed) return   // retirement between auth and deposit: nothing new starts (R5-B2)\n      await this.#wire.deposit(token, sub.bytes, this.#egressDid)\n      sub.lastKind = null\n      next = { state: 'accepted' }\n    } catch (e) {\n      const kind: WireErrorKind = e instanceof WireError ? e.kind : 'unreachable'\n      sub.lastKind = kind\n      next = kind === 'oversize'\n        ? { state: 'failed', reason: 'oversize' }\n        : {\n            state: 'awaiting-transport',\n            reason: kind === 'unreachable' ? 'transport-unreachable' : 'carrier-refused-retriable',\n          }\n    }\n    if (this.#closed) return\n    // An interim report (including a horizon-corrected one) never\n    // outranks the attempt's real outcome; only a TERMINAL state —\n    // a give-up, a refusal, a delivery — stands (R5-B1). Without\n    // this, an accepted deposit would stay reported unreachable and\n    // be sent a second time.\n    if (sub.st === null || sub.st.state === 'awaiting-transport') sub.st = next\n  }\n\n  /** Host teardown aid, NOT a port operation (profile §6): awaits\n   *  the in-flight background tasks so a host can drain before\n   *  persisting ackState. On a hanging wire it waits as long as the\n   *  wire does — a host bounds it externally (Promise.race) exactly\n   *  because this library holds no clock of its own. */\n  async settle (): Promise<void> {\n    while (this.#inflight.size > 0) await Promise.all([...this.#inflight])\n  }\n\n  /** The §6.1 report, or null while none exists yet (has()\n   *  distinguishes an unknown id). status is a PORT: after close it\n   *  refuses like every other port operation (R5-B3).\n   *\n   *  The pre-transport report is an HONEST SNAPSHOT, derived at the\n   *  moment of observation by one precedence order (Option B of the\n   *  round-14 halt) — never a stored patchwork:\n   *    (a) the wire knows itself offline      → offline\n   *    (b) an attempt is overdue              → transport-unreachable\n   *    (c) the last completed attempt's kind  → its report\n   *    (d) otherwise                          → no report yet (null)\n   *  Terminal states and `accepted` are stored and stand. */\n  status (id: string): SubmissionState | null {\n    this.#open()\n    const sub = this.#subs.get(id)\n    if (!sub) return null\n    if (sub.st !== null && sub.st.state !== 'awaiting-transport') return sub.st\n    if (this.#wire.offline?.() === true) {\n      return { state: 'awaiting-transport', reason: 'offline' }\n    }\n    if (sub.attemptStartedAt !== null &&\n        this.#clock - sub.attemptStartedAt >= DECLARED.statusHorizonMs) {\n      return { state: 'awaiting-transport', reason: 'transport-unreachable' }\n    }\n    return sub.st\n  }\n\n  acknowledged (id: string): void {\n    if (this.#closed) return\n    const sub = this.#subs.get(id)\n    if (!sub) return\n    if (sub.st?.state === 'delivered') return   // idempotent: a duplicate ack never rewrites `late` (R9-M4)\n    const late = sub.st?.state === 'failed'\n    sub.st = { state: 'delivered', late }\n    if (late) this.#transitions.push({ id, to: 'delivered' })\n  }\n\n  /** Refusals act on live submissions only (§6.1 knows exactly one\n   *  late correction — the valid ack). The code set is closed and\n   *  TERMINAL: retryable counterpart conditions (unavailable,\n   *  internalError) are transport outcomes, never receiver verdicts\n   *  — they have no entry here, and an unknown code is refused\n   *  fail-closed rather than minted into a verdict (R6-B2). */\n  receiverRefused (id: string, code: ReceiverRefusalCode): void {\n    if (this.#closed) return\n    if (!RECEIVER_REFUSAL_CODES.has(code)) {\n      throw new Error('not a terminal receiver refusal code — retryable conditions are transport outcomes')\n    }\n    const sub = this.#subs.get(id)\n    if (!sub) return\n    // A VALIDATED refusal is itself the proof of receipt — the\n    // mediator can have accepted and forwarded while our deposit\n    // promise is still unresolved, so the report-less phase is a\n    // legitimate moment for it (R9-B2, reversing the R8-B3\n    // overcorrection). Only terminal states stand against it.\n    if (sub.st !== null && sub.st.state !== 'awaiting-transport' && sub.st.state !== 'accepted') return\n    sub.st = { state: 'failed', reason: 'rejected-by-receiver', code }\n  }\n\n  drainTransitions (): Array<{ id: string, to: 'delivered' }> {\n    this.#open()\n    return this.#transitions.splice(0)\n  }\n\n  // ── receiver side ───────────────────────────────────────────────\n  collect (rawNow: number): Collection {\n    this.#open()\n    this.#now(rawNow)\n    if (this.#inbox.length === 0) return { id: 'c-empty', items: [] }\n    const items = this.#inbox.splice(0)\n    this.#outstandingBytes += this.#inboxBytes\n    this.#inboxBytes = 0\n    this.#inboxDigests.clear()\n    const id = 'c' + this.#nextColId++\n    this.#outstanding.set(id, new Map(items.map((i) => [i.queueId, i])))\n    return { id, items: items.map((i) => ({ ...i })) }\n  }\n\n  conclude (collection: { id: string }, rawNow: number): void {\n    this.#open()\n    const now = this.#now(rawNow)\n    const col = this.#outstanding.get(collection.id)\n    if (!col) return\n    this.#outstanding.delete(collection.id)\n    for (const item of col.values()) {\n      this.#outstandingBytes -= item.bytes.length\n      this.#concluded.set(item.queueId, now)\n      this.#pendingAcks.add(item.queueId)\n    }\n    this.#startFlush(now)\n  }\n\n  ackState (): AckState {\n    return {\n      concluded: [...this.#concluded].map(([queueId, concludedAt]) => ({ queueId, concludedAt })),\n      pending: [...this.#pendingAcks],\n    }\n  }\n\n  #startFlush (now: number): void {\n    if (this.#flushing || this.#pendingAcks.size === 0) return\n    this.#flushing = true\n    const snapshot = new Set(this.#pendingAcks)\n    this.#track(this.#flushAcks(now, [...snapshot]).finally(() => {\n      this.#flushing = false\n      // lost-wake-up guard (review-4 M6): intents that arrived while\n      // this flush ran get their own flush now — but only newcomers,\n      // so a failing wire waits for the next advance instead of\n      // spinning\n      if (!this.#closed) {\n        for (const id of this.#pendingAcks) {\n          if (!snapshot.has(id)) { this.#startFlush(this.#clock); break }\n        }\n      }\n    }))\n  }\n\n  async #flushAcks (now: number, ids: string[]): Promise<void> {\n    try {\n      const token = await this.#ensureAuth(now)\n      if (this.#closed) return\n      // Only NOW does anything become irrecallable (R16-B1): the\n      // stay of expiry begins at the wire call itself, never at the\n      // snapshot — a hanging auth extends no window. And \"live\" is\n      // WINDOW-live (R17-B1): an entry whose window already closed —\n      // even if no prune has swept it yet — is never sent.\n      const live = ids.filter((id) => {\n        const at = this.#concluded.get(id)\n        return at !== undefined && this.#clock - at < DECLARED.duplicateWindowMs\n      })\n      if (live.length === 0) return\n      for (const id of live) this.#flightAcks.add(id)\n      try {\n        await this.#wire.ackReceived(token, live)\n        if (!this.#closed) for (const id of live) this.#pendingAcks.delete(id)\n      } finally {\n        for (const id of live) this.#flightAcks.delete(id)\n        // deferred window sweep: entries whose window closed while\n        // the ack flew fall now — intent, entry and absorption\n        // together (R15-B1). Never on a retired instance: after\n        // close, ackState() is the host's final-persist surface and\n        // a late-returning wire mutates nothing (R17-B2).\n        if (!this.#closed) {\n          for (const id of live) {\n            const at = this.#concluded.get(id)\n            if (at !== undefined && this.#clock - at >= DECLARED.duplicateWindowMs) {\n              this.#concluded.delete(id)\n              this.#pendingAcks.delete(id)\n            }\n          }\n        }\n      }\n    } catch {\n      // intent survives; the next advance starts a fresh flush\n    }\n  }\n\n  // ── the adapter clock — never awaits the mediator ───────────────\n  advance (rawNow: number): void {\n    this.#open()\n    const now = this.#now(rawNow)\n    for (const sub of this.#subs.values()) {\n      const live = sub.st === null || sub.st.state === 'awaiting-transport' || sub.st.state === 'accepted'\n      if (!live) continue\n      if (now - sub.submittedAt >= DECLARED.giveUpHorizonMs) {\n        // unroutable only when the LAST COMPLETED attempt was an\n        // admission refusal and no attempt is in flight whose outcome\n        // is unknown (review-4 B3)\n        // the give-up verdict applies the SAME precedence as every\n        // observation (R17-B3): a wire that knows itself offline at\n        // the horizon outranks any stored refusal class — unroutable\n        // needs a completed admission refusal, no unknown outcome in\n        // flight, AND no offline signal standing over it\n        sub.st = {\n          state: 'failed',\n          reason: sub.lastKind === 'refused-admission' && sub.attemptStartedAt === null &&\n              this.#wire.offline?.() !== true\n            ? 'unroutable'\n            : 'expired-by-adapter-policy',\n        }\n        continue\n      }\n      if (sub.st !== null && sub.st.state === 'accepted') continue\n      // reports are DERIVED at observation (see status()); the clock\n      // only decides here whether to start an attempt — and never\n      // against a wire that knows itself offline\n      if (this.#wire.offline?.() === true) continue\n      if (sub.attemptStartedAt === null) this.#startAttempt(sub, now)\n    }\n    // THE WINDOW BEATS EVERYTHING (Option B of the round-14 halt):\n    // an ack intent is retried until the window closes; then intent\n    // and absorption fall together. There is no ageless debt whose\n    // truth the adapter would have to know — the receiver's §6.2\n    // absorption owns everything beyond the window.\n    for (const [digest, at] of this.#concluded) {\n      if (now - at >= DECLARED.duplicateWindowMs && !this.#flightAcks.has(digest)) {\n        this.#concluded.delete(digest)\n        this.#pendingAcks.delete(digest)\n      }\n    }\n    this.#startKeylistSync(now)\n    this.#startFlush(now)\n  }\n\n  /** §5a.10 lifecycle boundary: after close, every state port is\n   *  inert — port operations refuse, inbound reports (acknowledged,\n   *  receiverRefused) are no-ops, late wire resolutions mutate\n   *  nothing. Only ackState() stays readable for the host's final\n   *  persist. */\n  close (): void { this.#closed = true }\n\n  get closed (): boolean { return this.#closed }\n}\n\nexport const queueIdOf = async (bytes: Uint8Array): Promise<string> => hex(await sha(bytes))\n"]}
+{"version":3,"file":"vti-mediator.js","sourceRoot":"","sources":["../../src/adapters/vti-mediator.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,4EAA4E;AAC5E,EAAE;AACF,4EAA4E;AAC5E,8DAA8D;AAC9D,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AACxE,yEAAyE;AACzE,EAAE;AACF,qEAAqE;AACrE,kDAAkD;AAClD,0DAA0D;AAC1D,EAAE;AACF,2EAA2E;AAC3E,uEAAuE;AACvE,0EAA0E;AAC1E,oEAAoE;AACpE,oEAAoE;AACpE,8BAA8B;AAC9B,EAAE;AACF,kCAAkC;AAClC,6DAA6D;AAC7D,oEAAoE;AACpE,mDAAmD;AACnD,qEAAqE;AACrE,mEAAmE;AACnE,8DAA8D;AAC9D,uDAAuD;AACvD,gEAAgE;AAChE,oCAAoC;AAEpC,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAA;AAChC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAMhF,uEAAuE;AACvE,qEAAqE;AACrE,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;IACpC,eAAe,EAAE,EAAE,GAAG,SAAS;IAC/B,eAAe,EAAE,MAAM;IACvB,eAAe,EAAE,EAAE;IACnB,eAAe,EAAE,SAAS;IAC1B,aAAa,EAAE,UAAU;IACzB,iBAAiB,EAAE,EAAE,GAAG,UAAU;CAC1B,CAAC,CAAA;AAMX,MAAM,OAAO,SAAU,SAAQ,KAAK;IAClC,IAAI,CAAe;IACnB,YAAa,IAAmB,EAAE,OAAgB;QAChD,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAA;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;CACF;AAwBD,uEAAuE;AACvE,gEAAgE;AAChE,MAAM,sBAAsB,GAAqC,IAAI,GAAG,CAAsB;IAC5F,kBAAkB,EAAE,iBAAiB,EAAE,eAAe;IACtD,cAAc,EAAE,gBAAgB,EAAE,kBAAkB;CACrD,CAAC,CAAA;AASF;6EAC6E;AAC7E,MAAM,UAAU,gBAAgB,CAAE,MAAc,EAAE,EAAmB;IACnE,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,KAAK,oBAAoB,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAA;QAC7F,KAAK,UAAU,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;QACtD,KAAK,WAAW,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAA;QACvE,KAAK,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,KAAK,sBAAsB;YACxD,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;YAC7E,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAA;IACrD,CAAC;AACH,CAAC;AAED;;;;kCAIkC;AAClC,MAAM,UAAU,WAAW,CAAE,CAAgB;IAC3C,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,cAAc,CAAC,CAAA;AACrE,CAAC;AAED,oFAAoF;AACpF,MAAM,SAAS,GAAG,CAAC,CAAW,EAAY,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAA;AAuBrL,MAAM,GAAG,GAAG,CAAC,CAAa,EAAU,EAAE,CACpC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAEhE,kDAAkD;AAClD,MAAM,GAAG,GAAG,MAAM,CAAC,+BAA+B,CAAC,CAAA;AAEnD,wEAAwE;AACxE,MAAM,OAAO,sBAAsB;IACjC,mEAAmE;IACnE,kEAAkE;IAClE,0CAA0C;IAC1C,UAAU,CAAQ;IAClB,cAAc,CAAQ;IACtB,UAAU,CAAQ;IAClB,IAAI,SAAS,KAAc,OAAO,IAAI,CAAC,UAAU,CAAA,CAAC,CAAC;IACnD,IAAI,aAAa,KAAc,OAAO,IAAI,CAAC,cAAc,CAAA,CAAC,CAAC;IAC3D,IAAI,SAAS,KAAc,OAAO,IAAI,CAAC,UAAU,CAAA,CAAC,CAAC;IACnD,KAAK,CAAc;IACnB,OAAO,GAAoB,IAAI,CAAA;IAC/B,MAAM,GAAG,MAAM,CAAC,iBAAiB,CAAA;IACjC,OAAO,GAAG,KAAK,CAAA;IAEf,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAA;IACrC,SAAS,GAAG,IAAI,GAAG,EAAiB,CAAA;IACpC,OAAO,GAAG,CAAC,CAAA;IAEX,aAAa,GAAoB,IAAI,CAAA;IACrC,cAAc,GAAG,KAAK,CAAA;IACtB,eAAe,GAAG,KAAK,CAAA;IAEvB,MAAM,GAAoB,EAAE,CAAA;IAC5B,WAAW,GAAG,CAAC,CAAA;IACf,aAAa,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,YAAY,GAAG,IAAI,GAAG,EAAsC,CAAA;IAC5D,iBAAiB,GAAG,CAAC,CAAA;IACrB,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAA;IACtC,YAAY,GAAG,IAAI,GAAG,EAAU,CAAA;IAChC,WAAW,GAAG,IAAI,GAAG,EAAU,CAAA,CAAG,0CAA0C;IAC5E,SAAS,GAAG,KAAK,CAAA;IACjB,UAAU,GAAG,CAAC,CAAA;IAEd,YAAY,GAA2C,EAAE,CAAA;IAEzD;;;;kDAI8C;IAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,OAAmB,EAAE,OAAe,EAAE,KAAiB,EACvD,IAAkB,EAAE,QAAmB,EAAE,UAAmB;QAE5D,iEAAiE;QACjE,gEAAgE;QAChE,qCAAqC;QACrC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAA;QACnC,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;QAC/B,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;QACzD,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,CAAC,CAAA;QAC7E,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAA;QACrE,OAAO,IAAI,sBAAsB,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAA;IACnG,CAAC;IAED,YACE,GAAW,EACX,SAA2B,EAC3B,UAAiC,EACjC,MAA6B,EAC7B,IAAkB,EAClB,QAAmB,EACnB,UAAmB;QAEnB,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;QAChH,CAAC;QACD,IAAI,UAAU,CAAC,KAAK,KAAK,YAAY,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;QAChE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QACxE,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAA;QACpG,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC,SAAS,CAAA;QACrC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,CAAA;QACpC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,GAAG,CAAA;QAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACjB,IAAI,QAAQ,EAAE,CAAC;YACb,gEAAgE;YAChE,8DAA8D;YAC9D,gEAAgE;YAChE,qDAAqD;YACrD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;YAC7E,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YACrB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YACzC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;YAC/D,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBACnB,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAA;gBAClG,CAAC;YACH,CAAC;YACD,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC1D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,UAAU,EAAE,CAAC;oBAC9D,0DAA0D;oBAC1D,+CAA+C;oBAC/C,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;gBACvF,CAAC;gBACD,6DAA6D;gBAC7D,6DAA6D;gBAC7D,wDAAwD;gBACxD,sDAAsD;gBACtD,IAAI,UAAU,GAAG,WAAW,IAAI,QAAQ,CAAC,iBAAiB;oBAAE,SAAQ;gBACpE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;gBACzC,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;oBAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAC1D,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACjC,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAM;YACxB,sEAAsE;YACtE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAA;YACjC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;YACrC,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAM;YACxB,wDAAwD;YACxD,0DAA0D;YAC1D,+DAA+D;YAC/D,8DAA8D;YAC9D,mCAAmC;YACnC,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAChD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;oBAC7B,IAAI,CAAC,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC,iBAAiB,EAAE,CAAC;oBAC3D,mDAAmD;oBACnD,yDAAyD;oBACzD,uDAAuD;oBACvD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;oBAC9B,OAAM;gBACR,CAAC;gBACD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;gBAC/B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACnC,CAAC;YACD,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAM;YAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE;gBAAE,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;oBAAE,OAAM;YAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAA;YACtD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,eAAe;gBAC9D,IAAI,GAAG,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,eAAe,CAAA;YACjD,MAAM,QAAQ,GAAG,IAAI,GAAG,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,aAAa,CAAA;YAC9D,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ;gBAAE,OAAM;YACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;YACpC,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,MAAM,CAAA;YAChC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACjC,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,CAAE,GAAW;QACf,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QAC7D,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAA;QACxC,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAED,KAAK,KAAY,IAAI,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA,CAAC,CAAC;IAEjF,MAAM,CAAE,CAAgB;QACtB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC3B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACrB,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAChD,CAAC;IAED,mEAAmE;IACnE,kEAAkE;IAClE,gEAAgE;IAChE,iEAAiE;IACjE,QAAQ,GAA2B,IAAI,CAAA;IAEvC,WAAW,CAAE,GAAW;QACtB,IAAI,IAAI,CAAC,OAAO,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QACxG,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAA;QACvC,MAAM,GAAG,GAAG,CAAC,KAAK,IAAqB,EAAE;YACvC,IAAI,IAAI,CAAC,OAAO,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBACxD,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;oBACrE,IAAI,IAAI,CAAC,OAAO;wBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAA,CAAG,mCAAmC;oBAClF,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,CAAA;oBACnC,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAA;gBACjC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IAAI,IAAI,CAAC,OAAO;wBAAE,MAAM,CAAC,CAAA;oBACzB,gEAAgE;oBAChE,kEAAkE;oBAClE,IAAI,CAAC,YAAY,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC;wBAAE,MAAM,CAAC,CAAA;oBACnG,mEAAmE;oBACnE,yDAAyD;oBACzD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;gBACrB,CAAC;YACH,CAAC;YACD,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YACpF,IAAI,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAA,CAAG,kDAAkD;YACjG,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;YAC3G,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAA;QACjC,CAAC,CAAC,EAAE,CAAA;QACJ,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA,CAAC,CAAC,CAAC,CAAA;QAC3D,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAED,mEAAmE;IACnE;;+BAE2B;IAC3B,QAAQ,CAAE,KAAe,EAAE,MAAc;QACvC,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC7B,IAAI,CAAC,aAAa,GAAG,CAAC,GAAG,KAAK,CAAC,CAAA;QAC/B,IAAI,CAAC,cAAc,GAAG,KAAK,CAAA;QAC3B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAA;IAC7B,CAAC;IAED,IAAI,aAAa;QACf,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,OAAO,IAAI,CAAC,cAAc,CAAA;IAC5B,CAAC;IAED,iBAAiB,CAAE,GAAW;QAC5B,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI;YAAE,OAAM;QACtF,IAAI,CAAC,eAAe,GAAG,IAAI,CAAA;QAC3B,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAA;QACtC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE;YACtB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;gBACzC,IAAI,IAAI,CAAC,OAAO;oBAAE,OAAM;gBACxB,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAA,CAAG,kDAAkD;gBACvG,kDAAkD;gBAClD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI;oBAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAA;gBAC5B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,mCAAmC;YACrC,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,eAAe,GAAG,KAAK,CAAA;YAC9B,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,CAAA;IACP,CAAC;IAED,mEAAmE;IACnE;;qEAEiE;IACjE,MAAM,CAAE,aAAyB,EAAE,MAAc;QAC/C,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC7B,MAAM,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;QAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,IAAI,CAAA;QACpD,MAAM,GAAG,GAAe;YACtB,kEAAkE;YAClE,KAAK,EAAE,IAAI,UAAU,CAAC,aAAa,CAAC;YACpC,WAAW,EAAE,GAAG;YAChB,gBAAgB,EAAE,IAAI;YACtB,QAAQ,EAAE,IAAI;YACd,EAAE,EAAE,IAAI;SACT,CAAA;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QACvB,IAAI,CAAC,YAAY;YAAE,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QAC/C,OAAO,EAAE,CAAA;IACX,CAAC;IAED;;uCAEmC;IACnC,cAAc,CAAE,QAA+C,EAAE,MAAc;QAC7E,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,IAAI,OAAO,QAAQ,EAAE,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;QAC5H,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QAC1F,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAE,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAA;QACtD,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAA;IAClD,CAAC;IAED;;yEAEqE;IACrE,MAAM,CAAE,EAAU;QAChB,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC1B,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,MAAM,CAAA;QACzC,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;QACpG,OAAO,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACrC,CAAC;IAED,GAAG,CAAE,EAAU;QACb,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC3B,CAAC;IAED,aAAa,CAAE,GAAe,EAAE,GAAW;QACzC,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI;YAAE,OAAM;QACzC,GAAG,CAAC,gBAAgB,GAAG,GAAG,CAAA;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAA,CAAC,CAAC,CAAC,CAAC,CAAA;IACrF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAE,GAAe,EAAE,GAAW;QAC1C,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,oBAAoB;YAAE,OAAM;QACpE,IAAI,IAAqB,CAAA;QACzB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;YACzC,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAM,CAAG,kEAAkE;YAC7F,kFAAkF;YAClF,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;YAC3E,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAA;YACnB,IAAI,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;QAC9B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,GAAkB,CAAC,YAAY,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAA;YAC3E,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAA;YACnB,IAAI,GAAG,IAAI,KAAK,UAAU;gBACxB,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE;gBACzC,CAAC,CAAC;oBACE,KAAK,EAAE,oBAAoB;oBAC3B,MAAM,EAAE,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,2BAA2B;iBACvF,CAAA;QACP,CAAC;QACD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAM;QACxB,8DAA8D;QAC9D,+DAA+D;QAC/D,6DAA6D;QAC7D,gEAAgE;QAChE,yBAAyB;QACzB,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,oBAAoB;YAAE,GAAG,CAAC,EAAE,GAAG,IAAI,CAAA;IAC7E,CAAC;IAED;;;;0DAIsD;IACtD,KAAK,CAAC,MAAM;QACV,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC;YAAE,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;IACxE,CAAC;IAED;;;;;;;;;;;+DAW2D;IAC3D,MAAM,CAAE,EAAU;QAChB,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9B,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,oBAAoB;YAAE,OAAO,EAAE,GAAG,GAAG,CAAC,EAAE,EAAE,CAAA;QAClF,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC;YACpC,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;QAC3D,CAAC;QACD,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI;YAC7B,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,gBAAgB,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;YACnE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAA;QACzE,CAAC;QACD,OAAO,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,EAAE,EAAE,CAAA;IAC/C,CAAC;IAED,YAAY,CAAE,EAAU;QACtB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAM;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9B,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,IAAI,GAAG,CAAC,EAAE,EAAE,KAAK,KAAK,WAAW;YAAE,OAAM,CAAG,4DAA4D;QACxG,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,EAAE,KAAK,KAAK,QAAQ,CAAA;QACvC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;QACrC,IAAI,IAAI;YAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAA;IAC3D,CAAC;IAED;;;;;iEAK6D;IAC7D,eAAe,CAAE,EAAU,EAAE,IAAyB;QACpD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAM;QACxB,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAA;QACvG,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9B,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,2DAA2D;QAC3D,6DAA6D;QAC7D,6DAA6D;QAC7D,uDAAuD;QACvD,0DAA0D;QAC1D,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,oBAAoB,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,UAAU;YAAE,OAAM;QACnG,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAA;IACpE,CAAC;IAED,gBAAgB;QACd,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC;IAED,mEAAmE;IACnE,OAAO,CAAE,MAAc;QACrB,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACjB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACnC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,WAAW,CAAA;QAC1C,IAAI,CAAC,WAAW,GAAG,CAAC,CAAA;QACpB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAA;QAC1B,MAAM,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAA;QAClC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACpE,uEAAuE;QACvE,oEAAoE;QACpE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;IACpF,CAAC;IAED;;;;;2EAKuE;IACvE,QAAQ,CAAE,UAA0B,EAAE,MAAc,EAAE,OAAqC,EAAE;QAC3F,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAChD,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QACvC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;QACrC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YAChC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAA;YAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,mEAAmE;gBACnE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACtB,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAA;gBACrC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBACpC,SAAQ;YACV,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;YACtC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACrC,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IAED,QAAQ;QACN,OAAO;YACL,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAC3F,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;SAChC,CAAA;IACH,CAAC;IAED,WAAW,CAAE,GAAW;QACtB,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC;YAAE,OAAM;QAC1D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;QACrB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YAC3D,IAAI,CAAC,SAAS,GAAG,KAAK,CAAA;YACtB,+DAA+D;YAC/D,+DAA+D;YAC/D,0DAA0D;YAC1D,WAAW;YACX,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;wBAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBAAC,MAAK;oBAAC,CAAC;gBACjE,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC,CAAA;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAE,GAAW,EAAE,GAAa;QAC1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;YACzC,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAM;YACxB,2DAA2D;YAC3D,8DAA8D;YAC9D,6DAA6D;YAC7D,+DAA+D;YAC/D,qDAAqD;YACrD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;gBAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;gBAClC,OAAO,EAAE,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,QAAQ,CAAC,iBAAiB,CAAA;YAC1E,CAAC,CAAC,CAAA;YACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAM;YAC7B,KAAK,MAAM,EAAE,IAAI,IAAI;gBAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC/C,IAAI,CAAC;gBACH,uFAAuF;gBACvF,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;gBAC9C,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,KAAK,MAAM,EAAE,IAAI,IAAI;wBAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACxE,CAAC;oBAAS,CAAC;gBACT,KAAK,MAAM,EAAE,IAAI,IAAI;oBAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;gBAClD,2DAA2D;gBAC3D,uDAAuD;gBACvD,wDAAwD;gBACxD,4DAA4D;gBAC5D,kDAAkD;gBAClD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBAClB,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;wBACtB,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;wBAClC,IAAI,EAAE,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,QAAQ,CAAC,iBAAiB,EAAE,CAAC;4BACvE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;4BAC1B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;wBAC9B,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yDAAyD;QAC3D,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,OAAO,CAAE,MAAc;QACrB,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,oBAAoB,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,UAAU,CAAA;YACpG,IAAI,CAAC,IAAI;gBAAE,SAAQ;YACnB,IAAI,GAAG,GAAG,GAAG,CAAC,WAAW,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;gBACtD,yDAAyD;gBACzD,8DAA8D;gBAC9D,2BAA2B;gBAC3B,2DAA2D;gBAC3D,4DAA4D;gBAC5D,6DAA6D;gBAC7D,6DAA6D;gBAC7D,iDAAiD;gBACjD,GAAG,CAAC,EAAE,GAAG;oBACP,KAAK,EAAE,QAAQ;oBACf,MAAM,EAAE,GAAG,CAAC,QAAQ,KAAK,mBAAmB,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI;wBACzE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,IAAI;wBACjC,CAAC,CAAC,YAAY;wBACd,CAAC,CAAC,2BAA2B;iBAChC,CAAA;gBACD,SAAQ;YACV,CAAC;YACD,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,UAAU;gBAAE,SAAQ;YAC5D,+DAA+D;YAC/D,4DAA4D;YAC5D,2CAA2C;YAC3C,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,IAAI;gBAAE,SAAQ;YAC7C,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI;gBAAE,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACjE,CAAC;QACD,+DAA+D;QAC/D,gEAAgE;QAChE,+DAA+D;QAC/D,6DAA6D;QAC7D,gDAAgD;QAChD,KAAK,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3C,IAAI,GAAG,GAAG,EAAE,IAAI,QAAQ,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5E,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;gBAC9B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YAClC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IAED;;;;mBAIe;IACf,KAAK,KAAY,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA,CAAC,CAAC;IAEtC,IAAI,MAAM,KAAe,OAAO,IAAI,CAAC,OAAO,CAAA,CAAC,CAAC;CAC/C;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAAE,KAAiB,EAAmB,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA","sourcesContent":["// RLTP transport adapter: VTI mediator — published as\n// @real-life/trust-protocol/adapters/vti-mediator (lib Stage 2, note §4.6).\n//\n// Its reports reach the holder as the ports' DeliveryReport: submitOutbound\n// files an Outbound under its document digest and returns the\n// SubmissionRef (submission id ↔ digest); report(id) maps the adapter's\n// SubmissionState onto DeliveryReport (deliveryReportOf), which the app\n// hands to holder.report(). An adapter's `delivered` is its claim about\n// transport; the holder's receive core verifies the delivery-ack itself.\n//\n// Profile: spec/adapter-vti-mediator.md v0.23 (twenty-third casting;\n// round journals under design/adapter-review*). A\n// transport adapter contract — NOT a carrier at the port.\n//\n// Beyond the profile (lib 0.5.0): conclude(collection, now, {keep}) leaves\n// the items whose disposition is transient unconcluded and offers them\n// again (Delivery 0.82 RLTP-DEL-5810, 5820: failed(rate-limited) is never\n// concluded); `concludable(result)` says which receive outcomes are\n// terminal. The profile's §4 concludes a collection whole; its next\n// casting is to take this up.\n//\n// Structural rules (reviews 3+4):\n//   · No port operation ever awaits the mediator — including\n//     register: keylist synchronization is a recorded intent with a\n//     tracked background task, retried by advance.\n//   · No report is invented, and absence is ABSENT: before the first\n//     honest report exists, status() returns null (§6.1 grants the\n//     window; representing it as a queryable fourth value was\n//     review-4 B2). has() distinguishes an unknown id.\n//   · A retired instance mutates nothing and refuses everything\n//     except reading its ack state.\n\nimport { jcs } from '../core.js'\nimport { sha } from '../crypto.js'\nimport { carrierPrincipal, carrierScopedIdentity } from '../carrier-identity.js'\nimport type { CarrierPrincipal, CarrierScopedIdentity } from '../carrier-identity.js'\nimport type { DeliveryReport, Outbound, ReceiverRefusalCode, SubmissionRef } from '../ports.js'\nimport type { ReceiveResult } from '../results.js'\nexport type { ReceiverRefusalCode } from '../ports.js'\n\n// ── Declared constants (profile §2) — promises of THIS casting ──────\n// frozen: the declared promises cannot be changed at run time either\nexport const DECLARED = Object.freeze({\n  giveUpHorizonMs: 72 * 3_600_000,\n  statusHorizonMs: 60_000,\n  queueFloorCount: 64,\n  queueFloorBytes: 1_048_576,\n  maxQueueBytes: 16_777_216,\n  duplicateWindowMs: 30 * 86_400_000,\n} as const)\n\n// ── The injected wire ────────────────────────────────────────────────\nexport type WireErrorKind =\n  | 'unreachable' | 'refused-retriable' | 'refused-admission' | 'oversize'\n\nexport class WireError extends Error {\n  kind: WireErrorKind\n  constructor (kind: WireErrorKind, message?: string) {\n    super(message ?? kind)\n    this.kind = kind\n  }\n}\n\nexport interface MediatorWire {\n  authChallenge (did: string): Promise<{ challenge: string, sessionId: string }>\n  authenticate (answer: { did: string, challenge: string, sessionId: string }): Promise<TokenSet>\n  // A transient failure MUST be a WireError 'unreachable' or\n  // 'refused-retriable' (the tokens are kept); any other error means the\n  // mediator refused the refresh token (the adapter re-runs the handshake).\n  refresh (refreshToken: string): Promise<TokenSet>\n  keylistUpdate (accessToken: string, rkids: string[]): Promise<void>\n  deposit (accessToken: string, bytes: Uint8Array, egressDid: string): Promise<void>\n  ackReceived (accessToken: string, queueIds: string[]): Promise<void>\n  onDeliver (cb: (bytes: Uint8Array) => Promise<void>): void\n  /** Optional truthful connectivity signal; absent means unknown. */\n  offline? (): boolean\n}\n\nexport interface TokenSet {\n  accessToken: string\n  accessExpiresAt: number\n  refreshToken: string\n  refreshExpiresAt: number\n}\n\n// ── Sender states (§6.1 — the closed sets, nothing else) ────────────\n// ReceiverRefusalCode is the ports' (one closed set, one place)\nconst RECEIVER_REFUSAL_CODES: ReadonlySet<ReceiverRefusalCode> = new Set<ReceiverRefusalCode>([\n  'malformedRequest', 'unsupportedType', 'proofRequired',\n  'proofInvalid', 'wrongRecipient', 'identityMismatch',\n])\n\nexport type SubmissionState =\n  | { state: 'awaiting-transport', reason: 'offline' | 'transport-unreachable' | 'carrier-refused-retriable' }\n  | { state: 'accepted' }\n  | { state: 'delivered', late: boolean }\n  | { state: 'failed', reason: 'unroutable' | 'oversize' | 'expired-by-adapter-policy' }\n  | { state: 'failed', reason: 'rejected-by-receiver', code: ReceiverRefusalCode }\n\n/** The ports' DeliveryReport for a document `digest` in adapter state `st`\n *  (Delivery §6.1): one-to-one, `late` and the refusal code carried over. */\nexport function deliveryReportOf (digest: string, st: SubmissionState): DeliveryReport {\n  switch (st.state) {\n    case 'awaiting-transport': return { digest, status: 'awaiting-transport', reason: st.reason }\n    case 'accepted': return { digest, status: 'accepted' }\n    case 'delivered': return { digest, status: 'delivered', late: st.late }\n    case 'failed': return st.reason === 'rejected-by-receiver'\n      ? { digest, status: 'failed', reason: 'rejected-by-receiver', code: st.code }\n      : { digest, status: 'failed', reason: st.reason }\n  }\n}\n\n/** Whether a receive outcome is terminal and its item may be concluded\n *  (Delivery 5a.8): every disposition but `failed(rate-limited)`, the one\n *  failure that is transient (RLTP-DEL-5820). An InfraError of the\n *  holder's store is transient as well (RLTP-DEL-5810): an item whose\n *  receive threw is kept, too. */\nexport function concludable (r: ReceiveResult): boolean {\n  return !(r.disposition === 'failed' && r.reason === 'rate-limited')\n}\n\n/** The adapter's own copy of a wire's token set: the wire keeps no handle on it. */\nconst tokenCopy = (t: TokenSet): TokenSet => ({ accessToken: t.accessToken, accessExpiresAt: t.accessExpiresAt, refreshToken: t.refreshToken, refreshExpiresAt: t.refreshExpiresAt })\n\nexport interface CollectedItem { bytes: Uint8Array, queueId: string }\nexport interface Collection { id: string, items: CollectedItem[] }\n\n/** Ack state for the host to persist (profile §4). Invariant: every\n *  pending id names a concluded entry; violations are refused at\n *  construction (fail-closed). */\nexport interface AckState {\n  concluded: Array<{ queueId: string, concludedAt: number }>\n  pending: string[]\n}\n\ninterface Submission {\n  /** the document digest, for submissions filed by submitOutbound */\n  digest?: string\n  bytes: Uint8Array\n  submittedAt: number\n  attemptStartedAt: number | null\n  lastKind: WireErrorKind | null\n  st: SubmissionState | null   // null = no honest report exists yet\n}\n\nconst hex = (b: Uint8Array): string =>\n  Array.from(b, (x) => x.toString(16).padStart(2, '0')).join('')\n\n// construction capability: only create() holds it\nconst KEY = Symbol('MediatorCarrierAdapter.create')\n\n// ── The adapter ──────────────────────────────────────────────────────\nexport class MediatorCarrierAdapter {\n  // JS-hard identity fields: TS `readonly` is a compile-time promise\n  // only, and §8 claims runtime unforgeability — so the values live\n  // in true privates behind getters (R8-B1)\n  #principal: string\n  #connectionDid: string\n  #egressDid: string\n  get principal (): string { return this.#principal }\n  get connectionDid (): string { return this.#connectionDid }\n  get egressDid (): string { return this.#egressDid }\n  #wire: MediatorWire\n  #tokens: TokenSet | null = null\n  #clock = Number.NEGATIVE_INFINITY\n  #closed = false\n\n  #subs = new Map<string, Submission>()\n  #inflight = new Set<Promise<void>>()\n  #nextId = 1\n\n  #desiredRkids: string[] | null = null\n  #keylistSynced = false\n  #keylistSyncing = false\n\n  #inbox: CollectedItem[] = []\n  #inboxBytes = 0\n  #inboxDigests = new Set<string>()\n  #outstanding = new Map<string, Map<string, CollectedItem>>()\n  #outstandingBytes = 0\n  #concluded = new Map<string, number>()\n  #pendingAcks = new Set<string>()\n  #flightAcks = new Set<string>()   // ids inside the in-flight flush snapshot\n  #flushing = false\n  #nextColId = 1\n\n  #transitions: Array<{ id: string, to: 'delivered' }> = []\n\n  /** The only way to build an adapter: the trio is DERIVED here from\n   *  one root, one carrier, one nonce — so principal, connection DID\n   *  and egress identity cannot come from different relationships\n   *  (R7-B2: the coupling is enforced by construction, not by\n   *  inspecting caller-supplied identities). */\n  static async create (\n    rootIkm: Uint8Array, carrier: string, nonce: Uint8Array,\n    wire: MediatorWire, restored?: AckState, restoredAt?: number,\n  ): Promise<MediatorCarrierAdapter> {\n    // ONE tuple, snapshotted at entry: a caller mutating its buffers\n    // between the three awaited derivations must not be able to mix\n    // identities from two tuples (R8-B2)\n    const ikm = new Uint8Array(rootIkm)\n    const n = new Uint8Array(nonce)\n    const principal = await carrierPrincipal(ikm, carrier, n)\n    const connection = await carrierScopedIdentity(ikm, carrier, n, 'connection')\n    const egress = await carrierScopedIdentity(ikm, carrier, n, 'egress')\n    return new MediatorCarrierAdapter(KEY, principal, connection, egress, wire, restored, restoredAt)\n  }\n\n  constructor (\n    key: symbol,\n    principal: CarrierPrincipal,\n    connection: CarrierScopedIdentity,\n    egress: CarrierScopedIdentity,\n    wire: MediatorWire,\n    restored?: AckState,\n    restoredAt?: number,\n  ) {\n    if (key !== KEY) {\n      throw new Error('use MediatorCarrierAdapter.create — the identity trio must be derived, not supplied (5a.10)')\n    }\n    if (connection.scope !== 'connection' || egress.scope !== 'egress') {\n      throw new Error('scoped identities passed in the wrong roles')\n    }\n    const three = new Set([principal.principal, connection.did, egress.did])\n    if (three.size !== 3) {\n      throw new Error('principal, connection DID and egress identity must be pairwise distinct (5a.10)')\n    }\n    this.#principal = principal.principal\n    this.#connectionDid = connection.did\n    this.#egressDid = egress.did\n    this.#wire = wire\n    if (restored) {\n      // The restore instant anchors the duplicate-window: an expired,\n      // debt-free entry is dropped HERE, not at the first advance —\n      // otherwise a redelivery arriving before any port call would be\n      // absorbed beyond the declared window (review-4 B4).\n      if (typeof restoredAt !== 'number' || !Number.isFinite(restoredAt)) {\n        throw new Error('restoring ack state requires a finite restoredAt instant')\n      }\n      this.#now(restoredAt)\n      const pending = new Set(restored.pending)\n      const known = new Set(restored.concluded.map((c) => c.queueId))\n      for (const id of pending) {\n        if (!known.has(id)) {\n          throw new Error('ack snapshot violates its invariant: pending intent without a concluded entry')\n        }\n      }\n      for (const { queueId, concludedAt } of restored.concluded) {\n        if (!Number.isFinite(concludedAt) || concludedAt > restoredAt) {\n          // a conclusion \"from the future\" would stretch the window\n          // past its declared span (R5-B4) — fail closed\n          throw new Error('ack snapshot: conclusion instant is non-finite or after restoredAt')\n        }\n        // the window beats everything (round-14 B): an expired entry\n        // falls at the restore instant, owed or not — a phantom debt\n        // from an ack that landed just before a close can never\n        // outlive the window and delete a fresh copy (R14-B2)\n        if (restoredAt - concludedAt >= DECLARED.duplicateWindowMs) continue\n        this.#concluded.set(queueId, concludedAt)\n        if (pending.has(queueId)) this.#pendingAcks.add(queueId)\n      }\n    }\n    this.#wire.onDeliver(async (raw) => {\n      if (this.#closed) return\n      // a plain copy of its own: a Node Buffer's slice() would share memory\n      const bytes = new Uint8Array(raw)\n      const queueId = hex(await sha(bytes))\n      if (this.#closed) return\n      // Absorption is WINDOW-checked at the moment it happens\n      // (R11-B1), and the window beats everything (round-14 B):\n      // beyond it, entry AND any leftover intent fall, and the frame\n      // is a new item — so no acknowledgement, owed or phantom, can\n      // ever delete the only fresh copy.\n      const concludedAt = this.#concluded.get(queueId)\n      if (concludedAt !== undefined) {\n        if (this.#flightAcks.has(queueId) ||\n            this.#clock - concludedAt < DECLARED.duplicateWindowMs) {\n          // inside the window — or deferred: an id inside an\n          // in-flight flush keeps absorbing until that flush ends,\n          // because its irrecallable ack may still land (R15-B1)\n          this.#pendingAcks.add(queueId)\n          return\n        }\n        this.#concluded.delete(queueId)\n        this.#pendingAcks.delete(queueId)\n      }\n      if (this.#inboxDigests.has(queueId)) return\n      for (const col of this.#outstanding.values()) if (col.has(queueId)) return\n      const held = this.#inboxBytes + this.#outstandingBytes\n      const underFloor = this.#inbox.length < DECLARED.queueFloorCount &&\n        held + bytes.length <= DECLARED.queueFloorBytes\n      const underCap = held + bytes.length <= DECLARED.maxQueueBytes\n      if (!underFloor && !underCap) return\n      this.#inbox.push({ bytes, queueId })\n      this.#inboxBytes += bytes.length\n      this.#inboxDigests.add(queueId)\n    })\n  }\n\n  #now (raw: number): number {\n    if (!Number.isFinite(raw)) throw new Error('non-finite time')\n    if (raw > this.#clock) this.#clock = raw\n    return this.#clock\n  }\n\n  #open (): void { if (this.#closed) throw new Error('retired (5a.10 lifecycle)') }\n\n  #track (p: Promise<void>): void {\n    const t = p.catch(() => {})\n    this.#inflight.add(t)\n    void t.finally(() => this.#inflight.delete(t))\n  }\n\n  // ── auth: silent carrier policy ─────────────────────────────────\n  // Single-flight: concurrent callers share one handshake — the ATM\n  // challenge/response is a session, and two interleaved sessions\n  // under one connection DID would answer each other's challenges.\n  #authing: Promise<string> | null = null\n\n  #ensureAuth (now: number): Promise<string> {\n    if (this.#tokens && now < this.#tokens.accessExpiresAt) return Promise.resolve(this.#tokens.accessToken)\n    if (this.#authing) return this.#authing\n    const run = (async (): Promise<string> => {\n      if (this.#tokens && now < this.#tokens.refreshExpiresAt) {\n        try {\n          const refreshed = await this.#wire.refresh(this.#tokens.refreshToken)\n          if (this.#closed) throw new Error('retired')   // as on the handshake path (R6-B1)\n          this.#tokens = tokenCopy(refreshed)\n          return this.#tokens.accessToken\n        } catch (e) {\n          if (this.#closed) throw e\n          // a transient failure (mediator unreachable, retriable refusal)\n          // says nothing about the token: keep it for the next attempt (#9)\n          if (e instanceof WireError && (e.kind === 'unreachable' || e.kind === 'refused-retriable')) throw e\n          // a refused refresh (revoked before its expiry) is never replayed:\n          // drop the tokens and take the challenge handshake below\n          this.#tokens = null\n        }\n      }\n      const { challenge, sessionId } = await this.#wire.authChallenge(this.#connectionDid)\n      if (this.#closed) throw new Error('retired')   // nothing new starts, not even the answer (R6-B1)\n      this.#tokens = tokenCopy(await this.#wire.authenticate({ did: this.#connectionDid, challenge, sessionId }))\n      return this.#tokens.accessToken\n    })()\n    this.#authing = run.finally(() => { this.#authing = null })\n    return this.#authing\n  }\n\n  // ── transport registration (profile §3 — NOT §5a.3) ─────────────\n  /** Records the desired keylist and returns; synchronization runs\n   *  as a tracked background task and advance retries it until it\n   *  lands (review-4 B1). */\n  register (rkids: string[], rawNow: number): void {\n    this.#open()\n    const now = this.#now(rawNow)\n    this.#desiredRkids = [...rkids]\n    this.#keylistSynced = false\n    this.#startKeylistSync(now)\n  }\n\n  get keylistSynced (): boolean {\n    this.#open()\n    return this.#keylistSynced\n  }\n\n  #startKeylistSync (now: number): void {\n    if (this.#keylistSyncing || this.#keylistSynced || this.#desiredRkids === null) return\n    this.#keylistSyncing = true\n    const wanted = [...this.#desiredRkids]\n    this.#track((async () => {\n      try {\n        const token = await this.#ensureAuth(now)\n        if (this.#closed) return\n        await this.#wire.keylistUpdate(token, [...wanted])   // the wire's own list: `wanted` is compared below\n        // land only if the desire has not moved meanwhile\n        if (!this.#closed && this.#desiredRkids !== null &&\n            wanted.join(' ') === this.#desiredRkids.join(' ')) {\n          this.#keylistSynced = true\n        }\n      } catch {\n        // intent survives; advance retries\n      } finally {\n        this.#keylistSyncing = false\n      }\n    })())\n  }\n\n  // ── sender side ─────────────────────────────────────────────────\n  /** Returns the submission id synchronously. Before the first\n   *  honest report exists, status() returns null — §6.1's own\n   *  pre-report window, represented as absence, not as a value. */\n  submit (envelopeBytes: Uint8Array, rawNow: number): string {\n    this.#open()\n    const now = this.#now(rawNow)\n    const id = 's' + this.#nextId++\n    const knownOffline = this.#wire.offline?.() === true\n    const sub: Submission = {\n      // a plain copy of its own (a Node Buffer's slice() shares memory)\n      bytes: new Uint8Array(envelopeBytes),\n      submittedAt: now,\n      attemptStartedAt: null,\n      lastKind: null,\n      st: null,\n    }\n    this.#subs.set(id, sub)\n    if (!knownOffline) this.#startAttempt(sub, now)\n    return id\n  }\n\n  /** Files an Outbound (its envelope as JCS bytes) and returns the\n   *  SubmissionRef the holder's reports are keyed by: submission id ↔\n   *  document digest (note §4.3). */\n  submitOutbound (outbound: Pick<Outbound, 'digest' | 'envelope'>, rawNow: number): SubmissionRef {\n    this.#open()\n    if (typeof outbound?.digest !== 'string' || outbound.digest === '') throw new Error('an outbound needs its document digest')\n    const submissionId = this.submit(new TextEncoder().encode(jcs(outbound.envelope)), rawNow)\n    this.#subs.get(submissionId)!.digest = outbound.digest\n    return { submissionId, digest: outbound.digest }\n  }\n\n  /** The current state as the ports' DeliveryReport for holder.report(),\n   *  or null while no honest report exists (and for an unknown id). A\n   *  submission filed without a digest (submit) has no report form. */\n  report (id: string): DeliveryReport | null {\n    const st = this.status(id)\n    if (st === null) return null\n    const digest = this.#subs.get(id)!.digest\n    if (digest === undefined) throw new Error('submitted without a document digest: use submitOutbound')\n    return deliveryReportOf(digest, st)\n  }\n\n  has (id: string): boolean {\n    this.#open()\n    return this.#subs.has(id)\n  }\n\n  #startAttempt (sub: Submission, now: number): void {\n    if (sub.attemptStartedAt !== null) return\n    sub.attemptStartedAt = now\n    this.#track(this.#trySend(sub, now).finally(() => { sub.attemptStartedAt = null }))\n  }\n\n  async #trySend (sub: Submission, now: number): Promise<void> {\n    if (sub.st !== null && sub.st.state !== 'awaiting-transport') return\n    let next: SubmissionState\n    try {\n      const token = await this.#ensureAuth(now)\n      if (this.#closed) return   // retirement between auth and deposit: nothing new starts (R5-B2)\n      // each attempt hands the wire a copy: what it does with it never reaches the next\n      await this.#wire.deposit(token, new Uint8Array(sub.bytes), this.#egressDid)\n      sub.lastKind = null\n      next = { state: 'accepted' }\n    } catch (e) {\n      const kind: WireErrorKind = e instanceof WireError ? e.kind : 'unreachable'\n      sub.lastKind = kind\n      next = kind === 'oversize'\n        ? { state: 'failed', reason: 'oversize' }\n        : {\n            state: 'awaiting-transport',\n            reason: kind === 'unreachable' ? 'transport-unreachable' : 'carrier-refused-retriable',\n          }\n    }\n    if (this.#closed) return\n    // An interim report (including a horizon-corrected one) never\n    // outranks the attempt's real outcome; only a TERMINAL state —\n    // a give-up, a refusal, a delivery — stands (R5-B1). Without\n    // this, an accepted deposit would stay reported unreachable and\n    // be sent a second time.\n    if (sub.st === null || sub.st.state === 'awaiting-transport') sub.st = next\n  }\n\n  /** Host teardown aid, NOT a port operation (profile §6): awaits\n   *  the in-flight background tasks so a host can drain before\n   *  persisting ackState. On a hanging wire it waits as long as the\n   *  wire does — a host bounds it externally (Promise.race) exactly\n   *  because this library holds no clock of its own. */\n  async settle (): Promise<void> {\n    while (this.#inflight.size > 0) await Promise.all([...this.#inflight])\n  }\n\n  /** The §6.1 report, or null while none exists yet (has()\n   *  distinguishes an unknown id). status is a PORT: after close it\n   *  refuses like every other port operation (R5-B3).\n   *\n   *  The pre-transport report is an HONEST SNAPSHOT, derived at the\n   *  moment of observation by one precedence order (Option B of the\n   *  round-14 halt) — never a stored patchwork:\n   *    (a) the wire knows itself offline      → offline\n   *    (b) an attempt is overdue              → transport-unreachable\n   *    (c) the last completed attempt's kind  → its report\n   *    (d) otherwise                          → no report yet (null)\n   *  Terminal states and `accepted` are stored and stand. */\n  status (id: string): SubmissionState | null {\n    this.#open()\n    const sub = this.#subs.get(id)\n    if (!sub) return null\n    if (sub.st !== null && sub.st.state !== 'awaiting-transport') return { ...sub.st }\n    if (this.#wire.offline?.() === true) {\n      return { state: 'awaiting-transport', reason: 'offline' }\n    }\n    if (sub.attemptStartedAt !== null &&\n        this.#clock - sub.attemptStartedAt >= DECLARED.statusHorizonMs) {\n      return { state: 'awaiting-transport', reason: 'transport-unreachable' }\n    }\n    return sub.st === null ? null : { ...sub.st }\n  }\n\n  acknowledged (id: string): void {\n    if (this.#closed) return\n    const sub = this.#subs.get(id)\n    if (!sub) return\n    if (sub.st?.state === 'delivered') return   // idempotent: a duplicate ack never rewrites `late` (R9-M4)\n    const late = sub.st?.state === 'failed'\n    sub.st = { state: 'delivered', late }\n    if (late) this.#transitions.push({ id, to: 'delivered' })\n  }\n\n  /** Refusals act on live submissions only (§6.1 knows exactly one\n   *  late correction — the valid ack). The code set is closed and\n   *  TERMINAL: retryable counterpart conditions (unavailable,\n   *  internalError) are transport outcomes, never receiver verdicts\n   *  — they have no entry here, and an unknown code is refused\n   *  fail-closed rather than minted into a verdict (R6-B2). */\n  receiverRefused (id: string, code: ReceiverRefusalCode): void {\n    if (this.#closed) return\n    if (!RECEIVER_REFUSAL_CODES.has(code)) {\n      throw new Error('not a terminal receiver refusal code — retryable conditions are transport outcomes')\n    }\n    const sub = this.#subs.get(id)\n    if (!sub) return\n    // A VALIDATED refusal is itself the proof of receipt — the\n    // mediator can have accepted and forwarded while our deposit\n    // promise is still unresolved, so the report-less phase is a\n    // legitimate moment for it (R9-B2, reversing the R8-B3\n    // overcorrection). Only terminal states stand against it.\n    if (sub.st !== null && sub.st.state !== 'awaiting-transport' && sub.st.state !== 'accepted') return\n    sub.st = { state: 'failed', reason: 'rejected-by-receiver', code }\n  }\n\n  drainTransitions (): Array<{ id: string, to: 'delivered' }> {\n    this.#open()\n    return this.#transitions.splice(0)\n  }\n\n  // ── receiver side ───────────────────────────────────────────────\n  collect (rawNow: number): Collection {\n    this.#open()\n    this.#now(rawNow)\n    if (this.#inbox.length === 0) return { id: 'c-empty', items: [] }\n    const items = this.#inbox.splice(0)\n    this.#outstandingBytes += this.#inboxBytes\n    this.#inboxBytes = 0\n    this.#inboxDigests.clear()\n    const id = 'c' + this.#nextColId++\n    this.#outstanding.set(id, new Map(items.map((i) => [i.queueId, i])))\n    // the caller gets its own copies: the outstanding entries stay intact,\n    // whatever it does with the bytes, for a conclusion that keeps them\n    return { id, items: items.map((i) => ({ ...i, bytes: new Uint8Array(i.bytes) })) }\n  }\n\n  /** Concludes a collection (profile §4, Delivery 5a.8): its items'\n   *  digests become ack intent. `keep` names the items whose disposition\n   *  is transient (Delivery RLTP-DEL-5810, 5820: `failed(rate-limited)`,\n   *  or a transaction that could not commit, see `concludable`): they are\n   *  not concluded and not acknowledged, they go back to the buffer and the\n   *  next collect offers them again, and the mediator keeps its copy. */\n  conclude (collection: { id: string }, rawNow: number, opts: { keep?: readonly string[] } = {}): void {\n    this.#open()\n    const now = this.#now(rawNow)\n    const col = this.#outstanding.get(collection.id)\n    if (!col) return\n    this.#outstanding.delete(collection.id)\n    const keep = new Set(opts.keep ?? [])\n    for (const item of col.values()) {\n      this.#outstandingBytes -= item.bytes.length\n      if (keep.has(item.queueId)) {\n        // transient: back to the buffer, offered again, never acknowledged\n        this.#inbox.push(item)\n        this.#inboxBytes += item.bytes.length\n        this.#inboxDigests.add(item.queueId)\n        continue\n      }\n      this.#concluded.set(item.queueId, now)\n      this.#pendingAcks.add(item.queueId)\n    }\n    this.#startFlush(now)\n  }\n\n  ackState (): AckState {\n    return {\n      concluded: [...this.#concluded].map(([queueId, concludedAt]) => ({ queueId, concludedAt })),\n      pending: [...this.#pendingAcks],\n    }\n  }\n\n  #startFlush (now: number): void {\n    if (this.#flushing || this.#pendingAcks.size === 0) return\n    this.#flushing = true\n    const snapshot = new Set(this.#pendingAcks)\n    this.#track(this.#flushAcks(now, [...snapshot]).finally(() => {\n      this.#flushing = false\n      // lost-wake-up guard (review-4 M6): intents that arrived while\n      // this flush ran get their own flush now — but only newcomers,\n      // so a failing wire waits for the next advance instead of\n      // spinning\n      if (!this.#closed) {\n        for (const id of this.#pendingAcks) {\n          if (!snapshot.has(id)) { this.#startFlush(this.#clock); break }\n        }\n      }\n    }))\n  }\n\n  async #flushAcks (now: number, ids: string[]): Promise<void> {\n    try {\n      const token = await this.#ensureAuth(now)\n      if (this.#closed) return\n      // Only NOW does anything become irrecallable (R16-B1): the\n      // stay of expiry begins at the wire call itself, never at the\n      // snapshot — a hanging auth extends no window. And \"live\" is\n      // WINDOW-live (R17-B1): an entry whose window already closed —\n      // even if no prune has swept it yet — is never sent.\n      const live = ids.filter((id) => {\n        const at = this.#concluded.get(id)\n        return at !== undefined && this.#clock - at < DECLARED.duplicateWindowMs\n      })\n      if (live.length === 0) return\n      for (const id of live) this.#flightAcks.add(id)\n      try {\n        // the wire gets its own list: what it does with it never reaches the bookkeeping below\n        await this.#wire.ackReceived(token, [...live])\n        if (!this.#closed) for (const id of live) this.#pendingAcks.delete(id)\n      } finally {\n        for (const id of live) this.#flightAcks.delete(id)\n        // deferred window sweep: entries whose window closed while\n        // the ack flew fall now — intent, entry and absorption\n        // together (R15-B1). Never on a retired instance: after\n        // close, ackState() is the host's final-persist surface and\n        // a late-returning wire mutates nothing (R17-B2).\n        if (!this.#closed) {\n          for (const id of live) {\n            const at = this.#concluded.get(id)\n            if (at !== undefined && this.#clock - at >= DECLARED.duplicateWindowMs) {\n              this.#concluded.delete(id)\n              this.#pendingAcks.delete(id)\n            }\n          }\n        }\n      }\n    } catch {\n      // intent survives; the next advance starts a fresh flush\n    }\n  }\n\n  // ── the adapter clock — never awaits the mediator ───────────────\n  advance (rawNow: number): void {\n    this.#open()\n    const now = this.#now(rawNow)\n    for (const sub of this.#subs.values()) {\n      const live = sub.st === null || sub.st.state === 'awaiting-transport' || sub.st.state === 'accepted'\n      if (!live) continue\n      if (now - sub.submittedAt >= DECLARED.giveUpHorizonMs) {\n        // unroutable only when the LAST COMPLETED attempt was an\n        // admission refusal and no attempt is in flight whose outcome\n        // is unknown (review-4 B3)\n        // the give-up verdict applies the SAME precedence as every\n        // observation (R17-B3): a wire that knows itself offline at\n        // the horizon outranks any stored refusal class — unroutable\n        // needs a completed admission refusal, no unknown outcome in\n        // flight, AND no offline signal standing over it\n        sub.st = {\n          state: 'failed',\n          reason: sub.lastKind === 'refused-admission' && sub.attemptStartedAt === null &&\n              this.#wire.offline?.() !== true\n            ? 'unroutable'\n            : 'expired-by-adapter-policy',\n        }\n        continue\n      }\n      if (sub.st !== null && sub.st.state === 'accepted') continue\n      // reports are DERIVED at observation (see status()); the clock\n      // only decides here whether to start an attempt — and never\n      // against a wire that knows itself offline\n      if (this.#wire.offline?.() === true) continue\n      if (sub.attemptStartedAt === null) this.#startAttempt(sub, now)\n    }\n    // THE WINDOW BEATS EVERYTHING (Option B of the round-14 halt):\n    // an ack intent is retried until the window closes; then intent\n    // and absorption fall together. There is no ageless debt whose\n    // truth the adapter would have to know — the receiver's §6.2\n    // absorption owns everything beyond the window.\n    for (const [digest, at] of this.#concluded) {\n      if (now - at >= DECLARED.duplicateWindowMs && !this.#flightAcks.has(digest)) {\n        this.#concluded.delete(digest)\n        this.#pendingAcks.delete(digest)\n      }\n    }\n    this.#startKeylistSync(now)\n    this.#startFlush(now)\n  }\n\n  /** §5a.10 lifecycle boundary: after close, every state port is\n   *  inert — port operations refuse, inbound reports (acknowledged,\n   *  receiverRefused) are no-ops, late wire resolutions mutate\n   *  nothing. Only ackState() stays readable for the host's final\n   *  persist. */\n  close (): void { this.#closed = true }\n\n  get closed (): boolean { return this.#closed }\n}\n\nexport const queueIdOf = async (bytes: Uint8Array): Promise<string> => hex(await sha(bytes))\n"]}

package/dist/codec.d.ts

@@ -1,9 +1,17 @@
 import type { Duty, HolderState, KnownDuty } from './state.js';
 /** The codec this library writes. */
-export declare const CODEC = 1;
+export declare const CODEC = 2;
 /**
  * Migrations keyed by the codec they read: MIGRATIONS[n] maps a valid
  * codec-n state to a codec-(n+1) state. Pure, never async, never keys.
+ *
+ * 1 → 2 (lib 0.5.0, Message Tasks 0.1, Membership 0.20): the message
+ * state starts empty (no block, no rate, no record, no inbox) but for the
+ * ready tuples, read from what the state shows a counterpart's document
+ * did (readyOf1); every invitation a codec-1 holder received was
+ * surfaced, so their credential digests seed the permanent record of
+ * RLTP-MT-3130; the register of declined invitations starts empty (codec 1
+ * knew no block).
  */
 export declare const MIGRATIONS: Readonly<Record<number, (state: any) => any>>;
 /** A codec's structural validator: throws StateCodecError('shape') or returns. */

package/dist/codec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codec.d.ts","sourceRoot":"","sources":["../src/codec.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAG9D,qCAAqC;AACrC,eAAO,MAAM,KAAK,IAAI,CAAA;AAEtB;;;GAGG;AACH,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC,CAAqB,CAAA;AAE1F,kFAAkF;AAClF,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAA;AAEnD;iEACiE;AACjE,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC,CAAA;IACzD,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAA;CACrD;AAED,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,eAAe,GAAG,aAAa,GAAG,OAAO,CAAA;AAExF,+EAA+E;AAC/E,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;IAClC,oDAAoD;IACpD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;gBACT,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAMvE;AAkKD,+FAA+F;AAC/F,eAAO,MAAM,WAAW,GAAI,GAAG,IAAI,KAAG,CAAC,IAAI,SACiD,CAAA;AA0H5F,6EAA6E;AAC7E,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAE9D,CAAA;AAeF;;;;;GAKG;AACH,wBAAgB,WAAW,CAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAmBrE;AAID;;;GAGG;AACH,wBAAgB,WAAW,CAAE,GAAG,EAAE,OAAO,GAAG,WAAW,CAEtD;AAED,sEAAsE;AACtE,wBAAgB,WAAW,CAAE,KAAK,EAAE,WAAW,GAAG,MAAM,CAIvD;AAED,8DAA8D;AAC9D,eAAO,MAAM,SAAS,GAAI,GAAG,WAAW,EAAE,GAAG,WAAW,KAAG,OAA4B,CAAA"}
+{"version":3,"file":"codec.d.ts","sourceRoot":"","sources":["../src/codec.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAG9D,qCAAqC;AACrC,eAAO,MAAM,KAAK,IAAI,CAAA;AAkBtB;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC,CAOnE,CAAA;AAEF,kFAAkF;AAClF,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAA;AAEnD;iEACiE;AACjE,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC,CAAA;IACzD,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAA;CACrD;AAED,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,eAAe,GAAG,aAAa,GAAG,OAAO,CAAA;AAExF,+EAA+E;AAC/E,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;IAClC,oDAAoD;IACpD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;gBACT,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAMvE;AAsKD,+FAA+F;AAC/F,eAAO,MAAM,WAAW,GAAI,GAAG,IAAI,KAAG,CAAC,IAAI,SACiD,CAAA;AAsK5F,6EAA6E;AAC7E,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAG9D,CAAA;AAeF;;;;;GAKG;AACH,wBAAgB,WAAW,CAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAmBrE;AAID;;;GAGG;AACH,wBAAgB,WAAW,CAAE,GAAG,EAAE,OAAO,GAAG,WAAW,CAEtD;AAED,sEAAsE;AACtE,wBAAgB,WAAW,CAAE,KAAK,EAAE,WAAW,GAAG,MAAM,CAIvD;AAED,8DAA8D;AAC9D,eAAO,MAAM,SAAS,GAAI,GAAG,WAAW,EAAE,GAAG,WAAW,KAAG,OAA4B,CAAA"}

package/dist/codec.js

@@ -12,19 +12,54 @@
 // stored documents, outbound or acks.
 //
 // Codec 1 is the format of 0.4.0: its golden fixtures are
-// lib/test/fixtures/*.json (deterministic runs, test/fixtures/gen-state-v1.mjs),
-// decoded and re-encoded byte-identically by test/codec-fixture.test.mjs.
-// The rule: codec 1 is read; a newer codec is codec-newer; a codec without
-// a validator is codec-unknown. Every later codec adds its validator, a
-// migration from the one before, and its own fixture with a migration test.
+// lib/test/fixtures/state-v1*.json (runs of lib 0.4.0, frozen), decoded and
+// re-encoded byte-identically and migrated by test/codec-fixture.test.mjs.
+// Codec 2 is the format of 0.5.0 (Message Tasks 0.1, Membership 0.20): its
+// fixtures are lib/test/fixtures/state-v2*.json (deterministic runs,
+// test/fixtures/gen-state-v2.mjs, reproduced in npm test). The rule: codecs
+// 1 and 2 are read, 1 migrated to 2; a newer codec is codec-newer; a codec
+// without a validator is codec-unknown. Every later codec adds its
+// validator, a migration from the one before, and its own fixture with a
+// migration test.
 import { jcs } from './core.js';
 /** The codec this library writes. */
-export const CODEC = 1;
+export const CODEC = 2;
+/** The tuples of a codec-1 state on which a document of the counterpart
+ *  was accepted, as far as the state shows it (Message Tasks 5.1): a probe,
+ *  a star, a group star, a continuity or anchor mapping, or a profile
+ *  received; or the counterparty's step credential of its enactment record. */
+function readyOf1(s) {
+    const out = new Set();
+    const inRec = new Set(Object.values(s.encounter.records).filter((r) => r.in !== null).map((r) => r.label));
+    for (const r of Object.values(s.relationships)) {
+        for (const t of r.tuples) {
+            if (t.probeIn.hwm !== '0' || t.starIn.hwm !== '0' || t.groupStarIn.hwm !== '0' || t.continuityIn.rev !== '0' ||
+                t.mappingIn.rev !== '0' || t.profileIn.rev !== '0' || inRec.has(t.ownPairLabel))
+                out.add(t.ownPairLabel);
+        }
+    }
+    return [...out].sort();
+}
 /**
  * Migrations keyed by the codec they read: MIGRATIONS[n] maps a valid
  * codec-n state to a codec-(n+1) state. Pure, never async, never keys.
+ *
+ * 1 → 2 (lib 0.5.0, Message Tasks 0.1, Membership 0.20): the message
+ * state starts empty (no block, no rate, no record, no inbox) but for the
+ * ready tuples, read from what the state shows a counterpart's document
+ * did (readyOf1); every invitation a codec-1 holder received was
+ * surfaced, so their credential digests seed the permanent record of
+ * RLTP-MT-3130; the register of declined invitations starts empty (codec 1
+ * knew no block).
  */
-export const MIGRATIONS = Object.freeze({});
+export const MIGRATIONS = Object.freeze({
+    1: (s) => ({
+        ...s,
+        codec: 2,
+        joining: { ...s.joining, surfaced: Object.keys(s.joining.invites).sort(), declined: [] },
+        messages: { blocked: [], rates: {}, ready: readyOf1(s), records: {}, inbox: {} },
+    }),
+});
 /** A stored state the library will not load (or a state it will not write). */
 export class StateCodecError extends Error {
     code;
@@ -169,7 +204,8 @@ const contact = obj({
     settings: obj({ star: setting, groupStar: setting, anchorMapping: setting, sealedGroupStar: setting, profile: setting }),
     groupSettings: rec(setting),
 });
-const outboxStep = (x, p) => {
+/** an outbox step of codec n: codec 2 added the failure reason task-expired */
+const outboxStepOf = (codec) => (x, p) => {
     if (!isObj(x))
         fail(p, 'object expected');
     const s = x;
@@ -180,19 +216,22 @@ const outboxStep = (x, p) => {
         case 'delivered': return obj({ status: str, at: millis, late: bool })(x, p);
         case 'failed': return s.reason === 'rejected-by-receiver'
             ? obj({ status: str, at: millis, reason: str, code: lit('malformedRequest', 'unsupportedType', 'proofRequired', 'proofInvalid', 'wrongRecipient', 'identityMismatch') })(x, p)
-            : obj({ status: str, at: millis, reason: lit('unroutable', 'oversize', 'expired-by-adapter-policy') })(x, p);
+            : obj({ status: str, at: millis, reason: codec < 2 ? lit('unroutable', 'oversize', 'expired-by-adapter-policy') : lit('unroutable', 'oversize', 'expired-by-adapter-policy', 'task-expired') })(x, p);
         default: fail(`${p}.status`, 'unknown outbox status');
     }
 };
-const outboxShape = obj({
-    type: str, threadId: str, recipient, envelope, attempt: positive, history: arr(outboxStep),
-}, { nextAttemptAt: millis });
-/** the envelope is sealed to the counterpart key, never to the own rkid */
-const outboxItem = (x, p) => {
-    outboxShape(x, p);
-    const o = x;
-    if (o.envelope.rkid !== o.recipient.keyAgreement)
-        fail(`${p}.envelope.rkid`, 'must equal recipient.keyAgreement');
+/** an outbox item of codec n: codec 2 added expiresAt (the sender lifetime);
+ *  the envelope is sealed to the counterpart key, never to the own rkid */
+const outboxItemOf = (codec) => {
+    const shape = obj({
+        type: str, threadId: str, recipient, envelope, attempt: positive, history: arr(outboxStepOf(codec)),
+    }, codec < 2 ? { nextAttemptAt: millis } : { nextAttemptAt: millis, expiresAt: millis });
+    return (x, p) => {
+        shape(x, p);
+        const o = x;
+        if (o.envelope.rkid !== o.recipient.keyAgreement)
+            fail(`${p}.envelope.rkid`, 'must equal recipient.keyAgreement');
+    };
 };
 const DUE = { dueAt: millis };
 /** a retained ack: sealed to the counterpart key, like an outbox item */
@@ -251,12 +290,17 @@ const EVENT_FIELDS = {
     'group.founded': [{ groupId: str }],
     'group.admitted': [{ groupId: str, member: str }],
     'group.vouched': [{ groupId: str, member: str }],
+    'contact.blocked': [{ contactId: str, blocked: bool }],
+    'message.sent': [{ contactId: str, mid: str, digest: str }],
+    'message.received': [{ contactId: str, inboxId: str }],
 };
-const event = (x, p) => {
+/** the event types codec 2 added: codec 1 does not know them */
+const EVENTS_SINCE_2 = new Set(['contact.blocked', 'message.sent', 'message.received']);
+const eventOf = (codec) => (x, p) => {
     if (!isObj(x))
         fail(p, 'object expected');
     const t = x.type;
-    if (typeof t !== 'string' || !Object.hasOwn(EVENT_FIELDS, t))
+    if (typeof t !== 'string' || !Object.hasOwn(EVENT_FIELDS, t) || (codec < 2 && EVENTS_SINCE_2.has(t)))
         fail(`${p}.type`, 'unknown event type');
     const [req, opt = {}] = EVENT_FIELDS[t];
     obj({ type: str, eventId: str, commitSeq: dec, ...req }, { actId: str, ...opt })(x, p);
@@ -293,7 +337,7 @@ const introAct = obj({
     at: millis, ackDelayMs: natural, ownLabel: nullable(str), ack: nullable(anyObj), replyForwarded: bool, vouchersSent: bool,
     pendingVoucher: nullable(anyObj), voucher: nullable(anyObj), vouched: bool, promptId: nullable(str),
 }, { peerName: str });
-const codec1 = obj({
+const fields1 = {
     codec: lit(1),
     commitSeq: dec,
     lastWhen: millis,
@@ -311,14 +355,14 @@ const codec1 = obj({
     groups: keyed(group, 'id'),
     profile: obj({ body: json, revision: dec }),
     effects: rec(obj({ ack: nullable(storedAck), expiresAt: millis })),
-    outbox: rec(outboxItem),
+    outbox: rec(outboxItemOf(1)),
     duties: keyed(duty, 'id'),
     rotations: keyed(obj({
         id: str, from: dec, to: dec, step: lit('register', 'log', 'duties'), startedAt: millis,
         entry: json, overHead: logHead, awaitHead: rec(nullable(str)),
     }), 'id'),
     prompts: keyed(obj({ id: str, kind: lit('encounter-confirm', 'group-invite', 'introduction'), openedAt: millis }, { contactId: str, groupId: str, expiresAt: millis }), 'id'),
-    acts: keyed(obj({ actId: str, inputHash: str, commitSeq: dec, outboundDigests: arr(str), events: arr(event), at: millis }), 'actId'),
+    acts: keyed(obj({ actId: str, inputHash: str, commitSeq: dec, outboundDigests: arr(str), events: arr(eventOf(1)), at: millis }), 'actId'),
     encounter: obj({
         challenges: keyed(obj({ value: str, tCh: millis, label: str, card: anyObj }), 'value'),
         records: keyed(enactmentRecord, 'own'),
@@ -334,10 +378,50 @@ const codec1 = obj({
             status: lit('open', 'accepted', 'declined', 'joined'), at: millis,
         }, { acceptDigest: str }), 'credDigest'),
     }),
+};
+const codec1 = obj(fields1);
+/** a sorted set of strings */
+const sortedSet = (x, p) => {
+    set(str)(x, p);
+    const a = x;
+    for (let i = 1; i < a.length; i++)
+        if (!(a[i - 1] < a[i]))
+            fail(`${p}[${i}]`, 'a sorted set expected');
+};
+/** an invitation received: attributed to a relationship (contactId and
+ *  rkid together) or to none (Membership RLTP-MT-3100) */
+const receivedInvite2 = (x, p) => {
+    obj({
+        credDigest: str, group: str, name: str, memberLabel: str, invite: anyObj, promptId: str, validUntil: millis,
+        status: lit('open', 'accepted', 'declined', 'joined'), at: millis,
+    }, { acceptDigest: str, contactId: str, rkid: str })(x, p);
+    const i = x;
+    if ((i.contactId === undefined) !== (i.rkid === undefined))
+        fail(`${p}.rkid`, 'present exactly with contactId');
+};
+const codec2 = obj({
+    ...fields1,
+    codec: lit(2),
+    outbox: rec(outboxItemOf(2)),
+    acts: keyed(obj({ actId: str, inputHash: str, commitSeq: dec, outboundDigests: arr(str), events: arr(eventOf(2)), at: millis }), 'actId'),
+    joining: obj({
+        preludes: rec(obj({ group: str, inviter: str, contactId: str, rkid: str, memberLabel: str, at: millis })),
+        invites: keyed(receivedInvite2, 'credDigest'),
+        surfaced: sortedSet,
+        declined: sortedSet,
+    }),
+    messages: obj({
+        blocked: sortedSet,
+        rates: rec(obj({ invites: arr(millis), messages: arr(millis) })),
+        ready: sortedSet,
+        records: rec(rec(obj({ bodyDigest: str, sentAt: millis }))),
+        inbox: keyed(obj({ id: str, tuple: str, mid: str, body: anyObj, receivedAt: millis, displayAt: millis }), 'id'),
+    }),
 });
 /** Structural validators per codec version; every readable codec has one. */
 export const VALIDATORS = Object.freeze({
     1: (raw) => codec1(raw, '$'),
+    2: (raw) => codec2(raw, '$'),
 });
 // ── the codec ──────────────────────────────────────────────────────────
 /** Canonical JSON text of a JSON-pure value, or not-json. */