@real-life/trust-protocol 0.5.0 → 0.6.1

package/dist/holder-api.d.ts

@@ -1,6 +1,6 @@
-import type { CommitListener, EnginePorts, HolderModule } from './engine.js';
+import type { CommitListener, EnginePorts, HolderModule, TransportEntry, TransportRefusal, TransportView } from './engine.js';
 import type { DeliveryReport } from './ports.js';
-import type { ActResult, ReceiveResult, ResumeResult } from './results.js';
+import type { ActResult, ReceiveResult, ReplayResult, ResumeResult } from './results.js';
 import type { DeviceKeyResult } from './identity-state.js';
 import type { ProfileContent } from './profile.js';
 import type { Dec, Millis, OpaqueHolderState, PromptChoice, Setting, TrustClass } from './state.js';
@@ -156,6 +156,26 @@ export interface Holder {
     inbox(): Promise<InboxMessageView[]>;
     /** by document digest or threadId */
     deliveryStatus(digestOrThreadId: string): Promise<DeliveryStatusView>;
+    /** the journaled result of the human act `actId` (any of the acts above:
+     *  for sendMessage its `message.sent` event with `mid` and `digest`), or
+     *  `{ok: false, code: 'unknown-act'}`; a pure read that never runs the
+     *  act, never mints a mid, commits nothing. The question an app asks
+     *  after a crash or a lock instead of repeating the act blind */
+    replay(actId: string, when: Millis): Promise<ReplayResult>;
+    /** what the holder keeps for transport at `when`, after this opening's
+     *  first completed resume (else `{ok: false, code: 'not-resumed'}`) */
+    pendingTransport(when: Millis): Promise<TransportView | TransportRefusal>;
+    /** right before a hand-over: whether this opening's `entry` may go now */
+    mayHandOver(entry: TransportEntry, when: Millis): Promise<boolean>;
+    /** the hand-over: the same check, then `start()` (which starts the
+     *  deposit synchronously and says whether it did) inside the holder's
+     *  queue; true when both said yes */
+    handOver(entry: TransportEntry, when: Millis, start: () => boolean): Promise<boolean>;
+    /** ends this opening (a lock, the end of a process); resolves once the
+     *  operation running at the call has finished: after that the opening
+     *  commits nothing more, and the next opening may start */
+    close(): Promise<void>;
+    readonly closed: boolean;
 }
 /** A holder over its ports: `{store, keys, entropy?, log?, access?, retry?, crypto?}`.
  *  The crypto handle (default globalThis.crypto) is resolved and probed

package/dist/holder-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"holder-api.d.ts","sourceRoot":"","sources":["../src/holder-api.ts"],"names":[],"mappings":"AAgEA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC5E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEhD,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAQ1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAE1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAOnG,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAErC,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvH;yDACyD;AACzD,MAAM,WAAW,cAAc;IAAG,SAAS,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE;AAE5E,MAAM,WAAW,aAAa;IAC5B,wFAAwF;IACxF,OAAO,CAAC,EAAE,SAAS,YAAY,EAAE,CAAA;IACjC;;2EAEuE;IACvE,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED;iCACiC;AACjC,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAEhE,MAAM,WAAW,MAAM;IACrB,qFAAqF;IACrF,GAAG,CAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAClG;wEACoE;IACpE,MAAM,CAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1F,kFAAkF;IAClF,KAAK,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE,wEAAwE;IACxE,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE,mFAAmF;IACnF,UAAU,CAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1F,iEAAiE;IACjE,QAAQ,CAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1G,qFAAqF;IACrF,aAAa,CAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/G,yEAAyE;IACzE,KAAK,CAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvE;+CAC2C;IAC3C,MAAM,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACnG,uFAAuF;IACvF,OAAO,CAAE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpD,yGAAyG;IACzG,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACnE,mGAAmG;IACnG,YAAY,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;;qFAEiF;IACjF,YAAY,CAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxD;;oDAEgD;IAChD,UAAU,CAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/E;;;4BAGwB;IACxB,IAAI,CAAE,IAAI,EAAE,eAAe,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE;;qCAEiC;IACjC,IAAI,CAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAChF,qFAAqF;IACrF,eAAe,CAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvE,uFAAuF;IACvF,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;kFAC8E;IAC9E,UAAU,CAAE,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1H;;wBAEoB;IACpB,MAAM,CAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtF;;;;8DAI0D;IAC1D,SAAS,CAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjH;8CAC0C;IAC1C,QAAQ,CAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,UAAU,CAAC,EAAE,KAAK,GAAG,YAAY,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC7H;;;;;;;;6DAQyD;IACzD,WAAW,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/G;kEAC8D;IAC9D,YAAY,CAAE,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxE;;;+EAG2E;IAC3E,KAAK,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE;yDACqD;IACrD,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;0DACsD;IACtD,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACxE,IAAI,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvC,MAAM,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC5C,MAAM,CAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjE;yDACqD;IACrD,OAAO,CAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAC5D,iFAAiF;IACjF,SAAS,CAAE,QAAQ,EAAE,cAAc,GAAG,MAAM,IAAI,CAAA;IAChD,QAAQ,IAAK,OAAO,CAAC,cAAc,CAAC,CAAA;IACpC,QAAQ,IAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IACnC,2BAA2B;IAC3B,OAAO,CAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAA;IACtD,MAAM,IAAK,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAC/B,OAAO,IAAK,OAAO,CAAC,WAAW,CAAC,CAAA;IAChC,OAAO,IAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IACjC;iEAC6D;IAC7D,KAAK,IAAK,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAA;IACrC,qCAAqC;IACrC,cAAc,CAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;CACvE;AAED;;;wDAGwD;AACxD,wBAAsB,YAAY,CAAE,KAAK,EAAE,WAAW,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CA+DjG"}
+{"version":3,"file":"holder-api.d.ts","sourceRoot":"","sources":["../src/holder-api.ts"],"names":[],"mappings":"AAkGA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC7H,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEhD,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAQxF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAE1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAOnG,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAErC,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvH;yDACyD;AACzD,MAAM,WAAW,cAAc;IAAG,SAAS,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE;AAE5E,MAAM,WAAW,aAAa;IAC5B,wFAAwF;IACxF,OAAO,CAAC,EAAE,SAAS,YAAY,EAAE,CAAA;IACjC;;2EAEuE;IACvE,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED;iCACiC;AACjC,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAEhE,MAAM,WAAW,MAAM;IACrB,qFAAqF;IACrF,GAAG,CAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAClG;wEACoE;IACpE,MAAM,CAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1F,kFAAkF;IAClF,KAAK,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE,wEAAwE;IACxE,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE,mFAAmF;IACnF,UAAU,CAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1F,iEAAiE;IACjE,QAAQ,CAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1G,qFAAqF;IACrF,aAAa,CAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/G,yEAAyE;IACzE,KAAK,CAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvE;+CAC2C;IAC3C,MAAM,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACnG,uFAAuF;IACvF,OAAO,CAAE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpD,yGAAyG;IACzG,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACnE,mGAAmG;IACnG,YAAY,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;;qFAEiF;IACjF,YAAY,CAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxD;;oDAEgD;IAChD,UAAU,CAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/E;;;4BAGwB;IACxB,IAAI,CAAE,IAAI,EAAE,eAAe,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE;;qCAEiC;IACjC,IAAI,CAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAChF,qFAAqF;IACrF,eAAe,CAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvE,uFAAuF;IACvF,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;kFAC8E;IAC9E,UAAU,CAAE,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1H;;wBAEoB;IACpB,MAAM,CAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtF;;;;8DAI0D;IAC1D,SAAS,CAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjH;8CAC0C;IAC1C,QAAQ,CAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,UAAU,CAAC,EAAE,KAAK,GAAG,YAAY,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC7H;;;;;;;;6DAQyD;IACzD,WAAW,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/G;kEAC8D;IAC9D,YAAY,CAAE,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxE;;;+EAG2E;IAC3E,KAAK,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE;yDACqD;IACrD,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;0DACsD;IACtD,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACxE,IAAI,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvC,MAAM,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC5C,MAAM,CAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjE;yDACqD;IACrD,OAAO,CAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAC5D,iFAAiF;IACjF,SAAS,CAAE,QAAQ,EAAE,cAAc,GAAG,MAAM,IAAI,CAAA;IAChD,QAAQ,IAAK,OAAO,CAAC,cAAc,CAAC,CAAA;IACpC,QAAQ,IAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IACnC,2BAA2B;IAC3B,OAAO,CAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAA;IACtD,MAAM,IAAK,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAC/B,OAAO,IAAK,OAAO,CAAC,WAAW,CAAC,CAAA;IAChC,OAAO,IAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IACjC;iEAC6D;IAC7D,KAAK,IAAK,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAA;IACrC,qCAAqC;IACrC,cAAc,CAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IACtE;;;;qEAIiE;IACjE,MAAM,CAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC3D;2EACuE;IACvE,gBAAgB,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,gBAAgB,CAAC,CAAA;IAC1E,0EAA0E;IAC1E,WAAW,CAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnE;;yCAEqC;IACrC,QAAQ,CAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtF;;+DAE2D;IAC3D,KAAK,IAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CACzB;AAED;;;wDAGwD;AACxD,wBAAsB,YAAY,CAAE,KAAK,EAAE,WAAW,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAqEjG"}

package/dist/holder-api.js

@@ -51,6 +51,20 @@
 // unrevoked name under an own anchor context (identity-state.ts).
 // A missing actId is refused at runtime as actid-missing.
 //
+// One actId, one result: replay(actId, when) reads the journaled result of
+// any of the human acts above (its events: for sendMessage `message.sent`
+// with mid and digest; its commit time; its documents and whether a repeat
+// would hand them out at `when`), or answers unknown-act. It runs nothing
+// and commits nothing, needs no keys, and works on every opening over the
+// store. A repeat of the act under the same actId answers the same events
+// at any clock, across a lock and a new opening; the journal holds an act
+// for the retention max(P90D, retry.horizonMs) after its commit and after
+// the last step of each of its documents, in holder time (engine.ts),
+// after which the actId is unknown. An app that does not
+// know whether an act committed (a crash, an unknown-commit-outcome, a
+// lock) asks replay; on unknown-act the act did not commit or has left
+// the journal, and only the human decides to act anew.
+//
 // Reading: the views (views.ts) over one snapshot each, carrying its
 // commitSeq. `subscribe` announces every commit with its commitSeq and
 // events; the app re-reads the views it shows, and a view read after the
@@ -58,9 +72,29 @@
 //
 // Delivery: `receive(env, when)` runs Delivery §6.2 in the core and
 // dispatches through the task register (receive.ts); `report` takes the
-// adapter's reports (on an ack's digest it marks the ack sent); `resume`
-// re-emits, runs due duties and re-emits unsent acks; `tick` expires and
-// retains (engine.ts).
+// adapter's reports (on an ack's digest: accepted or delivered marks it
+// sent, failed gives it up, awaiting-transport records that the adapter
+// holds it); `resume` re-emits, runs due duties and re-emits unsent acks;
+// `tick` expires and retains (engine.ts).
+//
+// Custody (Delivery 0.83 RLTP-DEL-6120 to 6135): the holder keeps every
+// outbound document until a service takes it or the holder gives it up,
+// across a lock and the end of a process. One createHolder is one opening.
+// After its first resume, `pendingTransport(when)` names what is to be
+// handed over: the outbox items neither terminal nor accepted (held ones
+// included) and the unsent acks, each with its envelope, its first
+// submission and its deadline, none past it. A transport hands over only
+// such entries, through `handOver(entry, when, start)`: the check of
+// `mayHandOver` and the start of the deposit in one step of the holder's
+// queue, true only for an entry this opening issued that is still pending,
+// unchanged, before its deadline. A duplicate's stored ack past its retries
+// appears once as a `resend` entry (Delivery RLTP-DEL-6330). A document missing from the
+// view is no longer to be sent. `await close()` ends the opening at a lock or
+// the end of a process (resolved once the running operation finished, the
+// moment the next opening may start): every later call rejects with InfraError
+// 'closed', mayHandOver answers false, and nothing issued before
+// authorizes anything; the next opening is a new createHolder over the
+// same store, resumed first.
 import { createEngine } from './engine.js';
 import { DECIDE, collectDecisions, promptsModule } from './prompts.js';
 import { InfraError } from './results.js';
@@ -137,6 +171,12 @@ export async function createHolder(ports, opts = {}) {
         prompts: async () => promptsView(await read()),
         inbox: async () => inboxView(await read()),
         deliveryStatus: async (x) => deliveryStatusView(await read(), x),
+        replay: (actId, when) => engine.replay(actId, when),
+        pendingTransport: (when) => engine.pendingTransport(when),
+        mayHandOver: (entry, when) => engine.mayHandOver(entry, when),
+        handOver: (entry, when, start) => engine.handOver(entry, when, start),
+        close: () => engine.close(),
+        get closed() { return engine.closed; },
     });
 }
 //# sourceMappingURL=holder-api.js.map

package/dist/holder-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"holder-api.js","sourceRoot":"","sources":["../src/holder-api.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,4EAA4E;AAC5E,wEAAwE;AACxE,qEAAqE;AACrE,4EAA4E;AAC5E,wEAAwE;AACxE,sEAAsE;AACtE,uEAAuE;AACvE,uEAAuE;AACvE,0EAA0E;AAC1E,wIAAwI;AACxI,0EAA0E;AAC1E,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,wEAAwE;AACxE,oEAAoE;AACpE,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,0EAA0E;AAC1E,yEAAyE;AACzE,qEAAqE;AACrE,SAAS;AACT,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,oFAAoF;AACpF,oFAAoF;AACpF,+EAA+E;AAC/E,+EAA+E;AAC/E,wEAAwE;AACxE,kEAAkE;AAClE,0DAA0D;AAC1D,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AACvE,yEAAyE;AACzE,8CAA8C;AAC9C,EAAE;AACF,oEAAoE;AACpE,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,uBAAuB;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG1C,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAEtE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAGlD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAGhD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAC7E,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAC3F,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AACpF,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAErE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAkI3H;;;wDAGwD;AACxD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAE,KAAkB,EAAE,OAAsB,EAAE;IAC9E,MAAM,OAAO,GAAG,CAAC,cAAc,EAAE,EAAE,WAAW,EAAE,EAAE,eAAe,EAAE,EAAE,gBAAgB,EAAE,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAA;IACxJ,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI;QACpC,CAAC,CAAC,CAAC,MAA6B,EAAE,KAA4B,EAAE,EAAY,EAAE,EAAE;YAC5E,MAAM,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;YAC7C,IAAI,CAAC,CAAC,MAAM;gBAAE,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,wBAAwB,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QACvK,CAAC;QACH,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAA;IAC1J,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAA;IACxD,4FAA4F;IAC5F,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,KAAc,EAAE,CAA8B,EAAE,EAAE,CAChF,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAc,EAAE,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAA;IACjG,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,CAAC,OAAe,EAAE,KAAc,EAAE,IAAY,EAAE,CAAsB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnH,MAAM,EAAE,CAAC,QAAgB,EAAE,MAAoB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9G,KAAK,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACvG,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1G,UAAU,EAAE,CAAC,SAAiB,EAAE,MAAe,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7H,QAAQ,EAAE,CAAC,SAAiB,EAAE,GAAe,EAAE,OAAgB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACtJ,aAAa,EAAE,CAAC,SAAiB,EAAE,OAAe,EAAE,OAAgB,EAAE,CAAkB,EAAE,EAAE,CAC1F,KAAK,CAAC,cAAc,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACzE,KAAK,EAAE,CAAC,UAAoB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QACnG,MAAM,EAAE,CAAC,SAAiB,EAAE,CAAgD,EAAE,EAAE,CAC9E,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACpI,OAAO,EAAE,CAAC,CAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,IAAc,CAAC;QAC3F,YAAY,EAAE,CAAC,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5E,UAAU,EAAE,CAAC,OAAuB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3F,IAAI,EAAE,CAAC,CAAsC,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClI,IAAI,EAAE,CAAC,IAAU,EAAE,CAAsC,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1J,eAAe,EAAE,CAAC,IAAU,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACnG,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACvG,UAAU,EAAE,CAAC,CAA8D,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1I,MAAM,EAAE,CAAC,OAAe,EAAE,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAChI,QAAQ,EAAE,CAAC,OAAe,EAAE,MAAc,EAAE,CAA0D,EAAE,EAAE,CACxG,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACxI,SAAS,EAAE,CAAC,WAAmB,EAAE,QAAgB,EAAE,CAAuC,EAAE,EAAE,CAC5F,KAAK,CAAC,qBAAqB,CAAC,SAAS,EAAE,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3I,WAAW,EAAE,CAAC,SAAiB,EAAE,IAAY,EAAE,CAAyC,EAAE,EAAE,CAC1F,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3H,YAAY,EAAE,CAAC,GAAa,EAAE,CAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,IAAc,CAAC;QACnH,KAAK,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChH,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACnH,SAAS,EAAE,CAAC,IAAY,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChG,YAAY,EAAE,CAAC,IAAY,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACtG,SAAS,EAAE,KAAK,EAAE,IAAY,EAAE,YAAoB,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC;QAClH,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACzC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,CAAC,MAAsB,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;QAC7E,OAAO,EAAE,CAAC,GAAY,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC;QAClE,SAAS,EAAE,CAAC,QAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;QACnE,QAAQ,EAAE,KAAK,IAA6B,EAAE;YAC5C,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAA;YACjC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC5E,CAAC;QACD,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5D,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC;QAC5C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9C,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;QAC1C,cAAc,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;KACzE,CAAC,CAAA;AACJ,CAAC","sourcesContent":["// holder-api — createHolder, the facade over the engine (lib Stage 2,\n// note §4.1, §4.5). Domain modules (identity, encounter, trust, continuity,\n// membership, profile) register with the engine as they graduate; today\n// the facade carries the engine's built-ins, the prompts module, the\n// encounter module (encounter/ceremony.ts: show, scan, the optical leg, the\n// counter-step, the bundle and the credential delivery), the membership\n// module (membership/holder.ts: founding, the prelude and invite, the\n// accept on a group-invite prompt, admission and welcome, evidence and\n// vouches; and the in-library Access over the holder's groups where no\n// Access port is given), the introduction module (introduction/holder.ts:\n// the three roles of Trust §8 and the mediator's start), the identity module (identity-state.ts: device names, the rotation), the trust\n// module (trust/mapping.ts: the Trust act, the class settings, the anchor\n// mapping's issuance and reception, the entry commit; trust/star.ts and\n// trust/group-star.ts: the star and the group star, reconciled on resume\n// and received with their assemblies; trust/entries.ts: merge, split and\n// departure; trust/continuity.ts: the probe, the continuity mapping and\n// the chaining; trust/profile.ts: profile@1) and the modules given.\n//\n// The human acts (note §4.2) are typed methods with an options object\n// `{when, actId}`; actId is required, minted by the app when the human\n// acts, and journaled with the act's result (a repeat with the same actId\n// replays it, another input under it is actid-conflict). They wrap `act`\n// with the trust module's command names, which stays for modules and\n// tests:\n//   trust(contactId, opts)                    trust.set {on: true}      human\n//   untrust(contactId, opts)                  trust.set {on: false}     human\n//   pauseTrust(contactId, paused, opts)       trust.pause               human\n//   setClass(contactId, cls, setting, opts)   trust.setClass            human\n//   setGroupClass(contactId, groupId, setting, opts)  trust.setGroupClass human\n//   merge(contactIds, opts)                   trust.merge               human\n//   depart(contactId, opts{relationshipId?})  trust.depart              human\n//   decide(promptId, choice, opts)            prompt.decide             human\n//   addDevice(name, opts)                     identity.addDevice        human\n//   revokeDevice(name, opts)                  identity.revokeDevice     human\n//   rotateAnchor(opts)                        identity.rotate           human\n//   setProfile({name, image?, text?}, opts)   profile.set               human\n//   show(opts{name?})                         encounter.show            human\n//   scan(card, opts{name?})                   encounter.scan            human\n//   captureSentCard(card, opts)               encounter.capture         human\n//   counter(contactId, opts)                  encounter.counter         human\n//   foundGroup({name, vouchThreshold?, listed?}, opts)  membership.found human\n//   invite(groupId, contactId, opts)          membership.invite         human\n//   vouchFor(groupId, member, opts{provenance?})  membership.vouch      human\n//   introduce(requesterId, targetId, opts)    introduction.introduce    human\n//   sendMessage(contactId, text, opts{replyTo?})  message.send         human\n//   block(contactId, opts)                    message.block {blocked: true}   human\n//   unblock(contactId, opts)                  message.block {blocked: false}  human\n//   recover({when})                           trust.recover          not human\n//   takeMessages(ids, {when})                 message.take           not human\n// and the read deviceKey(name, contextLabel): the device key of a held,\n// unrevoked name under an own anchor context (identity-state.ts).\n// A missing actId is refused at runtime as actid-missing.\n//\n// Reading: the views (views.ts) over one snapshot each, carrying its\n// commitSeq. `subscribe` announces every commit with its commitSeq and\n// events; the app re-reads the views it shows, and a view read after the\n// announcement is at that commitSeq or later.\n//\n// Delivery: `receive(env, when)` runs Delivery §6.2 in the core and\n// dispatches through the task register (receive.ts); `report` takes the\n// adapter's reports (on an ack's digest it marks the ack sent); `resume`\n// re-emits, runs due duties and re-emits unsent acks; `tick` expires and\n// retains (engine.ts).\nimport { createEngine } from './engine.js'\nimport type { CommitListener, EnginePorts, HolderModule } from './engine.js'\nimport type { DeliveryReport } from './ports.js'\nimport { DECIDE, collectDecisions, promptsModule } from './prompts.js'\nimport type { ActResult, ReceiveResult, ResumeResult } from './results.js'\nimport { InfraError } from './results.js'\nimport { commitViolations } from './invariants.js'\nimport type { CommitOp } from './invariants.js'\nimport type { HolderState } from './state.js'\nimport { toOpaque } from './state.js'\nimport { trustModule } from './trust/mapping.js'\nimport { IDENTITY_COMMANDS, deviceKeyOf, identityModule } from './identity-state.js'\nimport type { DeviceKeyResult } from './identity-state.js'\nimport { PROFILE_SET } from './trust/profile.js'\nimport type { ProfileContent } from './profile.js'\nimport type { Dec, Millis, OpaqueHolderState, PromptChoice, Setting, TrustClass } from './state.js'\nimport { TRUST_COMMANDS } from './trust/mapping.js'\nimport { ENTRY_COMMANDS } from './trust/entries.js'\nimport { ENCOUNTER_COMMANDS, encounterModule } from './encounter/ceremony.js'\nimport { MEMBERSHIP_COMMANDS, localAccess, membershipModule } from './membership/holder.js'\nimport { INTRODUCTION_COMMANDS, introductionModule } from './introduction/holder.js'\nimport { MESSAGE_COMMANDS, messageModule } from './message/holder.js'\nimport type { Json } from './core.js'\nimport { contactView, contactsView, deliveryStatusView, groupsView, inboxView, profileView, promptsView } from './views.js'\nimport type { ContactView, DeliveryStatusView, GroupView, InboxMessageView, ProfileView, PromptView } from './views.js'\n\n/** The committed state and its commitSeq; the state is opaque (note §4.5):\n *  apps read the views, store tooling may persist it. */\nexport interface HolderSnapshot { commitSeq: Dec, state: OpaqueHolderState }\n\nexport interface HolderOptions {\n  /** domain modules to register beside the built-ins, the prompts and the trust module */\n  modules?: readonly HolderModule[]\n  /** testing mode: check the invariants of invariants.ts on every commit,\n   *  before the store's CAS; a violation throws InfraError\n   *  'invariant-violated' (cause: the violations) and nothing commits */\n  invariants?: boolean\n}\n\n/** The options of a human act (note §4.2): its time and the actId the app\n *  mints when the human acts. */\nexport interface HumanActOptions { when: Millis, actId: string }\n\nexport interface Holder {\n  /** any registered command by name, for modules and tests; apps use the typed acts */\n  act (command: string, input: unknown, when: Millis, opts?: { actId?: string }): Promise<ActResult>\n  /** the human's decision on an open prompt: a human act under the app's\n   *  actId (note §4.2); a missing actId is also refused at runtime */\n  decide (promptId: string, choice: PromptChoice, opts: HumanActOptions): Promise<ActResult>\n  /** the Trust act: the anchor mapping class on toward the contact (2770); human */\n  trust (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** trust withdrawn: the anchor mapping class off (2840, 2850); human */\n  untrust (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the pause of 5.4: star and blinded group star off, or back to default; human */\n  pauseTrust (contactId: string, paused: boolean, opts: HumanActOptions): Promise<ActResult>\n  /** one class's setting toward the contact (2780, 2810); human */\n  setClass (contactId: string, cls: TrustClass, setting: Setting, opts: HumanActOptions): Promise<ActResult>\n  /** the sealed group star's setting for one group toward the contact (2830); human */\n  setGroupClass (contactId: string, groupId: string, setting: Setting, opts: HumanActOptions): Promise<ActResult>\n  /** the manual merge (6640): at most one of them holds an entry; human */\n  merge (contactIds: string[], opts: HumanActOptions): Promise<ActResult>\n  /** departure (2260): the entry, the relationships of an alias, or one\n   *  relationship (relationshipId); human */\n  depart (contactId: string, opts: HumanActOptions & { relationshipId?: string }): Promise<ActResult>\n  /** 2240: entries re-commit from verified mappings recovered without them; not human */\n  recover (opts: { when: Millis }): Promise<ActResult>\n  /** a device name into the register before any key derived from it is presented (Identity §5.5); human */\n  addDevice (name: string, opts: HumanActOptions): Promise<ActResult>\n  /** the name's revocation mark: never removed, the name never given again (Identity §5.5); human */\n  revokeDevice (name: string, opts: HumanActOptions): Promise<ActResult>\n  /** the community anchor's rotation (Identity §5.4): step 1 (label,\n   *  closure, 6596 decided) when none runs, else step 2 of the running one\n   *  through the Log port; resume carries step 2 on its own (identity-state.ts) */\n  rotateAnchor (opts: HumanActOptions): Promise<ActResult>\n  /** the own profile (Trust 6b): validated (6430, 6435, 6475), the next\n   *  revision of the one counter (6450), delivered on every relationship\n   *  the profile class is on for (6455); human */\n  setProfile (content: ProfileContent, opts: HumanActOptions): Promise<ActResult>\n  /** a displayed card with a fresh own challenge under a fresh pair\n   *  anchor (Encounter 5.3, 4.4): the event encounter.shown carries the\n   *  card to display; `name` the card's display name (default: the own\n   *  profile's); human */\n  show (opts: HumanActOptions & { name?: string }): Promise<ActResult>\n  /** the scanner's step on a displayed card (Encounter 5.8): the record,\n   *  the fresh tuple, the bundle; encounter.scanned carries the sent card\n   *  for the optical leg; human */\n  scan (card: Json, opts: HumanActOptions & { name?: string }): Promise<ActResult>\n  /** the optical leg (Encounter 5.8, 5710): a sent card shown by the scanner; human */\n  captureSentCard (card: Json, opts: HumanActOptions): Promise<ActResult>\n  /** the counter-step toward a contact met as displayer (Encounter 5.8 step 4); human */\n  counter (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** a group founded under a fresh pair anchor (Access 3.4.1); its rule\n   *  vouchThreshold (default \"1\") is group state; event group.founded; human */\n  foundGroup (group: { name: string, vouchThreshold?: string, listed?: boolean }, opts: HumanActOptions): Promise<ActResult>\n  /** invite a contact into a group: the prelude, then the invite on its\n   *  answer (Membership 1.2, 3.1); the contact decides on a group-invite\n   *  prompt; human */\n  invite (groupId: string, contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the mediator's act (Trust §8, this library's start of it): the\n   *  requester gets an offer naming the target by an opaque designator and\n   *  at most the `label` the human types here, with the mediator's\n   *  ack-delay declaration; the requester decides on an\n   *  `introduction` prompt, the target on another; human */\n  introduce (requesterId: string, targetId: string, opts: HumanActOptions & { label?: string }): Promise<ActResult>\n  /** a vouch@2 for a member anchor whose consent pair this holder holds\n   *  (Access 5.3, Membership 3.4); human */\n  vouchFor (groupId: string, member: string, opts: HumanActOptions & { provenance?: 'met' | 'introduced' }): Promise<ActResult>\n  /** a text message to the contact (Message Tasks 3, 5): 1 to 4096 code\n   *  points, replyTo the mid of an earlier message of the relationship. It\n   *  goes on a ready, unblocked relationship (canMessage); otherwise refused\n   *  as not-ready, blocked or no-own-channel, and the app keeps it unsent.\n   *  Event message.sent {mid, digest}; deliveryStatus(digest) is its sender\n   *  status. Undelivered, it ends as failed(expired-by-adapter-policy) at\n   *  the retry horizon (P7D by default, P90D at most), before its sender\n   *  lifetime sentAt + P179D: failed(task-expired) is not reached for a\n   *  message under any horizon the engine admits; human */\n  sendMessage (contactId: string, text: string, opts: HumanActOptions & { replyTo?: string }): Promise<ActResult>\n  /** the inbox entries the app has durably taken over leave the inbox\n   *  (4420); their completion record stays (4350); not human */\n  takeMessages (ids: string[], opts: { when: Millis }): Promise<ActResult>\n  /** the block (Message Tasks 6): set on every relationship of the\n   *  contact's entry. Messages, invitations and the holder's own offers on\n   *  them stop; the protocol steps owed continue; the contact observes\n   *  nothing it would not without the block. Event contact.blocked; human */\n  block (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the block cleared on every relationship of the entry: nothing that\n   *  was discarded under it reappears (6510); human */\n  unblock (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the device key of a held, unrevoked device name under an own anchor\n   *  context (Identity §5.5); reads, changes nothing */\n  deviceKey (name: string, contextLabel: string): Promise<DeviceKeyResult>\n  tick (when: Millis): Promise<ActResult>\n  resume (when: Millis): Promise<ResumeResult>\n  report (report: DeliveryReport, when: Millis): Promise<ActResult>\n  /** an arriving envelope, as the app's transport delivered it (non-human,\n   *  no actId; idempotent over the document digest) */\n  receive (env: unknown, when: Millis): Promise<ReceiveResult>\n  /** after every commit: its commitSeq and events, the cue to re-read the views */\n  subscribe (listener: CommitListener): () => void\n  snapshot (): Promise<HolderSnapshot>\n  contacts (): Promise<ContactView[]>\n  /** by entry id or alias */\n  contact (id: string): Promise<ContactView | undefined>\n  groups (): Promise<GroupView[]>\n  profile (): Promise<ProfileView>\n  prompts (): Promise<PromptView[]>\n  /** the messages accepted and not yet taken over (Message Tasks 4.5),\n   *  by display time; event message.received announces each */\n  inbox (): Promise<InboxMessageView[]>\n  /** by document digest or threadId */\n  deliveryStatus (digestOrThreadId: string): Promise<DeliveryStatusView>\n}\n\n/** A holder over its ports: `{store, keys, entropy?, log?, access?, retry?, crypto?}`.\n *  The crypto handle (default globalThis.crypto) is resolved and probed\n *  here and also feeds the default entropy; an app that injects one\n *  passes the same handle to seedKeys(seed, crypto). */\nexport async function createHolder (ports: EnginePorts, opts: HolderOptions = {}): Promise<Holder> {\n  const modules = [identityModule(), trustModule(), encounterModule(), membershipModule(), introductionModule(), messageModule(), ...(opts.modules ?? [])]\n  const check = opts.invariants === true\n    ? (before: Readonly<HolderState>, after: Readonly<HolderState>, op: CommitOp) => {\n        const v = commitViolations(before, after, op)\n        if (v.length) throw new InfraError('invariant-violated', `invariants broken by ${op.kind}: ${v.map((x) => `[${x.invariant}] ${x.detail}`).join('; ')}`, { cause: v })\n      }\n    : undefined\n  const engine = await createEngine(ports, [promptsModule(collectDecisions(modules)), ...modules], { ...(check ? { check } : {}), accessFrom: localAccess })\n  const read = async () => (await engine.snapshot()).state\n  /** a human act: `when` and actId from the options, a missing actId refused by the engine */\n  const human = (command: string, input: unknown, o: HumanActOptions | undefined) =>\n    engine.act(command, input, o?.when as Millis, o?.actId === undefined ? {} : { actId: o.actId })\n  return Object.freeze({\n    act: (command: string, input: unknown, when: Millis, o?: { actId?: string }) => engine.act(command, input, when, o),\n    decide: (promptId: string, choice: PromptChoice, o: HumanActOptions) => human(DECIDE, { promptId, choice }, o),\n    trust: (contactId: string, o: HumanActOptions) => human(TRUST_COMMANDS.set, { contactId, on: true }, o),\n    untrust: (contactId: string, o: HumanActOptions) => human(TRUST_COMMANDS.set, { contactId, on: false }, o),\n    pauseTrust: (contactId: string, paused: boolean, o: HumanActOptions) => human(TRUST_COMMANDS.pause, { contactId, paused }, o),\n    setClass: (contactId: string, cls: TrustClass, setting: Setting, o: HumanActOptions) => human(TRUST_COMMANDS.setClass, { contactId, cls, setting }, o),\n    setGroupClass: (contactId: string, groupId: string, setting: Setting, o: HumanActOptions) =>\n      human(TRUST_COMMANDS.setGroupClass, { contactId, groupId, setting }, o),\n    merge: (contactIds: string[], o: HumanActOptions) => human(ENTRY_COMMANDS.merge, { contactIds }, o),\n    depart: (contactId: string, o: HumanActOptions & { relationshipId?: string }) =>\n      human(ENTRY_COMMANDS.depart, o?.relationshipId === undefined ? { contactId } : { contactId, relationshipId: o.relationshipId }, o),\n    recover: (o: { when: Millis }) => engine.act(TRUST_COMMANDS.recover, {}, o?.when as Millis),\n    rotateAnchor: (o: HumanActOptions) => human(IDENTITY_COMMANDS.rotate, {}, o),\n    setProfile: (content: ProfileContent, o: HumanActOptions) => human(PROFILE_SET, content, o),\n    show: (o: HumanActOptions & { name?: string }) => human(ENCOUNTER_COMMANDS.show, o?.name === undefined ? {} : { name: o.name }, o),\n    scan: (card: Json, o: HumanActOptions & { name?: string }) => human(ENCOUNTER_COMMANDS.scan, o?.name === undefined ? { card } : { card, name: o.name }, o),\n    captureSentCard: (card: Json, o: HumanActOptions) => human(ENCOUNTER_COMMANDS.capture, { card }, o),\n    counter: (contactId: string, o: HumanActOptions) => human(ENCOUNTER_COMMANDS.counter, { contactId }, o),\n    foundGroup: (g: { name: string, vouchThreshold?: string, listed?: boolean }, o: HumanActOptions) => human(MEMBERSHIP_COMMANDS.found, g, o),\n    invite: (groupId: string, contactId: string, o: HumanActOptions) => human(MEMBERSHIP_COMMANDS.invite, { groupId, contactId }, o),\n    vouchFor: (groupId: string, member: string, o: HumanActOptions & { provenance?: 'met' | 'introduced' }) =>\n      human(MEMBERSHIP_COMMANDS.vouch, o?.provenance === undefined ? { groupId, member } : { groupId, member, provenance: o.provenance }, o),\n    introduce: (requesterId: string, targetId: string, o: HumanActOptions & { label?: string }) =>\n      human(INTRODUCTION_COMMANDS.introduce, o?.label === undefined ? { requesterId, targetId } : { requesterId, targetId, label: o.label }, o),\n    sendMessage: (contactId: string, text: string, o: HumanActOptions & { replyTo?: string }) =>\n      human(MESSAGE_COMMANDS.send, o?.replyTo === undefined ? { contactId, text } : { contactId, text, replyTo: o.replyTo }, o),\n    takeMessages: (ids: string[], o: { when: Millis }) => engine.act(MESSAGE_COMMANDS.take, { ids }, o?.when as Millis),\n    block: (contactId: string, o: HumanActOptions) => human(MESSAGE_COMMANDS.block, { contactId, blocked: true }, o),\n    unblock: (contactId: string, o: HumanActOptions) => human(MESSAGE_COMMANDS.block, { contactId, blocked: false }, o),\n    addDevice: (name: string, o: HumanActOptions) => human(IDENTITY_COMMANDS.addDevice, { name }, o),\n    revokeDevice: (name: string, o: HumanActOptions) => human(IDENTITY_COMMANDS.revokeDevice, { name }, o),\n    deviceKey: async (name: string, contextLabel: string) => deviceKeyOf(await read(), ports.keys, name, contextLabel),\n    tick: (when: Millis) => engine.tick(when),\n    resume: (when: Millis) => engine.resume(when),\n    report: (report: DeliveryReport, when: Millis) => engine.report(report, when),\n    receive: (env: unknown, when: Millis) => engine.receive(env, when),\n    subscribe: (listener: CommitListener) => engine.subscribe(listener),\n    snapshot: async (): Promise<HolderSnapshot> => {\n      const s = await engine.snapshot()\n      return Object.freeze({ commitSeq: s.commitSeq, state: toOpaque(s.state) })\n    },\n    contacts: async () => contactsView(await read()),\n    contact: async (id: string) => contactView(await read(), id),\n    groups: async () => groupsView(await read()),\n    profile: async () => profileView(await read()),\n    prompts: async () => promptsView(await read()),\n    inbox: async () => inboxView(await read()),\n    deliveryStatus: async (x: string) => deliveryStatusView(await read(), x),\n  })\n}\n"]}
+{"version":3,"file":"holder-api.js","sourceRoot":"","sources":["../src/holder-api.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,4EAA4E;AAC5E,wEAAwE;AACxE,qEAAqE;AACrE,4EAA4E;AAC5E,wEAAwE;AACxE,sEAAsE;AACtE,uEAAuE;AACvE,uEAAuE;AACvE,0EAA0E;AAC1E,wIAAwI;AACxI,0EAA0E;AAC1E,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,wEAAwE;AACxE,oEAAoE;AACpE,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,0EAA0E;AAC1E,yEAAyE;AACzE,qEAAqE;AACrE,SAAS;AACT,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,oFAAoF;AACpF,oFAAoF;AACpF,+EAA+E;AAC/E,+EAA+E;AAC/E,wEAAwE;AACxE,kEAAkE;AAClE,0DAA0D;AAC1D,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,sEAAsE;AACtE,yDAAyD;AACzD,uEAAuE;AACvE,uEAAuE;AACvE,uDAAuD;AACvD,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AACvE,yEAAyE;AACzE,8CAA8C;AAC9C,EAAE;AACF,oEAAoE;AACpE,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AACxE,0EAA0E;AAC1E,0CAA0C;AAC1C,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,2EAA2E;AAC3E,uEAAuE;AACvE,yEAAyE;AACzE,mEAAmE;AACnE,yEAAyE;AACzE,qEAAqE;AACrE,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,yFAAyF;AACzF,8EAA8E;AAC9E,0EAA0E;AAC1E,+EAA+E;AAC/E,iEAAiE;AACjE,uEAAuE;AACvE,6BAA6B;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG1C,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAEtE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAGlD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAGhD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAC7E,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAC3F,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AACpF,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAErE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAsJ3H;;;wDAGwD;AACxD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAE,KAAkB,EAAE,OAAsB,EAAE;IAC9E,MAAM,OAAO,GAAG,CAAC,cAAc,EAAE,EAAE,WAAW,EAAE,EAAE,eAAe,EAAE,EAAE,gBAAgB,EAAE,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAA;IACxJ,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI;QACpC,CAAC,CAAC,CAAC,MAA6B,EAAE,KAA4B,EAAE,EAAY,EAAE,EAAE;YAC5E,MAAM,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;YAC7C,IAAI,CAAC,CAAC,MAAM;gBAAE,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,wBAAwB,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QACvK,CAAC;QACH,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAA;IAC1J,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAA;IACxD,4FAA4F;IAC5F,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,KAAc,EAAE,CAA8B,EAAE,EAAE,CAChF,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAc,EAAE,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAA;IACjG,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,CAAC,OAAe,EAAE,KAAc,EAAE,IAAY,EAAE,CAAsB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnH,MAAM,EAAE,CAAC,QAAgB,EAAE,MAAoB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9G,KAAK,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACvG,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1G,UAAU,EAAE,CAAC,SAAiB,EAAE,MAAe,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7H,QAAQ,EAAE,CAAC,SAAiB,EAAE,GAAe,EAAE,OAAgB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACtJ,aAAa,EAAE,CAAC,SAAiB,EAAE,OAAe,EAAE,OAAgB,EAAE,CAAkB,EAAE,EAAE,CAC1F,KAAK,CAAC,cAAc,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACzE,KAAK,EAAE,CAAC,UAAoB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QACnG,MAAM,EAAE,CAAC,SAAiB,EAAE,CAAgD,EAAE,EAAE,CAC9E,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACpI,OAAO,EAAE,CAAC,CAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,IAAc,CAAC;QAC3F,YAAY,EAAE,CAAC,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5E,UAAU,EAAE,CAAC,OAAuB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3F,IAAI,EAAE,CAAC,CAAsC,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClI,IAAI,EAAE,CAAC,IAAU,EAAE,CAAsC,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1J,eAAe,EAAE,CAAC,IAAU,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACnG,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACvG,UAAU,EAAE,CAAC,CAA8D,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1I,MAAM,EAAE,CAAC,OAAe,EAAE,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAChI,QAAQ,EAAE,CAAC,OAAe,EAAE,MAAc,EAAE,CAA0D,EAAE,EAAE,CACxG,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACxI,SAAS,EAAE,CAAC,WAAmB,EAAE,QAAgB,EAAE,CAAuC,EAAE,EAAE,CAC5F,KAAK,CAAC,qBAAqB,CAAC,SAAS,EAAE,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3I,WAAW,EAAE,CAAC,SAAiB,EAAE,IAAY,EAAE,CAAyC,EAAE,EAAE,CAC1F,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3H,YAAY,EAAE,CAAC,GAAa,EAAE,CAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,IAAc,CAAC;QACnH,KAAK,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChH,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACnH,SAAS,EAAE,CAAC,IAAY,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChG,YAAY,EAAE,CAAC,IAAY,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACtG,SAAS,EAAE,KAAK,EAAE,IAAY,EAAE,YAAoB,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC;QAClH,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACzC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,CAAC,MAAsB,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;QAC7E,OAAO,EAAE,CAAC,GAAY,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC;QAClE,SAAS,EAAE,CAAC,QAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;QACnE,QAAQ,EAAE,KAAK,IAA6B,EAAE;YAC5C,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAA;YACjC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC5E,CAAC;QACD,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5D,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC;QAC5C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9C,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;QAC1C,cAAc,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,EAAE,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;QACnE,gBAAgB,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC;QACjE,WAAW,EAAE,CAAC,KAAqB,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC;QACrF,QAAQ,EAAE,CAAC,KAAqB,EAAE,IAAY,EAAE,KAAoB,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;QAC5G,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;QAC3B,IAAI,MAAM,KAAM,OAAO,MAAM,CAAC,MAAM,CAAA,CAAC,CAAC;KACvC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["// holder-api — createHolder, the facade over the engine (lib Stage 2,\n// note §4.1, §4.5). Domain modules (identity, encounter, trust, continuity,\n// membership, profile) register with the engine as they graduate; today\n// the facade carries the engine's built-ins, the prompts module, the\n// encounter module (encounter/ceremony.ts: show, scan, the optical leg, the\n// counter-step, the bundle and the credential delivery), the membership\n// module (membership/holder.ts: founding, the prelude and invite, the\n// accept on a group-invite prompt, admission and welcome, evidence and\n// vouches; and the in-library Access over the holder's groups where no\n// Access port is given), the introduction module (introduction/holder.ts:\n// the three roles of Trust §8 and the mediator's start), the identity module (identity-state.ts: device names, the rotation), the trust\n// module (trust/mapping.ts: the Trust act, the class settings, the anchor\n// mapping's issuance and reception, the entry commit; trust/star.ts and\n// trust/group-star.ts: the star and the group star, reconciled on resume\n// and received with their assemblies; trust/entries.ts: merge, split and\n// departure; trust/continuity.ts: the probe, the continuity mapping and\n// the chaining; trust/profile.ts: profile@1) and the modules given.\n//\n// The human acts (note §4.2) are typed methods with an options object\n// `{when, actId}`; actId is required, minted by the app when the human\n// acts, and journaled with the act's result (a repeat with the same actId\n// replays it, another input under it is actid-conflict). They wrap `act`\n// with the trust module's command names, which stays for modules and\n// tests:\n//   trust(contactId, opts)                    trust.set {on: true}      human\n//   untrust(contactId, opts)                  trust.set {on: false}     human\n//   pauseTrust(contactId, paused, opts)       trust.pause               human\n//   setClass(contactId, cls, setting, opts)   trust.setClass            human\n//   setGroupClass(contactId, groupId, setting, opts)  trust.setGroupClass human\n//   merge(contactIds, opts)                   trust.merge               human\n//   depart(contactId, opts{relationshipId?})  trust.depart              human\n//   decide(promptId, choice, opts)            prompt.decide             human\n//   addDevice(name, opts)                     identity.addDevice        human\n//   revokeDevice(name, opts)                  identity.revokeDevice     human\n//   rotateAnchor(opts)                        identity.rotate           human\n//   setProfile({name, image?, text?}, opts)   profile.set               human\n//   show(opts{name?})                         encounter.show            human\n//   scan(card, opts{name?})                   encounter.scan            human\n//   captureSentCard(card, opts)               encounter.capture         human\n//   counter(contactId, opts)                  encounter.counter         human\n//   foundGroup({name, vouchThreshold?, listed?}, opts)  membership.found human\n//   invite(groupId, contactId, opts)          membership.invite         human\n//   vouchFor(groupId, member, opts{provenance?})  membership.vouch      human\n//   introduce(requesterId, targetId, opts)    introduction.introduce    human\n//   sendMessage(contactId, text, opts{replyTo?})  message.send         human\n//   block(contactId, opts)                    message.block {blocked: true}   human\n//   unblock(contactId, opts)                  message.block {blocked: false}  human\n//   recover({when})                           trust.recover          not human\n//   takeMessages(ids, {when})                 message.take           not human\n// and the read deviceKey(name, contextLabel): the device key of a held,\n// unrevoked name under an own anchor context (identity-state.ts).\n// A missing actId is refused at runtime as actid-missing.\n//\n// One actId, one result: replay(actId, when) reads the journaled result of\n// any of the human acts above (its events: for sendMessage `message.sent`\n// with mid and digest; its commit time; its documents and whether a repeat\n// would hand them out at `when`), or answers unknown-act. It runs nothing\n// and commits nothing, needs no keys, and works on every opening over the\n// store. A repeat of the act under the same actId answers the same events\n// at any clock, across a lock and a new opening; the journal holds an act\n// for the retention max(P90D, retry.horizonMs) after its commit and after\n// the last step of each of its documents, in holder time (engine.ts),\n// after which the actId is unknown. An app that does not\n// know whether an act committed (a crash, an unknown-commit-outcome, a\n// lock) asks replay; on unknown-act the act did not commit or has left\n// the journal, and only the human decides to act anew.\n//\n// Reading: the views (views.ts) over one snapshot each, carrying its\n// commitSeq. `subscribe` announces every commit with its commitSeq and\n// events; the app re-reads the views it shows, and a view read after the\n// announcement is at that commitSeq or later.\n//\n// Delivery: `receive(env, when)` runs Delivery §6.2 in the core and\n// dispatches through the task register (receive.ts); `report` takes the\n// adapter's reports (on an ack's digest: accepted or delivered marks it\n// sent, failed gives it up, awaiting-transport records that the adapter\n// holds it); `resume` re-emits, runs due duties and re-emits unsent acks;\n// `tick` expires and retains (engine.ts).\n//\n// Custody (Delivery 0.83 RLTP-DEL-6120 to 6135): the holder keeps every\n// outbound document until a service takes it or the holder gives it up,\n// across a lock and the end of a process. One createHolder is one opening.\n// After its first resume, `pendingTransport(when)` names what is to be\n// handed over: the outbox items neither terminal nor accepted (held ones\n// included) and the unsent acks, each with its envelope, its first\n// submission and its deadline, none past it. A transport hands over only\n// such entries, through `handOver(entry, when, start)`: the check of\n// `mayHandOver` and the start of the deposit in one step of the holder's\n// queue, true only for an entry this opening issued that is still pending,\n// unchanged, before its deadline. A duplicate's stored ack past its retries\n// appears once as a `resend` entry (Delivery RLTP-DEL-6330). A document missing from the\n// view is no longer to be sent. `await close()` ends the opening at a lock or\n// the end of a process (resolved once the running operation finished, the\n// moment the next opening may start): every later call rejects with InfraError\n// 'closed', mayHandOver answers false, and nothing issued before\n// authorizes anything; the next opening is a new createHolder over the\n// same store, resumed first.\nimport { createEngine } from './engine.js'\nimport type { CommitListener, EnginePorts, HolderModule, TransportEntry, TransportRefusal, TransportView } from './engine.js'\nimport type { DeliveryReport } from './ports.js'\nimport { DECIDE, collectDecisions, promptsModule } from './prompts.js'\nimport type { ActResult, ReceiveResult, ReplayResult, ResumeResult } from './results.js'\nimport { InfraError } from './results.js'\nimport { commitViolations } from './invariants.js'\nimport type { CommitOp } from './invariants.js'\nimport type { HolderState } from './state.js'\nimport { toOpaque } from './state.js'\nimport { trustModule } from './trust/mapping.js'\nimport { IDENTITY_COMMANDS, deviceKeyOf, identityModule } from './identity-state.js'\nimport type { DeviceKeyResult } from './identity-state.js'\nimport { PROFILE_SET } from './trust/profile.js'\nimport type { ProfileContent } from './profile.js'\nimport type { Dec, Millis, OpaqueHolderState, PromptChoice, Setting, TrustClass } from './state.js'\nimport { TRUST_COMMANDS } from './trust/mapping.js'\nimport { ENTRY_COMMANDS } from './trust/entries.js'\nimport { ENCOUNTER_COMMANDS, encounterModule } from './encounter/ceremony.js'\nimport { MEMBERSHIP_COMMANDS, localAccess, membershipModule } from './membership/holder.js'\nimport { INTRODUCTION_COMMANDS, introductionModule } from './introduction/holder.js'\nimport { MESSAGE_COMMANDS, messageModule } from './message/holder.js'\nimport type { Json } from './core.js'\nimport { contactView, contactsView, deliveryStatusView, groupsView, inboxView, profileView, promptsView } from './views.js'\nimport type { ContactView, DeliveryStatusView, GroupView, InboxMessageView, ProfileView, PromptView } from './views.js'\n\n/** The committed state and its commitSeq; the state is opaque (note §4.5):\n *  apps read the views, store tooling may persist it. */\nexport interface HolderSnapshot { commitSeq: Dec, state: OpaqueHolderState }\n\nexport interface HolderOptions {\n  /** domain modules to register beside the built-ins, the prompts and the trust module */\n  modules?: readonly HolderModule[]\n  /** testing mode: check the invariants of invariants.ts on every commit,\n   *  before the store's CAS; a violation throws InfraError\n   *  'invariant-violated' (cause: the violations) and nothing commits */\n  invariants?: boolean\n}\n\n/** The options of a human act (note §4.2): its time and the actId the app\n *  mints when the human acts. */\nexport interface HumanActOptions { when: Millis, actId: string }\n\nexport interface Holder {\n  /** any registered command by name, for modules and tests; apps use the typed acts */\n  act (command: string, input: unknown, when: Millis, opts?: { actId?: string }): Promise<ActResult>\n  /** the human's decision on an open prompt: a human act under the app's\n   *  actId (note §4.2); a missing actId is also refused at runtime */\n  decide (promptId: string, choice: PromptChoice, opts: HumanActOptions): Promise<ActResult>\n  /** the Trust act: the anchor mapping class on toward the contact (2770); human */\n  trust (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** trust withdrawn: the anchor mapping class off (2840, 2850); human */\n  untrust (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the pause of 5.4: star and blinded group star off, or back to default; human */\n  pauseTrust (contactId: string, paused: boolean, opts: HumanActOptions): Promise<ActResult>\n  /** one class's setting toward the contact (2780, 2810); human */\n  setClass (contactId: string, cls: TrustClass, setting: Setting, opts: HumanActOptions): Promise<ActResult>\n  /** the sealed group star's setting for one group toward the contact (2830); human */\n  setGroupClass (contactId: string, groupId: string, setting: Setting, opts: HumanActOptions): Promise<ActResult>\n  /** the manual merge (6640): at most one of them holds an entry; human */\n  merge (contactIds: string[], opts: HumanActOptions): Promise<ActResult>\n  /** departure (2260): the entry, the relationships of an alias, or one\n   *  relationship (relationshipId); human */\n  depart (contactId: string, opts: HumanActOptions & { relationshipId?: string }): Promise<ActResult>\n  /** 2240: entries re-commit from verified mappings recovered without them; not human */\n  recover (opts: { when: Millis }): Promise<ActResult>\n  /** a device name into the register before any key derived from it is presented (Identity §5.5); human */\n  addDevice (name: string, opts: HumanActOptions): Promise<ActResult>\n  /** the name's revocation mark: never removed, the name never given again (Identity §5.5); human */\n  revokeDevice (name: string, opts: HumanActOptions): Promise<ActResult>\n  /** the community anchor's rotation (Identity §5.4): step 1 (label,\n   *  closure, 6596 decided) when none runs, else step 2 of the running one\n   *  through the Log port; resume carries step 2 on its own (identity-state.ts) */\n  rotateAnchor (opts: HumanActOptions): Promise<ActResult>\n  /** the own profile (Trust 6b): validated (6430, 6435, 6475), the next\n   *  revision of the one counter (6450), delivered on every relationship\n   *  the profile class is on for (6455); human */\n  setProfile (content: ProfileContent, opts: HumanActOptions): Promise<ActResult>\n  /** a displayed card with a fresh own challenge under a fresh pair\n   *  anchor (Encounter 5.3, 4.4): the event encounter.shown carries the\n   *  card to display; `name` the card's display name (default: the own\n   *  profile's); human */\n  show (opts: HumanActOptions & { name?: string }): Promise<ActResult>\n  /** the scanner's step on a displayed card (Encounter 5.8): the record,\n   *  the fresh tuple, the bundle; encounter.scanned carries the sent card\n   *  for the optical leg; human */\n  scan (card: Json, opts: HumanActOptions & { name?: string }): Promise<ActResult>\n  /** the optical leg (Encounter 5.8, 5710): a sent card shown by the scanner; human */\n  captureSentCard (card: Json, opts: HumanActOptions): Promise<ActResult>\n  /** the counter-step toward a contact met as displayer (Encounter 5.8 step 4); human */\n  counter (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** a group founded under a fresh pair anchor (Access 3.4.1); its rule\n   *  vouchThreshold (default \"1\") is group state; event group.founded; human */\n  foundGroup (group: { name: string, vouchThreshold?: string, listed?: boolean }, opts: HumanActOptions): Promise<ActResult>\n  /** invite a contact into a group: the prelude, then the invite on its\n   *  answer (Membership 1.2, 3.1); the contact decides on a group-invite\n   *  prompt; human */\n  invite (groupId: string, contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the mediator's act (Trust §8, this library's start of it): the\n   *  requester gets an offer naming the target by an opaque designator and\n   *  at most the `label` the human types here, with the mediator's\n   *  ack-delay declaration; the requester decides on an\n   *  `introduction` prompt, the target on another; human */\n  introduce (requesterId: string, targetId: string, opts: HumanActOptions & { label?: string }): Promise<ActResult>\n  /** a vouch@2 for a member anchor whose consent pair this holder holds\n   *  (Access 5.3, Membership 3.4); human */\n  vouchFor (groupId: string, member: string, opts: HumanActOptions & { provenance?: 'met' | 'introduced' }): Promise<ActResult>\n  /** a text message to the contact (Message Tasks 3, 5): 1 to 4096 code\n   *  points, replyTo the mid of an earlier message of the relationship. It\n   *  goes on a ready, unblocked relationship (canMessage); otherwise refused\n   *  as not-ready, blocked or no-own-channel, and the app keeps it unsent.\n   *  Event message.sent {mid, digest}; deliveryStatus(digest) is its sender\n   *  status. Undelivered, it ends as failed(expired-by-adapter-policy) at\n   *  the retry horizon (P7D by default, P90D at most), before its sender\n   *  lifetime sentAt + P179D: failed(task-expired) is not reached for a\n   *  message under any horizon the engine admits; human */\n  sendMessage (contactId: string, text: string, opts: HumanActOptions & { replyTo?: string }): Promise<ActResult>\n  /** the inbox entries the app has durably taken over leave the inbox\n   *  (4420); their completion record stays (4350); not human */\n  takeMessages (ids: string[], opts: { when: Millis }): Promise<ActResult>\n  /** the block (Message Tasks 6): set on every relationship of the\n   *  contact's entry. Messages, invitations and the holder's own offers on\n   *  them stop; the protocol steps owed continue; the contact observes\n   *  nothing it would not without the block. Event contact.blocked; human */\n  block (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the block cleared on every relationship of the entry: nothing that\n   *  was discarded under it reappears (6510); human */\n  unblock (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the device key of a held, unrevoked device name under an own anchor\n   *  context (Identity §5.5); reads, changes nothing */\n  deviceKey (name: string, contextLabel: string): Promise<DeviceKeyResult>\n  tick (when: Millis): Promise<ActResult>\n  resume (when: Millis): Promise<ResumeResult>\n  report (report: DeliveryReport, when: Millis): Promise<ActResult>\n  /** an arriving envelope, as the app's transport delivered it (non-human,\n   *  no actId; idempotent over the document digest) */\n  receive (env: unknown, when: Millis): Promise<ReceiveResult>\n  /** after every commit: its commitSeq and events, the cue to re-read the views */\n  subscribe (listener: CommitListener): () => void\n  snapshot (): Promise<HolderSnapshot>\n  contacts (): Promise<ContactView[]>\n  /** by entry id or alias */\n  contact (id: string): Promise<ContactView | undefined>\n  groups (): Promise<GroupView[]>\n  profile (): Promise<ProfileView>\n  prompts (): Promise<PromptView[]>\n  /** the messages accepted and not yet taken over (Message Tasks 4.5),\n   *  by display time; event message.received announces each */\n  inbox (): Promise<InboxMessageView[]>\n  /** by document digest or threadId */\n  deliveryStatus (digestOrThreadId: string): Promise<DeliveryStatusView>\n  /** the journaled result of the human act `actId` (any of the acts above:\n   *  for sendMessage its `message.sent` event with `mid` and `digest`), or\n   *  `{ok: false, code: 'unknown-act'}`; a pure read that never runs the\n   *  act, never mints a mid, commits nothing. The question an app asks\n   *  after a crash or a lock instead of repeating the act blind */\n  replay (actId: string, when: Millis): Promise<ReplayResult>\n  /** what the holder keeps for transport at `when`, after this opening's\n   *  first completed resume (else `{ok: false, code: 'not-resumed'}`) */\n  pendingTransport (when: Millis): Promise<TransportView | TransportRefusal>\n  /** right before a hand-over: whether this opening's `entry` may go now */\n  mayHandOver (entry: TransportEntry, when: Millis): Promise<boolean>\n  /** the hand-over: the same check, then `start()` (which starts the\n   *  deposit synchronously and says whether it did) inside the holder's\n   *  queue; true when both said yes */\n  handOver (entry: TransportEntry, when: Millis, start: () => boolean): Promise<boolean>\n  /** ends this opening (a lock, the end of a process); resolves once the\n   *  operation running at the call has finished: after that the opening\n   *  commits nothing more, and the next opening may start */\n  close (): Promise<void>\n  readonly closed: boolean\n}\n\n/** A holder over its ports: `{store, keys, entropy?, log?, access?, retry?, crypto?}`.\n *  The crypto handle (default globalThis.crypto) is resolved and probed\n *  here and also feeds the default entropy; an app that injects one\n *  passes the same handle to seedKeys(seed, crypto). */\nexport async function createHolder (ports: EnginePorts, opts: HolderOptions = {}): Promise<Holder> {\n  const modules = [identityModule(), trustModule(), encounterModule(), membershipModule(), introductionModule(), messageModule(), ...(opts.modules ?? [])]\n  const check = opts.invariants === true\n    ? (before: Readonly<HolderState>, after: Readonly<HolderState>, op: CommitOp) => {\n        const v = commitViolations(before, after, op)\n        if (v.length) throw new InfraError('invariant-violated', `invariants broken by ${op.kind}: ${v.map((x) => `[${x.invariant}] ${x.detail}`).join('; ')}`, { cause: v })\n      }\n    : undefined\n  const engine = await createEngine(ports, [promptsModule(collectDecisions(modules)), ...modules], { ...(check ? { check } : {}), accessFrom: localAccess })\n  const read = async () => (await engine.snapshot()).state\n  /** a human act: `when` and actId from the options, a missing actId refused by the engine */\n  const human = (command: string, input: unknown, o: HumanActOptions | undefined) =>\n    engine.act(command, input, o?.when as Millis, o?.actId === undefined ? {} : { actId: o.actId })\n  return Object.freeze({\n    act: (command: string, input: unknown, when: Millis, o?: { actId?: string }) => engine.act(command, input, when, o),\n    decide: (promptId: string, choice: PromptChoice, o: HumanActOptions) => human(DECIDE, { promptId, choice }, o),\n    trust: (contactId: string, o: HumanActOptions) => human(TRUST_COMMANDS.set, { contactId, on: true }, o),\n    untrust: (contactId: string, o: HumanActOptions) => human(TRUST_COMMANDS.set, { contactId, on: false }, o),\n    pauseTrust: (contactId: string, paused: boolean, o: HumanActOptions) => human(TRUST_COMMANDS.pause, { contactId, paused }, o),\n    setClass: (contactId: string, cls: TrustClass, setting: Setting, o: HumanActOptions) => human(TRUST_COMMANDS.setClass, { contactId, cls, setting }, o),\n    setGroupClass: (contactId: string, groupId: string, setting: Setting, o: HumanActOptions) =>\n      human(TRUST_COMMANDS.setGroupClass, { contactId, groupId, setting }, o),\n    merge: (contactIds: string[], o: HumanActOptions) => human(ENTRY_COMMANDS.merge, { contactIds }, o),\n    depart: (contactId: string, o: HumanActOptions & { relationshipId?: string }) =>\n      human(ENTRY_COMMANDS.depart, o?.relationshipId === undefined ? { contactId } : { contactId, relationshipId: o.relationshipId }, o),\n    recover: (o: { when: Millis }) => engine.act(TRUST_COMMANDS.recover, {}, o?.when as Millis),\n    rotateAnchor: (o: HumanActOptions) => human(IDENTITY_COMMANDS.rotate, {}, o),\n    setProfile: (content: ProfileContent, o: HumanActOptions) => human(PROFILE_SET, content, o),\n    show: (o: HumanActOptions & { name?: string }) => human(ENCOUNTER_COMMANDS.show, o?.name === undefined ? {} : { name: o.name }, o),\n    scan: (card: Json, o: HumanActOptions & { name?: string }) => human(ENCOUNTER_COMMANDS.scan, o?.name === undefined ? { card } : { card, name: o.name }, o),\n    captureSentCard: (card: Json, o: HumanActOptions) => human(ENCOUNTER_COMMANDS.capture, { card }, o),\n    counter: (contactId: string, o: HumanActOptions) => human(ENCOUNTER_COMMANDS.counter, { contactId }, o),\n    foundGroup: (g: { name: string, vouchThreshold?: string, listed?: boolean }, o: HumanActOptions) => human(MEMBERSHIP_COMMANDS.found, g, o),\n    invite: (groupId: string, contactId: string, o: HumanActOptions) => human(MEMBERSHIP_COMMANDS.invite, { groupId, contactId }, o),\n    vouchFor: (groupId: string, member: string, o: HumanActOptions & { provenance?: 'met' | 'introduced' }) =>\n      human(MEMBERSHIP_COMMANDS.vouch, o?.provenance === undefined ? { groupId, member } : { groupId, member, provenance: o.provenance }, o),\n    introduce: (requesterId: string, targetId: string, o: HumanActOptions & { label?: string }) =>\n      human(INTRODUCTION_COMMANDS.introduce, o?.label === undefined ? { requesterId, targetId } : { requesterId, targetId, label: o.label }, o),\n    sendMessage: (contactId: string, text: string, o: HumanActOptions & { replyTo?: string }) =>\n      human(MESSAGE_COMMANDS.send, o?.replyTo === undefined ? { contactId, text } : { contactId, text, replyTo: o.replyTo }, o),\n    takeMessages: (ids: string[], o: { when: Millis }) => engine.act(MESSAGE_COMMANDS.take, { ids }, o?.when as Millis),\n    block: (contactId: string, o: HumanActOptions) => human(MESSAGE_COMMANDS.block, { contactId, blocked: true }, o),\n    unblock: (contactId: string, o: HumanActOptions) => human(MESSAGE_COMMANDS.block, { contactId, blocked: false }, o),\n    addDevice: (name: string, o: HumanActOptions) => human(IDENTITY_COMMANDS.addDevice, { name }, o),\n    revokeDevice: (name: string, o: HumanActOptions) => human(IDENTITY_COMMANDS.revokeDevice, { name }, o),\n    deviceKey: async (name: string, contextLabel: string) => deviceKeyOf(await read(), ports.keys, name, contextLabel),\n    tick: (when: Millis) => engine.tick(when),\n    resume: (when: Millis) => engine.resume(when),\n    report: (report: DeliveryReport, when: Millis) => engine.report(report, when),\n    receive: (env: unknown, when: Millis) => engine.receive(env, when),\n    subscribe: (listener: CommitListener) => engine.subscribe(listener),\n    snapshot: async (): Promise<HolderSnapshot> => {\n      const s = await engine.snapshot()\n      return Object.freeze({ commitSeq: s.commitSeq, state: toOpaque(s.state) })\n    },\n    contacts: async () => contactsView(await read()),\n    contact: async (id: string) => contactView(await read(), id),\n    groups: async () => groupsView(await read()),\n    profile: async () => profileView(await read()),\n    prompts: async () => promptsView(await read()),\n    inbox: async () => inboxView(await read()),\n    deliveryStatus: async (x: string) => deliveryStatusView(await read(), x),\n    replay: (actId: string, when: Millis) => engine.replay(actId, when),\n    pendingTransport: (when: Millis) => engine.pendingTransport(when),\n    mayHandOver: (entry: TransportEntry, when: Millis) => engine.mayHandOver(entry, when),\n    handOver: (entry: TransportEntry, when: Millis, start: () => boolean) => engine.handOver(entry, when, start),\n    close: () => engine.close(),\n    get closed () { return engine.closed },\n  })\n}\n"]}