@richhardry/codor 0.10.0

package/node_modules/@codor/switchboard/dist/push/producer.js

@@ -0,0 +1,168 @@
+import sodium from 'sodium-native';
+import { decodeKey } from '../crypto/keys.js';
+import { redactText } from '../redact.js';
+export const PUSH_BUCKETS = [512, 2_048];
+export const PUSH_PREVIEW_LIMIT = 120;
+export const PUSH_ENVELOPE_OVERHEAD = sodium.crypto_aead_xchacha20poly1305_ietf_NPUBBYTES +
+    sodium.crypto_aead_xchacha20poly1305_ietf_ABYTES;
+export const PUSH_DEVICE_ENVELOPE_MAGIC = Buffer.from('WRPUSH1\0', 'utf8');
+export const PUSH_SEALED_ROOM_KEY_BYTES = sodium.crypto_aead_xchacha20poly1305_ietf_KEYBYTES + sodium.crypto_box_SEALBYTES;
+export const PUSH_DEVICE_ENVELOPE_OVERHEAD = PUSH_DEVICE_ENVELOPE_MAGIC.length + 4 + 2 + PUSH_SEALED_ROOM_KEY_BYTES;
+const PUSH_ASSOCIATED_DATA = Buffer.from('codor-push-v1\0', 'utf8');
+const SIGNATURE_DOMAIN = Buffer.from('codor-relay-notify-v1\0', 'utf8');
+function codePointSlice(value, maximum) {
+    return [...value].slice(0, maximum).join('');
+}
+export function buildPushPreview(event) {
+    return {
+        room: event.room,
+        msg_id: event.msg_id,
+        kind: event.kind,
+        preview: codePointSlice(redactText(event.preview), PUSH_PREVIEW_LIMIT),
+        ...(event.delivery_id && { delivery_id: event.delivery_id }),
+    };
+}
+export function paddedPushPreview(preview) {
+    const encoded = Buffer.from(JSON.stringify(preview), 'utf8');
+    const bucket = PUSH_BUCKETS.find((size) => encoded.length + 4 <= size);
+    if (bucket === undefined)
+        throw new Error('push preview exceeds the largest padding bucket');
+    const padded = Buffer.alloc(bucket);
+    padded.writeUInt32BE(encoded.length, 0);
+    encoded.copy(padded, 4);
+    if (encoded.length + 4 < padded.length) {
+        sodium.randombytes_buf(padded.subarray(encoded.length + 4));
+    }
+    return padded;
+}
+// harn:assume push-previews-redacted-pad-then-sealed ref=producer-pad-seal-sign
+export function sealPushPreview(preview, roomKey) {
+    const padded = paddedPushPreview(preview);
+    const nonce = Buffer.alloc(sodium.crypto_aead_xchacha20poly1305_ietf_NPUBBYTES);
+    sodium.randombytes_buf(nonce);
+    const ciphertext = Buffer.alloc(padded.length + sodium.crypto_aead_xchacha20poly1305_ietf_ABYTES);
+    sodium.crypto_aead_xchacha20poly1305_ietf_encrypt(ciphertext, padded, PUSH_ASSOCIATED_DATA, null, nonce, roomKey);
+    return Buffer.concat([nonce, ciphertext]);
+}
+// harn:assume push-room-key-rotation-reaches-surviving-devices ref=device-key-wrapped-push
+export function wrapPushForDevice(sealedPreview, sealedRoomKey, generation) {
+    if (!Number.isSafeInteger(generation) || generation < 1 || generation > 0xffff_ffff) {
+        throw new Error('room key generation is invalid');
+    }
+    const key = Buffer.from(sealedRoomKey, 'base64url');
+    if (key.length !== PUSH_SEALED_ROOM_KEY_BYTES || key.toString('base64url') !== sealedRoomKey) {
+        throw new Error('sealed room key is invalid');
+    }
+    const header = Buffer.alloc(PUSH_DEVICE_ENVELOPE_MAGIC.length + 6);
+    PUSH_DEVICE_ENVELOPE_MAGIC.copy(header);
+    header.writeUInt32BE(generation, PUSH_DEVICE_ENVELOPE_MAGIC.length);
+    header.writeUInt16BE(key.length, PUSH_DEVICE_ENVELOPE_MAGIC.length + 4);
+    return Buffer.concat([header, key, sealedPreview]);
+}
+// harn:end push-room-key-rotation-reaches-surviving-devices
+function canonicalNotifyBytes(body, auth) {
+    return Buffer.concat([
+        SIGNATURE_DOMAIN,
+        Buffer.from(JSON.stringify({
+            sender: auth.sender,
+            timestamp: auth.timestamp,
+            subscription: {
+                endpoint: body.subscription.endpoint,
+                expirationTime: body.subscription.expirationTime ?? null,
+                keys: {
+                    p256dh: body.subscription.keys.p256dh,
+                    auth: body.subscription.keys.auth,
+                },
+            },
+            sealed: body.sealed,
+            ttl: body.ttl,
+        }), 'utf8'),
+    ]);
+}
+function relayEndpoint(relayUrl) {
+    const url = new URL(relayUrl);
+    const local = url.hostname === '127.0.0.1' || url.hostname === 'localhost' || url.hostname === '::1';
+    if (url.protocol !== 'https:' && !(local && url.protocol === 'http:')) {
+        throw new Error('relay_url must use https except on localhost');
+    }
+    url.pathname = `${url.pathname.replace(/\/$/, '')}/notify`;
+    url.search = '';
+    url.hash = '';
+    return url.toString();
+}
+// harn:assume push-configuration-and-failures-are-visible ref=push-delivery-diagnostics
+export class PushProducer {
+    options;
+    request;
+    now;
+    ttl;
+    endpoint;
+    constructor(options) {
+        this.options = options;
+        this.request = options.fetch ?? fetch;
+        this.now = options.now ?? Date.now;
+        this.ttl = options.ttl ?? 60;
+        this.endpoint = options.relayUrl ? relayEndpoint(options.relayUrl) : undefined;
+    }
+    get enabled() {
+        return this.endpoint !== undefined;
+    }
+    async notify(event) {
+        if (!this.endpoint)
+            return [{ status: 'disabled' }];
+        if (event.target_human_ids.length === 0)
+            return [{ status: 'ignored' }];
+        const records = this.options.subscriptions.list();
+        if (records.length === 0)
+            return [];
+        const preview = buildPushPreview(event);
+        const sealed = sealPushPreview(preview, this.options.roomKeys.roomKey(event.room));
+        return Promise.all(records.map((record) => {
+            const roomKey = this.options.roomKeys.sealedFor(record.device_id)
+                .find((candidate) => candidate.room === event.room);
+            if (!roomKey)
+                return {
+                    device_id: record.device_id,
+                    status: 'ignored',
+                };
+            return this.send(this.endpoint, record, wrapPushForDevice(sealed, roomKey.sealed_key, roomKey.generation));
+        }));
+    }
+    async send(endpoint, record, sealed) {
+        const body = {
+            subscription: record.subscription,
+            sealed: sealed.toString('base64'),
+            ttl: this.ttl,
+        };
+        const sender = this.options.identity.sign_public_key;
+        const timestamp = String(this.now());
+        const signature = Buffer.alloc(sodium.crypto_sign_BYTES);
+        sodium.crypto_sign_detached(signature, canonicalNotifyBytes(body, { sender, timestamp }), decodeKey(this.options.identity.sign_secret_key, sodium.crypto_sign_SECRETKEYBYTES, 'Ed25519 secret key'));
+        try {
+            const response = await this.request(endpoint, {
+                method: 'POST',
+                headers: {
+                    'content-type': 'application/json',
+                    'x-codor-sender': sender,
+                    'x-codor-timestamp': timestamp,
+                    'x-codor-signature': signature.toString('base64url'),
+                },
+                body: JSON.stringify(body),
+            });
+            if (response.status === 410) {
+                this.options.subscriptions.remove(record.device_id);
+                return { device_id: record.device_id, status: 'expired', http_status: 410 };
+            }
+            if (!response.ok) {
+                return { device_id: record.device_id, status: 'failed', http_status: response.status };
+            }
+            return { device_id: record.device_id, status: 'sent', http_status: response.status };
+        }
+        catch {
+            return { device_id: record.device_id, status: 'failed', error: 'network_error' };
+        }
+    }
+}
+// harn:end push-configuration-and-failures-are-visible
+// harn:end push-previews-redacted-pad-then-sealed
+//# sourceMappingURL=producer.js.map

package/node_modules/@codor/switchboard/dist/push/producer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"producer.js","sourceRoot":"","sources":["../../src/push/producer.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,eAAe,CAAC;AAEnC,OAAO,EAAuB,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAO1C,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,KAAK,CAAU,CAAC;AAClD,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,CAAC,MAAM,sBAAsB,GACjC,MAAM,CAAC,4CAA4C;IACnD,MAAM,CAAC,yCAAyC,CAAC;AACnD,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,0BAA0B,GACrC,MAAM,CAAC,2CAA2C,GAAG,MAAM,CAAC,oBAAoB,CAAC;AACnF,MAAM,CAAC,MAAM,6BAA6B,GACxC,0BAA0B,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,GAAG,0BAA0B,CAAC;AA2CzE,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;AACpE,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;AAExE,SAAS,cAAc,CAAC,KAAa,EAAE,OAAe;IACpD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAqB;IACpD,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAC;QACtE,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAoB;IACpD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;IACvE,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACvC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,eAAe,CAAC,OAAoB,EAAE,OAAe;IACnE,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,4CAA4C,CAAC,CAAC;IAChF,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAC7B,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,yCAAyC,CACjE,CAAC;IACF,MAAM,CAAC,0CAA0C,CAC/C,UAAU,EACV,MAAM,EACN,oBAAoB,EACpB,IAAI,EACJ,KAAK,EACL,OAAO,CACR,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,iBAAiB,CAC/B,aAAqB,EACrB,aAAqB,EACrB,UAAkB;IAElB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,WAAW,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACpD,IAAI,GAAG,CAAC,MAAM,KAAK,0BAA0B,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,aAAa,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACnE,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,0BAA0B,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC;AACrD,CAAC;AACD,4DAA4D;AAE5D,SAAS,oBAAoB,CAC3B,IAAqB,EACrB,IAA2C;IAE3C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,gBAAgB;QAChB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE;gBACZ,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ;gBACpC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,cAAc,IAAI,IAAI;gBACxD,IAAI,EAAE;oBACJ,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM;oBACrC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI;iBAClC;aACF;YACD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,EAAE,MAAM,CAAC;KACZ,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC;IACrG,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,GAAG,CAAC,QAAQ,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC;IAC3D,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;IAChB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;IACd,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,wFAAwF;AACxF,MAAM,OAAO,YAAY;IAMM;IALZ,OAAO,CAAe;IACtB,GAAG,CAAe;IAClB,GAAG,CAAS;IACZ,QAAQ,CAAU;IAEnC,YAA6B,OAA4B;QAA5B,YAAO,GAAP,OAAO,CAAqB;QACvD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;QACtC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAqB;QAChC,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACnF,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;iBAC9D,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,OAAO;gBAAE,OAAO;oBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,MAAM,EAAE,SAAkB;iBAC3B,CAAC;YACF,OAAO,IAAI,CAAC,IAAI,CACd,IAAI,CAAC,QAAS,EACd,MAAM,EACN,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAClE,CAAC;QACJ,CAAC,CAAC,CAAC,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,QAAgB,EAChB,MAA8B,EAC9B,MAAc;QAEd,MAAM,IAAI,GAAoB;YAC5B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACjC,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;QACrD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACzD,MAAM,CAAC,oBAAoB,CACzB,SAAS,EACT,oBAAoB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EACjD,SAAS,CACP,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,EACrC,MAAM,CAAC,0BAA0B,EACjC,oBAAoB,CACrB,CACF,CAAC;QACF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;gBAC5C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,gBAAgB,EAAE,MAAM;oBACxB,mBAAmB,EAAE,SAAS;oBAC9B,mBAAmB,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;iBACrD;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACpD,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;YAC9E,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YACzF,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;QACnF,CAAC;IACH,CAAC;CACF;AACD,uDAAuD;AACvD,kDAAkD"}

package/node_modules/@codor/switchboard/dist/push/subscriptions.d.ts

@@ -0,0 +1,29 @@
+import { z } from 'zod';
+import { type DeviceKeyStore } from '../crypto/keys.js';
+export declare const WebPushSubscriptionSchema: z.ZodObject<{
+    endpoint: z.ZodURL;
+    expirationTime: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    keys: z.ZodObject<{
+        p256dh: z.ZodString;
+        auth: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type WebPushSubscription = z.infer<typeof WebPushSubscriptionSchema>;
+export interface DevicePushSubscription {
+    device_id: string;
+    subscription: WebPushSubscription;
+    updated_at: string;
+}
+export declare class PushSubscriptionStore {
+    private readonly keys;
+    private readonly now;
+    private readonly path;
+    constructor(dataDir: string, keys: DeviceKeyStore, now?: () => Date);
+    register(deviceId: string, input: unknown): DevicePushSubscription;
+    remove(deviceId: string): boolean;
+    list(): DevicePushSubscription[];
+    get(deviceId: string): DevicePushSubscription | undefined;
+    private read;
+    private write;
+}
+//# sourceMappingURL=subscriptions.d.ts.map

package/node_modules/@codor/switchboard/dist/push/subscriptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscriptions.d.ts","sourceRoot":"","sources":["../../src/push/subscriptions.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,KAAK,cAAc,EAAoB,MAAM,mBAAmB,CAAC;AAE1E,eAAO,MAAM,yBAAyB;;;;;;;kBASpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,mBAAmB,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;CACpB;AAQD,qBAAa,qBAAqB;IAK9B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,GAAG;IALtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;gBAG5B,OAAO,EAAE,MAAM,EACE,IAAI,EAAE,cAAc,EACpB,GAAG,GAAE,MAAM,IAAuB;IAQrD,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,sBAAsB;IAiBlE,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAQjC,IAAI,IAAI,sBAAsB,EAAE;IAOhC,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS;IAIzD,OAAO,CAAC,IAAI;IAeZ,OAAO,CAAC,KAAK;CAGd"}

package/node_modules/@codor/switchboard/dist/push/subscriptions.js

@@ -0,0 +1,83 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { z } from 'zod';
+import { privateJsonWrite } from '../crypto/keys.js';
+export const WebPushSubscriptionSchema = z.strictObject({
+    endpoint: z.url().refine((value) => new URL(value).protocol === 'https:', {
+        message: 'push endpoint must use https',
+    }),
+    expirationTime: z.number().int().nonnegative().nullable().optional(),
+    keys: z.strictObject({
+        p256dh: z.string().min(1).max(256),
+        auth: z.string().min(1).max(128),
+    }),
+});
+// harn:assume push-only-for-human-targeted-events ref=paired-device-subscriptions
+export class PushSubscriptionStore {
+    keys;
+    now;
+    path;
+    constructor(dataDir, keys, now = () => new Date()) {
+        this.keys = keys;
+        this.now = now;
+        this.path = join(dataDir, 'crypto', 'push-subscriptions.json');
+        if (!existsSync(this.path)) {
+            privateJsonWrite(this.path, { version: 1, subscriptions: [] });
+        }
+    }
+    register(deviceId, input) {
+        const peer = this.keys.getPeer(deviceId);
+        if (!peer || peer.kind !== 'device')
+            throw new Error('push subscriptions require a paired device');
+        const subscription = WebPushSubscriptionSchema.parse(input);
+        const state = this.read();
+        const record = {
+            device_id: deviceId,
+            subscription,
+            updated_at: this.now().toISOString(),
+        };
+        const index = state.subscriptions.findIndex((item) => item.device_id === deviceId);
+        if (index >= 0)
+            state.subscriptions[index] = record;
+        else
+            state.subscriptions.push(record);
+        this.write(state);
+        return record;
+    }
+    remove(deviceId) {
+        const state = this.read();
+        const next = state.subscriptions.filter((item) => item.device_id !== deviceId);
+        if (next.length === state.subscriptions.length)
+            return false;
+        this.write({ version: 1, subscriptions: next });
+        return true;
+    }
+    list() {
+        return this.read().subscriptions.filter((record) => {
+            const peer = this.keys.getPeer(record.device_id);
+            return peer?.kind === 'device';
+        });
+    }
+    get(deviceId) {
+        return this.list().find((record) => record.device_id === deviceId);
+    }
+    read() {
+        const parsed = JSON.parse(readFileSync(this.path, 'utf8'));
+        if (parsed.version !== 1 || !Array.isArray(parsed.subscriptions)) {
+            throw new Error('invalid push subscription file');
+        }
+        return {
+            version: 1,
+            subscriptions: parsed.subscriptions.map((record) => ({
+                device_id: z.string().min(1).parse(record.device_id),
+                subscription: WebPushSubscriptionSchema.parse(record.subscription),
+                updated_at: z.iso.datetime().parse(record.updated_at),
+            })),
+        };
+    }
+    write(state) {
+        privateJsonWrite(this.path, state);
+    }
+}
+// harn:end push-only-for-human-targeted-events
+//# sourceMappingURL=subscriptions.js.map

package/node_modules/@codor/switchboard/dist/push/subscriptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscriptions.js","sourceRoot":"","sources":["../../src/push/subscriptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAuB,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE1E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtD,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE;QACxE,OAAO,EAAE,8BAA8B;KACxC,CAAC;IACF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC;QACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KACjC,CAAC;CACH,CAAC,CAAC;AAeH,kFAAkF;AAClF,MAAM,OAAO,qBAAqB;IAKb;IACA;IALF,IAAI,CAAS;IAE9B,YACE,OAAe,EACE,IAAoB,EACpB,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QADlC,SAAI,GAAJ,IAAI,CAAgB;QACpB,QAAG,GAAH,GAAG,CAA+B;QAEnD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAA6B,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,QAAgB,EAAE,KAAc;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACnG,MAAM,YAAY,GAAG,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,MAAM,GAA2B;YACrC,SAAS,EAAE,QAAQ;YACnB,YAAY;YACZ,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;QACnF,IAAI,KAAK,IAAI,CAAC;YAAE,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;;YAC/C,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,QAAgB;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;QAC/E,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,aAAa,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC7D,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;YACjD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACjD,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,QAAgB;QAClB,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;IACrE,CAAC;IAEO,IAAI;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAqB,CAAC;QAC/E,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QACD,OAAO;YACL,OAAO,EAAE,CAAC;YACV,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;gBACpD,YAAY,EAAE,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;gBAClE,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC;aACtD,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,KAAuB;QACnC,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;CACF;AACD,+CAA+C"}

package/node_modules/@codor/switchboard/dist/redact.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Redaction projection (PRIVACY): applied to every body/event payload BEFORE
+ * it is serialized into a WS frame or REST response. Raw content stays in
+ * the store and in the blobs on disk — redaction is a serving-side
+ * projection, gated per room by `config.redaction_enabled`.
+ */
+export declare const REDACTED = "[redacted]";
+export declare function redactText(text: string): string;
+/** Deep-redacts every string in a JSON-serializable value. */
+export declare function redactValue<T>(value: T): T;
+//# sourceMappingURL=redact.d.ts.map

package/node_modules/@codor/switchboard/dist/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../src/redact.ts"],"names":[],"mappings":"AACA;;;;;GAKG;AA8BH,eAAO,MAAM,QAAQ,eAAe,CAAC;AAErC,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAY/C;AAED,8DAA8D;AAC9D,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAW1C"}

package/node_modules/@codor/switchboard/dist/redact.js

@@ -0,0 +1,65 @@
+// harn:assume redaction-before-fanout ref=redaction-projection
+/**
+ * Redaction projection (PRIVACY): applied to every body/event payload BEFORE
+ * it is serialized into a WS frame or REST response. Raw content stays in
+ * the store and in the blobs on disk — redaction is a serving-side
+ * projection, gated per room by `config.redaction_enabled`.
+ */
+const PATTERNS = [
+    // harn:assume pairing-codes-redacted-from-content ref=pairing-code-redaction
+    // Pairing codes, in display form and in labeled form.
+    //
+    // Both patterns reject a candidate that is adjacent to a word character or a
+    // hyphen. `\b` does NOT: a hyphen is a non-word character, so `\b[X]{4}-[X]{4}\b`
+    // matches the middle groups of a UUID (`…-9fd8-48d3-…`), and ids are what
+    // clients use to correlate runs and address deliveries. The bare display form
+    // additionally requires the canonical uppercase that `formatPairingCode` emits,
+    // because case-insensitively it also matches ordinary hyphenated prose
+    // ("self-help", "well-kept"). A code carrying a label is redacted in any case.
+    /(?<![\w-])[23456789A-HJ-NP-Z]{4}-[23456789A-HJ-NP-Z]{4}(?![\w-])/g,
+    /\b(?:pairing[ _-]?)?code\s*[:=]\s*["']?[23456789A-HJ-NP-Z]{4}-?[23456789A-HJ-NP-Z]{4}["']?(?![\w-])/gi,
+    // harn:end pairing-codes-redacted-from-content
+    // AWS access key ids
+    /\b(?:AKIA|ASIA|ABIA|ACCA)[0-9A-Z]{16}\b/g,
+    // Bearer tokens (authorization headers pasted into logs)
+    /\bBearer\s+[A-Za-z0-9._~+/=-]{16,}/g,
+    // GitHub tokens
+    /\bgh[pousr]_[A-Za-z0-9]{20,}\b/g,
+    // OpenAI/Anthropic-style secret keys
+    /\bsk-[A-Za-z0-9_-]{16,}\b/g,
+    // PEM private key blocks
+    /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?(-----END [A-Z ]*PRIVATE KEY-----|$)/g,
+    // Generic KEY=value with a high-entropy-looking value
+    /\b([A-Z][A-Z0-9_]*(?:KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL)[A-Z0-9_]*)=("[^"]{12,}"|'[^']{12,}'|[^\s"']{12,})/g,
+];
+export const REDACTED = '[redacted]';
+export function redactText(text) {
+    let out = text;
+    for (const pattern of PATTERNS) {
+        out = out.replace(pattern, (match, ...groups) => {
+            // KEY=value keeps the key name for debuggability
+            if (typeof groups[0] === 'string' && match.includes('=')) {
+                return `${groups[0]}=${REDACTED}`;
+            }
+            return REDACTED;
+        });
+    }
+    return out;
+}
+/** Deep-redacts every string in a JSON-serializable value. */
+export function redactValue(value) {
+    if (typeof value === 'string')
+        return redactText(value);
+    if (Array.isArray(value))
+        return value.map((v) => redactValue(v));
+    if (value !== null && typeof value === 'object') {
+        const out = {};
+        for (const [k, v] of Object.entries(value)) {
+            out[k] = redactValue(v);
+        }
+        return out;
+    }
+    return value;
+}
+// harn:end redaction-before-fanout
+//# sourceMappingURL=redact.js.map

package/node_modules/@codor/switchboard/dist/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../src/redact.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D;;;;;GAKG;AAEH,MAAM,QAAQ,GAAa;IACzB,6EAA6E;IAC7E,sDAAsD;IACtD,EAAE;IACF,6EAA6E;IAC7E,kFAAkF;IAClF,0EAA0E;IAC1E,8EAA8E;IAC9E,gFAAgF;IAChF,uEAAuE;IACvE,+EAA+E;IAC/E,mEAAmE;IACnE,uGAAuG;IACvG,+CAA+C;IAC/C,qBAAqB;IACrB,0CAA0C;IAC1C,yDAAyD;IACzD,qCAAqC;IACrC,gBAAgB;IAChB,iCAAiC;IACjC,qCAAqC;IACrC,4BAA4B;IAC5B,yBAAyB;IACzB,iFAAiF;IACjF,sDAAsD;IACtD,+GAA+G;CAChH,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAErC,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,MAAM,EAAE,EAAE;YAC9C,iDAAiD;YACjD,IAAI,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzD,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC;YACpC,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,WAAW,CAAI,KAAQ;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC,KAAK,CAAiB,CAAC;IACxE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAiB,CAAC;IAClF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,GAAmB,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,mCAAmC"}

package/node_modules/@codor/switchboard/dist/residency.d.ts

@@ -0,0 +1,110 @@
+import type { HarnessAdapter, Member, ThinkingLevel, WireEvent } from '@codor/protocol';
+import type { HyperswarmTransport } from './transport/hyperswarm.js';
+type AttemptState = 'accepted' | 'started' | 'completed' | 'ambiguous';
+export interface ResidentMember {
+    id: string;
+    harness: string;
+    cwd: string;
+    policy?: string;
+    model?: string;
+    thinking?: ThinkingLevel;
+    session_ref?: string;
+}
+export interface ResidentDeliveryRequest {
+    rpc_id: string;
+    room: string;
+    member: ResidentMember;
+    payload: string;
+    trigger_msg: number;
+}
+export interface ResidentAttempt {
+    home_peer: string;
+    rpc_id: string;
+    room: string;
+    member: ResidentMember;
+    payload: string;
+    trigger_msg: number;
+    state: AttemptState;
+    attempt_count: number;
+    events_ref: string;
+    acked_event_index: number;
+    session_ref?: string;
+}
+export type ResidencyBoundary = 'resident_event_sent' | 'home_complete_before_event_ack';
+export interface ResidencyCoordinatorOptions {
+    transport: HyperswarmTransport;
+    adapters: HarnessAdapter[];
+    journalPath: string;
+    blobRoot: string;
+    completionAckRetryMs?: number;
+    maxPendingCompletionAcks?: number;
+    boundaryHook?: (boundary: ResidencyBoundary, detail: {
+        rpc_id: string;
+        event_index: number;
+        event: WireEvent;
+    }) => void;
+}
+export interface RemoteDeliverHooks {
+    onSessionRef?(sessionRef: string): void;
+    lastEventIndex?: number;
+}
+export declare class RemoteAttemptAmbiguousError extends Error {
+    readonly rpcId: string;
+    constructor(rpcId: string);
+}
+export declare class ResidentAttemptJournal {
+    private readonly db;
+    private readonly blobs;
+    constructor(path: string, blobRoot: string);
+    get(homePeer: string, rpcId: string): ResidentAttempt | undefined;
+    ensure(homePeer: string, request: ResidentDeliveryRequest): ResidentAttempt;
+    begin(homePeer: string, rpcId: string): ResidentAttempt;
+    setState(homePeer: string, rpcId: string, state: AttemptState): ResidentAttempt;
+    setSessionRef(homePeer: string, rpcId: string, sessionRef: string): void;
+    appendEvent(homePeer: string, rpcId: string, event: WireEvent): number;
+    events(attempt: ResidentAttempt): WireEvent[];
+    acknowledge(homePeer: string, rpcId: string, eventIndex: number): void;
+    close(): void;
+}
+export declare class ResidencyCoordinator {
+    private readonly options;
+    readonly journal: ResidentAttemptJournal;
+    private readonly transport;
+    private readonly adapters;
+    private readonly sessions;
+    private readonly activeResidentAttempts;
+    private readonly pendingHomeAttempts;
+    private readonly completedHomeIndexes;
+    private readonly maxPendingCompletionAcks;
+    private readonly completionAckTimer;
+    private readonly reachabilityHandlers;
+    private readonly stopEnvelope;
+    private readonly stopPeerState;
+    private closed;
+    constructor(options: ResidencyCoordinatorOptions);
+    registeredAdapters(): {
+        id: string;
+        capabilities: HarnessAdapter['capabilities'];
+    }[];
+    isReachable(peerId: string): boolean;
+    onReachability(handler: (peerId: string, connected: boolean) => void): () => void;
+    deliver(host: string, request: ResidentDeliveryRequest, hooks?: RemoteDeliverHooks): AsyncIterable<WireEvent>;
+    close(): Promise<void>;
+    private handleEnvelope;
+    private handlePeerState;
+    private sendDelivery;
+    private acceptResidentDelivery;
+    private runResidentAttempt;
+    private emitResidentEvent;
+    private reconcileResident;
+    private sendOutcome;
+    private handleOutcome;
+    private handleRemoteEvent;
+    pendingCompletionAckCount(host?: string): number;
+    private sendCompletionEventAck;
+    private retryCompletionAcks;
+    private attemptKey;
+}
+export declare function remoteMemberSpec(member: Member): ResidentMember;
+export {};
+//# sourceMappingURL=residency.d.ts.map

package/node_modules/@codor/switchboard/dist/residency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"residency.d.ts","sourceRoot":"","sources":["../src/residency.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,cAAc,EACd,MAAM,EAEN,aAAa,EACb,SAAS,EACV,MAAM,iBAAiB,CAAC;AAGzB,OAAO,KAAK,EAAE,mBAAmB,EAAmB,MAAM,2BAA2B,CAAC;AAGtF,KAAK,YAAY,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,CAAC;AAEvE,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAIhB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,aAAa,CAAC;IAEzB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,cAAc,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,cAAc,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,YAAY,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA4BD,MAAM,MAAM,iBAAiB,GACzB,qBAAqB,GACrB,gCAAgC,CAAC;AAErC,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,mBAAmB,CAAC;IAC/B,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,YAAY,CAAC,EAAE,CACb,QAAQ,EAAE,iBAAiB,EAC3B,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,CAAA;KAAE,KAC9D,IAAI,CAAC;CACX;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,CAAC,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,2BAA4B,SAAQ,KAAK;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM;gBAAb,KAAK,EAAE,MAAM;CAGnC;AAwBD,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAoB;IACvC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAY;gBAEtB,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;IAuB1C,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAOjE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,GAAG,eAAe;IA+B3E,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,eAAe;IAQvD,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,eAAe;IAO/E,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAMxE,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,MAAM;IAQtE,MAAM,CAAC,OAAO,EAAE,eAAe,GAAG,SAAS,EAAE;IAI7C,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAQtE,KAAK,IAAI,IAAI;CAGd;AAkDD,qBAAa,oBAAoB;IAenB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAdpC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;IAChD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqC;IAC9D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IACvD,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAqB;IAC5D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAoC;IACxE,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAoE;IACzG,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAS;IAClD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAiB;IACpD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA2D;IAChG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAa;IAC1C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAa;IAC3C,OAAO,CAAC,MAAM,CAAS;gBAEM,OAAO,EAAE,2BAA2B;IAqBjE,kBAAkB,IAAI;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,cAAc,CAAC,cAAc,CAAC,CAAA;KAAE,EAAE;IAOpF,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAIpC,cAAc,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI;IAKjF,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,EAAE,KAAK,GAAE,kBAAuB,GAAG,aAAa,CAAC,SAAS,CAAC;IAwB3G,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAgBd,cAAc;IAqD5B,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,sBAAsB;YAuBhB,kBAAkB;IA0EhC,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,iBAAiB;IAsBzB,OAAO,CAAC,WAAW;IAsBnB,OAAO,CAAC,aAAa;IAqBrB,OAAO,CAAC,iBAAiB;IAiDzB,yBAAyB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM;IAKhD,OAAO,CAAC,sBAAsB;IAiB9B,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,UAAU;CAGnB;AAGD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAW/D"}