@saihm/shm 0.0.0-stage → 0.38.0

package/dist/coordination/identity.js

@@ -0,0 +1,97 @@
+import { createHash } from "node:crypto";
+const HEX_ID = /^[0-9a-fA-F]{64}$/;
+const HEX_PAIRS = /^(?:[0-9a-fA-F]{2})+$/;
+function unhexlify(hex) {
+    if (!HEX_PAIRS.test(hex))
+        return null;
+    const buf = Buffer.from(hex, "hex");
+    return buf.length * 2 === hex.length ? buf : null;
+}
+export function verifyBinding(agentIdHash, record) {
+    const id = agentIdHash.trim().toLowerCase();
+    if (!HEX_ID.test(id)) {
+        return { ok: false, kind: "malformed", reason: `agentIdHash is not 64 hex characters: ${JSON.stringify(agentIdHash)}` };
+    }
+    const raw = record.mldsaPubKey;
+    if (typeof raw !== "string" || raw.trim().length === 0) {
+        return {
+            ok: false,
+            kind: "malformed",
+            reason: `record carries no usable mldsaPubKey (got ${raw === null ? "null" : typeof raw}) — nothing to bind against`,
+        };
+    }
+    const key = raw.trim();
+    const bytes = unhexlify(key);
+    if (bytes === null) {
+        return {
+            ok: false,
+            kind: "malformed",
+            reason: `mldsaPubKey is not valid hex (${key.length} chars) — REFUSED rather than hashed, because a ` +
+                `truncated decode produces a confident mismatch against a possibly-valid key`,
+        };
+    }
+    const actual = createHash("sha256").update(bytes).digest("hex");
+    if (actual !== id) {
+        return { ok: false, kind: "mismatch", reason: `sha256(key) is ${actual}, record claims ${id}` };
+    }
+    return {
+        ok: true,
+        agentIdHash: id,
+        note: "binding verified — this proves the key belongs to the id, NOT that the record is current",
+    };
+}
+const MIN_PREFIX = 8;
+export function deniedBy(agentIdHash, denials) {
+    const id = agentIdHash.trim().toLowerCase();
+    for (const d of denials) {
+        const p = d.agentIdHash.trim().toLowerCase();
+        if (p.length < MIN_PREFIX) {
+            throw new RangeError(`denylist entry ${JSON.stringify(d.agentIdHash)} is shorter than ${MIN_PREFIX} hex characters — ` +
+                `a short prefix denies a whole neighbourhood of unrelated agents`);
+        }
+        if (d.reason.trim().length === 0) {
+            throw new RangeError(`denylist entry ${p} carries no reason — an unexplained denial is one the next reader deletes`);
+        }
+        if (id.startsWith(p))
+            return d;
+    }
+    return undefined;
+}
+export function resolveRecipient(name, directory, denials = []) {
+    const wanted = name.trim().toLowerCase();
+    const matches = directory.filter((e) => e.name.trim().toLowerCase() === wanted);
+    if (matches.length === 0) {
+        return { ok: false, kind: "unknown", reason: `no directory entry named ${JSON.stringify(name)}` };
+    }
+    if (matches.length > 1) {
+        const flagged = matches.map((m) => {
+            const d = deniedBy(m.agentIdHash, denials);
+            return `${m.agentIdHash.slice(0, 8)}${d === undefined ? "" : " [DENIED: " + d.reason + "]"}`;
+        });
+        return {
+            ok: false,
+            kind: "ambiguous",
+            candidates: flagged,
+            reason: `${matches.length} agents answer to ${JSON.stringify(name)} — refusing to guess. ` +
+                `Address by agentIdHash: ${flagged.join(", ")}`,
+        };
+    }
+    const entry = matches[0];
+    const denied = deniedBy(entry.agentIdHash, denials);
+    if (denied !== undefined) {
+        return { ok: false, kind: "denied", reason: `route to ${entry.agentIdHash.slice(0, 8)} is denied: ${denied.reason}` };
+    }
+    if (entry.record === undefined) {
+        return {
+            ok: false,
+            kind: "unverified",
+            reason: `${entry.name} has no published record in this directory — the binding cannot be checked, so the route is refused`,
+        };
+    }
+    const binding = verifyBinding(entry.agentIdHash, entry.record);
+    if (!binding.ok) {
+        return { ok: false, kind: "unverified", reason: `binding check failed for ${entry.name}: ${binding.reason}` };
+    }
+    return { ok: true, entry, agentIdHash: binding.agentIdHash, note: binding.note };
+}
+//# sourceMappingURL=identity.js.map

package/dist/coordination/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/coordination/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAYzC,MAAM,MAAM,GAAG,mBAAmB,CAAC;AACnC,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAE1C,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,WAAmB,EAAE,MAAmB;IACpE,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,yCAAyC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;IAC1H,CAAC;IACD,MAAM,GAAG,GAAY,MAAM,CAAC,WAAW,CAAC;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,6CAA6C,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,GAAG,6BAA6B;SACrH,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,WAAW;YACjB,MAAM,EACJ,iCAAiC,GAAG,CAAC,MAAM,kDAAkD;gBAC7F,6EAA6E;SAChF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChE,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,MAAM,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAClG,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,WAAW,EAAE,EAAE;QACf,IAAI,EAAE,0FAA0F;KACjG,CAAC;AACJ,CAAC;AAuBD,MAAM,UAAU,GAAG,CAAC,CAAC;AAErB,MAAM,UAAU,QAAQ,CAAC,WAAmB,EAAE,OAA+B;IAC3E,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,IAAI,CAAC,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,IAAI,UAAU,CAClB,kBAAkB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,oBAAoB,UAAU,oBAAoB;gBAC/F,iEAAiE,CACpE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,UAAU,CAAC,kBAAkB,CAAC,2EAA2E,CAAC,CAAC;QACvH,CAAC;QACD,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,SAAoC,EACpC,UAAkC,EAAE;IAEpC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;IAEhF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,4BAA4B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IACpG,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAChC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC3C,OAAO,GAAG,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC/F,CAAC,CAAC,CAAC;QACH,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,OAAO;YACnB,MAAM,EACJ,GAAG,OAAO,CAAC,MAAM,qBAAqB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,wBAAwB;gBAClF,2BAA2B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAClD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IACxH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,qGAAqG;SAC3H,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,4BAA4B,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IAChH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AACnF,CAAC"}

package/dist/coordination/inbound.d.ts

@@ -0,0 +1,41 @@
+import { type GateScope } from "../gate/scope.js";
+export interface SharedRef {
+    readonly sharer: string;
+    readonly cellId: string;
+    readonly scope?: string;
+    readonly verified?: boolean;
+}
+export interface InboundOptions {
+    readonly seen?: ReadonlySet<string>;
+    readonly segregated?: readonly string[];
+    readonly known?: readonly string[];
+}
+export interface InboundTriage {
+    readonly fresh: readonly SharedRef[];
+    readonly segregated: readonly SharedRef[];
+    readonly unverified: readonly SharedRef[];
+    readonly seenCount: number;
+    readonly total: number;
+    readonly scope: GateScope;
+    readonly verdict: string;
+}
+export declare function refKey(ref: SharedRef): string;
+export declare function sharerMatches(id: string, prefixes: readonly string[], what: string): boolean;
+export declare class ListingError extends Error {
+    constructor(message: string);
+}
+export declare class TruncatedListingError extends ListingError {
+    constructor();
+}
+export declare function refsFromListing(result: unknown): readonly SharedRef[];
+export type ShareListingRead = {
+    readonly complete: true;
+    readonly refs: readonly SharedRef[];
+} | {
+    readonly complete: false;
+    readonly kept: "newest";
+    readonly refs: readonly SharedRef[];
+};
+export declare function readShareListing(result: unknown): ShareListingRead;
+export declare function triageInbound(refs: readonly SharedRef[], opts?: InboundOptions): InboundTriage;
+//# sourceMappingURL=inbound.d.ts.map

package/dist/coordination/inbound.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound.d.ts","sourceRoot":"","sources":["../../src/coordination/inbound.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7D,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,SAAS,EAAE,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,SAAS,SAAS,EAAE,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,SAAS,SAAS,EAAE,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAID,wBAAgB,MAAM,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAE7C;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAa5F;AAED,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,qBAAsB,SAAQ,YAAY;;CAKtD;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,SAAS,EAAE,CAMrE;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,SAAS,EAAE,CAAA;CAAE,GAChE;IAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,SAAS,EAAE,CAAA;CAAE,CAAC;AAE/F,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,GAAG,gBAAgB,CAWlE;AAgCD,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,SAAS,EAAE,EAAE,IAAI,GAAE,cAAmB,GAAG,aAAa,CAuClG"}

package/dist/coordination/inbound.js

@@ -0,0 +1,119 @@
+import { gateScope } from "../gate/scope.js";
+const MIN_PREFIX = 8;
+export function refKey(ref) {
+    return `${ref.sharer.trim().toLowerCase()}:${ref.cellId}`;
+}
+export function sharerMatches(id, prefixes, what) {
+    const norm = id.trim().toLowerCase();
+    for (const p of prefixes) {
+        const q = p.trim().toLowerCase();
+        if (q.length < MIN_PREFIX) {
+            throw new RangeError(`${what} prefix ${JSON.stringify(p)} is shorter than ${MIN_PREFIX} hex characters — ` +
+                `it would match a neighbourhood of unrelated agents`);
+        }
+        if (norm.startsWith(q))
+            return true;
+    }
+    return false;
+}
+export class ListingError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ListingError";
+    }
+}
+export class TruncatedListingError extends ListingError {
+    constructor() {
+        super("the share listing is truncated (sharedTruncated: true) and holds part of the shares — read a complete listing before treating it as whole");
+        this.name = "TruncatedListingError";
+    }
+}
+export function refsFromListing(result) {
+    const r = listingRecord(result);
+    const truncated = r["sharedTruncated"];
+    if (truncated === true)
+        throw new TruncatedListingError();
+    if (truncated !== false)
+        throw new ListingError("not a share listing: `sharedTruncated` is not a boolean, so whether rows are missing cannot be known");
+    return rowsOf(r);
+}
+export function readShareListing(result) {
+    const r = listingRecord(result);
+    const truncated = r["sharedTruncated"];
+    const hasKept = Object.prototype.hasOwnProperty.call(r, "sharedKept");
+    if (truncated === false) {
+        if (hasKept)
+            throw new ListingError("not a share listing: `sharedKept` on a listing that is not truncated contradicts its definition");
+        return { complete: true, refs: rowsOf(r) };
+    }
+    if (truncated !== true)
+        throw new ListingError("not a share listing: `sharedTruncated` is not a boolean, so whether rows are missing cannot be known");
+    if (r["sharedKept"] !== "newest")
+        throw new TruncatedListingError();
+    return { complete: false, kept: "newest", refs: rowsOf(r) };
+}
+function listingRecord(result) {
+    if (typeof result !== "object" || result === null || Array.isArray(result)) {
+        throw new ListingError("not a share listing: expected a recall result with `shared` and `sharedTruncated`");
+    }
+    const r = result;
+    if (Object.prototype.hasOwnProperty.call(r, "next")) {
+        throw new ListingError("not a share listing: the answer carries `next`, so it is one page of a paged listing — read the whole pass");
+    }
+    return r;
+}
+function rowsOf(r) {
+    const rows = r["shared"];
+    if (!Array.isArray(rows))
+        throw new ListingError("not a share listing: `shared` is not an array");
+    return rows.map((row, i) => {
+        const o = typeof row === "object" && row !== null ? row : undefined;
+        const sharer = o?.["sharer"];
+        const cellId = o?.["cellId"];
+        if (o === undefined || typeof sharer !== "string" || typeof cellId !== "string") {
+            throw new ListingError(`share listing row ${i} has no string sharer and cellId`);
+        }
+        return {
+            sharer,
+            cellId,
+            ...(typeof o["scope"] === "string" ? { scope: o["scope"] } : {}),
+            ...(typeof o["verified"] === "boolean" ? { verified: o["verified"] } : {}),
+        };
+    });
+}
+export function triageInbound(refs, opts = {}) {
+    const seen = opts.seen ?? new Set();
+    const segregatedPins = opts.segregated ?? [];
+    const knownPins = opts.known;
+    const fresh = [];
+    const segregated = [];
+    const unverified = [];
+    let seenCount = 0;
+    for (const r of refs) {
+        if (sharerMatches(r.sharer, segregatedPins, "segregated")) {
+            segregated.push(r);
+            continue;
+        }
+        if (seen.has(refKey(r))) {
+            seenCount += 1;
+            continue;
+        }
+        if (knownPins !== undefined && !sharerMatches(r.sharer, knownPins, "known")) {
+            unverified.push(r);
+            continue;
+        }
+        fresh.push(r);
+    }
+    const scope = gateScope({
+        unit: "share reference",
+        examined: refs.length,
+        discriminating: refs.length - seenCount,
+        discriminator: "were not already in the seen set",
+    });
+    const verdict = !scope.conclusive
+        ? `VERDICT WITHHELD — ${scope.note}. An empty listing is equally consistent with an enumeration failure.`
+        : `${fresh.length} to read, ${segregated.length} to RE-FILE UNREAD, ${unverified.length} needing a binding check` +
+            ` (${seenCount} of ${refs.length} already handled)`;
+    return { fresh, segregated, unverified, seenCount, total: refs.length, scope, verdict };
+}
+//# sourceMappingURL=inbound.js.map

package/dist/coordination/inbound.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound.js","sourceRoot":"","sources":["../../src/coordination/inbound.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAkB,MAAM,kBAAkB,CAAC;AAyB7D,MAAM,UAAU,GAAG,CAAC,CAAC;AAErB,MAAM,UAAU,MAAM,CAAC,GAAc;IACnC,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAU,EAAE,QAA2B,EAAE,IAAY;IACjF,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,IAAI,UAAU,CAClB,GAAG,IAAI,WAAW,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,UAAU,oBAAoB;gBACnF,oDAAoD,CACvD,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,YAAY;IACrD;QACE,KAAK,CAAC,2IAA2I,CAAC,CAAC;QACnJ,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,UAAU,eAAe,CAAC,MAAe;IAC7C,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACvC,IAAI,SAAS,KAAK,IAAI;QAAE,MAAM,IAAI,qBAAqB,EAAE,CAAC;IAC1D,IAAI,SAAS,KAAK,KAAK;QAAE,MAAM,IAAI,YAAY,CAAC,sGAAsG,CAAC,CAAC;IACxJ,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AAMD,MAAM,UAAU,gBAAgB,CAAC,MAAe;IAC9C,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IACtE,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,IAAI,OAAO;YAAE,MAAM,IAAI,YAAY,CAAC,iGAAiG,CAAC,CAAC;QACvI,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,SAAS,KAAK,IAAI;QAAE,MAAM,IAAI,YAAY,CAAC,sGAAsG,CAAC,CAAC;IACvJ,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,qBAAqB,EAAE,CAAC;IACpE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,MAAe;IACpC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,YAAY,CAAC,mFAAmF,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,YAAY,CAAC,4GAA4G,CAAC,CAAC;IACvI,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,MAAM,CAAC,CAA0B;IACxC,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,+CAA+C,CAAC,CAAC;IAClG,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,CAAC,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,SAAS,CAAC;QACjG,MAAM,MAAM,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAChF,MAAM,IAAI,YAAY,CAAC,qBAAqB,CAAC,kCAAkC,CAAC,CAAC;QACnF,CAAC;QACD,OAAO;YACL,MAAM;YACN,MAAM;YACN,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3E,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAA0B,EAAE,OAAuB,EAAE;IACjF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,EAAU,CAAC;IAC5C,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC;IAE7B,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,YAAY,CAAC,EAAE,CAAC;YAC1D,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxB,SAAS,IAAI,CAAC,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;YAC5E,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC;QACtB,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,IAAI,CAAC,MAAM;QACrB,cAAc,EAAE,IAAI,CAAC,MAAM,GAAG,SAAS;QACvC,aAAa,EAAE,kCAAkC;KAClD,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,UAAU;QAC/B,CAAC,CAAC,sBAAsB,KAAK,CAAC,IAAI,uEAAuE;QACzG,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,uBAAuB,UAAU,CAAC,MAAM,0BAA0B;YAC/G,KAAK,SAAS,OAAO,IAAI,CAAC,MAAM,mBAAmB,CAAC;IAExD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC1F,CAAC"}

package/dist/coordination/index.d.ts

@@ -0,0 +1,12 @@
+export { verifyBinding, resolveRecipient, deniedBy } from "./identity.js";
+export type { AgentRecord, BindingVerdict, DirectoryEntry, DeniedRoute, RouteVerdict } from "./identity.js";
+export { screenOutbound, assertSendable } from "./outbound.js";
+export type { OutboundPayload, OutboundPolicy, OutboundOptions, OutboundVerdict, Refusal } from "./outbound.js";
+export { triageInbound, refKey, sharerMatches, refsFromListing, readShareListing, ListingError, TruncatedListingError } from "./inbound.js";
+export type { SharedRef, InboundOptions, InboundTriage, ShareListingRead } from "./inbound.js";
+export { escapeUntrusted, displayUntrusted } from "./untrusted_text.js";
+export { readShareStates, mapIsWhole, entryFor, copyStanding, shareObligations, obligationKey, pendingObligations, shareTransitions, nextBaseline, versionKey, readMarkOf, unreadVersions, citingNotes, renderShareNotices, COPY_SKEW_MS, MIN_CITED_ID_LENGTH, readShareStatesFile, countsOf, fileCurrency, summaryFindings, carryObligations, readObligationLedger, renderCarriedObligations, } from "./share_states.js";
+export type { ShareStatus, EndedBy, ShareStateEntry, ShareStateMap, ShareStateSummary, ShareCounts, FeedStopped, FileCurrency, SummaryFindings, ShareStatesRead, CopyStanding, HeldCopy, CopyVerdict, ShareObligationKind, ShareObligation, CarriedObligationKind, OpenObligation, ObligationCarry, ObligationLedgerRead, ShareTransitionKind, ShareTransition, ShareBaseline, ShareTransitionReport, ReadMark, Citations, NoticePolicy, } from "./share_states.js";
+export { readNoteLineage, standingOf, lineageDuties, undeclaredCitations, unknownDeclarations, renderLineageDuties, notesToWithhold, handlingBlockedBy } from "./note_lineage.js";
+export type { NoteRef, NoteLineage, CitationStanding, LineageDuty, LineageReport, WithheldNote } from "./note_lineage.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/coordination/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/coordination/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC1E,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC5G,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/D,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAChH,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC5I,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EACL,eAAe,EACf,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,mBAAmB,EACnB,QAAQ,EACR,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,WAAW,EACX,OAAO,EACP,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,YAAY,EACZ,eAAe,EACf,eAAe,EACf,YAAY,EACZ,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,qBAAqB,EACrB,QAAQ,EACR,SAAS,EACT,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAClL,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/coordination/index.js

@@ -0,0 +1,7 @@
+export { verifyBinding, resolveRecipient, deniedBy } from "./identity.js";
+export { screenOutbound, assertSendable } from "./outbound.js";
+export { triageInbound, refKey, sharerMatches, refsFromListing, readShareListing, ListingError, TruncatedListingError } from "./inbound.js";
+export { escapeUntrusted, displayUntrusted } from "./untrusted_text.js";
+export { readShareStates, mapIsWhole, entryFor, copyStanding, shareObligations, obligationKey, pendingObligations, shareTransitions, nextBaseline, versionKey, readMarkOf, unreadVersions, citingNotes, renderShareNotices, COPY_SKEW_MS, MIN_CITED_ID_LENGTH, readShareStatesFile, countsOf, fileCurrency, summaryFindings, carryObligations, readObligationLedger, renderCarriedObligations, } from "./share_states.js";
+export { readNoteLineage, standingOf, lineageDuties, undeclaredCitations, unknownDeclarations, renderLineageDuties, notesToWithhold, handlingBlockedBy } from "./note_lineage.js";
+//# sourceMappingURL=index.js.map

package/dist/coordination/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/coordination/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE1E,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/D,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAE5I,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EACL,eAAe,EACf,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,mBAAmB,EACnB,QAAQ,EACR,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AA6B3B,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/coordination/note_lineage.d.ts

@@ -0,0 +1,50 @@
+import { type OpenObligation } from "./share_states.js";
+export interface NoteRef {
+    readonly name: string;
+    readonly text: string;
+}
+export interface NoteLineage {
+    readonly sources: readonly string[];
+    readonly mentions: readonly string[];
+    readonly defects: readonly string[];
+}
+export declare function readNoteLineage(text: string): NoteLineage;
+export type CitationStanding = "derived" | "mentioned" | "undeclared";
+export declare function standingOf(note: NoteRef, cellId: string, lineage?: NoteLineage): CitationStanding | undefined;
+export interface LineageDuty {
+    readonly obligation: OpenObligation;
+    readonly derived: readonly string[];
+    readonly undeclared: readonly string[];
+    readonly mentioned: readonly string[];
+    readonly scope: string;
+}
+export interface LineageReport {
+    readonly duties: readonly LineageDuty[];
+    readonly defects: readonly {
+        readonly note: string;
+        readonly defect: string;
+    }[];
+}
+export declare function lineageDuties(open: readonly OpenObligation[], notes: readonly NoteRef[]): LineageReport;
+export declare function undeclaredCitations(notes: readonly NoteRef[], cellIds: readonly string[]): readonly {
+    readonly note: string;
+    readonly cellId: string;
+}[];
+export declare function unknownDeclarations(notes: readonly NoteRef[], cellIds: readonly string[]): readonly {
+    readonly note: string;
+    readonly id: string;
+    readonly as: "source" | "mention";
+    readonly why: string;
+}[];
+export interface WithheldNote {
+    readonly note: string;
+    readonly because: readonly {
+        readonly cellId: string;
+        readonly kind: "erased" | "copies-invalid";
+        readonly obligationId: string;
+    }[];
+}
+export declare function notesToWithhold(report: LineageReport): readonly WithheldNote[];
+export declare function handlingBlockedBy(report: LineageReport, obligationId: string): readonly string[];
+export declare function renderLineageDuties(report: LineageReport): string[];
+//# sourceMappingURL=note_lineage.d.ts.map

package/dist/coordination/note_lineage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"note_lineage.d.ts","sourceRoot":"","sources":["../../src/coordination/note_lineage.ts"],"names":[],"mappings":"AACA,OAAO,EAAoC,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAG1F,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAqBD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAQzD;AAED,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,WAAW,GAAG,YAAY,CAAC;AAEtE,wBAAgB,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,WAAwC,GAAG,gBAAgB,GAAG,SAAS,CAIzI;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjF;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,cAAc,EAAE,EAAE,KAAK,EAAE,SAAS,OAAO,EAAE,GAAG,aAAa,CAsBvG;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,CASxJ;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,GAAG,SAAS,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE,CAkB7M;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,gBAAgB,CAAC;QAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACrI;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,YAAY,EAAE,CAU9E;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAEhG;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE,CAYnE"}

package/dist/coordination/note_lineage.js

@@ -0,0 +1,132 @@
+import { parseFrontmatter } from "../adapter/frontmatter.js";
+import { citingNotes, MIN_CITED_ID_LENGTH } from "./share_states.js";
+import { displayUntrusted } from "./untrusted_text.js";
+const CELL_ID = /^[A-Za-z0-9][A-Za-z0-9_-]*$/;
+function idsOf(key, value, defects) {
+    if (value === undefined)
+        return [];
+    let v = value.trim();
+    if (v.startsWith("[") && v.endsWith("]"))
+        v = v.slice(1, -1);
+    const out = [];
+    for (const raw of v.split(/[\s,]+/)) {
+        const token = raw.replace(/^["']|["']$/g, "");
+        if (token === "")
+            continue;
+        if (!CELL_ID.test(token) || token.length < MIN_CITED_ID_LENGTH) {
+            defects.push(`${key}: "${displayUntrusted(token, 80)}" is not a full cell id — it declares nothing`);
+            continue;
+        }
+        if (!out.includes(token))
+            out.push(token);
+    }
+    return out;
+}
+export function readNoteLineage(text) {
+    const fm = parseFrontmatter(text).keys;
+    const defects = [];
+    const sources = idsOf("sources", fm.get("sources"), defects);
+    const declaredMentions = idsOf("mentions", fm.get("mentions"), defects);
+    const both = declaredMentions.filter((id) => sources.includes(id));
+    for (const id of both)
+        defects.push(`"${displayUntrusted(id, 80)}" is declared a source AND a mention — it counts as a source`);
+    return { sources, mentions: declaredMentions.filter((id) => !sources.includes(id)), defects };
+}
+export function standingOf(note, cellId, lineage = readNoteLineage(note.text)) {
+    if (lineage.sources.includes(cellId))
+        return "derived";
+    if (lineage.mentions.includes(cellId))
+        return "mentioned";
+    return citingNotes(cellId, [note]).names.length > 0 ? "undeclared" : undefined;
+}
+export function lineageDuties(open, notes) {
+    const lineages = notes.map((n) => ({ note: n, lineage: readNoteLineage(n.text) }));
+    const defects = lineages.flatMap(({ note, lineage }) => lineage.defects.map((defect) => ({ note: note.name, defect })));
+    const duties = open.map((obligation) => {
+        const derived = [];
+        const undeclared = [];
+        const mentioned = [];
+        for (const { note, lineage } of lineages) {
+            const s = standingOf(note, obligation.cellId, lineage);
+            if (s === "derived")
+                derived.push(note.name);
+            else if (s === "undeclared")
+                undeclared.push(note.name);
+            else if (s === "mentioned")
+                mentioned.push(note.name);
+        }
+        const found = derived.length + undeclared.length;
+        const scope = obligation.cellId.length < MIN_CITED_ID_LENGTH
+            ? `the id is shorter than ${MIN_CITED_ID_LENGTH} characters — neither a declaration nor a citation is matched for it; review by hand`
+            : found === 0
+                ? `none of ${notes.length} note(s) declares or cites this cell — a derivation that never named its source cannot be found here`
+                : `${derived.length} declared, ${undeclared.length} undeclared of ${notes.length} note(s); a derivation that never named its source is not among them`;
+        return { obligation, derived, undeclared, mentioned, scope };
+    });
+    return { duties, defects };
+}
+export function undeclaredCitations(notes, cellIds) {
+    const out = [];
+    for (const note of notes) {
+        const lineage = readNoteLineage(note.text);
+        for (const cellId of cellIds) {
+            if (standingOf(note, cellId, lineage) === "undeclared")
+                out.push({ note: note.name, cellId });
+        }
+    }
+    return out;
+}
+export function unknownDeclarations(notes, cellIds) {
+    const known = new Set(cellIds);
+    const out = [];
+    for (const note of notes) {
+        const lineage = readNoteLineage(note.text);
+        const each = (ids, as) => {
+            for (const id of ids) {
+                if (known.has(id))
+                    continue;
+                const longer = cellIds.filter((c) => c.startsWith(id)).length;
+                out.push({ note: note.name, id, as, why: longer > 0
+                        ? `a prefix of ${longer} known id(s) — shortened: it declares nothing`
+                        : "no known share has this id — mistyped, or a share this listing no longer holds" });
+            }
+        };
+        each(lineage.sources, "source");
+        each(lineage.mentions, "mention");
+    }
+    return out;
+}
+export function notesToWithhold(report) {
+    const byNote = new Map();
+    for (const d of report.duties) {
+        const kind = d.obligation.kind;
+        if (kind !== "erased" && kind !== "copies-invalid")
+            continue;
+        for (const note of d.derived) {
+            byNote.set(note, [...(byNote.get(note) ?? []), { cellId: d.obligation.cellId, kind, obligationId: d.obligation.id }]);
+        }
+    }
+    return [...byNote].sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0)).map(([note, because]) => ({ note, because }));
+}
+export function handlingBlockedBy(report, obligationId) {
+    return report.duties.filter((d) => d.obligation.id === obligationId).flatMap((d) => d.derived);
+}
+export function renderLineageDuties(report) {
+    const lines = [];
+    const names = (ns) => ns.slice(0, 8).map((n) => displayUntrusted(n, 64)).join(", ") + (ns.length > 8 ? `, +${ns.length - 8} more` : "");
+    for (const d of report.duties) {
+        const cell = `"${displayUntrusted(d.obligation.cellId)}" (${d.obligation.kind})`;
+        if (d.derived.length > 0)
+            lines.push(`derived from ${cell}: ${names(d.derived)} — declared sources; handle the derived data, never deleted automatically`);
+        if (d.undeclared.length > 0)
+            lines.push(`cite ${cell} and declare nothing: ${names(d.undeclared)} — treated as derived until classified (sources: or mentions:)`);
+        if (d.mentioned.length > 0)
+            lines.push(`only point at ${cell}: ${names(d.mentioned)} — declared mentions; nothing of the cell to handle`);
+        if (d.derived.length + d.undeclared.length === 0)
+            lines.push(`${cell}: ${d.scope}`);
+    }
+    for (const x of report.defects)
+        lines.push(`⚠️ lineage of ${displayUntrusted(x.note, 64)}: ${x.defect}`);
+    return lines;
+}
+//# sourceMappingURL=note_lineage.js.map

package/dist/coordination/note_lineage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"note_lineage.js","sourceRoot":"","sources":["../../src/coordination/note_lineage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAuB,MAAM,mBAAmB,CAAC;AAC1F,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAavD,MAAM,OAAO,GAAG,6BAA6B,CAAC;AAE9C,SAAS,KAAK,CAAC,GAAW,EAAE,KAAyB,EAAE,OAAiB;IACtE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI,KAAK,KAAK,EAAE;YAAE,SAAS;QAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,EAAE,CAAC,+CAA+C,CAAC,CAAC;YACrG,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;IACvC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,gBAAgB,GAAG,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACnE,KAAK,MAAM,EAAE,IAAI,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC,8DAA8D,CAAC,CAAC;IAChI,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;AAChG,CAAC;AAID,MAAM,UAAU,UAAU,CAAC,IAAa,EAAE,MAAc,EAAE,UAAuB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;IACzG,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACvD,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,WAAW,CAAC;IAC1D,OAAO,WAAW,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC;AAeD,MAAM,UAAU,aAAa,CAAC,IAA+B,EAAE,KAAyB;IACtF,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACxH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,EAAe,EAAE;QAClD,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACvD,IAAI,CAAC,KAAK,SAAS;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACxC,IAAI,CAAC,KAAK,YAAY;gBAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACnD,IAAI,CAAC,KAAK,WAAW;gBAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QACjD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,mBAAmB;YAC1D,CAAC,CAAC,0BAA0B,mBAAmB,sFAAsF;YACrI,CAAC,CAAC,KAAK,KAAK,CAAC;gBACb,CAAC,CAAC,WAAW,KAAK,CAAC,MAAM,sGAAsG;gBAC/H,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,cAAc,UAAU,CAAC,MAAM,kBAAkB,KAAK,CAAC,MAAM,sEAAsE,CAAC;QACzJ,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAyB,EAAE,OAA0B;IACvF,MAAM,GAAG,GAAuC,EAAE,CAAC;IACnD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,YAAY;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAyB,EAAE,OAA0B;IACvF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,GAAG,GAA0E,EAAE,CAAC;IACtF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,GAAsB,EAAE,EAAwB,EAAQ,EAAE;YACtE,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;gBACrB,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC;wBACjD,CAAC,CAAC,eAAe,MAAM,+CAA+C;wBACtE,CAAC,CAAC,gFAAgF,EAAE,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,MAAM,UAAU,eAAe,CAAC,MAAqB;IACnD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyF,CAAC;IAChH,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAC/B,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,gBAAgB;YAAE,SAAS;QAC7D,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACxH,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACpH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAqB,EAAE,YAAoB;IAC3E,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAqB;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,CAAC,EAAqB,EAAU,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnK,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC;QACjF,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,2EAA2E,CAAC,CAAC;QAC3J,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,yBAAyB,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,gEAAgE,CAAC,CAAC;QAClK,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,qDAAqD,CAAC,CAAC;QAC1I,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,gBAAgB,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACzG,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/coordination/outbound.d.ts

@@ -0,0 +1,33 @@
+import { type GateScope } from "../gate/scope.js";
+import { type DirectoryEntry, type DeniedRoute, type RouteVerdict } from "./identity.js";
+export interface OutboundPayload {
+    readonly to: string;
+    readonly text: string;
+    readonly cellId?: string;
+}
+export interface OutboundPolicy {
+    readonly name: string;
+    readonly reason: string;
+    readonly refuses: (payload: OutboundPayload) => string | null;
+    readonly applies?: (payload: OutboundPayload) => boolean;
+}
+export interface OutboundOptions {
+    readonly directory: readonly DirectoryEntry[];
+    readonly denials?: readonly DeniedRoute[];
+    readonly policies?: readonly OutboundPolicy[];
+}
+export interface Refusal {
+    readonly policy: string;
+    readonly detail: string;
+    readonly reason: string;
+}
+export interface OutboundVerdict {
+    readonly allowed: boolean;
+    readonly route: RouteVerdict;
+    readonly refusals: readonly Refusal[];
+    readonly scope: GateScope;
+    readonly verdict: string;
+}
+export declare function screenOutbound(payload: OutboundPayload, opts: OutboundOptions): OutboundVerdict;
+export declare function assertSendable(payload: OutboundPayload, opts: OutboundOptions): OutboundVerdict;
+//# sourceMappingURL=outbound.d.ts.map

package/dist/coordination/outbound.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound.d.ts","sourceRoot":"","sources":["../../src/coordination/outbound.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAoB,KAAK,cAAc,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAE3G,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,MAAM,GAAG,IAAI,CAAC;IAC9D,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC;CAC1D;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;CAC/C;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,GAAG,eAAe,CAsD/F;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,GAAG,eAAe,CAY/F"}

package/dist/coordination/outbound.js

@@ -0,0 +1,69 @@
+import { gateScope, renderGateVerdict } from "../gate/scope.js";
+import { resolveRecipient } from "./identity.js";
+export function screenOutbound(payload, opts) {
+    const policies = opts.policies ?? [];
+    const route = resolveRecipient(payload.to, opts.directory, opts.denials ?? []);
+    const refusals = [];
+    let applicable = 0;
+    for (const p of policies) {
+        let relevant = true;
+        try {
+            relevant = p.applies === undefined ? true : p.applies(payload);
+        }
+        catch (e) {
+            relevant = true;
+            refusals.push({
+                policy: p.name,
+                reason: p.reason,
+                detail: `applicability check THREW (${e instanceof Error ? e.message : String(e)}) — treated as applicable and refused`,
+            });
+            applicable += 1;
+            continue;
+        }
+        if (!relevant)
+            continue;
+        applicable += 1;
+        try {
+            const hit = p.refuses(payload);
+            if (hit !== null)
+                refusals.push({ policy: p.name, reason: p.reason, detail: hit });
+        }
+        catch (e) {
+            refusals.push({
+                policy: p.name,
+                reason: p.reason,
+                detail: `policy THREW (${e instanceof Error ? e.message : String(e)}) — a check that cannot run does not grant permission`,
+            });
+        }
+    }
+    const scope = gateScope({
+        unit: "content policy",
+        examined: policies.length,
+        discriminating: applicable,
+        discriminator: "could have refused this payload",
+    });
+    const allowed = route.ok && refusals.length === 0;
+    const head = route.ok
+        ? renderGateVerdict(refusals.length === 0, scope, { pass: "ALLOW", fail: "REFUSE" })
+        : `REFUSE (route) — ${route.reason}`;
+    const detail = refusals.map((r) => `  · ${r.policy}: ${r.detail} [${r.reason}]`).join("\n");
+    return {
+        allowed,
+        route,
+        refusals,
+        scope,
+        verdict: refusals.length === 0 ? head : `${head}\n${detail}`,
+    };
+}
+export function assertSendable(payload, opts) {
+    const v = screenOutbound(payload, opts);
+    if (!v.allowed) {
+        throw new Error(`refusing to send to ${JSON.stringify(payload.to)}:\n${v.verdict}`);
+    }
+    if (!v.scope.conclusive) {
+        throw new Error(`refusing to send to ${JSON.stringify(payload.to)}: no content policy could have refused this payload — ` +
+            `${v.scope.note}. An unscreened send is not a cleared one.`);
+    }
+    return v;
+}
+//# sourceMappingURL=outbound.js.map

package/dist/coordination/outbound.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound.js","sourceRoot":"","sources":["../../src/coordination/outbound.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAkB,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAA4D,MAAM,eAAe,CAAC;AAmC3G,MAAM,UAAU,cAAc,CAAC,OAAwB,EAAE,IAAqB;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAE/E,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,QAAQ,GAAG,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,GAAG,IAAI,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,CAAC,CAAC,IAAI;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,MAAM,EAAE,8BAA8B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,uCAAuC;aACxH,CAAC,CAAC;YACH,UAAU,IAAI,CAAC,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,UAAU,IAAI,CAAC,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC/B,IAAI,GAAG,KAAK,IAAI;gBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,CAAC,CAAC,IAAI;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,MAAM,EAAE,iBAAiB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,uDAAuD;aAC3H,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC;QACtB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,QAAQ,CAAC,MAAM;QACzB,cAAc,EAAE,UAAU;QAC1B,aAAa,EAAE,iCAAiC;KACjD,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE;QACnB,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACpF,CAAC,CAAC,oBAAoB,KAAK,CAAC,MAAM,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE5F,OAAO;QACL,OAAO;QACP,KAAK;QACL,QAAQ;QACR,KAAK;QACL,OAAO,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,MAAM,EAAE;KAC7D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAwB,EAAE,IAAqB;IAC5E,MAAM,CAAC,GAAG,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,uBAAuB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,wDAAwD;YACvG,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,4CAA4C,CAC9D,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}