@saihm/shm 0.0.0-stage → 0.38.1

package/dist/standing/standing_store.js

@@ -0,0 +1,238 @@
+import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
+import { chmod, readFile, rename, stat } from "node:fs/promises";
+import { writeFileAtomic } from "../store/atomic_write.js";
+import { assertStateDir, ensureStateDir } from "../store/state_dir.js";
+import { join } from "node:path";
+import { StandingAnswerStore } from "./standing_answers.js";
+const MAGIC = Buffer.from("SHMS", "ascii");
+const IV_LEN = 12;
+const TAG_LEN = 16;
+const KEY_LEN = 32;
+const MAX_HEADER_LEN = 64 * 1024;
+const DEFAULT_MAX_ENTRIES = 400;
+function isStandingAnswer(v) {
+    const a = v;
+    return (typeof a?.question === "string" &&
+        typeof a.answer === "string" &&
+        typeof a.writtenAtEpoch === "number" &&
+        Number.isFinite(a.writtenAtEpoch) &&
+        Array.isArray(a.evidence) &&
+        a.evidence.every((r) => typeof r?.cellId === "string" &&
+            typeof r?.fingerprint === "string"));
+}
+export class EncryptedStandingStore {
+    tenantId;
+    dir;
+    injectedKey;
+    maxEntries;
+    cachedKey;
+    entries = [];
+    nextSeq = 1;
+    loadPromise;
+    quarantinePending = false;
+    writeChain = Promise.resolve();
+    constructor(cfg) {
+        this.dir = cfg.dir;
+        assertStateDir("EncryptedStandingStore", this.dir);
+        this.tenantId = cfg.tenantId ?? "local";
+        this.maxEntries =
+            Number.isFinite(cfg.maxEntries) && cfg.maxEntries >= 1
+                ? Math.floor(cfg.maxEntries)
+                : DEFAULT_MAX_ENTRIES;
+        if (cfg.keyBytes !== undefined) {
+            if (cfg.keyBytes.length !== KEY_LEN) {
+                throw new Error(`keyBytes must be ${KEY_LEN} bytes, got ${cfg.keyBytes.length}`);
+            }
+            this.injectedKey = Buffer.from(cfg.keyBytes);
+        }
+    }
+    get filePath() {
+        return join(this.dir, "standing.v1.enc");
+    }
+    get keyPath() {
+        return join(this.dir, "standing.key");
+    }
+    get size() {
+        return this.entries.length;
+    }
+    async load() {
+        assertStateDir("EncryptedStandingStore", this.dir);
+        this.loadPromise ??= this.readFileNow();
+        return this.loadPromise;
+    }
+    async readFileNow() {
+        let file;
+        try {
+            file = await readFile(this.filePath);
+        }
+        catch (e) {
+            if (e?.code === "ENOENT")
+                return { state: "absent" };
+            this.quarantinePending = true;
+            return { state: "invalid", reason: `unreadable: ${String(e)}` };
+        }
+        const bad = (reason) => {
+            this.quarantinePending = true;
+            return { state: "invalid", reason };
+        };
+        if (file.length < MAGIC.length + 4)
+            return bad("truncated (no header length)");
+        if (!file.subarray(0, MAGIC.length).equals(MAGIC))
+            return bad("bad magic");
+        const headerLen = file.readUInt32LE(MAGIC.length);
+        if (headerLen === 0 || headerLen > MAX_HEADER_LEN)
+            return bad(`header length ${headerLen} out of range`);
+        const headerStart = MAGIC.length + 4;
+        const ivStart = headerStart + headerLen;
+        if (file.length < ivStart + IV_LEN + TAG_LEN)
+            return bad("truncated (no iv/tag)");
+        const headerBytes = file.subarray(headerStart, ivStart);
+        let header;
+        try {
+            header = JSON.parse(headerBytes.toString("utf8"));
+        }
+        catch {
+            return bad("header is not JSON");
+        }
+        if (header?.formatVersion !== 1)
+            return bad(`unsupported formatVersion ${String(header?.formatVersion)}`);
+        if (header.tenantId !== this.tenantId) {
+            return bad(`tenant mismatch: file "${header.tenantId}" != store "${this.tenantId}"`);
+        }
+        const iv = file.subarray(ivStart, ivStart + IV_LEN);
+        const tag = file.subarray(ivStart + IV_LEN, ivStart + IV_LEN + TAG_LEN);
+        const ct = file.subarray(ivStart + IV_LEN + TAG_LEN);
+        let plain;
+        try {
+            const key = await this.getKey();
+            const d = createDecipheriv("aes-256-gcm", key, iv);
+            d.setAAD(headerBytes);
+            d.setAuthTag(tag);
+            plain = Buffer.concat([d.update(ct), d.final()]);
+        }
+        catch (e) {
+            if (e instanceof Error && e.message.startsWith("corrupt standing-store key"))
+                throw e;
+            return bad("authentication failed (tamper, wrong key, or corrupt payload)");
+        }
+        let payload;
+        try {
+            payload = JSON.parse(plain.toString("utf8"));
+        }
+        catch {
+            return bad("payload is not JSON");
+        }
+        if (payload?.version !== 1 || !Array.isArray(payload.entries))
+            return bad("payload shape");
+        const kept = [];
+        for (const e of payload.entries) {
+            if (typeof e?.seq === "number" && Number.isFinite(e.seq) && isStandingAnswer(e.answer)) {
+                kept.push({ seq: e.seq, answer: e.answer });
+            }
+        }
+        this.entries = kept.slice(-this.maxEntries);
+        const maxSeq = kept.reduce((m, e) => Math.max(m, e.seq), 0);
+        this.nextSeq = Math.max(Number.isFinite(payload.nextSeq) ? payload.nextSeq : 0, maxSeq + 1, 1);
+        return { state: "loaded", count: kept.length, dropped: payload.entries.length - kept.length };
+    }
+    snapshot() {
+        const s = new StandingAnswerStore();
+        for (const e of this.entries)
+            s.remember(e.answer);
+        return s;
+    }
+    async record(answer) {
+        const epoch = answer?.writtenAtEpoch;
+        if (!isStandingAnswer(answer)) {
+            throw new Error("refusing to record a standing answer this store would drop on reload" +
+                (typeof epoch === "number" && Number.isFinite(epoch) ? "" : `: writtenAtEpoch is ${String(epoch)}`));
+        }
+        await this.load();
+        const seq = this.nextSeq++;
+        this.entries.push({ seq, answer });
+        if (this.entries.length > this.maxEntries) {
+            this.entries.splice(0, this.entries.length - this.maxEntries);
+        }
+        await this.save();
+        return seq;
+    }
+    async conclude(handle, text) {
+        await this.load();
+        const i = this.entries.findIndex((e) => e.seq === handle);
+        if (i < 0)
+            return false;
+        this.entries[i] = { seq: this.entries[i].seq, answer: { ...this.entries[i].answer, answer: text } };
+        await this.save();
+        return true;
+    }
+    async concludeLatest(text) {
+        await this.load();
+        const last = this.entries[this.entries.length - 1];
+        return last ? this.conclude(last.seq, text) : false;
+    }
+    purge = async (cellId) => {
+        await this.load();
+        const before = this.entries.length;
+        this.entries = this.entries.filter((e) => !e.answer.evidence.some((r) => r.cellId === cellId));
+        if (this.entries.length !== before)
+            await this.save();
+    };
+    async save() {
+        const payload = { version: 1, nextSeq: this.nextSeq, entries: [...this.entries] };
+        const body = Buffer.from(JSON.stringify(payload), "utf8");
+        const header = { formatVersion: 1, tenantId: this.tenantId, count: payload.entries.length };
+        const headerBytes = Buffer.from(JSON.stringify(header), "utf8");
+        if (headerBytes.length > MAX_HEADER_LEN) {
+            throw new Error(`refusing to persist standing answers: header is ${headerBytes.length} B, over the ${MAX_HEADER_LEN} B this store can read back`);
+        }
+        const run = async () => {
+            const key = await this.getKey();
+            if (this.quarantinePending) {
+                const aside = `${this.filePath}.bad-${randomBytes(4).toString("hex")}`;
+                await rename(this.filePath, aside).catch(() => { });
+                this.quarantinePending = false;
+            }
+            const iv = randomBytes(IV_LEN);
+            const c = createCipheriv("aes-256-gcm", key, iv);
+            c.setAAD(headerBytes);
+            const ct = Buffer.concat([c.update(body), c.final()]);
+            const lenBuf = Buffer.alloc(4);
+            lenBuf.writeUInt32LE(headerBytes.length, 0);
+            await this.atomicWrite(this.filePath, Buffer.concat([MAGIC, lenBuf, headerBytes, iv, c.getAuthTag(), ct]));
+        };
+        this.writeChain = this.writeChain.then(run, run);
+        await this.writeChain;
+    }
+    async getKey() {
+        if (this.injectedKey)
+            return this.injectedKey;
+        if (this.cachedKey)
+            return this.cachedKey;
+        assertStateDir("EncryptedStandingStore", this.dir);
+        try {
+            const raw = await readFile(this.keyPath);
+            if (raw.length !== KEY_LEN) {
+                throw new Error(`corrupt standing-store key ${this.keyPath} (${raw.length} bytes, want ${KEY_LEN}). ` +
+                    `Standing answers are NOT rebuildable: restore the key, or move ${this.filePath} aside to start over.`);
+            }
+            const st = await stat(this.keyPath);
+            if ((st.mode & 0o077) !== 0)
+                await chmod(this.keyPath, 0o600);
+            this.cachedKey = raw;
+            return raw;
+        }
+        catch (e) {
+            if (e?.code !== "ENOENT")
+                throw e;
+        }
+        const fresh = randomBytes(KEY_LEN);
+        await this.atomicWrite(this.keyPath, fresh);
+        this.cachedKey = fresh;
+        return fresh;
+    }
+    async atomicWrite(path, data) {
+        await ensureStateDir("EncryptedStandingStore", this.dir);
+        await writeFileAtomic(path, data);
+    }
+}
+//# sourceMappingURL=standing_store.js.map

package/dist/standing/standing_store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standing_store.js","sourceRoot":"","sources":["../../src/standing/standing_store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAuB,MAAM,uBAAuB,CAAC;AAEjF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC3C,MAAM,MAAM,GAAG,EAAE,CAAC;AAClB,MAAM,OAAO,GAAG,EAAE,CAAC;AACnB,MAAM,OAAO,GAAG,EAAE,CAAC;AACnB,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AACjC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAmChC,SAAS,gBAAgB,CAAC,CAAU;IAClC,MAAM,CAAC,GAAG,CAAmC,CAAC;IAC9C,OAAO,CACL,OAAO,CAAC,EAAE,QAAQ,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ;QACpC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC;QACjC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QACzB,CAAC,CAAC,QAAQ,CAAC,KAAK,CACd,CAAC,CAAU,EAAE,EAAE,CACb,OAAQ,CAA0B,EAAE,MAAM,KAAK,QAAQ;YACvD,OAAQ,CAA+B,EAAE,WAAW,KAAK,QAAQ,CACpE,CACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,sBAAsB;IACxB,QAAQ,CAAS;IACT,GAAG,CAAS;IACZ,WAAW,CAAqB;IAChC,UAAU,CAAS;IAC5B,SAAS,CAAqB;IAE9B,OAAO,GAAkB,EAAE,CAAC;IAC5B,OAAO,GAAG,CAAC,CAAC;IACZ,WAAW,CAA0C;IACrD,iBAAiB,GAAG,KAAK,CAAC;IAC1B,UAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEtD,YAAY,GAAiC;QAC3C,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;QACnB,cAAc,CAAC,wBAAwB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC;QACxC,IAAI,CAAC,UAAU;YACb,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,IAAK,GAAG,CAAC,UAAqB,IAAI,CAAC;gBAChE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAoB,CAAC;gBACtC,CAAC,CAAC,mBAAmB,CAAC;QAC1B,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,eAAe,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,IAAI;QACR,cAAc,CAAC,wBAAwB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAA2B,EAAE,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YAChF,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAClE,CAAC;QAED,MAAM,GAAG,GAAG,CAAC,MAAc,EAAsB,EAAE;YACjD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACtC,CAAC,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC/E,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,SAAS,KAAK,CAAC,IAAI,SAAS,GAAG,cAAc;YAAE,OAAO,GAAG,CAAC,iBAAiB,SAAS,eAAe,CAAC,CAAC;QACzG,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;QACxC,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO;YAAE,OAAO,GAAG,CAAC,uBAAuB,CAAC,CAAC;QAClF,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAExD,IAAI,MAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAmB,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,EAAE,aAAa,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC,6BAA6B,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC;QAC1G,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtC,OAAO,GAAG,CAAC,0BAA0B,MAAM,CAAC,QAAQ,eAAe,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,GAAG,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;QACxE,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;QACrD,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACnD,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtB,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAClB,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,4BAA4B,CAAC;gBAAE,MAAM,CAAC,CAAC;YACtF,OAAO,GAAG,CAAC,+DAA+D,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,OAAO,EAAE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,GAAG,CAAC,eAAe,CAAC,CAAC;QAE3F,MAAM,IAAI,GAAkB,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAChC,IAAI,OAAQ,CAAiB,EAAE,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxG,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/F,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAChG,CAAC;IAED,QAAQ;QACN,MAAM,CAAC,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAsB;QACjC,MAAM,KAAK,GAAa,MAA8C,EAAE,cAAc,CAAC;QACvF,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,sEAAsE;gBACpE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CACtG,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,IAAY;QACzC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QACtG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAY;QAC/B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACtD,CAAC;IAEQ,KAAK,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;QACvD,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC;QAC/F,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACxD,CAAC,CAAC;IAEM,KAAK,CAAC,IAAI;QAChB,MAAM,OAAO,GAAY,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAmB,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC5G,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,IAAI,WAAW,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,mDAAmD,WAAW,CAAC,MAAM,gBAAgB,cAAc,6BAA6B,CACjI,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,IAAmB,EAAE;YACpC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,QAAQ,QAAQ,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvE,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACnD,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;YACjC,CAAC;YACD,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,CAAC,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACjD,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtB,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC5C,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7G,CAAC,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,IAAI,CAAC,UAAU,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC;QAC9C,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1C,cAAc,CAAC,wBAAwB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CACb,8BAA8B,IAAI,CAAC,OAAO,KAAK,GAAG,CAAC,MAAM,gBAAgB,OAAO,KAAK;oBACnF,kEAAkE,IAAI,CAAC,QAAQ,uBAAuB,CACzG,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9D,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;YACrB,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAA2B,EAAE,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,IAAY;QAClD,MAAM,cAAc,CAAC,wBAAwB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;CACF"}

package/dist/standing/surface.d.ts

@@ -0,0 +1,20 @@
+import type { ContentFingerprintIndex } from "./content_fingerprint.js";
+import type { StandingAnswer, StandingAnswerStore, StandingCandidate, StandingRecallConfig } from "./standing_answers.js";
+export declare const NO_CONCLUSION = "(no conclusion recorded \u2014 evidence set only)";
+export declare function hasConclusion(answer: StandingAnswer): boolean;
+export interface StandingRecorder {
+    snapshot(): StandingAnswerStore;
+    record(answer: StandingAnswer): Promise<number> | number;
+    load?(): Promise<unknown>;
+}
+export interface StandingSurfaceDeps {
+    readonly store: StandingRecorder;
+    readonly index: ContentFingerprintIndex;
+}
+export interface StandingSurface {
+    readonly candidates: readonly StandingCandidate[];
+    readonly handle?: number;
+}
+export declare function surfaceStanding(question: string, retrievedCellIds: readonly string[], deps: StandingSurfaceDeps, nowEpochMs: number, cfg?: StandingRecallConfig): Promise<StandingSurface>;
+export declare function renderStanding(candidates: readonly StandingCandidate[], nowEpochMs: number): string;
+//# sourceMappingURL=surface.d.ts.map

package/dist/standing/surface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"surface.d.ts","sourceRoot":"","sources":["../../src/standing/surface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAExE,OAAO,KAAK,EAEV,cAAc,EACd,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACrB,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,aAAa,sDAAiD,CAAC;AAE5E,wBAAgB,aAAa,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAG7D;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,IAAI,mBAAmB,CAAC;IAChC,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IACzD,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAClD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AASD,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,gBAAgB,EAAE,SAAS,MAAM,EAAE,EACnC,IAAI,EAAE,mBAAmB,EACzB,UAAU,EAAE,MAAM,EAClB,GAAG,GAAE,oBAAyB,GAC7B,OAAO,CAAC,eAAe,CAAC,CA8B1B;AAMD,wBAAgB,cAAc,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAoBnG"}

package/dist/standing/surface.js

@@ -0,0 +1,74 @@
+import { recallStandingLive } from "./content_fingerprint.js";
+export const NO_CONCLUSION = "(no conclusion recorded — evidence set only)";
+export function hasConclusion(answer) {
+    const t = answer.answer.trim();
+    return t.length > 0 && t !== NO_CONCLUSION;
+}
+function sameEvidence(answer, ids) {
+    const cited = new Set(answer.evidence.map((e) => e.cellId));
+    if (cited.size !== ids.size)
+        return false;
+    for (const id of cited)
+        if (!ids.has(id))
+            return false;
+    return true;
+}
+export async function surfaceStanding(question, retrievedCellIds, deps, nowEpochMs, cfg = {}) {
+    const ids = [...new Set(retrievedCellIds)];
+    if (ids.length === 0)
+        return { candidates: [] };
+    if (deps.store.load)
+        await deps.store.load();
+    const snapshot = deps.store.snapshot();
+    const candidates = await recallStandingLive(ids, snapshot, deps.index, cfg);
+    const idSet = new Set(ids);
+    const held = snapshot.all().some((a) => a.question === question && sameEvidence(a, idSet));
+    if (held)
+        return { candidates };
+    const covered = new Set(candidates.flatMap((c) => c.answer.evidence.map((e) => e.cellId)));
+    const need = ids.filter((id) => !covered.has(id));
+    if (need.length > 0)
+        await deps.index.refresh(need);
+    const evidence = [];
+    for (const cellId of ids) {
+        const fingerprint = deps.index.lookup(cellId);
+        if (fingerprint !== undefined)
+            evidence.push({ cellId, fingerprint });
+    }
+    if (evidence.length === 0)
+        return { candidates };
+    const handle = await deps.store.record({
+        question,
+        answer: NO_CONCLUSION,
+        evidence,
+        writtenAtEpoch: nowEpochMs,
+    });
+    return { candidates, handle };
+}
+const ageDays = (thenMs, nowMs) => (Math.max(0, nowMs - thenMs) / 86_400_000).toFixed(1);
+const oneLine = (s) => s.replace(/\s+/g, " ").trim();
+export function renderStanding(candidates, nowEpochMs) {
+    if (candidates.length === 0)
+        return "";
+    const lines = candidates.map((c) => {
+        const v = c.verdict;
+        let mark;
+        if (v.status === "fresh")
+            mark = "FRESH — evidence unchanged since";
+        else if (v.status === "unauditable")
+            mark = "UNAUDITABLE — the entry cites no evidence; treat as unverified";
+        else {
+            const parts = [];
+            if (v.changed.length > 0)
+                parts.push(`changed: ${v.changed.join(", ")}`);
+            if (v.unresolved.length > 0)
+                parts.push(`gone (erased/unknown): ${v.unresolved.join(", ")}`);
+            mark = `STALE — do NOT reuse; ${parts.join("; ")}`;
+        }
+        const conclusion = hasConclusion(c.answer) ? `\n   → ${c.answer.answer.replace(/\n/g, "\n     ")}` : "";
+        return (`  • asked ${ageDays(c.answer.writtenAtEpoch, nowEpochMs)}d ago ` +
+            `(evidence overlap ${c.overlap.toFixed(2)}): "${oneLine(c.answer.question)}"\n   ${mark}${conclusion}`);
+    });
+    return `\n⟲ STANDING — you have been here before (surfaced, NOT substituted):\n${lines.join("\n")}\n`;
+}
+//# sourceMappingURL=surface.js.map

package/dist/standing/surface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"surface.js","sourceRoot":"","sources":["../../src/standing/surface.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAS9D,MAAM,CAAC,MAAM,aAAa,GAAG,8CAA8C,CAAC;AAE5E,MAAM,UAAU,aAAa,CAAC,MAAsB;IAClD,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/B,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,aAAa,CAAC;AAC7C,CAAC;AAkBD,SAAS,YAAY,CAAC,MAAsB,EAAE,GAAwB;IACpE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1C,KAAK,MAAM,EAAE,IAAI,KAAK;QAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAgB,EAChB,gBAAmC,EACnC,IAAyB,EACzB,UAAkB,EAClB,MAA4B,EAAE;IAE9B,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC3C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAChD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAE7C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvC,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAE5E,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3F,IAAI,IAAI;QAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAEhC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpD,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,KAAK,MAAM,MAAM,IAAI,GAAG,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,WAAW,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAEjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QACrC,QAAQ;QACR,MAAM,EAAE,aAAa;QACrB,QAAQ;QACR,cAAc,EAAE,UAAU;KAC3B,CAAC,CAAC;IACH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,KAAa,EAAU,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAEjH,MAAM,OAAO,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAErE,MAAM,UAAU,cAAc,CAAC,UAAwC,EAAE,UAAkB;IACzF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACjC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;QACpB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;YAAE,IAAI,GAAG,kCAAkC,CAAC;aAC/D,IAAI,CAAC,CAAC,MAAM,KAAK,aAAa;YAAE,IAAI,GAAG,gEAAgE,CAAC;aACxG,CAAC;YACJ,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzE,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC7F,IAAI,GAAG,yBAAyB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,CAAC;QACD,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxG,OAAO,CACL,aAAa,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,QAAQ;YACjE,qBAAqB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,IAAI,GAAG,UAAU,EAAE,CACvG,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,0EAA0E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACxG,CAAC"}

package/dist/store/atomic_write.d.ts

@@ -0,0 +1,7 @@
+export interface AtomicWriteOptions {
+    readonly tmpSuffix?: string;
+}
+export declare function tempNameFor(path: string, pid: number, suffix: string): string;
+export declare const TEMP_NAME_OVERHEAD_MAX: number;
+export declare function writeFileAtomic(path: string, data: string | Uint8Array, opts?: AtomicWriteOptions): Promise<void>;
+//# sourceMappingURL=atomic_write.d.ts.map

package/dist/store/atomic_write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic_write.d.ts","sourceRoot":"","sources":["../../src/store/atomic_write.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAID,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED,eAAO,MAAM,sBAAsB,QAA0E,CAAC;AAE9G,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAW3H"}

package/dist/store/atomic_write.js

@@ -0,0 +1,23 @@
+import { randomBytes } from "node:crypto";
+import { rename, rm, writeFile } from "node:fs/promises";
+const OWNER_ONLY = 0o600;
+const TMP_RANDOM_BYTES = 6;
+export function tempNameFor(path, pid, suffix) {
+    return `${path}.tmp.${pid}.${suffix}`;
+}
+export const TEMP_NAME_OVERHEAD_MAX = tempNameFor("", 4_294_967_295, "0".repeat(TMP_RANDOM_BYTES * 2)).length;
+export async function writeFileAtomic(path, data, opts = {}) {
+    const tmp = tempNameFor(path, process.pid, opts.tmpSuffix ?? randomBytes(TMP_RANDOM_BYTES).toString("hex"));
+    let created = false;
+    try {
+        await writeFile(tmp, data, { mode: OWNER_ONLY, flag: "wx" });
+        created = true;
+        await rename(tmp, path);
+    }
+    catch (e) {
+        if (created || e.code !== "EEXIST")
+            await rm(tmp, { force: true }).catch(() => { });
+        throw e;
+    }
+}
+//# sourceMappingURL=atomic_write.js.map

package/dist/store/atomic_write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic_write.js","sourceRoot":"","sources":["../../src/store/atomic_write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEzD,MAAM,UAAU,GAAG,KAAK,CAAC;AAMzB,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,GAAW,EAAE,MAAc;IACnE,OAAO,GAAG,IAAI,QAAQ,GAAG,IAAI,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAAC,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAE9G,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,IAAyB,EAAE,OAA2B,EAAE;IAC1G,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,IAAI,WAAW,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5G,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,OAAO,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC9G,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}

package/dist/store/body_store.d.ts

@@ -0,0 +1,42 @@
+export declare function normalizeEpoch(v: unknown): number;
+export declare function normalizeTier(v: unknown): string;
+export interface BodyRecord {
+    readonly cellId: string;
+    readonly plaintext: string;
+    readonly epoch: number;
+    readonly tier: string;
+}
+export interface BodyStore {
+    get(cellId: string): Promise<BodyRecord | undefined>;
+    put(body: BodyRecord): Promise<void>;
+    delete(cellId: string): Promise<void>;
+    has(cellId: string): Promise<boolean>;
+    accepts?(cellId: string): boolean;
+}
+export interface EncryptedBodyStoreConfig {
+    readonly dir: string;
+    readonly tenantId?: string;
+    readonly keyBytes?: Uint8Array;
+}
+export type AtRestPresence = "present" | "absent" | "unknown";
+export declare class EncryptedBodyStore implements BodyStore {
+    readonly tenantId: string;
+    private readonly dir;
+    private readonly injectedKey;
+    private cachedKey;
+    constructor(cfg: EncryptedBodyStoreConfig);
+    get keyPath(): string;
+    accepts(cellId: string): boolean;
+    filePathFor(cellId: string): string | undefined;
+    get(cellId: string): Promise<BodyRecord | undefined>;
+    put(body: BodyRecord): Promise<void>;
+    delete(cellId: string): Promise<void>;
+    list(): Promise<string[]>;
+    presence(cellId: string): Promise<AtRestPresence>;
+    presenceSync(cellId: string): AtRestPresence;
+    has(cellId: string): Promise<boolean>;
+    hasSync(cellId: string): boolean;
+    private getKey;
+    private atomicWrite;
+}
+//# sourceMappingURL=body_store.d.ts.map

package/dist/store/body_store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"body_store.d.ts","sourceRoot":"","sources":["../../src/store/body_store.ts"],"names":[],"mappings":"AAcA,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAEjD;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAEhD;AA2BD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IACrD,GAAG,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;CACnC;AAUD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAO9D,qBAAa,kBAAmB,YAAW,SAAS;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;IACjD,OAAO,CAAC,SAAS,CAAqB;gBAE1B,GAAG,EAAE,wBAAwB;IAYzC,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAIhC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAKzC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAuDpD,GAAG,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAgCpC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMrC,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAgBzB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAUvD,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc;IAWtC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAG3C,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;YAIlB,MAAM;YAyBN,WAAW;CAI1B"}