@sempdev/semp 0.4.3

package/dist/delivery/inbox.js

@@ -0,0 +1,68 @@
+/**
+ * Reference per-user envelope inbox — minimal in-memory FIFO.
+ *
+ * Intended for in-process tests, embedded servers, and the
+ * reference {@link "./fetch".FetchResponse} producer. NOT a
+ * production storage layer:
+ *
+ *   - No persistence: process restart loses all queued envelopes.
+ *   - No fairness controls, no per-address access control, no
+ *     retention rules.
+ *   - Concurrency boundary is single-process; multi-writer use is
+ *     safe under the JavaScript run-to-completion model but not
+ *     across worker threads.
+ *
+ * Production deployments MUST back this with a durable store,
+ * retention rules, fairness controls, and per-address access
+ * control — none of which are present here.
+ *
+ * @module
+ */
+/** Default maximum per-address queue depth. */
+export const DefaultMaxQueueDepth = 10_000;
+/** Reference in-memory inbox keyed by canonical user@domain string. */
+export class Inbox {
+    queues = new Map();
+    maxDepth;
+    constructor(maxDepth = DefaultMaxQueueDepth) {
+        if (maxDepth <= 0) {
+            this.maxDepth = DefaultMaxQueueDepth;
+        }
+        else {
+            this.maxDepth = maxDepth;
+        }
+    }
+    /**
+     * Append `payload` to the queue for `address`. If the queue is at
+     * its maximum depth, the oldest entry is dropped to make room.
+     */
+    store(address, payload) {
+        if (address === "") {
+            throw new Error("delivery: inbox.store empty address");
+        }
+        const list = this.queues.get(address);
+        if (list === undefined) {
+            this.queues.set(address, [payload.slice()]);
+            return;
+        }
+        if (list.length >= this.maxDepth) {
+            list.shift(); // drop oldest
+        }
+        list.push(payload.slice());
+    }
+    /**
+     * Return every queued envelope for `address` and clear the queue.
+     * Returns an empty array when the address has no waiting
+     * envelopes.
+     */
+    drain(address) {
+        const list = this.queues.get(address) ?? [];
+        this.queues.delete(address);
+        return list;
+    }
+    /** Number of waiting envelopes for `address`. */
+    pending(address) {
+        return this.queues.get(address)?.length ?? 0;
+    }
+}
+//# sourceMappingURL=inbox.js.map

package/dist/delivery/inbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox.js","sourceRoot":"","sources":["../../src/delivery/inbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,+CAA+C;AAC/C,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAE3C,uEAAuE;AACvE,MAAM,OAAO,KAAK;IACC,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IACzC,QAAQ,CAAS;IAElC,YAAY,WAAmB,oBAAoB;QACjD,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC,QAAQ,GAAG,oBAAoB,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAe,EAAE,OAAmB;QACxC,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,cAAc;QAC9B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAe;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iDAAiD;IACjD,OAAO,CAAC,OAAe;QACrB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;IAC/C,CAAC;CACF"}

package/dist/delivery/index.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Delivery layer per DELIVERY.md.
+ *
+ * Signed delivery receipts (§1.1.1), per-attempt acknowledgment
+ * envelope (§1.1.1.5 / §1.6) including recipient-status visibility
+ * (§1.6.4), retry-schedule primitives (§2.3), queue state record
+ * (§2.5), and the per-user block list (§4) with match precedence.
+ *
+ * @module
+ */
+export { type DeliveryReceipt, type EnvelopeHash, type ReceiptSignature, type SignDeliveryReceiptInput, type SignDeliveryReceiptResult, type VerifyDeliveryReceiptInput, DeliveryReceiptPrefix, DeliveryReceiptType, DeliveryReceiptVersion, EnvelopeHashAlgorithmSHA256, ReceiptClockSkewToleranceSeconds, ReceiptSignatureAlgorithmEd25519, computeEnvelopeHash, signDeliveryReceipt, validateReceipt, verifyDeliveryReceipt, verifyEnvelopeBinding, } from "./receipt.js";
+export { type ReceiptStore, DefaultReceiptRetentionMs, InMemoryReceiptStore, } from "./receipt_store.js";
+export { type Acknowledgment, type DeliveryAck, type RecipientState, type RecipientStatus, type SenderIdentity, type Visibility, type VisibilityEntry, type VisibilityMode, MaxStatusMessageBytes, buildDeliveredAck, buildRejectedAck, matchVisibility, validateRecipientStatus, } from "./ack.js";
+export { type EffectiveRetryConfig, type RetryConfig, DefaultMaxRetryHorizonMs, MaxRetryHorizonCapMs, MaxRetryIntervalMs, MinJitterFloorMs, MinRetryAttempts, MinRetryInitialIntervalMs, MinRetryJitterFraction, MinRetryMultiplier, baseIntervalMs, effectiveDeadline, isRecoverableReason, jitterIntervalMs, nextAttemptAt, sanitizeRetry, } from "./retry.js";
+export { type QueueRecordState, type QueueState, isTerminalState, setTerminal, } from "./queue.js";
+export { type BlockEntry, type BlockList, type BlockListLookup, type BlockListSender, type BlocklistEntity, type BlocklistEntityType, type BlocklistScope, StaticBlockListLookup, matchBlockList, } from "./blocklist.js";
+export { type SubmissionEvent, type SubmissionResponse, type SubmissionResult, type SubmissionStep, SubmissionType, SubmissionVersion, newSubmissionEvent, newSubmissionResponse, } from "./submission.js";
+export { type CancelRequest, type CancelResponse, type CancelResult, newCancelRequest, newCancelResponse, } from "./cancel.js";
+export { type FetchRequest, type FetchResponse, type FetchStep, FetchType, FetchVersion, newFetchRequest, newFetchResponse, } from "./fetch.js";
+export { DefaultMaxQueueDepth, Inbox, } from "./inbox.js";
+export { type InternalRoute, type InternalRouteAck, InternalRouteTimeoutMs, InternalRouteType, InternalRouteVersion, } from "./internalroute.js";
+export { type Disposition, type DispositionDecision, type StagedHeld, type StagedHeldStage, type StageOutcome, DefaultStageTimeoutMs, DispositionKind, DispositionReasonAccepted, DispositionReasonOther, DispositionReasonPolicy, DispositionReasonSpam, aggregateDispositions, isStageComplete, validateDisposition, } from "./disposition.js";
+export { type SyncMessage, type SyncOp, type SyncOperation, type SyncSignatureBlock, SyncMessagePrefix, SyncMessageType, SyncMessageVersion, SyncStep, signSyncMessage, validateSyncMessage, verifySyncMessage, } from "./sync.js";
+export { type PolicyOp, type PolicyOperation, type UserPolicyMessage, type UserPolicySignatureBlock, PolicyKindAcceptedSender, PolicyKindBlock, PolicyKindFirstContact, UserPolicyPrefix, UserPolicyStep, UserPolicyType, UserPolicyVersion, signUserPolicyMessage, validateUserPolicyMessage, verifyUserPolicyMessage, } from "./user_policy.js";
+export { type CertificateProvider, type PartitionInput, partitionStages, } from "./stage_partition.js";
+export { type PolicyApplyReasonCode, type PolicySnapshot, PolicyApplyError, PolicyState, defaultPolicyKinds, } from "./policy_state.js";
+export { type DecodedBrief, type DomainKeyLookup, type DomainPolicyFunc, type EnvMACFunc, type InboxStore, type LocalAddressFunc, type PipelineConfig, type PipelineLogger, type PipelineRejection, type PipelineResult, type RecipientPolicyFunc, type SessionRetiredFunc, Pipeline, } from "./pipeline.js";
+export { type StageCompleteFunc, type StageDeliverFunc, type StageSuppressFunc, type StagedRunnerConfig, EnvelopeAlreadyHeldError, EnvelopeNotHeldError, StagedRunner, } from "./staged_runner.js";
+export { type AttemptResult, type DeliverFunc, type EventSink, type SchedulerConfig, type SchedulerStore, InMemorySchedulerStore, Scheduler, TickInProgressError, UnknownRecordError, } from "./scheduler.js";
+export { type Dialer, type ForwarderConfig, type PeerConfig, Forwarder, PeerRegistry, } from "./forwarder.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/delivery/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/delivery/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,2BAA2B,EAC3B,gCAAgC,EAChC,gCAAgC,EAChC,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,KAAK,YAAY,EACjB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,uBAAuB,GACxB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,yBAAyB,EACzB,sBAAsB,EACtB,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,EACb,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,eAAe,EACf,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,qBAAqB,EACrB,cAAc,GACf,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,SAAS,EACd,SAAS,EACT,YAAY,EACZ,eAAe,EACf,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,oBAAoB,EACpB,KAAK,GACN,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,qBAAqB,EACrB,eAAe,EACf,yBAAyB,EACzB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,MAAM,EACX,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,QAAQ,EACR,eAAe,EACf,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,wBAAwB,EACxB,eAAe,EACf,sBAAsB,EACtB,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,gBAAgB,EAChB,WAAW,EACX,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,QAAQ,GACT,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,sBAAsB,EACtB,SAAS,EACT,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,KAAK,MAAM,EACX,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,SAAS,EACT,YAAY,GACb,MAAM,gBAAgB,CAAC"}

package/dist/delivery/index.js

@@ -0,0 +1,31 @@
+/**
+ * Delivery layer per DELIVERY.md.
+ *
+ * Signed delivery receipts (§1.1.1), per-attempt acknowledgment
+ * envelope (§1.1.1.5 / §1.6) including recipient-status visibility
+ * (§1.6.4), retry-schedule primitives (§2.3), queue state record
+ * (§2.5), and the per-user block list (§4) with match precedence.
+ *
+ * @module
+ */
+export { DeliveryReceiptPrefix, DeliveryReceiptType, DeliveryReceiptVersion, EnvelopeHashAlgorithmSHA256, ReceiptClockSkewToleranceSeconds, ReceiptSignatureAlgorithmEd25519, computeEnvelopeHash, signDeliveryReceipt, validateReceipt, verifyDeliveryReceipt, verifyEnvelopeBinding, } from "./receipt.js";
+export { DefaultReceiptRetentionMs, InMemoryReceiptStore, } from "./receipt_store.js";
+export { MaxStatusMessageBytes, buildDeliveredAck, buildRejectedAck, matchVisibility, validateRecipientStatus, } from "./ack.js";
+export { DefaultMaxRetryHorizonMs, MaxRetryHorizonCapMs, MaxRetryIntervalMs, MinJitterFloorMs, MinRetryAttempts, MinRetryInitialIntervalMs, MinRetryJitterFraction, MinRetryMultiplier, baseIntervalMs, effectiveDeadline, isRecoverableReason, jitterIntervalMs, nextAttemptAt, sanitizeRetry, } from "./retry.js";
+export { isTerminalState, setTerminal, } from "./queue.js";
+export { StaticBlockListLookup, matchBlockList, } from "./blocklist.js";
+export { SubmissionType, SubmissionVersion, newSubmissionEvent, newSubmissionResponse, } from "./submission.js";
+export { newCancelRequest, newCancelResponse, } from "./cancel.js";
+export { FetchType, FetchVersion, newFetchRequest, newFetchResponse, } from "./fetch.js";
+export { DefaultMaxQueueDepth, Inbox, } from "./inbox.js";
+export { InternalRouteTimeoutMs, InternalRouteType, InternalRouteVersion, } from "./internalroute.js";
+export { DefaultStageTimeoutMs, DispositionKind, DispositionReasonAccepted, DispositionReasonOther, DispositionReasonPolicy, DispositionReasonSpam, aggregateDispositions, isStageComplete, validateDisposition, } from "./disposition.js";
+export { SyncMessagePrefix, SyncMessageType, SyncMessageVersion, SyncStep, signSyncMessage, validateSyncMessage, verifySyncMessage, } from "./sync.js";
+export { PolicyKindAcceptedSender, PolicyKindBlock, PolicyKindFirstContact, UserPolicyPrefix, UserPolicyStep, UserPolicyType, UserPolicyVersion, signUserPolicyMessage, validateUserPolicyMessage, verifyUserPolicyMessage, } from "./user_policy.js";
+export { partitionStages, } from "./stage_partition.js";
+export { PolicyApplyError, PolicyState, defaultPolicyKinds, } from "./policy_state.js";
+export { Pipeline, } from "./pipeline.js";
+export { EnvelopeAlreadyHeldError, EnvelopeNotHeldError, StagedRunner, } from "./staged_runner.js";
+export { InMemorySchedulerStore, Scheduler, TickInProgressError, UnknownRecordError, } from "./scheduler.js";
+export { Forwarder, PeerRegistry, } from "./forwarder.js";
+//# sourceMappingURL=index.js.map

package/dist/delivery/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/delivery/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAOL,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,2BAA2B,EAC3B,gCAAgC,EAChC,gCAAgC,EAChC,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAEL,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EASL,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,uBAAuB,GACxB,MAAM,UAAU,CAAC;AAElB,OAAO,EAGL,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,yBAAyB,EACzB,sBAAsB,EACtB,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,EACb,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EAGL,eAAe,EACf,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EAQL,qBAAqB,EACrB,cAAc,GACf,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAKL,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAIL,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAErB,OAAO,EAIL,SAAS,EACT,YAAY,EACZ,eAAe,EACf,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,oBAAoB,EACpB,KAAK,GACN,MAAM,YAAY,CAAC;AAEpB,OAAO,EAGL,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAML,qBAAqB,EACrB,eAAe,EACf,yBAAyB,EACzB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAKL,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,QAAQ,EACR,eAAe,EACf,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAKL,wBAAwB,EACxB,eAAe,EACf,sBAAsB,EACtB,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAGL,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAGL,gBAAgB,EAChB,WAAW,EACX,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAaL,QAAQ,GACT,MAAM,eAAe,CAAC;AAEvB,OAAO,EAKL,wBAAwB,EACxB,oBAAoB,EACpB,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAML,sBAAsB,EACtB,SAAS,EACT,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAIL,SAAS,EACT,YAAY,GACb,MAAM,gBAAgB,CAAC"}

package/dist/delivery/internalroute.d.ts

@@ -0,0 +1,50 @@
+/**
+ * SEMP_INTERNAL_ROUTE wire shapes per DISCOVERY.md §5.4.
+ *
+ * Used when one partition server hands an envelope to a sibling
+ * partition server inside the same domain.
+ *
+ * Internal routing does NOT exempt an envelope from the delivery
+ * pipeline or from block-list enforcement; the receiving partition
+ * server runs the full pipeline before producing its acknowledgment
+ * (DELIVERY.md §5.3).
+ *
+ * @module
+ */
+import type { Envelope } from "../envelope/index.js";
+import type { Acknowledgment } from "./ack.js";
+/** Wire-level type discriminator. */
+export declare const InternalRouteType = "SEMP_INTERNAL_ROUTE";
+/** Schema version. */
+export declare const InternalRouteVersion = "1.0.0";
+/**
+ * Recommended timeout for internally routed deliveries before they
+ * are treated as silent (DISCOVERY.md §5.4.1, DELIVERY.md §1.5).
+ */
+export declare const InternalRouteTimeoutMs = 30000;
+/** SEMP_INTERNAL_ROUTE request envelope per §5.4. */
+export interface InternalRoute {
+    type: typeof InternalRouteType;
+    to: string;
+    internal_route: string[];
+    /** ISO 8601 UTC. */
+    timestamp: string;
+    envelope: Envelope;
+}
+/**
+ * Acknowledgment a receiving partition server returns for every
+ * internally routed envelope per §5.4.1.
+ */
+export interface InternalRouteAck {
+    type: typeof InternalRouteType;
+    step: "acknowledgment";
+    version: string;
+    envelope_id: string;
+    to: string;
+    status: Acknowledgment;
+    reason_code?: string;
+    reason?: string;
+    /** ISO 8601 UTC. */
+    timestamp: string;
+}
+//# sourceMappingURL=internalroute.d.ts.map

package/dist/delivery/internalroute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internalroute.d.ts","sourceRoot":"","sources":["../../src/delivery/internalroute.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE/C,qCAAqC;AACrC,eAAO,MAAM,iBAAiB,wBAAwB,CAAC;AAEvD,sBAAsB;AACtB,eAAO,MAAM,oBAAoB,UAAU,CAAC;AAE5C;;;GAGG;AACH,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAE7C,qDAAqD;AACrD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,iBAAiB,CAAC;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,OAAO,iBAAiB,CAAC;IAC/B,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,cAAc,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/delivery/internalroute.js

@@ -0,0 +1,23 @@
+/**
+ * SEMP_INTERNAL_ROUTE wire shapes per DISCOVERY.md §5.4.
+ *
+ * Used when one partition server hands an envelope to a sibling
+ * partition server inside the same domain.
+ *
+ * Internal routing does NOT exempt an envelope from the delivery
+ * pipeline or from block-list enforcement; the receiving partition
+ * server runs the full pipeline before producing its acknowledgment
+ * (DELIVERY.md §5.3).
+ *
+ * @module
+ */
+/** Wire-level type discriminator. */
+export const InternalRouteType = "SEMP_INTERNAL_ROUTE";
+/** Schema version. */
+export const InternalRouteVersion = "1.0.0";
+/**
+ * Recommended timeout for internally routed deliveries before they
+ * are treated as silent (DISCOVERY.md §5.4.1, DELIVERY.md §1.5).
+ */
+export const InternalRouteTimeoutMs = 30_000;
+//# sourceMappingURL=internalroute.js.map

package/dist/delivery/internalroute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internalroute.js","sourceRoot":"","sources":["../../src/delivery/internalroute.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,qCAAqC;AACrC,MAAM,CAAC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAEvD,sBAAsB;AACtB,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAE5C;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC"}

package/dist/delivery/pipeline.d.ts

@@ -0,0 +1,153 @@
+/**
+ * Receive-side delivery pipeline per DELIVERY.md §2.
+ *
+ * Runs the fixed nine-step sequence every envelope passes through
+ * before a delivery decision is made:
+ *
+ *  1. Verify `seal.signature`            → `seal_invalid`
+ *  2. Check `postmark.expires`           → `envelope_expired`
+ *  3. Check `postmark.session_id`        → `no_session` / `handshake_invalid`
+ *  4. Verify `seal.session_mac`          → `session_mac_invalid`
+ *  5. Check domain / server policy       → `rejected` or `silent`
+ *  6. Decrypt `K_brief` from `seal.brief_recipients`
+ *  7. Decrypt `envelope.brief`
+ *  8. Check user policy (block list)     → `rejected` or `silent`
+ *  9. Deliver to client                  → `delivered`
+ *
+ * Each step is a private method so operators can wrap or override
+ * individual stages without rewriting orchestration. The exported
+ * {@link Pipeline.process} runs all steps in order and short-circuits
+ * on the first failure.
+ *
+ * @module
+ */
+import { type Envelope, type RecipientCandidate } from "../envelope/index.js";
+import type { Visibility } from "./ack.js";
+import type { BlockListLookup } from "./blocklist.js";
+import type { Inbox } from "./inbox.js";
+import type { SubmissionResult } from "./submission.js";
+/** Minimal logging hook. May be `undefined`. */
+export type PipelineLogger = (line: string) => void;
+/** Lookup hook returning a domain's published Ed25519 signing key. */
+export type DomainKeyLookup = (domain: string) => Promise<Uint8Array | null>;
+/** Hook returning the current `K_env_mac` (to track session rekeys). */
+export type EnvMACFunc = () => Uint8Array;
+/**
+ * Optional pre-block-list per-recipient gate. Returns
+ * `{ ack: "delivered" }` to pass the gate; any other ack
+ * short-circuits delivery for that recipient.
+ */
+export type RecipientPolicyFunc = (recipient: string) => {
+    ack: "delivered";
+} | {
+    ack: "rejected" | "silent";
+    reasonCode: string;
+    reason?: string;
+};
+/**
+ * Optional step-5 hook. Returns `{ ack: "delivered" }` to pass;
+ * `rejected` or `silent` terminates the pipeline at this step with
+ * an envelope-wide rejection.
+ */
+export type DomainPolicyFunc = (fromDomain: string, fromServer: string) => {
+    ack: "delivered";
+} | {
+    ack: "rejected" | "silent";
+    reasonCode: string;
+    reason?: string;
+};
+/** Hook classifying recipient addresses as local vs remote. */
+export type LocalAddressFunc = (address: string) => boolean;
+/** Optional inbox writer (the bundled {@link Inbox} satisfies this). */
+export type InboxStore = Pick<Inbox, "store">;
+/** Hook returning the current session-id retired status. */
+export type SessionRetiredFunc = (sessionId: string) => Promise<boolean>;
+/** Decoded brief shape — minimal fields the pipeline needs. */
+export interface DecodedBrief {
+    to: string[];
+    cc?: string[];
+    /** Sender address; surfaced on the brief for visibility / logging. */
+    from?: string;
+}
+/** Inputs to {@link Pipeline}. */
+export interface PipelineConfig {
+    /** Hook returning K_env_mac for step 4. May be omitted with skipSessionMAC. */
+    envMAC?: EnvMACFunc;
+    /** Lookup for sender-domain Ed25519 pub for step 1. */
+    domainKeys?: DomainKeyLookup;
+    /** Optional retired-session lookup for step 3. */
+    sessionRetired?: SessionRetiredFunc;
+    /** Disable step 1 (used in local-client submission mode). */
+    skipSignatureCheck?: boolean;
+    /** Disable step 4 (used in local-client submission mode). */
+    skipSessionMACCheck?: boolean;
+    /** Disable step 2 (testing only). */
+    skipExpiryCheck?: boolean;
+    /** Disable step 3 (testing only). */
+    skipSessionIDCheck?: boolean;
+    /**
+     * Recipient candidates the home server may use to unwrap
+     * `K_brief`. Typically one or more domain encryption keypairs.
+     * Required for step 6/7.
+     */
+    briefRecipients: RecipientCandidate[];
+    /** Optional step-5 domain policy. */
+    domainPolicy?: DomainPolicyFunc;
+    /** Optional pre-block-list per-recipient gate. */
+    recipientPolicy?: RecipientPolicyFunc;
+    /** Optional step-8 user-level block list lookup. */
+    blockList?: BlockListLookup;
+    /** Required: classify recipients as local / remote. */
+    isLocal: LocalAddressFunc;
+    /** Optional inbox writer. Without it, step 9 is a no-op. */
+    inbox?: InboxStore;
+    /** Optional logger. */
+    logger?: PipelineLogger;
+    /** Wall-clock hook; defaults to `() => new Date()`. */
+    now?: () => Date;
+    /** Default clock-skew tolerance for step 2; defaults to 15 minutes. */
+    clockSkewMs?: number;
+}
+/** Envelope-wide rejection produced by steps 1–7. */
+export interface PipelineRejection {
+    reasonCode: string;
+    reason: string;
+    silent?: boolean;
+}
+/** Outcome of a single pipeline run. */
+export interface PipelineResult {
+    envelopeId: string;
+    /** Decoded brief, populated when steps 6/7 succeeded. */
+    brief?: DecodedBrief;
+    /**
+     * Per-recipient outcomes when the pipeline ran past step 7.
+     * Empty when {@link rejection} is set.
+     */
+    results: SubmissionResult[];
+    /**
+     * Envelope-wide rejection (steps 1–7). Implies {@link results} is
+     * empty.
+     */
+    rejection?: PipelineRejection;
+}
+/**
+ * Receive-side delivery pipeline. Single-process, callable across
+ * many envelopes. Concurrency is the caller's responsibility — each
+ * `process()` call is independent and stateless beyond the
+ * configured hooks.
+ */
+export declare class Pipeline {
+    private readonly cfg;
+    constructor(cfg: PipelineConfig);
+    /** Run the full pipeline against `env`. */
+    process(env: Envelope): Promise<PipelineResult>;
+    private verifySignature;
+    private checkExpiry;
+    private checkSessionId;
+    private checkSessionMac;
+    private checkDomainPolicy;
+    private deliverOne;
+    private log;
+}
+export type { Visibility };
+//# sourceMappingURL=pipeline.d.ts.map

package/dist/delivery/pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/delivery/pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,kBAAkB,EAIxB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,KAAK,EAAkB,UAAU,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,KAAK,EACV,eAAe,EAEhB,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAExD,gDAAgD;AAChD,MAAM,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;AAEpD,sEAAsE;AACtE,MAAM,MAAM,eAAe,GAAG,CAC5B,MAAM,EAAE,MAAM,KACX,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;AAEhC,wEAAwE;AACxE,MAAM,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC;AAE1C;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAChC,SAAS,EAAE,MAAM,KAEf;IAAE,GAAG,EAAE,WAAW,CAAA;CAAE,GACpB;IAAE,GAAG,EAAE,UAAU,GAAG,QAAQ,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAExE;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAC7B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,KAEhB;IAAE,GAAG,EAAE,WAAW,CAAA;CAAE,GACpB;IAAE,GAAG,EAAE,UAAU,GAAG,QAAQ,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAExE,+DAA+D;AAC/D,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;AAE5D,wEAAwE;AACxE,MAAM,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAE9C,4DAA4D;AAC5D,MAAM,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEzE,+DAA+D;AAC/D,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,EAAE,CAAC;IACb,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IACd,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,kCAAkC;AAClC,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,uDAAuD;IACvD,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,kDAAkD;IAClD,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,6DAA6D;IAC7D,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,6DAA6D;IAC7D,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,qCAAqC;IACrC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,qCAAqC;IACrC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;OAIG;IACH,eAAe,EAAE,kBAAkB,EAAE,CAAC;IACtC,qCAAqC;IACrC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,kDAAkD;IAClD,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,oDAAoD;IACpD,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,uDAAuD;IACvD,OAAO,EAAE,gBAAgB,CAAC;IAC1B,4DAA4D;IAC5D,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,uBAAuB;IACvB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,uDAAuD;IACvD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qDAAqD;AACrD,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wCAAwC;AACxC,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;OAGG;IACH,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B;;;OAGG;IACH,SAAS,CAAC,EAAE,iBAAiB,CAAC;CAC/B;AAED;;;;;GAKG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAiB;gBAEzB,GAAG,EAAE,cAAc;IAU/B,2CAA2C;IACrC,OAAO,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC;YAkFvC,eAAe;IAmC7B,OAAO,CAAC,WAAW;YAsBL,cAAc;IA+B5B,OAAO,CAAC,eAAe;IAgCvB,OAAO,CAAC,iBAAiB;YAeX,UAAU;IAqDxB,OAAO,CAAC,GAAG;CAKZ;AA+ED,YAAY,EAAE,UAAU,EAAE,CAAC"}