@tinycloud/courier 0.3.3-beta.9 → 0.4.0-beta.16

package/dist/invitation.d.ts

@@ -0,0 +1,28 @@
+import type { TinyCloudNode } from '@tinycloud/node-sdk';
+import type { PairArtifact } from './pairing.js';
+import type { AgentKey, Profile } from './profile.js';
+import type { ParsedArgs } from './args.js';
+import type { CourierSession, InvitationMode } from './guided.js';
+export interface CourierInvitation {
+    type: 'courier-invitation';
+    v: 1;
+    id: string;
+    issuer: string;
+    host: string;
+    session: CourierSession;
+    mode: InvitationMode;
+    recipient?: string;
+    expiresAt: string;
+    artifact: PairArtifact;
+    relay: {
+        key: AgentKey;
+        delegation: string;
+    };
+}
+/** Strict Courier body codec; generic links do not confer chat authority. */
+export declare function parseInvitation(value: unknown): CourierInvitation;
+/** Serve one durable winner. A restart cannot issue C to a different claimant. */
+export declare function serveInvitation(node: TinyCloudNode, profile: Profile, body: CourierInvitation, wait: number): Promise<void>;
+export declare function cmdInvite(args: ParsedArgs): Promise<void>;
+export declare function joinInvitation(link: string, args: ParsedArgs): Promise<void>;
+export declare function cmdJoin(args: ParsedArgs): Promise<void>;

package/dist/invitation.js

@@ -0,0 +1,406 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { createPrivateKey, createPublicKey, sign, verify } from 'node:crypto';
+import { ulid } from 'ulid';
+import { DelegatedAccess, NodeWasmBindings, activateValidatedRuntimeDelegation, deserializeDelegation, serializeDelegation } from '@tinycloud/node-sdk';
+import { activateSessionWithHost } from '@tinycloud/sdk-core';
+import { createLink, resolveLink, signerFromJwk, linkIssuerPublicKey } from '@tinycloud/share-envelope/links';
+import { CourierError } from './errors.js';
+import { canonicalJson, requestHash } from './canonical.js';
+import { assertExactAuthority, assertPeerDelegation, bareDid } from './authority.js';
+import { k, PREFIX, peerReadPermissions } from './keys.js';
+import { artifactA, artifactWithDelegation, parseArtifact, validateArtifactIdentity } from './pairing.js';
+import { loadKey, loadProfile, profileDir, saveProfile, writeSecure } from './profile.js';
+import { courierNode } from './node.js';
+import { getJson, putCreate, putOverwrite } from './store.js';
+import { isRecord } from './a2a.js';
+import { requireFlag } from './args.js';
+import { activateSession, INVITATION_MODES, selectedSession, sessionKey, validSessionId } from './guided.js';
+const DEFAULT_API = 'https://api.tinycloud.xyz';
+const DEFAULT_VIEWER = 'https://courier.tinycloud.xyz';
+const DOMAIN = 'xyz.tinycloud.courier/invitation/v1\0';
+const inviteStateKey = (id) => `${PREFIX}/me/state/invitations/${id}.json`;
+const winnerKey = (id) => `${PREFIX}/me/consumed/invitations/${id}.json`;
+const answerKey = (id) => `${PREFIX}/me/state/invitation-answers/${id}.json`;
+const relayRoot = (id) => `${PREFIX}/to/invite-${id}/pairing/`;
+function refuse(message) { throw new CourierError('bad-invitation', message); }
+function keys(value, required, optional = []) {
+    if (required.some((key) => !Object.hasOwn(value, key)) || Object.keys(value).some((key) => !required.includes(key) && !optional.includes(key)))
+        refuse('Unexpected invitation fields.');
+}
+function sameIdentity(a, b) { return a.toLowerCase() === b.toLowerCase(); }
+/** Strict Courier body codec; generic links do not confer chat authority. */
+export function parseInvitation(value) {
+    if (!isRecord(value))
+        refuse('Invitation must be an object.');
+    keys(value, ['type', 'v', 'id', 'issuer', 'host', 'session', 'mode', 'expiresAt', 'artifact', 'relay'], ['recipient']);
+    if (value.type !== 'courier-invitation' || value.v !== 1 || typeof value.id !== 'string' || !validSessionId(value.id))
+        refuse('Unsupported Courier invitation.');
+    if (typeof value.issuer !== 'string' || !linkIssuerPublicKey(value.issuer))
+        refuse('Invalid invitation signer.');
+    if (typeof value.host !== 'string')
+        refuse('Missing node origin.');
+    let host;
+    try {
+        host = new URL(value.host);
+    }
+    catch {
+        return refuse('Invalid node origin.');
+    }
+    if (host.origin !== value.host || (host.protocol !== 'https:' && !(host.protocol === 'http:' && ['127.0.0.1', 'localhost'].includes(host.hostname))))
+        refuse('Node must be an HTTPS origin (or a loopback test host).');
+    if (!INVITATION_MODES.includes(value.mode))
+        refuse('Unknown invitation mode.');
+    if (value.mode === 'named') {
+        if (typeof value.recipient !== 'string' || !linkIssuerPublicKey(value.recipient))
+            refuse('Named invitations require an exact Courier did:key; email identifiers are not supported.');
+    }
+    else if (value.recipient !== undefined)
+        refuse('Unexpected recipient constraint.');
+    if (typeof value.expiresAt !== 'string' || !Number.isFinite(Date.parse(value.expiresAt)) || new Date(value.expiresAt).toISOString() !== value.expiresAt)
+        refuse('Invalid invitation expiry.');
+    if (!isRecord(value.session))
+        refuse('Missing intended session.');
+    keys(value.session, ['sessionId', 'subject', 'createdAt']);
+    if (typeof value.session.sessionId !== 'string' || !validSessionId(value.session.sessionId) || typeof value.session.subject !== 'string'
+        || value.session.subject.length > 1000 || typeof value.session.createdAt !== 'string' || !Number.isFinite(Date.parse(value.session.createdAt)))
+        refuse('Invalid intended session.');
+    const art = parseArtifact(JSON.stringify(value.artifact));
+    validateArtifactIdentity(art);
+    if (art.step !== 'A' || art.from.courier !== value.issuer || art.peer !== `chat-${value.id}-recipient` || art.callMe !== `chat-${value.id}-issuer`)
+        refuse('Invitation pairing does not match its signer or mailbox.');
+    if (!isRecord(value.relay))
+        refuse('Missing pairing relay.');
+    keys(value.relay, ['key', 'delegation']);
+    if (!isRecord(value.relay.key) || value.relay.key.v !== 1 || typeof value.relay.key.did !== 'string' || !isRecord(value.relay.key.jwk)
+        || typeof value.relay.delegation !== 'string')
+        refuse('Invalid pairing relay.');
+    return value;
+}
+function signed(payload, key) {
+    const privateKey = createPrivateKey({ key: key.jwk, format: 'jwk' });
+    return { payload, signature: sign(null, Buffer.from(DOMAIN + canonicalJson(payload)), privateKey).toString('base64url') };
+}
+function checked(value, did) {
+    if (!isRecord(value))
+        refuse('Missing signed pairing response.');
+    keys(value, ['payload', 'signature']);
+    const raw = linkIssuerPublicKey(did);
+    if (!raw || typeof value.signature !== 'string' || !/^[A-Za-z0-9_-]{86}$/.test(value.signature))
+        refuse('Invalid pairing signature.');
+    const key = createPublicKey({ key: { kty: 'OKP', crv: 'Ed25519', x: Buffer.from(raw).toString('base64url') }, format: 'jwk' });
+    if (!verify(null, Buffer.from(DOMAIN + canonicalJson(value.payload)), key, Buffer.from(value.signature, 'base64url')))
+        refuse('Pairing response signature does not match its agent.');
+    return value;
+}
+function relayPermissions(body) {
+    return [{ service: 'tinycloud.kv', space: body.artifact.spaceId, path: relayRoot(body.id), actions: ['tinycloud.kv/get', 'tinycloud.kv/put'] }];
+}
+/** Verify the inviter's owner→agent chain before granting the inviter any read access. */
+async function relayKv(body, node) {
+    const delegation = deserializeDelegation(body.relay.delegation);
+    const key = body.relay.key;
+    const signer = signerFromJwk(key.jwk);
+    if (signer.did !== bareDid(key.did) || bareDid(delegation.delegateDID) !== signer.did || delegation.spaceId !== body.artifact.spaceId
+        || !sameIdentity(delegation.ownerAddress, body.artifact.from.owner.split(':').at(-1)))
+        refuse('Relay key, owner or space changed.');
+    // This embedded key is only a pairing transport. The ordinary activation endpoint
+    // verifies its signed parent chain; it is never installed as the recipient's identity.
+    const installed = [];
+    const active = await activateValidatedRuntimeDelegation({
+        sessionDid: key.did,
+        computeDelegationCid: (authorization) => node.computeDelegationCid(authorization),
+        async useRuntimeDelegation(candidate) {
+            const receipt = await activateSessionWithHost(body.host, candidate.delegationHeader);
+            if (!receipt.success)
+                refuse('The node refused the inviter owner proof.');
+            installed.push(candidate);
+        },
+        getRuntimePermissionDelegations: () => installed,
+    }, delegation, {
+        host: body.host,
+        authorize: (permissions) => { assertExactAuthority(permissions, relayPermissions(body), 'Pairing relay'); return true; },
+    });
+    if (bareDid(active.delegation.delegatorDID ?? '') !== body.issuer || active.delegation.spaceId !== body.artifact.spaceId)
+        refuse('Relay signer does not match the inviter.');
+    const wasm = new NodeWasmBindings();
+    const session = {
+        address: delegation.ownerAddress, chainId: delegation.chainId, sessionKey: JSON.stringify(key.jwk), jwk: key.jwk,
+        spaceId: delegation.spaceId, delegationCid: delegation.cid, delegationHeader: delegation.delegationHeader,
+        verificationMethod: key.did, siwe: '', signature: '',
+    };
+    return new DelegatedAccess(session, delegation, body.host, wasm.invoke, wasm.invokeAny).kv;
+}
+async function validateIncoming(node, profile, body, art) {
+    validateArtifactIdentity(art);
+    if (art.from.courier === profile.courierDid)
+        refuse('Refusing to join this agent identity.');
+    const mailbox = art.step === 'B' ? body.artifact.callMe : body.artifact.peer;
+    const callMe = art.step === 'B' ? body.artifact.peer : body.artifact.callMe;
+    if (art.peer !== mailbox || art.callMe !== callMe || !art.delegation)
+        refuse('Pairing mailbox changed.');
+    const delegation = deserializeDelegation(art.delegation);
+    if (delegation.spaceId !== art.spaceId || !sameIdentity(delegation.ownerAddress, art.from.owner.split(':').at(-1)))
+        refuse('Pairing owner or space changed.');
+    const expected = { issuer: art.from.courier, audience: profile.courierDid, spaceId: art.spaceId, mailbox: art.peer, sessionId: body.session.sessionId };
+    const active = await activateValidatedRuntimeDelegation(node, delegation, {
+        host: profile.host,
+        authorize: (permissions) => { assertExactAuthority(permissions, peerReadPermissions(expected.mailbox, expected.spaceId, expected.sessionId), 'Session pairing'); return true; },
+    });
+    assertPeerDelegation(active, expected);
+    return active.delegation;
+}
+function installPeer(profile, body, incoming, inbound, outbound) {
+    const handle = incoming.callMe;
+    const existing = profile.peers[handle];
+    if (existing && (existing.courierDid !== incoming.from.courier || existing.sessionId !== body.session.sessionId))
+        refuse('Invitation would replace another pairing.');
+    const peer = {
+        handle, ownerDid: incoming.from.owner, courierDid: incoming.from.courier, spaceId: incoming.spaceId,
+        theirHandleForMe: incoming.peer, status: 'paired', sessionId: body.session.sessionId, pairedAt: new Date().toISOString(),
+        inbound: { delegation: serializeDelegation(inbound), cid: inbound.cid, expiresAt: inbound.expiry.toISOString() },
+        outbound: [{ cid: outbound.cid, expiresAt: outbound.expiry.toISOString(), issuedAt: new Date().toISOString() }],
+    };
+    profile.peers[handle] = peer;
+    saveProfile(profile);
+    return peer;
+}
+async function publishSession(node, profile, body) {
+    const meta = { threadId: body.session.sessionId, subject: body.session.subject, createdAt: body.session.createdAt,
+        startedBy: { owner: body.artifact.from.owner, courier: body.issuer } };
+    const handle = profile.courierDid === body.issuer ? body.artifact.peer : body.artifact.callMe;
+    const key = k.threadMeta(handle, body.session.sessionId);
+    if (!(await getJson(node.kv, key)))
+        await putCreate(node.kv, key, meta);
+    const stateKey = sessionKey(body.session.sessionId);
+    if (!(await getJson(node.kv, stateKey)))
+        await putCreate(node.kv, stateKey, body.session);
+    activateSession({ ...body.session, peer: handle });
+}
+function expiryCheck(body) {
+    if (Date.parse(body.expiresAt) <= Date.now())
+        throw new CourierError('invite-expired', 'Invitation expired; no session was created or substituted.');
+}
+function waitSeconds(args) {
+    const value = Number(args.get('wait') ?? '300');
+    if (!Number.isInteger(value) || value < 1 || value > 604800)
+        throw new CourierError('usage', '--wait must be an integer from 1 to 604800 seconds.');
+    return value;
+}
+const sleep = () => new Promise((resolve) => setTimeout(resolve, 250));
+/** Serve one durable winner. A restart cannot issue C to a different claimant. */
+export async function serveInvitation(node, profile, body, wait) {
+    const deadline = Math.min(Date.parse(body.expiresAt), Date.now() + wait * 1000);
+    const invitationHash = requestHash(body);
+    for (;;) {
+        expiryCheck(body);
+        let winner = await getJson(node.kv, winnerKey(body.id));
+        if (!winner) {
+            const candidate = await getJson(node.kv, `${relayRoot(body.id)}claim.json`);
+            if (candidate) {
+                const art = parseArtifact(JSON.stringify(candidate.value.payload?.artifact));
+                const claim = checked(candidate.value, art.from.courier);
+                if (claim.payload.invitationId !== body.id || claim.payload.invitationHash !== invitationHash || claim.payload.sessionId !== body.session.sessionId || art.step !== 'B')
+                    refuse('Claim targets another invitation or session.');
+                if (body.mode === 'named' && art.from.courier !== body.recipient)
+                    refuse('Claim is not from the named recipient.');
+                if (body.mode === 'same-owner' && !sameIdentity(art.from.owner, profile.ownerDid))
+                    refuse('Claim belongs to a different owner.');
+                await validateIncoming(node, profile, body, art);
+                try {
+                    await putCreate(node.kv, winnerKey(body.id), claim);
+                }
+                catch (error) {
+                    if (!(error instanceof CourierError && error.code === 'conflict'))
+                        throw error;
+                }
+                winner = await getJson(node.kv, winnerKey(body.id));
+                if (!winner)
+                    refuse('Winner reservation was not persisted.');
+            }
+        }
+        if (winner) {
+            const claim = winner.value;
+            const artB = parseArtifact(JSON.stringify(claim.payload.artifact));
+            checked(claim, artB.from.courier);
+            if (claim.payload.invitationId !== body.id || claim.payload.invitationHash !== invitationHash || claim.payload.sessionId !== body.session.sessionId || artB.step !== 'B')
+                refuse('Reserved winner does not match this invitation.');
+            if (body.mode === 'named' && artB.from.courier !== body.recipient)
+                refuse('Reserved winner is not the named recipient.');
+            if (body.mode === 'same-owner' && !sameIdentity(artB.from.owner, profile.ownerDid))
+                refuse('Reserved winner belongs to a different owner.');
+            const inbound = await validateIncoming(node, profile, body, artB);
+            let answer = await getJson(node.kv, answerKey(body.id));
+            if (!answer) {
+                const outbound = await node.delegateTo(artB.from.courier, peerReadPermissions(body.artifact.peer, profile.spaceId, body.session.sessionId), { expiry: Math.min(7 * 86400000, Date.parse(body.expiresAt) - Date.now()), requireActivation: true });
+                const artC = artifactWithDelegation('C', profile, outbound.delegation, body.artifact.peer, body.artifact.callMe);
+                const response = signed({ invitationId: body.id, invitationHash, sessionId: body.session.sessionId, claimHash: requestHash(claim), artifact: artC }, loadKey());
+                try {
+                    await putCreate(node.kv, answerKey(body.id), response);
+                }
+                catch (error) {
+                    if (!(error instanceof CourierError && error.code === 'conflict'))
+                        throw error;
+                }
+                answer = await getJson(node.kv, answerKey(body.id));
+                if (!answer)
+                    refuse('Pairing answer was not persisted.');
+            }
+            const response = checked(answer.value, body.issuer).payload;
+            if (response.invitationId !== body.id || response.invitationHash !== invitationHash || response.sessionId !== body.session.sessionId || response.claimHash !== requestHash(claim))
+                refuse('Stored answer does not match the reserved winner.');
+            const artC = parseArtifact(JSON.stringify(answer.value.payload.artifact));
+            installPeer(profile, body, artB, inbound, deserializeDelegation(artC.delegation));
+            await publishSession(node, profile, body);
+            await putOverwrite(node.kv, `${relayRoot(body.id)}answer.json`, answer.value);
+            console.log(JSON.stringify({ status: 'paired', invitationId: body.id, sessionId: body.session.sessionId, peer: body.artifact.peer }));
+            return;
+        }
+        if (Date.now() >= deadline)
+            throw new CourierError('invite-pending', `No claim received. Resume with courier invite serve ${body.id}; the same invitation and winner reservation are preserved.`);
+        await sleep();
+    }
+}
+export async function cmdInvite(args) {
+    const profile = loadProfile();
+    const node = await courierNode(profile);
+    const wait = waitSeconds(args);
+    if (args.positional[0] === 'serve') {
+        const id = args.positional[1] ?? '';
+        if (!validSessionId(id))
+            throw new CourierError('usage', 'courier invite serve <invitationId>');
+        const state = await getJson(node.kv, inviteStateKey(id));
+        if (!state)
+            refuse('No invitation issued by this profile.');
+        const body = parseInvitation(state.value.body);
+        if (body.issuer !== profile.courierDid || !sameIdentity(body.artifact.from.owner, profile.ownerDid) || body.host !== profile.host)
+            refuse('Invitation belongs to another issuer.');
+        return serveInvitation(node, profile, body, wait);
+    }
+    const mode = requireFlag(args, 'mode', 'courier invite --session <id> --mode same-owner|anyone|named --consent');
+    if (!INVITATION_MODES.includes(mode))
+        throw new CourierError('usage', 'Choose exactly one invitation mode: same-owner, anyone, named.');
+    if (args.get('consent') !== 'true')
+        throw new CourierError('consent-required', 'Owner consent is required: pass --consent to invite a participant to this session.');
+    let recipient;
+    if (mode === 'named') {
+        const target = requireFlag(args, 'recipient', 'Named invitations require --recipient <did:key|verified-peer-handle>.');
+        const peer = profile.peers[target];
+        recipient = target.startsWith('did:key:') ? target : peer?.status === 'paired' && peer.inbound ? peer.courierDid : undefined;
+        if (!recipient || !linkIssuerPublicKey(recipient))
+            throw new CourierError('unsupported-recipient', 'Use an exact Courier did:key or a verified paired handle. Email identifiers are not supported.');
+        if (recipient === profile.courierDid)
+            refuse('Refusing to invite this agent identity.');
+        if (peer)
+            await validateHandle(node, profile, peer);
+    }
+    else if (args.has('recipient'))
+        throw new CourierError('usage', '--recipient is only valid in named mode.');
+    const selected = await selectedSession(node, profile, requireFlag(args, 'session', 'courier invite --session <id>'), args.get('peer'));
+    const session = { sessionId: selected.sessionId, subject: selected.subject, createdAt: selected.createdAt };
+    const id = ulid();
+    const manager = new NodeWasmBindings().createSessionManager();
+    const keyId = manager.createSessionKey('courier-relay');
+    const key = { v: 1, did: manager.getDID(keyId), jwk: JSON.parse(manager.jwk(keyId)), createdAt: new Date().toISOString() };
+    const expiresAt = new Date(Math.floor(Math.min(Date.now() + 86400000, Date.parse(profile.grantExpiresAt)) / 1000) * 1000).toISOString();
+    const body = {
+        type: 'courier-invitation', v: 1, id, issuer: profile.courierDid, host: profile.host, session, mode: mode,
+        ...(recipient ? { recipient } : {}), expiresAt, artifact: artifactA(profile, `chat-${id}-recipient`, `chat-${id}-issuer`), relay: { key, delegation: '' },
+    };
+    const relay = await node.delegateTo(bareDid(key.did), relayPermissions(body), { expiry: Date.parse(expiresAt) - Date.now(), requireActivation: true });
+    body.relay.delegation = serializeDelegation(relay.delegation);
+    parseInvitation(body);
+    await putCreate(node.kv, inviteStateKey(id), { body });
+    const result = await createLink({ type: 'courier', issuerKey: signerFromJwk(loadKey().jwk),
+        apiOrigin: process.env.COURIER_LINKS_API_ORIGIN ?? DEFAULT_API, linkOrigin: process.env.COURIER_LINK_ORIGIN ?? DEFAULT_VIEWER,
+        expiresAt: new Date(expiresAt), plaintext: new TextEncoder().encode(canonicalJson(body)) });
+    await putOverwrite(node.kv, inviteStateKey(id), { body, link: result.link });
+    console.log(JSON.stringify({ status: 'invitation', invitationId: id, sessionId: session.sessionId, mode, link: result.link, expiresAt }));
+    return serveInvitation(node, profile, body, wait);
+}
+async function validateHandle(node, profile, peer) {
+    if (!peer.inbound || !peer.theirHandleForMe)
+        refuse('Recipient handle is not verified.');
+    const active = await activateValidatedRuntimeDelegation(node, deserializeDelegation(peer.inbound.delegation), { host: profile.host });
+    assertPeerDelegation(active, { issuer: peer.courierDid, audience: profile.courierDid, spaceId: peer.spaceId, mailbox: peer.theirHandleForMe, sessionId: peer.sessionId });
+}
+export async function joinInvitation(link, args) {
+    if (args.get('consent') !== 'true')
+        throw new CourierError('consent-required', 'Joining delegates read access to your side of this session. Pass --consent after owner approval.');
+    const wait = waitSeconds(args);
+    const opened = await resolveLink(link, { apiOrigin: process.env.COURIER_LINKS_API_ORIGIN ?? DEFAULT_API,
+        trustedOrigins: [process.env.COURIER_LINK_ORIGIN ?? DEFAULT_VIEWER], validateBody: (type, value) => { if (type !== 'courier')
+            refuse('Not a Courier invitation.'); parseInvitation(value); } });
+    const body = parseInvitation(opened.value);
+    if (opened.header.audience !== (process.env.COURIER_LINKS_API_ORIGIN ?? DEFAULT_API) || opened.header.expiresAt !== body.expiresAt)
+        refuse('Invitation audience or expiry changed.');
+    expiryCheck(body);
+    const profile = loadProfile();
+    const node = await courierNode(profile);
+    if (body.host !== profile.host)
+        refuse('Invitation uses another node host; no setup or session was changed.');
+    if (body.issuer === profile.courierDid)
+        refuse('Refusing to join this agent identity.');
+    if (body.mode === 'same-owner' && !sameIdentity(body.artifact.from.owner, profile.ownerDid))
+        refuse('Invitation requires another agent of the same owner.');
+    if (body.mode === 'named' && body.recipient !== profile.courierDid)
+        refuse('Invitation is addressed to another agent key.');
+    const hash = requestHash(body);
+    const localFile = path.join(profileDir(), 'invitation-joins', `${body.id}.json`);
+    fs.mkdirSync(path.dirname(localFile), { recursive: true, mode: 0o700 });
+    let state;
+    try {
+        state = JSON.parse(fs.readFileSync(localFile, 'utf8'));
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+    if (state && (state.invitationHash !== hash || state.joined))
+        throw new CourierError('invite-used', 'Invitation already joined or changed. No other session was activated.');
+    const relay = await relayKv(body, node);
+    if (!state) {
+        const outbound = await node.delegateTo(body.issuer, peerReadPermissions(body.artifact.callMe, profile.spaceId, body.session.sessionId), { expiry: Date.parse(body.expiresAt) - Date.now(), requireActivation: true });
+        const artB = artifactWithDelegation('B', profile, outbound.delegation, body.artifact.callMe, body.artifact.peer);
+        state = { invitationHash: hash, claim: signed({ invitationId: body.id, invitationHash: hash, sessionId: body.session.sessionId, artifact: artB }, loadKey()) };
+        writeSecure(localFile, state);
+    }
+    try {
+        await putCreate(relay, `${relayRoot(body.id)}claim.json`, state.claim);
+    }
+    catch (error) {
+        if (!(error instanceof CourierError && error.code === 'conflict'))
+            throw error;
+        const existing = await getJson(relay, `${relayRoot(body.id)}claim.json`);
+        if (!existing || requestHash(existing.value) !== requestHash(state.claim))
+            throw new CourierError('invite-used', 'Another recipient has already claimed this invitation.');
+    }
+    const deadline = Math.min(Date.parse(body.expiresAt), Date.now() + wait * 1000);
+    for (;;) {
+        expiryCheck(body);
+        const got = await getJson(relay, `${relayRoot(body.id)}answer.json`);
+        if (got) {
+            const answer = checked(got.value, body.issuer).payload;
+            if (answer.invitationId !== body.id || answer.invitationHash !== hash || answer.sessionId !== body.session.sessionId || answer.claimHash !== requestHash(state.claim))
+                refuse('Pairing answer belongs to another claim or session.');
+            const artC = parseArtifact(JSON.stringify(answer.artifact));
+            if (artC.step !== 'C' || artC.from.courier !== body.issuer || artC.from.owner !== body.artifact.from.owner || artC.spaceId !== body.artifact.spaceId)
+                refuse('Pairing issuer changed.');
+            const inbound = await validateIncoming(node, profile, body, artC);
+            const outbound = deserializeDelegation(state.claim.payload.artifact.delegation);
+            installPeer(profile, body, artC, inbound, outbound);
+            await publishSession(node, profile, body);
+            writeSecure(localFile, { ...state, joined: true });
+            console.log(JSON.stringify({ status: 'active', invitationId: body.id, session: { ...body.session, peer: body.artifact.callMe } }));
+            return;
+        }
+        if (Date.now() >= deadline)
+            throw new CourierError('invite-pending', 'Issuer has not completed pairing yet. Ask them to resume invite serve, then join the same link; no different session was created.');
+        await sleep();
+    }
+}
+export async function cmdJoin(args) {
+    const link = args.positional[0] ?? requireFlag(args, 'link', 'courier join <link> --consent');
+    return joinInvitation(link, args);
+}
+//# sourceMappingURL=invitation.js.map

package/dist/invitation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation.js","sourceRoot":"","sources":["../src/invitation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAExJ,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAE9G,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACrF,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAE1G,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE1F,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG7G,MAAM,WAAW,GAAG,2BAA2B,CAAC;AAChD,MAAM,cAAc,GAAG,+BAA+B,CAAC;AACvD,MAAM,MAAM,GAAG,uCAAuC,CAAC;AACvD,MAAM,cAAc,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,GAAG,MAAM,yBAAyB,EAAE,OAAO,CAAC;AACnF,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,GAAG,MAAM,4BAA4B,EAAE,OAAO,CAAC;AACjF,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,GAAG,MAAM,gCAAgC,EAAE,OAAO,CAAC;AACrF,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,GAAG,MAAM,cAAc,EAAE,WAAW,CAAC;AA0BvE,SAAS,MAAM,CAAC,OAAe,IAAW,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAC9F,SAAS,IAAI,CAAC,KAA8B,EAAE,QAAkB,EAAE,WAAqB,EAAE;IACvF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,CAAC,+BAA+B,CAAC,CAAC;AAC1L,CAAC;AACD,SAAS,YAAY,CAAC,CAAS,EAAE,CAAS,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAE3F,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,+BAA+B,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IACvH,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAAE,MAAM,CAAC,iCAAiC,CAAC,CAAC;IACjK,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACjH,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACnE,IAAI,IAAS,CAAC;IACd,IAAI,CAAC;QAAC,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAAC,CAAC;IACpF,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,CAAC,yDAAyD,CAAC,CAAC;IACxN,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAsB,CAAC;QAAE,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACjG,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,MAAM,CAAC,0FAA0F,CAAC,CAAC;IACvL,CAAC;SAAM,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,CAAC,kCAAkC,CAAC,CAAC;IACrF,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,SAAS;QAAE,MAAM,CAAC,4BAA4B,CAAC,CAAC;IAC9L,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,CAAC,2BAA2B,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IAC3D,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ;WACnI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACtL,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1D,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,KAAK,CAAC,EAAE,YAAY,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,KAAK,CAAC,EAAE,SAAS;QAAE,MAAM,CAAC,0DAA0D,CAAC,CAAC;IACvN,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;WACjI,OAAO,KAAK,CAAC,KAAK,CAAC,UAAU,KAAK,QAAQ;QAAE,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAClF,OAAO,KAAqC,CAAC;AAC/C,CAAC;AAED,SAAS,MAAM,CAAI,OAAU,EAAE,GAAa;IAC1C,MAAM,UAAU,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AAC5H,CAAC;AACD,SAAS,OAAO,CAAI,KAAc,EAAE,GAAW;IAC7C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,kCAAkC,CAAC,CAAC;IACjE,IAAI,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACtI,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/H,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAAE,MAAM,CAAC,sDAAsD,CAAC,CAAC;IACtL,OAAO,KAA6B,CAAC;AACvC,CAAC;AACD,SAAS,gBAAgB,CAAC,IAAuB;IAC/C,OAAO,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC;AAClJ,CAAC;AAED,0FAA0F;AAC1F,KAAK,UAAU,OAAO,CAAC,IAAuB,EAAE,IAAmB;IACjE,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;IAC3B,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,GAAmC,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,OAAO,KAAK,IAAI,CAAC,QAAQ,CAAC,OAAO;WAChI,CAAC,YAAY,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;QAAE,MAAM,CAAC,oCAAoC,CAAC,CAAC;IACvI,kFAAkF;IAClF,uFAAuF;IACvF,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,kCAAkC,CAAC;QACtD,UAAU,EAAE,GAAG,CAAC,GAAG;QACnB,oBAAoB,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC;QACjF,KAAK,CAAC,oBAAoB,CAAC,SAAS;YAClC,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,gBAAgB,CAAC,CAAC;YACrF,IAAI,CAAC,OAAO,CAAC,OAAO;gBAAE,MAAM,CAAC,2CAA2C,CAAC,CAAC;YAC1E,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;QACD,+BAA+B,EAAE,GAAG,EAAE,CAAC,SAAS;KACjD,EAAE,UAAU,EAAE;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,oBAAoB,CAAC,WAAW,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;KACzH,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,KAAK,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,MAAM,CAAC,0CAA0C,CAAC,CAAC;IAC7K,MAAM,IAAI,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACpC,MAAM,OAAO,GAAqB;QAChC,OAAO,EAAE,UAAU,CAAC,YAAY,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAY;QACzH,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,GAAG,EAAE,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;QACzG,kBAAkB,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;KACrD,CAAC;IACF,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAmB,EAAE,OAAgB,EAAE,IAAuB,EAAE,GAAiB;IAC/G,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,UAAU;QAAE,MAAM,CAAC,uCAAuC,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC7E,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC5E,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU;QAAE,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACzG,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;QAAE,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAC/J,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;IACxJ,MAAM,MAAM,GAAG,MAAM,kCAAkC,CAAC,IAAI,EAAE,UAAU,EAAE;QACxE,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,oBAAoB,CAAC,WAAW,EAAE,mBAAmB,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;KAChL,CAAC,CAAC;IACH,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,UAAU,CAAC;AAC3B,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB,EAAE,IAAuB,EAAE,QAAsB,EAAE,OAA2B,EAAE,QAA4B;IAC/I,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,CAAC,2CAA2C,CAAC,CAAC;IACtK,MAAM,IAAI,GAAe;QACvB,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO;QACnG,gBAAgB,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACxH,OAAO,EAAE,EAAE,UAAU,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE;QAChH,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;KAChH,CAAC;IACF,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IAC7B,WAAW,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,IAAI,CAAC;AACd,CAAC;AACD,KAAK,UAAU,cAAc,CAAC,IAAmB,EAAE,OAAgB,EAAE,IAAuB;IAC1F,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;QAC/G,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;IACzE,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9F,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAAE,MAAM,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAAE,MAAM,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1F,eAAe,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AACrD,CAAC;AACD,SAAS,WAAW,CAAC,IAAuB;IAC1C,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,4DAA4D,CAAC,CAAC;AACvJ,CAAC;AACD,SAAS,WAAW,CAAC,IAAgB;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,MAAM;QAAE,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,qDAAqD,CAAC,CAAC;IACpJ,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;AAE7E,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAmB,EAAE,OAAgB,EAAE,IAAuB,EAAE,IAAY;IAChH,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;IAChF,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACzC,SAAS,CAAC;QACR,WAAW,CAAC,IAAI,CAAC,CAAC;QAClB,IAAI,MAAM,GAAG,MAAM,OAAO,CAAgB,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,SAAS,GAAG,MAAM,OAAO,CAAgB,IAAI,CAAC,EAAE,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;YAC3F,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAC7E,MAAM,KAAK,GAAG,OAAO,CAAQ,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAChE,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,KAAK,cAAc,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG;oBAAE,MAAM,CAAC,8CAA8C,CAAC,CAAC;gBAChO,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS;oBAAE,MAAM,CAAC,wCAAwC,CAAC,CAAC;gBACnH,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,QAAS,CAAC;oBAAE,MAAM,CAAC,qCAAqC,CAAC,CAAC;gBAClI,MAAM,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBACjD,IAAI,CAAC;oBAAC,MAAM,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;gBAAC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAC1E,IAAI,CAAC,CAAC,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;wBAAE,MAAM,KAAK,CAAC;gBACjF,CAAC;gBACD,MAAM,GAAG,MAAM,OAAO,CAAgB,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBACnE,IAAI,CAAC,MAAM;oBAAE,MAAM,CAAC,uCAAuC,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAC3B,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YACnE,OAAO,CAAQ,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,KAAK,cAAc,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG;gBAAE,MAAM,CAAC,iDAAiD,CAAC,CAAC;YACpO,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS;gBAAE,MAAM,CAAC,6CAA6C,CAAC,CAAC;YACzH,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,QAAS,CAAC;gBAAE,MAAM,CAAC,+CAA+C,CAAC,CAAC;YAC7I,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAClE,IAAI,MAAM,GAAG,MAAM,OAAO,CAAiB,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACxE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,OAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnP,MAAM,IAAI,GAAG,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACjH,MAAM,QAAQ,GAAG,MAAM,CAAS,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;gBACxK,IAAI,CAAC;oBAAC,MAAM,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAAC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAC7E,IAAI,CAAC,CAAC,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;wBAAE,MAAM,KAAK,CAAC;gBACjF,CAAC;gBACD,MAAM,GAAG,MAAM,OAAO,CAAiB,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBACpE,IAAI,CAAC,MAAM;oBAAE,MAAM,CAAC,mCAAmC,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAS,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACpE,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI,CAAC,EAAE,IAAI,QAAQ,CAAC,cAAc,KAAK,cAAc,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,WAAW,CAAC,KAAK,CAAC;gBAAE,MAAM,CAAC,mDAAmD,CAAC,CAAC;YAC/O,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1E,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,CAAC,IAAI,CAAC,UAAW,CAAC,CAAC,CAAC;YACnF,MAAM,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1C,MAAM,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9E,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACtI,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,uDAAuD,IAAI,CAAC,EAAE,6DAA6D,CAAC,CAAC;QAClM,MAAM,KAAK,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAgB;IAC9C,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,qCAAqC,CAAC,CAAC;QAChG,MAAM,KAAK,GAAG,MAAM,OAAO,CAAc,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,uCAAuC,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,UAAU,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,QAAS,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;YAAE,MAAM,CAAC,uCAAuC,CAAC,CAAC;QACpL,OAAO,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,wEAAwE,CAAC,CAAC;IACjH,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAsB,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,gEAAgE,CAAC,CAAC;IAC1J,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,MAAM;QAAE,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,oFAAoF,CAAC,CAAC;IACrK,IAAI,SAA6B,CAAC;IAClC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,uEAAuE,CAAC,CAAC;QACvH,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7H,IAAI,CAAC,SAAS,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,uBAAuB,EAAE,gGAAgG,CAAC,CAAC;QACrM,IAAI,SAAS,KAAK,OAAO,CAAC,UAAU;YAAE,MAAM,CAAC,yCAAyC,CAAC,CAAC;QACxF,IAAI,IAAI;YAAE,MAAM,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;SAAM,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,0CAA0C,CAAC,CAAC;IAC9G,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,IAAI,EAAE,SAAS,EAAE,+BAA+B,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACvI,MAAM,OAAO,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;IAC5G,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC;IAClB,MAAM,OAAO,GAAG,IAAI,gBAAgB,EAAE,CAAC,oBAAoB,EAAE,CAAC;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;IACxD,MAAM,GAAG,GAAa,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACtI,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAe,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACzI,MAAM,IAAI,GAAsB;QAC9B,IAAI,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAsB;QAC3H,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE;KAC1J,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IACvJ,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9D,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,OAAO,EAAE,CAAC,GAAmC,CAAC;QACxH,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,cAAc;QAC7H,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9F,MAAM,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAC1I,OAAO,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAmB,EAAE,OAAgB,EAAE,IAAgB;IACnF,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB;QAAE,MAAM,CAAC,mCAAmC,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,MAAM,kCAAkC,CAAC,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACtI,oBAAoB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;AAC5K,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,IAAgB;IACjE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,MAAM;QAAE,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,kGAAkG,CAAC,CAAC;IACnL,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,WAAW;QACrG,cAAc,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,cAAc,CAAC,EAAE,YAAY,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClM,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,WAAW,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;QAAE,MAAM,CAAC,wCAAwC,CAAC,CAAC;IACrL,WAAW,CAAC,IAAI,CAAC,CAAC;IAClB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;QAAE,MAAM,CAAC,qEAAqE,CAAC,CAAC;IAC9G,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,UAAU;QAAE,MAAM,CAAC,uCAAuC,CAAC,CAAC;IACxF,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,QAAS,CAAC;QAAE,MAAM,CAAC,sDAAsD,CAAC,CAAC;IAC7J,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,UAAU;QAAE,MAAM,CAAC,+CAA+C,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACjF,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,IAAI,KAA4B,CAAC;IACjC,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAc,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;IACnK,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,uEAAuE,CAAC,CAAC;IAC7K,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,OAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QACvN,MAAM,IAAI,GAAG,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjH,KAAK,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QACtK,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,CAAC;QAAC,MAAM,SAAS,CAAC,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAC7F,IAAI,CAAC,CAAC,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;YAAE,MAAM,KAAK,CAAC;QAC/E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAgB,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;QACxF,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,wDAAwD,CAAC,CAAC;IAC7K,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;IAChF,SAAS,CAAC;QACR,WAAW,CAAC,IAAI,CAAC,CAAC;QAClB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAiB,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;QACrF,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,MAAM,GAAG,OAAO,CAAS,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YAC/D,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,EAAE,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC;gBAAE,MAAM,CAAC,qDAAqD,CAAC,CAAC;YACrO,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC5D,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,QAAQ,CAAC,OAAO;gBAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACxL,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAW,CAAC,CAAC;YACjF,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YACpD,MAAM,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1C,WAAW,CAAC,SAAS,EAAE,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YACnI,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,mIAAmI,CAAC,CAAC;QAC1M,MAAM,KAAK,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAgB;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,+BAA+B,CAAC,CAAC;IAC9F,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC"}

package/dist/keys.d.ts

@@ -17,7 +17,7 @@ export declare const k: {
     task: (peer: string, threadId: string, taskId: string) => string;
     file: (peer: string, threadId: string, name: string) => string;
     receipts: (peer: string) => string;
-    peerDelegation: (peer: string) => string;
+    peerDelegation: (peer: string, sessionId?: string) => string;
     peerRecord: (peer: string) => string;
     orders: (peer: string) => string;
     request: (id: string) => string;
@@ -41,4 +41,4 @@ export declare const k: {
     mePrefix: string;
 };
 /** Peer-read capability entries for `delegateTo`, spec §3/§5 and TC-708. */
-export declare function peerReadPermissions(peer: string, space: string): PermissionEntry[];
+export declare function peerReadPermissions(peer: string, space: string, sessionId?: string): PermissionEntry[];

package/dist/keys.js

@@ -37,7 +37,7 @@ export const k = {
     task: (peer, threadId, taskId) => `${k.threadRoot(peer, threadId)}/task/${taskId}.json`,
     file: (peer, threadId, name) => `${k.threadRoot(peer, threadId)}/files/${name}`,
     receipts: (peer) => `${k.toPeer(peer)}receipts.json`,
-    peerDelegation: (peer) => `${k.toPeer(peer)}pairing/delegation.json`,
+    peerDelegation: (peer, sessionId) => `${sessionId ? `${k.threadRoot(peer, sessionId)}/` : k.toPeer(peer)}pairing/delegation.json`,
     peerRecord: (peer) => `${PREFIX}/me/peers/${peer}.json`,
     orders: (peer) => `${PREFIX}/me/orders/${peer}.md`,
     request: (id) => `${PREFIX}/me/requests/${id}.json`,
@@ -61,10 +61,11 @@ export const k = {
     mePrefix: `${PREFIX}/me/`,
 };
 /** Peer-read capability entries for `delegateTo`, spec §3/§5 and TC-708. */
-export function peerReadPermissions(peer, space) {
+export function peerReadPermissions(peer, space, sessionId) {
+    const root = sessionId ? `${k.threadRoot(peer, sessionId)}/` : k.toPeer(peer);
     return [
-        { space, service: 'tinycloud.kv', path: k.toPeer(peer), actions: ['tinycloud.kv/get', 'tinycloud.kv/list'] },
-        { space, service: 'tinycloud.hooks', path: `kv/${PREFIX}/to/${peer}`, actions: ['tinycloud.hooks/subscribe'] },
+        { space, service: 'tinycloud.kv', path: root, actions: ['tinycloud.kv/get', 'tinycloud.kv/list'] },
+        { space, service: 'tinycloud.hooks', path: `kv/${root.replace(/\/$/, '')}`, actions: ['tinycloud.hooks/subscribe'] },
     ];
 }
 //# sourceMappingURL=keys.js.map

package/dist/keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAEA,wEAAwE;AACxE,MAAM,CAAC,MAAM,MAAM,GAAG,uBAAuB,CAAC;AAC9C,MAAM,CAAC,MAAM,GAAG,GAAG,sCAAsC,CAAC;AAC1D,MAAM,CAAC,MAAM,YAAY,GAAG,gCAAgC,CAAC;AAC7D,uGAAuG;AACvG,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAC;AACtC,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAExC,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,OAAiB,EAAmB,EAAE,CAAC,CAAC;IAChE,OAAO,EAAE,cAAc;IACvB,KAAK,EAAE,aAAa;IACpB,IAAI,EAAE,GAAG,MAAM,IAAI,IAAI,EAAE;IACzB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,MAAM,EAAE,CAAC;CAC3D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAsB;IAC5C,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACpD,EAAE,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC;IAC3B,EAAE,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/C,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,mHAAmH;IACnH,EAAE,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1C,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1B;QACE,OAAO,EAAE,iBAAiB;QAC1B,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,MAAM,MAAM,GAAG;QACrB,OAAO,EAAE,CAAC,2BAA2B,CAAC;KACvC;CACF,CAAC;AAGF,MAAM,CAAC,MAAM,CAAC,GAAG;IACf,6DAA6D;IAC7D,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,IAAI,GAAG;IACjD,UAAU,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,IAAI,YAAY,QAAQ,EAAE;IAC1F,UAAU,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,YAAY;IAC3F,SAAS,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO;IACrF,GAAG,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,SAAiB,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,SAAS,OAAO;IAC7G,IAAI,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,MAAc,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,MAAM,OAAO;IAC/G,IAAI,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,UAAU,IAAI,EAAE;IACvG,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe;IAC5D,cAAc,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB;IAC5E,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,MAAM,aAAa,IAAI,OAAO;IAC/D,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,MAAM,cAAc,IAAI,KAAK;IAC1D,OAAO,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,GAAG,MAAM,gBAAgB,EAAE,OAAO;IAC3D,QAAQ,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,GAAG,MAAM,iBAAiB,EAAE,OAAO;IAC7D,SAAS,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,SAAiB,EAAE,EAAE,CAC/D,GAAG,MAAM,cAAc,IAAI,YAAY,QAAQ,QAAQ,SAAS,OAAO;IACzE,UAAU,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,EAAE,CAC7C,GAAG,MAAM,cAAc,IAAI,YAAY,QAAQ,YAAY;IAC7D,UAAU,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,MAAc,EAAE,EAAE,CAC7D,GAAG,MAAM,cAAc,IAAI,YAAY,QAAQ,SAAS,MAAM,OAAO;IACvE,UAAU,EAAE,GAAG,MAAM,sBAAsB;IAC3C,uJAAuJ;IACvJ,MAAM,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,EAAE,CAAC,GAAG,MAAM,oBAAoB,IAAI,IAAI,QAAQ,OAAO;IAChG,YAAY,EAAE,GAAG,MAAM,mBAAmB;IAC1C,sHAAsH;IACtH,YAAY,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,GAAG,MAAM,gBAAgB,EAAE,OAAO;IAChE,+DAA+D;IAC/D,SAAS,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,OAAe,EAAE,EAAE,CAAC,GAAG,MAAM,yBAAyB,IAAI,IAAI,QAAQ,IAAI,OAAO,OAAO;IACpI,gBAAgB,EAAE,GAAG,MAAM,wBAAwB;IACnD,WAAW,EAAE,GAAG,MAAM,YAAY;IAClC,YAAY,EAAE,GAAG,MAAM,aAAa;IACpC,eAAe,EAAE,GAAG,MAAM,gBAAgB;IAC1C,YAAY,EAAE,GAAG,MAAM,aAAa;IACpC,QAAQ,EAAE,GAAG,MAAM,MAAM;CAC1B,CAAC;AAEF,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAa;IAC7D,OAAO;QACL,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,EAAE;QAC5G,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,MAAM,OAAO,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,2BAA2B,CAAC,EAAE;KAC/G,CAAC;AACJ,CAAC"}
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAEA,wEAAwE;AACxE,MAAM,CAAC,MAAM,MAAM,GAAG,uBAAuB,CAAC;AAC9C,MAAM,CAAC,MAAM,GAAG,GAAG,sCAAsC,CAAC;AAC1D,MAAM,CAAC,MAAM,YAAY,GAAG,gCAAgC,CAAC;AAC7D,uGAAuG;AACvG,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAC;AACtC,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAExC,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,OAAiB,EAAmB,EAAE,CAAC,CAAC;IAChE,OAAO,EAAE,cAAc;IACvB,KAAK,EAAE,aAAa;IACpB,IAAI,EAAE,GAAG,MAAM,IAAI,IAAI,EAAE;IACzB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,MAAM,EAAE,CAAC;CAC3D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAsB;IAC5C,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACpD,EAAE,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC;IAC3B,EAAE,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/C,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,mHAAmH;IACnH,EAAE,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1C,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1B;QACE,OAAO,EAAE,iBAAiB;QAC1B,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,MAAM,MAAM,GAAG;QACrB,OAAO,EAAE,CAAC,2BAA2B,CAAC;KACvC;CACF,CAAC;AAGF,MAAM,CAAC,MAAM,CAAC,GAAG;IACf,6DAA6D;IAC7D,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,IAAI,GAAG;IACjD,UAAU,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,IAAI,YAAY,QAAQ,EAAE;IAC1F,UAAU,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,YAAY;IAC3F,SAAS,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO;IACrF,GAAG,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,SAAiB,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,SAAS,OAAO;IAC7G,IAAI,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,MAAc,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,MAAM,OAAO;IAC/G,IAAI,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,UAAU,IAAI,EAAE;IACvG,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe;IAC5D,cAAc,EAAE,CAAC,IAAY,EAAE,SAAkB,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB;IAClJ,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,MAAM,aAAa,IAAI,OAAO;IAC/D,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,MAAM,cAAc,IAAI,KAAK;IAC1D,OAAO,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,GAAG,MAAM,gBAAgB,EAAE,OAAO;IAC3D,QAAQ,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,GAAG,MAAM,iBAAiB,EAAE,OAAO;IAC7D,SAAS,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,SAAiB,EAAE,EAAE,CAC/D,GAAG,MAAM,cAAc,IAAI,YAAY,QAAQ,QAAQ,SAAS,OAAO;IACzE,UAAU,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,EAAE,CAC7C,GAAG,MAAM,cAAc,IAAI,YAAY,QAAQ,YAAY;IAC7D,UAAU,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,MAAc,EAAE,EAAE,CAC7D,GAAG,MAAM,cAAc,IAAI,YAAY,QAAQ,SAAS,MAAM,OAAO;IACvE,UAAU,EAAE,GAAG,MAAM,sBAAsB;IAC3C,uJAAuJ;IACvJ,MAAM,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,EAAE,CAAC,GAAG,MAAM,oBAAoB,IAAI,IAAI,QAAQ,OAAO;IAChG,YAAY,EAAE,GAAG,MAAM,mBAAmB;IAC1C,sHAAsH;IACtH,YAAY,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,GAAG,MAAM,gBAAgB,EAAE,OAAO;IAChE,+DAA+D;IAC/D,SAAS,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,OAAe,EAAE,EAAE,CAAC,GAAG,MAAM,yBAAyB,IAAI,IAAI,QAAQ,IAAI,OAAO,OAAO;IACpI,gBAAgB,EAAE,GAAG,MAAM,wBAAwB;IACnD,WAAW,EAAE,GAAG,MAAM,YAAY;IAClC,YAAY,EAAE,GAAG,MAAM,aAAa;IACpC,eAAe,EAAE,GAAG,MAAM,gBAAgB;IAC1C,YAAY,EAAE,GAAG,MAAM,aAAa;IACpC,QAAQ,EAAE,GAAG,MAAM,MAAM;CAC1B,CAAC;AAEF,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAa,EAAE,SAAkB;IACjF,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9E,OAAO;QACL,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,EAAE;QAClG,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,2BAA2B,CAAC,EAAE;KACrH,CAAC;AACJ,CAAC"}

package/dist/main.js

@@ -11,6 +11,8 @@ import { cmdGuard } from './guard/command.js';
 import { cmdBroker, cmdRunApproved } from './broker.js';
 import { cmdCredential } from './credential.js';
 import { courierVersion } from './version.js';
+import { cmdStart } from './guided.js';
+import { cmdInvite, cmdJoin } from './invitation.js';
 function usage() {
     const name = programName();
     return `${name} — agent-to-agent threads over TinyCloud (v0)
@@ -18,6 +20,14 @@ function usage() {
 Usage: ${name} <command> [args]
 
 Setup & pairing (humans run these):
+  start [--new <subject> | --session <id> [--peer p] | --link <invitation> --consent]
+                                   Discover accessible chats; choose new/existing only when chats exist.
+  invite --session <id> --mode same-owner|anyone|named [--recipient <did:key|peer>] --consent
+                                   Print one handoff link and serve its signed pairing (default --wait 300).
+  invite serve <invitationId> [--wait 300]
+                                   Resume the same invitation and durable winning claim.
+  join <invitation-link> --consent [--wait 300]
+                                   Join and activate the link's intended session; never create a substitute.
   init [--request | --grant-file f|- | --paste | --resume] [--host url] [--openkey-host url]
        [--openkey-api-host url] [--label s] [--handle h] [--expiry 30d] [--rotate-key]
                                    Create/renew the agent key's restricted grant in OpenKey.
@@ -144,6 +154,9 @@ export async function run(argv) {
     const sub = { ...args, positional: args.positional.slice(1) };
     switch (command) {
         case 'init': return cmdInit(sub);
+        case 'start': return cmdStart(sub);
+        case 'invite': return cmdInvite(sub);
+        case 'join': return cmdJoin(sub);
         case 'manifest': return cmdManifest();
         case 'pair': return cmdPair(sub);
         case 'revoke': return cmdRevoke(sub);

package/dist/main.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAmB,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EACL,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,GAClH,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,SAAS,KAAK;IACZ,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,OAAO,GAAG,IAAI;;SAEP,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAuGT,GAAG,CAAC,SAAS,CAAC;;;;;CAKjB,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc;IACtC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,cAAc,EAAE,IAAI,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACpC,OAAO;IACT,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IAED,gEAAgE;IAChE,MAAM,GAAG,GAAe,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAE1E,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,KAAK,UAAU,CAAC,CAAC,OAAO,WAAW,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,KAAK,QAAQ,CAAC,CAAC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,KAAK,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,KAAK,MAAM,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,KAAK,SAAS,CAAC,CAAC,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;QACvC,KAAK,QAAQ,CAAC,CAAC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnC,KAAK,QAAQ,CAAC,CAAC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,QAAQ,CAAC,CAAC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,UAAU,CAAC,CAAC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QACzC,KAAK,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnC,KAAK,QAAQ,CAAC,CAAC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,YAAY,CAAC,CAAC,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC7C,KAAK,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnC,KAAK,cAAc,CAAC,CAAC,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;QAChD,KAAK,QAAQ,CAAC,CAAC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC;YACE,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,oBAAoB,OAAO,SAAS,KAAK,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc,EAAE,OAA0B,EAAE;IACrE,cAAc,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,YAAY,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACpD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,GAAG,WAAW,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACxF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAmB,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EACL,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,GAClH,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAErD,SAAS,KAAK;IACZ,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,OAAO,GAAG,IAAI;;SAEP,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA+GT,GAAG,CAAC,SAAS,CAAC;;;;;CAKjB,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc;IACtC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,cAAc,EAAE,IAAI,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACpC,OAAO;IACT,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IAED,gEAAgE;IAChE,MAAM,GAAG,GAAe,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAE1E,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,KAAK,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnC,KAAK,QAAQ,CAAC,CAAC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,KAAK,UAAU,CAAC,CAAC,OAAO,WAAW,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,KAAK,QAAQ,CAAC,CAAC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,KAAK,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,KAAK,MAAM,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,KAAK,SAAS,CAAC,CAAC,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;QACvC,KAAK,QAAQ,CAAC,CAAC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnC,KAAK,QAAQ,CAAC,CAAC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,QAAQ,CAAC,CAAC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,UAAU,CAAC,CAAC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QACzC,KAAK,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnC,KAAK,QAAQ,CAAC,CAAC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,YAAY,CAAC,CAAC,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC7C,KAAK,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnC,KAAK,cAAc,CAAC,CAAC,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;QAChD,KAAK,QAAQ,CAAC,CAAC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC;YACE,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,oBAAoB,OAAO,SAAS,KAAK,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc,EAAE,OAA0B,EAAE;IACrE,cAAc,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,YAAY,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACpD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,GAAG,WAAW,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACxF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/node.js

@@ -55,6 +55,11 @@ export async function courierNode(profile, home) {
         throw new CourierError('bad-grant', `Grant holder ${node.credentialHolderDid} does not match courier key ${profile.courierDid}.`);
     }
     assertAgentGrant(node.getVerifiedSessionCapabilities(), siweTimes(grant.siwe));
+    const restored = node.restorableSession;
+    const owner = restored ? `did:pkh:eip155:${restored.chainId}:${restored.address}` : '';
+    if (profile.ownerDid?.toLowerCase() !== owner.toLowerCase() || profile.spaceId?.toLowerCase() !== restored?.spaceId.toLowerCase()) {
+        throw new CourierError('bad-grant', 'Profile owner or space does not match the verified Courier grant.');
+    }
     return node;
 }
 export async function peerKv(node, profile, peer) {
@@ -77,6 +82,7 @@ export async function peerKv(node, profile, peer) {
             audience: profile.courierDid,
             spaceId: peer.spaceId,
             mailbox: peer.theirHandleForMe,
+            sessionId: peer.sessionId,
         });
         if (activated.cid !== peer.inbound.cid) {
             throw new CourierError('bad-delegation', `Peer delegation CID does not match the stored CID for ${peer.handle}.`);