ftown 0.21.0 → 0.25.0

package/dist/ledger-reoffer.js

@@ -0,0 +1,210 @@
+export const REOFFER_PAIR_WINDOW_MS = 30_000;
+/** At most one POST per this interval, whatever the (our head, server head) pair. */
+export const REOFFER_MIN_POST_SPACING_MS = 30_000;
+/** After a 404 (the server does not know the account), nothing is posted for this long unless a read finds the account again. */
+export const REOFFER_UNKNOWN_ACCOUNT_PAUSE_MS = 3_600_000;
+export const REOFFER_FIRST_BACKOFF_MS = 30_000;
+export const REOFFER_MAX_BACKOFF_MS = 600_000;
+export const REOFFER_MAX_RETRY_AFTER_MS = 3_600_000;
+/** Each backoff wait is multiplied by 1 - REOFFER_JITTER + 2 * REOFFER_JITTER * random(). */
+export const REOFFER_JITTER = 0.2;
+/** The backoff wait after `failures` failed attempts in a row (>= 1), for a given random() draw. */
+export function reofferBackoffMs(failures, random) {
+    const base = Math.min(REOFFER_FIRST_BACKOFF_MS * 2 ** Math.max(0, failures - 1), REOFFER_MAX_BACKOFF_MS);
+    return Math.round(base * (1 - REOFFER_JITTER + 2 * REOFFER_JITTER * random));
+}
+const messageOf = (error) => error instanceof Error ? error.message : String(error);
+const field = (body, key) => typeof body === 'object' && body !== null && !Array.isArray(body) ? body[key] : undefined;
+export function createLedgerReoffer(deps) {
+    let running = null;
+    let failures = 0;
+    /** Monotonic time before which no attempt starts (after a failure). */
+    let readyAt = Number.NEGATIVE_INFINITY;
+    let cancelTimer = null;
+    let stopped = false;
+    /** The server said it does not know this account: no attempt before this monotonic time (unless a read finds the account). */
+    let pausedUntil = Number.NEGATIVE_INFINITY;
+    /** The last POST (any pair), for the global floor. */
+    let lastPostAt = Number.NEGATIVE_INFINITY;
+    /** The last POST was answered 2xx: the next read must no longer show the server behind, else that counts as a failure. */
+    let confirming = false;
+    /** (our head, server head) -> when it was last posted. */
+    const sent = new Map();
+    /** Local heads whose ledger_rejected answer was logged. */
+    const rejectedLogged = new Set();
+    const cancel = () => { cancelTimer?.(); cancelTimer = null; };
+    const paused = () => deps.now() < pausedUntil;
+    /** (Re)arms the one retry timer: an attempt `ms` from now, unless one is running then. */
+    const arm = (ms) => {
+        cancel();
+        if (stopped)
+            return;
+        cancelTimer = deps.schedule(() => { cancelTimer = null; if (running === null)
+            void start(); }, Math.max(0, ms));
+    };
+    const settled = (outcome) => {
+        failures = 0;
+        readyAt = Number.NEGATIVE_INFINITY;
+        cancel();
+        return outcome;
+    };
+    const failed = (reason, retryAfterMs = null, quiet = false) => {
+        failures += 1;
+        let wait = reofferBackoffMs(failures, deps.random());
+        if (retryAfterMs !== null && retryAfterMs > wait)
+            wait = Math.min(retryAfterMs, REOFFER_MAX_RETRY_AFTER_MS);
+        readyAt = deps.now() + wait;
+        // The first failure at each larger step is logged; once the wait stops growing, the bridge stays quiet.
+        const grew = failures === 1 || reofferBackoffMs(failures, 0.5) > reofferBackoffMs(failures - 1, 0.5);
+        if (!quiet && grew)
+            deps.log(`[ledger] could not send our account history to the server (${reason}); retrying in ${Math.round(wait / 1000)} s`);
+        arm(wait);
+        return 'failed';
+    };
+    const unknownAccount = () => {
+        if (!paused())
+            deps.log('[ledger] the server does not know this account (404); this computer will not send its account history to it for an hour');
+        pausedUntil = deps.now() + REOFFER_UNKNOWN_ACCOUNT_PAUSE_MS;
+        confirming = false;
+        failures = 0;
+        readyAt = Number.NEGATIVE_INFINITY;
+        cancel();
+        return 'stopped';
+    };
+    const offerQuietly = async (ledger) => {
+        try {
+            return await deps.offer(ledger);
+        }
+        catch {
+            return null;
+        }
+    };
+    const send = async (serverHead) => {
+        const local = await deps.local();
+        if (local === null)
+            return settled('not_behind');
+        const now = deps.now();
+        for (const [key, at] of sent)
+            if (now < at || now - at >= REOFFER_PAIR_WINDOW_MS)
+                sent.delete(key);
+        const pair = `${local.head}\n${serverHead}`;
+        const pairAt = sent.get(pair);
+        // Both floors, after the fresh read: this pair at most once per 30 s, and any POST at most once per 30 s.
+        const floorAt = now >= lastPostAt ? lastPostAt + REOFFER_MIN_POST_SPACING_MS : Number.NEGATIVE_INFINITY;
+        const until = Math.max(pairAt === undefined ? Number.NEGATIVE_INFINITY : pairAt + REOFFER_PAIR_WINDOW_MS, floorAt);
+        if (until > now) {
+            // A retry after a failure can come back before a floor ends (the first wait may be 24 s): try again when it does.
+            if (failures > 0)
+                arm(until - now);
+            return 'skipped';
+        }
+        sent.set(pair, now);
+        lastPostAt = now;
+        let answer;
+        try {
+            answer = await deps.post(local.ledger, serverHead);
+        }
+        catch (error) {
+            return failed(messageOf(error));
+        }
+        if (stopped)
+            return 'stopped';
+        const { status, body } = answer;
+        const error = field(body, 'error');
+        const chain = field(body, 'ledger');
+        const answered = typeof chain === 'object' && chain !== null;
+        if (status >= 200 && status < 300) {
+            if (answered)
+                await offerQuietly(chain);
+            // Not settled yet: the next read must show the server holding our chain.
+            confirming = true;
+            return 'posted';
+        }
+        if (status === 404)
+            return unknownAccount();
+        if (status === 409 && error === 'head_changed') {
+            // Another write landed since our read: judge the server's chain; if it is still a prefix of ours, the retry reads and sends again.
+            const outcome = answered ? await offerQuietly(chain) : null;
+            if (outcome !== null && outcome.decision !== 'reject' && outcome.relation !== 'behind')
+                return settled('not_behind');
+            return failed('head_changed');
+        }
+        if (status === 409 && error === 'diverged') {
+            if (answered)
+                await offerQuietly(chain);
+            return failed('the server holds a different history');
+        }
+        if (status === 409 && error === 'ledger_rejected') {
+            const first = !rejectedLogged.has(local.head);
+            rejectedLogged.add(local.head);
+            if (first)
+                deps.log('[ledger] the server rejected our account history; retrying later');
+            return failed('ledger_rejected', null, true);
+        }
+        if (status === 429)
+            return failed('rate limited', answer.retryAfterMs);
+        return failed(`HTTP ${status}`);
+    };
+    const attempt = async () => {
+        if (stopped)
+            return 'stopped';
+        if (paused())
+            return 'stopped';
+        const read = await deps.read();
+        if (stopped)
+            return 'stopped';
+        if (read.kind === 'unknown_account')
+            return unknownAccount();
+        if (read.kind === 'failed')
+            return failed(`read failed: ${read.reason}`);
+        // The account is there again.
+        pausedUntil = Number.NEGATIVE_INFINITY;
+        const { relation, head } = read.outcome;
+        const wasConfirming = confirming;
+        confirming = false;
+        if (relation !== 'behind' || head === null)
+            return settled('not_behind');
+        // The server answered 2xx to our last POST, yet still lacks our records: a hostile or broken server, not progress.
+        if (wasConfirming)
+            return failed('the server accepted our history but still lacks it');
+        return send(head);
+    };
+    const start = () => {
+        const run = attempt().catch((error) => failed(messageOf(error)));
+        running = run.finally(() => { running = null; });
+        return running;
+    };
+    return {
+        noteServerBehind() {
+            if (stopped)
+                return;
+            // The caller's read found the account: a 404 pause is over.
+            pausedUntil = Number.NEGATIVE_INFINITY;
+            if (running !== null || cancelTimer !== null)
+                return;
+            const wait = readyAt - deps.now();
+            if (wait > 0)
+                arm(wait);
+            else
+                void start();
+        },
+        check() {
+            if (stopped || paused())
+                return Promise.resolve('stopped');
+            if (running !== null)
+                return running;
+            if (readyAt - deps.now() > 0) {
+                if (cancelTimer === null)
+                    arm(readyAt - deps.now());
+                return Promise.resolve('deferred');
+            }
+            cancel();
+            return start();
+        },
+        stop() {
+            stopped = true;
+            cancel();
+        },
+    };
+}
+//# sourceMappingURL=ledger-reoffer.js.map

package/dist/ledger-reoffer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger-reoffer.js","sourceRoot":"","sources":["../src/ledger-reoffer.ts"],"names":[],"mappings":"AAoBA,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAC7C,qFAAqF;AACrF,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAClD,iIAAiI;AACjI,MAAM,CAAC,MAAM,gCAAgC,GAAG,SAAS,CAAC;AAC1D,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAC/C,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAC9C,MAAM,CAAC,MAAM,0BAA0B,GAAG,SAAS,CAAC;AACpD,6FAA6F;AAC7F,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAC;AA6ClC,oGAAoG;AACpG,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,MAAc;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,wBAAwB,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACzG,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,cAAc,GAAG,CAAC,GAAG,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACrG,MAAM,KAAK,GAAG,CAAC,IAAa,EAAE,GAAW,EAAW,EAAE,CACpD,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAgC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAEzH,MAAM,UAAU,mBAAmB,CAAC,IAAuB;IACzD,IAAI,OAAO,GAAmC,IAAI,CAAC;IACnD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,uEAAuE;IACvE,IAAI,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACvC,IAAI,WAAW,GAAwB,IAAI,CAAC;IAC5C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,8HAA8H;IAC9H,IAAI,WAAW,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAC3C,sDAAsD;IACtD,IAAI,UAAU,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAC1C,0HAA0H;IAC1H,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,0DAA0D;IAC1D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,2DAA2D;IAC3D,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,MAAM,MAAM,GAAG,GAAS,EAAE,GAAG,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,GAAY,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;IACvD,0FAA0F;IAC1F,MAAM,GAAG,GAAG,CAAC,EAAU,EAAQ,EAAE;QAC/B,MAAM,EAAE,CAAC;QACT,IAAI,OAAO;YAAE,OAAO;QACpB,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,WAAW,GAAG,IAAI,CAAC,CAAC,IAAI,OAAO,KAAK,IAAI;YAAE,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAClH,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,OAAuB,EAAkB,EAAE;QAC1D,QAAQ,GAAG,CAAC,CAAC;QACb,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACnC,MAAM,EAAE,CAAC;QACT,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,eAA8B,IAAI,EAAE,KAAK,GAAG,KAAK,EAAkB,EAAE;QACnG,QAAQ,IAAI,CAAC,CAAC;QACd,IAAI,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrD,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,GAAG,IAAI;YAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,0BAA0B,CAAC,CAAC;QAC5G,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAC5B,wGAAwG;QACxG,MAAM,IAAI,GAAG,QAAQ,KAAK,CAAC,IAAI,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,gBAAgB,CAAC,QAAQ,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACrG,IAAI,CAAC,KAAK,IAAI,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,8DAA8D,MAAM,kBAAkB,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAChJ,GAAG,CAAC,IAAI,CAAC,CAAC;QACV,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,cAAc,GAAG,GAAmB,EAAE;QAC1C,IAAI,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,GAAG,CAAC,yHAAyH,CAAC,CAAC;QACnJ,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gCAAgC,CAAC;QAC5D,UAAU,GAAG,KAAK,CAAC;QACnB,QAAQ,GAAG,CAAC,CAAC;QACb,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACnC,MAAM,EAAE,CAAC;QACT,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,KAAK,EAAE,MAAe,EAAsC,EAAE;QACjF,IAAI,CAAC;YAAC,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IACjE,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,EAAE,UAAkB,EAA2B,EAAE;QACjE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,IAAI;YAAE,IAAI,GAAG,GAAG,EAAE,IAAI,GAAG,GAAG,EAAE,IAAI,sBAAsB;gBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnG,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,0GAA0G;QAC1G,MAAM,OAAO,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,GAAG,2BAA2B,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACxG,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,GAAG,sBAAsB,EAAE,OAAO,CAAC,CAAC;QACnH,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YAChB,kHAAkH;YAClH,IAAI,QAAQ,GAAG,CAAC;gBAAE,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;YACnC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpB,UAAU,GAAG,GAAG,CAAC;QACjB,IAAI,MAAwB,CAAC;QAC7B,IAAI,CAAC;YAAC,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAAC,CAAC;QAC3D,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAAC,CAAC;QAClD,IAAI,OAAO;YAAE,OAAO,SAAS,CAAC;QAC9B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;QAC7D,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;YAClC,IAAI,QAAQ;gBAAE,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,yEAAyE;YACzE,UAAU,GAAG,IAAI,CAAC;YAClB,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,cAAc,EAAE,CAAC;QAC5C,IAAI,MAAM,KAAK,GAAG,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;YAC/C,mIAAmI;YACnI,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5D,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO,OAAO,CAAC,YAAY,CAAC,CAAC;YACrH,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAC3C,IAAI,QAAQ;gBAAE,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,OAAO,MAAM,CAAC,sCAAsC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,KAAK,KAAK,iBAAiB,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9C,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,KAAK;gBAAE,IAAI,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;YACxF,OAAO,MAAM,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QACvE,OAAO,MAAM,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,IAA6B,EAAE;QAClD,IAAI,OAAO;YAAE,OAAO,SAAS,CAAC;QAC9B,IAAI,MAAM,EAAE;YAAE,OAAO,SAAS,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,OAAO;YAAE,OAAO,SAAS,CAAC;QAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB;YAAE,OAAO,cAAc,EAAE,CAAC;QAC7D,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,gBAAgB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,8BAA8B;QAC9B,WAAW,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACvC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACxC,MAAM,aAAa,GAAG,UAAU,CAAC;QACjC,UAAU,GAAG,KAAK,CAAC;QACnB,IAAI,QAAQ,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC,YAAY,CAAC,CAAC;QACzE,mHAAmH;QACnH,IAAI,aAAa;YAAE,OAAO,MAAM,CAAC,oDAAoD,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,GAA4B,EAAE;QAC1C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1E,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,OAAO;QACL,gBAAgB;YACd,IAAI,OAAO;gBAAE,OAAO;YACpB,4DAA4D;YAC5D,WAAW,GAAG,MAAM,CAAC,iBAAiB,CAAC;YACvC,IAAI,OAAO,KAAK,IAAI,IAAI,WAAW,KAAK,IAAI;gBAAE,OAAO;YACrD,MAAM,IAAI,GAAG,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAClC,IAAI,IAAI,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC;;gBACnB,KAAK,KAAK,EAAE,CAAC;QACpB,CAAC;QACD,KAAK;YACH,IAAI,OAAO,IAAI,MAAM,EAAE;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAiB,SAAS,CAAC,CAAC;YAC3E,IAAI,OAAO,KAAK,IAAI;gBAAE,OAAO,OAAO,CAAC;YACrC,IAAI,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC7B,IAAI,WAAW,KAAK,IAAI;oBAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACpD,OAAO,OAAO,CAAC,OAAO,CAAiB,UAAU,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,EAAE,CAAC;YACT,OAAO,KAAK,EAAE,CAAC;QACjB,CAAC;QACD,IAAI;YACF,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,EAAE,CAAC;QACX,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/ledger-startup.d.ts

@@ -6,9 +6,22 @@ import type { EndpointPublic } from './security/protocol.js';
 export declare const LEGACY_ACCOUNT_RESET_MESSAGE = "[Bridge] Old account data from a previous ftown version was cleared. Pair this computer again with the link below.";
 export declare const NOT_IN_LEDGER_MESSAGE = "This computer is not in your account's ledger. Run `ftown start --new-identity` to pair it again.";
 export declare const PAIRING_REJECTED_HINT = "Pairing did not complete. Run `ftown start` to try again.";
+export declare const PAIRING_REVOKED_MESSAGE: string;
 export declare const SERVER_LEDGER_MISMATCH_MESSAGE = "[Bridge] The server's account ledger does not list this computer. If it was removed from your account, run `ftown start --new-identity` to pair it again.";
 export declare const UPDATE_RESTART_UNPAIRED_MESSAGE = "[Bridge] An update restart cannot pair this computer. Run `ftown start` to pair it.";
 export declare const UPDATED_TO_LEDGER_MESSAGE = "[Bridge] ftown was updated to the passkey ledger; run `ftown start` to pair this computer.";
+export declare const DO_NOT_RESET_LINE = "[Bridge] Do NOT run --new-identity: this computer may hold the only copy. Open Security in the dashboard to choose a history.";
+export declare const HELD_OFFLINE_LINE = "[Bridge] Starting offline: local sessions keep working, and the relay is retried in the background.";
+export declare const HELD_NO_RELAY_URL_LINE = "[Bridge] No relay URL was saved by an earlier start, so this computer cannot start offline. Run `ftown start` again later.";
+/** What this computer holds that the server lacks (BridgeSecurityService.uniqueHistory), for the held-history notice. */
+export interface HeldHistory {
+    afterRevision: number;
+    records: number;
+    removals: number;
+    passkeys: number;
+}
+/** Printed once when the server refuses the key of a computer that is an active member of its own history (step 5): never reset advice. */
+export declare function heldHistoryNotice(unique: HeldHistory | null): string[];
 /** Only account bridges use the passkey ledger (legacy reset, pairing, ledger replica, relay token by proof). */
 export declare function usesLedger(mode: BridgeMode): boolean;
 export interface IdentityResetDeps {
@@ -65,7 +78,8 @@ export interface AccountStartupDeps {
     /** False during an update restart: it must come back with its existing identity and never pair. */
     allowPairing: boolean;
     /** One pairing attempt (runLedgerPairing) with the unbound identity and the empty store; binds both on success. Throws
-     *  Error('pairing_expired') (its hint already printed) or Error('pairing_rejected'). */
+     *  Error('pairing_expired') (its hint already printed), Error('pairing_revoked') (the account already revokes this bridge id) or
+     *  Error('pairing_rejected'). */
     pair: (identity: LedgerBridgeIdentity, store: BridgeLedgerStore) => Promise<unknown>;
     /** The server's ledger for this account (GET /api/account/ledger?accountId=…, bounded). */
     fetchLedger: (accountId: string) => Promise<unknown>;
@@ -96,23 +110,31 @@ export type RelayStartup = {
     token: string;
     relayUrl: string;
 }
-/** The server is unreachable for now: start with the saved relay URL and keep retrying in the background. */
+/** The server is unreachable for now, or refused a computer that may hold the only copy of its history (`notice`, printed once instead
+ *  of the unreachable line): start with the saved relay URL and keep retrying in the background. */
  | {
     kind: 'offline';
     relayUrl: string;
     reason: string;
+    notice?: string[];
 };
 export declare function offlineWithoutRelayUrlMessage(reason: string): string;
 /**
- * Step 5, the first relay token. A proven revocation (the token hooks offer the server's evidence first) wins over everything; a
- * refusal (401/403) exits; a temporary failure (network, timeout, 5xx, cooldown) starts offline with the saved relay URL, and exits
- * only when there is none. After a successful token the revocation is checked again: the token response's ledger may prove it.
+ * Step 5, the first relay token. A proven revocation (the token hooks offer the server's evidence first) wins over everything. A refusal
+ * (401/403) of a computer that is still an active member of its own history (`held` returns the notice: a divergence with the server, a
+ * server behind us, a failed re-offer, or any refusal without proof of our removal) starts OFFLINE and prints the notice once, never the
+ * reset advice: this computer may hold the only copy. Any other refusal (this computer is not an active member: unpaired/absent) exits
+ * with the reset advice. A temporary failure (network, timeout, 5xx, cooldown) starts offline with the saved relay URL. Without a saved
+ * relay URL there is no offline start: exit. After a successful token the revocation is checked again (the token response's ledger may
+ * prove it).
  */
 export declare function startRelay(input: {
     getToken: () => Promise<string>;
     relayUrl: () => string | null;
     bridgeRevoked: () => boolean;
     apiUrl: string;
+    /** The held-history notice when this computer is an active member of its own history (heldHistoryNotice), else null. */
+    held?: () => string[] | null;
 }): Promise<RelayStartup>;
 export declare function endpointRefusedMessage(reason: string): string;
 export type RegistrationAttempt = {
@@ -133,6 +155,9 @@ export interface EndpointRegistrarDeps {
         cooldownRemainingMs(): number;
     };
     bridgeRevoked: () => boolean;
+    /** This computer is an active member of its own history: a refusal is then not final (it may hold the only copy; the startup notice
+     *  said so): no reset advice, keep retrying with the backoff until the server accepts the key again. */
+    held?: () => boolean;
     log: (line: string) => void;
     /** Returns a cancel function. Defaults to an unref'd setTimeout. */
     schedule?: (run: () => void, ms: number) => () => void;

package/dist/ledger-startup.js

@@ -12,9 +12,23 @@ import { MISSING_RELAY_URL_MESSAGE, isRefusal, relayTokenFailureMessage } from '
 export const LEGACY_ACCOUNT_RESET_MESSAGE = '[Bridge] Old account data from a previous ftown version was cleared. Pair this computer again with the link below.';
 export const NOT_IN_LEDGER_MESSAGE = "This computer is not in your account's ledger. Run `ftown start --new-identity` to pair it again.";
 export const PAIRING_REJECTED_HINT = 'Pairing did not complete. Run `ftown start` to try again.';
+export const PAIRING_REVOKED_MESSAGE = "[Bridge] This computer's id was removed from the account before pairing completed. "
+    + 'Run `ftown start --new-identity` to pair it with a new id.';
 export const SERVER_LEDGER_MISMATCH_MESSAGE = "[Bridge] The server's account ledger does not list this computer. If it was removed from your account, run `ftown start --new-identity` to pair it again.";
 export const UPDATE_RESTART_UNPAIRED_MESSAGE = '[Bridge] An update restart cannot pair this computer. Run `ftown start` to pair it.';
 export const UPDATED_TO_LEDGER_MESSAGE = '[Bridge] ftown was updated to the passkey ledger; run `ftown start` to pair this computer.';
+export const DO_NOT_RESET_LINE = '[Bridge] Do NOT run --new-identity: this computer may hold the only copy. Open Security in the dashboard to choose a history.';
+export const HELD_OFFLINE_LINE = '[Bridge] Starting offline: local sessions keep working, and the relay is retried in the background.';
+export const HELD_NO_RELAY_URL_LINE = '[Bridge] No relay URL was saved by an earlier start, so this computer cannot start offline. Run `ftown start` again later.';
+const plural = (count, word) => `${count} ${word}${count === 1 ? '' : 's'}`;
+/** Printed once when the server refuses the key of a computer that is an active member of its own history (step 5): never reset advice. */
+export function heldHistoryNotice(unique) {
+    const detail = unique === null || unique.records === 0
+        ? 'this computer holds changes the server does not have'
+        : `this computer holds account history the server does not have: ${plural(unique.removals, 'removal')} and ${plural(unique.passkeys, 'passkey')} `
+            + `among ${plural(unique.records, 'change')} after revision ${unique.afterRevision}`;
+    return [`[Bridge] The ftown server refused this computer's key, and ${detail}.`, DO_NOT_RESET_LINE];
+}
 /** Only account bridges use the passkey ledger (legacy reset, pairing, ledger replica, relay token by proof). */
 export function usesLedger(mode) {
     return mode === 'account';
@@ -74,7 +88,7 @@ export async function startAccountIdentity(deps) {
         if (!deps.allowPairing)
             return { kind: 'exit', message: UPDATE_RESTART_UNPAIRED_MESSAGE };
         try {
-            await deps.pair(keys, new BridgeLedgerStore(deps.dataDir));
+            await deps.pair(keys, new BridgeLedgerStore(deps.dataDir, { bridgeId: deps.bridgeId }));
         }
         catch (error) {
             const code = messageOf(error);
@@ -82,13 +96,16 @@ export async function startAccountIdentity(deps) {
                 return { kind: 'exit', message: null };
             if (code === 'pairing_rejected')
                 return { kind: 'exit', message: PAIRING_REJECTED_HINT };
+            // Not a removal of a paired bridge: nothing is reset; the owner picks a new id.
+            if (code === 'pairing_revoked')
+                return { kind: 'exit', message: PAIRING_REVOKED_MESSAGE };
             throw error;
         }
     }
     const identity = await readIdentity(deps.dataDir);
     if (!bound(identity))
         return { kind: 'exit', message: PAIRING_REJECTED_HINT };
-    const store = new BridgeLedgerStore(deps.dataDir, { accountId: identity.accountId });
+    const store = new BridgeLedgerStore(deps.dataDir, { accountId: identity.accountId, bridgeId: deps.bridgeId });
     if (reconciled === 'needs_ledger') {
         try {
             await store.adoptBound(await deps.fetchLedger(identity.accountId));
@@ -99,7 +116,9 @@ export async function startAccountIdentity(deps) {
             return { kind: 'exit', message: ledgerUnavailableMessage(messageOf(error)) };
         }
     }
-    const action = ownStatusAction(await store.ownBridgeStatus(deps.bridgeId, identity.authPublicKey));
+    const action = ownStatusAction(await store.ownBridgeStatus({
+        bridgeId: deps.bridgeId, endpointId: identity.endpoint.id, endpointPublicKey: identity.endpoint.publicKey, authPublicKey: identity.authPublicKey,
+    }));
     if (action === 'revoked_restart')
         return { kind: 'revoked' };
     if (action === 'exit_absent')
@@ -110,9 +129,13 @@ export function offlineWithoutRelayUrlMessage(reason) {
     return `[Bridge] Could not reach the ftown server (${reason}) and no relay URL was saved by an earlier start. Check the connection and run \`ftown start\` again.`;
 }
 /**
- * Step 5, the first relay token. A proven revocation (the token hooks offer the server's evidence first) wins over everything; a
- * refusal (401/403) exits; a temporary failure (network, timeout, 5xx, cooldown) starts offline with the saved relay URL, and exits
- * only when there is none. After a successful token the revocation is checked again: the token response's ledger may prove it.
+ * Step 5, the first relay token. A proven revocation (the token hooks offer the server's evidence first) wins over everything. A refusal
+ * (401/403) of a computer that is still an active member of its own history (`held` returns the notice: a divergence with the server, a
+ * server behind us, a failed re-offer, or any refusal without proof of our removal) starts OFFLINE and prints the notice once, never the
+ * reset advice: this computer may hold the only copy. Any other refusal (this computer is not an active member: unpaired/absent) exits
+ * with the reset advice. A temporary failure (network, timeout, 5xx, cooldown) starts offline with the saved relay URL. Without a saved
+ * relay URL there is no offline start: exit. After a successful token the revocation is checked again (the token response's ledger may
+ * prove it).
  */
 export async function startRelay(input) {
     let token;
@@ -122,8 +145,15 @@ export async function startRelay(input) {
     catch (error) {
         if (input.bridgeRevoked())
             return { kind: 'revoked' };
-        if (isRefusal(error))
-            return { kind: 'exit', message: relayTokenFailureMessage(error, input.apiUrl) };
+        if (isRefusal(error)) {
+            const notice = input.held?.() ?? null;
+            if (notice === null)
+                return { kind: 'exit', message: relayTokenFailureMessage(error, input.apiUrl) };
+            const savedUrl = input.relayUrl();
+            if (savedUrl === null)
+                return { kind: 'exit', message: [...notice, HELD_NO_RELAY_URL_LINE].join('\n') };
+            return { kind: 'offline', relayUrl: savedUrl, reason: messageOf(error), notice: [...notice, HELD_OFFLINE_LINE] };
+        }
         const reason = messageOf(error);
         const relayUrl = input.relayUrl();
         return relayUrl === null ? { kind: 'exit', message: offlineWithoutRelayUrlMessage(reason) } : { kind: 'offline', relayUrl, reason };
@@ -161,7 +191,7 @@ export function createEndpointRegistrar(deps) {
         catch (error) {
             if (stopped)
                 return;
-            if (isRefusal(error)) {
+            if (isRefusal(error) && !deps.held?.()) {
                 // A verified revocation restarts the bridge on its own; anything else needs the owner.
                 if (!deps.bridgeRevoked())
                     deps.log(endpointRefusedMessage(messageOf(error)));
@@ -181,7 +211,7 @@ export function createEndpointRegistrar(deps) {
             catch (error) {
                 if (deps.bridgeRevoked())
                     return { kind: 'revoked' };
-                if (isRefusal(error))
+                if (isRefusal(error) && !deps.held?.())
                     return { kind: 'exit', message: endpointRefusedMessage(messageOf(error)) };
                 deps.log(`[Bridge] Could not register this computer's encrypted endpoint yet (${messageOf(error)}); retrying in the background.`);
                 return { kind: 'retry' };

package/dist/ledger-startup.js.map

@@ -1 +1 @@
-{"version":3,"file":"ledger-startup.js","sourceRoot":"","sources":["../src/ledger-startup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,kBAAkB,EAAE,4BAA4B,EAAsD,MAAM,qBAAqB,CAAC;AAE3I,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,kBAAkB,EAA6B,MAAM,sCAAsC,CAAC;AACxJ,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,yBAAyB,EAA8C,MAAM,mCAAmC,CAAC;AAE/J,OAAO,EAAE,yBAAyB,EAAE,SAAS,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAEnG,MAAM,CAAC,MAAM,4BAA4B,GAAG,oHAAoH,CAAC;AACjK,MAAM,CAAC,MAAM,qBAAqB,GAAG,mGAAmG,CAAC;AACzI,MAAM,CAAC,MAAM,qBAAqB,GAAG,2DAA2D,CAAC;AACjG,MAAM,CAAC,MAAM,8BAA8B,GAAG,2JAA2J,CAAC;AAC1M,MAAM,CAAC,MAAM,+BAA+B,GAAG,qFAAqF,CAAC;AACrI,MAAM,CAAC,MAAM,yBAAyB,GAAG,4FAA4F,CAAC;AAEtI,iHAAiH;AACjH,MAAM,UAAU,UAAU,CAAC,IAAgB;IACzC,OAAO,IAAI,KAAK,SAAS,CAAC;AAC5B,CAAC;AAaD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAuH,EACvH,OAAmC,EAAE;IAErC,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,IAAI,qBAAqB,CAAC;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,IAAI,kBAAkB,CAAC;IAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,4BAA4B,IAAI,4BAA4B,CAAC;IACnF,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,WAAW;YAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;aACjD,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,IAAI,KAAK,CAAC,aAAa;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;YACrF,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YACxC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;AAC9D,CAAC;AAID,+HAA+H;AAC/H,MAAM,UAAU,eAAe,CAAC,GAAoB;IAClD,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IACxC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,iBAAiB,CAAC;IAChD,OAAO,aAAa,CAAC;AACvB,CAAC;AA2BD,MAAM,SAAS,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAErG,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,OAAO,gEAAgE,MAAM,wDAAwD,CAAC;AACxI,CAAC;AAED,SAAS,KAAK,CAAC,QAAqC;IAClD,OAAO,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC;AACxF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAwB;IACjE,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,IAAI,0BAA0B,CAAC;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9F,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,kBAAkB,CAAC;IAE7D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;QAC1F,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAAC,CAAC;QACnE,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,IAAI,KAAK,iBAAiB;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACvE,IAAI,IAAI,KAAK,kBAAkB;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;YACzF,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;IAC9E,MAAM,KAAK,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IACrF,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;QAClC,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QAAC,CAAC;QAC3E,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,6BAA6B;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;YACxJ,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;IACnG,IAAI,MAAM,KAAK,iBAAiB;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7D,IAAI,MAAM,KAAK,aAAa;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACtF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACxD,CAAC;AAUD,MAAM,UAAU,6BAA6B,CAAC,MAAc;IAC1D,OAAO,8CAA8C,MAAM,uGAAuG,CAAC;AACrK,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAEhC;IACC,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QAAC,KAAK,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;IAAC,CAAC;IACvC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,CAAC,aAAa,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACtD,IAAI,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACtG,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAClC,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,6BAA6B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACtI,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;IAClC,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;IACnF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,OAAO,yEAAyE,MAAM,8FAA8F,CAAC;AACvL,CAAC;AA0BD,MAAM,UAAU,uBAAuB,CAAC,IAA2B;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAe,EAAE,EAAU,EAAE,EAAE,GAAG,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7J,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC;IAC5C,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC;IACvC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,MAAM,GAAwB,IAAI,CAAC;IAEvC,MAAM,IAAI,GAAG,GAAS,EAAE;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,KAAK,CAAC,CAAC;QAChE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;QACtC,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,IAAI,IAAI,IAAI,OAAO;YAAE,OAAO;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClD,IAAI,GAAG,IAAI,CAAC;YACZ,IAAI,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrB,uFAAuF;gBACvF,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;oBAAE,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC9E,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO;YACT,CAAC;YACD,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,WAAW,CAAC,KAAK;YACrB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC3B,IAAI,GAAG,IAAI,CAAC;gBACZ,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YAChC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,IAAI,CAAC,aAAa,EAAE;oBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;gBACrD,IAAI,SAAS,CAAC,KAAK,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjG,IAAI,CAAC,GAAG,CAAC,uEAAuE,SAAS,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBAClI,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,iBAAiB;YACf,IAAI,IAAI,IAAI,OAAO,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO;YAC/C,IAAI,EAAE,CAAC;QACT,CAAC;QACD,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI;QACtB,IAAI;YACF,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,EAAE,EAAE,CAAC;YACX,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"ledger-startup.js","sourceRoot":"","sources":["../src/ledger-startup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,kBAAkB,EAAE,4BAA4B,EAAsD,MAAM,qBAAqB,CAAC;AAE3I,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,kBAAkB,EAA6B,MAAM,sCAAsC,CAAC;AACxJ,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,yBAAyB,EAA8C,MAAM,mCAAmC,CAAC;AAE/J,OAAO,EAAE,yBAAyB,EAAE,SAAS,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAEnG,MAAM,CAAC,MAAM,4BAA4B,GAAG,oHAAoH,CAAC;AACjK,MAAM,CAAC,MAAM,qBAAqB,GAAG,mGAAmG,CAAC;AACzI,MAAM,CAAC,MAAM,qBAAqB,GAAG,2DAA2D,CAAC;AACjG,MAAM,CAAC,MAAM,uBAAuB,GAAG,qFAAqF;MACxH,4DAA4D,CAAC;AACjE,MAAM,CAAC,MAAM,8BAA8B,GAAG,2JAA2J,CAAC;AAC1M,MAAM,CAAC,MAAM,+BAA+B,GAAG,qFAAqF,CAAC;AACrI,MAAM,CAAC,MAAM,yBAAyB,GAAG,4FAA4F,CAAC;AACtI,MAAM,CAAC,MAAM,iBAAiB,GAAG,+HAA+H,CAAC;AACjK,MAAM,CAAC,MAAM,iBAAiB,GAAG,qGAAqG,CAAC;AACvI,MAAM,CAAC,MAAM,sBAAsB,GAAG,4HAA4H,CAAC;AAKnK,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,IAAY,EAAU,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AACpG,2IAA2I;AAC3I,MAAM,UAAU,iBAAiB,CAAC,MAA0B;IAC1D,MAAM,MAAM,GAAG,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;QACpD,CAAC,CAAC,sDAAsD;QACxD,CAAC,CAAC,iEAAiE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG;cAC9I,SAAS,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,mBAAmB,MAAM,CAAC,aAAa,EAAE,CAAC;IACzF,OAAO,CAAC,8DAA8D,MAAM,GAAG,EAAE,iBAAiB,CAAC,CAAC;AACtG,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,UAAU,CAAC,IAAgB;IACzC,OAAO,IAAI,KAAK,SAAS,CAAC;AAC5B,CAAC;AAaD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAuH,EACvH,OAAmC,EAAE;IAErC,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,IAAI,qBAAqB,CAAC;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,IAAI,kBAAkB,CAAC;IAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,4BAA4B,IAAI,4BAA4B,CAAC;IACnF,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,WAAW;YAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;aACjD,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,IAAI,KAAK,CAAC,aAAa;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;YACrF,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YACxC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;AAC9D,CAAC;AAID,+HAA+H;AAC/H,MAAM,UAAU,eAAe,CAAC,GAAoB;IAClD,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IACxC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,iBAAiB,CAAC;IAChD,OAAO,aAAa,CAAC;AACvB,CAAC;AA4BD,MAAM,SAAS,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAErG,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,OAAO,gEAAgE,MAAM,wDAAwD,CAAC;AACxI,CAAC;AAED,SAAS,KAAK,CAAC,QAAqC;IAClD,OAAO,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC;AACxF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAwB;IACjE,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,IAAI,0BAA0B,CAAC;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9F,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,kBAAkB,CAAC;IAE7D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;QAC1F,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QAChG,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,IAAI,KAAK,iBAAiB;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACvE,IAAI,IAAI,KAAK,kBAAkB;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;YACzF,gFAAgF;YAChF,IAAI,IAAI,KAAK,iBAAiB;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;YAC1F,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;IAC9E,MAAM,KAAK,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9G,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;QAClC,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QAAC,CAAC;QAC3E,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,6BAA6B;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;YACxJ,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,KAAK,CAAC,eAAe,CAAC;QACzD,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa;KACjJ,CAAC,CAAC,CAAC;IACJ,IAAI,MAAM,KAAK,iBAAiB;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7D,IAAI,MAAM,KAAK,aAAa;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACtF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACxD,CAAC;AAWD,MAAM,UAAU,6BAA6B,CAAC,MAAc;IAC1D,OAAO,8CAA8C,MAAM,uGAAuG,CAAC;AACrK,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAIhC;IACC,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QAAC,KAAK,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;IAAC,CAAC;IACvC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,CAAC,aAAa,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACtD,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC;YACtC,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACrG,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YAClC,IAAI,QAAQ,KAAK,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,EAAE,sBAAsB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxG,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACnH,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAClC,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,6BAA6B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACtI,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;IAClC,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;IACnF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,OAAO,yEAAyE,MAAM,8FAA8F,CAAC;AACvL,CAAC;AA6BD,MAAM,UAAU,uBAAuB,CAAC,IAA2B;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAe,EAAE,EAAU,EAAE,EAAE,GAAG,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7J,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC;IAC5C,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC;IACvC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,MAAM,GAAwB,IAAI,CAAC;IAEvC,MAAM,IAAI,GAAG,GAAS,EAAE;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,KAAK,CAAC,CAAC;QAChE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;QACtC,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,IAAI,IAAI,IAAI,OAAO;YAAE,OAAO;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClD,IAAI,GAAG,IAAI,CAAC;YACZ,IAAI,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;gBACvC,uFAAuF;gBACvF,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;oBAAE,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC9E,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO;YACT,CAAC;YACD,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,WAAW,CAAC,KAAK;YACrB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC3B,IAAI,GAAG,IAAI,CAAC;gBACZ,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YAChC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,IAAI,CAAC,aAAa,EAAE;oBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;gBACrD,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE;oBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACnH,IAAI,CAAC,GAAG,CAAC,uEAAuE,SAAS,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBAClI,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,iBAAiB;YACf,IAAI,IAAI,IAAI,OAAO,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO;YAC/C,IAAI,EAAE,CAAC;QACT,CAAC;QACD,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI;QACtB,IAAI;YACF,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,EAAE,EAAE,CAAC;YACX,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/local-api-server.d.ts

@@ -73,6 +73,9 @@ export declare class LocalApiServer extends EventEmitter<HookServerEvents> {
     private localEventBytes;
     private readonly localEventWaiters;
     setSecurity(security: BridgeSecurityService, info: BridgeSecurityInfo, command: (message: VerifiedApplication) => Promise<ApplicationJson>, observer?: SecureExecutionObserver): void;
+    /** GET /api/security/info: the static info, plus in account mode `ledger: { divergence, serverBehind, removedOnOtherHistory }` (CONTRACT §5: a computer
+     *  holding a different account history is shown with a warning). */
+    private securityInfoPayload;
     recordPublication(channel: string, data: unknown): void;
     dispatchSecure(message: VerifiedApplication, clientGone?: AbortSignal): Promise<ApplicationJson>;
     private port;

package/dist/local-api-server.js

@@ -137,6 +137,15 @@ export class LocalApiServer extends EventEmitter {
         this.secureCommand = command;
         this.secureObserver = observer;
     }
+    /** GET /api/security/info: the static info, plus in account mode `ledger: { divergence, serverBehind, removedOnOtherHistory }` (CONTRACT §5: a computer
+     *  holding a different account history is shown with a warning). */
+    securityInfoPayload() {
+        const info = this.securityInfo;
+        if (!this.security?.options.ledger)
+            return info;
+        const status = this.security.ledgerStatus();
+        return { ...info, ledger: { divergence: status.divergence, serverBehind: status.serverBehind, removedOnOtherHistory: status.removedOnOtherHistory } };
+    }
     recordPublication(channel, data) {
         const item = { channel, data: applicationJson(data), cursor: ++this.localEventSequence };
         this.localEvents.push(item);
@@ -459,7 +468,7 @@ export class LocalApiServer extends EventEmitter {
                 return;
             }
             if (path === '/api/security/info' && req.method === 'GET') {
-                jsonResponse(res, 200, this.securityInfo);
+                jsonResponse(res, 200, this.securityInfoPayload());
                 return;
             }
             if (req.method === 'POST' && (path === '/api/security/envelope' || path === '/api/security/events')) {
@@ -830,11 +839,42 @@ export class LocalApiServer extends EventEmitter {
                 return;
             }
             const body = await parseBody(req);
-            if (req.method === 'PUT' ? Object.keys(body).length !== 1 || typeof body.path !== 'string' : Object.keys(body).length !== 0) {
+            if (req.method === 'PUT') {
+                if (Object.keys(body).some((key) => key !== 'paths' && key !== 'mode') || !('paths' in body) || !Array.isArray(body.paths) || body.paths.length < 1 || body.paths.length > 12 || body.paths.some((entry) => typeof entry !== 'string' || entry.length === 0)) {
+                    jsonResponse(res, 400, { error: 'Invalid preview request' });
+                    return;
+                }
+                const mode = body.mode;
+                if (mode !== undefined && mode !== 'replace' && mode !== 'add') {
+                    jsonResponse(res, 400, { error: 'Invalid preview request' });
+                    return;
+                }
+                const result = mode === 'add' ? await controller.addPreview(sessionPreviewMatch[1], body.paths) : await controller.setPreview(sessionPreviewMatch[1], body.paths);
+                if (!result.ok) {
+                    jsonResponse(res, result.code === 'not_found' ? 404 : result.code === 'too_large' ? 413 : 400, { error: result.message });
+                    return;
+                }
+                jsonResponse(res, 200, { session: toWireSession(result.session) });
+                return;
+            }
+            if (Object.keys(body).some((key) => key !== 'names')) {
+                jsonResponse(res, 400, { error: 'Invalid preview request' });
+                return;
+            }
+            if (body.names === undefined || (Array.isArray(body.names) && body.names.length === 0)) {
+                const result = await controller.clearPreview(sessionPreviewMatch[1]);
+                if (!result.ok) {
+                    jsonResponse(res, result.code === 'not_found' ? 404 : 400, { error: result.message });
+                    return;
+                }
+                jsonResponse(res, 200, { session: toWireSession(result.session) });
+                return;
+            }
+            if (!Array.isArray(body.names) || body.names.some((entry) => typeof entry !== 'string' || entry.length === 0)) {
                 jsonResponse(res, 400, { error: 'Invalid preview request' });
                 return;
             }
-            const result = req.method === 'PUT' ? await controller.setPreview(sessionPreviewMatch[1], body.path) : await controller.clearPreview(sessionPreviewMatch[1]);
+            const result = await controller.removePreview(sessionPreviewMatch[1], body.names);
             if (!result.ok) {
                 jsonResponse(res, result.code === 'not_found' ? 404 : result.code === 'too_large' ? 413 : 400, { error: result.message });
                 return;
@@ -895,6 +935,7 @@ export class LocalApiServer extends EventEmitter {
                 return;
             }
             await controller.remove(sessionId);
+            this.mail.markSessionEnded(sessionId);
             jsonResponse(res, 200, { removed: true, sessionId });
             return;
         }
@@ -1357,6 +1398,18 @@ export class LocalApiServer extends EventEmitter {
                 }
                 return;
             }
+            if (payload.hook_event_name === 'FtownWakeSubmitted') {
+                // Opencode announces the wake before submitting it (same 200 either way).
+                // Record only: never forwarded to the dashboard, never attention.
+                const submittedId = typeof payload.ftown_session_id === 'string' ? payload.ftown_session_id : undefined;
+                const submittedSource = typeof payload.ftown_session_source === 'string' ? payload.ftown_session_source : undefined;
+                if (submittedId && submittedSource !== 'workspace' && /^[a-zA-Z0-9_-]+$/.test(submittedId)
+                    && await this.store?.loadSession(submittedId)) {
+                    this.mail.notePluginHandoff(submittedId);
+                }
+                jsonResponse(res, 200, { ok: true });
+                return;
+            }
             const hookEventName = typeof payload.hook_event_name === 'string' ? payload.hook_event_name : undefined;
             let ftownSessionId = typeof payload.ftown_session_id === 'string' ? payload.ftown_session_id : undefined;
             let source = typeof payload.ftown_session_source === 'string' ? payload.ftown_session_source : undefined;
@@ -1369,22 +1422,31 @@ export class LocalApiServer extends EventEmitter {
                 jsonResponse(res, 200, { ok: true });
                 return;
             }
-            const { ftown_session_id: _, ftown_session_source: __, attentionId: _attentionId, attentionSequence: _attentionSequence, attentionCreatedAt: _attentionCreatedAt, ...rest } = payload;
+            const { ftown_session_id: _, ftown_session_source: __, attentionId: _attentionId, attentionSequence: _attentionSequence, attentionCreatedAt: _attentionCreatedAt, ...restWithInjected } = payload;
+            // Never trust a harness-supplied injected flag.
+            const { injected: _incomingInjected, ...rest } = restWithInjected;
+            const isPromptSubmit = hookEventName === 'UserPromptSubmit' || hookEventName === 'beforeSubmitPrompt';
+            const injected = isPromptSubmit && this.mail.isInjectedPrompt(ftownSessionId, rest);
             let committedAttention = undefined;
             // Workspace fallback can identify a foreign agent in the same directory.
             // Only known explicit/native-attributed sessions may produce authoritative records.
             if (this.attention && source !== 'workspace' && /^[a-zA-Z0-9_-]+$/.test(ftownSessionId) && await this.store?.loadSession(ftownSessionId)) {
-                committedAttention = await this.attention.record(ftownSessionId, hookEventName, rest);
+                committedAttention = await this.attention.record(ftownSessionId, hookEventName, rest, isPromptSubmit ? { promptOrigin: injected ? 'injected' : 'human' } : undefined);
             }
             if (hookEventName === 'UserPromptSubmit' || hookEventName === 'PreToolUse' || hookEventName === 'PostToolUse')
                 this.mail.markAgentBusy(ftownSessionId);
-            else if (hookEventName === 'Stop' || hookEventName === 'SessionEnd')
+            else if (hookEventName === 'Stop')
                 this.mail.markAgentIdle(ftownSessionId);
+            else if (hookEventName === 'SessionEnd') {
+                this.mail.markAgentIdle(ftownSessionId);
+                this.mail.markSessionEnded(ftownSessionId);
+            }
             const conversationId = payload.conversation_id;
             if (typeof conversationId === 'string' && conversationId && source !== 'workspace')
                 registerSessionConversation(ftownSessionId, conversationId);
             const hookEvent = { sessionId: ftownSessionId, eventName: hookEventName, data: {
                     ...rest,
+                    ...(injected ? { injected: true } : {}),
                     ...(committedAttention ? { attentionId: committedAttention.id, attentionSequence: committedAttention.sequence, attentionCreatedAt: committedAttention.createdAt } : {}),
                 }, source };
             // Persistence is complete before listeners can publish and before HTTP success.