instar 0.28.76 → 0.28.78

package/dist/threadline/SessionLifecycle.js.map

@@ -1 +1 @@
-{"version":3,"file":"SessionLifecycle.js","sourceRoot":"","sources":["../../src/threadline/SessionLifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA6D7B,wEAAwE;AAExE,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AACzD,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW;AACjE,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAEjE,wEAAwE;AAExE,SAAS,WAAW,CAAC,QAAgB,EAAE,IAAY;IACjD,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACxF,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wCAAwC;QACxC,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;QACtE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,wEAAwE;AAExE,MAAM,OAAO,gBAAgB;IACnB,QAAQ,GAA8B,IAAI,GAAG,EAAE,CAAC;IACvC,QAAQ,CAAS;IACjB,SAAS,CAAS;IAClB,SAAS,CAAS;IAClB,WAAW,CAAS;IACpB,cAAc,CAAS;IACvB,YAAY,CAAS;IACrB,SAAS,CAAwD;IACjE,aAAa,CAA8D;IAE5F,YAAY,MAA8B;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACrD,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACxD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACxD,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,qBAAqB,CAAC;QAC/D,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,wBAAwB,CAAC;QACxE,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,sBAAsB,CAAC;QAClE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,QAAgB,EAAE,aAAqB,EAAE,WAAoB;QACpE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE7C,iCAAiC;QACjC,IAAI,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5C,QAAQ,CAAC,cAAc,GAAG,GAAG,CAAC;YAC9B,IAAI,WAAW;gBAAE,QAAQ,CAAC,WAAW,GAAG,WAAW,CAAC;YACpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAC/B,CAAC;QAED,qBAAqB;QACrB,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAEhD,IAAI,WAAW,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAClC,wCAAwC;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC3C,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAChD,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO;gBACL,WAAW,EAAE,KAAK;gBAClB,MAAM,EAAE,6BAA6B;gBACrC,iBAAiB,EAAE,EAAE;aACtB,CAAC;QACJ,CAAC;QAED,oCAAoC;QACpC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC;YACjC,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC;YAC1B,QAAQ,CAAC,cAAc,GAAG,GAAG,CAAC;YAC9B,QAAQ,CAAC,cAAc,GAAG,GAAG,CAAC;YAC9B,IAAI,WAAW;gBAAE,QAAQ,CAAC,WAAW,GAAG,WAAW,CAAC;YACpD,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAiB;gBAC1B,QAAQ;gBACR,aAAa;gBACb,KAAK,EAAE,QAAQ;gBACf,SAAS,EAAE,GAAG;gBACd,cAAc,EAAE,GAAG;gBACnB,cAAc,EAAE,GAAG;gBACnB,WAAW;gBACX,YAAY,EAAE,CAAC;aAChB,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAgB;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAChD,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,QAAgB;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,YAAY,EAAE,CAAC;YACrB,KAAK,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAChD,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,QAAgB;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,aAAqB;QAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;aACtC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,aAAa,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,MAAM,KAAK,GAAiB,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACxF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,QAAgB,EAAE,QAAsB;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAEzB,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;QAC9B,IAAI,SAAS,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAExC,6BAA6B;QAC7B,MAAM,gBAAgB,GAAyC;YAC7D,MAAM,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC;YACzC,MAAM,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC;YACzC,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;YAC/B,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,kDAAkD;SACxE,CAAC;QAEF,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC;QACvB,KAAK,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEhD,gDAAgD;QAChD,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACtD,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC;QAChC,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAEnD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC;YAC9D,MAAM,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC;YAElC,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,KAAK,QAAQ;oBACX,IAAI,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;wBAC/B,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;wBAC/C,WAAW,EAAE,CAAC;oBAChB,CAAC;oBACD,MAAM;gBAER,KAAK,QAAQ;oBACX,IAAI,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;wBAClC,4CAA4C;wBAC5C,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;4BACnB,IAAI,CAAC;gCACH,KAAK,CAAC,cAAc,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;4BACrD,CAAC;4BAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;wBAC3C,CAAC;wBACD,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;wBACjD,WAAW,EAAE,CAAC;oBAChB,CAAC;oBACD,MAAM;gBAER,KAAK,UAAU;oBACb,IAAI,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;wBAChC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;wBAChD,WAAW,EAAE,CAAC;oBAChB,CAAC;oBACD,MAAM;YACV,CAAC;QACH,CAAC;QAED,2DAA2D;QAC3D,MAAM,MAAM,GAAG,OAAO;aACnB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC;aACjC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAE/F,OAAO,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAG,CAAC;YAC/B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAClD,WAAW,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,WAAW,GAAG,CAAC;YAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACpC,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,QAAgB;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,OAAO;QACL,MAAM,IAAI,GAAiC,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxC,IAAI,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;gBAChE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACtB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,KAAqB,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IAC1C,CAAC;IAED,oEAAoE;IAE5D,YAAY,CAAC,KAAmB;QACtC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;gBAAE,KAAK,EAAE,CAAC;QACrC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,gBAAgB,CAAC,KAAmB;QAC1C,IAAI,MAAM,GAAwB,IAAI,CAAC;QACvC,IAAI,UAAU,GAAG,QAAQ,CAAC;QAC1B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC;gBACtD,IAAI,IAAI,GAAG,UAAU,EAAE,CAAC;oBACtB,UAAU,GAAG,IAAI,CAAC;oBAClB,MAAM,GAAG,KAAK,CAAC;gBACjB,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}
+{"version":3,"file":"SessionLifecycle.js","sourceRoot":"","sources":["../../src/threadline/SessionLifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AA6D3D,wEAAwE;AAExE,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AACzD,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW;AACjE,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAEjE,wEAAwE;AAExE,SAAS,WAAW,CAAC,QAAgB,EAAE,IAAY;IACjD,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACxF,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,cAAc,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,uCAAuC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;QAC9I,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,wEAAwE;AAExE,MAAM,OAAO,gBAAgB;IACnB,QAAQ,GAA8B,IAAI,GAAG,EAAE,CAAC;IACvC,QAAQ,CAAS;IACjB,SAAS,CAAS;IAClB,SAAS,CAAS;IAClB,WAAW,CAAS;IACpB,cAAc,CAAS;IACvB,YAAY,CAAS;IACrB,SAAS,CAAwD;IACjE,aAAa,CAA8D;IAE5F,YAAY,MAA8B;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACrD,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACxD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACxD,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,qBAAqB,CAAC;QAC/D,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,wBAAwB,CAAC;QACxE,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,sBAAsB,CAAC;QAClE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,QAAgB,EAAE,aAAqB,EAAE,WAAoB;QACpE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE7C,iCAAiC;QACjC,IAAI,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5C,QAAQ,CAAC,cAAc,GAAG,GAAG,CAAC;YAC9B,IAAI,WAAW;gBAAE,QAAQ,CAAC,WAAW,GAAG,WAAW,CAAC;YACpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAC/B,CAAC;QAED,qBAAqB;QACrB,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAEhD,IAAI,WAAW,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAClC,wCAAwC;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC3C,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAChD,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO;gBACL,WAAW,EAAE,KAAK;gBAClB,MAAM,EAAE,6BAA6B;gBACrC,iBAAiB,EAAE,EAAE;aACtB,CAAC;QACJ,CAAC;QAED,oCAAoC;QACpC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC;YACjC,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC;YAC1B,QAAQ,CAAC,cAAc,GAAG,GAAG,CAAC;YAC9B,QAAQ,CAAC,cAAc,GAAG,GAAG,CAAC;YAC9B,IAAI,WAAW;gBAAE,QAAQ,CAAC,WAAW,GAAG,WAAW,CAAC;YACpD,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAiB;gBAC1B,QAAQ;gBACR,aAAa;gBACb,KAAK,EAAE,QAAQ;gBACf,SAAS,EAAE,GAAG;gBACd,cAAc,EAAE,GAAG;gBACnB,cAAc,EAAE,GAAG;gBACnB,WAAW;gBACX,YAAY,EAAE,CAAC;aAChB,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAgB;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAChD,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,QAAgB;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,YAAY,EAAE,CAAC;YACrB,KAAK,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAChD,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,QAAgB;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,aAAqB;QAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;aACtC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,aAAa,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,MAAM,KAAK,GAAiB,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACxF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,QAAgB,EAAE,QAAsB;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAEzB,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;QAC9B,IAAI,SAAS,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAExC,6BAA6B;QAC7B,MAAM,gBAAgB,GAAyC;YAC7D,MAAM,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC;YACzC,MAAM,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC;YACzC,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;YAC/B,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,kDAAkD;SACxE,CAAC;QAEF,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC;QACvB,KAAK,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEhD,gDAAgD;QAChD,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACtD,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC;QAChC,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAEnD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC;YAC9D,MAAM,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC;YAElC,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,KAAK,QAAQ;oBACX,IAAI,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;wBAC/B,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;wBAC/C,WAAW,EAAE,CAAC;oBAChB,CAAC;oBACD,MAAM;gBAER,KAAK,QAAQ;oBACX,IAAI,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;wBAClC,4CAA4C;wBAC5C,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;4BACnB,IAAI,CAAC;gCACH,KAAK,CAAC,cAAc,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;4BACrD,CAAC;4BAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;wBAC3C,CAAC;wBACD,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;wBACjD,WAAW,EAAE,CAAC;oBAChB,CAAC;oBACD,MAAM;gBAER,KAAK,UAAU;oBACb,IAAI,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;wBAChC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;wBAChD,WAAW,EAAE,CAAC;oBAChB,CAAC;oBACD,MAAM;YACV,CAAC;QACH,CAAC;QAED,2DAA2D;QAC3D,MAAM,MAAM,GAAG,OAAO;aACnB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC;aACjC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAE/F,OAAO,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAG,CAAC;YAC/B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAClD,WAAW,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,WAAW,GAAG,CAAC;YAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACpC,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,QAAgB;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,OAAO;QACL,MAAM,IAAI,GAAiC,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxC,IAAI,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;gBAChE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACtB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,KAAqB,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IAC1C,CAAC;IAED,oEAAoE;IAE5D,YAAY,CAAC,KAAmB;QACtC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;gBAAE,KAAK,EAAE,CAAC;QACrC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,gBAAgB,CAAC,KAAmB;QAC1C,IAAI,MAAM,GAAwB,IAAI,CAAC;QACvC,IAAI,UAAU,GAAG,QAAQ,CAAC;QAC1B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC;gBACtD,IAAI,IAAI,GAAG,UAAU,EAAE,CAAC;oBACtB,UAAU,GAAG,IAAI,CAAC;oBAClB,MAAM,GAAG,KAAK,CAAC;gBACjB,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/threadline/SpawnLedger.d.ts

@@ -0,0 +1,94 @@
+/**
+ * SpawnLedger — SQLite-backed compare-and-swap ledger for relay-spawned sessions.
+ *
+ * Implements Component A of the Threadline Relay-Spawn Ghost-Reply
+ * Containment Spec. The ledger is the spawn-creation step itself, not a
+ * post-hoc check: tryReserve() atomically claims an eventId or returns null
+ * if another spawn already claimed it. This is the idempotency primitive
+ * that makes "Spawned session for X (twice)" structurally impossible.
+ *
+ * Per spec §Component A:
+ *  - Backed by SQLite (WAL mode, flock-coordinated for second-instar-on-host)
+ *  - Per-spawn HMAC nonce generated here, never written to a path the
+ *    spawned session can read after launch (handed to the session via FD-3
+ *    by SpawnNonce.ts).
+ *  - Per-peer rolling rate cap (1000 spawns / 24h) enforced on tryReserve
+ *  - Global hard cap of 100k rows; prune by TTL (30d) via a background job.
+ *
+ * Authority classification (per docs/signal-vs-authority.md): structural
+ * idempotency-key dedup at the transport layer. Permitted authority — not
+ * a judgment call, mechanics.
+ */
+export type SpawnStatus = 'spawning' | 'verified' | 'failed' | 'completed';
+export interface SpawnLedgerRow {
+    eventId: string;
+    peerId: string;
+    spawnNonce: Buffer;
+    spawnedAt: number;
+    status: SpawnStatus;
+    terminalAt: number | null;
+    failureReason: string | null;
+}
+export interface ReserveResult {
+    reserved: true;
+    spawnNonce: Buffer;
+    row: SpawnLedgerRow;
+}
+export interface ReserveCollision {
+    reserved: false;
+    reason: 'duplicate-event' | 'peer-rate-limit' | 'ledger-full';
+    existing?: SpawnLedgerRow;
+}
+export type ReserveOutcome = ReserveResult | ReserveCollision;
+export interface SpawnLedgerOptions {
+    /** Maximum spawns per peer in the rolling window. Default 1000. */
+    perPeerCap?: number;
+    /** Rolling window in ms for the per-peer cap. Default 24h. */
+    perPeerWindowMs?: number;
+    /** Hard cap on total rows. Default 100_000. */
+    globalCap?: number;
+}
+export declare class SpawnLedger {
+    private db;
+    private opts;
+    constructor(dbPath: string, opts?: SpawnLedgerOptions);
+    private applySchema;
+    /**
+     * Atomically reserve a spawn slot for `eventId`. Returns the spawn nonce
+     * the caller must hand to the spawned session via FD-3, or a collision
+     * with the reason.
+     *
+     * This is the single point where a spawn is decided. If two relay
+     * threads race on the same eventId, exactly one tryReserve() returns
+     * {reserved: true}; the other gets {reserved: false, reason: 'duplicate-event'}.
+     */
+    tryReserve(eventId: string, peerId: string, now?: number): ReserveOutcome;
+    /**
+     * Mark a reserved spawn as having moved to a terminal state. Verified =
+     * heartbeat HMAC validated. Failed = watchdog signal triggered. Completed
+     * = session exited cleanly.
+     */
+    markStatus(eventId: string, status: Exclude<SpawnStatus, 'spawning'>, failureReason?: string | null, now?: number): boolean;
+    get(eventId: string): SpawnLedgerRow | null;
+    /**
+     * Verify a heartbeat HMAC against the stored spawn nonce.
+     * Returns true if valid; false if no row or mismatch.
+     */
+    verifyHeartbeatHmac(eventId: string, payload: string, presentedHmac: string): boolean;
+    /**
+     * Prune rows older than `olderThanMs` AND in a terminal state.
+     * Spawning rows are NEVER pruned (they may still be in flight).
+     * Returns count of rows removed.
+     */
+    pruneTerminal(olderThanMs: number, now?: number): number;
+    /**
+     * List ALL rows currently in 'spawning' state, regardless of age.
+     * Used by HeartbeatWatchdog which applies its own grace-window filter.
+     */
+    listSpawning(): SpawnLedgerRow[];
+    /** Sweep stale 'spawning' rows (heartbeat never confirmed, no terminal mark). */
+    sweepStaleSpawning(staleAfterMs: number, now?: number): SpawnLedgerRow[];
+    count(): number;
+    close(): void;
+}
+//# sourceMappingURL=SpawnLedger.d.ts.map

package/dist/threadline/SpawnLedger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SpawnLedger.d.ts","sourceRoot":"","sources":["../../src/threadline/SpawnLedger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AASH,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE3E,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,IAAI,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,cAAc,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,KAAK,CAAC;IAChB,MAAM,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,aAAa,CAAC;IAC9D,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,gBAAgB,CAAC;AAE9D,MAAM,WAAW,kBAAkB;IACjC,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAUD,qBAAa,WAAW;IACtB,OAAO,CAAC,EAAE,CAAoB;IAC9B,OAAO,CAAC,IAAI,CAA+B;gBAE/B,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,kBAAuB;IAUzD,OAAO,CAAC,WAAW;IAkBnB;;;;;;;;OAQG;IACH,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,cAAc;IAmD7E;;;;OAIG;IACH,UAAU,CACR,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,EACxC,aAAa,GAAE,MAAM,GAAG,IAAW,EACnC,GAAG,SAAa,GACf,OAAO;IAUV,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAO3C;;;OAGG;IACH,mBAAmB,CACjB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,GACpB,OAAO;IAcV;;;;OAIG;IACH,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,MAAM;IAa5D;;;OAGG;IACH,YAAY,IAAI,cAAc,EAAE;IAMhC,iFAAiF;IACjF,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,cAAc,EAAE;IAW5E,KAAK,IAAI,MAAM;IAIf,KAAK,IAAI,IAAI;CAQd"}

package/dist/threadline/SpawnLedger.js

@@ -0,0 +1,194 @@
+/**
+ * SpawnLedger — SQLite-backed compare-and-swap ledger for relay-spawned sessions.
+ *
+ * Implements Component A of the Threadline Relay-Spawn Ghost-Reply
+ * Containment Spec. The ledger is the spawn-creation step itself, not a
+ * post-hoc check: tryReserve() atomically claims an eventId or returns null
+ * if another spawn already claimed it. This is the idempotency primitive
+ * that makes "Spawned session for X (twice)" structurally impossible.
+ *
+ * Per spec §Component A:
+ *  - Backed by SQLite (WAL mode, flock-coordinated for second-instar-on-host)
+ *  - Per-spawn HMAC nonce generated here, never written to a path the
+ *    spawned session can read after launch (handed to the session via FD-3
+ *    by SpawnNonce.ts).
+ *  - Per-peer rolling rate cap (1000 spawns / 24h) enforced on tryReserve
+ *  - Global hard cap of 100k rows; prune by TTL (30d) via a background job.
+ *
+ * Authority classification (per docs/signal-vs-authority.md): structural
+ * idempotency-key dedup at the transport layer. Permitted authority — not
+ * a judgment call, mechanics.
+ */
+import Database from 'better-sqlite3';
+import crypto from 'node:crypto';
+import path from 'node:path';
+import fs from 'node:fs';
+const DEFAULTS = {
+    perPeerCap: 1000,
+    perPeerWindowMs: 24 * 60 * 60 * 1000,
+    globalCap: 100_000,
+};
+// ── Implementation ───────────────────────────────────────────────────
+export class SpawnLedger {
+    db;
+    opts;
+    constructor(dbPath, opts = {}) {
+        fs.mkdirSync(path.dirname(dbPath), { recursive: true });
+        this.db = new Database(dbPath);
+        this.db.pragma('journal_mode = WAL');
+        this.db.pragma('synchronous = NORMAL');
+        this.db.pragma('foreign_keys = ON');
+        this.opts = { ...DEFAULTS, ...opts };
+        this.applySchema();
+    }
+    applySchema() {
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS spawn_ledger (
+        eventId TEXT PRIMARY KEY,
+        peerId TEXT NOT NULL,
+        spawnNonce BLOB NOT NULL,
+        spawnedAt INTEGER NOT NULL,
+        status TEXT NOT NULL CHECK (status IN ('spawning','verified','failed','completed')),
+        terminalAt INTEGER,
+        failureReason TEXT
+      );
+      CREATE INDEX IF NOT EXISTS idx_spawn_ledger_peer_time
+        ON spawn_ledger (peerId, spawnedAt);
+      CREATE INDEX IF NOT EXISTS idx_spawn_ledger_status_time
+        ON spawn_ledger (status, spawnedAt);
+    `);
+    }
+    /**
+     * Atomically reserve a spawn slot for `eventId`. Returns the spawn nonce
+     * the caller must hand to the spawned session via FD-3, or a collision
+     * with the reason.
+     *
+     * This is the single point where a spawn is decided. If two relay
+     * threads race on the same eventId, exactly one tryReserve() returns
+     * {reserved: true}; the other gets {reserved: false, reason: 'duplicate-event'}.
+     */
+    tryReserve(eventId, peerId, now = Date.now()) {
+        if (!eventId || !peerId) {
+            throw new Error('SpawnLedger.tryReserve requires eventId and peerId');
+        }
+        // Global cap check (cheap COUNT — index on status covers it).
+        const total = this.db
+            .prepare('SELECT COUNT(*) AS n FROM spawn_ledger')
+            .get();
+        if (total.n >= this.opts.globalCap) {
+            return { reserved: false, reason: 'ledger-full' };
+        }
+        // Per-peer rolling rate cap.
+        const windowStart = now - this.opts.perPeerWindowMs;
+        const peerRecent = this.db
+            .prepare('SELECT COUNT(*) AS n FROM spawn_ledger WHERE peerId = ? AND spawnedAt >= ?')
+            .get(peerId, windowStart);
+        if (peerRecent.n >= this.opts.perPeerCap) {
+            return { reserved: false, reason: 'peer-rate-limit' };
+        }
+        const spawnNonce = crypto.randomBytes(32);
+        const insert = this.db.prepare(`INSERT INTO spawn_ledger (eventId, peerId, spawnNonce, spawnedAt, status, terminalAt, failureReason)
+       VALUES (?, ?, ?, ?, 'spawning', NULL, NULL)`);
+        try {
+            insert.run(eventId, peerId, spawnNonce, now);
+        }
+        catch (err) {
+            // SQLite UNIQUE constraint on PRIMARY KEY → another spawn won the race.
+            if (err instanceof Error &&
+                /UNIQUE|PRIMARY KEY/.test(err.message)) {
+                const existing = this.get(eventId);
+                return {
+                    reserved: false,
+                    reason: 'duplicate-event',
+                    existing: existing ?? undefined,
+                };
+            }
+            throw err;
+        }
+        const row = this.get(eventId);
+        return { reserved: true, spawnNonce, row };
+    }
+    /**
+     * Mark a reserved spawn as having moved to a terminal state. Verified =
+     * heartbeat HMAC validated. Failed = watchdog signal triggered. Completed
+     * = session exited cleanly.
+     */
+    markStatus(eventId, status, failureReason = null, now = Date.now()) {
+        const stmt = this.db.prepare(`UPDATE spawn_ledger
+         SET status = ?, terminalAt = ?, failureReason = ?
+       WHERE eventId = ? AND status != ?`);
+        const result = stmt.run(status, now, failureReason, eventId, status);
+        return result.changes > 0;
+    }
+    get(eventId) {
+        const row = this.db
+            .prepare('SELECT * FROM spawn_ledger WHERE eventId = ?')
+            .get(eventId);
+        return row ?? null;
+    }
+    /**
+     * Verify a heartbeat HMAC against the stored spawn nonce.
+     * Returns true if valid; false if no row or mismatch.
+     */
+    verifyHeartbeatHmac(eventId, payload, presentedHmac) {
+        const row = this.get(eventId);
+        if (!row)
+            return false;
+        const expected = crypto
+            .createHmac('sha256', row.spawnNonce)
+            .update(payload)
+            .digest('hex');
+        // Constant-time compare to avoid timing side channel.
+        const a = Buffer.from(expected, 'hex');
+        const b = Buffer.from(presentedHmac, 'hex');
+        if (a.length !== b.length)
+            return false;
+        return crypto.timingSafeEqual(a, b);
+    }
+    /**
+     * Prune rows older than `olderThanMs` AND in a terminal state.
+     * Spawning rows are NEVER pruned (they may still be in flight).
+     * Returns count of rows removed.
+     */
+    pruneTerminal(olderThanMs, now = Date.now()) {
+        const cutoff = now - olderThanMs;
+        const result = this.db
+            .prepare(`DELETE FROM spawn_ledger
+         WHERE status != 'spawning'
+           AND terminalAt IS NOT NULL
+           AND terminalAt < ?`)
+            .run(cutoff);
+        return result.changes;
+    }
+    /**
+     * List ALL rows currently in 'spawning' state, regardless of age.
+     * Used by HeartbeatWatchdog which applies its own grace-window filter.
+     */
+    listSpawning() {
+        return this.db
+            .prepare(`SELECT * FROM spawn_ledger WHERE status = 'spawning'`)
+            .all();
+    }
+    /** Sweep stale 'spawning' rows (heartbeat never confirmed, no terminal mark). */
+    sweepStaleSpawning(staleAfterMs, now = Date.now()) {
+        const cutoff = now - staleAfterMs;
+        const rows = this.db
+            .prepare(`SELECT * FROM spawn_ledger
+         WHERE status = 'spawning' AND spawnedAt < ?`)
+            .all(cutoff);
+        return rows;
+    }
+    count() {
+        return this.db.prepare('SELECT COUNT(*) AS n FROM spawn_ledger').get().n;
+    }
+    close() {
+        try {
+            this.db.pragma('wal_checkpoint(TRUNCATE)');
+        }
+        catch {
+            /* db may already be closed; safe to ignore */
+        }
+        this.db.close();
+    }
+}
+//# sourceMappingURL=SpawnLedger.js.map

package/dist/threadline/SpawnLedger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SpawnLedger.js","sourceRoot":"","sources":["../../src/threadline/SpawnLedger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAuCzB,MAAM,QAAQ,GAAG;IACf,UAAU,EAAE,IAAI;IAChB,eAAe,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IACpC,SAAS,EAAE,OAAO;CACV,CAAC;AAEX,wEAAwE;AAExE,MAAM,OAAO,WAAW;IACd,EAAE,CAAoB;IACtB,IAAI,CAA+B;IAE3C,YAAY,MAAc,EAAE,OAA2B,EAAE;QACvD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;KAcZ,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,UAAU,CAAC,OAAe,EAAE,MAAc,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAC1D,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,8DAA8D;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE;aAClB,OAAO,CAAC,wCAAwC,CAAC;aACjD,GAAG,EAAmB,CAAC;QAC1B,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACnC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACpD,CAAC;QAED,6BAA6B;QAC7B,MAAM,WAAW,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE;aACvB,OAAO,CACN,4EAA4E,CAC7E;aACA,GAAG,CAAC,MAAM,EAAE,WAAW,CAAkB,CAAC;QAC7C,IAAI,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACzC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QACxD,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B;mDAC6C,CAC9C,CAAC;QACF,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,wEAAwE;YACxE,IACE,GAAG,YAAY,KAAK;gBACpB,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EACtC,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACnC,OAAO;oBACL,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,iBAAiB;oBACzB,QAAQ,EAAE,QAAQ,IAAI,SAAS;iBAChC,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;QAC/B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,UAAU,CACR,OAAe,EACf,MAAwC,EACxC,gBAA+B,IAAI,EACnC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC1B;;yCAEmC,CACpC,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACrE,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,8CAA8C,CAAC;aACvD,GAAG,CAAC,OAAO,CAA+B,CAAC;QAC9C,OAAO,GAAG,IAAI,IAAI,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,mBAAmB,CACjB,OAAe,EACf,OAAe,EACf,aAAqB;QAErB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM;aACpB,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC;aACpC,MAAM,CAAC,OAAO,CAAC;aACf,MAAM,CAAC,KAAK,CAAC,CAAC;QACjB,sDAAsD;QACtD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtC,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,WAAmB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACjD,MAAM,MAAM,GAAG,GAAG,GAAG,WAAW,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CACN;;;8BAGsB,CACvB;aACA,GAAG,CAAC,MAAM,CAAC,CAAC;QACf,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CAAC,sDAAsD,CAAC;aAC/D,GAAG,EAAsB,CAAC;IAC/B,CAAC;IAED,iFAAiF;IACjF,kBAAkB,CAAC,YAAoB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACvD,MAAM,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;qDAC6C,CAC9C;aACA,GAAG,CAAC,MAAM,CAAqB,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK;QACH,OAAQ,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK;QACH,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;CACF"}

package/dist/threadline/SpawnNonce.d.ts

@@ -0,0 +1,49 @@
+/**
+ * SpawnNonce — relay-side helpers for binding a SpawnLedger reservation
+ * to a freshly-spawned session via FD 3 inheritance, and for deriving a
+ * deterministic eventId from envelope material.
+ *
+ * Component A glue for RELAY-SPAWN-GHOST-REPLY-CONTAINMENT-SPEC. The
+ * reader counterpart (`readSpawnNonceFromFd3`) lives in HeartbeatWriter
+ * since it runs in the spawned session, not the relay.
+ *
+ * Why FD 3 and not env: round-1 review surfaced that env vars propagate
+ * to every fork-helper a session may spawn (build tools, shells), giving
+ * those processes the nonce. FD 3 is single-read by the spawned process
+ * and is closed by the relay immediately after handoff.
+ */
+import type { SpawnOptions, StdioOptions } from 'node:child_process';
+import type { MessageEnvelope } from '../messaging/types.js';
+/**
+ * Deterministic eventId from envelope material. Bound to:
+ *   - sender identity (signedBy or hmacBy on transport metadata)
+ *   - the transport-layer nonce (already used for replay prevention)
+ *   - the application-level message id
+ *
+ * Why this triple: any one alone is insufficient. The transport nonce is
+ * unique per delivery but not authenticated to a specific message body
+ * (a relay or attacker could re-route the same nonce with a different
+ * payload). Combining with the signed-by + message id binds the eventId
+ * to "this exact message from this exact sender via this exact relay
+ * delivery". Replays produce the same eventId → ledger CAS rejects.
+ */
+export declare function deriveEventId(envelope: MessageEnvelope): string;
+export interface NonceFdHandle {
+    /** Read FD to be passed as stdio[3] to child_process.spawn(). */
+    readFd: number;
+    /** Call after spawn returns to release the relay-side handle. */
+    close: () => void;
+}
+export declare function prepareNonceFd(spawnNonce: Buffer): NonceFdHandle;
+/**
+ * Build a stdio array suitable for child_process.spawn() that inherits
+ * stdin/stdout/stderr from the parent and binds FD 3 to the nonce read
+ * end. Caller owns calling handle.close() AFTER spawn returns.
+ */
+export declare function stdioWithNonceFd(handle: NonceFdHandle): StdioOptions;
+/**
+ * Convenience: enrich a SpawnOptions with FD-3 nonce binding. Returns a
+ * new options object plus the handle to close after spawn.
+ */
+export declare function withNonceFd(baseOpts: SpawnOptions, handle: NonceFdHandle): SpawnOptions;
+//# sourceMappingURL=SpawnNonce.d.ts.map

package/dist/threadline/SpawnNonce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SpawnNonce.d.ts","sourceRoot":"","sources":["../../src/threadline/SpawnNonce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAErE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,CAS/D;AAkBD,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB;AAED,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,CA4BhE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,YAAY,CAEpE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE,aAAa,GACpB,YAAY,CAKd"}

package/dist/threadline/SpawnNonce.js

@@ -0,0 +1,99 @@
+/**
+ * SpawnNonce — relay-side helpers for binding a SpawnLedger reservation
+ * to a freshly-spawned session via FD 3 inheritance, and for deriving a
+ * deterministic eventId from envelope material.
+ *
+ * Component A glue for RELAY-SPAWN-GHOST-REPLY-CONTAINMENT-SPEC. The
+ * reader counterpart (`readSpawnNonceFromFd3`) lives in HeartbeatWriter
+ * since it runs in the spawned session, not the relay.
+ *
+ * Why FD 3 and not env: round-1 review surfaced that env vars propagate
+ * to every fork-helper a session may spawn (build tools, shells), giving
+ * those processes the nonce. FD 3 is single-read by the spawned process
+ * and is closed by the relay immediately after handoff.
+ */
+import crypto from 'node:crypto';
+/**
+ * Deterministic eventId from envelope material. Bound to:
+ *   - sender identity (signedBy or hmacBy on transport metadata)
+ *   - the transport-layer nonce (already used for replay prevention)
+ *   - the application-level message id
+ *
+ * Why this triple: any one alone is insufficient. The transport nonce is
+ * unique per delivery but not authenticated to a specific message body
+ * (a relay or attacker could re-route the same nonce with a different
+ * payload). Combining with the signed-by + message id binds the eventId
+ * to "this exact message from this exact sender via this exact relay
+ * delivery". Replays produce the same eventId → ledger CAS rejects.
+ */
+export function deriveEventId(envelope) {
+    const t = envelope.transport;
+    const signer = t.signedBy ?? t.hmacBy ?? '<unsigned>';
+    const nonce = t.nonce ?? '<no-nonce>';
+    const msgId = envelope.message?.id ?? '<no-msg-id>';
+    return crypto
+        .createHash('sha256')
+        .update(`${signer}\x00${nonce}\x00${msgId}`)
+        .digest('hex');
+}
+/**
+ * Open a pipe, write the per-spawn nonce into it, return both ends so
+ * the caller can hand the read end to child_process.spawn() via FD 3
+ * and close the write end after spawn returns.
+ *
+ * Node's child_process does not expose POSIX pipe(2) directly, so we use
+ * a tmpfile + open-for-read pattern as a portable substitute. The file
+ * is unlinked immediately after open so even root cannot read it from
+ * disk after the spawn returns.
+ */
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { SafeFsExecutor } from '../core/SafeFsExecutor.js';
+export function prepareNonceFd(spawnNonce) {
+    if (spawnNonce.length !== 32) {
+        throw new Error('SpawnNonce.prepareNonceFd requires a 32-byte nonce');
+    }
+    // tmpfile in os.tmpdir(); 0o600; immediately unlinked after open.
+    const tmp = path.join(os.tmpdir(), `instar-spawn-nonce-${process.pid}-${crypto.randomBytes(6).toString('hex')}`);
+    fs.writeFileSync(tmp, spawnNonce, { mode: 0o600 });
+    const readFd = fs.openSync(tmp, 'r');
+    // Unlink immediately; the open FD keeps the inode alive only as long
+    // as one of the processes holds it.
+    try {
+        SafeFsExecutor.safeUnlinkSync(tmp, { operation: 'SpawnNonce.prepareNonceFd' });
+    }
+    catch {
+        /* best-effort */
+    }
+    return {
+        readFd,
+        close: () => {
+            try {
+                fs.closeSync(readFd);
+            }
+            catch {
+                /* already closed */
+            }
+        },
+    };
+}
+/**
+ * Build a stdio array suitable for child_process.spawn() that inherits
+ * stdin/stdout/stderr from the parent and binds FD 3 to the nonce read
+ * end. Caller owns calling handle.close() AFTER spawn returns.
+ */
+export function stdioWithNonceFd(handle) {
+    return ['inherit', 'inherit', 'inherit', handle.readFd];
+}
+/**
+ * Convenience: enrich a SpawnOptions with FD-3 nonce binding. Returns a
+ * new options object plus the handle to close after spawn.
+ */
+export function withNonceFd(baseOpts, handle) {
+    return {
+        ...baseOpts,
+        stdio: stdioWithNonceFd(handle),
+    };
+}
+//# sourceMappingURL=SpawnNonce.js.map

package/dist/threadline/SpawnNonce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SpawnNonce.js","sourceRoot":"","sources":["../../src/threadline/SpawnNonce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AAKjC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAAC,QAAyB;IACrD,MAAM,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC;IAC7B,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,YAAY,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,YAAY,CAAC;IACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,aAAa,CAAC;IACpD,OAAO,MAAM;SACV,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,GAAG,MAAM,OAAO,KAAK,OAAO,KAAK,EAAE,CAAC;SAC3C,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,kEAAkE;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CACnB,EAAE,CAAC,MAAM,EAAE,EACX,sBAAsB,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAC7E,CAAC;IACF,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACrC,qEAAqE;IACrE,oCAAoC;IACpC,IAAI,CAAC;QACH,cAAc,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,2BAA2B,EAAE,CAAC,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,OAAO;QACL,MAAM;QACN,KAAK,EAAE,GAAG,EAAE;YACV,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,QAAsB,EACtB,MAAqB;IAErB,OAAO;QACL,GAAG,QAAQ;QACX,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC;KAChC,CAAC;AACJ,CAAC"}

package/dist/threadline/TelegramBridge.d.ts

@@ -0,0 +1,140 @@
+/**
+ * TelegramBridge — mirrors threadline messages into per-thread Telegram topics.
+ *
+ * The bridge gives Justin visibility into agent-to-agent conversations:
+ * every inbound and outbound threadline message gets relayed into a
+ * dedicated Telegram topic so he can watch the exchange in real time.
+ *
+ * **Relay-only.** The bridge is a pure observer — it never blocks, gates,
+ * or vetoes a message. The blocking authority lives in TelegramBridgeConfig
+ * (the dashboard toggles + allow/deny list). The bridge simply asks the
+ * config "should I post?" and, if yes, posts.
+ *
+ * **No double-fire.** The bridge does NOT use the existing `telegram-reply`
+ * pipeline (which is for agent → user replies). It writes directly through
+ * the TelegramAdapter primitives `findOrCreateForumTopic` + `sendToTopic`,
+ * and persists thread → topic bindings in
+ * `.instar/threadline/telegram-bridge-bindings.json`.
+ *
+ * **Does NOT replace spawn-session.** The relay handler in server.ts still
+ * spawns Claude Code sessions for inbound messages. The bridge runs
+ * alongside that path; it's purely additive for user visibility.
+ *
+ * Topic naming: `{localAgent}↔{remoteAgentName} — {subject}` (truncated to
+ * Telegram's 128-char limit). Subject defaults to the first ~40 chars of
+ * the inbound message when no explicit subject is supplied.
+ */
+import type { TelegramBridgeConfig } from './TelegramBridgeConfig.js';
+export declare const MAX_BRIDGE_MESSAGE_BODY = 3800;
+export interface TelegramBridgeBinding {
+    threadId: string;
+    topicId: number;
+    remoteAgent: string;
+    topicName: string;
+    createdAt: string;
+    lastMessageAt: string;
+}
+export interface TelegramBridgeBindingsFile {
+    version: 1;
+    bindings: TelegramBridgeBinding[];
+}
+/** Subset of TelegramAdapter the bridge needs — keeps tests easy to mock. */
+export interface TelegramSink {
+    findOrCreateForumTopic(name: string, iconColor?: number): Promise<{
+        topicId: number;
+        name: string;
+        reused: boolean;
+    }>;
+    sendToTopic(topicId: number, text: string, options?: {
+        silent?: boolean;
+        skipStallClear?: boolean;
+    }): Promise<{
+        ok: boolean;
+        messageId?: number;
+        reason?: string;
+    } | unknown>;
+}
+export interface BridgeInboundEvent {
+    threadId: string;
+    remoteAgent: string;
+    remoteAgentName?: string;
+    text: string;
+    subject?: string;
+    messageId?: string;
+    timestamp?: string;
+}
+export interface BridgeOutboundEvent {
+    threadId: string;
+    remoteAgent: string;
+    remoteAgentName?: string;
+    text: string;
+    messageId?: string;
+    timestamp?: string;
+    /** Optional preview of the agent reply being mirrored (e.g. truncated body). */
+    outcome?: string;
+}
+export interface TelegramBridgeOptions {
+    stateDir: string;
+    localAgentName: string;
+    config: TelegramBridgeConfig;
+    telegram: TelegramSink;
+    /** Optional override for the bindings filename (testing). */
+    bindingsFilename?: string;
+    /** Logger; defaults to console. */
+    log?: {
+        info: (msg: string) => void;
+        warn: (msg: string) => void;
+        error: (msg: string) => void;
+    };
+}
+export declare class TelegramBridge {
+    private readonly stateDir;
+    private readonly bindingsPath;
+    private readonly localAgentName;
+    private readonly cfg;
+    private readonly telegram;
+    private readonly log;
+    private bindings;
+    constructor(opts: TelegramBridgeOptions);
+    private loadBindings;
+    private persistBindings;
+    /** Public for inspection (dashboard, observability tab). */
+    getBindings(): TelegramBridgeBinding[];
+    /** Public for the observability tab to query a single binding. */
+    getBindingForThread(threadId: string): TelegramBridgeBinding | null;
+    /** Build the topic name for a thread — used at create time. Exposed for tests. */
+    buildTopicName(remoteAgentName: string, subject?: string): string;
+    /**
+     * Mirror an inbound threadline message into Telegram.
+     *
+     * Decision tree:
+     *   1. If the bridge config disallows mirroring AND no existing topic
+     *      → no-op.
+     *   2. If a topic exists for this thread → post (subject to mirrorExisting).
+     *   3. Else (no existing topic) → check shouldAutoCreateTopic; if yes,
+     *      create + post; else no-op.
+     *
+     * Failure-tolerant — never throws. Returns `{posted, topicId}` for
+     * observability.
+     */
+    mirrorInbound(evt: BridgeInboundEvent): Promise<{
+        posted: boolean;
+        topicId?: number;
+        reason?: string;
+    }>;
+    /**
+     * Mirror an outbound threadline message (sent via threadline_send) into
+     * the corresponding Telegram topic. Outbound mirroring requires an
+     * existing binding — outbound traffic alone never auto-creates topics
+     * (the user opted in via inbound or by manual action).
+     */
+    mirrorOutbound(evt: BridgeOutboundEvent): Promise<{
+        posted: boolean;
+        topicId?: number;
+        reason?: string;
+    }>;
+    private formatInboundBody;
+    private formatOutboundBody;
+    private postSafe;
+}
+//# sourceMappingURL=TelegramBridge.d.ts.map

package/dist/threadline/TelegramBridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TelegramBridge.d.ts","sourceRoot":"","sources":["../../src/threadline/TelegramBridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAKtE,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAE5C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,CAAC,CAAC;IACX,QAAQ,EAAE,qBAAqB,EAAE,CAAC;CACnC;AAED,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,sBAAsB,CACpB,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC/D,WAAW,CACT,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GACvD,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,CAAC;CAC5E;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,QAAQ,EAAE,YAAY,CAAC;IACvB,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mCAAmC;IACnC,GAAG,CAAC,EAAE;QAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAAC,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAAC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAC;CAClG;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAuB;IAC3C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAe;IACxC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA4C;IAChE,OAAO,CAAC,QAAQ,CAA4C;gBAEhD,IAAI,EAAE,qBAAqB;IAoBvC,OAAO,CAAC,YAAY;IAepB,OAAO,CAAC,eAAe;IAcvB,4DAA4D;IAC5D,WAAW,IAAI,qBAAqB,EAAE;IAItC,kEAAkE;IAClE,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,qBAAqB,GAAG,IAAI;IAMnE,kFAAkF;IAClF,cAAc,CAAC,eAAe,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM;IAajE;;;;;;;;;;;;OAYG;IACG,aAAa,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAuD7G;;;;;OAKG;IACG,cAAc,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAc/G,OAAO,CAAC,iBAAiB;IAQzB,OAAO,CAAC,kBAAkB;YAUZ,QAAQ;CAYvB"}