instar 1.3.270 → 1.3.271

package/dist/coordination/ReviewExchange.d.ts

@@ -0,0 +1,135 @@
+/**
+ * ReviewExchange — the autonomous code-review protocol (spec §7 G2.3).
+ *
+ * A ReviewExchange is one mutual, mandate-gated sign-off of a review artifact
+ * between the two agents named in a Coordination Mandate. It is how Phase-1's
+ * "code-owner review" happens WITHOUT the human relaying: the owner agent delivers
+ * a review package over Threadline, the peer reviews and returns an authenticated
+ * verdict, and BOTH sign-offs are checked against the mandate's `sign-code-review`
+ * authority (bounds e.g. `{ artifact: 'migration-port', mutual: true }`) before
+ * they are accepted. Every accepted signature carries the audit hash of the gate
+ * decision that authorized it — the trail Justin reviews.
+ *
+ * Asymmetry, stated honestly: the peer's instance may not run this engine yet, so
+ * the peer's "signature" is their authenticated Threadline verdict message
+ * (Ed25519-authenticated sender → fingerprint), recorded verbatim by reference —
+ * kind 'authenticated-peer-verdict'. The local agent's signature goes through the
+ * local gate — kind 'mandate-gated-local'. BOTH are gate-evaluated here (named
+ * party, bounds, expiry, revocation), so a stranger's verdict or an out-of-bounds
+ * artifact is refused identically.
+ *
+ * State machine (linear, no skips):
+ *   proposed → delivered → verdict-recorded → complete
+ *                      ↘ changes-requested (terminal: rework = a NEW exchange)
+ *
+ * The review package is content-addressed: `packageSha256` is fixed at creation
+ * and signatures bind to the record that carries it — a different package is a
+ * different exchange. Deny-by-default is inherited: with no mandate issued, every
+ * sign/verdict path denies.
+ */
+import type { MandateGate } from './MandateGate.js';
+export type ReviewExchangeState = 'proposed' | 'delivered' | 'verdict-recorded' | 'complete' | 'changes-requested';
+export interface ReviewSignature {
+    /** The signing agent's routing fingerprint (a named party of the mandate). */
+    agentFp: string;
+    signedAt: string;
+    /** 'mandate-gated-local' = this server's own agent, allowed by the local gate;
+     *  'authenticated-peer-verdict' = the peer's sign-off, carried by their
+     *  authenticated Threadline verdict message (recorded by reference). */
+    kind: 'mandate-gated-local' | 'authenticated-peer-verdict';
+    /** Hash of the audit entry for the gate decision that authorized this signature. */
+    auditHash: string;
+    /** Evidence reference — e.g. a Threadline message/thread ref for peer signatures. */
+    evidence: string | null;
+}
+export interface PeerVerdict {
+    verdict: 'approve' | 'request-changes';
+    summary: string;
+    /** Authenticated-source reference (Threadline message/thread id). */
+    evidence: string;
+    recordedAt: string;
+}
+export interface ReviewExchangeRecord {
+    id: string;
+    /** The mandate whose `sign-code-review` authority governs this exchange. */
+    mandateId: string;
+    /** The artifact under review — must match the authority's bounds (e.g. 'migration-port'). */
+    artifact: string;
+    /** Human-readable pointer to the review package (repo path or URL). */
+    packageRef: string;
+    /** sha256 of the package content — what the signatures bind to. Immutable. */
+    packageSha256: string;
+    /** [ownerFp, peerFp] — owner delivers, peer reviews. Both must be mandate parties. */
+    parties: [string, string];
+    state: ReviewExchangeState;
+    /** Delivery evidence (e.g. Threadline message id), set by markDelivered. */
+    deliveredEvidence: string | null;
+    peerVerdict: PeerVerdict | null;
+    signatures: ReviewSignature[];
+    createdAt: string;
+    updatedAt: string;
+}
+/** Uniform method result — gate denials and state errors come back as data, not throws. */
+export type ExchangeResult = {
+    ok: true;
+    record: ReviewExchangeRecord;
+} | {
+    ok: false;
+    reason: string;
+};
+export interface ReviewExchangeEngineDeps {
+    /** Absolute path to the exchanges JSON file. */
+    filePath: string;
+    /** The mandate gate — EVERY sign-off is evaluated through it. */
+    gate: MandateGate;
+    now?: () => number;
+    /** Exchange id generator (default: random). Injected for deterministic tests. */
+    genId?: () => string;
+}
+export interface CreateExchangeInput {
+    mandateId: string;
+    artifact: string;
+    packageRef: string;
+    packageSha256: string;
+    parties: [string, string];
+    id?: string;
+}
+export declare class ReviewExchangeEngine {
+    private readonly d;
+    constructor(deps: ReviewExchangeEngineDeps);
+    private nowIso;
+    private readAll;
+    private writeAll;
+    private save;
+    /** Evaluate `sign-code-review` for one party through the mandate gate. */
+    private gateSignOff;
+    /** Create a new exchange in `proposed`. Validation only — no gate call yet
+     *  (creating a record delegates nothing; the sign-offs are what the mandate governs). */
+    create(input: CreateExchangeInput): ExchangeResult;
+    /** proposed → delivered. Records the delivery evidence (Threadline message ref). */
+    markDelivered(id: string, evidence: string): ExchangeResult;
+    /**
+     * delivered → verdict-recorded | changes-requested.
+     *
+     * Records the PEER's authenticated verdict. An 'approve' verdict IS the peer's
+     * sign-off, so it is MANDATE-GATED for the peer's fingerprint (named party,
+     * bounds, expiry, revocation — a deny refuses the verdict). A 'request-changes'
+     * verdict delegates nothing (it is a refusal), so it is recorded ungated — but
+     * only from the exchange's named peer.
+     */
+    recordPeerVerdict(id: string, input: {
+        verdict: 'approve' | 'request-changes';
+        summary: string;
+        evidence: string;
+        peerFp: string;
+    }): ExchangeResult;
+    /**
+     * verdict-recorded → complete. The OWNER's countersignature, mandate-gated for
+     * the owner's fingerprint. Completion requires the mutual pair: the peer's
+     * approve-signature already present + this one.
+     */
+    sign(id: string, agentFp: string): ExchangeResult;
+    get(id: string): ReviewExchangeRecord | undefined;
+    list(): ReviewExchangeRecord[];
+}
+//# sourceMappingURL=ReviewExchange.d.ts.map

package/dist/coordination/ReviewExchange.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReviewExchange.d.ts","sourceRoot":"","sources":["../../src/coordination/ReviewExchange.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,MAAM,mBAAmB,GAC3B,UAAU,GACV,WAAW,GACX,kBAAkB,GAClB,UAAU,GACV,mBAAmB,CAAC;AAExB,MAAM,WAAW,eAAe;IAC9B,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB;;4EAEwE;IACxE,IAAI,EAAE,qBAAqB,GAAG,4BAA4B,CAAC;IAC3D,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAC;IAClB,qFAAqF;IACrF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,SAAS,GAAG,iBAAiB,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAC;IAClB,6FAA6F;IAC7F,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,aAAa,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1B,KAAK,EAAE,mBAAmB,CAAC;IAC3B,4EAA4E;IAC5E,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,2FAA2F;AAC3F,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,GAC1C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC,MAAM,WAAW,wBAAwB;IACvC,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,IAAI,EAAE,WAAW,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAID,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,CAAC,CAA2B;gBACjC,IAAI,EAAE,wBAAwB;IAI1C,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,OAAO;IAOf,OAAO,CAAC,QAAQ;IAKhB,OAAO,CAAC,IAAI;IAQZ,0EAA0E;IAC1E,OAAO,CAAC,WAAW;IASnB;6FACyF;IACzF,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,cAAc;IAuBlD,oFAAoF;IACpF,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,cAAc;IAY3D;;;;;;;;OAQG;IACH,iBAAiB,CACf,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;QAAE,OAAO,EAAE,SAAS,GAAG,iBAAiB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GACnG,cAAc;IAoCjB;;;;OAIG;IACH,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,cAAc;IA0BjD,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS;IAIjD,IAAI,IAAI,oBAAoB,EAAE;CAG/B"}

package/dist/coordination/ReviewExchange.js

@@ -0,0 +1,192 @@
+/**
+ * ReviewExchange — the autonomous code-review protocol (spec §7 G2.3).
+ *
+ * A ReviewExchange is one mutual, mandate-gated sign-off of a review artifact
+ * between the two agents named in a Coordination Mandate. It is how Phase-1's
+ * "code-owner review" happens WITHOUT the human relaying: the owner agent delivers
+ * a review package over Threadline, the peer reviews and returns an authenticated
+ * verdict, and BOTH sign-offs are checked against the mandate's `sign-code-review`
+ * authority (bounds e.g. `{ artifact: 'migration-port', mutual: true }`) before
+ * they are accepted. Every accepted signature carries the audit hash of the gate
+ * decision that authorized it — the trail Justin reviews.
+ *
+ * Asymmetry, stated honestly: the peer's instance may not run this engine yet, so
+ * the peer's "signature" is their authenticated Threadline verdict message
+ * (Ed25519-authenticated sender → fingerprint), recorded verbatim by reference —
+ * kind 'authenticated-peer-verdict'. The local agent's signature goes through the
+ * local gate — kind 'mandate-gated-local'. BOTH are gate-evaluated here (named
+ * party, bounds, expiry, revocation), so a stranger's verdict or an out-of-bounds
+ * artifact is refused identically.
+ *
+ * State machine (linear, no skips):
+ *   proposed → delivered → verdict-recorded → complete
+ *                      ↘ changes-requested (terminal: rework = a NEW exchange)
+ *
+ * The review package is content-addressed: `packageSha256` is fixed at creation
+ * and signatures bind to the record that carries it — a different package is a
+ * different exchange. Deny-by-default is inherited: with no mandate issued, every
+ * sign/verdict path denies.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+const SHA256_HEX = /^[0-9a-f]{64}$/;
+export class ReviewExchangeEngine {
+    d;
+    constructor(deps) {
+        this.d = deps;
+    }
+    nowIso() {
+        return new Date(this.d.now ? this.d.now() : Date.now()).toISOString();
+    }
+    readAll() {
+        try {
+            const raw = JSON.parse(fs.readFileSync(this.d.filePath, 'utf8'));
+            return Array.isArray(raw) ? raw : [];
+        }
+        catch { /* @silent-fallback-ok — exchanges file may not exist yet; an empty list is the safe initial state */
+            return [];
+        }
+    }
+    writeAll(records) {
+        fs.mkdirSync(path.dirname(this.d.filePath), { recursive: true });
+        fs.writeFileSync(this.d.filePath, JSON.stringify(records, null, 2));
+    }
+    save(record) {
+        record.updatedAt = this.nowIso();
+        const all = this.readAll().filter((r) => r.id !== record.id);
+        all.push(record);
+        this.writeAll(all);
+        return record;
+    }
+    /** Evaluate `sign-code-review` for one party through the mandate gate. */
+    gateSignOff(record, agentFp) {
+        return this.d.gate.evaluate({
+            action: 'sign-code-review',
+            params: { artifact: record.artifact, mutual: true },
+            agentFp,
+            mandateId: record.mandateId,
+        });
+    }
+    /** Create a new exchange in `proposed`. Validation only — no gate call yet
+     *  (creating a record delegates nothing; the sign-offs are what the mandate governs). */
+    create(input) {
+        if (!SHA256_HEX.test(input.packageSha256)) {
+            return { ok: false, reason: 'packageSha256 must be a 64-char lowercase sha256 hex digest' };
+        }
+        if (!input.artifact || !input.packageRef || !input.mandateId) {
+            return { ok: false, reason: 'mandateId, artifact, and packageRef are required' };
+        }
+        if (!Array.isArray(input.parties) || input.parties.length !== 2 || input.parties[0] === input.parties[1]) {
+            return { ok: false, reason: 'parties must be two DISTINCT agent fingerprints [ownerFp, peerFp]' };
+        }
+        const id = input.id ?? (this.d.genId ? this.d.genId() : `rex-${Math.random().toString(36).slice(2, 10)}`);
+        if (this.get(id))
+            return { ok: false, reason: `exchange "${id}" already exists` };
+        const now = this.nowIso();
+        const record = {
+            id, mandateId: input.mandateId, artifact: input.artifact,
+            packageRef: input.packageRef, packageSha256: input.packageSha256,
+            parties: input.parties, state: 'proposed',
+            deliveredEvidence: null, peerVerdict: null, signatures: [],
+            createdAt: now, updatedAt: now,
+        };
+        return { ok: true, record: this.save(record) };
+    }
+    /** proposed → delivered. Records the delivery evidence (Threadline message ref). */
+    markDelivered(id, evidence) {
+        const record = this.get(id);
+        if (!record)
+            return { ok: false, reason: `exchange "${id}" not found` };
+        if (record.state !== 'proposed') {
+            return { ok: false, reason: `cannot mark delivered from state "${record.state}" (must be "proposed")` };
+        }
+        if (!evidence)
+            return { ok: false, reason: 'delivery evidence is required' };
+        record.state = 'delivered';
+        record.deliveredEvidence = evidence;
+        return { ok: true, record: this.save(record) };
+    }
+    /**
+     * delivered → verdict-recorded | changes-requested.
+     *
+     * Records the PEER's authenticated verdict. An 'approve' verdict IS the peer's
+     * sign-off, so it is MANDATE-GATED for the peer's fingerprint (named party,
+     * bounds, expiry, revocation — a deny refuses the verdict). A 'request-changes'
+     * verdict delegates nothing (it is a refusal), so it is recorded ungated — but
+     * only from the exchange's named peer.
+     */
+    recordPeerVerdict(id, input) {
+        const record = this.get(id);
+        if (!record)
+            return { ok: false, reason: `exchange "${id}" not found` };
+        if (record.state !== 'delivered') {
+            return { ok: false, reason: `cannot record a verdict from state "${record.state}" (must be "delivered")` };
+        }
+        if (input.peerFp !== record.parties[1]) {
+            return { ok: false, reason: `agent ${input.peerFp} is not the named peer reviewer of this exchange` };
+        }
+        if (!input.evidence || !input.summary) {
+            return { ok: false, reason: 'verdict summary and authenticated evidence ref are required' };
+        }
+        const verdict = {
+            verdict: input.verdict, summary: input.summary,
+            evidence: input.evidence, recordedAt: this.nowIso(),
+        };
+        if (input.verdict === 'request-changes') {
+            record.state = 'changes-requested';
+            record.peerVerdict = verdict;
+            return { ok: true, record: this.save(record) };
+        }
+        // approve = the peer's sign-off → through the mandate gate.
+        const decision = this.gateSignOff(record, input.peerFp);
+        if (decision.decision === 'deny') {
+            return { ok: false, reason: `mandate denied the peer sign-off: ${decision.reason}` };
+        }
+        record.state = 'verdict-recorded';
+        record.peerVerdict = verdict;
+        record.signatures.push({
+            agentFp: input.peerFp, signedAt: this.nowIso(),
+            kind: 'authenticated-peer-verdict', auditHash: decision.audit.hash,
+            evidence: input.evidence,
+        });
+        return { ok: true, record: this.save(record) };
+    }
+    /**
+     * verdict-recorded → complete. The OWNER's countersignature, mandate-gated for
+     * the owner's fingerprint. Completion requires the mutual pair: the peer's
+     * approve-signature already present + this one.
+     */
+    sign(id, agentFp) {
+        const record = this.get(id);
+        if (!record)
+            return { ok: false, reason: `exchange "${id}" not found` };
+        if (record.state !== 'verdict-recorded') {
+            return { ok: false, reason: `cannot sign from state "${record.state}" (must be "verdict-recorded")` };
+        }
+        if (agentFp !== record.parties[0]) {
+            return { ok: false, reason: `agent ${agentFp} is not the named owner of this exchange` };
+        }
+        if (record.signatures.some((s) => s.agentFp === agentFp)) {
+            return { ok: false, reason: 'owner has already signed this exchange' };
+        }
+        const decision = this.gateSignOff(record, agentFp);
+        if (decision.decision === 'deny') {
+            return { ok: false, reason: `mandate denied the owner sign-off: ${decision.reason}` };
+        }
+        record.signatures.push({
+            agentFp, signedAt: this.nowIso(),
+            kind: 'mandate-gated-local', auditHash: decision.audit.hash,
+            evidence: null,
+        });
+        // Mutual bound satisfied: both named parties have gate-authorized signatures.
+        record.state = 'complete';
+        return { ok: true, record: this.save(record) };
+    }
+    get(id) {
+        return this.readAll().find((r) => r.id === id);
+    }
+    list() {
+        return this.readAll();
+    }
+}
+//# sourceMappingURL=ReviewExchange.js.map

package/dist/coordination/ReviewExchange.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReviewExchange.js","sourceRoot":"","sources":["../../src/coordination/ReviewExchange.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA6E7B,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAEpC,MAAM,OAAO,oBAAoB;IACd,CAAC,CAA2B;IAC7C,YAAY,IAA8B;QACxC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IAChB,CAAC;IAEO,MAAM;QACZ,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACxE,CAAC;IAEO,OAAO;QACb,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YACjE,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAA8B,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC,CAAC,qGAAqG;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAC9H,CAAC;IAEO,QAAQ,CAAC,OAA+B;QAC9C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IAEO,IAAI,CAAC,MAA4B;QACvC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0EAA0E;IAClE,WAAW,CAAC,MAA4B,EAAE,OAAe;QAC/D,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC1B,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE;YACnD,OAAO;YACP,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;6FACyF;IACzF,MAAM,CAAC,KAA0B;QAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC;QAC9F,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACzG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mEAAmE,EAAE,CAAC;QACpG,CAAC;QACD,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1G,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC;QAClF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAyB;YACnC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxD,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa;YAChE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU;YACzC,iBAAiB,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;YAC1D,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG;SAC/B,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,oFAAoF;IACpF,aAAa,CAAC,EAAU,EAAE,QAAgB;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC;QACxE,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,MAAM,CAAC,KAAK,wBAAwB,EAAE,CAAC;QAC1G,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;QAC7E,MAAM,CAAC,KAAK,GAAG,WAAW,CAAC;QAC3B,MAAM,CAAC,iBAAiB,GAAG,QAAQ,CAAC;QACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACjD,CAAC;IAED;;;;;;;;OAQG;IACH,iBAAiB,CACf,EAAU,EACV,KAAoG;QAEpG,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC;QACxE,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,MAAM,CAAC,KAAK,yBAAyB,EAAE,CAAC;QAC7G,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,KAAK,CAAC,MAAM,kDAAkD,EAAE,CAAC;QACxG,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC;QAC9F,CAAC;QACD,MAAM,OAAO,GAAgB;YAC3B,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;YAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE;SACpD,CAAC;QACF,IAAI,KAAK,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;YACxC,MAAM,CAAC,KAAK,GAAG,mBAAmB,CAAC;YACnC,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,CAAC;QACD,4DAA4D;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACvF,CAAC;QACD,MAAM,CAAC,KAAK,GAAG,kBAAkB,CAAC;QAClC,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC;QAC7B,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;YACrB,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;YAC9C,IAAI,EAAE,4BAA4B,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI;YAClE,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACjD,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,EAAU,EAAE,OAAe;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC;QACxE,IAAI,MAAM,CAAC,KAAK,KAAK,kBAAkB,EAAE,CAAC;YACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,MAAM,CAAC,KAAK,gCAAgC,EAAE,CAAC;QACxG,CAAC;QACD,IAAI,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,OAAO,0CAA0C,EAAE,CAAC;QAC3F,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,CAAC;YACzD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;QACzE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACxF,CAAC;QACD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;YACrB,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;YAChC,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI;YAC3D,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,8EAA8E;QAC9E,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;CACF"}

package/dist/core/PostUpdateMigrator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PostUpdateMigrator.d.ts","sourceRoot":"","sources":["../../src/core/PostUpdateMigrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAsCH,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AAIjC,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAiB;IAC/B;;;;;;OAMG;IACH,OAAO,CAAC,UAAU,CAAiC;gBAEvC,MAAM,EAAE,cAAc;IAIlC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,oBAAoB;IA0B5B;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAItC;;;;;;OAMG;IACG,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,qBAAqB,CAAC;IAIjC,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,kBAAkB;IAO1B;;;;OAIG;IACH,OAAO,CAAC,YAAY;IASpB;;;OAGG;IACH,OAAO,IAAI,eAAe;IAiD1B;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,0BAA0B;IAmFlC,OAAO,CAAC,0BAA0B;IAmDlC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kCAAkC;IAwH1C;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,kCAAkC;IA8C1C,OAAO,CAAC,uBAAuB;IAwE/B,OAAO,CAAC,4CAA4C;IA+CpD;;;;;;;OAOG;IACH,OAAO,CAAC,iCAAiC;IA0BzC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,oCAAoC;IAmB5C,OAAO,CAAC,yBAAyB;IA6FjC;;;;;;;;;;OAUG;IACG,YAAY,IAAI,OAAO,CAAC,eAAe,CAAC;YA4BhC,uBAAuB;IAkGrC,OAAO,CAAC,0BAA0B;IAkGlC,OAAO,CAAC,0BAA0B;IAoElC,OAAO,CAAC,oBAAoB;IA4G5B,OAAO,CAAC,8BAA8B;IA2EtC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAaxB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,0BAA0B;IA8BlC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,4BAA4B;IAwBpC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,sBAAsB;IAwB9B;;;;;;;;;OASG;IACH,OAAO,CAAC,wCAAwC;IAuBhD;;;;;;;;OAQG;IACH,OAAO,CAAC,2CAA2C;IAuBnD;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,mCAAmC;IAuE3C;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAW5B;;;;;;;;;OASG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,OAAO,CAAC,yBAAyB;IA4HjC;6EACyE;IACzE,OAAO,CAAC,wBAAwB;IAShC;sDACkD;IAClD,OAAO,CAAC,wBAAwB;IAQhC;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAkPpB;;;;;;;;OAQG;IACH,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI;IA6CvE;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAkEzB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAkChC;;;;;;;;;OASG;IACH,OAAO,CAAC,wBAAwB;IAoEhC;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAiE5B;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;IA8BnC;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAyIhC;;;;;;OAMG;IACH,OAAO,CAAC,8BAA8B;IAwDtC,OAAO,CAAC,0BAA0B;IA8DlC;;;OAGG;IACH,OAAO,CAAC,eAAe;IA87CvB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,OAAO,CAAC,kCAAkC;IAoG1C;;;OAGG;IACH,OAAO,CAAC,cAAc;IA6JtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,OAAO,CAAC,yCAAyC;IAyDjD;;;OAGG;IACH,OAAO,CAAC,eAAe;IA0SvB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAqFrB;;;OAGG;IACH;;;OAGG;IACH;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,wBAAwB;IAmEhC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,6BAA6B;IAwDrC;;;;;;;;;OASG;IACH,OAAO,CAAC,yBAAyB;IAsDjC,OAAO,CAAC,wBAAwB;IAqChC,OAAO,CAAC,gBAAgB;IAiBxB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,OAAO,CAAC,qBAAqB;IAkE7B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,0BAA0B;IAgDlC;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAkC5B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kBAAkB;IA2C1B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,oBAAoB;IAgC5B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAyBrB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqC9B;;;OAGG;IACH,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,wBAAwB,GAAG,qBAAqB,GAAG,yBAAyB,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,wBAAwB,GAAG,8BAA8B,GAAG,2BAA2B,GAAG,4BAA4B,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,wBAAwB,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,0BAA0B,GAAG,uBAAuB,GAAG,iBAAiB,GAAG,MAAM;IAwBnf,oFAAoF;IACpF,iCAAiC,IAAI,MAAM;IAI3C,6EAA6E;IAC7E,yBAAyB,IAAI,MAAM;IAInC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,2BAA2B;IAmFnC,OAAO,CAAC,mBAAmB;IAob3B,OAAO,CAAC,wBAAwB;IAuJhC,OAAO,CAAC,2BAA2B;IAoEnC,OAAO,CAAC,yBAAyB;IA8IjC,OAAO,CAAC,2BAA2B;IA0JnC,OAAO,CAAC,qBAAqB;IA4P7B,OAAO,CAAC,uBAAuB;IAqJ/B,OAAO,CAAC,oBAAoB;IAgG5B,OAAO,CAAC,qBAAqB;IA8H7B,OAAO,CAAC,2BAA2B;IAoHnC,OAAO,CAAC,iCAAiC;IA6DzC,OAAO,CAAC,4BAA4B;IA0MpC;;;;;;;;;;OAUG;IACH;;;;;;;;;;;OAWG;IAEH,gBAAuB,iCAAiC,EAAE,WAAW,CAAC,MAAM,CAAC,CAgC1E;IAEH;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,8BAA8B;IAiHtC,OAAO,CAAC,uBAAuB;IAwC/B;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,sBAAsB;IAwC9B,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,mBAAmB;IAa3B,OAAO,CAAC,8BAA8B;IA6HtC,OAAO,CAAC,+BAA+B;IAuKvC,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,qBAAqB;IAqO7B,OAAO,CAAC,qBAAqB;IAwI7B,OAAO,CAAC,qBAAqB;IAyN7B,OAAO,CAAC,6BAA6B;IAkLrC,OAAO,CAAC,0BAA0B;IAgClC,OAAO,CAAC,gBAAgB;IAmJxB,OAAO,CAAC,6BAA6B;CAoCtC"}
+{"version":3,"file":"PostUpdateMigrator.d.ts","sourceRoot":"","sources":["../../src/core/PostUpdateMigrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAsCH,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AAIjC,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAiB;IAC/B;;;;;;OAMG;IACH,OAAO,CAAC,UAAU,CAAiC;gBAEvC,MAAM,EAAE,cAAc;IAIlC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,oBAAoB;IA0B5B;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAItC;;;;;;OAMG;IACG,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,qBAAqB,CAAC;IAIjC,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,kBAAkB;IAO1B;;;;OAIG;IACH,OAAO,CAAC,YAAY;IASpB;;;OAGG;IACH,OAAO,IAAI,eAAe;IAiD1B;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,0BAA0B;IAmFlC,OAAO,CAAC,0BAA0B;IAmDlC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kCAAkC;IAwH1C;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,kCAAkC;IA8C1C,OAAO,CAAC,uBAAuB;IAwE/B,OAAO,CAAC,4CAA4C;IA+CpD;;;;;;;OAOG;IACH,OAAO,CAAC,iCAAiC;IA0BzC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,oCAAoC;IAmB5C,OAAO,CAAC,yBAAyB;IA6FjC;;;;;;;;;;OAUG;IACG,YAAY,IAAI,OAAO,CAAC,eAAe,CAAC;YA4BhC,uBAAuB;IAkGrC,OAAO,CAAC,0BAA0B;IAkGlC,OAAO,CAAC,0BAA0B;IAoElC,OAAO,CAAC,oBAAoB;IA4G5B,OAAO,CAAC,8BAA8B;IA2EtC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAaxB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,0BAA0B;IA8BlC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,4BAA4B;IAwBpC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,sBAAsB;IAwB9B;;;;;;;;;OASG;IACH,OAAO,CAAC,wCAAwC;IAuBhD;;;;;;;;OAQG;IACH,OAAO,CAAC,2CAA2C;IAuBnD;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,mCAAmC;IAuE3C;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAW5B;;;;;;;;;OASG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,OAAO,CAAC,yBAAyB;IA4HjC;6EACyE;IACzE,OAAO,CAAC,wBAAwB;IAShC;sDACkD;IAClD,OAAO,CAAC,wBAAwB;IAQhC;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAkPpB;;;;;;;;OAQG;IACH,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI;IA6CvE;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAkEzB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAkChC;;;;;;;;;OASG;IACH,OAAO,CAAC,wBAAwB;IAoEhC;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAiE5B;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;IA8BnC;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAyIhC;;;;;;OAMG;IACH,OAAO,CAAC,8BAA8B;IAwDtC,OAAO,CAAC,0BAA0B;IA8DlC;;;OAGG;IACH,OAAO,CAAC,eAAe;IA+9CvB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,OAAO,CAAC,kCAAkC;IAoG1C;;;OAGG;IACH,OAAO,CAAC,cAAc;IA6JtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,OAAO,CAAC,yCAAyC;IAyDjD;;;OAGG;IACH,OAAO,CAAC,eAAe;IA0SvB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAqFrB;;;OAGG;IACH;;;OAGG;IACH;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,wBAAwB;IAmEhC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,6BAA6B;IAwDrC;;;;;;;;;OASG;IACH,OAAO,CAAC,yBAAyB;IAsDjC,OAAO,CAAC,wBAAwB;IAqChC,OAAO,CAAC,gBAAgB;IAiBxB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,OAAO,CAAC,qBAAqB;IAkE7B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,0BAA0B;IAgDlC;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAkC5B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kBAAkB;IA2C1B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,oBAAoB;IAgC5B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAyBrB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqC9B;;;OAGG;IACH,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,wBAAwB,GAAG,qBAAqB,GAAG,yBAAyB,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,wBAAwB,GAAG,8BAA8B,GAAG,2BAA2B,GAAG,4BAA4B,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,wBAAwB,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,0BAA0B,GAAG,uBAAuB,GAAG,iBAAiB,GAAG,MAAM;IAwBnf,oFAAoF;IACpF,iCAAiC,IAAI,MAAM;IAI3C,6EAA6E;IAC7E,yBAAyB,IAAI,MAAM;IAInC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,2BAA2B;IAmFnC,OAAO,CAAC,mBAAmB;IAob3B,OAAO,CAAC,wBAAwB;IAuJhC,OAAO,CAAC,2BAA2B;IAoEnC,OAAO,CAAC,yBAAyB;IA8IjC,OAAO,CAAC,2BAA2B;IA0JnC,OAAO,CAAC,qBAAqB;IA4P7B,OAAO,CAAC,uBAAuB;IAqJ/B,OAAO,CAAC,oBAAoB;IAgG5B,OAAO,CAAC,qBAAqB;IA8H7B,OAAO,CAAC,2BAA2B;IAoHnC,OAAO,CAAC,iCAAiC;IA6DzC,OAAO,CAAC,4BAA4B;IA0MpC;;;;;;;;;;OAUG;IACH;;;;;;;;;;;OAWG;IAEH,gBAAuB,iCAAiC,EAAE,WAAW,CAAC,MAAM,CAAC,CAgC1E;IAEH;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,8BAA8B;IAiHtC,OAAO,CAAC,uBAAuB;IAwC/B;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,sBAAsB;IAwC9B,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,mBAAmB;IAa3B,OAAO,CAAC,8BAA8B;IA6HtC,OAAO,CAAC,+BAA+B;IAuKvC,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,qBAAqB;IAqO7B,OAAO,CAAC,qBAAqB;IAwI7B,OAAO,CAAC,qBAAqB;IAyN7B,OAAO,CAAC,6BAA6B;IAkLrC,OAAO,CAAC,0BAA0B;IAgClC,OAAO,CAAC,gBAAgB;IAmJxB,OAAO,CAAC,6BAA6B;CAoCtC"}

package/dist/core/PostUpdateMigrator.js

@@ -2994,6 +2994,7 @@ The attention queue spawns ONE Telegram forum topic per item — right for a gen
 Beyond the one-awake-machine model: with the pool enabled I run conversations across ALL my machines at once and can MOVE a conversation between them. Ships DARK behind \`multiMachine.sessionPool.stage\` (default 'dark'); a single-machine agent is a no-op.
 
 - **See the pool:** the **Machines tab** in the dashboard, or \`GET /pool\` (Bearer-auth) → which machine is the router ("dispatcher") + every machine's nickname, hardware, online status, load, and clock-skew status.
+- **Every session, every machine:** the dashboard sessions list shows ALL sessions across the pool, each tagged with the machine it runs on. API: \`GET /sessions?scope=pool\` → \`{ sessions: [...each with machineId/machineNickname...], pool: { peersOk, failed } }\`. An unreachable peer degrades to a \`failed\` entry — local sessions always answer.
 - **Machine nicknames** are the user-facing handle (auto-assigned, editable). Rename via \`PATCH /pool/machines/:machineId\` with \`{"nickname":"the mini"}\`, or inline on the Machines tab.
 - **Which machine + WHY (never guess):** \`GET /pool/placement?topic=N\` → the owning machine + nickname, the **reason** (\`pinned\` = a deliberate move vs \`placed\` = load-balanced vs \`unowned\`), and the lease-holder. Answerable from ANY machine (a standby proxies to the holder). Running ON a machine does NOT mean a topic was deliberately moved there — read this instead of inferring.
 - **Reliable transfer (phrasing-independent):** \`POST /pool/transfer\` with \`{"topic":N,"to":"<nickname|machineId>"}\` runs the same validated planner as "move this to <nickname>" but deterministically. 404 unknown · 409 rate-limited · 409 \`needsConfirmation\` for an offline target (re-send with \`"confirm":true\`). The lever to call directly when a natural-language move didn't catch.
@@ -3018,6 +3019,18 @@ Beyond the one-awake-machine model: with the pool enabled I run conversations ac
             patched = true;
             result.upgraded.push('CLAUDE.md: added pool placement/transfer robustness lines');
         }
+        // Pool-wide session visibility (2026-06-05): agents that ALREADY have the pool
+        // section predate GET /sessions?scope=pool (every session, every machine, each
+        // tagged with its machine — the dashboard cross-machine sessions list). Append
+        // the line so deployed agents can answer "what's running across my machines?"
+        // from the API. Idempotent via the unique `scope=pool` marker.
+        if (content.includes('Multi-Machine Session Pool (active-active') && !content.includes('scope=pool')) {
+            const poolSessions = `
+- **Every session, every machine:** the dashboard sessions list shows ALL sessions across the pool, each tagged with the machine it runs on. API: \`GET /sessions?scope=pool\` → \`{ sessions: [...each with machineId/machineNickname...], pool: { peersOk, failed } }\`. An unreachable peer degrades to a \`failed\` entry — local sessions always answer.`;
+            content += '\n' + poolSessions + '\n';
+            patched = true;
+            result.upgraded.push('CLAUDE.md: added pool-wide session visibility line');
+        }
         // Cross-Machine Secret Sync (spec Phase 4, 2026-06-04): deployed agents don't know
         // a secret can now follow them across machines, nor the two routes. Append the section
         // so an agent surfaces "drop once, usable everywhere" instead of asking the user to
@@ -3418,7 +3431,7 @@ Strip the \`[telegram:N]\` prefix before interpreting the message. Respond natur
 - **Retrieve the secret (HARDENED — required)**: \`node .instar/scripts/secret-drop-retrieve.mjs TOKEN field-name\` — streams the field VALUE to stdout, prints field NAMES + lengths to stderr, NEVER prints the response body. Discover available fields with \`... TOKEN --names\`.
 - **NEVER use \`curl /secrets/retrieve\` directly** — the raw curl pattern dumps the full JSON response (including the secret value) into the Bash tool transcript.
 - List pending: \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/secrets/pending\`
-- **Security**: One-time use, expires after 15 minutes, in-memory only (never written to disk), CSRF-protected.
+- **Security**: One-time link, expires after 15 minutes, CSRF-protected. The moment a secret is SUBMITTED it is also persisted store-first to the durable AES-256-GCM encrypted SecretStore — so it survives session restarts, compaction, and cross-machine handoff instead of evaporating with the in-memory copy. Retrieval transparently falls back to the durable copy, and a successful consume deletes both. (Opt out with \`secrets.persistDrops: false\` in \`.instar/config.json\`.)
 - **When to use** (PROACTIVE — this is the trigger): the moment a user offers to give you a credential (API key, password, token) or you realize you need one, use Secret Drop. It is the ONLY correct way to collect a secret. NEVER accept it pasted into Telegram or chat, and NEVER create a local file (e.g. \`.instar/secrets/foo.env\`) and ask the user to edit/paste into it — that defeats the one-time, in-memory, never-on-disk guarantee and asks the user to edit files (which you must never do). Always issue a Secret Drop one-time link instead.
 `;
             const tunnelIdx = content.indexOf('**Cloudflare Tunnel**');
@@ -3927,6 +3940,25 @@ The user has been talking to you (possibly for days). A generic greeting like "H
                 result.upgraded.push('CLAUDE.md: added Secret Drop --run atomic use-and-consume guidance');
             }
         }
+        // Secret Drop store-first durability (2026-06-04). Existing agents'
+        // Security bullet still claims submissions are "in-memory only (never
+        // written to disk)" — no longer true: submissions are persisted store-first
+        // to the encrypted SecretStore so they survive session churn. Rewrite the
+        // stale bullet so agents stop treating an un-consumed drop as a
+        // race-against-the-TTL. Idempotent: anchors on the old wording; skips when
+        // the durable wording is already present.
+        {
+            const oldSecurityLine = '- **Security**: One-time use, expires after 15 minutes, in-memory only (never written to disk), CSRF-protected.';
+            const newSecurityLine = '- **Security**: One-time link, expires after 15 minutes, CSRF-protected. The moment a secret is SUBMITTED it is also persisted store-first to the durable AES-256-GCM encrypted SecretStore — so it survives session restarts, compaction, and cross-machine handoff instead of evaporating with the in-memory copy. Retrieval transparently falls back to the durable copy, and a successful consume deletes both. (Opt out with `secrets.persistDrops: false` in `.instar/config.json`.)';
+            if (content.includes(oldSecurityLine)) {
+                content = content.replace(oldSecurityLine, newSecurityLine);
+                patched = true;
+                result.upgraded.push('CLAUDE.md: Secret Drop Security bullet updated for store-first durable persistence');
+            }
+            else if (content.includes('persisted store-first to the durable')) {
+                result.skipped.push('CLAUDE.md: Secret Drop store-first durability already documented');
+            }
+        }
         // Worktree Convention section (Migration Parity Standard backfill for
         // Layer 2 of the agent worktree convention — fresh inits get this via
         // generateClaudeMd; existing agents get it here on update).