instar 1.3.489 → 1.3.491

package/dist/core/TopicProfileTransferCarrier.js

@@ -0,0 +1,533 @@
+/**
+ * TopicProfileTransferCarrier — the §5.3 transfer-follow carrier
+ * (TOPIC-PROFILE-SPEC §5.3, "pull-at-ACQUIRE — a named prerequisite sub-task").
+ *
+ * A Topic Profile is STICKY OPERATOR INTENT and must follow the topic across a
+ * session-pool move. Verified on target: `POST /pool/transfer` carries no
+ * payload and has no receive-side hook, and topics also change machines
+ * through paths that never run the planner (hard failover, quota-aware
+ * placement, lease movement). So the carriage hook lives at the
+ * **ownership-ACQUIRE chokepoint**: when THIS machine acquires a topic, it
+ * pulls the topic's profile entry from the previous owner over the existing
+ * Ed25519 machine-auth channel (the `topic-profile-pull` MeshRpc verb) —
+ * covering planner transfers, failovers, and placement moves with ONE
+ * mechanism.
+ *
+ * Spec discipline implemented here:
+ *  - **Batch + latency bounds** (§5.3 round-5 scalability): acquires arriving
+ *    within the batching window coalesce into ONE pull per previous-owner
+ *    peer carrying all topics acquired from it; the durable retry is keyed
+ *    per (peer, batch) with backoff — never N independent per-topic retries.
+ *    Defaults-with-disclosure notices aggregate into one summary per landing.
+ *  - **Fully async**: `onTopicAcquired` is fire-and-forget — the spawn NEVER
+ *    waits (the strong form of the §5.3 ~1-2s budget); reconcile-on-pull-
+ *    landing handles late arrival.
+ *  - **Unreachable previous owner**: the pull is filed DURABLY
+ *    (`state/topic-profile-pending-pulls.json`) before the first attempt, so
+ *    a crash/restart never loses it; while it is pending, resolution keeps
+ *    using the LOCAL entry (`hasPendingPull` is the staleness signal for the
+ *    resolution layer's disclosure).
+ *  - **Late pull never clobbers a fresher local operator write** (§5.3
+ *    rounds 5-8, event-ordered and clock-free): a local operator (or
+ *    token-trust HTTP) write DURABLY AMENDS the pending-pull record itself —
+ *    removes that topic from the (peer, batch) retry entry — via
+ *    `onLocalWriteDurable`, which the write surface calls ONLY after the
+ *    triggering mutate's flush has durably landed (`store.mutate` resolves
+ *    only then, so "after await mutate" IS the contract; a flush-refused
+ *    write throws and cancels nothing). The amendment survives restarts
+ *    exactly as well as the pull it cancels. The apply path re-reads the
+ *    durable record at landing time, so a write racing an in-flight pull
+ *    cancels the REPLACE too. System-attributed writes NEVER cancel.
+ *  - **updatedAt backstop** (clock-skew-aware, for pulls landing with no
+ *    recorded local write event): local newer wins, ties favor local, and
+ *    the pulled entry's updatedAt is clamped to ≤ the pull-receipt time for
+ *    the comparison (a future-dated pulled entry is treated as older,
+ *    audited). System-attributed local writes never supersede via the
+ *    backstop (§5.3 round-6 — the breaker must not shed a transferred pin
+ *    through a side door).
+ *  - **Newly-pending supersedes older pending** for the same topic (rapid
+ *    A→B→C→B re-transfers can't leave two pulls racing).
+ *  - **protocol-unsupported ≠ unreachable**: a peer answering `no-handler`
+ *    (its instar predates the verb) PARKS the record until
+ *    `peerSupportsPull` reports support — no backoff spin against a
+ *    permanent 404.
+ *  - **Absent on the previous owner clears nothing** — the local entry stays
+ *    (a failover-then-transfer-back must not wipe a still-valid pin).
+ *  - **Receiving-machine revalidation is MANDATORY**: every landing goes
+ *    through `store.replaceEntry(..., { revalidate })` (§10.2 closed-enum +
+ *    framework-compat clamp; dropped fields disclosed). Provenance travels
+ *    verbatim but the audit tags the landing `origin:'transfer:<machineId>'`
+ *    — peer-asserted, never a locally-verified principal.
+ *
+ * The serve side (`createTopicProfilePullHandler`) is the pool-layer handler
+ * the dispatcher registers for the `topic-profile-pull` verb: it serves this
+ * machine's OWN entries (current + dry-run shadow — `previous` stays local,
+ * undo means "back to what this machine had").
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+/** Upper bound on topics served per pull (a mass failover stays one request). */
+export const MAX_TOPICS_PER_PULL = 500;
+/**
+ * The serve-side handler for the `topic-profile-pull` MeshRpc verb — pool
+ * layer registers it on the dispatcher. Stateless; reads the authoritative
+ * in-memory cache (O(topics)). Absent entries answer `present:false` so the
+ * receiver can distinguish "no entry" (clear nothing) from a null profile.
+ */
+export function createTopicProfilePullHandler(deps) {
+    const cap = deps.maxTopicsPerPull ?? MAX_TOPICS_PER_PULL;
+    return (cmd) => {
+        if (!Array.isArray(cmd.topics) || cmd.topics.some((t) => typeof t !== 'string')) {
+            return { ok: false, reason: 'malformed-topics' };
+        }
+        if (cmd.topics.length > cap) {
+            return { ok: false, reason: 'too-many-topics' };
+        }
+        const entries = cmd.topics.map((topicKey) => {
+            const entry = deps.store.get(topicKey);
+            if (!entry || (entry.current === null && entry.intendedProfile === null)) {
+                return { topicKey, present: false, current: null, intendedProfile: null };
+            }
+            return {
+                topicKey,
+                present: true,
+                current: entry.current ? { ...entry.current } : null,
+                intendedProfile: entry.intendedProfile ? { ...entry.intendedProfile } : null,
+            };
+        });
+        return { ok: true, entries };
+    };
+}
+const DEFAULT_BATCH_WINDOW_MS = 250;
+const DEFAULT_RETRY_BACKOFF_START_MS = 30_000;
+const DEFAULT_RETRY_BACKOFF_MAX_MS = 30 * 60_000;
+const DEFAULT_PENDING_TTL_MS = 7 * 24 * 60 * 60_000;
+export class TopicProfileTransferCarrier {
+    d;
+    ledgerFile;
+    /** Staged acquires per previous-owner peer, awaiting the batch window. */
+    staged = new Map();
+    batchTimers = new Map();
+    /** Single-flight per peer (attempts never overlap per peer). */
+    inFlight = new Map();
+    episodeSeq = 0;
+    /** Durable ledger cache (loaded lazily, kept in sync with every write). */
+    pulls = null;
+    constructor(deps) {
+        this.d = deps;
+        this.ledgerFile = path.join(deps.stateDir, 'state', 'topic-profile-pending-pulls.json');
+    }
+    now() {
+        return this.d.now?.() ?? new Date();
+    }
+    // ── the ACQUIRE hook (fire-and-forget, never blocks a spawn) ──────────────
+    /**
+     * THIS machine acquired ownership of a topic. Stages a pull from the
+     * previous owner; acquires within the batch window coalesce into ONE pull
+     * per peer (§5.3 batch bound). Fire-and-forget: returns immediately.
+     */
+    onTopicAcquired(topicKey, prevOwnerMachineId) {
+        const key = String(topicKey);
+        let prev = prevOwnerMachineId;
+        if (prev === undefined) {
+            try {
+                prev = this.d.prevOwnerOf?.(key) ?? null;
+            }
+            catch (e) {
+                // @silent-fallback-ok: audited (kind:'prev-owner-lookup-failed') —
+                // the ACQUIRE hook is fire-and-forget and must never block a spawn
+                // (§5.3); with no resolvable previous owner there is nothing to pull
+                // from, and the local entry (if any) remains authoritative.
+                this.d.audit?.({ kind: 'prev-owner-lookup-failed', topic: key, error: e instanceof Error ? e.message : String(e) });
+                prev = null;
+            }
+        }
+        if (!prev || prev === this.d.selfMachineId)
+            return; // nothing to pull / self-move
+        let set = this.staged.get(prev);
+        if (!set) {
+            set = new Set();
+            this.staged.set(prev, set);
+        }
+        set.add(key);
+        if (!this.batchTimers.has(prev)) {
+            const peer = prev;
+            const t = setTimeout(() => {
+                this.batchTimers.delete(peer);
+                void this.flushStagedPeer(peer).catch((e) => {
+                    this.d.logger?.(`topic-profile pull flush failed for ${peer}: ${e instanceof Error ? e.message : String(e)}`);
+                });
+            }, this.d.batchWindowMs ?? DEFAULT_BATCH_WINDOW_MS);
+            t.unref?.();
+            this.batchTimers.set(peer, t);
+        }
+    }
+    /** Force-drain every staged batch now (tests + shutdown). */
+    async flushStaged() {
+        const peers = [...this.staged.keys()];
+        for (const peer of peers) {
+            const t = this.batchTimers.get(peer);
+            if (t) {
+                clearTimeout(t);
+                this.batchTimers.delete(peer);
+            }
+            await this.flushStagedPeer(peer);
+        }
+    }
+    async flushStagedPeer(peer) {
+        const set = this.staged.get(peer);
+        this.staged.delete(peer);
+        if (!set || set.size === 0)
+            return;
+        const topics = [...set];
+        // File the durable record FIRST (a crash between filing and the attempt
+        // re-fires on the next tick), superseding any older pending pull for
+        // these topics (§5.3 — two pulls must never race for one topic).
+        const episodeId = `${peer}:${this.now().getTime()}:${++this.episodeSeq}`;
+        this.amendLedger((pulls) => {
+            for (const rec of pulls) {
+                const before = rec.topics.length;
+                rec.topics = rec.topics.filter((t) => !set.has(t));
+                if (rec.topics.length !== before) {
+                    this.d.audit?.({
+                        kind: 'pull-superseded-by-newer-pull',
+                        oldEpisode: rec.episodeId,
+                        newEpisode: episodeId,
+                        removed: before - rec.topics.length,
+                    });
+                }
+            }
+            const next = pulls.filter((r) => r.topics.length > 0);
+            next.push({
+                episodeId,
+                peer,
+                topics,
+                attempts: 0,
+                nextRetryAt: 0,
+                parkedForProtocol: false,
+                createdAt: this.now().toISOString(),
+            });
+            return next;
+        });
+        this.d.audit?.({ kind: 'pull-filed', episodeId, peer, topicCount: topics.length });
+        await this.attemptPeer(peer);
+    }
+    // ── the §5.3 cancel marker (local write supersedes the pending REPLACE) ───
+    /**
+     * A LOCAL profile write for `topicKey` has DURABLY landed (the caller
+     * invokes this only after `store.mutate(...)` resolved — `mutate` resolves
+     * only after its flush is durable, so a flush-refused write throws first
+     * and cancels nothing). Operator and token-trust HTTP writes durably amend
+     * every pending-pull record to drop the topic — the pending REPLACE is
+     * CANCELLED, event-ordered and clock-free. System-attributed writes never
+     * cancel (§5.3 round-6 — the breaker can't shed a transferred pin).
+     */
+    onLocalWriteDurable(topicKey, origin) {
+        if (origin === 'system')
+            return;
+        const key = String(topicKey);
+        // Staged (not yet filed) acquires for this topic are dropped too.
+        for (const [peer, set] of this.staged) {
+            if (set.delete(key) && set.size === 0)
+                this.staged.delete(peer);
+        }
+        const cancelledFrom = [];
+        this.amendLedger((pulls) => {
+            for (const rec of pulls) {
+                if (rec.topics.includes(key)) {
+                    rec.topics = rec.topics.filter((t) => t !== key);
+                    cancelledFrom.push(rec.episodeId);
+                }
+            }
+            return pulls.filter((r) => r.topics.length > 0);
+        });
+        for (const episodeId of cancelledFrom) {
+            this.d.audit?.({ kind: 'pull-superseded-by-local-write', topic: key, origin, episodeId });
+        }
+    }
+    // ── retry drain (tick / peer-online) ──────────────────────────────────────
+    /** Is a pull pending for this topic? (Resolution's staleness signal, §5.3.) */
+    hasPendingPull(topicKey) {
+        const key = String(topicKey);
+        if ([...this.staged.values()].some((s) => s.has(key)))
+            return true;
+        return this.loadLedger().some((r) => r.topics.includes(key));
+    }
+    /** Observability: the durable pending records (copies). */
+    pending() {
+        return this.loadLedger().map((r) => ({ ...r, topics: [...r.topics] }));
+    }
+    /**
+     * Slow tick (the server calls this every ~60s): TTL-sweep, then attempt
+     * every due record (backoff respected; parked records re-checked against
+     * the protocol handshake).
+     */
+    async tick() {
+        const nowMs = this.now().getTime();
+        const ttl = this.d.pendingTtlMs ?? DEFAULT_PENDING_TTL_MS;
+        const expired = [];
+        this.amendLedger((pulls) => pulls.filter((r) => {
+            const created = Date.parse(r.createdAt);
+            if (Number.isFinite(created) && nowMs - created > ttl) {
+                expired.push(r);
+                return false;
+            }
+            return true;
+        }));
+        for (const r of expired) {
+            this.d.audit?.({ kind: 'pull-expired', episodeId: r.episodeId, peer: r.peer, topicCount: r.topics.length });
+        }
+        const duePeers = new Set(this.loadLedger()
+            .filter((r) => (r.parkedForProtocol ? this.d.peerSupportsPull?.(r.peer) === true : r.nextRetryAt <= nowMs))
+            .map((r) => r.peer));
+        for (const peer of duePeers)
+            await this.attemptPeer(peer);
+    }
+    /** A peer came back online — drain its pending pulls now (backoff bypassed). */
+    async onPeerOnline(machineId) {
+        const has = this.loadLedger().some((r) => r.peer === machineId);
+        if (!has)
+            return;
+        this.amendLedger((pulls) => {
+            for (const r of pulls) {
+                if (r.peer === machineId && !r.parkedForProtocol)
+                    r.nextRetryAt = 0;
+            }
+            return pulls;
+        });
+        await this.attemptPeer(machineId);
+    }
+    // ── attempt + apply ────────────────────────────────────────────────────────
+    attemptPeer(peer) {
+        const existing = this.inFlight.get(peer);
+        if (existing)
+            return existing; // single-flight per peer
+        const run = this.attemptPeerInner(peer).finally(() => {
+            this.inFlight.delete(peer);
+        });
+        this.inFlight.set(peer, run);
+        return run;
+    }
+    async attemptPeerInner(peer) {
+        const nowMs = this.now().getTime();
+        const records = this.loadLedger().filter((r) => r.peer === peer);
+        for (const rec of records) {
+            if (rec.parkedForProtocol) {
+                if (this.d.peerSupportsPull?.(peer) !== true)
+                    continue; // still parked
+                this.amendLedger((pulls) => {
+                    const live = pulls.find((p) => p.episodeId === rec.episodeId);
+                    if (live)
+                        live.parkedForProtocol = false;
+                    return pulls;
+                });
+            }
+            else if (rec.nextRetryAt > nowMs) {
+                continue; // not due
+            }
+            // Pre-attempt handshake check: a known-unsupported peer parks without
+            // burning a transport round-trip (§5.3 rolling-update skew).
+            if (this.d.peerSupportsPull?.(peer) === false) {
+                this.park(rec.episodeId, peer);
+                continue;
+            }
+            let outcome;
+            try {
+                // Re-read the live record — a local write may have amended it while
+                // we were iterating.
+                const live = this.loadLedger().find((p) => p.episodeId === rec.episodeId);
+                if (!live || live.topics.length === 0)
+                    continue;
+                outcome = await this.d.sendPull(peer, [...live.topics]);
+            }
+            catch (e) {
+                outcome = { kind: 'unreachable', detail: e instanceof Error ? e.message : String(e) };
+            }
+            if (outcome.kind === 'protocol-unsupported') {
+                this.park(rec.episodeId, peer);
+                continue;
+            }
+            if (outcome.kind === 'unreachable') {
+                const startMs = this.d.retryBackoffStartMs ?? DEFAULT_RETRY_BACKOFF_START_MS;
+                const maxMs = this.d.retryBackoffMaxMs ?? DEFAULT_RETRY_BACKOFF_MAX_MS;
+                let attempts = 0;
+                this.amendLedger((pulls) => {
+                    const live = pulls.find((p) => p.episodeId === rec.episodeId);
+                    if (live) {
+                        live.attempts += 1;
+                        attempts = live.attempts;
+                        live.nextRetryAt = this.now().getTime() + Math.min(maxMs, startMs * 2 ** (live.attempts - 1));
+                    }
+                    return pulls;
+                });
+                this.d.audit?.({ kind: 'pull-unreachable', episodeId: rec.episodeId, peer, attempts, detail: outcome.detail });
+                continue;
+            }
+            await this.applyLanding(rec.episodeId, peer, outcome.entries);
+        }
+    }
+    park(episodeId, peer) {
+        this.amendLedger((pulls) => {
+            const live = pulls.find((p) => p.episodeId === episodeId);
+            if (live)
+                live.parkedForProtocol = true;
+            return pulls;
+        });
+        this.d.audit?.({ kind: 'pull-parked-protocol-unsupported', episodeId, peer });
+    }
+    /**
+     * A pull landed. Per topic: the durable record is re-read (a local write
+     * that amended it mid-flight cancels that topic's REPLACE), ownership is
+     * re-checked (actuation authority), the updatedAt backstop runs, then the
+     * §10.2-revalidated wholesale REPLACE applies. Disclosures aggregate into
+     * ONE summary per landing.
+     */
+    async applyLanding(episodeId, peer, entries) {
+        const live = this.loadLedger().find((p) => p.episodeId === episodeId);
+        const liveTopics = new Set(live?.topics ?? []);
+        const receiptIso = this.now().toISOString();
+        let applied = 0;
+        const disclosures = [];
+        for (const entry of entries) {
+            const key = entry.topicKey;
+            if (!liveTopics.has(key)) {
+                // Cancelled by a local write (the durable amendment) or superseded by
+                // a newer pull while this one was in flight — the REPLACE is dropped.
+                this.d.audit?.({ kind: 'pull-landing-cancelled', topic: key, episodeId, peer });
+                continue;
+            }
+            // Ownership recheck — we may no longer own the topic (re-transferred
+            // while the pull was pending); the current owner's own pull covers truth.
+            let owner = null;
+            try {
+                owner = this.d.ownerOf(key).owner;
+            }
+            catch {
+                // @silent-fallback-ok: the ownership RE-check is a best-effort guard
+                // against landing onto a re-transferred topic; a reader error means
+                // owner-UNKNOWN, which must not be treated as not-owner (that would
+                // drop a valid pull) — every landing outcome below is audited.
+                owner = null;
+            }
+            if (owner !== null && owner !== this.d.selfMachineId) {
+                this.d.audit?.({ kind: 'pull-skipped-not-owner', topic: key, episodeId, owner });
+                liveTopics.delete(key); // resolved — deliberately skipped, never retried
+                continue;
+            }
+            if (!entry.present) {
+                // Absent on the previous owner clears NOTHING — the local entry stays
+                // (a failover-then-transfer-back must not wipe a still-valid pin).
+                this.d.audit?.({ kind: 'pull-absent-on-previous-owner', topic: key, episodeId, peer });
+                liveTopics.delete(key); // resolved
+                continue;
+            }
+            // updatedAt backstop (clock-free cancel is primary; this catches pulls
+            // landing with no recorded local write event): local newer wins, ties
+            // favor local — and a pulled updatedAt clamped above the pull-receipt
+            // time (future-dated: forged or skew-ahead) is treated as OLDER than
+            // any local entry, audited (§5.3 round-6 — a peer-asserted timestamp
+            // must never outrank a genuinely fresher local pin). System-attributed
+            // local writes never supersede via the backstop.
+            const localCurrent = this.d.store.resolve(key);
+            const arrivingUpdatedAt = typeof entry.current?.updatedAt === 'string' ? entry.current.updatedAt : null;
+            if (localCurrent && arrivingUpdatedAt && !localCurrent.updatedBy.startsWith('system:')) {
+                const futureDated = arrivingUpdatedAt > receiptIso;
+                if (futureDated) {
+                    this.d.audit?.({ kind: 'pull-updatedat-clamped', topic: key, episodeId, peer });
+                }
+                if (futureDated || localCurrent.updatedAt >= arrivingUpdatedAt) {
+                    this.d.audit?.({
+                        kind: 'pull-superseded-by-local-write',
+                        topic: key,
+                        origin: 'updatedAt-backstop',
+                        episodeId,
+                    });
+                    liveTopics.delete(key); // resolved — local wins
+                    continue;
+                }
+            }
+            // §10.2 MANDATORY receiving-machine revalidation, then wholesale REPLACE.
+            try {
+                const result = await this.d.store.replaceEntry(key, { current: entry.current, intendedProfile: entry.intendedProfile }, { revalidate: { fallbackFramework: this.d.effectiveFramework() } });
+                applied += 1;
+                this.d.audit?.({
+                    kind: 'pull-applied',
+                    topic: key,
+                    episodeId,
+                    origin: `transfer:${peer}`,
+                    delta: result.delta,
+                    droppedFieldCount: result.droppedFields.length,
+                });
+                for (const dropped of result.droppedFields) {
+                    disclosures.push(`topic ${key}: the transferred ${dropped.field} didn't validate on this machine (${dropped.reason}) — using the default`);
+                }
+            }
+            catch (e) {
+                // FlushRefusedError etc. — the topic STAYS in the record (it remains
+                // in liveTopics); the next tick retries the pull (REPLACE is
+                // idempotent). Back the episode off so a wedged disk doesn't spin.
+                this.d.logger?.(`topic-profile REPLACE failed for ${key}: ${e instanceof Error ? e.message : String(e)}`);
+                this.amendLedger((pulls) => {
+                    const liveRec = pulls.find((p) => p.episodeId === episodeId);
+                    if (liveRec) {
+                        const startMs = this.d.retryBackoffStartMs ?? DEFAULT_RETRY_BACKOFF_START_MS;
+                        liveRec.nextRetryAt = this.now().getTime() + startMs;
+                    }
+                    return pulls;
+                });
+                continue;
+            }
+            liveTopics.delete(key); // resolved — applied
+        }
+        // Resolve the episode: topics remaining in liveTopics are ONLY the
+        // flush-failed ones (everything applied/skipped was deleted above) —
+        // they stay in the record for retry; the rest leave it.
+        this.amendLedger((pulls) => {
+            const liveRec = pulls.find((p) => p.episodeId === episodeId);
+            if (liveRec)
+                liveRec.topics = liveRec.topics.filter((t) => liveTopics.has(t));
+            return pulls.filter((r) => r.topics.length > 0);
+        });
+        if (applied > 0 || disclosures.length > 0) {
+            const lines = [`${applied} topic profile${applied === 1 ? '' : 's'} arrived from ${peer}.`, ...disclosures];
+            this.d.notify?.(lines.join('\n'));
+        }
+    }
+    // ── durable ledger (atomic tmp+rename, restart-proof) ─────────────────────
+    loadLedger() {
+        if (this.pulls)
+            return this.pulls;
+        try {
+            const parsed = JSON.parse(fs.readFileSync(this.ledgerFile, 'utf-8'));
+            this.pulls = Array.isArray(parsed?.pulls)
+                ? parsed.pulls.filter((r) => !!r &&
+                    typeof r === 'object' &&
+                    typeof r.episodeId === 'string' &&
+                    typeof r.peer === 'string' &&
+                    Array.isArray(r.topics) &&
+                    r.topics.every((t) => typeof t === 'string'))
+                : [];
+        }
+        catch {
+            /* @silent-fallback-ok: an absent/corrupt pending-pull ledger only loses queued retries for moves that already disclosed "pins reconcile when reachable" — the reflex (next acquire or onPeerOnline) re-files; never a boot failure (TOPIC-PROFILE-SPEC §5.3) */
+            this.pulls = [];
+        }
+        return this.pulls;
+    }
+    /** Apply a mutation to the ledger and persist it durably (tmp+rename). */
+    amendLedger(fn) {
+        const next = fn(this.loadLedger());
+        this.pulls = next;
+        try {
+            fs.mkdirSync(path.dirname(this.ledgerFile), { recursive: true });
+            const tmp = `${this.ledgerFile}.${process.pid}.tmp`;
+            fs.writeFileSync(tmp, JSON.stringify({ version: 1, pulls: next }, null, 2));
+            fs.renameSync(tmp, this.ledgerFile);
+        }
+        catch (e) {
+            /* @silent-fallback-ok: a failed ledger persist keeps the in-memory amendment authoritative for this process; the durable copy self-heals at the next successful amend — logged, never thrown into the acquire/write path (TOPIC-PROFILE-SPEC §5.3) */
+            this.d.logger?.(`pending-pull ledger persist failed: ${e instanceof Error ? e.message : String(e)}`);
+        }
+    }
+}
+//# sourceMappingURL=TopicProfileTransferCarrier.js.map

package/dist/core/TopicProfileTransferCarrier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TopicProfileTransferCarrier.js","sourceRoot":"","sources":["../../src/core/TopicProfileTransferCarrier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAwB7B,iFAAiF;AACjF,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAAC,IAG7C;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,IAAI,mBAAmB,CAAC;IACzD,OAAO,CAAC,GAAG,EAAE,EAAE;QACb,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YAChF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACnD,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QAClD,CAAC;QACD,MAAM,OAAO,GAA6B,GAAG,CAAC,MAAmB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;YACjF,MAAM,KAAK,GAA6B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACjE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,CAAC,EAAE,CAAC;gBACzE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;YAC5E,CAAC;YACD,OAAO;gBACL,QAAQ;gBACR,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;gBACpD,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI;aAC7E,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC,CAAC;AACJ,CAAC;AAyED,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAC9C,MAAM,4BAA4B,GAAG,EAAE,GAAG,MAAM,CAAC;AACjD,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AAEpD,MAAM,OAAO,2BAA2B;IACrB,CAAC,CAAkC;IACnC,UAAU,CAAS;IAEpC,0EAA0E;IAClE,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxC,WAAW,GAAG,IAAI,GAAG,EAAyC,CAAC;IACvE,gEAAgE;IACxD,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC5C,UAAU,GAAG,CAAC,CAAC;IACvB,2EAA2E;IACnE,KAAK,GAA+B,IAAI,CAAC;IAEjD,YAAY,IAAqC;QAC/C,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QACd,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,kCAAkC,CAAC,CAAC;IAC1F,CAAC;IAEO,GAAG;QACT,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;IACtC,CAAC;IAED,6EAA6E;IAE7E;;;;OAIG;IACH,eAAe,CAAC,QAAyB,EAAE,kBAAkC;QAC3E,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7B,IAAI,IAAI,GAAG,kBAAkB,CAAC;QAC9B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;YAC3C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,mEAAmE;gBACnE,mEAAmE;gBACnE,qEAAqE;gBACrE,4DAA4D;gBAC5D,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpH,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa;YAAE,OAAO,CAAC,8BAA8B;QAElF,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7B,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEb,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,IAAI,CAAC;YAClB,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE;gBACxB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9B,KAAK,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC1C,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,uCAAuC,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAChH,CAAC,CAAC,CAAC;YACL,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,IAAI,uBAAuB,CAAC,CAAC;YACpD,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACZ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,WAAW;QACf,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,EAAE,CAAC;gBACN,YAAY,CAAC,CAAC,CAAC,CAAC;gBAChB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAChC,CAAC;YACD,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,IAAY;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QACnC,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;QAExB,wEAAwE;QACxE,qEAAqE;QACrE,iEAAiE;QACjE,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QACzE,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,EAAE;YACzB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;gBACjC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnD,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBACjC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;wBACb,IAAI,EAAE,+BAA+B;wBACrC,UAAU,EAAE,GAAG,CAAC,SAAS;wBACzB,UAAU,EAAE,SAAS;wBACrB,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM;qBACpC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACtD,IAAI,CAAC,IAAI,CAAC;gBACR,SAAS;gBACT,IAAI;gBACJ,MAAM;gBACN,QAAQ,EAAE,CAAC;gBACX,WAAW,EAAE,CAAC;gBACd,iBAAiB,EAAE,KAAK;gBACxB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAEnF,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,6EAA6E;IAE7E;;;;;;;;OAQG;IACH,mBAAmB,CAAC,QAAyB,EAAE,MAAwB;QACrE,IAAI,MAAM,KAAK,QAAQ;YAAE,OAAO;QAChC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE7B,kEAAkE;QAClE,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACtC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,EAAE;YACzB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;gBACxB,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7B,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;oBACjD,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QACH,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;YACtC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,6EAA6E;IAE7E,+EAA+E;IAC/E,cAAc,CAAC,QAAyB;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACnE,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,2DAA2D;IAC3D,OAAO;QACL,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,IAAI,sBAAsB,CAAC;QAC1D,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,EAAE,CACzB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACjB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACxC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,GAAG,OAAO,GAAG,GAAG,EAAE,CAAC;gBACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CACH,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9G,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,IAAI,CAAC,UAAU,EAAE;aACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,CAAC;aAC1G,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CACtB,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,QAAQ;YAAE,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,YAAY,CAAC,SAAiB;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,EAAE;YACzB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,iBAAiB;oBAAE,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC;YACtE,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,8EAA8E;IAEtE,WAAW,CAAC,IAAY;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC,CAAC,yBAAyB;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACnD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7B,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,IAAY;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACjE,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;gBAC1B,IAAI,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI;oBAAE,SAAS,CAAC,eAAe;gBACvE,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,EAAE;oBACzB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC;oBAC9D,IAAI,IAAI;wBAAE,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;oBACzC,OAAO,KAAK,CAAC;gBACf,CAAC,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,GAAG,CAAC,WAAW,GAAG,KAAK,EAAE,CAAC;gBACnC,SAAS,CAAC,UAAU;YACtB,CAAC;YAED,sEAAsE;YACtE,6DAA6D;YAC7D,IAAI,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YAED,IAAI,OAAwB,CAAC;YAC7B,IAAI,CAAC;gBACH,oEAAoE;gBACpE,qBAAqB;gBACrB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC1E,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBAChD,OAAO,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACnC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,mBAAmB,IAAI,8BAA8B,CAAC;gBAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,iBAAiB,IAAI,4BAA4B,CAAC;gBACvE,IAAI,QAAQ,GAAG,CAAC,CAAC;gBACjB,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,EAAE;oBACzB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC;oBAC9D,IAAI,IAAI,EAAE,CAAC;wBACT,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;wBACnB,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;wBACzB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC;oBAChG,CAAC;oBACD,OAAO,KAAK,CAAC;gBACf,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC/G,SAAS;YACX,CAAC;YAED,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,SAAiB,EAAE,IAAY;QAC1C,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,EAAE;YACzB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;YAC1D,IAAI,IAAI;gBAAE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,kCAAkC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,IAAY,EAAE,OAAgC;QAC1F,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAE5C,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,MAAM,WAAW,GAAa,EAAE,CAAC;QAEjC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC;YAC3B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,sEAAsE;gBACtE,sEAAsE;gBACtE,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChF,SAAS;YACX,CAAC;YAED,qEAAqE;YACrE,0EAA0E;YAC1E,IAAI,KAAK,GAAkB,IAAI,CAAC;YAChC,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;gBACrE,oEAAoE;gBACpE,oEAAoE;gBACpE,+DAA+D;gBAC/D,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YACD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;gBACrD,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;gBACjF,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,iDAAiD;gBACzE,SAAS;YACX,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,sEAAsE;gBACtE,mEAAmE;gBACnE,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,+BAA+B,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvF,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW;gBACnC,SAAS;YACX,CAAC;YAED,uEAAuE;YACvE,sEAAsE;YACtE,sEAAsE;YACtE,qEAAqE;YACrE,qEAAqE;YACrE,uEAAuE;YACvE,iDAAiD;YACjD,MAAM,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,iBAAiB,GAAG,OAAO,KAAK,CAAC,OAAO,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;YACxG,IAAI,YAAY,IAAI,iBAAiB,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvF,MAAM,WAAW,GAAG,iBAAiB,GAAG,UAAU,CAAC;gBACnD,IAAI,WAAW,EAAE,CAAC;oBAChB,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClF,CAAC;gBACD,IAAI,WAAW,IAAI,YAAY,CAAC,SAAS,IAAI,iBAAiB,EAAE,CAAC;oBAC/D,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;wBACb,IAAI,EAAE,gCAAgC;wBACtC,KAAK,EAAE,GAAG;wBACV,MAAM,EAAE,oBAAoB;wBAC5B,SAAS;qBACV,CAAC,CAAC;oBACH,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,wBAAwB;oBAChD,SAAS;gBACX,CAAC;YACH,CAAC;YAED,0EAA0E;YAC1E,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAC5C,GAAG,EACH,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,EAClE,EAAE,UAAU,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAC,kBAAkB,EAAE,EAAE,EAAE,CACnE,CAAC;gBACF,OAAO,IAAI,CAAC,CAAC;gBACb,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;oBACb,IAAI,EAAE,cAAc;oBACpB,KAAK,EAAE,GAAG;oBACV,SAAS;oBACT,MAAM,EAAE,YAAY,IAAI,EAAE;oBAC1B,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,iBAAiB,EAAE,MAAM,CAAC,aAAa,CAAC,MAAM;iBAC/C,CAAC,CAAC;gBACH,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;oBAC3C,WAAW,CAAC,IAAI,CACd,SAAS,GAAG,qBAAqB,OAAO,CAAC,KAAK,qCAAqC,OAAO,CAAC,MAAM,uBAAuB,CACzH,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,qEAAqE;gBACrE,6DAA6D;gBAC7D,mEAAmE;gBACnE,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,oCAAoC,GAAG,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC1G,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,EAAE;oBACzB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;oBAC7D,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,mBAAmB,IAAI,8BAA8B,CAAC;wBAC7E,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC;oBACvD,CAAC;oBACD,OAAO,KAAK,CAAC;gBACf,CAAC,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,qBAAqB;QAC/C,CAAC;QAED,mEAAmE;QACnE,qEAAqE;QACrE,wDAAwD;QACxD,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,EAAE;YACzB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;YAC7D,IAAI,OAAO;gBAAE,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9E,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,iBAAiB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,iBAAiB,IAAI,GAAG,EAAE,GAAG,WAAW,CAAC,CAAC;YAC5G,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,6EAA6E;IAErE,UAAU;QAChB,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAmC,CAAC;YACvG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;gBACvC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,CAAC,CAAC,EAA0B,EAAE,CAC5B,CAAC,CAAC,CAAC;oBACH,OAAO,CAAC,KAAK,QAAQ;oBACrB,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;oBAC/B,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;oBAC1B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;oBACvB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAC/C;gBACH,CAAC,CAAC,EAAE,CAAC;QACT,CAAC;QAAC,MAAM,CAAC;YACP,gQAAgQ;YAChQ,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QAClB,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,0EAA0E;IAClE,WAAW,CAAC,EAAuD;QACzE,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACjE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;YACpD,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAkC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5G,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,sPAAsP;YACtP,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,uCAAuC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;CACF"}

package/dist/core/TopicResumeMap.d.ts

@@ -9,10 +9,47 @@
  * Storage: {stateDir}/topic-resume-map.json
  * Entries auto-prune after 24 hours.
  */
+/** §8 provenance tag — gates the none-loss claim (TOPIC-PROFILE-SPEC §7/§8). */
+export type ResumeProvenance = 'hook' | 'mtime-fallback';
+export interface ResumeEntry {
+    uuid: string;
+    savedAt: string;
+    sessionName: string;
+    /**
+     * §8 framework tag. Untagged legacy entries are grandfathered as
+     * 'claude-code' (provably safe — this map has only ever captured Claude
+     * JSONL UUIDs) and tagged lazily on the next write.
+     */
+    framework?: string;
+    /** Untagged legacy entries grandfather as 'hook' (same provable basis). */
+    provenance?: ResumeProvenance;
+    /**
+     * §8 — "remove" means PARK, not delete: parked entries are ignored by
+     * resolution (get() returns null) but recoverable by the §10.4 breaker
+     * revert / §10.3 undo via unpark(). Holds the parking reason.
+     */
+    parked?: string | null;
+}
+/**
+ * §8 resume-writer gate (TOPIC-PROFILE-SPEC round-3 adversarial): EVERY
+ * writer — the beforeSessionKill listener, the 60s heartbeat
+ * (refreshResumeMappings), the 8s post-spawn proactive save, and the
+ * shutdown/refresh-route saves — funnels through save()/refreshResumeMappings,
+ * so a single gate at this chokepoint covers all four structurally. The gate
+ * refuses a write for a topic whose resolved profile framework is not
+ * claude-code, or whose topic is under an active mid-framework-switch
+ * suppression marker. Without it, the heartbeat would re-poison the map
+ * within a minute of a framework switch.
+ */
+export type ResumeWriteGate = (topicId: number) => {
+    allowed: boolean;
+    reason?: string;
+};
 export declare class TopicResumeMap {
     private filePath;
     private projectDir;
     private tmuxPath;
+    private writeGate;
     constructor(stateDir: string, projectDir: string, tmuxPath?: string);
     /**
      * Compute the Claude Code project directory name for this project.
@@ -40,15 +77,44 @@ export declare class TopicResumeMap {
      * the most recent JSONL file regardless of which session it belongs to.
      */
     findUuidForSession(tmuxSession: string, claudeSessionId?: string): string | null;
+    /**
+     * Install the §8 profile write-gate (TOPIC-PROFILE-SPEC). All writers are
+     * gated at this single chokepoint — the heartbeat, the kill listener, the
+     * post-spawn save and the shutdown saves all land in save()/
+     * refreshResumeMappings. No gate installed ⇒ today's behavior (ungated).
+     */
+    setWriteGate(gate: ResumeWriteGate | null): void;
+    private gateAllows;
     /**
      * Persist a resume mapping before killing an idle session.
+     * Entries are framework-tagged ('claude-code' — this map only ever holds
+     * Claude JSONL UUIDs) and provenance-tagged (§8). A refused (gated) write
+     * is a silent no-op — the gate's caller owns disclosure.
      */
-    save(topicId: number, uuid: string, sessionName: string): void;
+    save(topicId: number, uuid: string, sessionName: string, provenance?: ResumeProvenance): void;
     /**
      * Look up a resume UUID for a topic. Returns null if not found,
      * expired, or the JSONL file no longer exists.
      */
     get(topicId: number): string | null;
+    /**
+     * §8 last-line guard: the spawn path REFUSES a resume id whose framework
+     * tag mismatches the resolved framework, falling to CONTINUATION with
+     * disclosure. Untagged legacy entries grandfather as 'claude-code'.
+     */
+    getForFramework(topicId: number, resolvedFramework: string): string | null;
+    /**
+     * §8 provenance read — the none-loss rows require HOOK provenance; an
+     * mtime-fallback-only entry classifies as CONTINUATION-class loss.
+     * Untagged legacy entries grandfather as 'hook' (provably safe).
+     */
+    getProvenance(topicId: number): ResumeProvenance | null;
+    /** Raw entry (parked included) for the §8 park/un-park machinery. */
+    getEntryRaw(topicId: number): ResumeEntry | null;
+    /** §8 — "remove" means PARK, not delete (deletion destroys the cheap recovery). */
+    park(topicId: number, reason: string): void;
+    /** §10.4 revert / §10.3 undo — un-park the entry. Returns true when un-parked. */
+    unpark(topicId: number): boolean;
     /**
      * Remove an entry after successful resume (prevents stale reuse).
      */