instar 1.3.602 → 1.3.604

package/dist/core/ThreadlinePairingReplicatedStore.js

@@ -0,0 +1,462 @@
+/**
+ * ThreadlinePairingReplicatedStore — replicate ONLY the verified-IDENTITY RESULT of a
+ * Secure A2A pairing across the agent's OWN machines (Secure A2A Verified Pairing §3.8 /
+ * FD11). It is the EIGHTH concrete consumer of the HLC replicated-store foundation,
+ * layering a `threadline-pairing-record` replicated kind onto the generic substrate
+ * (ReplicatedRecordEnvelope / UnionReader / ReplicationBudget) so that a pairing a HUMAN
+ * SAS-verified on machine A is HONORED on machine B — without ever re-deriving the SAS on B.
+ *
+ * It is the literal analog of the WS2 PII stores (RelationshipsReplicatedStore /
+ * TopicOperatorReplicatedStore): type-clamp on receive, untrusted-envelope render,
+ * fingerprint-keyed identity, tombstone on revoke, dark by default. THIS IS PURE LOGIC.
+ * No fs, no Date directly, no network.
+ *
+ * ── THE SECURITY BOUNDARY THAT MAKES THIS SAFE (§3.8) ────────────────────────────────
+ *
+ * Only FIVE fields ever cross a machine boundary:
+ *     { peerFp, peerIdentityPub, state:'mutual-verified', verifiedAt, verifiedOnMachine }
+ * NEVER the SAS words, NEVER the shared secret, NEVER the relay token — those are bound to
+ * the MACHINE-LOCAL handshake's ephemeral shared secret (machine A and B derive DIFFERENT
+ * secrets/SAS for the same peer) and stay machine-local by design. This serializer
+ * STRUCTURALLY cannot leak them: its INPUT type (`VerifiedPairingResult`) does not even
+ * HAVE a sasWords/sharedSecret/relayToken field, and the projection enumerates the five
+ * fields explicitly — there is no spread of an on-disk blob, so a secret that is not a
+ * field of the input can never become a field of the output.
+ *
+ * ── HOW MACHINE B HONORS A REPLICATED RECORD (codex finding 1, MATERIAL) ──────────────
+ *
+ * Machine B honors a replicated `mutual-verified` record ONLY by PINNING the record's
+ * `peerIdentityPub`. The honoring decision lives in the CONSUMER (AgentTrustManager.
+ * inheritReplicatedVerification): a handshake on B for that `peerFp` whose presented
+ * identity key does NOT match the pinned `peerIdentityPub` is REFUSED the inheritance and
+ * downgraded to `pending-verification` (re-verify on B) — never auto-`mutual-verified`,
+ * never silently-untrusted-but-honored. The replicated grant binds to the exact identity
+ * key the human verified. (The `peerFp` is itself the first 16 bytes of that key, so a
+ * mismatch is a fingerprint-collision/substitution attempt.)
+ *
+ * INHERITED = `identity-verified`, NOT channel-ready (codex round-2 finding 1): the
+ * replicated record asserts only "this identity key was SAS-verified by a human somewhere".
+ * Before B may open credential-share to that peer, B must ADDITIONALLY have its OWN live
+ * encrypted+signed handshake channel (the outbound CredentialShareGate already enforces the
+ * encrypted-path half). So credential-share on B = inherited `identity-verified` (key-pinned)
+ * AND B's own live encrypted channel.
+ *
+ * A `verification-failed`/revoke propagates as a TOMBSTONE so an un-verify sticks pool-wide.
+ *
+ * SAFETY POSTURE (§3.8 / §3.10): MECHANISM, ships DARK behind
+ * `multiMachine.stateSync.threadlinePairing.{enabled:false, dryRun:true}` — flag-off is a
+ * strict no-op (single-machine agents unaffected). Nothing here blocks a user action.
+ */
+import { createHash } from 'node:crypto';
+// ───────────────────────────────────────────────────────────────────────────
+// A. Identity, tier, schema, bounds, caps
+// ───────────────────────────────────────────────────────────────────────────
+/** The stateSync config sub-key + advert suffix for this store (e.g.
+ *  `multiMachine.stateSync.threadlinePairing.enabled`). Equal to the advert flag key
+ *  `stateSyncReceive['threadlinePairing']`. */
+export const THREADLINE_PAIRING_STORE_KEY = 'threadlinePairing';
+/** The JournalKind string this store rides — the DUAL-REGISTRY's dynamic half.
+ *  MUST also be present in CoherenceJournal.JOURNAL_KINDS (the static half), or the
+ *  store advertises receive=true yet serves/applies/pulls nothing. */
+export const THREADLINE_PAIRING_RECORD_KIND = 'threadline-pairing-record';
+/**
+ * Pairing results are HIGH-impact at the REPLICATION layer (a divergent concurrent
+ * edit goes through APPEND-BOTH-AND-FLAG — never a silent clobber). In practice a
+ * verified-identity result is monotonic per (peerFp, identity key) and the consumer
+ * key-pins, so a genuine concurrent divergence (two machines verifying a DIFFERENT
+ * identity key for the SAME peerFp) is exactly the fingerprint-substitution case the
+ * append-both surfaces rather than auto-merges.
+ */
+export const THREADLINE_PAIRING_IMPACT_TIER = 'high';
+/** The single state value a verified-identity result may carry across the wire (§3.8):
+ *  ONLY `mutual-verified`. A `pending-verification` (machine-local SAS state) NEVER
+ *  replicates; an un-verify propagates as a tombstone, not a state value. */
+export const REPLICATED_PAIRING_STATE = 'mutual-verified';
+/** A peer fingerprint is the first 16 bytes (32 hex chars) of the Ed25519 public key. */
+export const PAIRING_FP_MIN_LEN = 4; // tolerant lower bound (test fixtures use short fps)
+export const PAIRING_FP_MAX_LEN = 128;
+/** An Ed25519 public key is 32 bytes = 64 hex chars; allow a tolerant range. */
+export const PAIRING_PUB_MAX_LEN = 256;
+/** verifiedOnMachine is a machine id (origin-shaped); length-bounded. */
+export const PAIRING_MACHINE_ID_MAX_LEN = 256;
+/**
+ * Per-kind replication bounds. The pairing store is FEW + bounded (one record per
+ * verified peer — single digits in practice). The rate cap COALESCES (latest state per
+ * recordKey per interval) so a re-handshake/re-verify loop cannot flood the stream.
+ * NEVER `rotateKeep: 0`.
+ */
+export const THREADLINE_PAIRING_RECORD_BOUNDS = {
+    retention: { maxFileBytes: 1 * 1024 * 1024, rotateKeep: 4 },
+    rateCap: { capacity: 20, refillPerSec: 5 },
+};
+/** Per-entry size cap. A pairing record is tiny (5 short fields); 8KB is generous. */
+export const THREADLINE_PAIRING_MAX_ENTRY_BYTES = 8 * 1024;
+/**
+ * The store-specific field names the VALUE schema OWNS. DELIBERATELY a CLOSED set of
+ * FOUR (the fifth replicated field, `peerFp`, is carried by the envelope `recordKey` —
+ * see deriveThreadlinePairingRecordKey). The SAS words, shared secret, and relay token
+ * are NOT in this allowlist by construction, so the envelope validator DROPS any such
+ * field a hostile/buggy peer smuggles in. `recordKey`/`hlc`/`op`/`origin`/`observed`
+ * are reserved envelope fields, never store fields.
+ */
+export const THREADLINE_PAIRING_STORE_KNOWN_FIELDS = Object.freeze([
+    'peerFp',
+    'peerIdentityPub',
+    'state',
+    'verifiedAt',
+    'verifiedOnMachine',
+]);
+/** The tombstone's store-owned fields beyond the reserved envelope set. `deletedAt`
+ *  is the only store field a delete (revoke/verification-failed) carries. */
+export const THREADLINE_PAIRING_TOMBSTONE_KNOWN_FIELDS = Object.freeze([
+    'deletedAt',
+]);
+/** The full set of known store fields across BOTH op-branches. */
+const ALL_KNOWN_FIELDS = Object.freeze([
+    ...THREADLINE_PAIRING_STORE_KNOWN_FIELDS,
+    ...THREADLINE_PAIRING_TOMBSTONE_KNOWN_FIELDS,
+]);
+// ── ISO-8601 type-clamp (§3.8 explicitly requires `verifiedAt` ISO-8601-only). ───────
+/** Is `v` a valid ISO-8601 date string (and ONLY a date — no smuggled markup)? */
+export function isIso8601(v) {
+    if (typeof v !== 'string' || v.length === 0 || v.length > 64)
+        return false;
+    const ms = Date.parse(v);
+    if (!Number.isFinite(ms))
+        return false;
+    if (v.includes('<') || v.includes('>') || v.includes('"'))
+        return false;
+    return true;
+}
+/** Is `v` a clean lowercase/uppercase HEX string within bounds (no markup vectors)?
+ *  peerFp + peerIdentityPub are hex-only by construction (Ed25519 key material), so a
+ *  non-hex value on a foreign record is a tampered record and rejects the whole record. */
+function isHexString(v, minLen, maxLen) {
+    if (typeof v !== 'string')
+        return false;
+    if (v.length < minLen || v.length > maxLen)
+        return false;
+    return /^[0-9a-fA-F]+$/.test(v);
+}
+/** A length-bounded, non-markup machine-id string (origin-shaped). Empty/over-cap → null. */
+function clampMachineId(v) {
+    if (typeof v !== 'string' || v.length === 0 || v.length > PAIRING_MACHINE_ID_MAX_LEN)
+        return null;
+    if (v.includes('<') || v.includes('>') || v.includes('"'))
+        return null;
+    return v;
+}
+/**
+ * The `threadline-pairing-record` store schema — a DISCRIMINATED UNION on `op`. Strict
+ * typed validation on top of the envelope: TYPE-CLAMP every known field (verifiedAt
+ * ISO-8601-only, peerFp/peerIdentityPub hex-only, state MUST EQUAL 'mutual-verified',
+ * verifiedOnMachine length-bounded) so markup cannot smuggle through a render slot AND
+ * a non-`mutual-verified` state can never become a replicated value. Returns the
+ * validated store-specific object (known fields only), or null to reject the WHOLE
+ * record. PURE (no I/O, no mutation of `raw`).
+ *
+ * The envelope validator has ALREADY validated `op` ∈ {put,delete} before calling this.
+ */
+export const threadlinePairingRecordStoreSchema = {
+    knownFields: ALL_KNOWN_FIELDS,
+    validate(raw, ctx) {
+        const op = raw.op;
+        // ── DELETE (tombstone) branch — revoke / verification-failed propagation (§3.8).
+        //    Only `deletedAt` is a legal store field; any VALUE field present is counted
+        //    as a dropped field but does not reject — the tombstone's recordKey + hlc + op
+        //    carry the suppression. ──────────────────────────────────────────────────────
+        if (op === 'delete') {
+            const deletedAt = isIso8601(raw.deletedAt) ? raw.deletedAt : undefined;
+            for (const k of Object.keys(raw)) {
+                if (k === 'op' || k === 'deletedAt')
+                    continue;
+                if (THREADLINE_PAIRING_STORE_KNOWN_FIELDS.includes(k))
+                    ctx.countDroppedField();
+            }
+            return deletedAt !== undefined ? { deletedAt } : {};
+        }
+        // ── VALUE (put) branch. ──────────────────────────────────────────────────────────
+        // peerFp — required hex (the cross-machine identity surface; the recordKey is
+        // derived from it). A non-hex peerFp is a tampered record → reject.
+        if (!isHexString(raw.peerFp, PAIRING_FP_MIN_LEN, PAIRING_FP_MAX_LEN))
+            return null;
+        const peerFp = raw.peerFp;
+        // peerIdentityPub — required hex (the PINNED key the consumer honors against, §3.8).
+        if (!isHexString(raw.peerIdentityPub, PAIRING_FP_MIN_LEN, PAIRING_PUB_MAX_LEN))
+            return null;
+        const peerIdentityPub = raw.peerIdentityPub;
+        // state — MUST be exactly 'mutual-verified' (§3.8). Anything else (incl.
+        // 'pending-verification' / 'verification-failed' / arbitrary markup) is REJECTED:
+        // a machine-local-only state never replicates as a value.
+        if (raw.state !== REPLICATED_PAIRING_STATE)
+            return null;
+        // verifiedAt — ISO-8601 ONLY (§3.8). A non-date is rejected (markup cannot survive).
+        if (!isIso8601(raw.verifiedAt))
+            return null;
+        const verifiedAt = raw.verifiedAt;
+        // verifiedOnMachine — required length-bounded machine id.
+        const verifiedOnMachine = clampMachineId(raw.verifiedOnMachine);
+        if (verifiedOnMachine === null)
+            return null;
+        return {
+            peerFp,
+            peerIdentityPub,
+            state: REPLICATED_PAIRING_STATE,
+            verifiedAt,
+            verifiedOnMachine,
+        };
+    },
+};
+// ───────────────────────────────────────────────────────────────────────────
+// recordKey — the cross-machine IDENTITY SURFACE
+// ───────────────────────────────────────────────────────────────────────────
+/**
+ * Derive the cross-machine-stable recordKey for a pairing. A peer is "the same" across
+ * machines by their FINGERPRINT (the first 16 bytes of their Ed25519 identity key), which
+ * is itself stable + machine-independent. We hash it to a bounded, non-path-shaped string
+ * (the same shape UnionReader.conflictId uses) so the envelope's recordKey jail accepts it.
+ * Returns null for an empty/degenerate fingerprint (no identity surface — skip emission).
+ */
+export function deriveThreadlinePairingRecordKey(peerFp) {
+    const fp = (peerFp ?? '').trim();
+    if (fp.length === 0)
+        return null;
+    const h = createHash('sha256');
+    h.update(`threadline-pairing\x1f${fp.toLowerCase()}`);
+    return h.digest('hex').slice(0, 32);
+}
+/** The named error a record-over-cap surfaces (never silent-truncate). A pairing record
+ *  is tiny so this is purely belt-and-suspenders. */
+export class ThreadlinePairingRecordTooLargeError extends Error {
+    recordKey;
+    bytes;
+    constructor(recordKey, bytes) {
+        super(`threadline-pairing-record ${recordKey} is ${bytes} bytes after projection — over the ${THREADLINE_PAIRING_MAX_ENTRY_BYTES}-byte per-entry cap; not replicated`);
+        this.recordKey = recordKey;
+        this.bytes = bytes;
+        this.name = 'ThreadlinePairingRecordTooLargeError';
+    }
+}
+/**
+ * Build the `threadline-pairing-record` envelope `data` for an `op:'put'`. Emits ONLY
+ * the FIVE allowed fields (§3.8) — peerFp + peerIdentityPub + state + verifiedAt +
+ * verifiedOnMachine (peerFp via the envelope recordKey AND as an explicit field for the
+ * consumer). NEVER the SAS / shared secret / relay token — structurally impossible,
+ * since they are not fields of `VerifiedPairingResult` and the projection is an explicit
+ * enumeration (no blob spread).
+ *
+ * Returns null when the fingerprint has no identity surface (the caller skips emission).
+ * Throws ThreadlinePairingRecordTooLargeError if the projection somehow exceeds the cap.
+ */
+export function buildThreadlinePairingRecordData(input) {
+    const { result, hlc, origin, observed } = input;
+    const recordKey = deriveThreadlinePairingRecordKey(result.peerFp);
+    if (recordKey === null)
+        return null;
+    const data = {
+        // The FIVE allowed fields — an EXPLICIT enumeration, never a spread of an on-disk
+        // blob (so a secret that is not enumerated here can never be emitted).
+        peerFp: result.peerFp,
+        peerIdentityPub: result.peerIdentityPub,
+        state: REPLICATED_PAIRING_STATE,
+        verifiedAt: result.verifiedAt,
+        verifiedOnMachine: result.verifiedOnMachine,
+        // envelope fields (recordKey = identity surface).
+        recordKey,
+        hlc,
+        op: 'put',
+        origin,
+        ...(observed !== undefined ? { observed } : {}),
+    };
+    assertProjectionUnderCap(recordKey, data);
+    return data;
+}
+/** Throw ThreadlinePairingRecordTooLargeError if the projected data serializes over the
+ *  per-entry cap. */
+export function assertProjectionUnderCap(recordKey, data) {
+    const bytes = Buffer.byteLength(JSON.stringify(data), 'utf-8');
+    if (bytes > THREADLINE_PAIRING_MAX_ENTRY_BYTES) {
+        throw new ThreadlinePairingRecordTooLargeError(recordKey, bytes);
+    }
+}
+/**
+ * Build an `op:'delete'` TOMBSTONE `data` for a pairing revoke / verification-failed
+ * (§3.8). recordKey = the SAME fingerprint identity surface the value records key on, so
+ * the tombstone reaches the same peer's record on every machine — an un-verify sticks
+ * pool-wide even on a machine that was offline at revoke time. Returns null for an empty
+ * fingerprint (no identity surface to tombstone).
+ */
+export function buildThreadlinePairingTombstoneData(input) {
+    const recordKey = deriveThreadlinePairingRecordKey(input.peerFp);
+    if (recordKey === null)
+        return null;
+    return {
+        deletedAt: input.deletedAt,
+        recordKey,
+        hlc: input.hlc,
+        op: 'delete',
+        origin: input.origin,
+        ...(input.observed !== undefined ? { observed: input.observed } : {}),
+    };
+}
+function viewFromOriginRecord(rec, conflicted) {
+    return { recordKey: rec.envelope.recordKey, origin: rec.origin, data: rec.data, conflicted };
+}
+/**
+ * Collapse a `Map<recordKey, UnionResult>` into the merged pairing view.
+ *   - A resolved single value ⇒ that one view entry.
+ *   - An OPEN concurrent conflict ⇒ BOTH (all) `put` variants (append-both — never a
+ *     silent clobber; two machines verifying a DIFFERENT identity key for the SAME
+ *     peerFp is exactly the substitution case to surface, not auto-merge).
+ *   - A delete-resolved key (every origin's latest is a tombstone) ⇒ nothing (the
+ *     revoke-resurrection guard: a later delete wins over an earlier put).
+ * READ-ONLY: a replicated record NEVER clobbers a divergent local record.
+ */
+export function mergeUnionToPairings(union) {
+    const out = [];
+    for (const result of union.values()) {
+        if (result.conflict) {
+            for (const v of result.conflict.versions) {
+                if (v.envelope.op === 'delete')
+                    continue;
+                out.push(viewFromOriginRecord(v, true));
+            }
+            continue;
+        }
+        if (result.value && result.value.envelope.op !== 'delete') {
+            out.push(viewFromOriginRecord(result.value, false));
+        }
+    }
+    return out;
+}
+/**
+ * Decide whether machine B HONORS a replicated mutual-verified pairing for `peerFp`,
+ * given the identity public key B's OWN live handshake presented for that peer
+ * (`presentedIdentityPub`, or undefined if B has no live handshake yet).
+ *
+ * The honoring rule (§3.8): pin the record's `peerIdentityPub`. If B has a live handshake
+ * AND its presented key differs from the pinned key → REFUSE (identity-key-mismatch →
+ * downgrade to pending-verification). If B has no live handshake yet, the inheritance is
+ * honored as `identity-verified` against the pinned key (B's own encrypted channel is a
+ * SEPARATE precondition the credential gate enforces — inherited ≠ channel-ready).
+ *
+ * Reads the merged view (the union of peer replicas) and resolves the record for `peerFp`.
+ * A null `presentedIdentityPub` means "no live handshake key to contradict the pin yet" —
+ * the inheritance is honored (key-pinned) but stays NOT-channel-ready.
+ */
+export function evaluateInheritedVerification(views, peerFp, presentedIdentityPub) {
+    const recordKey = deriveThreadlinePairingRecordKey(peerFp);
+    if (recordKey === null)
+        return { honor: false, reason: 'no-replicated-record' };
+    // Find a mutual-verified value view for this peer. An open conflict (two divergent
+    // pinned keys) is NOT auto-honored — we require a single, unambiguous pinned key, so
+    // a conflicted record falls through to no-honor (the safe direction).
+    const matching = views.filter((v) => v.recordKey === recordKey &&
+        v.data.state === REPLICATED_PAIRING_STATE &&
+        typeof v.data.peerIdentityPub === 'string');
+    if (matching.length === 0)
+        return { honor: false, reason: 'no-replicated-record' };
+    // Distinct pinned keys across the matching views. >1 distinct key (a genuine
+    // substitution divergence) is never auto-honored.
+    const pinnedKeys = new Set(matching.map((v) => v.data.peerIdentityPub.toLowerCase()));
+    if (pinnedKeys.size !== 1) {
+        // Treat as a mismatch against B's presented key (or no-record when B has none) — the
+        // safe direction. We surface the first key for the audit.
+        const pinnedKey = matching[0].data.peerIdentityPub;
+        if (presentedIdentityPub) {
+            return { honor: false, reason: 'identity-key-mismatch', pinnedKey, presentedKey: presentedIdentityPub };
+        }
+        return { honor: false, reason: 'no-replicated-record' };
+    }
+    const view = matching[0];
+    const pinnedKey = view.data.peerIdentityPub;
+    // Key-pin: a live handshake whose key differs from the pin is REFUSED inheritance.
+    if (presentedIdentityPub && presentedIdentityPub.toLowerCase() !== pinnedKey.toLowerCase()) {
+        return { honor: false, reason: 'identity-key-mismatch', pinnedKey, presentedKey: presentedIdentityPub };
+    }
+    return {
+        honor: true,
+        pinnedKey,
+        verifiedAt: typeof view.data.verifiedAt === 'string' ? view.data.verifiedAt : undefined,
+        verifiedOnMachine: typeof view.data.verifiedOnMachine === 'string' ? view.data.verifiedOnMachine : undefined,
+    };
+}
+// ───────────────────────────────────────────────────────────────────────────
+// E. Foreign-record render safety — quoted untrusted data
+// ───────────────────────────────────────────────────────────────────────────
+function sanitize(s) {
+    return String(s).replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
+}
+/**
+ * Render a FOREIGN (replicated) pairing record into a context block, wrapped in an
+ * explicit `<replicated-untrusted-data origin="…">` envelope so a reader treats it as a
+ * PEER MACHINE'S claim to re-ground against, never a directive. EVERY field is escaped.
+ * A malformed view (no peerFp) yields null. The SAS / secret / token can never appear
+ * here — they are never fields of the record.
+ */
+export function renderForeignPairingContext(view) {
+    const d = view.data;
+    if (typeof d.peerFp !== 'string' || d.peerFp.length === 0)
+        return null;
+    const safeOrigin = sanitize(view.origin);
+    const lines = [
+        `<replicated-untrusted-data origin="${safeOrigin}">`,
+        `Verified pairing (peer fingerprint): ${sanitize(d.peerFp)}`,
+        `State: ${sanitize(typeof d.state === 'string' ? d.state : '')}`,
+    ];
+    if (typeof d.verifiedAt === 'string')
+        lines.push(`Verified at: ${sanitize(d.verifiedAt)}`);
+    if (typeof d.verifiedOnMachine === 'string')
+        lines.push(`Verified on machine: ${sanitize(d.verifiedOnMachine)}`);
+    lines.push('</replicated-untrusted-data>');
+    return lines.join('\n');
+}
+// ───────────────────────────────────────────────────────────────────────────
+// Own-origin materialization for the union reader
+// ───────────────────────────────────────────────────────────────────────────
+/**
+ * Build an OriginRecord for the OWN pairing store (the single-origin materialization the
+ * union reader merges against peer replicas). recordKey = derived fingerprint identity
+ * surface; the envelope carries a SYNTHETIC own-origin HLC stamp derived deterministically
+ * from verifiedAt (physical) so the own record has a well-formed, stable position relative
+ * to peer records. Returns null for a degenerate record (no identity surface). The
+ * machine-local SAS / pending state is NEVER carried into the replicated namespace.
+ */
+export function pairingResultToOriginRecord(result, origin) {
+    const recordKey = deriveThreadlinePairingRecordKey(result.peerFp);
+    if (recordKey === null)
+        return null;
+    const physical = Date.parse(result.verifiedAt);
+    const hlc = {
+        physical: Number.isFinite(physical) ? physical : 0,
+        logical: 0,
+        node: origin,
+    };
+    const data = {
+        peerFp: result.peerFp,
+        peerIdentityPub: result.peerIdentityPub,
+        state: REPLICATED_PAIRING_STATE,
+        verifiedAt: result.verifiedAt,
+        verifiedOnMachine: result.verifiedOnMachine,
+    };
+    const envelope = { recordKey, hlc, op: 'put', origin };
+    return { origin, envelope, data };
+}
+// ───────────────────────────────────────────────────────────────────────────
+// Registration descriptor (consumed by server.ts to register the dual registry)
+// ───────────────────────────────────────────────────────────────────────────
+/** The ReplicatedKindRegistry registration for the `threadline-pairing-record` store. */
+export const THREADLINE_PAIRING_KIND_REGISTRATION = {
+    kind: THREADLINE_PAIRING_RECORD_KIND,
+    store: THREADLINE_PAIRING_STORE_KEY,
+    schema: threadlinePairingRecordStoreSchema,
+};
+/** Convenience: the store's contributing journal kinds (for rollback-unmerge wiring). */
+export function threadlinePairingContributingKinds() {
+    return [THREADLINE_PAIRING_RECORD_KIND];
+}
+/** The store's impact tier resolver, for ReplicatedStoreReader.tierOf. */
+export function threadlinePairingTierOf(_store) {
+    return THREADLINE_PAIRING_IMPACT_TIER;
+}
+//# sourceMappingURL=ThreadlinePairingReplicatedStore.js.map

package/dist/core/ThreadlinePairingReplicatedStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ThreadlinePairingReplicatedStore.js","sourceRoot":"","sources":["../../src/core/ThreadlinePairingReplicatedStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAYzC,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E;;+CAE+C;AAC/C,MAAM,CAAC,MAAM,4BAA4B,GAAG,mBAAmB,CAAC;AAEhE;;sEAEsE;AACtE,MAAM,CAAC,MAAM,8BAA8B,GAAG,2BAA2B,CAAC;AAE1E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAe,MAAM,CAAC;AAEjE;;6EAE6E;AAC7E,MAAM,CAAC,MAAM,wBAAwB,GAAG,iBAA0B,CAAC;AAEnE,yFAAyF;AACzF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,CAAC,qDAAqD;AAC1F,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,gFAAgF;AAChF,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,yEAAyE;AACzE,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAyB;IACpE,SAAS,EAAE,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE;IAC3D,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE;CAC3C,CAAC;AAEF,sFAAsF;AACtF,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,GAAG,IAAI,CAAC;AAE3D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAA0B,MAAM,CAAC,MAAM,CAAC;IACxF,QAAQ;IACR,iBAAiB;IACjB,OAAO;IACP,YAAY;IACZ,mBAAmB;CACpB,CAAC,CAAC;AAEH;6EAC6E;AAC7E,MAAM,CAAC,MAAM,yCAAyC,GAA0B,MAAM,CAAC,MAAM,CAAC;IAC5F,WAAW;CACZ,CAAC,CAAC;AAEH,kEAAkE;AAClE,MAAM,gBAAgB,GAA0B,MAAM,CAAC,MAAM,CAAC;IAC5D,GAAG,qCAAqC;IACxC,GAAG,yCAAyC;CAC7C,CAAC,CAAC;AAEH,wFAAwF;AAExF,kFAAkF;AAClF,MAAM,UAAU,SAAS,CAAC,CAAU;IAClC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAC3E,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;2FAE2F;AAC3F,SAAS,WAAW,CAAC,CAAU,EAAE,MAAc,EAAE,MAAc;IAC7D,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,CAAC,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,CAAC,MAAM,GAAG,MAAM;QAAE,OAAO,KAAK,CAAC;IACzD,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,6FAA6F;AAC7F,SAAS,cAAc,CAAC,CAAU;IAChC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,0BAA0B;QAAE,OAAO,IAAI,CAAC;IAClG,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAqB;IAClE,WAAW,EAAE,gBAAgB;IAC7B,QAAQ,CAAC,GAAsC,EAAE,GAAyB;QACxE,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;QAElB,kFAAkF;QAClF,iFAAiF;QACjF,mFAAmF;QACnF,mFAAmF;QACnF,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;YACpB,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,SAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACnF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,WAAW;oBAAE,SAAS;gBAC9C,IAAI,qCAAqC,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC;YACjF,CAAC;YACD,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,CAAC;QAED,oFAAoF;QACpF,8EAA8E;QAC9E,oEAAoE;QACpE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,CAAC;YAAE,OAAO,IAAI,CAAC;QAClF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAgB,CAAC;QAEpC,qFAAqF;QACrF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5F,MAAM,eAAe,GAAG,GAAG,CAAC,eAAyB,CAAC;QAEtD,yEAAyE;QACzE,kFAAkF;QAClF,0DAA0D;QAC1D,IAAI,GAAG,CAAC,KAAK,KAAK,wBAAwB;YAAE,OAAO,IAAI,CAAC;QAExD,qFAAqF;QACrF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,MAAM,UAAU,GAAG,GAAG,CAAC,UAAoB,CAAC;QAE5C,0DAA0D;QAC1D,MAAM,iBAAiB,GAAG,cAAc,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAChE,IAAI,iBAAiB,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAE5C,OAAO;YACL,MAAM;YACN,eAAe;YACf,KAAK,EAAE,wBAAwB;YAC/B,UAAU;YACV,iBAAiB;SAClB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,8EAA8E;AAC9E,iDAAiD;AACjD,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAAC,MAAc;IAC7D,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC,CAAC,MAAM,CAAC,yBAAyB,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAsCD;qDACqD;AACrD,MAAM,OAAO,oCAAqC,SAAQ,KAAK;IACjC;IAAmC;IAA/D,YAA4B,SAAiB,EAAkB,KAAa;QAC1E,KAAK,CAAC,6BAA6B,SAAS,OAAO,KAAK,sCAAsC,kCAAkC,qCAAqC,CAAC,CAAC;QAD7I,cAAS,GAAT,SAAS,CAAQ;QAAkB,UAAK,GAAL,KAAK,CAAQ;QAE1E,IAAI,CAAC,IAAI,GAAG,sCAAsC,CAAC;IACrD,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gCAAgC,CAAC,KAAwC;IACvF,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAChD,MAAM,SAAS,GAAG,gCAAgC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClE,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,IAAI,GAAgC;QACxC,kFAAkF;QAClF,uEAAuE;QACvE,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,KAAK,EAAE,wBAAwB;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,kDAAkD;QAClD,SAAS;QACT,GAAG;QACH,EAAE,EAAE,KAAqB;QACzB,MAAM;QACN,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC;IAEF,wBAAwB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;qBACqB;AACrB,MAAM,UAAU,wBAAwB,CAAC,SAAiB,EAAE,IAAiC;IAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/D,IAAI,KAAK,GAAG,kCAAkC,EAAE,CAAC;QAC/C,MAAM,IAAI,oCAAoC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAYD;;;;;;GAMG;AACH,MAAM,UAAU,mCAAmC,CAAC,KAA2C;IAC7F,MAAM,SAAS,GAAG,gCAAgC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS;QACT,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,EAAE,EAAE,QAAwB;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAC;AACJ,CAAC;AAkBD,SAAS,oBAAoB,CAAC,GAAiB,EAAE,UAAmB;IAClE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;AAC/F,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAA+B;IAClE,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACzC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,QAAQ;oBAAE,SAAS;gBACzC,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YAC1C,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC1D,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAmBD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,6BAA6B,CAC3C,KAAuC,EACvC,MAAc,EACd,oBAAwC;IAExC,MAAM,SAAS,GAAG,gCAAgC,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IAEhF,mFAAmF;IACnF,qFAAqF;IACrF,sEAAsE;IACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAC3B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,SAAS,KAAK,SAAS;QACzB,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,wBAAwB;QACzC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,KAAK,QAAQ,CAC7C,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IAEnF,6EAA6E;IAC7E,kDAAkD;IAClD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,IAAI,CAAC,eAA0B,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAClG,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC1B,qFAAqF;QACrF,0DAA0D;QAC1D,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAyB,CAAC;QAC7D,IAAI,oBAAoB,EAAE,CAAC;YACzB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,SAAS,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC;QAC1G,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,eAAyB,CAAC;IAEtD,mFAAmF;IACnF,IAAI,oBAAoB,IAAI,oBAAoB,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3F,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,SAAS,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC;IAC1G,CAAC;IAED,OAAO;QACL,KAAK,EAAE,IAAI;QACX,SAAS;QACT,UAAU,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,IAAI,CAAC,UAAqB,CAAC,CAAC,CAAC,SAAS;QACnG,iBAAiB,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,IAAI,CAAC,iBAA4B,CAAC,CAAC,CAAC,SAAS;KACzH,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,0DAA0D;AAC1D,8EAA8E;AAE9E,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACvF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAuB;IACjE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;IACpB,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,KAAK,GAAa;QACtB,sCAAsC,UAAU,IAAI;QACpD,wCAAwC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE;QAC5D,UAAU,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;KACjE,CAAC;IACF,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC3F,IAAI,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,wBAAwB,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACjH,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,kDAAkD;AAClD,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAA6B,EAAE,MAAc;IACvF,MAAM,SAAS,GAAG,gCAAgC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClE,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAiB;QACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAClD,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,MAAM;KACb,CAAC;IACF,MAAM,IAAI,GAA4B;QACpC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,KAAK,EAAE,wBAAwB;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C,CAAC;IACF,MAAM,QAAQ,GAAuB,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3E,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAE9E,yFAAyF;AACzF,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,IAAI,EAAE,8BAA8B;IACpC,KAAK,EAAE,4BAA4B;IACnC,MAAM,EAAE,kCAAkC;CAClC,CAAC;AAEX,yFAAyF;AACzF,MAAM,UAAU,kCAAkC;IAChD,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAC1C,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,OAAO,8BAA8B,CAAC;AACxC,CAAC"}

package/dist/core/devGatedFeatures.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"devGatedFeatures.d.ts","sourceRoot":"","sources":["../../src/core/devGatedFeatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,kBAAkB,EAAE,eAAe,EA2T/C,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,MAAM,gBAAgB,GACxB,aAAa,GACb,cAAc,GACd,gBAAgB,GAChB,sBAAsB,GACtB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,iBAAiB;IAChC,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,oBAAoB,EAAE,iBAAiB,EAuHnD,CAAC;AAEF;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAO5E"}
+{"version":3,"file":"devGatedFeatures.d.ts","sourceRoot":"","sources":["../../src/core/devGatedFeatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,kBAAkB,EAAE,eAAe,EA2T/C,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,MAAM,gBAAgB,GACxB,aAAa,GACb,cAAc,GACd,gBAAgB,GAChB,sBAAsB,GACtB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,iBAAiB;IAChC,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,oBAAoB,EAAE,iBAAiB,EA4HnD,CAAC;AAEF;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAO5E"}

package/dist/core/devGatedFeatures.js

@@ -418,6 +418,11 @@ export const DARK_GATE_EXCLUSIONS = [
         category: 'action-bearing',
         reason: 'A2A check-in summarizer — sends UNBOUNDED user-facing Telegram summaries on a heartbeat while a conversation is active; live-on-dev would flood the operator. Opt-in to keep the operator un-flooded.',
     },
+    {
+        configPath: 'multiMachine.stateSync.threadlinePairing.enabled',
+        category: 'action-bearing',
+        reason: 'Secure A2A Verified Pairing §3.8 — replicates the verified-IDENTITY RESULT of a pairing across the agent\'s own machines; the inherited record AUTHORIZES the identity half of the credential-share gate on a peer machine (key-pinned). A credential-gating surface, so it ships hard-dark with explicit enabled:false + dryRun:true on EVERY agent (dev included) — the cautious rollout posture the spec mandates, NOT the dev-gate-live posture of the 7 WS2 memory/PII stores. NEVER replicates the SAS, shared secret, or relay token (structurally — they are not fields of the replicated result). Opt-in per agent after soak.',
+    },
     {
         configPath: 'monitoring.apprenticeshipCycleSla.enabled',
         category: 'action-bearing',

package/dist/core/devGatedFeatures.js.map

@@ -1 +1 @@
-{"version":3,"file":"devGatedFeatures.js","sourceRoot":"","sources":["../../src/core/devGatedFeatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAoBH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD;QACE,IAAI,EAAE,yBAAyB;QAC/B,UAAU,EAAE,6CAA6C;QACzD,WAAW,EAAE,+MAA+M;QAC5N,aAAa,EAAE,ikBAAikB;KACjlB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,kCAAkC;QAC9C,WAAW,EAAE,mDAAmD;QAChE,aAAa,EAAE,uGAAuG;KACvH;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,kCAAkC;QAC/C,aAAa,EAAE,yGAAyG;KACzH;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,mCAAmC;QAC/C,WAAW,EAAE,gDAAgD;QAC7D,aAAa,EAAE,sGAAsG;KACtH;IACD;QACE,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,iCAAiC;QAC7C,WAAW,EAAE,2CAA2C;QACxD,aAAa,EAAE,wGAAwG;KACxH;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,6CAA6C;QACzD,WAAW,EAAE,gCAAgC;QAC7C,aAAa,EAAE,sGAAsG;KACtH;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,mDAAmD;QAChE,aAAa,EAAE,8FAA8F;KAC9G;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,gDAAgD;QAC7D,aAAa,EAAE,yGAAyG;KACzH;IACD;QACE,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,sBAAsB;QAClC,WAAW,EAAE,iEAAiE;QAC9E,aAAa,EAAE,sDAAsD;KACtE;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,oEAAoE;QACjF,aAAa,EAAE,yDAAyD;KACzE;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,kCAAkC;QAC9C,WAAW,EAAE,8EAA8E;QAC3F,aAAa,EAAE,qNAAqN;KACrO;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,uDAAuD;QACnE,WAAW,EAAE,wPAAwP;QACrQ,aAAa,EAAE,srBAAsrB;KACtsB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,sDAAsD;QAClE,WAAW,EAAE,sMAAsM;QACnN,aAAa,EAAE,2hBAA2hB;KAC3iB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,uBAAuB;QACnC,WAAW,EAAE,+EAA+E;QAC5F,aAAa,EAAE,yNAAyN;KACzO;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,+CAA+C;QAC3D,WAAW,EAAE,uLAAuL;QACpM,aAAa,EAAE,otBAAotB;KACpuB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,4BAA4B;QACxC,WAAW,EAAE,mEAAmE;QAChF,aAAa,EAAE,mOAAmO;KACnP;IACD;QACE,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,gCAAgC;QAC5C,WAAW,EAAE,wJAAwJ;QACrK,aAAa,EAAE,wnBAAwnB;KACxoB;IACD,gFAAgF;IAChF,+EAA+E;IAC/E,8EAA8E;IAC9E,gFAAgF;IAChF,0EAA0E;IAC1E,kFAAkF;IAClF,mFAAmF;IACnF,oFAAoF;IACpF,oFAAoF;IACpF,qFAAqF;IACrF,6EAA6E;IAC7E,+EAA+E;IAC/E,iFAAiF;IACjF,+EAA+E;IAC/E,2EAA2E;IAC3E,gFAAgF;IAChF,iFAAiF;IACjF,+EAA+E;IAC/E;QACE,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,+IAA+I;QAC5J,aAAa,EAAE,8YAA8Y;KAC9Z;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,8JAA8J;QAC3K,aAAa,EAAE,0aAA0a;KAC1b;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,0CAA0C;QACtD,WAAW,EAAE,2MAA2M;QACxN,aAAa,EAAE,gcAAgc;KAChd;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,0OAA0O;QACvP,aAAa,EAAE,mcAAmc;KACnd;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,4CAA4C;QACxD,WAAW,EAAE,kPAAkP;QAC/P,aAAa,EAAE,+oBAA+oB;KAC/pB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,wGAAwG;QACrH,aAAa,EAAE,qRAAqR;KACrS;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,2UAA2U;QACxV,aAAa,EAAE,qTAAqT;KACrU;IACD;QACE,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,iCAAiC;QAC7C,WAAW,EAAE,gNAAgN;QAC7N,aAAa,EAAE,gpBAAgpB;KAChqB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,mCAAmC;QAC/C,WAAW,EAAE,2ZAA2Z;QACxa,aAAa,EAAE,+lBAA+lB;KAC/mB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,0RAA0R;QACvS,aAAa,EAAE,ynBAAynB;KACzoB;IACD;QACE,IAAI,EAAE,wCAAwC;QAC9C,UAAU,EAAE,4DAA4D;QACxE,WAAW,EACT,2KAA2K;QAC7K,aAAa,EACX,2OAA2O;KAC9O;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,UAAU,EAAE,8CAA8C;QAC1D,WAAW,EACT,6IAA6I;QAC/I,aAAa,EACX,uKAAuK;KAC1K;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,UAAU,EAAE,qCAAqC;QACjD,WAAW,EACT,0IAA0I;QAC5I,aAAa,EACX,ieAAie;KACpe;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,yCAAyC;QACrD,WAAW,EACT,6HAA6H;QAC/H,aAAa,EACX,8UAA8U;KACjV;IACD;QACE,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,gCAAgC;QAC5C,WAAW,EACT,kKAAkK;QACpK,aAAa,EACX,wiBAAwiB;KAC3iB;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,UAAU,EAAE,0CAA0C;QACtD,WAAW,EACT,2OAA2O;QAC7O,aAAa,EACX,gqBAAgqB;KACnqB;IACD,gFAAgF;IAChF,iFAAiF;IACjF,yEAAyE;IACzE,gFAAgF;IAChF;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,qFAAqF;QAClG,aAAa,EAAE,mOAAmO;KACnP;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,UAAU,EAAE,oCAAoC;QAChD,WAAW,EAAE,mFAAmF;QAChG,aAAa,EAAE,uWAAuW;KACvX;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,qCAAqC;QACjD,WAAW,EAAE,yEAAyE;QACtF,aAAa,EAAE,6cAA6c;KAC7d;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,qCAAqC;QACjD,WAAW,EAAE,+EAA+E;QAC5F,aAAa,EAAE,4MAA4M;KAC5N;IACD,kFAAkF;IAClF,kFAAkF;IAClF,0EAA0E;IAC1E,oFAAoF;IACpF,qFAAqF;IACrF,sFAAsF;IACtF,8EAA8E;IAC9E,6EAA6E;IAC7E,sFAAsF;IACtF,qFAAqF;IACrF,qFAAqF;IACrF,oFAAoF;IACpF,kEAAkE;IAClE,gFAAgF;IAChF,mFAAmF;IACnF,oDAAoD;IACpD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,4CAA4C;QACxD,WAAW,EAAE,yFAAyF;QACtG,aAAa,EAAE,6WAA6W;KAC7X;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,8CAA8C;QAC1D,WAAW,EAAE,+GAA+G;QAC5H,aAAa,EAAE,waAAwa;KACxb;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,0CAA0C;QACtD,WAAW,EAAE,uHAAuH;QACpI,aAAa,EAAE,6UAA6U;KAC7V;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,0CAA0C;QACtD,WAAW,EAAE,4HAA4H;QACzI,aAAa,EAAE,qVAAqV;KACrW;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,UAAU,EAAE,iDAAiD;QAC7D,WAAW,EAAE,qIAAqI;QAClJ,aAAa,EAAE,2bAA2b;KAC3c;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,UAAU,EAAE,6CAA6C;QACzD,WAAW,EAAE,kHAAkH;QAC/H,aAAa,EAAE,0aAA0a;KAC1b;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,8CAA8C;QAC1D,WAAW,EAAE,kHAAkH;QAC/H,aAAa,EAAE,kjBAAkjB;KAClkB;CACF,CAAC;AA0CF,MAAM,CAAC,MAAM,oBAAoB,GAAwB;IACvD,+EAA+E;IAC/E;QACE,UAAU,EAAE,kCAAkC;QAC9C,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,+CAA+C;KACxD;IACD;QACE,UAAU,EAAE,wCAAwC;QACpD,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,iDAAiD;KAC1D;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,+CAA+C;KACxD;IACD,gFAAgF;IAChF,+EAA+E;IAC/E,oFAAoF;IACpF,6DAA6D;IAC7D,wEAAwE;IACxE;QACE,UAAU,EAAE,8BAA8B;QAC1C,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,mDAAmD;KAC5D;IACD;QACE,UAAU,EAAE,gCAAgC;QAC5C,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,iIAAiI;KAC1I;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,gGAAgG;KACzG;IACD,uFAAuF;IACvF;QACE,UAAU,EAAE,qDAAqD;QACjE,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,kCAAkC;KAC3C;IACD;QACE,UAAU,EAAE,2CAA2C;QACvD,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,kCAAkC;KAC3C;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,qDAAqD;KAC9D;IACD,qDAAqD;IACrD;QACE,UAAU,EAAE,kCAAkC;QAC9C,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,8CAA8C;KACvD;IACD;QACE,UAAU,EAAE,+CAA+C;QAC3D,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,kGAAkG;KAC3G;IACD;QACE,UAAU,EAAE,mDAAmD;QAC/D,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,+FAA+F;KACxG;IACD,8EAA8E;IAC9E,kFAAkF;IAClF,iFAAiF;IACjF,gFAAgF;IAChF,mFAAmF;IACnF,6EAA6E;IAC7E,oFAAoF;IACpF,sFAAsF;IACtF,8EAA8E;IAC9E,+EAA+E;IAC/E,6EAA6E;IAC7E,iFAAiF;IACjF;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,4RAA4R;KACrS;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,uMAAuM;KAChN;IACD;QACE,UAAU,EAAE,2CAA2C;QACvD,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,gXAAgX;KACzX;IACD;QACE,UAAU,EAAE,6CAA6C;QACzD,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,uVAAuV;KAChW;IACD,sDAAsD;IACtD;QACE,UAAU,EAAE,uCAAuC;QACnD,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,wXAAwX;KACjY;IACD,gFAAgF;IAChF,uFAAuF;IACvF;QACE,UAAU,EAAE,gBAAgB;QAC5B,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,8NAA8N;KACvO;IACD;QACE,UAAU,EAAE,gBAAgB;QAC5B,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,gQAAgQ;KACzQ;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,UAAkB;IACjE,IAAI,GAAG,GAAY,MAAM,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC7D,GAAG,GAAI,GAA+B,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"devGatedFeatures.js","sourceRoot":"","sources":["../../src/core/devGatedFeatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAoBH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD;QACE,IAAI,EAAE,yBAAyB;QAC/B,UAAU,EAAE,6CAA6C;QACzD,WAAW,EAAE,+MAA+M;QAC5N,aAAa,EAAE,ikBAAikB;KACjlB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,kCAAkC;QAC9C,WAAW,EAAE,mDAAmD;QAChE,aAAa,EAAE,uGAAuG;KACvH;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,kCAAkC;QAC/C,aAAa,EAAE,yGAAyG;KACzH;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,mCAAmC;QAC/C,WAAW,EAAE,gDAAgD;QAC7D,aAAa,EAAE,sGAAsG;KACtH;IACD;QACE,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,iCAAiC;QAC7C,WAAW,EAAE,2CAA2C;QACxD,aAAa,EAAE,wGAAwG;KACxH;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,6CAA6C;QACzD,WAAW,EAAE,gCAAgC;QAC7C,aAAa,EAAE,sGAAsG;KACtH;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,mDAAmD;QAChE,aAAa,EAAE,8FAA8F;KAC9G;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,gDAAgD;QAC7D,aAAa,EAAE,yGAAyG;KACzH;IACD;QACE,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,sBAAsB;QAClC,WAAW,EAAE,iEAAiE;QAC9E,aAAa,EAAE,sDAAsD;KACtE;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,oEAAoE;QACjF,aAAa,EAAE,yDAAyD;KACzE;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,kCAAkC;QAC9C,WAAW,EAAE,8EAA8E;QAC3F,aAAa,EAAE,qNAAqN;KACrO;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,uDAAuD;QACnE,WAAW,EAAE,wPAAwP;QACrQ,aAAa,EAAE,srBAAsrB;KACtsB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,sDAAsD;QAClE,WAAW,EAAE,sMAAsM;QACnN,aAAa,EAAE,2hBAA2hB;KAC3iB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,uBAAuB;QACnC,WAAW,EAAE,+EAA+E;QAC5F,aAAa,EAAE,yNAAyN;KACzO;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,+CAA+C;QAC3D,WAAW,EAAE,uLAAuL;QACpM,aAAa,EAAE,otBAAotB;KACpuB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,4BAA4B;QACxC,WAAW,EAAE,mEAAmE;QAChF,aAAa,EAAE,mOAAmO;KACnP;IACD;QACE,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,gCAAgC;QAC5C,WAAW,EAAE,wJAAwJ;QACrK,aAAa,EAAE,wnBAAwnB;KACxoB;IACD,gFAAgF;IAChF,+EAA+E;IAC/E,8EAA8E;IAC9E,gFAAgF;IAChF,0EAA0E;IAC1E,kFAAkF;IAClF,mFAAmF;IACnF,oFAAoF;IACpF,oFAAoF;IACpF,qFAAqF;IACrF,6EAA6E;IAC7E,+EAA+E;IAC/E,iFAAiF;IACjF,+EAA+E;IAC/E,2EAA2E;IAC3E,gFAAgF;IAChF,iFAAiF;IACjF,+EAA+E;IAC/E;QACE,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,+IAA+I;QAC5J,aAAa,EAAE,8YAA8Y;KAC9Z;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,8JAA8J;QAC3K,aAAa,EAAE,0aAA0a;KAC1b;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,0CAA0C;QACtD,WAAW,EAAE,2MAA2M;QACxN,aAAa,EAAE,gcAAgc;KAChd;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,0OAA0O;QACvP,aAAa,EAAE,mcAAmc;KACnd;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,4CAA4C;QACxD,WAAW,EAAE,kPAAkP;QAC/P,aAAa,EAAE,+oBAA+oB;KAC/pB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,wGAAwG;QACrH,aAAa,EAAE,qRAAqR;KACrS;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,2UAA2U;QACxV,aAAa,EAAE,qTAAqT;KACrU;IACD;QACE,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,iCAAiC;QAC7C,WAAW,EAAE,gNAAgN;QAC7N,aAAa,EAAE,gpBAAgpB;KAChqB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,mCAAmC;QAC/C,WAAW,EAAE,2ZAA2Z;QACxa,aAAa,EAAE,+lBAA+lB;KAC/mB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,0RAA0R;QACvS,aAAa,EAAE,ynBAAynB;KACzoB;IACD;QACE,IAAI,EAAE,wCAAwC;QAC9C,UAAU,EAAE,4DAA4D;QACxE,WAAW,EACT,2KAA2K;QAC7K,aAAa,EACX,2OAA2O;KAC9O;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,UAAU,EAAE,8CAA8C;QAC1D,WAAW,EACT,6IAA6I;QAC/I,aAAa,EACX,uKAAuK;KAC1K;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,UAAU,EAAE,qCAAqC;QACjD,WAAW,EACT,0IAA0I;QAC5I,aAAa,EACX,ieAAie;KACpe;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,yCAAyC;QACrD,WAAW,EACT,6HAA6H;QAC/H,aAAa,EACX,8UAA8U;KACjV;IACD;QACE,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,gCAAgC;QAC5C,WAAW,EACT,kKAAkK;QACpK,aAAa,EACX,wiBAAwiB;KAC3iB;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,UAAU,EAAE,0CAA0C;QACtD,WAAW,EACT,2OAA2O;QAC7O,aAAa,EACX,gqBAAgqB;KACnqB;IACD,gFAAgF;IAChF,iFAAiF;IACjF,yEAAyE;IACzE,gFAAgF;IAChF;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,qFAAqF;QAClG,aAAa,EAAE,mOAAmO;KACnP;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,UAAU,EAAE,oCAAoC;QAChD,WAAW,EAAE,mFAAmF;QAChG,aAAa,EAAE,uWAAuW;KACvX;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,qCAAqC;QACjD,WAAW,EAAE,yEAAyE;QACtF,aAAa,EAAE,6cAA6c;KAC7d;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,qCAAqC;QACjD,WAAW,EAAE,+EAA+E;QAC5F,aAAa,EAAE,4MAA4M;KAC5N;IACD,kFAAkF;IAClF,kFAAkF;IAClF,0EAA0E;IAC1E,oFAAoF;IACpF,qFAAqF;IACrF,sFAAsF;IACtF,8EAA8E;IAC9E,6EAA6E;IAC7E,sFAAsF;IACtF,qFAAqF;IACrF,qFAAqF;IACrF,oFAAoF;IACpF,kEAAkE;IAClE,gFAAgF;IAChF,mFAAmF;IACnF,oDAAoD;IACpD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,4CAA4C;QACxD,WAAW,EAAE,yFAAyF;QACtG,aAAa,EAAE,6WAA6W;KAC7X;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,8CAA8C;QAC1D,WAAW,EAAE,+GAA+G;QAC5H,aAAa,EAAE,waAAwa;KACxb;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,0CAA0C;QACtD,WAAW,EAAE,uHAAuH;QACpI,aAAa,EAAE,6UAA6U;KAC7V;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,0CAA0C;QACtD,WAAW,EAAE,4HAA4H;QACzI,aAAa,EAAE,qVAAqV;KACrW;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,UAAU,EAAE,iDAAiD;QAC7D,WAAW,EAAE,qIAAqI;QAClJ,aAAa,EAAE,2bAA2b;KAC3c;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,UAAU,EAAE,6CAA6C;QACzD,WAAW,EAAE,kHAAkH;QAC/H,aAAa,EAAE,0aAA0a;KAC1b;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,8CAA8C;QAC1D,WAAW,EAAE,kHAAkH;QAC/H,aAAa,EAAE,kjBAAkjB;KAClkB;CACF,CAAC;AA0CF,MAAM,CAAC,MAAM,oBAAoB,GAAwB;IACvD,+EAA+E;IAC/E;QACE,UAAU,EAAE,kCAAkC;QAC9C,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,+CAA+C;KACxD;IACD;QACE,UAAU,EAAE,wCAAwC;QACpD,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,iDAAiD;KAC1D;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,+CAA+C;KACxD;IACD,gFAAgF;IAChF,+EAA+E;IAC/E,oFAAoF;IACpF,6DAA6D;IAC7D,wEAAwE;IACxE;QACE,UAAU,EAAE,8BAA8B;QAC1C,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,mDAAmD;KAC5D;IACD;QACE,UAAU,EAAE,gCAAgC;QAC5C,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,iIAAiI;KAC1I;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,gGAAgG;KACzG;IACD,uFAAuF;IACvF;QACE,UAAU,EAAE,qDAAqD;QACjE,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,kCAAkC;KAC3C;IACD;QACE,UAAU,EAAE,2CAA2C;QACvD,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,kCAAkC;KAC3C;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,qDAAqD;KAC9D;IACD,qDAAqD;IACrD;QACE,UAAU,EAAE,kCAAkC;QAC9C,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,8CAA8C;KACvD;IACD;QACE,UAAU,EAAE,+CAA+C;QAC3D,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,kGAAkG;KAC3G;IACD;QACE,UAAU,EAAE,mDAAmD;QAC/D,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,+FAA+F;KACxG;IACD,8EAA8E;IAC9E,kFAAkF;IAClF,iFAAiF;IACjF,gFAAgF;IAChF,mFAAmF;IACnF,6EAA6E;IAC7E,oFAAoF;IACpF,sFAAsF;IACtF,8EAA8E;IAC9E,+EAA+E;IAC/E,6EAA6E;IAC7E,iFAAiF;IACjF;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,4RAA4R;KACrS;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,uMAAuM;KAChN;IACD;QACE,UAAU,EAAE,kDAAkD;QAC9D,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,ymBAAymB;KAClnB;IACD;QACE,UAAU,EAAE,2CAA2C;QACvD,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,gXAAgX;KACzX;IACD;QACE,UAAU,EAAE,6CAA6C;QACzD,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,uVAAuV;KAChW;IACD,sDAAsD;IACtD;QACE,UAAU,EAAE,uCAAuC;QACnD,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,wXAAwX;KACjY;IACD,gFAAgF;IAChF,uFAAuF;IACvF;QACE,UAAU,EAAE,gBAAgB;QAC5B,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,8NAA8N;KACvO;IACD;QACE,UAAU,EAAE,gBAAgB;QAC5B,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,gQAAgQ;KACzQ;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,UAAkB;IACjE,IAAI,GAAG,GAAY,MAAM,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC7D,GAAG,GAAI,GAA+B,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/core/types.d.ts

@@ -3422,6 +3422,28 @@ export interface ThreadlineConfig {
     spawn?: ThreadlineSpawnConfig;
     /** Warm-session A2A keep-alive integration (Arch Y). */
     warmSessionA2A?: ThreadlineWarmSessionConfig;
+    /** Secure A2A Verified Pairing — SAS mutual verification + credential-share gate (§3.10). */
+    verifiedPairing?: ThreadlineVerifiedPairingConfig;
+}
+/**
+ * Secure A2A Verified Pairing config (docs/specs/secure-a2a-verified-pairing.md §3.10).
+ *
+ * Ships DARK: `enabled` default false fleet-wide (dev-live via the developmentAgent
+ * gate when omitted). When `enabled` is false the gate is a complete pass-through —
+ * byte-identical legacy behavior, no refusals, no pair-verify handling.
+ *
+ * `dryRun` (default true) governs ONLY inbound observability/logging (FD10) — the
+ * OUTBOUND credential-share refusal is ALWAYS live when `enabled` (a leak gate has
+ * no allow-by-default soak). `credentialShareEnforced` arms inbound enforcement and
+ * is read live at the gate chokepoint (no restart).
+ */
+export interface ThreadlineVerifiedPairingConfig {
+    /** Master flag. Default false fleet; omit → resolves via the developmentAgent gate. */
+    enabled?: boolean;
+    /** Governs inbound observability + attention verbosity ONLY (FD10). Default true. */
+    dryRun?: boolean;
+    /** Arms inbound credential-ingestion enforcement. Read live at the chokepoint. Default false. */
+    credentialShareEnforced?: boolean;
 }
 /**
  * Warm-session A2A integration config (THREADLINE-WARM-SESSION-A2A-INTEGRATION-SPEC).