sealbridge 0.2.2 → 0.3.0

package/dist/packages/runtime/dist/requester-pending-store.js

@@ -0,0 +1,266 @@
+// SPDX-License-Identifier: Apache-2.0
+import { IdempotencyStore, unwrapIdempotency } from './idempotency-store.js';
+import * as fs from 'node:fs';
+import { createHash, randomUUID } from 'node:crypto';
+import { dirname, join } from 'node:path';
+import { signPayload, verifySigned, validateManifest } from '../../core/dist/index.js';
+import { resolveDataRoot, privateDirectory, inspectDirectory, checkPath, checkStat } from './local-identity.js';
+import { validateSessionTimeouts } from './session-timeouts.js';
+const MAX_BYTES = 4 * 1024 * 1024;
+const MAX_RECORD_BYTES = 256 * 1024;
+const MAX_RECORDS = 100;
+const TTL_MS = 24 * 60 * 60_000;
+export const PENDING_NEXT_STEP = 'Use sealbridge pending list or acp_list_pending_requests; after worker owner approval, explicitly use sealbridge pending resubmit ID or acp_resubmit_pending_request. Listing shows local observations only; do not retry automatically.';
+export function requesterPendingPath(did, options = {}) {
+    return join(resolveDataRoot(options), 'requesters', createHash('sha256').update(did).digest('hex'), 'pending.private.json');
+}
+function summary(record, now) {
+    return { id: record.id, workerDid: record.workerDid, originalTaskId: record.originalTaskId,
+        lastTaskId: record.lastTaskId, state: record.expiresAt <= now ? 'expired' : record.state,
+        createdAt: record.createdAt, expiresAt: record.expiresAt, lastChecked: record.lastChecked,
+        attempts: record.attempts, ...(record.lastError ? { lastError: record.lastError } : {}) };
+}
+export function pendingErrorCode(error) {
+    const code = error?.code;
+    const value = typeof code === 'string' ? code : error instanceof Error ? error.message : '';
+    return /^[A-Z][A-Z0-9_]{0,79}$/.test(value) ? value : 'DELEGATION_FAILED';
+}
+export class RequesterPendingStore {
+    owner;
+    options;
+    path;
+    idempotency;
+    io;
+    platform;
+    now;
+    constructor(owner, options = {}) {
+        this.owner = owner;
+        this.options = options;
+        this.path = requesterPendingPath(owner.did, options);
+        this.io = options.fs ?? fs;
+        this.platform = options.platform ?? process.platform;
+        this.now = options.now ?? Date.now;
+    }
+    directories() {
+        return [dirname(dirname(dirname(this.path))), dirname(dirname(this.path)), dirname(this.path)];
+    }
+    read() {
+        const io = this.io;
+        let fd;
+        try {
+            for (const directory of this.directories()) {
+                try {
+                    inspectDirectory(directory, io, this.platform);
+                }
+                catch (e) {
+                    if (e.code !== 'ENOENT')
+                        throw e;
+                }
+            }
+            checkPath(this.path, io, this.platform);
+            const before = io.lstatSync(this.path);
+            checkStat(before);
+            if (before.size > MAX_BYTES)
+                throw new Error();
+            fd = io.openSync(this.path, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW ?? 0) | (fs.constants.O_NONBLOCK ?? 0));
+            const stat = io.fstatSync(fd);
+            checkStat(stat);
+            if (stat.ino !== before.ino || stat.dev !== before.dev || stat.size > MAX_BYTES)
+                throw new Error();
+            const bytes = Buffer.alloc(MAX_BYTES + 1);
+            let size = 0;
+            while (size < bytes.length) {
+                const count = io.readSync(fd, bytes, size, bytes.length - size, null);
+                if (!count)
+                    break;
+                size += count;
+            }
+            if (size > MAX_BYTES)
+                throw new Error();
+            const signed = JSON.parse(bytes.subarray(0, size).toString('utf8')), state = signed.payload;
+            if (!verifySigned(signed, this.owner.did) || state.version !== 1 || state.requesterDid !== this.owner.did ||
+                !Array.isArray(state.records) || state.records.length > MAX_RECORDS)
+                throw new Error();
+            const ids = new Set();
+            for (const r of state.records) {
+                if (!r || typeof r.id !== 'string' || !/^[a-f0-9-]{36}$/.test(r.id) || ids.has(r.id) ||
+                    !['pending', 'resolved', 'failed', 'expired'].includes(r.state) ||
+                    ![r.createdAt, r.expiresAt, r.lastChecked, r.attempts].every(Number.isSafeInteger) || r.attempts < 1 ||
+                    typeof r.workerDid !== 'string' || typeof r.originalTaskId !== 'string' || typeof r.lastTaskId !== 'string' ||
+                    (r.lastError !== undefined && !/^[A-Z][A-Z0-9_]{0,79}$/.test(r.lastError)) ||
+                    !r.request || !(typeof r.request.to === 'string' && r.request.workerRef === undefined ||
+                    typeof r.request.workerRef === 'string' && !!r.request.workerRef && r.request.to === undefined) ||
+                    (r.request.relayUrl !== undefined && typeof r.request.relayUrl !== 'string') ||
+                    !Object.hasOwn(r.request, 'input') || !r.request.timeouts || typeof r.request.timeouts !== 'object' || Array.isArray(r.request.timeouts) ||
+                    Buffer.byteLength(JSON.stringify(r)) > MAX_RECORD_BYTES)
+                    throw new Error();
+                validateManifest(r.request.manifest);
+                validateSessionTimeouts(r.request.timeouts);
+                if (r.request.manifest.requester.ownerDid !== this.owner.did || r.request.manifest.worker?.ownerDid !== r.workerDid)
+                    throw new Error();
+                ids.add(r.id);
+            }
+            return state;
+        }
+        catch (e) {
+            if (e.code === 'ENOENT')
+                return { version: 1, requesterDid: this.owner.did, records: [] };
+            throw new Error('PENDING_STORE_INVALID');
+        }
+        finally {
+            if (fd !== undefined)
+                io.closeSync(fd);
+        }
+    }
+    mutate(change) {
+        const io = this.io;
+        let locked = false, temporary;
+        try {
+            for (const directory of this.directories())
+                privateDirectory(directory, io, this.platform);
+            try {
+                io.writeFileSync(this.path + '.lock', '', { flag: 'wx', mode: 0o600 });
+                locked = true;
+            }
+            catch (e) {
+                if (e.code === 'EEXIST')
+                    throw new Error('PENDING_STORE_BUSY');
+                throw e;
+            }
+            const state = this.read();
+            state.records = state.records.filter(r => r.expiresAt > this.now());
+            change(state);
+            if (state.records.length > MAX_RECORDS || state.records.some(r => Buffer.byteLength(JSON.stringify(r)) > MAX_RECORD_BYTES))
+                throw new Error('PENDING_STORE_FULL');
+            const bytes = JSON.stringify(signPayload(state, this.owner)) + '\n';
+            if (Buffer.byteLength(bytes) > MAX_BYTES)
+                throw new Error('PENDING_STORE_FULL');
+            temporary = this.path + '.' + randomUUID() + '.tmp';
+            const fd = io.openSync(temporary, 'wx', 0o600);
+            try {
+                io.writeFileSync(fd, bytes);
+                io.fsyncSync(fd);
+            }
+            finally {
+                io.closeSync(fd);
+            }
+            checkPath(this.path, io, this.platform);
+            io.renameSync(temporary, this.path);
+        }
+        catch (e) {
+            if (e instanceof Error && /^(PENDING_|REQUEST_)/.test(e.message))
+                throw e;
+            throw new Error('PENDING_STORE_UNWRITABLE');
+        }
+        finally {
+            if (temporary)
+                try {
+                    io.unlinkSync(temporary);
+                }
+                catch (e) {
+                    if (e.code !== 'ENOENT')
+                        throw e;
+                }
+            if (locked)
+                io.unlinkSync(this.path + '.lock');
+        }
+    }
+    list() { return this.read().records.map(r => summary(r, this.now())); }
+    save(request) {
+        const now = this.now(), id = randomUUID();
+        this.mutate(state => state.records.push({ id, workerDid: request.manifest.worker.ownerDid,
+            originalTaskId: request.manifest.taskId, lastTaskId: request.manifest.taskId,
+            state: 'pending', createdAt: now, expiresAt: now + TTL_MS, lastChecked: now, attempts: 1,
+            lastError: 'PENDING_OWNER_APPROVAL', request: JSON.parse(JSON.stringify(request)) }));
+        return id;
+    }
+    remove(id) {
+        this.mutate(state => {
+            if (state.records.some(r => r.id === id) && this.io.existsSync(this.path + '.' + id + '.attempt.lock'))
+                throw new Error('PENDING_STORE_BUSY');
+            state.records = state.records.filter(r => r.id !== id);
+        });
+    }
+    resolve(id) {
+        this.mutate(s => {
+            const r = s.records.find(r => r.id === id);
+            if (r) {
+                r.state = 'resolved';
+                r.lastChecked = this.now();
+                delete r.lastError;
+            }
+        });
+    }
+    get(id) {
+        const record = this.read().records.find(r => r.id === id);
+        if (!record)
+            throw new Error('PENDING_NOT_FOUND');
+        if (record.expiresAt <= this.now())
+            throw new Error('PENDING_EXPIRED');
+        if (record.state === 'resolved')
+            throw new Error('PENDING_ALREADY_RESOLVED');
+        return record;
+    }
+    /** The callback must use the current host's normal delegation and approval path. */
+    async resubmit(id, run, options = {}) {
+        if (options.idempotencyKey !== undefined) {
+            this.idempotency ??= new IdempotencyStore(this.owner, { ...this.options, ...options.idempotencyOptions });
+            return unwrapIdempotency(await this.idempotency.run('acp_resubmit_pending_request', options.idempotencyKey, { pendingId: id }, async (operation) => ({ isError: false, value: await this.resubmit(id, (request, relay) => run({ ...request, idempotencyOperation: operation }, relay)) })));
+        }
+        this.get(id);
+        const io = this.io, lock = this.path + '.' + id + '.attempt.lock';
+        try {
+            io.writeFileSync(lock, '', { flag: 'wx', mode: 0o600 });
+        }
+        catch (e) {
+            throw new Error(e.code === 'EEXIST' ? 'PENDING_STORE_BUSY' : 'PENDING_STORE_UNWRITABLE');
+        }
+        try {
+            const record = this.get(id), now = this.now();
+            const manifest = structuredClone(record.request.manifest);
+            const duration = Date.parse(manifest.deadline) - Date.parse(manifest.createdAt);
+            manifest.taskId = 'task_' + randomUUID().replaceAll('-', '');
+            manifest.createdAt = new Date(now).toISOString();
+            manifest.deadline = new Date(now + duration).toISOString();
+            this.mutate(s => {
+                const r = s.records.find(r => r.id === id);
+                if (!r)
+                    throw new Error('PENDING_EXPIRED');
+                r.attempts++;
+                r.lastChecked = now;
+                r.lastTaskId = manifest.taskId;
+            });
+            try {
+                const result = await run({ ...record.request.timeouts, to: record.request.to ?? record.request.workerRef,
+                    ...(record.request.workerRef ? { workerRef: record.request.workerRef } : {}), manifest, renegotiateProtocol: true,
+                    title: manifest.task.title, description: manifest.task.description, input: record.request.input, pendingId: id }, record.request.relayUrl);
+                this.resolve(id);
+                return result;
+            }
+            catch (e) {
+                const code = pendingErrorCode(e);
+                try {
+                    this.mutate(s => {
+                        const r = s.records.find(r => r.id === id);
+                        if (r && r.state !== 'resolved') {
+                            r.state = code === 'PENDING_OWNER_APPROVAL' ? 'pending' : 'failed';
+                            r.lastError = code;
+                            r.lastChecked = this.now();
+                        }
+                    });
+                }
+                catch (storeError) {
+                    if (e && typeof e === 'object')
+                        Object.assign(e, { pendingStoreError: pendingErrorCode(storeError) });
+                }
+                if (e && typeof e === 'object')
+                    Object.assign(e, { pendingId: id, originalTaskId: record.originalTaskId, nextStep: PENDING_NEXT_STEP });
+                throw e;
+            }
+        }
+        finally {
+            io.unlinkSync(lock);
+        }
+    }
+}
+//# sourceMappingURL=requester-pending-store.js.map

package/dist/packages/runtime/dist/requester-pending-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requester-pending-store.js","sourceRoot":"","sources":["../src/requester-pending-store.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE7E,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAExE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhH,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAGhE,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAClC,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,CAAC;AACpC,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AAChC,MAAM,CAAC,MAAM,iBAAiB,GAAG,0OAA0O,CAAC;AAc5Q,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,UAAgC,EAAE;IAClF,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,sBAAsB,CAAC,CAAC;AAC9H,CAAC;AACD,SAAS,OAAO,CAAC,MAAsB,EAAE,GAAW;IAClD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc;QACxF,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK;QACxF,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW;QACzF,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC9F,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,MAAM,IAAI,GAAI,KAAmC,EAAE,IAAI,CAAC;IACxD,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,OAAO,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC;AAC5E,CAAC;AACD,MAAM,OAAO,qBAAqB;IAMH;IAAiC;IALrD,IAAI,CAAS;IACd,WAAW,CAAoB;IACtB,EAAE,CAAY;IACd,QAAQ,CAAkB;IAC1B,GAAG,CAAe;IACnC,YAA6B,KAAc,EAAmB,UAAyD,EAAE;QAA5F,UAAK,GAAL,KAAK,CAAS;QAAmB,YAAO,GAAP,OAAO,CAAoD;QACvH,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;QACjF,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACrC,CAAC;IACO,WAAW;QACjB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACjG,CAAC;IACO,IAAI;QACV,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,EAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3C,IAAI,CAAC;oBAAC,gBAAgB,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAAC,CAAC;gBACvD,OAAO,CAAC,EAAE,CAAC;oBAAC,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,CAAC,CAAC;gBAAC,CAAC;YAC5E,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC1D,IAAI,MAAM,CAAC,IAAI,GAAG,SAAS;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YAC/C,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;YACrH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,GAAG,SAAS;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YACnG,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;YAC1C,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,OAAO,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC;gBACtE,IAAI,CAAC,KAAK;oBAAE,MAAM;gBAClB,IAAI,IAAI,KAAK,CAAC;YAChB,CAAC;YACD,IAAI,IAAI,GAAG,SAAS;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAkB,EAAE,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC;YAC7G,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG;gBACrG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YAC3F,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;YAC9B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC9B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChF,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;oBAC/D,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC;oBACpG,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;oBAC3G,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;oBAC1E,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;oBACnF,OAAO,CAAC,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC;oBACjG,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC;oBAC5E,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;oBACxI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,gBAAgB;oBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;gBAC/E,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACrC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC5C,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,KAAK,CAAC,CAAC,SAAS;oBACjH,MAAM,IAAI,KAAK,EAAE,CAAC;gBACpB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChB,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YACrH,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;gBAAS,CAAC;YAAC,IAAI,EAAE,KAAK,SAAS;gBAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IACvD,CAAC;IACO,MAAM,CAAC,MAA8B;QAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,MAAM,GAAG,KAAK,EAAE,SAA6B,CAAC;QAClD,IAAI,CAAC;YACH,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,WAAW,EAAE;gBAAE,gBAAgB,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3F,IAAI,CAAC;gBAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC;YAAC,CAAC;YAC9F,OAAO,CAAC,EAAE,CAAC;gBAAC,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;gBAAC,MAAM,CAAC,CAAC;YAAC,CAAC;YACjH,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC1B,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACpE,MAAM,CAAC,KAAK,CAAC,CAAC;YACd,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC;gBACxH,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC;YACpE,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAChF,SAAS,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC;YACpD,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/C,IAAI,CAAC;gBAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YACpF,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxC,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,KAAK,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;gBAAE,MAAM,CAAC,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;gBAAS,CAAC;YACT,IAAI,SAAS;gBAAE,IAAI,CAAC;oBAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBAAC,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,CAAC,CAAC;gBAAC,CAAC;YAC3H,IAAI,MAAM;gBAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IACD,IAAI,KAAuB,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,IAAI,CAAC,OAAkC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,UAAU,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAO,CAAC,QAAQ;YACxF,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;YAC5E,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;YACxF,SAAS,EAAE,wBAAwB,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAA8B,EAAE,CAAC,CAAC,CAAC;QACrH,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,CAAC,EAAU;QACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;YAClB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,GAAG,EAAE,GAAG,eAAe,CAAC;gBACpG,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACxC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,EAAU;QAChB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;YAAG,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5D,IAAI,CAAC,EAAE,CAAC;gBAAC,CAAC,CAAC,KAAK,GAAG,UAAU,CAAC;gBAAC,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAAC,OAAO,CAAC,CAAC,SAAS,CAAC;YAAC,CAAC;QAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IACO,GAAG,CAAC,EAAU;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACvE,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,oFAAoF;IACpF,KAAK,CAAC,QAAQ,CAAI,EAAU,EAAE,GAAgE,EAC5F,UAAqF,EAAE;QACvF,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACzC,IAAI,CAAC,WAAW,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;YAC1G,OAAO,iBAAiB,CAAI,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,8BAA8B,EAAE,OAAO,CAAC,cAAc,EAC3G,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,KAAK,EAAC,SAAS,EAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EACpF,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,EAAE,KAAK,CAAC,CAAS,EAAE,CAAC,CAAC,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,GAAG,EAAE,GAAG,eAAe,CAAC;QAClE,IAAI,CAAC;YAAC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,CAAC;QAChE,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAE,CAA2B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;QAAC,CAAC;QAClI,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAChF,QAAQ,CAAC,MAAM,GAAG,OAAO,GAAG,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC7D,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YAAC,QAAQ,CAAC,QAAQ,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YAC7G,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBAAG,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC5D,IAAI,CAAC,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBAC3C,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAAC,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC;gBAAC,CAAC,CAAC,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC;YAAC,CAAC,CAAC,CAAC;YACxE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS;oBACtG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI;oBACjH,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC7I,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACjB,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;gBACjC,IAAI,CAAC;oBAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;wBAAG,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;wBAClE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;4BAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;4BAAC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC;4BAAC,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;wBAAC,CAAC;oBAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBAChK,OAAO,UAAU,EAAE,CAAC;oBAAC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;wBAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAC7H,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBACxI,MAAM,CAAC,CAAC;YACV,CAAC;QACH,CAAC;gBAAS,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;IACpC,CAAC;CACF"}

package/dist/packages/runtime/dist/secret-store.d.ts

@@ -0,0 +1,19 @@
+import type { IdentityStoreOptions, KeyringModule } from './key-store.js';
+/** Synchronous string operations allow existing InviteStore methods to retain their API. */
+export interface SecretStore {
+    get(id: string): string | undefined;
+    set(id: string, value: string): void;
+    /** Removing an already absent entry succeeds; callers verify absence after deletion. */
+    delete(id: string): void;
+}
+/** Uses the identity service with distinct invitation account names. */
+export declare class KeychainSecretStore implements SecretStore {
+    private readonly module;
+    private readonly service;
+    constructor(module: KeyringModule, options?: IdentityStoreOptions);
+    private entry;
+    get(id: string): string | undefined;
+    set(id: string, value: string): void;
+    delete(id: string): void;
+}
+export declare function openKeychainSecretStore(options?: IdentityStoreOptions): Promise<SecretStore>;

package/dist/packages/runtime/dist/secret-store.js

@@ -0,0 +1,51 @@
+// SPDX-License-Identifier: Apache-2.0
+import { keychainService, optionalKeyring } from './key-store.js';
+/** Uses the identity service with distinct invitation account names. */
+export class KeychainSecretStore {
+    module;
+    service;
+    constructor(module, options = {}) {
+        this.module = module;
+        this.service = keychainService(options);
+    }
+    entry(id) {
+        if (!/^invite:[a-f0-9]{64}$/.test(id))
+            throw new Error('INVITE_SECRET_INVALID');
+        return new this.module.Entry(this.service, id, { linux: { store: 'secret-service' } });
+    }
+    get(id) {
+        try {
+            return this.entry(id).getPassword() ?? undefined;
+        }
+        catch {
+            throw new Error('KEY_STORE_UNAVAILABLE');
+        }
+    }
+    set(id, value) {
+        try {
+            this.entry(id).setPassword(value);
+        }
+        catch {
+            throw new Error('KEY_STORE_UNAVAILABLE');
+        }
+    }
+    delete(id) {
+        try {
+            const entry = this.entry(id);
+            if (entry.getPassword() === null)
+                return;
+            if (!entry.deletePassword)
+                throw new Error();
+            entry.deletePassword();
+            if (entry.getPassword() !== null)
+                throw new Error();
+        }
+        catch {
+            throw new Error('KEY_STORE_UNAVAILABLE');
+        }
+    }
+}
+export async function openKeychainSecretStore(options = {}) {
+    return new KeychainSecretStore((await optionalKeyring(options, true)), options);
+}
+//# sourceMappingURL=secret-store.js.map

package/dist/packages/runtime/dist/secret-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-store.js","sourceRoot":"","sources":["../src/secret-store.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAWlE,wEAAwE;AACxE,MAAM,OAAO,mBAAmB;IAED;IADZ,OAAO,CAAS;IACjC,YAA6B,MAAqB,EAAE,UAAgC,EAAE;QAAzD,WAAM,GAAN,MAAM,CAAe;QAChD,IAAI,CAAC,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IACO,KAAK,CAAC,EAAU;QACtB,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAChF,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,GAAG,CAAC,EAAU;QACZ,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC;QAAC,CAAC;QACzD,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAAC,CAAC;IACrD,CAAC;IACD,GAAG,CAAC,EAAU,EAAE,KAAa;QAC3B,IAAI,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAC1C,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAAC,CAAC;IACrD,CAAC;IACD,MAAM,CAAC,EAAU;QACf,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC7B,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI;gBAAE,OAAO;YACzC,IAAI,CAAC,KAAK,CAAC,cAAc;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YAC7C,KAAK,CAAC,cAAc,EAAE,CAAC;YACvB,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAAC,CAAC;IACvD,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,UAAgC,EAAE;IAC9E,OAAO,IAAI,mBAAmB,CAAC,CAAC,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAE,EAAE,OAAO,CAAC,CAAC;AACnF,CAAC"}

package/dist/packages/runtime/dist/session-audit.d.ts

@@ -1,12 +1,22 @@
-import type { Json, KeyPair, Signed, SignedEnvelope, Transition } from '@acp/core';
-import type { AuditBundle, AuditEntry } from '@acp/ledger';
-import type { RelayConnectionStatus } from '@acp/relay';
-import type { RelayReceiveFilter, RelayTransport } from '@acp/relay';
+import type { Json, KeyPair, Signed, SignedEnvelope, Transition } from '../../core/dist/index.js';
+import type { AuditBundle, AuditEntry } from '../../ledger/dist/index.js';
+import type { RelayConnectionStatus } from '../../relay/dist/index.js';
+import type { RelayReceiveFilter, RelayTransport } from '../../relay/dist/index.js';
 import type { ProgressPayload } from './adapter.js';
 import type { ErrorDetail, SessionResult } from './session.js';
+import type { GatewayDeliveryService, DeliveryContext } from './outbox.js';
+export interface WireDelivery {
+    service: GatewayDeliveryService;
+    context: DeliveryContext;
+}
 /** The peer's signed ERROR, retaining optional diagnostics for programmatic callers. */
 export declare class PeerRejectedError extends Error {
     readonly code?: string;
+    readonly retryable?: false;
+    readonly pendingId?: string;
+    readonly pendingStoreError?: string;
+    readonly originalTaskId?: string;
+    readonly nextStep?: string;
     readonly detail?: ErrorDetail;
     readonly recovery?: {
         proposalDigest: string;
@@ -21,9 +31,9 @@ export declare class PeerRejectedError extends Error {
     constructor(body: Json);
 }
 export declare const asJson: (v: unknown) => Json;
-export declare function receiveRelay(relay: RelayTransport, did: string, signal?: AbortSignal, filter?: RelayReceiveFilter, onStatus?: (status: RelayConnectionStatus) => void): Promise<SignedEnvelope>;
+export declare function receiveRelay(relay: RelayTransport, did: string, signal?: AbortSignal, filter?: RelayReceiveFilter, onStatus?: (status: RelayConnectionStatus) => void, onIdle?: () => Promise<SignedEnvelope | undefined>): Promise<SignedEnvelope>;
 /** A lost ack is retried by the HTTP client when the completed envelope is redelivered. */
-export declare function acknowledgeRelay(relay: RelayTransport, envelope: SignedEnvelope): Promise<void>;
+export declare function acknowledgeRelay(relay: RelayTransport, envelope: SignedEnvelope, signal?: AbortSignal): Promise<void>;
 export interface CancelBody {
     reason: string;
     cancelledBy: string;
@@ -40,6 +50,9 @@ export declare class SessionWire {
     readonly auditPath?: string | undefined;
     /** Legacy in-memory fixtures may open cleartext. Network sessions leave this false. */
     readonly allowUnencryptedEnvelopes: boolean;
+    /** Worker admission may await inspection before seeding the initial PROPOSE. */
+    private awaitingInitial;
+    readonly delivery?: WireDelivery | undefined;
     private outgoing;
     private incoming;
     private readonly recoveryParts;
@@ -61,6 +74,9 @@ export declare class SessionWire {
     private cancellation?;
     /** One bilateral send at a time so PROGRESS cannot overtake its own ACK. */
     private sendTail;
+    private deliveryTail;
+    private readonly receiptAcks;
+    hasCommittedSend: boolean;
     readonly entries: AuditEntry[];
     onProgress?: (progress: ProgressPayload, envelope: SignedEnvelope) => void | Promise<void>;
     onActivity?: () => void;
@@ -70,7 +86,9 @@ export declare class SessionWire {
     cancelHandled: boolean;
     constructor(relay: RelayTransport, owner: KeyPair, peerDid: string, taskId: string, actors: [string, string], signal: AbortSignal, auditPath?: string | undefined, 
     /** Legacy in-memory fixtures may open cleartext. Network sessions leave this false. */
-    allowUnencryptedEnvelopes?: boolean);
+    allowUnencryptedEnvelopes?: boolean, 
+    /** Worker admission may await inspection before seeding the initial PROPOSE. */
+    awaitingInitial?: boolean, delivery?: WireDelivery | undefined);
     get cancellationStarted(): boolean;
     close(): void;
     /** Liveness is signed/encrypted but does not consume audit sequence numbers or extend quota. */
@@ -86,7 +104,11 @@ export declare class SessionWire {
     private rejectWaiters;
     private dispatch;
     private watchDelivery;
+    private prepare;
+    private dispatchPrepared;
+    private dispatchBatch;
     rawSend(eventType: string, payload: unknown): Promise<void>;
+    private complete;
     /** Ciphertext that still matches the outer signature, when `view` was opened for the session. */
     sealed(view: SignedEnvelope): SignedEnvelope;
     private check;