@agentplat/mesh 0.3.0-beta.2 → 0.3.0-beta.3

package/README.md

@@ -3,6 +3,37 @@
 Provider-neutral state, input and effect contracts for independently executing
 AgentPlat peers.
 
+The additive `@agentplat/mesh/overlay` subpath supplies the sparse collective
+scale V2 runtime. It derives `O(log N)` active and reserve peer views on demand,
+refreshes a local view from caller-certified exclusions, and propagates
+digest-only update references with bounded fanout, hop, deduplication and
+outbound-interaction budgets. Closed profiles cover 500, 5,000 and 100,000
+peers while preserving every existing Mesh wire and coordination contract.
+The overlay plans authenticated deliveries but performs no transport, grants
+no authority and never carries raw payloads.
+
+The `@agentplat/mesh/overlay-transport` subpath additionally includes an
+optional authenticated next-hop boundary. `MeshAuthenticatedSparseOverlayNextHopTransportV1`
+wraps the durable sparse transport's existing `nextHop` port; its companion
+endpoint validates signed, content-free request and response envelopes before
+the durable overlay processes them. Every envelope binds the overlay, sender
+and recipient peer identities, membership epoch, signing-key ID, sequence,
+logical time, operation and payload digest. The boundary receives membership
+and public-key truth through caller-provided ports, so it neither creates a
+global PKI nor carries private keys in state or evidence.
+
+The durable state port performs one atomic compare-and-set for both replay
+state and its monotonic anti-rollback anchor. Production adapters must keep
+that anchor independently protected and never expose a partially committed
+state/anchor pair. It retains only outbound sequence allocation and per-peer
+epoch cursors,
+rejecting replay, implausibly future sequences, wrong epochs, invalid
+signatures, revoked keys and keys outside their explicit rotation window.
+`WebCryptoMeshAuthenticatedOverlaySignerV1` and the in-memory state/network
+adapters are local reference implementations; production deployments supply
+their own key custody, membership authority, atomic durable state/anchor and
+network ports.
+
 The package is additive to the existing Runtime, Sessions and Rooms surfaces.
 Its peer kernel is defined as a synchronous state transition:
 
@@ -201,7 +232,11 @@ offer envelopes is a trusted driver boundary; this reducer does not verify a
 signature itself.
 
 The owner-side award increment extends that projection with one prepared,
-signed direct `work.award` envelope for the current deterministic bid. Awarding
+signed direct `work.award` envelope for the current deterministic bid.
+Selection may supply a bounded, explicit `excludedBidderPeerIds` set to both it
+and the local award command, allowing immutable owner policy (for example,
+witness/assignee separation) to choose the next eligible bid deterministically.
+Awarding
 atomically closes the bid window, replaces its timer with a generation-fenced
 acceptance timer and keeps the reservation reserved. Already-verified direct
 `work.accept` and `work.decline` responses are accepted only from the awarded
@@ -297,8 +332,52 @@ instance authority, replay accounting and the allocation transition. A signed
 execution record rejected by the domain still consumes normal replay security
 accounting; diagnostics remain local. The same boundary accepts authenticated
 `lease.renew`, `lease.takeover_proposal`, `lease.vote` and `lease.certificate`
-records only after replay and admission checks. This alpha does not implement
-durable execution storage, owner transfer or external-action authority.
+records only after replay and admission checks. The state machine does not
+choose a storage engine or grant external-action authority; applications bind
+it to a durable repository and a separately governed action gateway.
+
+The durable outbox supports an optional `dependsOnEffectId` causal fence. A
+dependency may name an earlier effect in the same atomic transition or a
+retained effect from an earlier transition in the same durable peer scope.
+Forward references within one transition are rejected. Durable adapters claim
+the dependent effect only after its predecessor is settled as delivered, so
+checkpoint-before-result and multi-transition witness ordering survive retries
+and process loss.
+
+## Certified authority continuity
+
+Import `@agentplat/mesh/continuity` when an application cannot depend forever
+on the initially provisioned Objective issuer or Work Item owner. It maintains
+one independently durable, generation-fenced authority head for either an
+`objective_issuer` or `work_owner` scope.
+
+A coordinated transfer requires evidence signed by the exact current holder
+and separate signed acceptance by the eligible successor. Recovery without the
+holder requires a successor-signed proposal, the configured delay, distinct
+verified endorsements from the fixed witness set, its threshold certificate
+and successor acceptance. The threshold must be a strict majority and the
+current holder or proposed successor cannot be one of its own witnesses. A
+proposal, endorsement or certificate alone never
+activates authority. Recovery cannot replace its witness policy; only a
+current-holder transfer may install the successor policy it signs.
+
+The runtime binds its verifier, successor-eligibility implementation, proof
+limit and retained-evidence limit into every snapshot. State changes use a
+caller-supplied compare-and-swap store. Each accepted transition increments the
+generation, derives a new fencing token from the certificate, retains the full
+evidence chain and makes the prior holder fail `checkCurrent()`. Malformed,
+stale, concurrent, expired, under-threshold or unverifiable transitions fail
+closed.
+
+This subpath is transport-neutral and does not reinterpret an older allocation
+envelope. Gateways compose its current head before admitting issuer/owner
+commands and bind the resulting generation, head digest and fencing token into
+new Work Contracts, action permits and downstream effects. The included
+in-memory store is a reference adapter; durable deployments implement the same
+CAS port.
+Snapshots revalidate their closed shape, canonical digests and complete
+transition chain on load; the durable store must integrity-protect them because
+historical signature providers are not contacted again during restoration.
 
 `@agentplat/mesh/loopback` provides the explicit in-memory signed transport used
 by the local vertical slice. `createMeshLoopbackTransport` owns composite
@@ -308,6 +387,56 @@ transports. Outbound sequence allocators are included in restart snapshots,
 duplicate batches repeat the exact signed envelope, and cooperative close
 drains already accepted work.
 
-Importing either entrypoint performs no network, clock, storage or key
+Importing any entrypoint performs no network, clock, storage or key
 operations. Clocks, message-ID sources, signers, keys and verification policy
 are supplied explicitly when a peer is registered.
+
+## Governed adaptive sparse overlay
+
+Import `@agentplat/mesh/adaptive-overlay` to refresh one peer's bounded sparse
+view from authenticated, content-free evidence. The locally installed policy
+binds eligible observers, independence groups, evidence lifetime and exclusion
+limits. A remote proposal or certificate cannot replace that policy.
+
+Only a current certificate whose signal/peer/group tuples cover the exact
+proposal may exclude a neighbor. The replacement view is regenerated locally
+from the existing topology seed; no global graph is accepted or retained.
+Revision-and-digest CAS, future/stale checks and an external monotonic head
+reject races, rollback and deleted-snapshot reinitialization.
+
+Application replay is keyed by the certified certificate digest. If a caller
+crashes after the adaptive CAS but before persisting its own receipt, retrying
+with the original expected revision returns the retained application as a
+duplicate before rejecting that now-stale revision. It does not authorize a
+different certificate or bypass the original certification boundary.
+
+## Collective capability closure
+
+Operational Sparse Peer Plane V1 is the communication substrate for the
+collective capability closure. It supplies bounded local peer views and
+authenticated, digest-bound dissemination inputs to planning, context,
+allocation and recovery adapters. It does not expose a global membership
+oracle, global topology graph, central scheduler or execution authority.
+
+Production drivers must provide authenticated ingress, replay protection,
+durable CAS/high-water persistence, bounded queues and current identity/key
+resolution. A local peer view is a routing and eligibility input only; team
+assignment, Work Contracts and effects remain separate fenced boundaries. See
+[ADR 0042](../../docs/adr/0042-collective-capability-closure.md) and the
+[architecture and threat model](../../docs/security/collective-capability-closure-v1.md).
+
+### Durable sparse-overlay transport
+
+`@agentplat/mesh/overlay-transport` supplies the portable next-hop data plane
+for the Sparse Peer Plane. Each runtime owns only one peer's bounded inbox,
+outbox, application updates, causal history and neighbor cursors. Delivery and
+update identities are idempotent; bounded queues apply backpressure; retry
+state survives restart through a CAS store.
+
+`MeshSparseDirectNextHopTransportV1` connects only explicitly supplied local
+neighbors and never creates a process-global peer directory. A partition keeps
+the durable outbox intact. On rejoin, the peer requests bounded deltas from
+current active/reserve neighbors, detects a truncated history gap, and fetches
+the exact causal predecessor before handing a recovered delivery to the peer
+plane. Deployments can persist the state with
+`MeshDurableSparseTransportStoreV1` using a dedicated durable repository scope.

package/dist/adaptive-overlay-contracts.d.ts

@@ -0,0 +1,149 @@
+/** Provider-neutral, content-free governance contracts for local sparse-overlay adaptation. */
+export declare const MESH_ADAPTIVE_OVERLAY_SCHEMA_VERSION_V1: 1;
+export type MeshAdaptiveOverlayDigestV1 = `sha256:${string}`;
+export type MeshAdaptiveOverlayDecisionV1 = "observed" | "certified" | "applied" | "duplicate" | "stale" | "conflict" | "rejected";
+/** Current topology bindings that every signal and certificate must carry. */
+export interface MeshAdaptiveOverlayBindingV1 {
+    readonly schemaVersion: 1;
+    readonly overlayId: string;
+    readonly localPeerIndex: number;
+    readonly membershipDigest: MeshAdaptiveOverlayDigestV1;
+    readonly profileDigest: MeshAdaptiveOverlayDigestV1;
+    readonly viewDigest: MeshAdaptiveOverlayDigestV1;
+    readonly revision: number;
+    readonly bindingDigest: MeshAdaptiveOverlayDigestV1;
+}
+/** An authenticated observation. Its subject is deliberately a digest, never payload content. */
+export interface MeshAdaptiveOverlaySignalV1 {
+    readonly schemaVersion: 1;
+    readonly signalId: string;
+    readonly binding: MeshAdaptiveOverlayBindingV1;
+    readonly observerPeerId: string;
+    readonly observerGroupId: string;
+    /** Exact peer whose local reachability is being evaluated. */
+    readonly subjectPeerIndex: number;
+    readonly subjectDigest: MeshAdaptiveOverlayDigestV1;
+    readonly kind: "unreachable" | "degraded" | "policy_violation";
+    readonly observedAtLogicalMs: number;
+    readonly expiresAtLogicalMs: number;
+    readonly authentication: {
+        readonly algorithm: string;
+        readonly value: string;
+    };
+    readonly signalDigest: MeshAdaptiveOverlayDigestV1;
+}
+export interface MeshAdaptiveOverlayObserverV1 {
+    readonly peerId: string;
+    readonly groupId: string;
+}
+/** The threshold counts independent observer groups, not raw reports. */
+export interface MeshAdaptiveOverlayPolicyV1 {
+    readonly schemaVersion: 1;
+    readonly policyId: string;
+    readonly policyRevision: number;
+    readonly observers: readonly MeshAdaptiveOverlayObserverV1[];
+    readonly independentGroupThreshold: number;
+    readonly maximumSignalLifetimeMs: number;
+    readonly maximumExcludedNeighbors: number;
+    readonly validUntilLogicalMs: number;
+    readonly policyDigest: MeshAdaptiveOverlayDigestV1;
+}
+/** A proposal is a request for a local deterministic view refresh, not authority to mutate topology. */
+export interface MeshAdaptiveOverlayProposalV1 {
+    readonly schemaVersion: 1;
+    readonly proposalId: string;
+    readonly binding: MeshAdaptiveOverlayBindingV1;
+    readonly policy: MeshAdaptiveOverlayPolicyV1;
+    readonly excludedNeighborIndexes: readonly number[];
+    readonly signalDigests: readonly MeshAdaptiveOverlayDigestV1[];
+    readonly proposedAtLogicalMs: number;
+    readonly expiresAtLogicalMs: number;
+    readonly proposalDigest: MeshAdaptiveOverlayDigestV1;
+}
+export interface MeshAdaptiveOverlayCertificateV1 {
+    readonly schemaVersion: 1;
+    readonly certificateId: string;
+    readonly proposalId: string;
+    readonly proposalDigest: MeshAdaptiveOverlayDigestV1;
+    readonly binding: MeshAdaptiveOverlayBindingV1;
+    readonly policy: MeshAdaptiveOverlayPolicyV1;
+    readonly policyDigest: MeshAdaptiveOverlayDigestV1;
+    /** Same-index tuples: signal digest, authenticating peer, independence group. */
+    readonly signalDigests: readonly MeshAdaptiveOverlayDigestV1[];
+    readonly observerPeerIds: readonly string[];
+    readonly observerGroupIds: readonly string[];
+    readonly issuedAtLogicalMs: number;
+    readonly expiresAtLogicalMs: number;
+    readonly certificateDigest: MeshAdaptiveOverlayDigestV1;
+}
+export interface MeshAdaptiveOverlayAppliedViewV1 {
+    readonly schemaVersion: 1;
+    readonly certificateDigest: MeshAdaptiveOverlayDigestV1;
+    readonly binding: MeshAdaptiveOverlayBindingV1;
+    readonly resultingViewDigest: MeshAdaptiveOverlayDigestV1;
+    readonly resultingRevision: number;
+    readonly appliedAtLogicalMs: number;
+    readonly applicationDigest: MeshAdaptiveOverlayDigestV1;
+}
+export interface MeshAdaptiveOverlayStateV1 {
+    readonly schemaVersion: 1;
+    readonly revision: number;
+    readonly policyDigest: MeshAdaptiveOverlayDigestV1;
+    readonly currentBinding: MeshAdaptiveOverlayBindingV1;
+    readonly applied: MeshAdaptiveOverlayAppliedViewV1 | null;
+    readonly signals: readonly MeshAdaptiveOverlaySignalV1[];
+    readonly proposals: readonly MeshAdaptiveOverlayProposalV1[];
+    readonly certificates: readonly MeshAdaptiveOverlayCertificateV1[];
+    readonly conflicts: readonly MeshAdaptiveOverlayDigestV1[];
+    readonly lastLogicalTimeMs: number;
+    readonly stateDigest: MeshAdaptiveOverlayDigestV1;
+}
+export interface MeshAdaptiveOverlayStoreV1 {
+    load(overlayId: string): Promise<MeshAdaptiveOverlayStateV1 | undefined>;
+    compareAndSwap(input: {
+        readonly overlayId: string;
+        readonly expectedRevision: number | null;
+        readonly expectedStateDigest: MeshAdaptiveOverlayDigestV1 | null;
+        readonly next: MeshAdaptiveOverlayStateV1;
+    }): Promise<boolean>;
+}
+export interface MeshAdaptiveOverlaySignalVerifierV1 {
+    readonly verifierId: string;
+    verify(signal: MeshAdaptiveOverlaySignalV1): boolean | Promise<boolean>;
+}
+/** Authenticates a remotely issued certificate and its exact proposal. */
+export interface MeshAdaptiveOverlayCertificateVerifierV1 {
+    readonly verifierId: string;
+    verify(input: {
+        readonly certificate: MeshAdaptiveOverlayCertificateV1;
+        readonly proposal: MeshAdaptiveOverlayProposalV1;
+    }): boolean | Promise<boolean>;
+}
+/** Rollback-resistant head kept outside the replaceable state snapshot. */
+export interface MeshAdaptiveOverlayMonotonicAnchorV1 {
+    readAnchor(overlayId: string): Promise<{
+        readonly revision: number;
+        readonly bindingRevision: number;
+        readonly lastLogicalTimeMs: number;
+        readonly stateDigest: MeshAdaptiveOverlayDigestV1;
+    } | undefined>;
+}
+export interface MeshAdaptiveOverlayRuntimeOptionsV1 {
+    /** Locally installed authority; remote proposals cannot replace it. */
+    readonly policy: MeshAdaptiveOverlayPolicyV1;
+    readonly store: MeshAdaptiveOverlayStoreV1;
+    readonly verifier: MeshAdaptiveOverlaySignalVerifierV1;
+    readonly certificateVerifier: MeshAdaptiveOverlayCertificateVerifierV1;
+    readonly monotonicAnchor?: MeshAdaptiveOverlayMonotonicAnchorV1;
+    readonly maximumSignals?: number;
+    readonly maximumProposals?: number;
+    readonly maximumCertificates?: number;
+}
+export interface MeshAdaptiveOverlayResultV1 {
+    readonly decision: MeshAdaptiveOverlayDecisionV1;
+    readonly reasonCode: string;
+    readonly state: MeshAdaptiveOverlayStateV1;
+    readonly certificate?: MeshAdaptiveOverlayCertificateV1;
+    readonly applied?: MeshAdaptiveOverlayAppliedViewV1;
+}
+//# sourceMappingURL=adaptive-overlay-contracts.d.ts.map

package/dist/adaptive-overlay-contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adaptive-overlay-contracts.d.ts","sourceRoot":"","sources":["../src/adaptive-overlay-contracts.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,eAAO,MAAM,uCAAuC,EAAG,CAAU,CAAC;AAElE,MAAM,MAAM,2BAA2B,GAAG,UAAU,MAAM,EAAE,CAAC;AAC7D,MAAM,MAAM,6BAA6B,GACrC,UAAU,GACV,WAAW,GACX,SAAS,GACT,WAAW,GACX,OAAO,GACP,UAAU,GACV,UAAU,CAAC;AAEf,8EAA8E;AAC9E,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,2BAA2B,CAAC;IACvD,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAC;CACrD;AAED,iGAAiG;AACjG,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,8DAA8D;IAC9D,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAC;IACpD,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,UAAU,GAAG,kBAAkB,CAAC;IAC/D,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE;QACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,QAAQ,CAAC,YAAY,EAAE,2BAA2B,CAAC;CACpD;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,yEAAyE;AACzE,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAC7D,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,2BAA2B,CAAC;CACpD;AAED,wGAAwG;AACxG,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;IAC/C,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,uBAAuB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpD,QAAQ,CAAC,aAAa,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC/D,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,2BAA2B,CAAC;CACtD;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,2BAA2B,CAAC;IACrD,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;IAC/C,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,2BAA2B,CAAC;IACnD,iFAAiF;IACjF,QAAQ,CAAC,aAAa,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC/D,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;CACzD;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;IAC/C,QAAQ,CAAC,mBAAmB,EAAE,2BAA2B,CAAC;IAC1D,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;CACzD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,2BAA2B,CAAC;IACnD,QAAQ,CAAC,cAAc,EAAE,4BAA4B,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,gCAAgC,GAAG,IAAI,CAAC;IAC1D,QAAQ,CAAC,OAAO,EAAE,SAAS,2BAA2B,EAAE,CAAC;IACzD,QAAQ,CAAC,SAAS,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAC7D,QAAQ,CAAC,YAAY,EAAE,SAAS,gCAAgC,EAAE,CAAC;IACnE,QAAQ,CAAC,SAAS,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC3D,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,2BAA2B,CAAC;CACnD;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IACzE,cAAc,CAAC,KAAK,EAAE;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;QACzC,QAAQ,CAAC,mBAAmB,EAAE,2BAA2B,GAAG,IAAI,CAAC;QACjE,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;KAC3C,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,MAAM,CAAC,MAAM,EAAE,2BAA2B,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzE;AAED,0EAA0E;AAC1E,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,MAAM,CAAC,KAAK,EAAE;QACZ,QAAQ,CAAC,WAAW,EAAE,gCAAgC,CAAC;QACvD,QAAQ,CAAC,QAAQ,EAAE,6BAA6B,CAAC;KAClD,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAChC;AAED,2EAA2E;AAC3E,MAAM,WAAW,oCAAoC;IACnD,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAClC;QACE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,WAAW,EAAE,2BAA2B,CAAC;KACnD,GACD,SAAS,CACZ,CAAC;CACH;AAED,MAAM,WAAW,mCAAmC;IAClD,uEAAuE;IACvE,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,mCAAmC,CAAC;IACvD,QAAQ,CAAC,mBAAmB,EAAE,wCAAwC,CAAC;IACvE,QAAQ,CAAC,eAAe,CAAC,EAAE,oCAAoC,CAAC;IAChE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,6BAA6B,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,gCAAgC,CAAC;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,gCAAgC,CAAC;CACrD"}

package/dist/adaptive-overlay-contracts.js

@@ -0,0 +1,3 @@
+/** Provider-neutral, content-free governance contracts for local sparse-overlay adaptation. */
+export const MESH_ADAPTIVE_OVERLAY_SCHEMA_VERSION_V1 = 1;
+//# sourceMappingURL=adaptive-overlay-contracts.js.map

package/dist/adaptive-overlay-contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adaptive-overlay-contracts.js","sourceRoot":"","sources":["../src/adaptive-overlay-contracts.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAU,CAAC"}

package/dist/adaptive-overlay-runtime.d.ts

@@ -0,0 +1,67 @@
+import type { MeshAdaptiveOverlayBindingV1, MeshAdaptiveOverlayCertificateV1, MeshAdaptiveOverlayProposalV1, MeshAdaptiveOverlayResultV1, MeshAdaptiveOverlayRuntimeOptionsV1, MeshAdaptiveOverlaySignalV1, MeshAdaptiveOverlayStateV1, MeshAdaptiveOverlayStoreV1, MeshAdaptiveOverlayMonotonicAnchorV1 } from "./adaptive-overlay-contracts.js";
+import type { MeshSparseOverlayProfileV2, MeshSparsePeerViewV2 } from "./sparse-overlay-contracts.js";
+/** CAS-backed governance for independently witnessed local sparse-view refreshes. */
+export declare class MeshAdaptiveOverlayRuntimeV1 {
+    private readonly options;
+    private readonly maximumSignals;
+    private readonly maximumProposals;
+    private readonly maximumCertificates;
+    private readonly anchor;
+    private readonly policy;
+    constructor(options: MeshAdaptiveOverlayRuntimeOptionsV1);
+    initialize(input: {
+        readonly binding: MeshAdaptiveOverlayBindingV1;
+        readonly logicalTimeMs: number;
+    }): Promise<MeshAdaptiveOverlayStateV1>;
+    /** Authentication makes a signal admissible; only a certificate can authorize an adaptation. */
+    observe(input: {
+        readonly signal: MeshAdaptiveOverlaySignalV1;
+        readonly expectedRevision: number;
+        readonly logicalTimeMs: number;
+    }): Promise<MeshAdaptiveOverlayResultV1>;
+    certify(input: {
+        readonly proposal: MeshAdaptiveOverlayProposalV1;
+        readonly expectedRevision: number;
+        readonly logicalTimeMs: number;
+    }): Promise<MeshAdaptiveOverlayResultV1>;
+    /** Applies a current certificate or returns the exact retained application on replay. */
+    apply(input: {
+        readonly certificate: MeshAdaptiveOverlayCertificateV1;
+        readonly profile: MeshSparseOverlayProfileV2;
+        readonly view: MeshSparsePeerViewV2;
+        readonly expectedRevision: number;
+        readonly logicalTimeMs: number;
+    }): Promise<MeshAdaptiveOverlayResultV1>;
+    /** Reconciliation accepts an equal certificate idempotently, detects equivocation, and never regresses a view. */
+    reconcile(input: {
+        readonly certificate: MeshAdaptiveOverlayCertificateV1;
+        readonly proposal: MeshAdaptiveOverlayProposalV1;
+        readonly expectedRevision: number;
+        readonly logicalTimeMs: number;
+    }): Promise<MeshAdaptiveOverlayResultV1>;
+    private loadState;
+    private requireState;
+    private assertCurrentState;
+    private cas;
+    private conflict;
+}
+/** Minimal local store for composition tests; production adapters must persist compare-and-swap atomically. */
+export declare class InMemoryMeshAdaptiveOverlayStoreV1 implements MeshAdaptiveOverlayStoreV1, MeshAdaptiveOverlayMonotonicAnchorV1 {
+    private readonly values;
+    private readonly anchors;
+    load(overlayId: string): Promise<MeshAdaptiveOverlayStateV1 | undefined>;
+    readAnchor(overlayId: string): Promise<{
+        readonly revision: number;
+        readonly bindingRevision: number;
+        readonly lastLogicalTimeMs: number;
+        readonly stateDigest: MeshAdaptiveOverlayStateV1["stateDigest"];
+    } | undefined>;
+    compareAndSwap(input: {
+        readonly overlayId: string;
+        readonly expectedRevision: number | null;
+        readonly expectedStateDigest: MeshAdaptiveOverlayStateV1["stateDigest"] | null;
+        readonly next: MeshAdaptiveOverlayStateV1;
+    }): Promise<boolean>;
+}
+export declare function meshAdaptiveOverlayProfileForBindingV1(binding: MeshAdaptiveOverlayBindingV1): MeshSparseOverlayProfileV2;
+//# sourceMappingURL=adaptive-overlay-runtime.d.ts.map

package/dist/adaptive-overlay-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adaptive-overlay-runtime.d.ts","sourceRoot":"","sources":["../src/adaptive-overlay-runtime.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,4BAA4B,EAC5B,gCAAgC,EAEhC,6BAA6B,EAC7B,2BAA2B,EAC3B,mCAAmC,EACnC,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,EAC1B,oCAAoC,EACrC,MAAM,iCAAiC,CAAC;AAMzC,OAAO,KAAK,EACV,0BAA0B,EAC1B,oBAAoB,EACrB,MAAM,+BAA+B,CAAC;AAMvC,qFAAqF;AACrF,qBAAa,4BAA4B;IAO3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IANpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAC9D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;gBAExB,OAAO,EAAE,mCAAmC;IA6BnE,UAAU,CAAC,KAAK,EAAE;QACtB,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;QAC/C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAsCvC,gGAAgG;IAC1F,OAAO,CAAC,KAAK,EAAE;QACnB,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;QAC7C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,GAAG,OAAO,CAAC,2BAA2B,CAAC;IA+DlC,OAAO,CAAC,KAAK,EAAE;QACnB,QAAQ,CAAC,QAAQ,EAAE,6BAA6B,CAAC;QACjD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,GAAG,OAAO,CAAC,2BAA2B,CAAC;IA+HxC,yFAAyF;IACnF,KAAK,CAAC,KAAK,EAAE;QACjB,QAAQ,CAAC,WAAW,EAAE,gCAAgC,CAAC;QACvD,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;QAC7C,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;QACpC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,GAAG,OAAO,CAAC,2BAA2B,CAAC;IA6FxC,kHAAkH;IAC5G,SAAS,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,WAAW,EAAE,gCAAgC,CAAC;QACvD,QAAQ,CAAC,QAAQ,EAAE,6BAA6B,CAAC;QACjD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,GAAG,OAAO,CAAC,2BAA2B,CAAC;YA8F1B,SAAS;YAKT,YAAY;YAKZ,kBAAkB;YAsBlB,GAAG;YAWH,QAAQ;CAgBvB;AAED,+GAA+G;AAC/G,qBAAa,kCACX,YAAW,0BAA0B,EAAE,oCAAoC;IAE3E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiD;IACxE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAQpB;IACE,IAAI,CAAC,SAAS,EAAE,MAAM;IAGtB,UAAU,CAAC,SAAS,EAAE,MAAM;2BATX,MAAM;kCACC,MAAM;oCACJ,MAAM;8BACZ,0BAA0B,CAAC,aAAa,CAAC;;IAS7D,cAAc,CAAC,KAAK,EAAE;QAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;QACzC,QAAQ,CAAC,mBAAmB,EAC1B,0BAA0B,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;QACnD,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;KAC3C;CAgBF;AAED,wBAAgB,sCAAsC,CACpD,OAAO,EAAE,4BAA4B,GACpC,0BAA0B,CAM5B"}