@allocator-one/rcl 4.4.19

package/dist/dispatch/verification-execution.js

@@ -0,0 +1,252 @@
+import { randomUUID } from 'node:crypto';
+import { performance } from 'node:perf_hooks';
+import { replayGating } from '../consensus/gating.js';
+import { withOwnedNativeOperation } from '../converge/target-ownership.js';
+import { stableStringify } from '../report/run-header.js';
+import { parseVerificationAnswer, snapshotVerificationEvent } from './checkpoint-verification.js';
+/**
+ * Execute one already-authorized verifier phase. This is a request engine, not
+ * source authentication or report admission. The caller regenerates the plan,
+ * accounts for non-checkpoint calls and holds original ownership through late
+ * audit flush/drain. Unknown paid intents are never retried. SDK retries are off.
+ */
+export function executeVerification(input) {
+    const options = { ...input }, plan = structuredClone(input.regeneratedPlan);
+    const event = snapshotVerificationEvent({ type: 'plan', plan: input.retainedPlan });
+    if (event.type !== 'plan' || stableStringify(plan) !== event.plan.gatingPlanBytes) {
+        return Promise.reject(new Error('verification_execution_plan_mismatch'));
+    }
+    const retained = event.plan;
+    const executionExpiresAtMs = options.executionExpiresAtMs ?? retained.expiresAtMs;
+    if (!Number.isSafeInteger(executionExpiresAtMs) || executionExpiresAtMs < 0 || executionExpiresAtMs > retained.expiresAtMs) {
+        return Promise.reject(new Error('verification_execution_invalid_runtime_deadline'));
+    }
+    if (!Number.isSafeInteger(options.otherPhysicalCalls) || options.otherPhysicalCalls < 0 || options.otherPhysicalCalls > 500 ||
+        typeof options.beforeLaunch !== 'function' || typeof options.askFactory !== 'function' ||
+        typeof options.auditLateAnswer !== 'function' || typeof options.registerLateAudit !== 'function' ||
+        typeof options.onLateAuditError !== 'function') {
+        return Promise.reject(new Error('verification_execution_invalid_options'));
+    }
+    return withOwnedNativeOperation(options.ownership, options.commonDir, options.journal.getPlan().target, async (ownership) => {
+        const wall = options.nowMs ?? Date.now, monotonic = options.monotonicNow ?? performance.now.bind(performance);
+        const wallStart = wall(), monoStart = monotonic();
+        if (!Number.isSafeInteger(wallStart) || wallStart < 0 || !Number.isFinite(monoStart))
+            throw new Error('verification_execution_invalid_clock');
+        let lastTime = Math.max(retained.startedAtMs, wallStart), lastMono = monoStart;
+        const now = () => {
+            const currentWall = wall(), currentMono = monotonic();
+            if (!Number.isSafeInteger(currentWall) || currentWall < 0 || !Number.isFinite(currentMono) || currentMono < lastMono) {
+                throw new Error('verification_execution_invalid_clock');
+            }
+            lastMono = currentMono;
+            lastTime = Math.max(lastTime, currentWall, wallStart + Math.floor(currentMono - monoStart));
+            if (!Number.isSafeInteger(lastTime))
+                throw new Error('verification_execution_invalid_clock');
+            return lastTime;
+        };
+        // Existing phase bytes, including caps and absolute expiry, must match.
+        // This also rejects new phase work after immutable terminal report bytes.
+        await options.journal.beginVerification(retained, ownership);
+        let state = (await options.journal.readVerification());
+        const main = await options.journal.read();
+        const reviewerCalls = main.records.filter(row => row.type === 'intent').length;
+        let newPhysicalCalls = 0;
+        const replay = (saved) => replayGating(plan, saved.outcomes.map(row => ({ batchIndex: row.batchIndex, kind: 'answer', answer: parseVerificationAnswer(row.answerBytes, retained) })), saved.terminal.finishedAtMs - retained.startedAtMs);
+        const result = async (saved, interpreted) => {
+            const proof = await options.journal.exportVerificationProof();
+            if (interpreted?.verification)
+                interpreted.verification.durationMs = saved.terminal.finishedAtMs - retained.startedAtMs;
+            return saved.terminal.status === 'complete'
+                ? { ok: true, ...(interpreted ?? replay(saved)), proof, newPhysicalCalls }
+                : { ok: false, findings: structuredClone(plan.findings), failure: new Error(saved.terminal.reason), proof, newPhysicalCalls };
+        };
+        if (state.terminal)
+            return result(state);
+        const controller = new AbortController();
+        let failure;
+        const fail = (reason) => { failure ??= reason; controller.abort(); };
+        const remaining = () => executionExpiresAtMs - now();
+        const auditErrors = [];
+        const cancel = () => fail('verification_execution_cancelled');
+        options.signal?.addEventListener('abort', cancel, { once: true });
+        if (options.signal?.aborted)
+            cancel();
+        let passTimer;
+        try {
+            if (state.uncertain.length)
+                fail('verification_execution_uncertain_intent');
+            if (retained.maxPhysicalCalls < plan.batches.length)
+                fail('verification_execution_call_cap');
+            if (reviewerCalls + options.otherPhysicalCalls + retained.maxPhysicalCalls > 500)
+                fail('verification_execution_total_call_cap');
+            if (remaining() <= 0)
+                fail('verification_execution_deadline');
+            if (!failure)
+                passTimer = setTimeout(() => fail('verification_execution_deadline'), remaining());
+            const todo = plan.batches.map((_, index) => index).filter(index => !state.intents.some(intent => {
+                if (intent.batchIndex !== index)
+                    return false;
+                return !state.notDispatched.some(outcome => outcome.attemptId === intent.attemptId);
+            }));
+            let ask;
+            if (!failure && todo.length) {
+                await options.beforeLaunch();
+                if (remaining() <= 0)
+                    fail('verification_execution_deadline');
+                if (!failure) {
+                    try {
+                        ask = options.askFactory();
+                    }
+                    catch {
+                        fail('verification_execution_adapter_unavailable');
+                    }
+                }
+            }
+            async function runBatch(batchIndex) {
+                if (failure)
+                    return;
+                await options.beforeLaunch();
+                if (failure)
+                    return;
+                if (remaining() <= 0) {
+                    fail('verification_execution_deadline');
+                    return;
+                }
+                const intent = { batchIndex, attemptId: `verifier-${randomUUID()}`, startedAtMs: now() };
+                let observed;
+                const nonBilled = (reason) => ({ batchIndex, attemptId: intent.attemptId,
+                    finishedAtMs: now(), answerBytes: JSON.stringify({ model: retained.model,
+                        provider: retained.provider, text: '', durationMs: Math.max(0, now() - intent.startedAtMs),
+                        status: 'error', error: reason }) });
+                const claimed = await options.journal.recordVerificationIntent(intent, ownership, () => {
+                    if (remaining() <= 0) {
+                        fail('verification_execution_deadline');
+                        return nonBilled('Verifier deadline expired before provider dispatch.');
+                    }
+                    const batch = plan.batches[batchIndex];
+                    const timeoutMs = Math.max(1, Math.floor(Math.min(retained.verificationTimeoutMs, remaining())));
+                    const call = new AbortController();
+                    let settleContinuation;
+                    const retainedContinuation = new Promise(resolve => { settleContinuation = resolve; });
+                    try {
+                        options.registerLateAudit(retainedContinuation, batchIndex);
+                    }
+                    catch {
+                        fail('verification_execution_late_audit_unavailable');
+                        settleContinuation();
+                        return nonBilled('Verifier late-audit owner was unavailable before provider dispatch.');
+                    }
+                    let resolveObserved, settled = false;
+                    observed = new Promise(resolve => { resolveObserved = resolve; });
+                    const finish = (row) => {
+                        if (settled)
+                            return false;
+                        settled = true;
+                        clearTimeout(timer);
+                        controller.signal.removeEventListener('abort', onAbort);
+                        resolveObserved(row);
+                        return true;
+                    };
+                    const onAbort = () => { call.abort(); finish(); };
+                    const timer = setTimeout(() => { fail('verification_execution_request_timeout'); }, timeoutMs);
+                    controller.signal.addEventListener('abort', onAbort, { once: true });
+                    if (controller.signal.aborted) {
+                        onAbort();
+                        settleContinuation();
+                        return nonBilled('Verifier execution was canceled before provider dispatch.');
+                    }
+                    let request;
+                    newPhysicalCalls++;
+                    try {
+                        request = ask(plan.model, batch.systemPrompt, batch.userPrompt, { timeoutMs, maxRetries: 0, signal: call.signal,
+                            ...(plan.verificationReasoningEffort ? { reasoningEffort: plan.verificationReasoningEffort } : {}) });
+                    }
+                    catch {
+                        fail('verification_execution_request_failed');
+                        finish();
+                        settleContinuation();
+                        return;
+                    }
+                    void request.then(async (answer) => {
+                        // Snapshot the adapter's actual response, never a manufactured timeout.
+                        const answerBytes = JSON.stringify(answer);
+                        parseVerificationAnswer(answerBytes, retained);
+                        const row = { batchIndex, attemptId: intent.attemptId, finishedAtMs: now(), answerBytes };
+                        if (!finish(row))
+                            await options.auditLateAnswer(row);
+                    }).catch(error => {
+                        if (settled) {
+                            // No answer exists to retain on a rejected request. A late invalid
+                            // response or audit failure remains visible through the error sink.
+                            try {
+                                options.onLateAuditError(error, batchIndex);
+                            }
+                            catch (sinkError) {
+                                auditErrors.push(sinkError);
+                            }
+                        }
+                        else {
+                            fail('verification_execution_request_failed');
+                            finish();
+                        }
+                    }).finally(settleContinuation);
+                    return;
+                });
+                if (!claimed) {
+                    fail('verification_execution_uncertain_intent');
+                    return;
+                }
+                if (!observed)
+                    return;
+                const outcome = await observed;
+                if (outcome) {
+                    // Keep exact schema fields; the intent timestamp is not part of a result.
+                    const { batchIndex, attemptId, finishedAtMs, answerBytes } = outcome;
+                    await options.journal.recordVerificationResult({ batchIndex, attemptId, finishedAtMs, answerBytes }, ownership);
+                }
+                if (remaining() <= 0)
+                    fail('verification_execution_deadline');
+            }
+            let next = 0;
+            const workers = await Promise.allSettled(Array.from({ length: Math.min(3, todo.length) }, async () => {
+                try {
+                    while (!failure && next < todo.length)
+                        await runBatch(todo[next++]);
+                }
+                catch (error) {
+                    fail('verification_execution_persistence_failed');
+                    throw error;
+                }
+            }));
+            const errors = workers.filter((row) => row.status === 'rejected').map(row => row.reason);
+            if (errors.length)
+                throw new AggregateError(errors, 'verification_execution_failed');
+            state = (await options.journal.readVerification());
+            let interpreted;
+            if (!failure) {
+                // Complete interpretation before sealing. First completion returns this
+                // exact result; a later resume replays the identical retained transcript.
+                interpreted = replayGating(plan, state.outcomes
+                    .map(row => ({ batchIndex: row.batchIndex, kind: 'answer', answer: parseVerificationAnswer(row.answerBytes, retained) })), now() - retained.startedAtMs);
+                if (remaining() <= 0)
+                    fail('verification_execution_deadline');
+            }
+            const finishedAtMs = now();
+            if (finishedAtMs >= executionExpiresAtMs)
+                fail('verification_execution_deadline');
+            await options.journal.finalizeVerification(failure
+                ? { status: 'failed', finishedAtMs, reason: failure }
+                : { status: 'complete', finishedAtMs }, ownership);
+            if (auditErrors.length)
+                throw new AggregateError(auditErrors, 'verification_execution_late_audit_failed');
+            return result((await options.journal.readVerification()), interpreted);
+        }
+        finally {
+            if (passTimer !== undefined)
+                clearTimeout(passTimer);
+            options.signal?.removeEventListener('abort', cancel);
+            controller.abort();
+        }
+    });
+}
+//# sourceMappingURL=verification-execution.js.map

package/dist/dispatch/verification-execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-execution.js","sourceRoot":"","sources":["../../src/dispatch/verification-execution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAA+B,MAAM,wBAAwB,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAA8B,MAAM,iCAAiC,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAA+E,MAAM,8BAA8B,CAAC;AA+B/K;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAmC;IACrE,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,EAAE,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,yBAAyB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;IACpF,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAClF,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC;IAC5B,MAAM,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,IAAI,QAAQ,CAAC,WAAW,CAAC;IAClF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,oBAAoB,CAAC,IAAI,oBAAoB,GAAG,CAAC,IAAI,oBAAoB,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC3H,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,kBAAkB,GAAG,CAAC,IAAI,OAAO,CAAC,kBAAkB,GAAG,GAAG;QACzH,OAAO,OAAO,CAAC,YAAY,KAAK,UAAU,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,UAAU;QACtF,OAAO,OAAO,CAAC,eAAe,KAAK,UAAU,IAAI,OAAO,OAAO,CAAC,iBAAiB,KAAK,UAAU;QAChG,OAAO,OAAO,CAAC,gBAAgB,KAAK,UAAU,EAAE,CAAC;QACjD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,wBAAwB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,KAAK,EAAC,SAAS,EAAC,EAAE;QACxH,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,YAAY,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9G,MAAM,SAAS,GAAG,IAAI,EAAE,EAAE,SAAS,GAAG,SAAS,EAAE,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC9I,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;QAC/E,MAAM,GAAG,GAAG,GAAW,EAAE;YACvB,MAAM,WAAW,GAAG,IAAI,EAAE,EAAE,WAAW,GAAG,SAAS,EAAE,CAAC;YACtD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,QAAQ,EAAE,CAAC;gBACrH,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YACD,QAAQ,GAAG,WAAW,CAAC;YACvB,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC;YAC5F,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC7F,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC;QACF,wEAAwE;QACxE,0EAA0E;QAC1E,MAAM,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7D,IAAI,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAE,CAAC;QACxD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;QAC/E,IAAI,gBAAgB,GAAG,CAAC,CAAC;QACzB,MAAM,MAAM,GAAG,CAAC,KAAwB,EAAmC,EAAE,CAAC,YAAY,CAAC,IAAI,EAC7F,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,uBAAuB,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,EACvI,KAAK,CAAC,QAAS,CAAC,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,KAAK,EAAE,KAAwB,EAAE,WAA6C,EAAwC,EAAE;YACrI,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC;YAC9D,IAAI,WAAW,EAAE,YAAY;gBAAE,WAAW,CAAC,YAAY,CAAC,UAAU,GAAG,KAAK,CAAC,QAAS,CAAC,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC;YACzH,OAAO,KAAK,CAAC,QAAS,CAAC,MAAM,KAAK,UAAU;gBAC1C,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE;gBAC1E,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,QAAS,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QACnI,CAAC,CAAC;QACF,IAAI,KAAK,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QAEzC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,OAA2B,CAAC;QAChC,MAAM,IAAI,GAAG,CAAC,MAAc,EAAQ,EAAE,GAAG,OAAO,KAAK,MAAM,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QACnF,MAAM,SAAS,GAAG,GAAW,EAAE,CAAC,oBAAoB,GAAG,GAAG,EAAE,CAAC;QAC7D,MAAM,WAAW,GAAc,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACpE,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,EAAE,CAAC;QACtC,IAAI,SAAoD,CAAC;QACzD,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM;gBAAE,IAAI,CAAC,yCAAyC,CAAC,CAAC;YAC5E,IAAI,QAAQ,CAAC,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,IAAI,CAAC,iCAAiC,CAAC,CAAC;YAC7F,IAAI,aAAa,GAAG,OAAO,CAAC,kBAAkB,GAAG,QAAQ,CAAC,gBAAgB,GAAG,GAAG;gBAAE,IAAI,CAAC,uCAAuC,CAAC,CAAC;YAChI,IAAI,SAAS,EAAE,IAAI,CAAC;gBAAE,IAAI,CAAC,iCAAiC,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO;gBAAE,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,iCAAiC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;YACjG,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC9F,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK;oBAAE,OAAO,KAAK,CAAC;gBAC9C,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;YACtF,CAAC,CAAC,CAAC,CAAC;YACJ,IAAI,GAAsB,CAAC;YAC3B,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC5B,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC7B,IAAI,SAAS,EAAE,IAAI,CAAC;oBAAE,IAAI,CAAC,iCAAiC,CAAC,CAAC;gBAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,IAAI,CAAC;wBAAC,GAAG,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;oBAAC,CAAC;oBACnC,MAAM,CAAC;wBAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;oBAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;YACD,KAAK,UAAU,QAAQ,CAAC,UAAkB;gBACxC,IAAI,OAAO;oBAAE,OAAO;gBACpB,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC7B,IAAI,OAAO;oBAAE,OAAO;gBACpB,IAAI,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC;oBAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBAC1E,MAAM,MAAM,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,CAAC;gBACzF,IAAI,QAA6D,CAAC;gBAClE,MAAM,SAAS,GAAG,CAAC,MAAc,EAAsB,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;oBAClG,YAAY,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK;wBACtE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;wBAC1F,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;gBACzC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE;oBACrF,IAAI,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC;wBACrB,IAAI,CAAC,iCAAiC,CAAC,CAAC;wBACxC,OAAO,SAAS,CAAC,qDAAqD,CAAC,CAAC;oBAC1E,CAAC;oBACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAE,CAAC;oBACxC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,qBAAqB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;oBACjG,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;oBACnC,IAAI,kBAA+B,CAAC;oBACpC,MAAM,oBAAoB,GAAG,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC7F,IAAI,CAAC;wBAAC,OAAO,CAAC,iBAAiB,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;oBAAC,CAAC;oBACpE,MAAM,CAAC;wBACL,IAAI,CAAC,+CAA+C,CAAC,CAAC;wBAAC,kBAAkB,EAAE,CAAC;wBAC5E,OAAO,SAAS,CAAC,qEAAqE,CAAC,CAAC;oBAC1F,CAAC;oBACD,IAAI,eAAoD,EAAE,OAAO,GAAG,KAAK,CAAC;oBAC1E,QAAQ,GAAG,IAAI,OAAO,CAAiC,OAAO,CAAC,EAAE,GAAG,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;oBAClG,MAAM,MAAM,GAAG,CAAC,GAAwB,EAAW,EAAE;wBACnD,IAAI,OAAO;4BAAE,OAAO,KAAK,CAAC;wBAC1B,OAAO,GAAG,IAAI,CAAC;wBAAC,YAAY,CAAC,KAAK,CAAC,CAAC;wBAAC,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;wBAAC,eAAe,CAAC,GAAG,CAAC,CAAC;wBACnH,OAAO,IAAI,CAAC;oBACd,CAAC,CAAC;oBACF,MAAM,OAAO,GAAG,GAAS,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;oBACxD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,wCAAwC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;oBAC/F,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBACrE,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBAC9B,OAAO,EAAE,CAAC;wBAAC,kBAAkB,EAAE,CAAC;wBAChC,OAAO,SAAS,CAAC,2DAA2D,CAAC,CAAC;oBAChF,CAAC;oBACD,IAAI,OAA0B,CAAC;oBAC/B,gBAAgB,EAAE,CAAC;oBACnB,IAAI,CAAC;wBAAC,OAAO,GAAG,GAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;4BAClH,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;oBAAC,CAAC;oBAC5G,MAAM,CAAC;wBAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;wBAAC,MAAM,EAAE,CAAC;wBAAC,kBAAkB,EAAE,CAAC;wBAAC,OAAO;oBAAC,CAAC;oBAChG,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,EAAC,MAAM,EAAC,EAAE;wBAC/B,wEAAwE;wBACxE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;wBAC3C,uBAAuB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;wBAC/C,MAAM,GAAG,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC;wBAC1F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;4BAAE,MAAM,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;oBACvD,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;wBACf,IAAI,OAAO,EAAE,CAAC;4BACZ,mEAAmE;4BACnE,oEAAoE;4BACpE,IAAI,CAAC;gCAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;4BAAC,CAAC;4BAAC,OAAO,SAAS,EAAE,CAAC;gCAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;4BAAC,CAAC;wBACzG,CAAC;6BAAM,CAAC;4BAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;4BAAC,MAAM,EAAE,CAAC;wBAAC,CAAC;oBACrE,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;oBAC/B,OAAO;gBACT,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,EAAE,CAAC;oBAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBAC1E,IAAI,CAAC,QAAQ;oBAAE,OAAO;gBACtB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC;gBAC/B,IAAI,OAAO,EAAE,CAAC;oBACZ,0EAA0E;oBAC1E,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;oBACrE,MAAM,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;gBAClH,CAAC;gBACD,IAAI,SAAS,EAAE,IAAI,CAAC;oBAAE,IAAI,CAAC,iCAAiC,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;gBACnG,IAAI,CAAC;oBAAC,OAAO,CAAC,OAAO,IAAI,IAAI,GAAG,IAAI,CAAC,MAAM;wBAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAE,CAAC,CAAC;gBAAC,CAAC;gBAC7E,OAAO,KAAK,EAAE,CAAC;oBAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;oBAAC,MAAM,KAAK,CAAC;gBAAC,CAAC;YACnF,CAAC,CAAC,CAAC,CAAC;YACJ,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAgC,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAiB,CAAC,CAAC;YAClI,IAAI,MAAM,CAAC,MAAM;gBAAE,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;YACrF,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAE,CAAC;YACpD,IAAI,WAAwD,CAAC;YAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,wEAAwE;gBACxE,0EAA0E;gBAC1E,WAAW,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ;qBAC5C,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,uBAAuB,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAC3J,IAAI,SAAS,EAAE,IAAI,CAAC;oBAAE,IAAI,CAAC,iCAAiC,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC;YAC3B,IAAI,YAAY,IAAI,oBAAoB;gBAAE,IAAI,CAAC,iCAAiC,CAAC,CAAC;YAClF,MAAM,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,OAAO;gBAChD,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE;gBACrD,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,SAAS,CAAC,CAAC;YACrD,IAAI,WAAW,CAAC,MAAM;gBAAE,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,0CAA0C,CAAC,CAAC;YAC1G,OAAO,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAE,EAAE,WAAW,CAAC,CAAC;QAC1E,CAAC;gBAAS,CAAC;YACT,IAAI,SAAS,KAAK,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACrD,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrD,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/dispatch/verification-late-audit.d.ts

@@ -0,0 +1,17 @@
+import { type NativeTargetOwnership } from '../converge/target-ownership.js';
+import type { CheckpointJournal } from './checkpoint.js';
+import { type VerificationResult } from './checkpoint-verification.js';
+export interface VerificationLateAudit {
+    accept(result: VerificationResult): Promise<void>;
+    /** Retain a provider continuation before execution returns; drain waits it under the original ownership. */
+    retain(operation: Promise<void>, batchIndex: number): void;
+    flushAfterFinalization(): Promise<void>;
+    drain(): Promise<void>;
+}
+/** Caller-owned verifier audit lifetime; it never changes the sealed phase or proof. */
+export declare function createVerificationLateAudit(options: {
+    commonDir: string;
+    journal: CheckpointJournal;
+    ownership: NativeTargetOwnership;
+    onError: (error: unknown, batchIndex: number) => void;
+}): VerificationLateAudit;

package/dist/dispatch/verification-late-audit.js

@@ -0,0 +1,117 @@
+import { assertNativeTargetOwnership } from '../converge/target-ownership.js';
+import { parseVerificationAnswer, snapshotVerificationEvent } from './checkpoint-verification.js';
+/** Caller-owned verifier audit lifetime; it never changes the sealed phase or proof. */
+export function createVerificationLateAudit(options) {
+    const { commonDir, journal, ownership, onError } = options;
+    if (typeof onError !== 'function')
+        throw new Error('Late verification audit requires an error sink');
+    const buffered = [], pending = new Set(), continuations = new Set(), errors = [];
+    let active = false;
+    let activation;
+    const captureError = (error, index) => { errors.push(error); try {
+        onError(error, index);
+    }
+    catch (sink) {
+        errors.push(sink);
+    } };
+    const track = (operation, index) => {
+        const completion = operation.then(() => { }, error => { captureError(error, index); });
+        pending.add(completion);
+        void completion.then(() => pending.delete(completion));
+        return operation;
+    };
+    const write = (result) => track(journal.recordLateVerificationResult(result, ownership), result.batchIndex);
+    const validate = async (input) => {
+        const event = snapshotVerificationEvent({ type: 'result', result: input });
+        if (event.type !== 'result')
+            throw new Error('late_verification_audit_invalid_result');
+        const result = event.result, phase = await journal.readVerification();
+        if (!phase)
+            throw new Error('late_verification_audit_missing_phase');
+        parseVerificationAnswer(result.answerBytes, phase.plan);
+        const intent = phase.intents.find(item => item.batchIndex === result.batchIndex && item.attemptId === result.attemptId);
+        if (!intent || result.finishedAtMs < intent.startedAtMs)
+            throw new Error('late_verification_audit_invalid_result');
+        return result;
+    };
+    async function finish(includeContinuations) {
+        while (pending.size || (includeContinuations && continuations.size)) {
+            await Promise.all([...pending, ...(includeContinuations ? continuations : [])]);
+        }
+        const retained = errors.splice(0);
+        if (retained.length === 1)
+            throw retained[0];
+        if (retained.length > 1)
+            throw new AggregateError(retained, 'late_verification_audit_failed');
+        if (buffered.length)
+            throw new Error('late_verification_audit_requires_terminal');
+    }
+    const drain = () => finish(true);
+    async function activate() {
+        await assertNativeTargetOwnership(ownership, commonDir, journal.getPlan().target);
+        const phase = await journal.readVerification();
+        if (!phase?.terminal)
+            throw new Error('late_verification_audit_requires_terminal');
+        if (active) {
+            await finish(false);
+            return;
+        }
+        while (buffered.length > 0) {
+            const result = buffered.shift();
+            try {
+                await write(result);
+            }
+            catch {
+                buffered.unshift(result);
+                break;
+            }
+        }
+        if (buffered.length === 0)
+            active = true;
+        await finish(false);
+    }
+    return Object.freeze({
+        retain(operation, batchIndex) {
+            if (!(operation instanceof Promise) || !Number.isSafeInteger(batchIndex) || batchIndex < 0) {
+                throw new Error('late_verification_audit_invalid_continuation');
+            }
+            const completion = operation.then(() => { }, error => { captureError(error, batchIndex); });
+            continuations.add(completion);
+            void completion.then(() => continuations.delete(completion));
+        },
+        accept(input) {
+            const index = input?.batchIndex;
+            try {
+                if (!Number.isSafeInteger(index) || index < 0)
+                    throw new Error('late_verification_audit_invalid_batch');
+                return track((async () => {
+                    const result = await validate(input);
+                    if (active)
+                        return journal.recordLateVerificationResult(result, ownership);
+                    await assertNativeTargetOwnership(ownership, commonDir, journal.getPlan().target);
+                    if (active)
+                        return journal.recordLateVerificationResult(result, ownership);
+                    buffered.push(result);
+                })(), index);
+            }
+            catch (error) {
+                return track(Promise.reject(error), typeof index === 'number' ? index : -1);
+            }
+        },
+        async flushAfterFinalization() {
+            if (activation)
+                return activation;
+            const operation = activate();
+            activation = operation;
+            try {
+                await operation;
+            }
+            finally {
+                if (activation === operation)
+                    activation = undefined;
+            }
+        },
+        drain,
+    });
+}
+//# sourceMappingURL=verification-late-audit.js.map

package/dist/dispatch/verification-late-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-late-audit.js","sourceRoot":"","sources":["../../src/dispatch/verification-late-audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAA8B,MAAM,iCAAiC,CAAC;AAE1G,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAA2B,MAAM,8BAA8B,CAAC;AAU3H,wFAAwF;AACxF,MAAM,UAAU,2BAA2B,CAAC,OAK3C;IACC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC3D,IAAI,OAAO,OAAO,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACrG,MAAM,QAAQ,GAAyB,EAAE,EAAE,OAAO,GAAG,IAAI,GAAG,EAAiB,EAAE,aAAa,GAAG,IAAI,GAAG,EAAiB,EAAE,MAAM,GAAc,EAAE,CAAC;IAChJ,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,UAAqC,CAAC;IAC1C,MAAM,YAAY,GAAG,CAAC,KAAc,EAAE,KAAa,EAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,IAAI,EAAE,CAAC;QAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC;IACzJ,MAAM,KAAK,GAAG,CAAC,SAAwB,EAAE,KAAa,EAAiB,EAAE;QACvE,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE,KAAK,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAAC,KAAK,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAAC,OAAO,SAAS,CAAC;IACpG,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,MAA0B,EAAiB,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,4BAA4B,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/I,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAyB,EAA+B,EAAE;QAChF,MAAM,KAAK,GAAG,yBAAyB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACtE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACrE,uBAAuB,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;QACxH,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACnH,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,KAAK,UAAU,MAAM,CAAC,oBAA6B;QACjD,OAAO,OAAO,CAAC,IAAI,IAAI,CAAC,oBAAoB,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACpE,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,gCAAgC,CAAC,CAAC;QAC9F,IAAI,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,KAAK,GAAG,GAAkB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChD,KAAK,UAAU,QAAQ;QACrB,MAAM,2BAA2B,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QAClF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,EAAE,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACnF,IAAI,MAAM,EAAE,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC5C,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAG,CAAC;YACjC,IAAI,CAAC;gBAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;YAAC,CAAC;YAC5B,MAAM,CAAC;gBAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;QAC5C,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,GAAG,IAAI,CAAC;QACzC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,SAAwB,EAAE,UAAkB;YACjD,IAAI,CAAC,CAAC,SAAS,YAAY,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;gBAC3F,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAClE,CAAC;YACD,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE,KAAK,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3F,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,CAAC,KAAyB;YAC9B,MAAM,KAAK,GAAG,KAAK,EAAE,UAAU,CAAC;YAChC,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBACxG,OAAO,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE;oBACvB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;oBACrC,IAAI,MAAM;wBAAE,OAAO,OAAO,CAAC,4BAA4B,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;oBAC3E,MAAM,2BAA2B,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;oBAClF,IAAI,MAAM;wBAAE,OAAO,OAAO,CAAC,4BAA4B,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;oBAC3E,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACxB,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACf,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;QAClG,CAAC;QACD,KAAK,CAAC,sBAAsB;YAC1B,IAAI,UAAU;gBAAE,OAAO,UAAU,CAAC;YAClC,MAAM,SAAS,GAAG,QAAQ,EAAE,CAAC;YAC7B,UAAU,GAAG,SAAS,CAAC;YACvB,IAAI,CAAC;gBAAC,MAAM,SAAS,CAAC;YAAC,CAAC;oBAChB,CAAC;gBAAC,IAAI,UAAU,KAAK,SAAS;oBAAE,UAAU,GAAG,SAAS,CAAC;YAAC,CAAC;QACnE,CAAC;QACD,KAAK;KACN,CAAC,CAAC;AACL,CAAC"}

package/dist/evidence/claim-recovery/authenticated-carrier-projection.d.ts

@@ -0,0 +1,30 @@
+import { type AuthenticatedSelectedReceipts } from './authenticated-receipts.js';
+import { type AuthenticatedCarrierInventory } from './carrier-inventory.js';
+import type { AcceptedOccurrenceTransfer, NativePredecessorInventory, OccurrenceCarrierProjection } from './validation/carrier-types.js';
+/** Opaque one-carrier snapshot with authenticated inventory and receipts.
+ * Caller-supplied native predecessors can only add residuals; the snapshot
+ * grants no closure or standing authority. */
+export interface AuthenticatedCarrierProjection {
+    readonly qualification: 'authenticated-single-carrier-projection';
+}
+export interface AuthenticatedCarrierProjectionContent {
+    actorUserId: string;
+    projection: OccurrenceCarrierProjection;
+}
+export declare function authenticatedCarrierProjectionContent(value: AuthenticatedCarrierProjection): AuthenticatedCarrierProjectionContent;
+/**
+ * Projects one carrier from authenticated inventory and receipt tokens.
+ * Native predecessors are caller-supplied diagnostic content and can only add
+ * residuals. This snapshot neither proves closure or standing nor changes a
+ * claim, gate, native state, or delivery outcome.
+ */
+export declare function projectAuthenticatedCarrier(inventoryToken: AuthenticatedCarrierInventory, receiptToken: AuthenticatedSelectedReceipts | undefined, input?: {
+    transfers?: readonly AcceptedOccurrenceTransfer[];
+    nativePredecessors?: readonly NativePredecessorInventory[];
+}): {
+    kind: 'authenticated';
+    value: AuthenticatedCarrierProjection;
+} | {
+    kind: 'conflict';
+    reason: string;
+};

package/dist/evidence/claim-recovery/authenticated-carrier-projection.js

@@ -0,0 +1,100 @@
+import { isDeepStrictEqual } from 'node:util';
+import { createHash } from 'node:crypto';
+import { authenticatedReceiptContent } from './authenticated-receipts.js';
+import { carrierInventoryContent } from './carrier-inventory.js';
+import { projectOccurrenceCarrier } from './validation/carrier-projection.js';
+const accepted = new WeakMap();
+export function authenticatedCarrierProjectionContent(value) {
+    const content = accepted.get(value);
+    if (!content)
+        throw new Error('unverified_authenticated_carrier_projection');
+    return structuredClone(content);
+}
+const exact = (a, b) => isDeepStrictEqual(a, b);
+const receiptKey = (receipt) => `${receipt.run_id}:${receipt.id}`;
+const sequenceKey = (receipt) => `${receipt.run_id}:${receipt.sequence}`;
+const digest = (value) => createHash('sha256').update(value).digest('hex');
+function sourceMatchesSelection(source, selection) {
+    const run = source.storedRun;
+    return exact(source.scope, selection.scope) && run.converge?.target === selection.target &&
+        run.converge?.round === selection.round && run.target?.head_sha === selection.headSha &&
+        digest(source.reportJson) === selection.reportSha256;
+}
+/**
+ * Projects one carrier from authenticated inventory and receipt tokens.
+ * Native predecessors are caller-supplied diagnostic content and can only add
+ * residuals. This snapshot neither proves closure or standing nor changes a
+ * claim, gate, native state, or delivery outcome.
+ */
+export function projectAuthenticatedCarrier(inventoryToken, receiptToken, input = {}) {
+    try {
+        const inventory = carrierInventoryContent(inventoryToken);
+        const reads = receiptToken ? authenticatedReceiptContent(receiptToken) : undefined;
+        if ((reads && inventory.actorUserId !== reads.actorUserId) || inventory.inventory.inventoryStatus !== 'complete')
+            throw new Error('actor_or_inventory_conflict');
+        const byRun = new Map(inventory.runSequences.map(row => [row.runId, row.eventSequence]));
+        if (byRun.size !== inventory.runSequences.length)
+            throw new Error('inventory_sequence_conflict');
+        const selected = new Map((reads?.selections ?? []).map(row => [row.selection.scope.run_id, row]));
+        if (reads && selected.size !== reads.selections.length)
+            throw new Error('receipt_selection_conflict');
+        const receipts = new Map();
+        const sequences = new Map();
+        for (const row of reads?.selections ?? []) {
+            const current = byRun.get(row.selection.scope.run_id);
+            if (current === undefined || row.eventSequence !== current)
+                throw new Error('stale_token_sequence');
+            for (const receipt of row.receipts) {
+                if (receipt.run_id !== row.selection.scope.run_id || receipt.sequence > current)
+                    throw new Error('receipt_sequence_conflict');
+                const key = receiptKey(receipt);
+                const prior = receipts.get(key);
+                if (prior && !exact(prior, receipt))
+                    throw new Error('receipt_content_conflict');
+                const stream = sequenceKey(receipt);
+                const sequencePrior = sequences.get(stream);
+                if (sequencePrior && !exact(sequencePrior, receipt))
+                    throw new Error('receipt_sequence_conflict');
+                receipts.set(key, receipt);
+                sequences.set(stream, receipt);
+            }
+        }
+        const requireReceipt = (receipt) => {
+            if (!exact(receipts.get(receiptKey(receipt)), receipt))
+                throw new Error('receipt_not_authenticated');
+        };
+        const requireSource = (source) => {
+            const read = selected.get(source.scope.run_id);
+            if (!read || !sourceMatchesSelection(source, read.selection))
+                throw new Error('transfer_source_not_authenticated');
+            requireReceipt(source.classification);
+            for (const receipt of source.corrections)
+                requireReceipt(receipt);
+        };
+        for (const source of inventory.inventory.sources) {
+            const read = selected.get(source.selector.scope.run_id);
+            if (read && (!exact(read.selection.scope, source.selector.scope) || read.selection.target !== source.selector.target ||
+                read.selection.round !== source.selector.round || read.selection.headSha !== source.selector.headSha ||
+                read.selection.reportSha256 !== source.selector.reportSha256))
+                throw new Error('source_not_authenticated');
+        }
+        const transfers = [...structuredClone(input.transfers ?? [])];
+        if (transfers.length && !reads)
+            throw new Error('transfer_receipts_required');
+        for (const transfer of transfers) {
+            requireReceipt(transfer.receipt);
+            requireReceipt(transfer.preparation.split.receipt);
+            requireSource(transfer.preparation.split.source);
+            requireSource(transfer.preparation.carrier);
+        }
+        const projection = projectOccurrenceCarrier({ ...inventory.inventory, transfers,
+            nativePredecessors: [...structuredClone(input.nativePredecessors ?? [])] });
+        const value = Object.freeze({ qualification: 'authenticated-single-carrier-projection' });
+        accepted.set(value, structuredClone({ actorUserId: inventory.actorUserId, projection }));
+        return { kind: 'authenticated', value };
+    }
+    catch (error) {
+        return { kind: 'conflict', reason: error instanceof Error ? error.message : 'authenticated_carrier_projection_conflict' };
+    }
+}
+//# sourceMappingURL=authenticated-carrier-projection.js.map

package/dist/evidence/claim-recovery/authenticated-carrier-projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticated-carrier-projection.js","sourceRoot":"","sources":["../../../src/evidence/claim-recovery/authenticated-carrier-projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,2BAA2B,EAAsC,MAAM,6BAA6B,CAAC;AAC9G,OAAO,EAAE,uBAAuB,EAAsC,MAAM,wBAAwB,CAAC;AACrG,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAa9E,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAyE,CAAC;AAEtG,MAAM,UAAU,qCAAqC,CAAC,KAAqC;IACzF,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC7E,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,CAAU,EAAW,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC3E,MAAM,UAAU,GAAG,CAAC,OAA2B,EAAU,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;AAC9F,MAAM,WAAW,GAAG,CAAC,OAA2B,EAAU,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;AACrG,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE3F,SAAS,sBAAsB,CAAC,MAAwB,EAAE,SAGzD;IACC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAkG,CAAC;IACtH,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,CAAC,MAAM;QACtF,GAAG,CAAC,QAAQ,EAAE,KAAK,KAAK,SAAS,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,QAAQ,KAAK,SAAS,CAAC,OAAO;QACrF,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,YAAY,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,cAA6C,EAC7C,YAAuD,EACvD,QAA2H,EAAE;IAE7H,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,2BAA2B,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,SAAS,CAAC,eAAe,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjK,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACzF,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,YAAY,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjG,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAClG,IAAI,KAAK,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,UAAU,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACtG,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,GAAG,EAA8B,CAAC;QACxD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACtD,IAAI,OAAO,KAAK,SAAS,IAAI,GAAG,CAAC,aAAa,KAAK,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACpG,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACnC,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,GAAG,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAC9H,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;gBAAC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACjE,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;gBACjF,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;gBAAC,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACjF,IAAI,aAAa,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAClG,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,MAAM,cAAc,GAAG,CAAC,OAA2B,EAAQ,EAAE;YAC3D,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACvG,CAAC,CAAC;QACF,MAAM,aAAa,GAAG,CAAC,MAAwB,EAAQ,EAAE;YACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACnH,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YACtC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,WAAW;gBAAE,cAAc,CAAC,OAAO,CAAC,CAAC;QACpE,CAAC,CAAC;QACF,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACxD,IAAI,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM;gBAChH,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,KAAK,MAAM,CAAC,QAAQ,CAAC,OAAO;gBACpG,IAAI,CAAC,SAAS,CAAC,YAAY,KAAK,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACjH,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9D,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC9E,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrF,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjD,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,UAAU,GAAG,wBAAwB,CAAC,EAAE,GAAG,SAAS,CAAC,SAAS,EAAE,SAAS;YAC7E,kBAAkB,EAAE,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,yCAAkD,EAAE,CAAC,CAAC;QACnG,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACzF,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,2CAA2C,EAAE,CAAC;IAC5H,CAAC;AACH,CAAC"}

package/dist/evidence/claim-recovery/authenticated-receipts.d.ts

@@ -0,0 +1,46 @@
+import { type StoredEventReceipt } from '../event-receipts.js';
+import { type ClaimRecoverySelection } from './context.js';
+import type { NativeOccurrenceReadRequirement } from './validation/native-occurrences.js';
+import type { HarnessSink } from '../../telemetry/sink.js';
+type SelectedReceiptRequirement = Extract<NativeOccurrenceReadRequirement, {
+    kind: 'selected-event-receipts';
+}>;
+/** Explicit original source and exact server receipts expected for that source. */
+export interface AuthenticatedReceiptSelection {
+    selection: ClaimRecoverySelection;
+    expectedReceipts: readonly StoredEventReceipt[];
+    /** Selected receipt requirements produced by native occurrence preparation. */
+    readRequirements: readonly SelectedReceiptRequirement[];
+}
+/** A live token only the verifier can create. Use the accessor for defensive content. */
+export interface AuthenticatedSelectedReceipts {
+    readonly qualification: 'authenticated-selected-receipts';
+}
+export interface AuthenticatedReceiptContent {
+    actorUserId: string;
+    selections: Array<{
+        selection: ClaimRecoverySelection;
+        eventIds: string[];
+        eventSequence: number;
+        receipts: StoredEventReceipt[];
+    }>;
+}
+/** Reject serialized or caller-forged tokens and return only a defensive snapshot. */
+export declare function authenticatedReceiptContent(verification: AuthenticatedSelectedReceipts): AuthenticatedReceiptContent;
+export type AuthenticatedReceiptVerification = {
+    kind: 'verified';
+    value: AuthenticatedSelectedReceipts;
+} | {
+    kind: 'conflict';
+    reason: string;
+} | {
+    kind: 'unknown';
+    reason: string;
+};
+/**
+ * Authenticate exact selected receipts in one stable, ordinary-authenticated
+ * read window. This is read-only and establishes neither inventory closure nor
+ * disposition standing.
+ */
+export declare function verifyAuthenticatedSelectedReceipts(sink: HarnessSink, expectedActorUserId: string, selections: readonly AuthenticatedReceiptSelection[]): Promise<AuthenticatedReceiptVerification>;
+export {};