@bsv/overlay 2.3.0 → 2.6.1

package/dist/cjs/src/BASMRemote.js

@@ -1,28 +1,169 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BASMRemote = void 0;
+exports.BASMRemote = exports.BASMProtocolError = void 0;
+const BASMValidation_js_1 = require("./BASMValidation.js");
+const RemoteSecurity_js_1 = require("./RemoteSecurity.js");
+var BASMValidation_js_2 = require("./BASMValidation.js");
+Object.defineProperty(exports, "BASMProtocolError", { enumerable: true, get: function () { return BASMValidation_js_2.BASMProtocolError; } });
 class BASMRemote {
-    constructor(endpoint, topic, fetchImpl = fetch.bind(globalThis)) {
-        this.endpoint = endpoint;
+    constructor(endpoint, topic, fetchImpl, limits = {}) {
+        (0, RemoteSecurity_js_1.assertTopic)(topic);
+        const secured = (0, RemoteSecurity_js_1.securePeerFetch)(endpoint, fetchImpl);
+        this.endpoint = secured.endpoint;
         this.topic = topic;
-        this.fetchImpl = fetchImpl;
+        this.fetchImpl = secured.fetchImpl;
+        this.limits = Object.freeze({ ...BASMValidation_js_1.DEFAULT_BASM_REMOTE_LIMITS, ...limits });
+        for (const [key, value] of Object.entries(this.limits)) {
+            if (!Number.isSafeInteger(value) || value <= 0)
+                throw new TypeError(`Invalid BASM limit: ${key}`);
+        }
+        if (this.limits.timeoutMs > 2147483647)
+            throw new TypeError('BASM timeout exceeds timer range');
     }
     async requestTopicAnchorTip() {
-        return await this.post('/requestTopicAnchorTip', {});
+        return (0, BASMValidation_js_1.basmTip)(await this.post('/requestTopicAnchorTip', {}), this.topic);
     }
     async requestTopicAnchorRange(fromHeight, toHeight) {
-        return await this.post('/requestTopicAnchorRange', { fromHeight, toHeight });
+        (0, BASMValidation_js_1.basmInteger)(fromHeight, 'range start');
+        (0, BASMValidation_js_1.basmInteger)(toHeight, 'range end', fromHeight);
+        (0, BASMValidation_js_1.requireBASMLimit)(toHeight - fromHeight < this.limits.maxAnchorRange, 'BASM anchor range exceeds limit');
+        const obj = (0, BASMValidation_js_1.basmObject)(await this.post('/requestTopicAnchorRange', { fromHeight, toHeight }));
+        (0, BASMValidation_js_1.requireBASM)(obj.topic === this.topic && Array.isArray(obj.anchors), 'Invalid BASM anchor range');
+        (0, BASMValidation_js_1.requireBASMLimit)(obj.anchors.length <= toHeight - fromHeight + 1, 'BASM anchor count exceeds requested range');
+        const anchors = obj.anchors.map(value => (0, BASMValidation_js_1.basmAnchor)(value, this.topic));
+        let previousHeight;
+        for (const anchor of anchors) {
+            (0, BASMValidation_js_1.requireBASM)(anchor.blockHeight >= fromHeight && anchor.blockHeight <= toHeight, 'BASM anchor outside requested range');
+            (0, BASMValidation_js_1.requireBASM)(previousHeight === undefined || anchor.blockHeight === previousHeight + 1, 'BASM anchor range has a gap or is unordered');
+            previousHeight = anchor.blockHeight;
+        }
+        return { topic: this.topic, anchors };
     }
     async requestAdmittedList(blockHeight, blockHash) {
-        return await this.post('/requestAdmittedList', { blockHeight, blockHash });
+        (0, BASMValidation_js_1.basmInteger)(blockHeight, 'height');
+        if (blockHash !== undefined)
+            (0, BASMValidation_js_1.basmHash)(blockHash, 'block hash');
+        const obj = (0, BASMValidation_js_1.basmObject)(await this.post('/requestAdmittedList', { blockHeight, blockHash }));
+        this.requireCoordinate(obj, blockHeight);
+        const responseHash = obj.blockHash === undefined ? undefined : (0, BASMValidation_js_1.basmHash)(obj.blockHash, 'block hash');
+        (0, BASMValidation_js_1.requireBASM)(blockHash === undefined || responseHash === undefined || responseHash === blockHash, 'BASM admitted block hash mismatch');
+        return {
+            topic: this.topic,
+            blockHeight,
+            ...(responseHash === undefined ? {} : { blockHash: responseHash }),
+            admitted: (0, BASMValidation_js_1.basmAdmitted)(obj.admitted, this.limits.maxAdmittedTxids)
+        };
     }
     async requestCompoundMerklePath(blockHeight, txids) {
-        return await this.post('/requestCompoundMerklePath', { blockHeight, txids });
+        (0, BASMValidation_js_1.basmInteger)(blockHeight, 'height');
+        const requested = (0, BASMValidation_js_1.basmTxids)(txids, this.limits.maxRequestedTxids);
+        (0, BASMValidation_js_1.requireBASM)(requested.length > 0, 'At least one BASM proof txid is required');
+        const obj = (0, BASMValidation_js_1.basmObject)(await this.post('/requestCompoundMerklePath', { blockHeight, txids: requested }));
+        this.requireCoordinate(obj, blockHeight);
+        const returned = (0, BASMValidation_js_1.basmTxids)(obj.txids, requested.length);
+        const requestedSet = new Set(requested);
+        (0, BASMValidation_js_1.requireBASM)(returned.length === requested.length && returned.every(txid => requestedSet.has(txid)), 'BASM proof txids do not match request');
+        return {
+            topic: this.topic,
+            blockHeight,
+            txids: returned,
+            merklePath: (0, BASMValidation_js_1.basmHex)(obj.merklePath, 'Merkle path', this.limits.maxProofBytes)
+        };
     }
     async requestRawTransactions(txids) {
-        return await this.post('/requestRawTransactions', { txids });
+        const requested = new Set((0, BASMValidation_js_1.basmTxids)(txids, this.limits.maxRequestedTxids));
+        const obj = (0, BASMValidation_js_1.basmObject)(await this.post('/requestRawTransactions', { txids: [...requested] }));
+        (0, BASMValidation_js_1.requireBASM)(Array.isArray(obj.transactions), 'Invalid BASM raw transactions');
+        (0, BASMValidation_js_1.requireBASMLimit)(obj.transactions.length <= requested.size, 'BASM raw transaction count exceeds request');
+        const seen = new Set();
+        const transactions = obj.transactions.map(value => {
+            const record = (0, BASMValidation_js_1.basmObject)(value);
+            const txid = (0, BASMValidation_js_1.basmHash)(record.txid, 'txid');
+            (0, BASMValidation_js_1.requireBASM)(requested.has(txid) && !seen.has(txid), 'Unexpected or duplicate BASM raw transaction');
+            seen.add(txid);
+            const rawTx = (0, BASMValidation_js_1.basmHex)(record.rawTx, 'raw transaction', this.limits.maxRawTransactionBytes);
+            (0, RemoteSecurity_js_1.assertRawTransactionMatches)(txid, rawTx);
+            return {
+                txid,
+                rawTx
+            };
+        });
+        const missing = (0, BASMValidation_js_1.basmTxids)(obj.missing, requested.size);
+        for (const txid of missing) {
+            (0, BASMValidation_js_1.requireBASM)(requested.has(txid) && !seen.has(txid), 'Unexpected or conflicting BASM missing txid');
+            seen.add(txid);
+        }
+        (0, BASMValidation_js_1.requireBASM)(seen.size === requested.size, 'BASM raw response omits requested txids');
+        return { transactions, missing };
+    }
+    requireCoordinate(obj, blockHeight) {
+        (0, BASMValidation_js_1.requireBASM)(obj.topic === this.topic && obj.blockHeight === blockHeight, 'BASM response topic or height mismatch');
+    }
+    async readResponse(response, signal) {
+        var _a, _b;
+        const advertisedLength = (_a = response.headers) === null || _a === void 0 ? void 0 : _a.get('content-length');
+        if (advertisedLength !== null && advertisedLength !== undefined) {
+            if (Number(advertisedLength) > this.limits.maxResponseBytes) {
+                void ((_b = response.body) === null || _b === void 0 ? void 0 : _b.cancel().catch(() => { }));
+                (0, BASMValidation_js_1.requireBASMLimit)(false, 'BASM response exceeds byte limit');
+            }
+        }
+        // Preserve injected fetch implementations that expose only text(). Real HTTP
+        // responses are bounded while streaming, including decoded chunked bodies.
+        if (response.body === undefined || response.body === null) {
+            const text = await response.text();
+            (0, BASMValidation_js_1.requireBASMLimit)(Buffer.byteLength(text) <= this.limits.maxResponseBytes, 'BASM response exceeds byte limit');
+            return text;
+        }
+        const reader = response.body.getReader();
+        const chunks = [];
+        let size = 0;
+        const cancel = () => {
+            void reader.cancel().catch(() => { });
+        };
+        signal.addEventListener('abort', cancel, { once: true });
+        try {
+            while (true) {
+                signal.throwIfAborted();
+                const { done, value } = await reader.read();
+                if (done)
+                    break;
+                size += value.byteLength;
+                (0, BASMValidation_js_1.requireBASMLimit)(size <= this.limits.maxResponseBytes, 'BASM response exceeds byte limit');
+                chunks.push(value);
+            }
+            signal.throwIfAborted();
+            return Buffer.concat(chunks, size).toString('utf8');
+        }
+        catch (error) {
+            cancel();
+            throw error;
+        }
+        finally {
+            signal.removeEventListener('abort', cancel);
+            reader.releaseLock();
+        }
     }
     async post(path, body) {
+        const controller = new AbortController();
+        let timer;
+        const deadline = new Promise((_resolve, reject) => {
+            timer = setTimeout(() => {
+                const error = new BASMValidation_js_1.BASMProtocolError('BASM_TIMEOUT', 'BASM request timed out');
+                controller.abort(error);
+                reject(error);
+            }, this.limits.timeoutMs);
+        });
+        try {
+            return await Promise.race([this.postResponse(path, body, controller.signal), deadline]);
+        }
+        finally {
+            clearTimeout(timer);
+            controller.abort();
+        }
+    }
+    async postResponse(path, body, signal) {
+        var _a, _b, _c, _d;
         const response = await this.fetchImpl(new URL(path, this.endpoint).toString(), {
             method: 'POST',
             headers: {
@@ -30,13 +171,38 @@ class BASMRemote {
                 'Content-Type': 'application/json',
                 'x-bsv-topic': this.topic
             },
-            body: JSON.stringify(body)
+            body: JSON.stringify(body),
+            signal
         });
-        const text = await response.text();
+        if (signal.aborted) {
+            void ((_a = response.body) === null || _a === void 0 ? void 0 : _a.cancel().catch(() => { }));
+            signal.throwIfAborted();
+        }
+        const contentType = (_c = (_b = response.headers) === null || _b === void 0 ? void 0 : _b.get) === null || _c === void 0 ? void 0 : _c.call(_b, 'content-type');
+        if (contentType !== null &&
+            contentType !== undefined &&
+            contentType.includes('/') &&
+            !/^application\/(?:[\w.-]+\+)?json(?:\s*;|$)/i.test(contentType)) {
+            void ((_d = response.body) === null || _d === void 0 ? void 0 : _d.cancel().catch(() => { }));
+            throw new TypeError('Overlay peer response is not JSON');
+        }
+        const text = await this.readResponse(response, signal);
+        let value;
+        try {
+            value = JSON.parse(text);
+        }
+        catch {
+            if (response.ok)
+                throw new BASMValidation_js_1.BASMProtocolError('BASM_INVALID_RESPONSE', 'Invalid BASM JSON response');
+        }
         if (!response.ok) {
-            throw new Error(`BASM peer ${this.endpoint} returned ${response.status}: ${text}`);
+            const code = typeof value === 'object' && value !== null && 'code' in value ? value.code : undefined;
+            if (response.status === 501 || code === 'BASM_UNSUPPORTED') {
+                throw new BASMValidation_js_1.BASMProtocolError('BASM_UNSUPPORTED', `BASM peer returned HTTP ${response.status}: unsupported BASM capability`);
+            }
+            throw new BASMValidation_js_1.BASMProtocolError('BASM_HTTP_ERROR', `BASM peer returned HTTP ${response.status}`);
         }
-        return (text.length === 0 ? {} : JSON.parse(text));
+        return value;
     }
 }
 exports.BASMRemote = BASMRemote;

package/dist/cjs/src/BASMRemote.js.map

@@ -1 +1 @@
-{"version":3,"file":"BASMRemote.js","sourceRoot":"","sources":["../../../src/BASMRemote.ts"],"names":[],"mappings":";;;AAQA;IACE,YACmB,QAAgB,EAChB,KAAa,EACb,SAAS,GAAiB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;wBAFhD,QAAQ;qBACR,KAAK;yBACL,SAAS;IACxB,CAAC;IAEL,KAAK,CAAC,qBAAqB;QACzB,OAAO,MAAM,IAAI,CAAC,IAAI,CAAiB,wBAAwB,EAAE,EAAE,CAAC,CAAA;IACtE,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,UAAkB,EAAE,QAAgB;QAChE,OAAO,MAAM,IAAI,CAAC,IAAI,CAA2B,0BAA0B,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAA;IACxG,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,WAAmB,EAAE,SAAkB;QAC/D,OAAO,MAAM,IAAI,CAAC,IAAI,CAAuB,sBAAsB,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAA;IAClG,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,WAAmB,EAAE,KAAe;QAClE,OAAO,MAAM,IAAI,CAAC,IAAI,CAA6B,4BAA4B,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1G,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,KAAe;QAC1C,OAAO,MAAM,IAAI,CAAC,IAAI,CAAyB,yBAAyB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACtF,CAAC;IAEO,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAa;QAC/C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC7E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,IAAI,CAAC,KAAK;aAC1B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAClC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,QAAQ,aAAa,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAA;QACpF,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAM,CAAA;IACzD,CAAC;CACF"}
+{"version":3,"file":"BASMRemote.js","sourceRoot":"","sources":["../../../src/BASMRemote.ts"],"names":[],"mappings":";;;AAOA,2DAa4B;AAE5B,2DAA+F;AAE/F,yDAAuD;AAA9C,sHAAA,iBAAiB,OAAA;AAG1B;IAME,YACE,QAAgB,EAChB,KAAa,EACb,SAAwB,EACxB,MAAM,GAA8B,EAAE;QAEtC,IAAA,+BAAW,EAAC,KAAK,CAAC,CAAA;QAClB,MAAM,OAAO,GAAG,IAAA,mCAAe,EAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;QACpD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;QAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,8CAA0B,EAAE,GAAG,MAAM,EAAE,CAAC,CAAA;QACzE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;gBAC5C,MAAM,IAAI,SAAS,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAA;QACrD,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,UAAU;YAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAA;IACjG,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,OAAO,IAAA,2BAAO,EAAC,MAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAC3E,CAAC;IAED,KAAK,CAAC,uBAAuB,CAC3B,UAAkB,EAClB,QAAgB;QAEhB,IAAA,+BAAW,EAAC,UAAU,EAAE,aAAa,CAAC,CAAA;QACtC,IAAA,+BAAW,EAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;QAC9C,IAAA,oCAAgB,EACd,QAAQ,GAAG,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,EAClD,iCAAiC,CAClC,CAAA;QACD,MAAM,GAAG,GAAG,IAAA,8BAAU,EAAC,MAAM,IAAI,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAA;QAC7F,IAAA,+BAAW,EAAC,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC,CAAA;QAChG,IAAA,oCAAgB,EACd,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,QAAQ,GAAG,UAAU,GAAG,CAAC,EAC/C,2CAA2C,CAC5C,CAAA;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QACvE,IAAI,cAAkC,CAAA;QACtC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAA,+BAAW,EACT,MAAM,CAAC,WAAW,IAAI,UAAU,IAAI,MAAM,CAAC,WAAW,IAAI,QAAQ,EAClE,qCAAqC,CACtC,CAAA;YACD,IAAA,+BAAW,EACT,cAAc,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,cAAc,GAAG,CAAC,EACzE,6CAA6C,CAC9C,CAAA;YACD,cAAc,GAAG,MAAM,CAAC,WAAW,CAAA;QACrC,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,WAAmB,EACnB,SAAkB;QAElB,IAAA,+BAAW,EAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;QAClC,IAAI,SAAS,KAAK,SAAS;YAAE,IAAA,4BAAQ,EAAC,SAAS,EAAE,YAAY,CAAC,CAAA;QAC9D,MAAM,GAAG,GAAG,IAAA,8BAAU,EAAC,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;QAC3F,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;QACxC,MAAM,YAAY,GAChB,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAA,4BAAQ,EAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;QACjF,IAAA,+BAAW,EACT,SAAS,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EACnF,mCAAmC,CACpC,CAAA;QACD,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW;YACX,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;YAClE,QAAQ,EAAE,IAAA,gCAAY,EAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;SACnE,CAAA;IACH,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,WAAmB,EACnB,KAAe;QAEf,IAAA,+BAAW,EAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;QAClC,MAAM,SAAS,GAAG,IAAA,6BAAS,EAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAA;QACjE,IAAA,+BAAW,EAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,0CAA0C,CAAC,CAAA;QAC7E,MAAM,GAAG,GAAG,IAAA,8BAAU,EACpB,MAAM,IAAI,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CACjF,CAAA;QACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;QACxC,MAAM,QAAQ,GAAG,IAAA,6BAAS,EAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;QACvD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAA;QACvC,IAAA,+BAAW,EACT,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EACtF,uCAAuC,CACxC,CAAA;QACD,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW;YACX,KAAK,EAAE,QAAQ;YACf,UAAU,EAAE,IAAA,2BAAO,EAAC,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;SAC9E,CAAA;IACH,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,KAAe;QAC1C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAA,6BAAS,EAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAA;QAC1E,MAAM,GAAG,GAAG,IAAA,8BAAU,EAAC,MAAM,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,CAAA;QAC7F,IAAA,+BAAW,EAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,+BAA+B,CAAC,CAAA;QAC7E,IAAA,oCAAgB,EACd,GAAG,CAAC,YAAY,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,EACzC,4CAA4C,CAC7C,CAAA;QACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;QAC9B,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;YAChD,MAAM,MAAM,GAAG,IAAA,8BAAU,EAAC,KAAK,CAAC,CAAA;YAChC,MAAM,IAAI,GAAG,IAAA,4BAAQ,EAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YAC1C,IAAA,+BAAW,EACT,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EACtC,8CAA8C,CAC/C,CAAA;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACd,MAAM,KAAK,GAAG,IAAA,2BAAO,EAAC,MAAM,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAA;YAC1F,IAAA,+CAA2B,EAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YACxC,OAAO;gBACL,IAAI;gBACJ,KAAK;aACN,CAAA;QACH,CAAC,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,IAAA,6BAAS,EAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;QACtD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAA,+BAAW,EACT,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EACtC,6CAA6C,CAC9C,CAAA;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChB,CAAC;QACD,IAAA,+BAAW,EAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,EAAE,yCAAyC,CAAC,CAAA;QACpF,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAA;IAClC,CAAC;IAEO,iBAAiB,CAAC,GAA4B,EAAE,WAAmB;QACzE,IAAA,+BAAW,EACT,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,WAAW,KAAK,WAAW,EAC3D,wCAAwC,CACzC,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,QAAkB,EAAE,MAAmB;;QAChE,MAAM,gBAAgB,GAAG,MAAA,QAAQ,CAAC,OAAO,0CAAE,GAAG,CAAC,gBAAgB,CAAC,CAAA;QAChE,IAAI,gBAAgB,KAAK,IAAI,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAChE,IAAI,MAAM,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC5D,MAAK,MAAA,QAAQ,CAAC,IAAI,0CAAE,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA,CAAA;gBAC5C,IAAA,oCAAgB,EAAC,KAAK,EAAE,kCAAkC,CAAC,CAAA;YAC7D,CAAC;QACH,CAAC;QACD,6EAA6E;QAC7E,2EAA2E;QAC3E,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YAClC,IAAA,oCAAgB,EACd,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EACvD,kCAAkC,CACnC,CAAA;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAA;QACxC,MAAM,MAAM,GAAiB,EAAE,CAAA;QAC/B,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACtC,CAAC,CAAA;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,IAAI,CAAC;YACH,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,CAAC,cAAc,EAAE,CAAA;gBACvB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;gBAC3C,IAAI,IAAI;oBAAE,MAAK;gBACf,IAAI,IAAI,KAAK,CAAC,UAAU,CAAA;gBACxB,IAAA,oCAAgB,EAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,CAAA;gBAC1F,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACpB,CAAC;YACD,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,CAAA;YACR,MAAM,KAAK,CAAA;QACb,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAC3C,MAAM,CAAC,WAAW,EAAE,CAAA;QACtB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,IAAa;QAC5C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,IAAI,KAAgD,CAAA;QACpD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YACvD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBACtB,MAAM,KAAK,GAAG,IAAI,qCAAiB,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAA;gBAC7E,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;gBACvB,MAAM,CAAC,KAAK,CAAC,CAAA;YACf,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAC3B,CAAC,CAAC,CAAA;QACF,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAA;QACzF,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,UAAU,CAAC,KAAK,EAAE,CAAA;QACpB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,IAAa,EAAE,MAAmB;;QACzE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC7E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,IAAI,CAAC,KAAK;aAC1B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM;SACP,CAAC,CAAA;QACF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAK,MAAA,QAAQ,CAAC,IAAI,0CAAE,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA,CAAA;YAC5C,MAAM,CAAC,cAAc,EAAE,CAAA;QACzB,CAAC;QACD,MAAM,WAAW,GAAG,MAAA,MAAA,QAAQ,CAAC,OAAO,0CAAE,GAAG,mDAAG,cAAc,CAAC,CAAA;QAC3D,IACE,WAAW,KAAK,IAAI;YACpB,WAAW,KAAK,SAAS;YACzB,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;YACzB,CAAC,6CAA6C,CAAC,IAAI,CAAC,WAAW,CAAC,EAChE,CAAC;YACD,MAAK,MAAA,QAAQ,CAAC,IAAI,0CAAE,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA,CAAA;YAC5C,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAA;QAC1D,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QACtD,IAAI,KAAc,CAAA;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,QAAQ,CAAC,EAAE;gBACb,MAAM,IAAI,qCAAiB,CAAC,uBAAuB,EAAE,4BAA4B,CAAC,CAAA;QACtF,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;YACzF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBAC3D,MAAM,IAAI,qCAAiB,CACzB,kBAAkB,EAClB,2BAA2B,QAAQ,CAAC,MAAM,+BAA+B,CAC1E,CAAA;YACH,CAAC;YACD,MAAM,IAAI,qCAAiB,CAAC,iBAAiB,EAAE,2BAA2B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;QAC9F,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;CACF"}

package/dist/cjs/src/BASMValidation.d.ts

@@ -0,0 +1,27 @@
+import type { AdmittedTxRef, TopicAnchorTip, TopicBlockAnchor } from './BASM.js';
+/** Local acceptance limits, not Bitcoin consensus limits. */
+export interface BASMRemoteLimits {
+    maxResponseBytes: number;
+    maxProofBytes: number;
+    maxRawTransactionBytes: number;
+    maxAdmittedTxids: number;
+    maxRequestedTxids: number;
+    maxAnchorRange: number;
+    timeoutMs: number;
+}
+export declare const DEFAULT_BASM_REMOTE_LIMITS: Readonly<BASMRemoteLimits>;
+export declare class BASMProtocolError extends Error {
+    readonly code: 'BASM_INVALID_RESPONSE' | 'BASM_RESOURCE_LIMIT' | 'BASM_UNSUPPORTED' | 'BASM_TIMEOUT' | 'BASM_HTTP_ERROR';
+    constructor(code: 'BASM_INVALID_RESPONSE' | 'BASM_RESOURCE_LIMIT' | 'BASM_UNSUPPORTED' | 'BASM_TIMEOUT' | 'BASM_HTTP_ERROR', message: string);
+}
+export declare function requireBASM(condition: boolean, message: string): asserts condition;
+export declare function requireBASMLimit(condition: boolean, message: string): void;
+export declare function basmObject(value: unknown): Record<string, unknown>;
+export declare function basmInteger(value: unknown, label: string, minimum?: number): number;
+export declare function basmHash(value: unknown, label: string): string;
+export declare function basmHex(value: unknown, label: string, maxBytes: number): string;
+export declare function basmTxids(value: unknown, maximum: number): string[];
+export declare function basmTip(value: unknown, topic: string): TopicAnchorTip;
+export declare function basmAnchor(value: unknown, topic: string): TopicBlockAnchor;
+export declare function basmAdmitted(value: unknown, maximum: number): AdmittedTxRef[];
+//# sourceMappingURL=BASMValidation.d.ts.map

package/dist/cjs/src/BASMValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BASMValidation.d.ts","sourceRoot":"","sources":["../../../src/BASMValidation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAEhF,6DAA6D;AAC7D,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,aAAa,EAAE,MAAM,CAAA;IACrB,sBAAsB,EAAE,MAAM,CAAA;IAC9B,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,gBAAgB,CAQhE,CAAA;AAEF,qBAAa,iBAAkB,SAAQ,KAAK;aAExB,IAAI,EAChB,uBAAuB,GACvB,qBAAqB,GACrB,kBAAkB,GAClB,cAAc,GACd,iBAAiB;IANvB,YACkB,IAAI,EAChB,uBAAuB,GACvB,qBAAqB,GACrB,kBAAkB,GAClB,cAAc,GACd,iBAAiB,EACrB,OAAO,EAAE,MAAM,EAIhB;CACF;AAED,wBAAgB,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAElF;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAE1E;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMlE;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,SAAI,GAAG,MAAM,CAM9E;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAG9D;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQ/E;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAMnE;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,cAAc,CAYrE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAW1E;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,aAAa,EAAE,CAiB7E"}

package/dist/cjs/src/BASMValidation.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BASMProtocolError = exports.DEFAULT_BASM_REMOTE_LIMITS = void 0;
+exports.requireBASM = requireBASM;
+exports.requireBASMLimit = requireBASMLimit;
+exports.basmObject = basmObject;
+exports.basmInteger = basmInteger;
+exports.basmHash = basmHash;
+exports.basmHex = basmHex;
+exports.basmTxids = basmTxids;
+exports.basmTip = basmTip;
+exports.basmAnchor = basmAnchor;
+exports.basmAdmitted = basmAdmitted;
+const BASM_js_1 = require("./BASM.js");
+exports.DEFAULT_BASM_REMOTE_LIMITS = Object.freeze({
+    maxResponseBytes: 64 * 1024 * 1024,
+    maxProofBytes: 8 * 1024 * 1024,
+    maxRawTransactionBytes: 32 * 1024 * 1024,
+    maxAdmittedTxids: 100000,
+    maxRequestedTxids: 1000,
+    maxAnchorRange: 1024,
+    timeoutMs: 30000
+});
+class BASMProtocolError extends Error {
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'BASMProtocolError';
+    }
+}
+exports.BASMProtocolError = BASMProtocolError;
+function requireBASM(condition, message) {
+    if (!condition)
+        throw new BASMProtocolError('BASM_INVALID_RESPONSE', message);
+}
+function requireBASMLimit(condition, message) {
+    if (!condition)
+        throw new BASMProtocolError('BASM_RESOURCE_LIMIT', message);
+}
+function basmObject(value) {
+    requireBASM(typeof value === 'object' && value !== null && !Array.isArray(value), 'Expected a BASM JSON object');
+    return value;
+}
+function basmInteger(value, label, minimum = 0) {
+    requireBASM(typeof value === 'number' && Number.isSafeInteger(value) && value >= minimum, `Invalid BASM ${label}`);
+    return value;
+}
+function basmHash(value, label) {
+    requireBASM(typeof value === 'string' && /^[0-9a-f]{64}$/.test(value), `Invalid BASM ${label}`);
+    return value;
+}
+function basmHex(value, label, maxBytes) {
+    requireBASM(typeof value === 'string', `Invalid BASM ${label}`);
+    requireBASMLimit(value.length <= maxBytes * 2, `BASM ${label} exceeds byte limit`);
+    requireBASM(value.length > 0 && value.length % 2 === 0 && /^[0-9a-fA-F]+$/.test(value), `Invalid BASM ${label}`);
+    return value;
+}
+function basmTxids(value, maximum) {
+    requireBASM(Array.isArray(value), 'Invalid BASM txids');
+    requireBASMLimit(value.length <= maximum, 'BASM txid count exceeds limit');
+    const txids = value.map(txid => basmHash(txid, 'txid'));
+    requireBASM(new Set(txids).size === txids.length, 'Duplicate BASM txid');
+    return txids;
+}
+function basmTip(value, topic) {
+    const obj = basmObject(value);
+    requireBASM(obj.topic === topic, 'BASM topic mismatch');
+    const blockHeight = basmInteger(obj.blockHeight, 'tip height', -1);
+    const tac = basmHash(obj.tac, 'TAC');
+    const tip = { topic, blockHeight, tac };
+    if (obj.blockHash !== undefined)
+        tip.blockHash = basmHash(obj.blockHash, 'block hash');
+    if (obj.basmRoot !== undefined)
+        tip.basmRoot = basmHash(obj.basmRoot, 'root');
+    if (obj.admittedCount !== undefined)
+        tip.admittedCount = basmInteger(obj.admittedCount, 'admitted count');
+    if (blockHeight === -1)
+        requireBASM(tac === BASM_js_1.BASM_ZERO_HASH, 'Empty BASM tip must have zero TAC');
+    return tip;
+}
+function basmAnchor(value, topic) {
+    const obj = basmObject(value);
+    const tip = basmTip(value, topic);
+    return {
+        topic,
+        blockHeight: basmInteger(tip.blockHeight, 'anchor height'),
+        blockHash: basmHash(obj.blockHash, 'block hash'),
+        basmRoot: basmHash(obj.basmRoot, 'root'),
+        admittedCount: basmInteger(obj.admittedCount, 'admitted count'),
+        tac: tip.tac
+    };
+}
+function basmAdmitted(value, maximum) {
+    requireBASM(Array.isArray(value), 'Invalid BASM admitted list');
+    requireBASMLimit(value.length <= maximum, 'BASM admitted count exceeds limit');
+    let previousIndex = -1;
+    const seen = new Set();
+    return value.map(item => {
+        const obj = basmObject(item);
+        const txid = basmHash(obj.txid, 'txid');
+        const blockIndex = basmInteger(obj.blockIndex, 'block index');
+        requireBASM(blockIndex > previousIndex && !seen.has(txid), 'BASM admitted list must have unique txids in increasing block order');
+        previousIndex = blockIndex;
+        seen.add(txid);
+        return { txid, blockIndex };
+    });
+}
+//# sourceMappingURL=BASMValidation.js.map

package/dist/cjs/src/BASMValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BASMValidation.js","sourceRoot":"","sources":["../../../src/BASMValidation.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,uCAA0C;AAc7B,QAAA,0BAA0B,GAA+B,MAAM,CAAC,MAAM,CAAC;IAClF,gBAAgB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAClC,aAAa,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAC9B,sBAAsB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IACxC,gBAAgB,EAAE,MAAM;IACxB,iBAAiB,EAAE,IAAI;IACvB,cAAc,EAAE,IAAI;IACpB,SAAS,EAAE,KAAK;CACjB,CAAC,CAAA;AAEF,uBAA+B,SAAQ,KAAK;IAC1C,YACkB,IAKK,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;oBARE,IAAI;QASpB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAA;IACjC,CAAC;CACF;;AAED,qBAA4B,SAAkB,EAAE,OAAe;IAC7D,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAA;AAC/E,CAAC;AAED,0BAAiC,SAAkB,EAAE,OAAe;IAClE,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAA;AAC7E,CAAC;AAED,oBAA2B,KAAc;IACvC,WAAW,CACT,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACpE,6BAA6B,CAC9B,CAAA;IACD,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,qBAA4B,KAAc,EAAE,KAAa,EAAE,OAAO,GAAG,CAAC;IACpE,WAAW,CACT,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,OAAO,EAC5E,gBAAgB,KAAK,EAAE,CACxB,CAAA;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,kBAAyB,KAAc,EAAE,KAAa;IACpD,WAAW,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,gBAAgB,KAAK,EAAE,CAAC,CAAA;IAC/F,OAAO,KAAK,CAAA;AACd,CAAC;AAED,iBAAwB,KAAc,EAAE,KAAa,EAAE,QAAgB;IACrE,WAAW,CAAC,OAAO,KAAK,KAAK,QAAQ,EAAE,gBAAgB,KAAK,EAAE,CAAC,CAAA;IAC/D,gBAAgB,CAAC,KAAK,CAAC,MAAM,IAAI,QAAQ,GAAG,CAAC,EAAE,QAAQ,KAAK,qBAAqB,CAAC,CAAA;IAClF,WAAW,CACT,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAC1E,gBAAgB,KAAK,EAAE,CACxB,CAAA;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,mBAA0B,KAAc,EAAE,OAAe;IACvD,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,oBAAoB,CAAC,CAAA;IACvD,gBAAgB,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,EAAE,+BAA+B,CAAC,CAAA;IAC1E,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IACvD,WAAW,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;IACxE,OAAO,KAAK,CAAA;AACd,CAAC;AAED,iBAAwB,KAAc,EAAE,KAAa;IACnD,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;IAC7B,WAAW,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK,EAAE,qBAAqB,CAAC,CAAA;IACvD,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAA;IAClE,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACpC,MAAM,GAAG,GAAmB,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,CAAA;IACvD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;IACtF,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;QAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC7E,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS;QACjC,GAAG,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAA;IACtE,IAAI,WAAW,KAAK,CAAC,CAAC;QAAE,WAAW,CAAC,GAAG,KAAK,wBAAc,EAAE,mCAAmC,CAAC,CAAA;IAChG,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,oBAA2B,KAAc,EAAE,KAAa;IACtD,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACjC,OAAO;QACL,KAAK;QACL,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,eAAe,CAAC;QAC1D,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC;QAChD,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC;QACxC,aAAa,EAAE,WAAW,CAAC,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAC;QAC/D,GAAG,EAAE,GAAG,CAAC,GAAG;KACb,CAAA;AACH,CAAC;AAED,sBAA6B,KAAc,EAAE,OAAe;IAC1D,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,4BAA4B,CAAC,CAAA;IAC/D,gBAAgB,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,EAAE,mCAAmC,CAAC,CAAA;IAC9E,IAAI,aAAa,GAAG,CAAC,CAAC,CAAA;IACtB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACtB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACvC,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAA;QAC7D,WAAW,CACT,UAAU,GAAG,aAAa,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAC7C,qEAAqE,CACtE,CAAA;QACD,aAAa,GAAG,UAAU,CAAA;QAC1B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACd,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;IAC7B,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/cjs/src/DiscoveryAdvertisementValidation.d.ts

@@ -0,0 +1,11 @@
+import { LockingScript } from '@bsv/sdk';
+export type DiscoveryProtocol = 'SHIP' | 'SLAP';
+export interface VerifiedDiscoveryAdvertisement {
+    protocol: DiscoveryProtocol;
+    identityKey: string;
+    domain: string;
+    topicOrService: string;
+}
+/** Decode and authenticate one canonical SHIP or SLAP PushDrop advertisement. */
+export declare function decodeAndVerifyDiscoveryAdvertisement(lockingScript: LockingScript, expectedProtocol: DiscoveryProtocol): Promise<VerifiedDiscoveryAdvertisement>;
+//# sourceMappingURL=DiscoveryAdvertisementValidation.d.ts.map

package/dist/cjs/src/DiscoveryAdvertisementValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DiscoveryAdvertisementValidation.d.ts","sourceRoot":"","sources":["../../../src/DiscoveryAdvertisementValidation.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,aAAa,EAId,MAAM,UAAU,CAAA;AACjB,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,MAAM,CAAA;AAE/C,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;CACvB;AAaD,iFAAiF;AACjF,wBAAsB,qCAAqC,CACzD,aAAa,EAAE,aAAa,EAC5B,gBAAgB,EAAE,iBAAiB,GAClC,OAAO,CAAC,8BAA8B,CAAC,CA+CzC"}

package/dist/cjs/src/DiscoveryAdvertisementValidation.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeAndVerifyDiscoveryAdvertisement = decodeAndVerifyDiscoveryAdvertisement;
+const utils_1 = require("@bsv/sdk/primitives/utils");
+const sdk_1 = require("@bsv/sdk");
+const MAX_DISCOVERY_FIELD_BYTES = 4096;
+const MAX_DISCOVERY_PAYLOAD_BYTES = 8192;
+const namePattern = {
+    SHIP: /^(?=.{1,50}$)tm_[a-z]+(?:_[a-z]+)*$/,
+    SLAP: /^(?=.{1,50}$)ls_[a-z]+(?:_[a-z]+)*$/
+};
+function walletProtocol(protocol) {
+    return [2, protocol === 'SHIP' ? 'service host interconnect' : 'service lookup availability'];
+}
+/** Decode and authenticate one canonical SHIP or SLAP PushDrop advertisement. */
+async function decodeAndVerifyDiscoveryAdvertisement(lockingScript, expectedProtocol) {
+    const decoded = (0, sdk_1.decodeCanonicalPushDrop)(lockingScript, {
+        fieldCount: 5,
+        maximumFieldBytes: MAX_DISCOVERY_FIELD_BYTES,
+        maximumPayloadBytes: MAX_DISCOVERY_PAYLOAD_BYTES
+    });
+    const protocol = (0, utils_1.toUTF8Strict)(decoded.fields[0]);
+    if (protocol !== expectedProtocol)
+        throw new Error('Discovery advertisement protocol mismatch');
+    const identityKey = (0, utils_1.toHex)(decoded.fields[1]);
+    if (!/^(?:02|03)[0-9a-f]{64}$/.test(identityKey) ||
+        sdk_1.PublicKey.fromString(identityKey).toString() !== identityKey) {
+        throw new Error('Discovery advertisement identity key is invalid');
+    }
+    const domain = (0, utils_1.toUTF8Strict)(decoded.fields[2]);
+    if (new TextEncoder().encode(domain).byteLength < 1 ||
+        new TextEncoder().encode(domain).byteLength > 4096) {
+        throw new Error('Discovery advertisement domain is invalid');
+    }
+    const topicOrService = (0, utils_1.toUTF8Strict)(decoded.fields[3]);
+    if (!namePattern[expectedProtocol].test(topicOrService)) {
+        throw new Error('Discovery advertisement name is invalid');
+    }
+    const protocolID = walletProtocol(expectedProtocol);
+    const wallet = new sdk_1.ProtoWallet('anyone');
+    const { valid } = await wallet.verifySignature({
+        data: decoded.fields.slice(0, -1).flat(),
+        signature: decoded.fields.at(-1),
+        counterparty: identityKey,
+        protocolID,
+        keyID: '1'
+    });
+    if (valid !== true)
+        throw new Error('Discovery advertisement signature is invalid');
+    const { publicKey: expectedLockingKey } = await wallet.getPublicKey({
+        counterparty: identityKey,
+        protocolID,
+        keyID: '1'
+    });
+    if (expectedLockingKey !== decoded.lockingPublicKey.toString()) {
+        throw new Error('Discovery advertisement locking key is not linked to its identity');
+    }
+    return { protocol: expectedProtocol, identityKey, domain, topicOrService };
+}
+//# sourceMappingURL=DiscoveryAdvertisementValidation.js.map

package/dist/cjs/src/DiscoveryAdvertisementValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DiscoveryAdvertisementValidation.js","sourceRoot":"","sources":["../../../src/DiscoveryAdvertisementValidation.ts"],"names":[],"mappings":";;;AAAA,qDAA+D;AAC/D,kCAMiB;AAUjB,MAAM,yBAAyB,GAAG,IAAI,CAAA;AACtC,MAAM,2BAA2B,GAAG,IAAI,CAAA;AACxC,MAAM,WAAW,GAAsC;IACrD,IAAI,EAAE,qCAAqC;IAC3C,IAAI,EAAE,qCAAqC;CAC5C,CAAA;AAED,SAAS,cAAc,CAAC,QAA2B;IACjD,OAAO,CAAC,CAAC,EAAE,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAA;AAC/F,CAAC;AAED,iFAAiF;AAC1E,KAAK,gDACV,aAA4B,EAC5B,gBAAmC;IAEnC,MAAM,OAAO,GAAG,IAAA,6BAAuB,EAAC,aAAa,EAAE;QACrD,UAAU,EAAE,CAAC;QACb,iBAAiB,EAAE,yBAAyB;QAC5C,mBAAmB,EAAE,2BAA2B;KACjD,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,IAAA,oBAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAChD,IAAI,QAAQ,KAAK,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IAC/F,MAAM,WAAW,GAAG,IAAA,aAAK,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAC5C,IACE,CAAC,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC;QAC5C,eAAS,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,KAAK,WAAW,EAC5D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,oBAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9C,IACE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,GAAG,CAAC;QAC/C,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,GAAG,IAAI,EAClD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,cAAc,GAAG,IAAA,oBAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IACtD,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC5D,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,CAAC,gBAAgB,CAAC,CAAA;IACnD,MAAM,MAAM,GAAG,IAAI,iBAAW,CAAC,QAAQ,CAAC,CAAA;IACxC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC;QAC7C,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;QACxC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE;QACjC,YAAY,EAAE,WAAW;QACzB,UAAU;QACV,KAAK,EAAE,GAAG;KACX,CAAC,CAAA;IACF,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACnF,MAAM,EAAE,SAAS,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC;QAClE,YAAY,EAAE,WAAW;QACzB,UAAU;QACV,KAAK,EAAE,GAAG;KACX,CAAC,CAAA;IACF,IAAI,kBAAkB,KAAK,OAAO,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAA;IACtF,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,CAAA;AAC5E,CAAC"}

package/dist/cjs/src/Engine.d.ts

@@ -9,7 +9,12 @@ import { SyncConfiguration } from './SyncConfiguration.js';
 import { type AdmittedListResponse, type BASMPeerSyncReport, type CompoundMerklePathResponse, type RawTransactionResponse, type ReorgReport, type TopicAnchorHeaderResolver, type TopicAnchorRangeResponse, type TopicAnchorTip } from './BASM.js';
 type UTXOHistoryHydrationContext = {
     outputCache: Map<string, Promise<Output | null>>;
+    budgetedOutputs: Set<string>;
+    hydratedNodes: number;
+    relationCount: number;
+    totalBeefBytes: number;
 };
+type SubmissionMode = 'historical-tx' | 'current-tx' | 'historical-tx-no-spv';
 /**
  * An engine for running BSV Overlay Services (topic managers and lookup services).
  */
@@ -38,6 +43,8 @@ export declare class Engine {
     basmSyncEnabled: boolean;
     unprovenEvictionBlocks: number;
     maxLookupResults: number;
+    private submissionTail;
+    private basmFetchImpl?;
     /**
      * Creates a new Overlay Services Engine
      * @param {[key: string]: TopicManager} managers - manages topic admittance
@@ -108,6 +115,7 @@ export declare class Engine {
         rebuildFromHeight: number;
         newTipHeight: number;
     }): Promise<ReorgReport>;
+    private reconcileReorg;
     /**
      * Revalidation sweep: the reorg fallback for chain trackers without a reorg
      * event stream, and the catch-up step on every reorg-SSE (re)connect (the
@@ -122,6 +130,7 @@ export declare class Engine {
     private validateTopicSubmission;
     private isTopicSubmissionAccepted;
     private broadcastAcceptedSubmission;
+    private abortProvisionalAdmissions;
     private notifyOutputSpent;
     private markPreviousOutputSpent;
     private markPreviousOutputsSpent;
@@ -133,6 +142,10 @@ export declare class Engine {
     private applyTopicStorageMutation;
     private applyStorageMutations;
     private propagateSubmission;
+    private assertSupportedTopics;
+    private shouldSkipPropagation;
+    private notifySteakReady;
+    private acknowledgeOverlayAdmission;
     /**
      * Submits a transaction for processing by Overlay Services.
      * @param {TaggedBEEF} taggedBEEF - The transaction to process
@@ -140,11 +153,13 @@ export declare class Engine {
      * @param {string} mode — Indicates the submission behavior, whether historical or current. Historical transactions are not broadcast or propagated.
      * @param {number[]} offChainValues — Values necessary to evaluate topical admittance that are not stored on-chain.
      *
-     * The optional callback function should be used to get STEAK when ready, and avoid waiting for broadcast and transaction propagation to complete.
+     * The optional callback is invoked after any required transaction broadcast and
+     * local storage mutations have completed, but before peer-to-peer propagation.
      *
      * @returns {Promise<STEAK>} The submitted transaction execution acknowledgement
      */
-    submit(taggedBEEF: TaggedBEEF, onSteakReady?: (steak: STEAK) => void, mode?: 'historical-tx' | 'current-tx' | 'historical-tx-no-spv', offChainValues?: number[]): Promise<STEAK>;
+    submit(taggedBEEF: TaggedBEEF, onSteakReady?: (steak: STEAK) => void, mode?: SubmissionMode, offChainValues?: number[]): Promise<STEAK>;
+    private submitUnlocked;
     /**
      * Submit a lookup question to the Overlay Services Engine, and receive back a Lookup Answer
      * @param LookupQuestion — The question to ask the Overlay Services Engine
@@ -153,6 +168,8 @@ export declare class Engine {
     lookup(lookupQuestion: LookupQuestion): Promise<LookupAnswer>;
     private createUTXOHistoryHydrationContext;
     private toOutputCacheKey;
+    private assertLookupFormula;
+    private validateLookupOutput;
     private preloadOutputsWithBEEF;
     private loadOutputWithBEEF;
     private hydrateUTXOHistoryNode;
@@ -175,6 +192,7 @@ export declare class Engine {
      * @throws Will throw an error if there are issues during the advertisement synchronization process.
      * @returns {Promise<void>} A promise that resolves when the synchronization process is complete.
      */
+    private validateCurrentAdvertisements;
     syncAdvertisements(): Promise<void>;
     /**
      * This method goes through each topic that we support syncing and attempts to sync with each endpoint
@@ -186,13 +204,23 @@ export declare class Engine {
     startGASPSync(): Promise<void>;
     private syncGASPWithPeer;
     private resolveSyncEndpointsForTopic;
+    private assertSupportedBASMTopic;
+    private assertTopicAnchorTip;
+    private assertTopicBlockAnchor;
     provideTopicAnchorTip(topic: string): Promise<TopicAnchorTip>;
     provideTopicAnchorRange(topic: string, fromHeight: number, toHeight: number): Promise<TopicAnchorRangeResponse>;
     provideAdmittedList(topic: string, blockHeight: number, blockHash?: string): Promise<AdmittedListResponse>;
     provideCompoundMerklePath(topic: string, blockHeight: number, txids: string[]): Promise<CompoundMerklePathResponse>;
-    provideRawTransactions(txids: string[]): Promise<RawTransactionResponse>;
+    provideRawTransactions(txids: string[], topic?: string): Promise<RawTransactionResponse>;
     startBASMSync(): Promise<BASMPeerSyncReport[]>;
     private reconcileBASMWithPeer;
+    private requireMatchingRemoteBASMTip;
+    private finishBASMWhenRemoteIsNotAhead;
+    private requireBASMRangePrefix;
+    private advanceBASMWithRemoteAnchors;
+    private markBASMPeerSyncError;
+    private requireCanonicalBASMAnchor;
+    private validateBASMProofPositions;
     private reconcileRemoteAnchor;
     private fetchBASMMissingTransactions;
     evictUnprovenTransactions(options?: {
@@ -222,6 +250,7 @@ export declare class Engine {
             error: string;
         }>;
     }>;
+    private validateUnprovenCandidates;
     maintainUnprovenTransactions(options: {
         topic?: string;
         thresholdBlocks?: number;
@@ -278,7 +307,7 @@ export declare class Engine {
      * @returns A promise that resolves to a GASPNode containing the raw transaction and other optional data.
      * @throws An error if no output is found for the given transaction ID and output index.
      */
-    provideForeignGASPNode(graphID: string, txid: string, outputIndex: number): Promise<GASPNode>;
+    provideForeignGASPNode(graphID: string, txid: string, outputIndex: number, topic?: string): Promise<GASPNode>;
     /**
      * Traverse and return the history of a UTXO.
      *
@@ -293,7 +322,7 @@ export declare class Engine {
      * @param {number} [currentDepth=0] - The current depth of the traversal relative to the top-level UTXO.
      *
      * @returns {Promise<Output | undefined>} - A promise that resolves to the output history if found, or undefined if not.
-    */
+     */
     getUTXOHistory(output: Output, historySelector?: ((beef: number[], outputIndex: number, currentDepth: number) => Promise<boolean>) | number, currentDepth?: number, context?: UTXOHistoryHydrationContext): Promise<Output | undefined>;
     /**
      * Delete a UTXO and all stale consumed inputs.
@@ -301,6 +330,8 @@ export declare class Engine {
      * @returns {Promise<void>} - A promise that resolves when the deletion process is complete.
      */
     private deleteUTXODeep;
+    private assertStoredOutputRelations;
+    private assertStoredOutputMatches;
     /**
      * Given a new transaction proof (txid, proof),
      * update tx.merklePath if appropriate,
@@ -311,14 +342,8 @@ export declare class Engine {
      * @param proof for txid
      */
     private updateInputProofs;
-    /**
-     * Recursively updates beefs (merkle proofs) of this output and its consumedBy lineage.
-     *
-     * @param output - An output derived from txid which may benefit from new proof.
-     * @param txid - The txid for which proof is a valid merkle path.
-     * @param proof - The merklePath proving txid is a mined transaction hash
-     */
-    private updateMerkleProof;
+    private prepareMerkleProofUpdate;
+    private collectMerkleProofOutputs;
     /**
      * Recursively prune UTXOs when an incoming Merkle Proof is received.
      *