@kya-os/mcp 1.10.1 → 1.12.0

package/dist/audit/providers/evidence.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=evidence.js.map

package/dist/audit/providers/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../src/audit/providers/evidence.ts"],"names":[],"mappings":""}

package/dist/audit/providers/journal.d.ts

@@ -0,0 +1,35 @@
+import type { AuditHead, AuditLedgerRef, Digest, SignedAuditEntryV1 } from '../types.js';
+export type AuditAppendResult = {
+    kind: 'appended';
+    entry: SignedAuditEntryV1;
+} | {
+    kind: 'duplicate';
+    entry: SignedAuditEntryV1;
+} | {
+    kind: 'head_conflict';
+    actualHead: AuditHead | null;
+} | {
+    kind: 'idempotency_conflict';
+    existing: SignedAuditEntryV1;
+};
+export interface AuditRangeQuery extends AuditLedgerRef {
+    afterSequence?: string;
+    limit?: number;
+}
+export interface AuditJournalProvider {
+    readonly capabilities: {
+        durability: 'ephemeral' | 'durable';
+        atomicAppend: true;
+        orderedRead: true;
+    };
+    getHead(ledger: AuditLedgerRef): Promise<AuditHead | null>;
+    getByIdempotencyKey(ledgerId: string, idempotencyKey: Digest): Promise<SignedAuditEntryV1 | null>;
+    compareAndAppend(input: {
+        ledger: AuditLedgerRef;
+        expectedHead: AuditHead | null;
+        entry: SignedAuditEntryV1;
+        idempotencyKey: Digest;
+    }): Promise<AuditAppendResult>;
+    readRange(query: AuditRangeQuery): AsyncIterable<SignedAuditEntryV1>;
+}
+//# sourceMappingURL=journal.d.ts.map

package/dist/audit/providers/journal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.d.ts","sourceRoot":"","sources":["../../../src/audit/providers/journal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEzF,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,kBAAkB,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,kBAAkB,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,SAAS,GAAG,IAAI,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,QAAQ,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAEnE,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACrD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE;QACrB,UAAU,EAAE,WAAW,GAAG,SAAS,CAAC;QACpC,YAAY,EAAE,IAAI,CAAC;QACnB,WAAW,EAAE,IAAI,CAAC;KACnB,CAAC;IAEF,OAAO,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAC3D,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAClG,gBAAgB,CAAC,KAAK,EAAE;QACtB,MAAM,EAAE,cAAc,CAAC;QACvB,YAAY,EAAE,SAAS,GAAG,IAAI,CAAC;QAC/B,KAAK,EAAE,kBAAkB,CAAC;QAC1B,cAAc,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/B,SAAS,CAAC,KAAK,EAAE,eAAe,GAAG,aAAa,CAAC,kBAAkB,CAAC,CAAC;CACtE"}

package/dist/audit/providers/journal.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=journal.js.map

package/dist/audit/providers/journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.js","sourceRoot":"","sources":["../../../src/audit/providers/journal.ts"],"names":[],"mappings":""}

package/dist/audit/providers/memory-journal.d.ts

@@ -0,0 +1,24 @@
+import type { AuditAppendResult, AuditJournalProvider, AuditRangeQuery } from './journal.js';
+import type { AuditHead, AuditLedgerRef, Digest, SignedAuditEntryV1 } from '../types.js';
+/** Ephemeral reference journal with the same atomic contract as durable adapters. */
+export declare class MemoryAuditJournal implements AuditJournalProvider {
+    readonly capabilities: {
+        durability: "ephemeral";
+        atomicAppend: true;
+        orderedRead: true;
+    };
+    private readonly entriesByLedger;
+    private readonly entriesByIdempotency;
+    private readonly heads;
+    getHead(ledger: AuditLedgerRef): Promise<AuditHead | null>;
+    getByIdempotencyKey(ledgerId: string, key: Digest): Promise<SignedAuditEntryV1 | null>;
+    compareAndAppend(input: {
+        ledger: AuditLedgerRef;
+        expectedHead: AuditHead | null;
+        entry: SignedAuditEntryV1;
+        idempotencyKey: Digest;
+    }): Promise<AuditAppendResult>;
+    readRange(query: AuditRangeQuery): AsyncIterable<SignedAuditEntryV1>;
+    snapshot(ledger: AuditLedgerRef): Promise<SignedAuditEntryV1[]>;
+}
+//# sourceMappingURL=memory-journal.d.ts.map

package/dist/audit/providers/memory-journal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-journal.d.ts","sourceRoot":"","sources":["../../../src/audit/providers/memory-journal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC7F,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAkBzF,qFAAqF;AACrF,qBAAa,kBAAmB,YAAW,oBAAoB;IAC7D,QAAQ,CAAC,YAAY;;;;MAInB;IAEF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA2C;IAC3E,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAyC;IAC9E,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IAEhD,OAAO,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAI1D,mBAAmB,CACvB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAI/B,gBAAgB,CAAC,KAAK,EAAE;QAC5B,MAAM,EAAE,cAAc,CAAC;QACvB,YAAY,EAAE,SAAS,GAAG,IAAI,CAAC;QAC/B,KAAK,EAAE,kBAAkB,CAAC;QAC1B,cAAc,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA4BvB,SAAS,CAAC,KAAK,EAAE,eAAe,GAAG,aAAa,CAAC,kBAAkB,CAAC;IAYrE,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;CAGtE"}

package/dist/audit/providers/memory-journal.js

@@ -0,0 +1,73 @@
+function ledgerKey(ledger) {
+    return `${ledger.ledgerId}\0${ledger.ledgerEpochId}`;
+}
+function idempotencyKey(ledgerId, key) {
+    return `${ledgerId}\0${key}`;
+}
+function headsEqual(left, right) {
+    if (left === null || right === null)
+        return left === right;
+    return left.ledgerId === right.ledgerId &&
+        left.ledgerEpochId === right.ledgerEpochId &&
+        left.sequence === right.sequence &&
+        left.entryDigest === right.entryDigest;
+}
+/** Ephemeral reference journal with the same atomic contract as durable adapters. */
+export class MemoryAuditJournal {
+    capabilities = {
+        durability: 'ephemeral',
+        atomicAppend: true,
+        orderedRead: true,
+    };
+    entriesByLedger = new Map();
+    entriesByIdempotency = new Map();
+    heads = new Map();
+    async getHead(ledger) {
+        return this.heads.get(ledgerKey(ledger)) ?? null;
+    }
+    async getByIdempotencyKey(ledgerId, key) {
+        return this.entriesByIdempotency.get(idempotencyKey(ledgerId, key)) ?? null;
+    }
+    async compareAndAppend(input) {
+        const idKey = idempotencyKey(input.ledger.ledgerId, input.idempotencyKey);
+        const existing = this.entriesByIdempotency.get(idKey);
+        if (existing !== undefined) {
+            return existing.eventDigest === input.entry.eventDigest
+                ? { kind: 'duplicate', entry: existing }
+                : { kind: 'idempotency_conflict', existing };
+        }
+        const key = ledgerKey(input.ledger);
+        const actualHead = this.heads.get(key) ?? null;
+        if (!headsEqual(input.expectedHead, actualHead)) {
+            return { kind: 'head_conflict', actualHead };
+        }
+        const entries = this.entriesByLedger.get(key) ?? [];
+        entries.push(input.entry);
+        this.entriesByLedger.set(key, entries);
+        this.entriesByIdempotency.set(idKey, input.entry);
+        this.heads.set(key, {
+            ledgerId: input.ledger.ledgerId,
+            ledgerEpochId: input.ledger.ledgerEpochId,
+            sequence: input.entry.core.sequence,
+            entryDigest: input.entry.entryDigest,
+        });
+        return { kind: 'appended', entry: input.entry };
+    }
+    async *readRange(query) {
+        const snapshot = await this.snapshot(query);
+        const after = query.afterSequence === undefined ? null : BigInt(query.afterSequence);
+        let yielded = 0;
+        for (const entry of snapshot) {
+            if (after !== null && BigInt(entry.core.sequence) <= after)
+                continue;
+            if (query.limit !== undefined && yielded >= query.limit)
+                return;
+            yielded += 1;
+            yield entry;
+        }
+    }
+    async snapshot(ledger) {
+        return [...(this.entriesByLedger.get(ledgerKey(ledger)) ?? [])];
+    }
+}
+//# sourceMappingURL=memory-journal.js.map

package/dist/audit/providers/memory-journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-journal.js","sourceRoot":"","sources":["../../../src/audit/providers/memory-journal.ts"],"names":[],"mappings":"AAGA,SAAS,SAAS,CAAC,MAAsB;IACvC,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,GAAW;IACnD,OAAO,GAAG,QAAQ,KAAK,GAAG,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,UAAU,CAAC,IAAsB,EAAE,KAAuB;IACjE,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,KAAK,KAAK,CAAC;IAC3D,OAAO,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QACrC,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;QAC1C,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAChC,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAAC;AAC3C,CAAC;AAED,qFAAqF;AACrF,MAAM,OAAO,kBAAkB;IACpB,YAAY,GAAG;QACtB,UAAU,EAAE,WAAoB;QAChC,YAAY,EAAE,IAAa;QAC3B,WAAW,EAAE,IAAa;KAC3B,CAAC;IAEe,eAAe,GAAG,IAAI,GAAG,EAAgC,CAAC;IAC1D,oBAAoB,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC7D,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAEtD,KAAK,CAAC,OAAO,CAAC,MAAsB;QAClC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,QAAgB,EAChB,GAAW;QAEX,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAKtB;QACC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW;gBACrD,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE;gBACxC,CAAC,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,QAAQ,EAAE,CAAC;QACjD,CAAC;QAED,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC;YAChD,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;QAC/C,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAClB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,aAAa;YACzC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ;YACnC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW;SACrC,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,CAAC,SAAS,CAAC,KAAsB;QACrC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACrF,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK;gBAAE,SAAS;YACrE,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,IAAI,KAAK,CAAC,KAAK;gBAAE,OAAO;YAChE,OAAO,IAAI,CAAC,CAAC;YACb,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAsB;QACnC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;CACF"}

package/dist/audit/providers/observer.d.ts

@@ -0,0 +1,30 @@
+import { type AuditHasher, type AuditSigner } from '../crypto.js';
+import type { AuditLedgerRef, AuditObservationReceiptV1, ObservedAuditCheckpoint, SignedAuditCheckpointV1 } from '../types.js';
+export interface AuditCheckpointObserverProvider {
+    readonly capability: 'independent-observer';
+    publish(checkpoint: SignedAuditCheckpointV1): Promise<AuditObservationReceiptV1>;
+    latest(ledger: AuditLedgerRef): Promise<ObservedAuditCheckpoint | null>;
+    verifyObservation(checkpoint: SignedAuditCheckpointV1, receipt: AuditObservationReceiptV1): Promise<boolean>;
+}
+export interface MemoryAuditCheckpointObserverConfig {
+    observerId: string;
+    signer: AuditSigner;
+    hasher: AuditHasher;
+    clock: {
+        now(): number;
+    };
+    verifyCheckpoint(checkpoint: SignedAuditCheckpointV1): Promise<boolean>;
+    verifyConsistency(previous: SignedAuditCheckpointV1, next: SignedAuditCheckpointV1): Promise<boolean>;
+}
+export declare class MemoryAuditCheckpointObserver implements AuditCheckpointObserverProvider {
+    private readonly config;
+    readonly capability: "independent-observer";
+    private readonly observations;
+    private readonly publicationTails;
+    constructor(config: MemoryAuditCheckpointObserverConfig);
+    publish(checkpoint: SignedAuditCheckpointV1): Promise<AuditObservationReceiptV1>;
+    private publishSerialized;
+    latest(ledger: AuditLedgerRef): Promise<ObservedAuditCheckpoint | null>;
+    verifyObservation(checkpoint: SignedAuditCheckpointV1, receipt: AuditObservationReceiptV1): Promise<boolean>;
+}
+//# sourceMappingURL=observer.d.ts.map

package/dist/audit/providers/observer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observer.d.ts","sourceRoot":"","sources":["../../../src/audit/providers/observer.ts"],"names":[],"mappings":"AACA,OAAO,EAAkB,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAGlF,OAAO,KAAK,EACV,cAAc,EAEd,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;IAC5C,OAAO,CAAC,UAAU,EAAE,uBAAuB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACjF,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IACxE,iBAAiB,CACf,UAAU,EAAE,uBAAuB,EACnC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB;AAED,MAAM,WAAW,mCAAmC;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE;QAAE,GAAG,IAAI,MAAM,CAAA;KAAE,CAAC;IACzB,gBAAgB,CAAC,UAAU,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxE,iBAAiB,CACf,QAAQ,EAAE,uBAAuB,EACjC,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB;AAMD,qBAAa,6BAA8B,YAAW,+BAA+B;IAKvE,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJnC,QAAQ,CAAC,UAAU,EAAG,sBAAsB,CAAU;IACtD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA8C;IAC3E,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAoC;gBAExC,MAAM,EAAE,mCAAmC;IAElE,OAAO,CAAC,UAAU,EAAE,uBAAuB,GAAG,OAAO,CAAC,yBAAyB,CAAC;YAqBxE,iBAAiB;IAuEzB,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IAIvE,iBAAiB,CACrB,UAAU,EAAE,uBAAuB,EACnC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,OAAO,CAAC;CAQpB"}

package/dist/audit/providers/observer.js

@@ -0,0 +1,100 @@
+import { canonicalizeJsonBytes } from '../../utils/canonical-json.js';
+import { hashAuditValue } from '../crypto.js';
+import { AUDIT_DIGEST_DOMAINS } from '../integrity.js';
+import { AUDIT_ERROR_CODES, AuditProtocolError } from '../errors.js';
+function key(ledger) {
+    return `${ledger.ledgerId}\0${ledger.ledgerEpochId}`;
+}
+export class MemoryAuditCheckpointObserver {
+    config;
+    capability = 'independent-observer';
+    observations = new Map();
+    publicationTails = new Map();
+    constructor(config) {
+        this.config = config;
+    }
+    async publish(checkpoint) {
+        const publicationKey = key({
+            ledgerId: checkpoint.core.ledgerId,
+            ledgerEpochId: checkpoint.core.ledgerEpochId,
+        });
+        const previous = this.publicationTails.get(publicationKey) ?? Promise.resolve();
+        let release;
+        const gate = new Promise((resolve) => { release = resolve; });
+        const tail = previous.then(() => gate);
+        this.publicationTails.set(publicationKey, tail);
+        await previous;
+        try {
+            return await this.publishSerialized(checkpoint);
+        }
+        finally {
+            release();
+            if (this.publicationTails.get(publicationKey) === tail) {
+                this.publicationTails.delete(publicationKey);
+            }
+        }
+    }
+    async publishSerialized(checkpoint) {
+        if (!(await this.config.verifyCheckpoint(checkpoint))) {
+            throw new AuditProtocolError(AUDIT_ERROR_CODES.CHECKPOINT_INVALID, 'Observer rejected an invalid checkpoint');
+        }
+        const ledger = {
+            ledgerId: checkpoint.core.ledgerId,
+            ledgerEpochId: checkpoint.core.ledgerEpochId,
+        };
+        const existing = this.observations.get(key(ledger));
+        if (existing !== undefined) {
+            const previousSize = BigInt(existing.checkpoint.core.treeSize);
+            const nextSize = BigInt(checkpoint.core.treeSize);
+            if (nextSize < previousSize) {
+                throw new AuditProtocolError(AUDIT_ERROR_CODES.CHECKPOINT_ROLLBACK, 'Observed checkpoint tree size moved backwards');
+            }
+            if (nextSize === previousSize) {
+                if (checkpoint.core.rootDigest !== existing.checkpoint.core.rootDigest ||
+                    checkpoint.checkpointDigest !== existing.checkpoint.checkpointDigest) {
+                    throw new AuditProtocolError(AUDIT_ERROR_CODES.CHECKPOINT_CONFLICT, 'Conflicting checkpoint roots were observed at the same tree size');
+                }
+                return existing.receipt;
+            }
+            // Direct-successor linkage is deliberately not required: an observer that
+            // missed intermediate publications catches up on any gapped extension,
+            // as long as tree consistency with its last observation verifies
+            // cryptographically. The consistency proof, not the checkpoint chain
+            // link, is the split-view guarantee.
+            if (!(await this.config.verifyConsistency(existing.checkpoint, checkpoint))) {
+                throw new AuditProtocolError(AUDIT_ERROR_CODES.CHECKPOINT_CONFLICT, 'Checkpoint does not consistently extend the previously observed tree');
+            }
+        }
+        const core = {
+            schema: 'https://schema.kya-os.org/v1/protocol/audit/observation/v1.0.0',
+            observerId: this.config.observerId,
+            observer: this.config.signer.ref,
+            ledgerId: checkpoint.core.ledgerId,
+            ledgerEpochId: checkpoint.core.ledgerEpochId,
+            checkpointDigest: checkpoint.checkpointDigest,
+            treeSize: checkpoint.core.treeSize,
+            observedAt: this.config.clock.now(),
+            previousObservationDigest: existing?.receipt.observationDigest ?? null,
+        };
+        const observationDigest = await hashAuditValue(this.config.hasher, AUDIT_DIGEST_DOMAINS.observation, core);
+        const receipt = Object.freeze({
+            core: Object.freeze(core),
+            observationDigest,
+            jws: await this.config.signer.sign(canonicalizeJsonBytes(core)),
+        });
+        this.observations.set(key(ledger), { checkpoint, receipt });
+        return receipt;
+    }
+    async latest(ledger) {
+        return this.observations.get(key(ledger)) ?? null;
+    }
+    async verifyObservation(checkpoint, receipt) {
+        const observed = await this.latest({
+            ledgerId: checkpoint.core.ledgerId,
+            ledgerEpochId: checkpoint.core.ledgerEpochId,
+        });
+        return observed?.checkpoint.checkpointDigest === checkpoint.checkpointDigest &&
+            observed.receipt.observationDigest === receipt.observationDigest;
+    }
+}
+//# sourceMappingURL=observer.js.map

package/dist/audit/providers/observer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observer.js","sourceRoot":"","sources":["../../../src/audit/providers/observer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAsC,MAAM,cAAc,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AA+BrE,SAAS,GAAG,CAAC,MAAsB;IACjC,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,OAAO,6BAA6B;IAKX;IAJpB,UAAU,GAAG,sBAA+B,CAAC;IACrC,YAAY,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC1D,gBAAgB,GAAG,IAAI,GAAG,EAAyB,CAAC;IAErE,YAA6B,MAA2C;QAA3C,WAAM,GAAN,MAAM,CAAqC;IAAG,CAAC;IAE5E,KAAK,CAAC,OAAO,CAAC,UAAmC;QAC/C,MAAM,cAAc,GAAG,GAAG,CAAC;YACzB,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ;YAClC,aAAa,EAAE,UAAU,CAAC,IAAI,CAAC,aAAa;SAC7C,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAChF,IAAI,OAAoB,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,QAAQ,CAAC;QACf,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAClD,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;YACV,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,EAAE,CAAC;gBACvD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,UAAmC;QAEnC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,kBAAkB,EACpC,yCAAyC,CAC1C,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG;YACb,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ;YAClC,aAAa,EAAE,UAAU,CAAC,IAAI,CAAC,aAAa;SAC7C,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QACpD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAClD,IAAI,QAAQ,GAAG,YAAY,EAAE,CAAC;gBAC5B,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,mBAAmB,EACrC,+CAA+C,CAChD,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAC9B,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU;oBACpE,UAAU,CAAC,gBAAgB,KAAK,QAAQ,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC;oBACvE,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,mBAAmB,EACrC,kEAAkE,CACnE,CAAC;gBACJ,CAAC;gBACD,OAAO,QAAQ,CAAC,OAAO,CAAC;YAC1B,CAAC;YACD,0EAA0E;YAC1E,uEAAuE;YACvE,iEAAiE;YACjE,qEAAqE;YACrE,qCAAqC;YACrC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;gBAC5E,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,mBAAmB,EACrC,sEAAsE,CACvE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAkC;YAC1C,MAAM,EAAE,gEAAgE;YACxE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YAClC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG;YAChC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ;YAClC,aAAa,EAAE,UAAU,CAAC,IAAI,CAAC,aAAa;YAC5C,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;YAC7C,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ;YAClC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;YACnC,yBAAyB,EAAE,QAAQ,EAAE,OAAO,CAAC,iBAAiB,IAAI,IAAI;SACvE,CAAC;QACF,MAAM,iBAAiB,GAAG,MAAM,cAAc,CAC5C,IAAI,CAAC,MAAM,CAAC,MAAM,EAClB,oBAAoB,CAAC,WAAW,EAChC,IAAI,CACL,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;YAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YACzB,iBAAiB;YACjB,GAAG,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;SAChE,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAsB;QACjC,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,UAAmC,EACnC,OAAkC;QAElC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YACjC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ;YAClC,aAAa,EAAE,UAAU,CAAC,IAAI,CAAC,aAAa;SAC7C,CAAC,CAAC;QACH,OAAO,QAAQ,EAAE,UAAU,CAAC,gBAAgB,KAAK,UAAU,CAAC,gBAAgB;YAC1E,QAAQ,CAAC,OAAO,CAAC,iBAAiB,KAAK,OAAO,CAAC,iBAAiB,CAAC;IACrE,CAAC;CACF"}

package/dist/audit/providers/outbox.d.ts

@@ -0,0 +1,37 @@
+import type { AuditRecorderSubmission } from './recorder-client.js';
+export interface AuditOutboxItem {
+    eventId: string;
+    submission: AuditRecorderSubmission;
+    enqueuedAt: number;
+    /** Persisted delivery failures; durable adapters use this for retry and DLQ policy. */
+    attempts: number;
+}
+export interface AuditOutboxProvider {
+    readonly capabilities: {
+        durability: 'ephemeral' | 'durable';
+        /** `pending()` yields enqueue order within each producer source. */
+        fifoPerSource: true;
+    };
+    enqueue(item: AuditOutboxItem): Promise<void>;
+    /**
+     * Eligible items MUST be yielded FIFO for each `producerEvent.source.sourceId`.
+     * The provider owns retry scheduling/caps and excludes dead-lettered items.
+     */
+    pending(limit?: number): AsyncIterable<AuditOutboxItem>;
+    markDelivered(eventId: string): Promise<void>;
+    /** Persist the failure and apply the provider's configured retry/DLQ policy. */
+    markFailed(eventId: string, error: unknown): Promise<void>;
+}
+/** Development-only outbox. Buffered assurance requires a durable adapter. */
+export declare class MemoryAuditOutbox implements AuditOutboxProvider {
+    readonly capabilities: {
+        durability: "ephemeral";
+        fifoPerSource: true;
+    };
+    private readonly items;
+    enqueue(item: AuditOutboxItem): Promise<void>;
+    pending(limit?: number): AsyncIterable<AuditOutboxItem>;
+    markDelivered(eventId: string): Promise<void>;
+    markFailed(eventId: string): Promise<void>;
+}
+//# sourceMappingURL=outbox.d.ts.map

package/dist/audit/providers/outbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox.d.ts","sourceRoot":"","sources":["../../../src/audit/providers/outbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAGpE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,uBAAuB,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,uFAAuF;IACvF,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,YAAY,EAAE;QACrB,UAAU,EAAE,WAAW,GAAG,SAAS,CAAC;QACpC,oEAAoE;QACpE,aAAa,EAAE,IAAI,CAAC;KACrB,CAAC;IACF,OAAO,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C;;;OAGG;IACH,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC,eAAe,CAAC,CAAC;IACxD,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,gFAAgF;IAChF,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D;AAED,8EAA8E;AAC9E,qBAAa,iBAAkB,YAAW,mBAAmB;IAC3D,QAAQ,CAAC,YAAY;;;MAAsE;IAC3F,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAsC;IAEtD,OAAO,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAW5C,OAAO,CAAC,KAAK,SAA0B,GAAG,aAAa,CAAC,eAAe,CAAC;IASzE,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7C,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAIjD"}

package/dist/audit/providers/outbox.js

@@ -0,0 +1,52 @@
+import { canonicalizeJson } from '../../utils/canonical-json.js';
+/** Development-only outbox. Buffered assurance requires a durable adapter. */
+export class MemoryAuditOutbox {
+    capabilities = { durability: 'ephemeral', fifoPerSource: true };
+    items = new Map();
+    async enqueue(item) {
+        const existing = this.items.get(item.eventId);
+        if (existing !== undefined) {
+            if (!sameSubmission(existing.submission, item.submission)) {
+                throw new Error(`Audit outbox event identity collision: ${item.eventId}`);
+            }
+            return;
+        }
+        this.items.set(item.eventId, item);
+    }
+    async *pending(limit = Number.MAX_SAFE_INTEGER) {
+        let count = 0;
+        for (const item of [...this.items.values()]) {
+            if (count >= limit)
+                return;
+            count += 1;
+            yield item;
+        }
+    }
+    async markDelivered(eventId) {
+        this.items.delete(eventId);
+    }
+    async markFailed(eventId) {
+        const item = this.items.get(eventId);
+        if (item !== undefined)
+            this.items.set(eventId, { ...item, attempts: item.attempts + 1 });
+    }
+}
+function sameSubmission(left, right) {
+    if (left.ledgerId !== right.ledgerId ||
+        left.expectedLedgerEpochId !== right.expectedLedgerEpochId ||
+        canonicalizeJson(left.producerEvent) !== canonicalizeJson(right.producerEvent) ||
+        left.encryptedEvidence.length !== right.encryptedEvidence.length)
+        return false;
+    return left.encryptedEvidence.every((item, index) => {
+        const other = right.encryptedEvidence[index];
+        if (other === undefined || canonicalizeJson(item.ref) !== canonicalizeJson(other.ref) ||
+            item.ciphertext.byteLength !== other.ciphertext.byteLength)
+            return false;
+        let difference = 0;
+        for (let offset = 0; offset < item.ciphertext.byteLength; offset += 1) {
+            difference |= item.ciphertext[offset] ^ other.ciphertext[offset];
+        }
+        return difference === 0;
+    });
+}
+//# sourceMappingURL=outbox.js.map

package/dist/audit/providers/outbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox.js","sourceRoot":"","sources":["../../../src/audit/providers/outbox.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AA2BjE,8EAA8E;AAC9E,MAAM,OAAO,iBAAiB;IACnB,YAAY,GAAG,EAAE,UAAU,EAAE,WAAoB,EAAE,aAAa,EAAE,IAAa,EAAE,CAAC;IAC1E,KAAK,GAAG,IAAI,GAAG,EAA2B,CAAC;IAE5D,KAAK,CAAC,OAAO,CAAC,IAAqB;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,gBAAgB;QAC5C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YAC5C,IAAI,KAAK,IAAI,KAAK;gBAAE,OAAO;YAC3B,KAAK,IAAI,CAAC,CAAC;YACX,MAAM,IAAI,CAAC;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAe;QACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAe;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;CACF;AAED,SAAS,cAAc,CAAC,IAA6B,EAAE,KAA8B;IACnF,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAClC,IAAI,CAAC,qBAAqB,KAAK,KAAK,CAAC,qBAAqB;QAC1D,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,gBAAgB,CAAC,KAAK,CAAC,aAAa,CAAC;QAC9E,IAAI,CAAC,iBAAiB,CAAC,MAAM,KAAK,KAAK,CAAC,iBAAiB,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACjF,OAAO,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,KAAK,KAAK,SAAS,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC;YACnF,IAAI,CAAC,UAAU,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAC3E,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;YACtE,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAE,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAE,CAAC;QACrE,CAAC;QACD,OAAO,UAAU,KAAK,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/audit/providers/recorder-client.d.ts

@@ -0,0 +1,22 @@
+import type { EncryptedEvidenceInput } from './evidence.js';
+import type { AuditProducerEventCoreV1, SignedAuditEntryV1 } from '../types.js';
+import { AuditRecorderService, type AuditRecorderServiceConfig, type AuthenticatedAuditSubmissionContext } from '../recorder-service.js';
+export interface AuditRecorderSubmission {
+    ledgerId: string;
+    expectedLedgerEpochId?: string;
+    producerEvent: AuditProducerEventCoreV1;
+    encryptedEvidence: readonly EncryptedEvidenceInput[];
+}
+/** Producer-facing port. Authority fields are deliberately absent. */
+export interface AuditRecorderClient {
+    submit(input: AuditRecorderSubmission): Promise<SignedAuditEntryV1>;
+}
+export declare class LocalAuditRecorderClient implements AuditRecorderClient {
+    private readonly recorder;
+    private readonly context;
+    constructor(recorder: AuditRecorderService, context: () => AuthenticatedAuditSubmissionContext | Promise<AuthenticatedAuditSubmissionContext>);
+    submit(input: AuditRecorderSubmission): Promise<SignedAuditEntryV1>;
+}
+/** One-call composition helper for an in-process authoritative recorder. */
+export declare function createLocalAuditRecorder(configuration: AuditRecorderServiceConfig, context: () => AuthenticatedAuditSubmissionContext | Promise<AuthenticatedAuditSubmissionContext>): AuditRecorderClient;
+//# sourceMappingURL=recorder-client.d.ts.map

package/dist/audit/providers/recorder-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recorder-client.d.ts","sourceRoot":"","sources":["../../../src/audit/providers/recorder-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,KAAK,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,EACL,oBAAoB,EACpB,KAAK,0BAA0B,EAC/B,KAAK,mCAAmC,EACzC,MAAM,wBAAwB,CAAC;AAEhC,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,aAAa,EAAE,wBAAwB,CAAC;IACxC,iBAAiB,EAAE,SAAS,sBAAsB,EAAE,CAAC;CACtD;AAED,sEAAsE;AACtE,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACrE;AAED,qBAAa,wBAAyB,YAAW,mBAAmB;IAEhE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,QAAQ,EAAE,oBAAoB,EAC9B,OAAO,EAAE,MACtB,mCAAmC,GACnC,OAAO,CAAC,mCAAmC,CAAC;IAG5C,MAAM,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAG1E;AAED,4EAA4E;AAC5E,wBAAgB,wBAAwB,CACtC,aAAa,EAAE,0BAA0B,EACzC,OAAO,EAAE,MACL,mCAAmC,GACnC,OAAO,CAAC,mCAAmC,CAAC,GAC/C,mBAAmB,CAErB"}

package/dist/audit/providers/recorder-client.js

@@ -0,0 +1,17 @@
+import { AuditRecorderService, } from '../recorder-service.js';
+export class LocalAuditRecorderClient {
+    recorder;
+    context;
+    constructor(recorder, context) {
+        this.recorder = recorder;
+        this.context = context;
+    }
+    async submit(input) {
+        return this.recorder.submitAuthenticated(input, await this.context());
+    }
+}
+/** One-call composition helper for an in-process authoritative recorder. */
+export function createLocalAuditRecorder(configuration, context) {
+    return new LocalAuditRecorderClient(new AuditRecorderService(configuration), context);
+}
+//# sourceMappingURL=recorder-client.js.map

package/dist/audit/providers/recorder-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recorder-client.js","sourceRoot":"","sources":["../../../src/audit/providers/recorder-client.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,oBAAoB,GAGrB,MAAM,wBAAwB,CAAC;AAchC,MAAM,OAAO,wBAAwB;IAEhB;IACA;IAFnB,YACmB,QAA8B,EAC9B,OAE+B;QAH/B,aAAQ,GAAR,QAAQ,CAAsB;QAC9B,YAAO,GAAP,OAAO,CAEwB;IAC/C,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,KAA8B;QACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACxE,CAAC;CACF;AAED,4EAA4E;AAC5E,MAAM,UAAU,wBAAwB,CACtC,aAAyC,EACzC,OAEgD;IAEhD,OAAO,IAAI,wBAAwB,CAAC,IAAI,oBAAoB,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC;AACxF,CAAC"}

package/dist/audit/providers/source-state.d.ts

@@ -0,0 +1,37 @@
+import type { Digest } from '../types.js';
+export interface AuditSourceState {
+    sourceId: string;
+    highestEmitted: string;
+    highestReceipted: string;
+    pendingSequences: string[];
+}
+export interface AuditSourceStateProvider {
+    readonly capabilities: {
+        durability: 'ephemeral' | 'durable';
+        atomicClaim: true;
+    };
+    claimEvent(sourceId: string, eventId: string): Promise<{
+        sequence: string;
+        previousSourceEventDigest?: Digest;
+    }>;
+    markEmitted(sourceId: string, eventId: string, sequence: string, eventDigest: Digest): Promise<void>;
+    markReceipted(sourceId: string, sequence: string, entryDigest: Digest): Promise<void>;
+    getState(sourceId: string): Promise<AuditSourceState>;
+}
+/** In-process reference source-watermark state. Production AAP-3 needs durability. */
+export declare class MemoryAuditSourceState implements AuditSourceStateProvider {
+    readonly capabilities: {
+        durability: "ephemeral";
+        atomicClaim: true;
+    };
+    private readonly states;
+    claimEvent(sourceId: string, eventId: string): Promise<{
+        sequence: string;
+        previousSourceEventDigest?: Digest;
+    }>;
+    markEmitted(sourceId: string, eventId: string, sequence: string, eventDigest: Digest): Promise<void>;
+    markReceipted(sourceId: string, sequence: string): Promise<void>;
+    getState(sourceId: string): Promise<AuditSourceState>;
+    private state;
+}
+//# sourceMappingURL=source-state.d.ts.map

package/dist/audit/providers/source-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-state.d.ts","sourceRoot":"","sources":["../../../src/audit/providers/source-state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,YAAY,EAAE;QAAE,UAAU,EAAE,WAAW,GAAG,SAAS,CAAC;QAAC,WAAW,EAAE,IAAI,CAAA;KAAE,CAAC;IAClF,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QACrD,QAAQ,EAAE,MAAM,CAAC;QACjB,yBAAyB,CAAC,EAAE,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrG,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtF,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACvD;AAUD,sFAAsF;AACtF,qBAAa,sBAAuB,YAAW,wBAAwB;IACrE,QAAQ,CAAC,YAAY;;;MAAoE;IACzF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAE1D,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAC3D,QAAQ,EAAE,MAAM,CAAC;QACjB,yBAAyB,CAAC,EAAE,MAAM,CAAC;KACpC,CAAC;IA0BI,WAAW,CACf,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAYV,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBhE,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAc3D,OAAO,CAAC,KAAK;CAad"}

package/dist/audit/providers/source-state.js

@@ -0,0 +1,94 @@
+/** In-process reference source-watermark state. Production AAP-3 needs durability. */
+export class MemoryAuditSourceState {
+    capabilities = { durability: 'ephemeral', atomicClaim: true };
+    states = new Map();
+    async claimEvent(sourceId, eventId) {
+        const state = this.state(sourceId);
+        const existing = state.claims.get(eventId);
+        if (existing !== undefined) {
+            return {
+                sequence: existing.sequence.toString(),
+                ...(existing.previousSourceEventDigest === undefined
+                    ? {}
+                    : { previousSourceEventDigest: existing.previousSourceEventDigest }),
+            };
+        }
+        state.next += 1n;
+        const previousSourceEventDigest = state.eventDigests.get(state.next - 1n);
+        const claim = {
+            sequence: state.next,
+            ...(previousSourceEventDigest === undefined ? {} : { previousSourceEventDigest }),
+        };
+        state.claims.set(eventId, claim);
+        return {
+            sequence: claim.sequence.toString(),
+            ...(claim.previousSourceEventDigest === undefined
+                ? {}
+                : { previousSourceEventDigest: claim.previousSourceEventDigest }),
+        };
+    }
+    async markEmitted(sourceId, eventId, sequence, eventDigest) {
+        const state = this.state(sourceId);
+        const parsed = BigInt(sequence);
+        const claim = state.claims.get(eventId);
+        if (claim?.sequence !== parsed)
+            throw new RangeError('Unknown source event claim');
+        const existing = state.eventDigests.get(parsed);
+        if (existing !== undefined && existing !== eventDigest) {
+            throw new Error(`Source event identity collision: ${eventId}`);
+        }
+        state.eventDigests.set(parsed, eventDigest);
+    }
+    async markReceipted(sourceId, sequence) {
+        const parsed = BigInt(sequence);
+        const state = this.state(sourceId);
+        if (parsed < 1n || parsed > state.next)
+            throw new RangeError('Unknown source sequence');
+        if (parsed <= state.receiptedWatermark)
+            return;
+        state.receipted.add(parsed);
+        while (state.receipted.delete(state.receiptedWatermark + 1n)) {
+            state.receiptedWatermark += 1n;
+        }
+        // Keep only the current watermark's claim/digest plus unresolved entries.
+        // This bounds the reference adapter by the outstanding delivery window,
+        // while retaining the digest needed to link the next producer event.
+        for (const [eventId, claim] of state.claims) {
+            if (claim.sequence < state.receiptedWatermark)
+                state.claims.delete(eventId);
+        }
+        for (const sequenceNumber of state.eventDigests.keys()) {
+            if (sequenceNumber < state.receiptedWatermark)
+                state.eventDigests.delete(sequenceNumber);
+        }
+    }
+    async getState(sourceId) {
+        const state = this.state(sourceId);
+        const pendingSequences = [];
+        for (let sequence = state.receiptedWatermark + 1n; sequence <= state.next; sequence += 1n) {
+            if (!state.receipted.has(sequence))
+                pendingSequences.push(sequence.toString());
+        }
+        return {
+            sourceId,
+            highestEmitted: state.next.toString(),
+            highestReceipted: state.receiptedWatermark.toString(),
+            pendingSequences,
+        };
+    }
+    state(sourceId) {
+        const existing = this.states.get(sourceId);
+        if (existing !== undefined)
+            return existing;
+        const created = {
+            next: 0n,
+            receiptedWatermark: 0n,
+            receipted: new Set(),
+            claims: new Map(),
+            eventDigests: new Map(),
+        };
+        this.states.set(sourceId, created);
+        return created;
+    }
+}
+//# sourceMappingURL=source-state.js.map

package/dist/audit/providers/source-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-state.js","sourceRoot":"","sources":["../../../src/audit/providers/source-state.ts"],"names":[],"mappings":"AA4BA,sFAAsF;AACtF,MAAM,OAAO,sBAAsB;IACxB,YAAY,GAAG,EAAE,UAAU,EAAE,WAAoB,EAAE,WAAW,EAAE,IAAa,EAAE,CAAC;IACxE,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;IAEhE,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,OAAe;QAIhD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO;gBACL,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE;gBACtC,GAAG,CAAC,QAAQ,CAAC,yBAAyB,KAAK,SAAS;oBAClD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,yBAAyB,EAAE,QAAQ,CAAC,yBAAyB,EAAE,CAAC;aACvE,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;QACjB,MAAM,yBAAyB,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG;YACZ,QAAQ,EAAE,KAAK,CAAC,IAAI;YACpB,GAAG,CAAC,yBAAyB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,yBAAyB,EAAE,CAAC;SAClF,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjC,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE;YACnC,GAAG,CAAC,KAAK,CAAC,yBAAyB,KAAK,SAAS;gBAC/C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,yBAAyB,EAAE,KAAK,CAAC,yBAAyB,EAAE,CAAC;SACpE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CACf,QAAgB,EAChB,OAAe,EACf,QAAgB,EAChB,WAAmB;QAEnB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,EAAE,QAAQ,KAAK,MAAM;YAAE,MAAM,IAAI,UAAU,CAAC,4BAA4B,CAAC,CAAC;QACnF,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,QAAgB;QACpD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,MAAM,GAAG,EAAE,IAAI,MAAM,GAAG,KAAK,CAAC,IAAI;YAAE,MAAM,IAAI,UAAU,CAAC,yBAAyB,CAAC,CAAC;QACxF,IAAI,MAAM,IAAI,KAAK,CAAC,kBAAkB;YAAE,OAAO;QAC/C,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,EAAE,CAAC,EAAE,CAAC;YAC7D,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC;QACjC,CAAC;QAED,0EAA0E;QAC1E,wEAAwE;QACxE,qEAAqE;QACrE,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5C,IAAI,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,kBAAkB;gBAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9E,CAAC;QACD,KAAK,MAAM,cAAc,IAAI,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YACvD,IAAI,cAAc,GAAG,KAAK,CAAC,kBAAkB;gBAAE,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,gBAAgB,GAAa,EAAE,CAAC;QACtC,KAAK,IAAI,QAAQ,GAAG,KAAK,CAAC,kBAAkB,GAAG,EAAE,EAAE,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC1F,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO;YACL,QAAQ;YACR,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;YACrC,gBAAgB,EAAE,KAAK,CAAC,kBAAkB,CAAC,QAAQ,EAAE;YACrD,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,QAAgB;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG;YACd,IAAI,EAAE,EAAE;YACR,kBAAkB,EAAE,EAAE;YACtB,SAAS,EAAE,IAAI,GAAG,EAAU;YAC5B,MAAM,EAAE,IAAI,GAAG,EAAoE;YACnF,YAAY,EAAE,IAAI,GAAG,EAAkB;SACxC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}