@kya-os/mcp 1.16.1 → 1.17.0

package/dist/audit/checkpoint.js

@@ -65,12 +65,59 @@ export class AuditCheckpointBuilder {
     options;
     tree;
     clock;
+    ledgerTails = new Map();
+    /** Per ledger, stored checkpoints whose lifecycle hook has not completed, oldest first. */
+    failedHooks = new Map();
     constructor(options) {
         this.options = options;
         this.tree = new Rfc9162MerkleTree(options.hasher);
         this.clock = options.clock ?? Date;
     }
     async createCheckpoint(ledger) {
+        // Serialized per ledger so concurrent calls chain to each other in tree-size
+        // order instead of both chaining to the same predecessor. The lifecycle hook
+        // runs outside the lock because it typically appends to the same journal.
+        const { checkpoint, inserted } = await this.serialized(ledger, () => this.storeCheckpoint(ledger));
+        const hook = this.options.onCheckpointCreated;
+        if (hook === undefined)
+            return checkpoint;
+        // A stored checkpoint is never inserted again, so a hook that failed would
+        // otherwise be lost. Failed hooks run again first, in order, on the next
+        // call, whether or not the ledger has grown since.
+        const key = ledgerKey(ledger);
+        const due = this.failedHooks.get(key) ?? [];
+        this.failedHooks.delete(key);
+        if (inserted)
+            due.push(checkpoint);
+        for (let index = 0; index < due.length; index += 1) {
+            try {
+                await hook(due[index]);
+            }
+            catch (error) {
+                this.failedHooks.set(key, [...due.slice(index), ...(this.failedHooks.get(key) ?? [])]);
+                throw error;
+            }
+        }
+        return checkpoint;
+    }
+    async serialized(ledger, operation) {
+        const key = ledgerKey(ledger);
+        const previous = this.ledgerTails.get(key) ?? Promise.resolve();
+        let release;
+        const gate = new Promise((resolve) => { release = resolve; });
+        const tail = previous.then(() => gate);
+        this.ledgerTails.set(key, tail);
+        await previous;
+        try {
+            return await operation();
+        }
+        finally {
+            release();
+            if (this.ledgerTails.get(key) === tail)
+                this.ledgerTails.delete(key);
+        }
+    }
+    async storeCheckpoint(ledger) {
         const entries = await this.snapshotAtHead(ledger);
         if (entries.length === 0) {
             throw new AuditProtocolError(AUDIT_ERROR_CODES.CHECKPOINT_INVALID, 'Cannot checkpoint an empty audit epoch');
@@ -78,19 +125,35 @@ export class AuditCheckpointBuilder {
         const treeSize = String(entries.length);
         const previous = await this.options.store.getLatest(ledger);
         if (previous !== null) {
-            const previousSize = parseDecimal(previous.core.treeSize, 'Previous tree size');
-            if (previousSize > BigInt(entries.length)) {
-                throw new AuditProtocolError(AUDIT_ERROR_CODES.CHECKPOINT_ROLLBACK, 'Journal tree size is behind the latest signed checkpoint');
-            }
-            if (previousSize === BigInt(entries.length)) {
-                const currentRoot = await this.tree.root(entries.map((entry) => entry.entryDigest));
-                if (previous.core.rootDigest !== currentRoot ||
-                    previous.core.headEntryDigest !== entries[entries.length - 1].entryDigest) {
-                    throw new AuditProtocolError(AUDIT_ERROR_CODES.CHECKPOINT_CONFLICT, 'Journal content forked at the latest checkpointed tree size');
-                }
-                return previous;
-            }
+            await this.assertExtends(previous, entries);
+            if (previous.core.treeSize === treeSize)
+                return { checkpoint: previous, inserted: false };
+        }
+        const result = await this.options.store.putIfAbsent(await this.signCheckpoint(ledger, entries, previous));
+        if (result.kind === 'conflict') {
+            throw new AuditProtocolError(AUDIT_ERROR_CODES.CHECKPOINT_CONFLICT, 'A different checkpoint already exists at this tree size', { treeSize });
+        }
+        return { checkpoint: result.checkpoint, inserted: result.kind === 'inserted' };
+    }
+    /**
+     * A journal that has grown since the latest checkpoint must still hold that
+     * checkpoint's exact tree as its prefix. Otherwise the history was rewritten
+     * or restored, and chaining a new checkpoint to it would sign a split view.
+     */
+    async assertExtends(previous, entries) {
+        const previousSize = parseDecimal(previous.core.treeSize, 'Previous tree size');
+        if (previousSize > BigInt(entries.length)) {
+            throw new AuditProtocolError(AUDIT_ERROR_CODES.CHECKPOINT_ROLLBACK, 'Journal tree size is behind the latest signed checkpoint');
         }
+        const prefix = entries.slice(0, Number(previousSize));
+        const prefixRoot = await this.tree.root(prefix.map((entry) => entry.entryDigest));
+        if (previous.core.rootDigest !== prefixRoot ||
+            previous.core.headEntryDigest !== prefix[prefix.length - 1]?.entryDigest) {
+            throw new AuditProtocolError(AUDIT_ERROR_CODES.CHECKPOINT_CONFLICT, 'Journal content forked at or below the latest checkpointed tree size', { treeSize: previous.core.treeSize });
+        }
+    }
+    async signCheckpoint(ledger, entries, previous) {
+        const treeSize = String(entries.length);
         const first = entries[0];
         const last = entries[entries.length - 1];
         const core = parseAuditCheckpointCore({
@@ -108,19 +171,11 @@ export class AuditCheckpointBuilder {
             integritySuite: CHECKPOINT_SUITE,
         });
         const checkpointDigest = await hashAuditValue(this.options.hasher, AUDIT_DIGEST_DOMAINS.checkpoint, core);
-        const candidate = deepFreeze({
+        return deepFreeze({
             core,
             checkpointDigest,
             jws: await this.options.signer.sign(canonicalizeJsonBytes(core)),
         });
-        const result = await this.options.store.putIfAbsent(candidate);
-        if (result.kind === 'conflict') {
-            throw new AuditProtocolError(AUDIT_ERROR_CODES.CHECKPOINT_CONFLICT, 'A different checkpoint already exists at this tree size', { treeSize });
-        }
-        if (result.kind === 'inserted') {
-            await this.options.onCheckpointCreated?.(result.checkpoint);
-        }
-        return result.checkpoint;
     }
     async inclusionProof(ledger, sequence, checkpoint) {
         this.assertCheckpointLedger(ledger, checkpoint);

package/dist/audit/checkpoint.js.map

@@ -1 +1 @@
-{"version":3,"file":"checkpoint.js","sourceRoot":"","sources":["../../src/audit/checkpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAYxD,MAAM,iBAAiB,GACrB,+DAAwE,CAAC;AAC3E,MAAM,gBAAgB,GAAG,mCAA4C,CAAC;AAEtE,SAAS,SAAS,CAAC,MAAsB;IACvC,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,aAAa,CAAC,MAAsB,EAAE,QAAuB;IACpE,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,KAAoB,EAAE,KAAa;IACvD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,kBAAkB,EACpC,GAAG,KAAK,kDAAkD,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa;IAChD,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,kBAAkB,EACpC,GAAG,KAAK,2DAA2D,CACpE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAgBD,wFAAwF;AACxF,MAAM,OAAO,0BAA0B;IACpB,WAAW,GAAG,IAAI,GAAG,EAAmC,CAAC;IACzD,MAAM,GAAG,IAAI,GAAG,EAAmC,CAAC;IAErE,KAAK,CAAC,SAAS,CAAC,MAAsB;QACpC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,MAAsB,EACtB,QAAuB;QAEvB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,UAAmC;QACnD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC;QAC/B,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,QAAQ,CAAC,gBAAgB,KAAK,UAAU,CAAC,gBAAgB;gBAC9D,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE;gBAC5C,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;QACjD,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,IAAI,OAAO,KAAK,SAAS;YACvB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAClD,CAAC;CACF;AAWD,sFAAsF;AACtF,MAAM,OAAO,sBAAsB;IAIJ;IAHZ,IAAI,CAAoB;IACxB,KAAK,CAAoB;IAE1C,YAA6B,OAAsC;QAAtC,YAAO,GAAP,OAAO,CAA+B;QACjE,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAsB;QAC3C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,kBAAkB,EACpC,wCAAwC,CACzC,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;YAChF,IAAI,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,mBAAmB,EACrC,0DAA0D,CAC3D,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;gBACpF,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,KAAK,WAAW;oBAC1C,QAAQ,CAAC,IAAI,CAAC,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;oBAC7E,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,mBAAmB,EACrC,6DAA6D,CAC9D,CAAC;gBACJ,CAAC;gBACD,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,wBAAwB,CAAC;YACpC,MAAM,EAAE,iBAAiB;YACzB,YAAY,EAAE,cAAc,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,aAAa,IAAI,QAAQ,EAAE;YACjF,GAAG,MAAM;YACT,QAAQ;YACR,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;YAClC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;YAChC,UAAU,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC3E,eAAe,EAAE,IAAI,CAAC,WAAW;YACjC,wBAAwB,EAAE,QAAQ,EAAE,gBAAgB,IAAI,IAAI;YAC5D,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG;YAC/B,cAAc,EAAE,gBAAgB;SACjC,CAAC,CAAC;QACH,MAAM,gBAAgB,GAAG,MAAM,cAAc,CAC3C,IAAI,CAAC,OAAO,CAAC,MAAM,EACnB,oBAAoB,CAAC,UAAU,EAC/B,IAAI,CACL,CAAC;QACF,MAAM,SAAS,GAAG,UAAU,CAAC;YAC3B,IAAI;YACJ,gBAAgB;YAChB,GAAG,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;SACjE,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,mBAAmB,EACrC,yDAAyD,EACzD,EAAE,QAAQ,EAAE,CACb,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,MAAM,CAAC,UAAU,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,MAAsB,EACtB,QAAuB,EACvB,UAAmC;QAEnC,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAC7E,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,kBAAkB,EACpC,4CAA4C,EAC5C,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,CACjD,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC;YAChB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC;YACxB,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ;YAClC,SAAS,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CACvC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,EACzC,KAAK,CACN;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,MAAsB,EACtB,WAA0B,EAC1B,UAAmC;QAEnC,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,eAAe,CAAC,CAAC;QAC1F,OAAO,UAAU,CAAC;YAChB,WAAW;YACX,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ;YACrC,SAAS,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,CACzC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,EACzC,OAAO,CACR;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAsB,EAAE,QAAuB;QAChE,MAAM,IAAI,GAAG,YAAY,CAAC,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;QAC5E,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,kBAAkB,EACpC,mDAAmD,EACnD,EAAE,QAAQ,EAAE,CACb,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,WAAmB,EACnB,UAAmC,EACnC,KAAkC;QAElC,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9D,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;YAC/B,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,YAAY,CAAC;YAClF,QAAQ,EAAE,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC;YAC9E,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,UAAU;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAKvB;QACC,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;YAC/C,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC3E,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC;YACjC,OAAO,EAAE,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,eAAe,CAAC;YACxF,OAAO,EAAE,YAAY,CACnB,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,EAC7D,eAAe,CAChB;YACD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU;YACzC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS;SACjC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,MAAsB;QACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,YAAY,CAChC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,uBAAuB,CAAC,GAAG,EAAE,EACzD,mBAAmB,CACpB,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,IAAI,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/E,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,eAAe,EACjC,oEAAoE,CACrE,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,MAAsB,EACtB,UAAmC;QAEnC,MAAM,IAAI,GAAG,YAAY,CACvB,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,EAC9D,sBAAsB,CACvB,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,WAAW;YACrE,UAAU,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAClC,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,kBAAkB,EACpC,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,MAAsB,EACtB,KAAa;QAEb,MAAM,MAAM,GAAyB,EAAE,CAAC;QACxC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YAC/E,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,eAAe,EACjC,0DAA0D,CAC3D,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,sBAAsB,CAC5B,MAAsB,EACtB,UAAmC;QAEnC,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;YAC9C,UAAU,CAAC,IAAI,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YACzD,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,eAAe,EACjC,mDAAmD,CACpD,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"checkpoint.js","sourceRoot":"","sources":["../../src/audit/checkpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAYxD,MAAM,iBAAiB,GACrB,+DAAwE,CAAC;AAC3E,MAAM,gBAAgB,GAAG,mCAA4C,CAAC;AAEtE,SAAS,SAAS,CAAC,MAAsB;IACvC,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,aAAa,CAAC,MAAsB,EAAE,QAAuB;IACpE,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,KAAoB,EAAE,KAAa;IACvD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,kBAAkB,EACpC,GAAG,KAAK,kDAAkD,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa;IAChD,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,kBAAkB,EACpC,GAAG,KAAK,2DAA2D,CACpE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAgBD,wFAAwF;AACxF,MAAM,OAAO,0BAA0B;IACpB,WAAW,GAAG,IAAI,GAAG,EAAmC,CAAC;IACzD,MAAM,GAAG,IAAI,GAAG,EAAmC,CAAC;IAErE,KAAK,CAAC,SAAS,CAAC,MAAsB;QACpC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,MAAsB,EACtB,QAAuB;QAEvB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,UAAmC;QACnD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC;QAC/B,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,QAAQ,CAAC,gBAAgB,KAAK,UAAU,CAAC,gBAAgB;gBAC9D,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE;gBAC5C,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;QACjD,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,IAAI,OAAO,KAAK,SAAS;YACvB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAClD,CAAC;CACF;AAgBD,sFAAsF;AACtF,MAAM,OAAO,sBAAsB;IAOJ;IANZ,IAAI,CAAoB;IACxB,KAAK,CAAoB;IACzB,WAAW,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChE,2FAA2F;IAC1E,WAAW,GAAG,IAAI,GAAG,EAAqC,CAAC;IAE5E,YAA6B,OAAsC;QAAtC,YAAO,GAAP,OAAO,CAA+B;QACjE,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAsB;QAC3C,6EAA6E;QAC7E,6EAA6E;QAC7E,0EAA0E;QAC1E,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CACpD,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CACnC,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC9C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,UAAU,CAAC;QAC1C,2EAA2E;QAC3E,yEAAyE;QACzE,mDAAmD;QACnD,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC,CAAC;YAC1B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBACvF,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,UAAU,CAAI,MAAsB,EAAE,SAA2B;QAC7E,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAChE,IAAI,OAAoB,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAChC,MAAM,QAAQ,CAAC;QACf,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,EAAE,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;YACV,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,MAAsB;QAEtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,kBAAkB,EACpC,wCAAwC,CACzC,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC5C,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC5F,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CACjD,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CACrD,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,mBAAmB,EACrC,yDAAyD,EACzD,EAAE,QAAQ,EAAE,CACb,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;IACjF,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,aAAa,CACzB,QAAiC,EACjC,OAAsC;QAEtC,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QAChF,IAAI,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,mBAAmB,EACrC,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QAClF,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU;YACzC,QAAQ,CAAC,IAAI,CAAC,eAAe,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YAC3E,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,mBAAmB,EACrC,sEAAsE,EACtE,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CACrC,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,MAAsB,EACtB,OAAsC,EACtC,QAAwC;QAExC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,wBAAwB,CAAC;YACpC,MAAM,EAAE,iBAAiB;YACzB,YAAY,EAAE,cAAc,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,aAAa,IAAI,QAAQ,EAAE;YACjF,GAAG,MAAM;YACT,QAAQ;YACR,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;YAClC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;YAChC,UAAU,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC3E,eAAe,EAAE,IAAI,CAAC,WAAW;YACjC,wBAAwB,EAAE,QAAQ,EAAE,gBAAgB,IAAI,IAAI;YAC5D,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG;YAC/B,cAAc,EAAE,gBAAgB;SACjC,CAAC,CAAC;QACH,MAAM,gBAAgB,GAAG,MAAM,cAAc,CAC3C,IAAI,CAAC,OAAO,CAAC,MAAM,EACnB,oBAAoB,CAAC,UAAU,EAC/B,IAAI,CACL,CAAC;QACF,OAAO,UAAU,CAAC;YAChB,IAAI;YACJ,gBAAgB;YAChB,GAAG,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;SACjE,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,MAAsB,EACtB,QAAuB,EACvB,UAAmC;QAEnC,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAC7E,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,kBAAkB,EACpC,4CAA4C,EAC5C,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,CACjD,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC;YAChB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC;YACxB,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ;YAClC,SAAS,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CACvC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,EACzC,KAAK,CACN;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,MAAsB,EACtB,WAA0B,EAC1B,UAAmC;QAEnC,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,eAAe,CAAC,CAAC;QAC1F,OAAO,UAAU,CAAC;YAChB,WAAW;YACX,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ;YACrC,SAAS,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,CACzC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,EACzC,OAAO,CACR;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAsB,EAAE,QAAuB;QAChE,MAAM,IAAI,GAAG,YAAY,CAAC,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;QAC5E,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,kBAAkB,EACpC,mDAAmD,EACnD,EAAE,QAAQ,EAAE,CACb,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,WAAmB,EACnB,UAAmC,EACnC,KAAkC;QAElC,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9D,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;YAC/B,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,YAAY,CAAC;YAClF,QAAQ,EAAE,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC;YAC9E,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,UAAU;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAKvB;QACC,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;YAC/C,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC3E,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC;YACjC,OAAO,EAAE,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,eAAe,CAAC;YACxF,OAAO,EAAE,YAAY,CACnB,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,EAC7D,eAAe,CAChB;YACD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU;YACzC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS;SACjC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,MAAsB;QACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,YAAY,CAChC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,uBAAuB,CAAC,GAAG,EAAE,EACzD,mBAAmB,CACpB,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,IAAI,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/E,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,eAAe,EACjC,oEAAoE,CACrE,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,MAAsB,EACtB,UAAmC;QAEnC,MAAM,IAAI,GAAG,YAAY,CACvB,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,EAC9D,sBAAsB,CACvB,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,WAAW;YACrE,UAAU,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAClC,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,kBAAkB,EACpC,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,MAAsB,EACtB,KAAa;QAEb,MAAM,MAAM,GAAyB,EAAE,CAAC;QACxC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YAC/E,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,eAAe,EACjC,0DAA0D,CAC3D,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,sBAAsB,CAC5B,MAAsB,EACtB,UAAmC;QAEnC,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;YAC9C,UAAU,CAAC,IAAI,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YACzD,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,eAAe,EACjC,mDAAmD,CACpD,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/audit/cli.d.ts

@@ -5,4 +5,3 @@ export interface AuditCliIo {
     writeError(text: string): void;
 }
 export declare function runAuditCli(args: readonly string[], io?: AuditCliIo): Promise<number>;
-//# sourceMappingURL=cli.d.ts.map

package/dist/audit/crypto.d.ts

@@ -34,4 +34,3 @@ export declare class CompactJwsAuditSigner implements AuditSigner {
     sign(payload: Uint8Array): Promise<string>;
 }
 export declare function hashAuditValue(hasher: AuditHasher, domain: string, value: unknown): Promise<Digest>;
-//# sourceMappingURL=crypto.d.ts.map

package/dist/audit/crypto.js

@@ -1,5 +1,6 @@
-import { CompactSign, compactVerify } from 'jose';
+import { CompactSign, compactVerify, importJWK } from 'jose';
 import { canonicalizeJsonBytes } from '../utils/canonical-json.js';
+import { isSmallOrderEd25519CryptoKey } from '../utils/ed25519-public-key.js';
 const encoder = new TextEncoder();
 const DIGEST_PATTERN = /^sha256:[a-f0-9]{64}$/;
 export class CryptoProviderAuditHasher {
@@ -25,8 +26,13 @@ export class CompactJwsAuditSignatureVerifier {
         try {
             if (!signer.kid.startsWith(`${signer.did}#`))
                 return false;
-            const key = await this.keys.resolve(signer);
-            if (key === null)
+            const resolved = await this.keys.resolve(signer);
+            if (resolved === null)
+                return false;
+            // Imported here rather than inside compactVerify so the key can be checked:
+            // under a small-order Ed25519 key one signature fits every payload.
+            const key = isJwk(resolved) ? await importJWK(resolved, signer.alg) : resolved;
+            if (await isSmallOrderEd25519CryptoKey(key))
                 return false;
             const result = await compactVerify(jws, key, { algorithms: [signer.alg] });
             if (result.protectedHeader.alg !== signer.alg ||
@@ -40,6 +46,9 @@ export class CompactJwsAuditSignatureVerifier {
         }
     }
 }
+function isJwk(key) {
+    return !(key instanceof Uint8Array) && 'kty' in key;
+}
 /** Reference JWS signer for local WebCrypto/KMS-compatible CryptoKey handles. */
 export class CompactJwsAuditSigner {
     ref;

package/dist/audit/crypto.js.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/audit/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAY,MAAM,MAAM,CAAC;AAE5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAGnE,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAM/C,MAAM,OAAO,yBAAyB;IACP;IAA7B,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,KAAK,CAAC,MAAM,CAAC,IAAgB;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,MAAgB,CAAC;IAC1B,CAAC;CACF;AAiBD,iFAAiF;AACjF,MAAM,OAAO,gCAAgC;IACd;IAA7B,YAA6B,IAAkC;QAAlC,SAAI,GAAJ,IAAI,CAA8B;IAAG,CAAC;IAEnE,KAAK,CAAC,MAAM,CAAC,OAAmB,EAAE,GAAW,EAAE,MAAiB;QAC9D,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,GAAG,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC3D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3E,IAAI,MAAM,CAAC,eAAe,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;gBAC3C,MAAM,CAAC,eAAe,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;gBACzC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YACzD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,OAAO,qBAAqB;IAErB;IACQ;IAFnB,YACW,GAAc,EACN,UAAqB;QAD7B,QAAG,GAAH,GAAG,CAAW;QACN,eAAU,GAAV,UAAU,CAAW;IACrC,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,OAAmB;QAC5B,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC;aAC5B,kBAAkB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;aAC5D,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAmB,EACnB,MAAc,EACd,KAAc;IAEd,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,SAAS,CAAC,8DAA8D,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACrE,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACvB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/audit/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAY,MAAM,MAAM,CAAC;AAEvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAG9E,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAM/C,MAAM,OAAO,yBAAyB;IACP;IAA7B,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,KAAK,CAAC,MAAM,CAAC,IAAgB;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,MAAgB,CAAC;IAC1B,CAAC;CACF;AAiBD,iFAAiF;AACjF,MAAM,OAAO,gCAAgC;IACd;IAA7B,YAA6B,IAAkC;QAAlC,SAAI,GAAJ,IAAI,CAA8B;IAAG,CAAC;IAEnE,KAAK,CAAC,MAAM,CAAC,OAAmB,EAAE,GAAW,EAAE,MAAiB;QAC9D,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,GAAG,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC3D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,QAAQ,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC;YACpC,4EAA4E;YAC5E,oEAAoE;YACpE,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC/E,IAAI,MAAM,4BAA4B,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3E,IAAI,MAAM,CAAC,eAAe,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;gBAC3C,MAAM,CAAC,eAAe,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;gBACzC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YACzD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED,SAAS,KAAK,CAAC,GAAyB;IACtC,OAAO,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC;AACtD,CAAC;AAED,iFAAiF;AACjF,MAAM,OAAO,qBAAqB;IAErB;IACQ;IAFnB,YACW,GAAc,EACN,UAAqB;QAD7B,QAAG,GAAH,GAAG,CAAW;QACN,eAAU,GAAV,UAAU,CAAW;IACrC,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,OAAmB;QAC5B,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC;aAC5B,kBAAkB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;aAC5D,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAmB,EACnB,MAAc,EACd,KAAc;IAEd,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,SAAS,CAAC,8DAA8D,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACrE,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACvB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC"}

package/dist/audit/errors.d.ts

@@ -26,4 +26,3 @@ export declare class AuditProtocolError extends Error {
     readonly details?: Readonly<Record<string, unknown>> | undefined;
     constructor(code: AuditErrorCode, message: string, details?: Readonly<Record<string, unknown>> | undefined, options?: ErrorOptions);
 }
-//# sourceMappingURL=errors.d.ts.map

package/dist/audit/evidence.d.ts

@@ -42,4 +42,3 @@ export declare class MemoryAuditEvidenceProvider implements AuditEvidenceProvide
     get(ref: EvidenceRef, context: EvidenceAccessContext): Promise<Uint8Array | null>;
     applyRetention(command: EvidenceRetentionCommand): Promise<EvidenceRetentionResult>;
 }
-//# sourceMappingURL=evidence.d.ts.map

package/dist/audit/index.d.ts

@@ -27,4 +27,3 @@ export * from './providers/outbox.js';
 export * from './providers/source-state.js';
 export * from './adapters/legacy-audit-log.js';
 export * from './adapters/mcp.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/audit/integrity.d.ts

@@ -16,4 +16,3 @@ export declare function buildAuditRecorderReceiptCore(core: AuditEntryCoreV1, en
 export declare function digestAuditEvent(hasher: AuditHasher, event: AuditProducerEventCoreV1): Promise<Digest>;
 export declare function digestAuditEntry(hasher: AuditHasher, entry: AuditEntryCoreV1): Promise<Digest>;
 export declare function digestAuditEvidenceManifest(hasher: AuditHasher, event: AuditProducerEventCoreV1): Promise<Digest>;
-//# sourceMappingURL=integrity.d.ts.map

package/dist/audit/merkle.d.ts

@@ -28,4 +28,3 @@ export declare class Rfc9162MerkleTree {
     private buildConsistencyProof;
     verifyConsistency(input: AuditConsistencyVerification): Promise<boolean>;
 }
-//# sourceMappingURL=merkle.d.ts.map

package/dist/audit/mirror-service.d.ts

@@ -16,4 +16,3 @@ export declare class AuditMirrorService {
     ingest(entry: SignedAuditEntryV1): Promise<SignedAuditEntryV1>;
     private continuityFailure;
 }
-//# sourceMappingURL=mirror-service.d.ts.map

package/dist/audit/projection.d.ts

@@ -86,5 +86,5 @@ export declare class AuditProjectionWorker {
         duplicates: number;
     }>;
     reconcile(ledger: AuditLedgerRef): Promise<AuditProjectionReconciliation>;
+    private entryAt;
 }
-//# sourceMappingURL=projection.d.ts.map

package/dist/audit/projection.js

@@ -88,6 +88,11 @@ export class AuditProjectionWorker {
             ...ledger,
             ...(offset === null ? {} : { afterSequence: offset.sequence }),
         })) {
+            // The offset digest must be the predecessor the journal itself records;
+            // otherwise the projection was built from a different (forked) history.
+            if (entry.core.previousEntryDigest !== (offset?.entryDigest ?? null)) {
+                throw new AuditProtocolError(AUDIT_ERROR_CODES.PROJECTION_CONFLICT, 'Journal entry does not chain from the projection offset', { sequence: entry.core.sequence, expectedOffset: offset });
+            }
             const result = await this.options.projections.compareAndApply({
                 projectionId: this.options.projectionId,
                 ledger,
@@ -131,12 +136,28 @@ export class AuditProjectionWorker {
                 ? 'verified'
                 : 'gap_detected';
         }
-        else {
-            status = BigInt(projectionHead.sequence) < BigInt(journalHead.sequence)
+        else if (BigInt(projectionHead.sequence) < BigInt(journalHead.sequence)) {
+            // Behind is only `pending` when the projected prefix is the journal's.
+            const journalEntry = await this.entryAt(ledger, projectionHead.sequence);
+            status = journalEntry?.entryDigest === projectionHead.entryDigest
                 ? 'pending'
                 : 'gap_detected';
         }
+        else {
+            status = 'gap_detected';
+        }
         return { status, journalHead, projectionHead };
     }
+    async entryAt(ledger, sequence) {
+        const value = BigInt(sequence);
+        for await (const entry of this.options.journal.readRange({
+            ...ledger,
+            ...(value > 0n ? { afterSequence: String(value - 1n) } : {}),
+            limit: 1,
+        })) {
+            return entry.core.sequence === sequence ? entry : undefined;
+        }
+        return undefined;
+    }
 }
 //# sourceMappingURL=projection.js.map

package/dist/audit/projection.js.map

@@ -1 +1 @@
-{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../src/audit/projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAgDpE,SAAS,GAAG,CAAC,YAAoB,EAAE,MAAsB;IACvD,OAAO,GAAG,YAAY,KAAK,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,YAAY,CACnB,IAAkC,EAClC,KAAmC;IAEnC,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,KAAK,KAAK,CAAC;IAC3D,OAAO,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAAC;AACpF,CAAC;AAED,SAAS,OAAO,CAAC,KAAyB;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;QAC7B,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa;QACvC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;QAC7B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;QACjC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;QACpF,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QAC9E,WAAW,EAAE,SAAkB;KAChC,CAAC,CAAC;AACL,CAAC;AAED,yFAAyF;AACzF,MAAM,OAAO,6BAA6B;IAC/B,YAAY,GAAG,EAAE,UAAU,EAAE,WAAoB,EAAE,YAAY,EAAE,IAAa,EAAE,CAAC;IACzE,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAC;IACnD,OAAO,GAAG,IAAI,GAAG,EAAuC,CAAC;IAE1E,KAAK,CAAC,SAAS,CACb,YAAoB,EACpB,MAAsB;QAEtB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3D,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAMrB;QACC,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAChE,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW;gBACrD,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE;gBACvB,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YACtD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;QAC5C,CAAC;QACD,MAAM,gBAAgB,GAAG,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QACzF,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,gBAAgB,EAAE,CAAC;YAC3D,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;QAC5C,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE;YAC9B,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ;YACnC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW;SACrC,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,YAAoB,EAAE,MAAsB;QACtD,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,IAAI,CACR,YAAoB,EACpB,MAAsB;QAEtB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,gFAAgF;IAChF,uBAAuB,CACrB,YAAoB,EACpB,MAAsB,EACtB,MAA6B;QAE7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;CACF;AAcD,0EAA0E;AAC1E,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,OAAqC;QAArC,YAAO,GAAP,OAAO,CAA8B;QAChE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC1B,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,qBAAqB,EACvC,2BAA2B,CAC5B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAsB;QACtC,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACzF,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;YACvD,GAAG,MAAM;YACT,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;SAC/D,CAAC,EAAE,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC;gBAC5D,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;gBACvC,MAAM;gBACN,cAAc,EAAE,MAAM;gBACtB,KAAK;gBACL,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC;aACvB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/B,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,mBAAmB,EACrC,sDAAsD,EACtD;oBACE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;oBAC7B,cAAc,EAAE,MAAM;oBACtB,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC,CACF,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,CAAC;;gBACvC,UAAU,IAAI,CAAC,CAAC;YACrB,MAAM,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QAC7E,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAsB;QAClC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAsB;QACpC,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC;SACtE,CAAC,CAAC;QACH,IAAI,MAA+C,CAAC;QACpD,IAAI,WAAW,KAAK,IAAI,IAAI,cAAc,KAAK,IAAI;YAAE,MAAM,GAAG,OAAO,CAAC;aACjE,IAAI,WAAW,KAAK,IAAI,IAAI,cAAc,KAAK,IAAI;YAAE,MAAM,GAAG,SAAS,CAAC;aACxE,IAAI,WAAW,KAAK,IAAI,IAAI,cAAc,KAAK,IAAI;YAAE,MAAM,GAAG,cAAc,CAAC;aAC7E,IAAI,WAAW,CAAC,QAAQ,KAAK,cAAc,CAAC,QAAQ,EAAE,CAAC;YAC1D,MAAM,GAAG,WAAW,CAAC,WAAW,KAAK,cAAc,CAAC,WAAW;gBAC7D,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,cAAc,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC;gBACrE,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,cAAc,CAAC;QACrB,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;IACjD,CAAC;CACF"}
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../src/audit/projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAgDpE,SAAS,GAAG,CAAC,YAAoB,EAAE,MAAsB;IACvD,OAAO,GAAG,YAAY,KAAK,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,YAAY,CACnB,IAAkC,EAClC,KAAmC;IAEnC,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,KAAK,KAAK,CAAC;IAC3D,OAAO,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAAC;AACpF,CAAC;AAED,SAAS,OAAO,CAAC,KAAyB;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;QAC7B,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa;QACvC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;QAC7B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;QACjC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;QACpF,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QAC9E,WAAW,EAAE,SAAkB;KAChC,CAAC,CAAC;AACL,CAAC;AAED,yFAAyF;AACzF,MAAM,OAAO,6BAA6B;IAC/B,YAAY,GAAG,EAAE,UAAU,EAAE,WAAoB,EAAE,YAAY,EAAE,IAAa,EAAE,CAAC;IACzE,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAC;IACnD,OAAO,GAAG,IAAI,GAAG,EAAuC,CAAC;IAE1E,KAAK,CAAC,SAAS,CACb,YAAoB,EACpB,MAAsB;QAEtB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3D,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAMrB;QACC,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAChE,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW;gBACrD,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE;gBACvB,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YACtD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;QAC5C,CAAC;QACD,MAAM,gBAAgB,GAAG,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QACzF,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,gBAAgB,EAAE,CAAC;YAC3D,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;QAC5C,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE;YAC9B,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ;YACnC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW;SACrC,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,YAAoB,EAAE,MAAsB;QACtD,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,IAAI,CACR,YAAoB,EACpB,MAAsB;QAEtB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,gFAAgF;IAChF,uBAAuB,CACrB,YAAoB,EACpB,MAAsB,EACtB,MAA6B;QAE7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;CACF;AAcD,0EAA0E;AAC1E,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,OAAqC;QAArC,YAAO,GAAP,OAAO,CAA8B;QAChE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC1B,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,qBAAqB,EACvC,2BAA2B,CAC5B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAsB;QACtC,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACzF,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;YACvD,GAAG,MAAM;YACT,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;SAC/D,CAAC,EAAE,CAAC;YACH,wEAAwE;YACxE,wEAAwE;YACxE,IAAI,KAAK,CAAC,IAAI,CAAC,mBAAmB,KAAK,CAAC,MAAM,EAAE,WAAW,IAAI,IAAI,CAAC,EAAE,CAAC;gBACrE,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,mBAAmB,EACrC,yDAAyD,EACzD,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,CAC1D,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC;gBAC5D,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;gBACvC,MAAM;gBACN,cAAc,EAAE,MAAM;gBACtB,KAAK;gBACL,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC;aACvB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/B,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,mBAAmB,EACrC,sDAAsD,EACtD;oBACE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;oBAC7B,cAAc,EAAE,MAAM;oBACtB,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC,CACF,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,CAAC;;gBACvC,UAAU,IAAI,CAAC,CAAC;YACrB,MAAM,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QAC7E,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAsB;QAClC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAsB;QACpC,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC;SACtE,CAAC,CAAC;QACH,IAAI,MAA+C,CAAC;QACpD,IAAI,WAAW,KAAK,IAAI,IAAI,cAAc,KAAK,IAAI;YAAE,MAAM,GAAG,OAAO,CAAC;aACjE,IAAI,WAAW,KAAK,IAAI,IAAI,cAAc,KAAK,IAAI;YAAE,MAAM,GAAG,SAAS,CAAC;aACxE,IAAI,WAAW,KAAK,IAAI,IAAI,cAAc,KAAK,IAAI;YAAE,MAAM,GAAG,cAAc,CAAC;aAC7E,IAAI,WAAW,CAAC,QAAQ,KAAK,cAAc,CAAC,QAAQ,EAAE,CAAC;YAC1D,MAAM,GAAG,WAAW,CAAC,WAAW,KAAK,cAAc,CAAC,WAAW;gBAC7D,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,cAAc,CAAC;QACrB,CAAC;aAAM,IAAI,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1E,uEAAuE;YACvE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;YACzE,MAAM,GAAG,YAAY,EAAE,WAAW,KAAK,cAAc,CAAC,WAAW;gBAC/D,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,cAAc,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,cAAc,CAAC;QAC1B,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAsB,EACtB,QAAgB;QAEhB,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;YACvD,GAAG,MAAM;YACT,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,KAAK,EAAE,CAAC;SACT,CAAC,EAAE,CAAC;YACH,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9D,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}

package/dist/audit/providers/anchor.d.ts

@@ -20,4 +20,3 @@ export declare class MemorySupportingAnchorProvider implements AuditAnchorProvid
     publish(checkpoint: SignedAuditCheckpointV1): Promise<AuditAnchorReceipt>;
     verify(checkpoint: SignedAuditCheckpointV1, receipt: AuditAnchorReceipt): Promise<boolean>;
 }
-//# sourceMappingURL=anchor.d.ts.map

package/dist/audit/providers/evidence.d.ts

@@ -33,4 +33,3 @@ export interface EvidenceRetentionResult {
     ref: EvidenceRef;
     state: 'retained' | 'held' | 'disposed' | 'missing';
 }
-//# sourceMappingURL=evidence.d.ts.map

package/dist/audit/providers/journal.d.ts

@@ -32,4 +32,3 @@ export interface AuditJournalProvider {
     }): Promise<AuditAppendResult>;
     readRange(query: AuditRangeQuery): AsyncIterable<SignedAuditEntryV1>;
 }
-//# sourceMappingURL=journal.d.ts.map

package/dist/audit/providers/memory-journal.d.ts

@@ -21,4 +21,3 @@ export declare class MemoryAuditJournal implements AuditJournalProvider {
     readRange(query: AuditRangeQuery): AsyncIterable<SignedAuditEntryV1>;
     snapshot(ledger: AuditLedgerRef): Promise<SignedAuditEntryV1[]>;
 }
-//# sourceMappingURL=memory-journal.d.ts.map

package/dist/audit/providers/observer.d.ts

@@ -27,4 +27,3 @@ export declare class MemoryAuditCheckpointObserver implements AuditCheckpointObs
     latest(ledger: AuditLedgerRef): Promise<ObservedAuditCheckpoint | null>;
     verifyObservation(checkpoint: SignedAuditCheckpointV1, receipt: AuditObservationReceiptV1): Promise<boolean>;
 }
-//# sourceMappingURL=observer.d.ts.map

package/dist/audit/providers/outbox.d.ts

@@ -6,11 +6,28 @@ export interface AuditOutboxItem {
     /** Persisted delivery failures; durable adapters use this for retry and DLQ policy. */
     attempts: number;
 }
+/**
+ * Event IDs are unique only within a producer source, so an outbox shared by
+ * several sources identifies an item by both.
+ */
+export interface AuditOutboxItemKey {
+    sourceId: string;
+    eventId: string;
+}
+export declare function auditOutboxItemKey(item: AuditOutboxItem): AuditOutboxItemKey;
 export interface AuditOutboxProvider {
     readonly capabilities: {
         durability: 'ephemeral' | 'durable';
         /** `pending()` yields enqueue order within each producer source. */
         fifoPerSource: true;
+        /**
+         * Items are keyed by {@link AuditOutboxItemKey}: `enqueue` is idempotent per
+         * key, and the trail acknowledges items with their key. Without it the
+         * trail acknowledges by bare event ID, as adapters that predate the key
+         * expect. Declare it only where `markDelivered` and `markFailed` handle a
+         * key; `MemoryAuditOutbox` withholds it from a subclass that overrides them.
+         */
+        keyedBySource?: true;
     };
     enqueue(item: AuditOutboxItem): Promise<void>;
     /**
@@ -18,20 +35,32 @@ export interface AuditOutboxProvider {
      * The provider owns retry scheduling/caps and excludes dead-lettered items.
      */
     pending(limit?: number): AsyncIterable<AuditOutboxItem>;
-    markDelivered(eventId: string): Promise<void>;
+    /**
+     * The trail passes the item's key when `capabilities.keyedBySource` is set,
+     * and its bare event ID otherwise. Method syntax on purpose: parameters stay
+     * bivariant, so an adapter that still declares `markDelivered(eventId: string)`
+     * implements this interface.
+     */
+    markDelivered(key: AuditOutboxItemKey | string): Promise<void>;
     /** Persist the failure and apply the provider's configured retry/DLQ policy. */
-    markFailed(eventId: string, error: unknown): Promise<void>;
+    markFailed(key: AuditOutboxItemKey | string, error: unknown): Promise<void>;
 }
 /** Development-only outbox. Buffered assurance requires a durable adapter. */
 export declare class MemoryAuditOutbox implements AuditOutboxProvider {
     readonly capabilities: {
-        durability: "ephemeral";
+        durability: 'ephemeral';
         fifoPerSource: true;
+        keyedBySource?: true;
     };
     private readonly items;
     enqueue(item: AuditOutboxItem): Promise<void>;
     pending(limit?: number): AsyncIterable<AuditOutboxItem>;
-    markDelivered(eventId: string): Promise<void>;
-    markFailed(eventId: string): Promise<void>;
+    markDelivered(key: AuditOutboxItemKey | string): Promise<void>;
+    markFailed(key: AuditOutboxItemKey | string): Promise<void>;
+    /**
+     * A bare event ID names an item only while exactly one source has it
+     * pending. With several, acknowledging any one of them could drop another
+     * source's event, so the caller must pass the item's key instead.
+     */
+    private storedKey;
 }
-//# sourceMappingURL=outbox.d.ts.map

package/dist/audit/providers/outbox.js

@@ -1,17 +1,36 @@
 import { canonicalizeJson } from '../../utils/canonical-json.js';
+export function auditOutboxItemKey(item) {
+    return { sourceId: item.submission.producerEvent.source.sourceId, eventId: item.eventId };
+}
+function storageKey(key) {
+    return `${key.sourceId}\0${key.eventId}`;
+}
 /** Development-only outbox. Buffered assurance requires a durable adapter. */
 export class MemoryAuditOutbox {
-    capabilities = { durability: 'ephemeral', fifoPerSource: true };
+    // Typed so the new flag stays optional: a subclass that overrides
+    // `capabilities` with the earlier shape still compiles. The flag is declared
+    // only while acknowledgement runs this class's own key-aware methods; a
+    // subclass that overrides them may expect the bare event ID it was written
+    // for, so it receives one unless it declares the flag itself.
+    capabilities = {
+        durability: 'ephemeral',
+        fifoPerSource: true,
+        ...(this.markDelivered === MemoryAuditOutbox.prototype.markDelivered &&
+            this.markFailed === MemoryAuditOutbox.prototype.markFailed
+            ? { keyedBySource: true }
+            : {}),
+    };
     items = new Map();
     async enqueue(item) {
-        const existing = this.items.get(item.eventId);
+        const key = storageKey(auditOutboxItemKey(item));
+        const existing = this.items.get(key);
         if (existing !== undefined) {
             if (!sameSubmission(existing.submission, item.submission)) {
                 throw new Error(`Audit outbox event identity collision: ${item.eventId}`);
             }
             return;
         }
-        this.items.set(item.eventId, item);
+        this.items.set(key, item);
     }
     async *pending(limit = Number.MAX_SAFE_INTEGER) {
         let count = 0;
@@ -22,13 +41,32 @@ export class MemoryAuditOutbox {
             yield item;
         }
     }
-    async markDelivered(eventId) {
-        this.items.delete(eventId);
+    async markDelivered(key) {
+        const stored = this.storedKey(key);
+        if (stored !== undefined)
+            this.items.delete(stored);
     }
-    async markFailed(eventId) {
-        const item = this.items.get(eventId);
+    async markFailed(key) {
+        const stored = this.storedKey(key);
+        if (stored === undefined)
+            return;
+        const item = this.items.get(stored);
         if (item !== undefined)
-            this.items.set(eventId, { ...item, attempts: item.attempts + 1 });
+            this.items.set(stored, { ...item, attempts: item.attempts + 1 });
+    }
+    /**
+     * A bare event ID names an item only while exactly one source has it
+     * pending. With several, acknowledging any one of them could drop another
+     * source's event, so the caller must pass the item's key instead.
+     */
+    storedKey(key) {
+        if (typeof key !== 'string')
+            return storageKey(key);
+        const matches = [...this.items].filter(([, item]) => item.eventId === key);
+        if (matches.length > 1) {
+            throw new Error(`Audit outbox event ID ${key} is pending for several sources; pass its AuditOutboxItemKey`);
+        }
+        return matches[0]?.[0];
     }
 }
 function sameSubmission(left, right) {

package/dist/audit/providers/outbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"outbox.js","sourceRoot":"","sources":["../../../src/audit/providers/outbox.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AA2BjE,8EAA8E;AAC9E,MAAM,OAAO,iBAAiB;IACnB,YAAY,GAAG,EAAE,UAAU,EAAE,WAAoB,EAAE,aAAa,EAAE,IAAa,EAAE,CAAC;IAC1E,KAAK,GAAG,IAAI,GAAG,EAA2B,CAAC;IAE5D,KAAK,CAAC,OAAO,CAAC,IAAqB;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,gBAAgB;QAC5C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YAC5C,IAAI,KAAK,IAAI,KAAK;gBAAE,OAAO;YAC3B,KAAK,IAAI,CAAC,CAAC;YACX,MAAM,IAAI,CAAC;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAe;QACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAe;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;CACF;AAED,SAAS,cAAc,CAAC,IAA6B,EAAE,KAA8B;IACnF,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAClC,IAAI,CAAC,qBAAqB,KAAK,KAAK,CAAC,qBAAqB;QAC1D,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,gBAAgB,CAAC,KAAK,CAAC,aAAa,CAAC;QAC9E,IAAI,CAAC,iBAAiB,CAAC,MAAM,KAAK,KAAK,CAAC,iBAAiB,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACjF,OAAO,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,KAAK,KAAK,SAAS,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC;YACnF,IAAI,CAAC,UAAU,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAC3E,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;YACtE,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAE,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAE,CAAC;QACrE,CAAC;QACD,OAAO,UAAU,KAAK,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"outbox.js","sourceRoot":"","sources":["../../../src/audit/providers/outbox.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAmBjE,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AAC5F,CAAC;AAiCD,SAAS,UAAU,CAAC,GAAuB;IACzC,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;AAC3C,CAAC;AAED,8EAA8E;AAC9E,MAAM,OAAO,iBAAiB;IAC5B,kEAAkE;IAClE,6EAA6E;IAC7E,wEAAwE;IACxE,2EAA2E;IAC3E,8DAA8D;IACrD,YAAY,GAA2E;QAC9F,UAAU,EAAE,WAAW;QACvB,aAAa,EAAE,IAAI;QACnB,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,iBAAiB,CAAC,SAAS,CAAC,aAAa;YAClE,IAAI,CAAC,UAAU,KAAK,iBAAiB,CAAC,SAAS,CAAC,UAAU;YAC1D,CAAC,CAAC,EAAE,aAAa,EAAE,IAAa,EAAE;YAClC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACe,KAAK,GAAG,IAAI,GAAG,EAA2B,CAAC;IAE5D,KAAK,CAAC,OAAO,CAAC,IAAqB;QACjC,MAAM,GAAG,GAAG,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,gBAAgB;QAC5C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YAC5C,IAAI,KAAK,IAAI,KAAK;gBAAE,OAAO;YAC3B,KAAK,IAAI,CAAC,CAAC;YACX,MAAM,IAAI,CAAC;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAAgC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAgC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED;;;;OAIG;IACK,SAAS,CAAC,GAAgC;QAChD,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,GAAG,CAAC,CAAC;QAC3E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,yBAAyB,GAAG,8DAA8D,CAC3F,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;CACF;AAED,SAAS,cAAc,CAAC,IAA6B,EAAE,KAA8B;IACnF,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAClC,IAAI,CAAC,qBAAqB,KAAK,KAAK,CAAC,qBAAqB;QAC1D,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,gBAAgB,CAAC,KAAK,CAAC,aAAa,CAAC;QAC9E,IAAI,CAAC,iBAAiB,CAAC,MAAM,KAAK,KAAK,CAAC,iBAAiB,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACjF,OAAO,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,KAAK,KAAK,SAAS,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC;YACnF,IAAI,CAAC,UAAU,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAC3E,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;YACtE,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAE,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAE,CAAC;QACrE,CAAC;QACD,OAAO,UAAU,KAAK,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/audit/providers/recorder-client.d.ts

@@ -19,4 +19,3 @@ export declare class LocalAuditRecorderClient implements AuditRecorderClient {
 }
 /** One-call composition helper for an in-process authoritative recorder. */
 export declare function createLocalAuditRecorder(configuration: AuditRecorderServiceConfig, context: () => AuthenticatedAuditSubmissionContext | Promise<AuthenticatedAuditSubmissionContext>): AuditRecorderClient;
-//# sourceMappingURL=recorder-client.d.ts.map

package/dist/audit/providers/source-state.d.ts

@@ -10,28 +10,50 @@ export interface AuditSourceStateProvider {
         durability: 'ephemeral' | 'durable';
         atomicClaim: true;
     };
+    /**
+     * Claims the next source sequence for an event ID. Re-claiming an ID the
+     * provider still retains returns the original claim, so an at-least-once
+     * redelivery rebuilds a byte-identical event and resolves to its original
+     * receipt. Receipted claims are retained for a bounded redelivery window.
+     */
     claimEvent(sourceId: string, eventId: string): Promise<{
         sequence: string;
         previousSourceEventDigest?: Digest;
     }>;
+    /**
+     * Releases a claim whose event was never emitted, returning its sequence when
+     * nothing was claimed after it. Without this, a failure between claim and
+     * emission leaves a pending gap.
+     */
+    abandonClaim?(sourceId: string, eventId: string, sequence: string): Promise<void>;
     markEmitted(sourceId: string, eventId: string, sequence: string, eventDigest: Digest): Promise<void>;
     markReceipted(sourceId: string, sequence: string, entryDigest: Digest): Promise<void>;
     getState(sourceId: string): Promise<AuditSourceState>;
 }
-/** In-process reference source-watermark state. Production AAP-3 needs durability. */
+export interface MemoryAuditSourceStateOptions {
+    /** Receipted claims retained per source for at-least-once redelivery (default 1024). */
+    redeliveryWindow?: number;
+}
+/**
+ * In-process reference source-watermark state. Production AAP-3 needs
+ * durability. Memory is bounded by the pending (unreceipted) events plus the
+ * redelivery window, however long a gap stays open.
+ */
 export declare class MemoryAuditSourceState implements AuditSourceStateProvider {
     readonly capabilities: {
         durability: "ephemeral";
         atomicClaim: true;
     };
     private readonly states;
+    private readonly redeliveryWindow;
+    constructor(options?: MemoryAuditSourceStateOptions);
     claimEvent(sourceId: string, eventId: string): Promise<{
         sequence: string;
         previousSourceEventDigest?: Digest;
     }>;
+    abandonClaim(sourceId: string, eventId: string, sequence: string): Promise<void>;
     markEmitted(sourceId: string, eventId: string, sequence: string, eventDigest: Digest): Promise<void>;
     markReceipted(sourceId: string, sequence: string): Promise<void>;
     getState(sourceId: string): Promise<AuditSourceState>;
     private state;
 }
-//# sourceMappingURL=source-state.d.ts.map