@origintrail-official/dkg-agent 10.0.15 → 10.0.17

package/README.md

@@ -45,6 +45,30 @@ const agents = await agent.findAgents();
 const skills = await agent.findSkills({ skillType: 'sentiment-analysis' });
 ```
 
+## Bounded peer discovery
+
+`DiscoveryClient.findAgentPeerPageByAddress(wallet, { limit, afterPeerId?, signal? })`
+requires an integer limit from 1 to `MAX_AGENT_PEER_PAGE_SIZE` (1,024). It returns
+`{ peerIds, nextAfterPeerId }`: peer IDs are unique and ordered, the cursor is
+exclusive, and a null continuation means the query found no further row. The
+query retains at most `limit + 1` rows and does not select optional profile fields.
+The existing `findAgentPeerIdsByAddress(wallet, options?)` remains available as a
+deprecated array-returning facade. It walks bounded pages internally, retaining
+the full result only for callers explicitly using that legacy API.
+
+Bounded recovery providers must implement the exported `AgentPeerDiscovery`
+contract. Providers that cannot paginate must reject the lookup; bounded recovery
+reports `lookupFailed` and never substitutes `findAgents()`. This also applies to
+registry discovery during its metadata-refresh fallback. Legacy single-curator
+metadata resolution and callers explicitly using the rich profile API retain
+their existing behavior.
+
+A page walk is not a snapshot of a changing registry. Recovery treats tail pages
+as incomplete roster evidence even when a tail page has no continuation. Only a
+fresh first-page query covering the entire bounded roster can support its existing
+absence-proof checks. These local peer IDs do not themselves establish curator
+authority.
+
 ## Internal Dependencies
 
 - `@origintrail-official/dkg-core` — P2P node, crypto, event bus

package/dist/active-public-context-graph-chain-proof.d.ts

@@ -10,13 +10,16 @@ export type ActivePublicContextGraphChainProof = {
     detail?: string;
 };
 export type OnChainAccessPolicyState = 0 | 1 | 'unregistered' | 'unknown';
-export type OnChainAccessPolicyStateResolver = (contextGraphId: string, operationContext: OperationContext, options: {
-    slotBindingMode: 'chain-attested-repair';
-}) => Promise<OnChainAccessPolicyState>;
+export type FinalizedOnChainAccessPolicyStateResolver = (contextGraphId: string, operationContext: OperationContext) => Promise<OnChainAccessPolicyState>;
 export type OperationAwareActivePublicChainProofResolver = (contextGraphId: string, operationContext: OperationContext) => Promise<ActivePublicContextGraphChainProof>;
 export type BoundActivePublicChainProofResolver = (operationContext: OperationContext) => Promise<ActivePublicContextGraphChainProof>;
-/** Strict proof boundary: owns binding policy, RPC classification, and state conversion. */
-export declare function resolveActivePublicContextGraphChainProof(resolveOnChainAccessPolicyState: OnChainAccessPolicyStateResolver, contextGraphId: string, operationContext: OperationContext): Promise<ActivePublicContextGraphChainProof>;
+/**
+ * Strict metadata-bootstrap proof boundary: owns binding policy, finalized
+ * authority-index consistency, RPC classification, and state conversion.
+ * Runtime SWM/publish policy gates do not use this resolver and retain fresh
+ * current-state reads.
+ */
+export declare function resolveActivePublicContextGraphChainProof(resolveFinalizedOnChainAccessPolicyState: FinalizedOnChainAccessPolicyStateResolver, contextGraphId: string, operationContext: OperationContext): Promise<ActivePublicContextGraphChainProof>;
 /** Bind one lazy proof promise to one normalized graph for repair + confirmation reuse. */
 export declare function memoizeActivePublicContextGraphChainProof(contextGraphId: string, resolveProof: OperationAwareActivePublicChainProofResolver): BoundActivePublicChainProofResolver;
 //# sourceMappingURL=active-public-context-graph-chain-proof.d.ts.map

package/dist/active-public-context-graph-chain-proof.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"active-public-context-graph-chain-proof.d.ts","sourceRoot":"","sources":["../src/active-public-context-graph-chain-proof.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAEvE,MAAM,MAAM,kCAAkC,GAC1C;IAAE,KAAK,EAAE,QAAQ,CAAA;CAAE,GACnB;IAAE,KAAK,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,cAAc,CAAA;CAAE,GAC3D;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,YAAY,GAAG,aAAa,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhF,MAAM,MAAM,wBAAwB,GAAG,CAAC,GAAG,CAAC,GAAG,cAAc,GAAG,SAAS,CAAC;AAE1E,MAAM,MAAM,gCAAgC,GAAG,CAC7C,cAAc,EAAE,MAAM,EACtB,gBAAgB,EAAE,gBAAgB,EAClC,OAAO,EAAE;IAAE,eAAe,EAAE,uBAAuB,CAAA;CAAE,KAClD,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAEvC,MAAM,MAAM,4CAA4C,GAAG,CACzD,cAAc,EAAE,MAAM,EACtB,gBAAgB,EAAE,gBAAgB,KAC/B,OAAO,CAAC,kCAAkC,CAAC,CAAC;AAEjD,MAAM,MAAM,mCAAmC,GAAG,CAChD,gBAAgB,EAAE,gBAAgB,KAC/B,OAAO,CAAC,kCAAkC,CAAC,CAAC;AAEjD,4FAA4F;AAC5F,wBAAsB,yCAAyC,CAC7D,+BAA+B,EAAE,gCAAgC,EACjE,cAAc,EAAE,MAAM,EACtB,gBAAgB,EAAE,gBAAgB,GACjC,OAAO,CAAC,kCAAkC,CAAC,CAqB7C;AAED,2FAA2F;AAC3F,wBAAgB,yCAAyC,CACvD,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,4CAA4C,GACzD,mCAAmC,CAMrC"}
+{"version":3,"file":"active-public-context-graph-chain-proof.d.ts","sourceRoot":"","sources":["../src/active-public-context-graph-chain-proof.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAEvE,MAAM,MAAM,kCAAkC,GAC1C;IAAE,KAAK,EAAE,QAAQ,CAAA;CAAE,GACnB;IAAE,KAAK,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,cAAc,CAAA;CAAE,GAC3D;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,YAAY,GAAG,aAAa,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhF,MAAM,MAAM,wBAAwB,GAAG,CAAC,GAAG,CAAC,GAAG,cAAc,GAAG,SAAS,CAAC;AAE1E,MAAM,MAAM,yCAAyC,GAAG,CACtD,cAAc,EAAE,MAAM,EACtB,gBAAgB,EAAE,gBAAgB,KAC/B,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAEvC,MAAM,MAAM,4CAA4C,GAAG,CACzD,cAAc,EAAE,MAAM,EACtB,gBAAgB,EAAE,gBAAgB,KAC/B,OAAO,CAAC,kCAAkC,CAAC,CAAC;AAEjD,MAAM,MAAM,mCAAmC,GAAG,CAChD,gBAAgB,EAAE,gBAAgB,KAC/B,OAAO,CAAC,kCAAkC,CAAC,CAAC;AAEjD;;;;;GAKG;AACH,wBAAsB,yCAAyC,CAC7D,wCAAwC,EAAE,yCAAyC,EACnF,cAAc,EAAE,MAAM,EACtB,gBAAgB,EAAE,gBAAgB,GACjC,OAAO,CAAC,kCAAkC,CAAC,CAoB7C;AAED,2FAA2F;AAC3F,wBAAgB,yCAAyC,CACvD,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,4CAA4C,GACzD,mCAAmC,CAMrC"}

package/dist/active-public-context-graph-chain-proof.js

@@ -1,9 +1,14 @@
 // SPDX-License-Identifier: Apache-2.0
-/** Strict proof boundary: owns binding policy, RPC classification, and state conversion. */
-export async function resolveActivePublicContextGraphChainProof(resolveOnChainAccessPolicyState, contextGraphId, operationContext) {
+/**
+ * Strict metadata-bootstrap proof boundary: owns binding policy, finalized
+ * authority-index consistency, RPC classification, and state conversion.
+ * Runtime SWM/publish policy gates do not use this resolver and retain fresh
+ * current-state reads.
+ */
+export async function resolveActivePublicContextGraphChainProof(resolveFinalizedOnChainAccessPolicyState, contextGraphId, operationContext) {
     let state;
     try {
-        state = await resolveOnChainAccessPolicyState(contextGraphId, operationContext, { slotBindingMode: 'chain-attested-repair' });
+        state = await resolveFinalizedOnChainAccessPolicyState(contextGraphId, operationContext);
     }
     catch (error) {
         return {

package/dist/active-public-context-graph-chain-proof.js.map

@@ -1 +1 @@
-{"version":3,"file":"active-public-context-graph-chain-proof.js","sourceRoot":"","sources":["../src/active-public-context-graph-chain-proof.ts"],"names":[],"mappings":"AAAA,sCAAsC;AA0BtC,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC7D,+BAAiE,EACjE,cAAsB,EACtB,gBAAkC;IAElC,IAAI,KAA+B,CAAC;IACpC,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,+BAA+B,CAC3C,cAAc,EACd,gBAAgB,EAChB,EAAE,eAAe,EAAE,uBAAuB,EAAE,CAC7C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC/D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC5C,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACnE,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AACpD,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,yCAAyC,CACvD,cAAsB,EACtB,YAA0D;IAE1D,IAAI,KAA8D,CAAC;IACnE,OAAO,CAAC,gBAAgB,EAAE,EAAE;QAC1B,KAAK,KAAK,YAAY,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"active-public-context-graph-chain-proof.js","sourceRoot":"","sources":["../src/active-public-context-graph-chain-proof.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAyBtC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC7D,wCAAmF,EACnF,cAAsB,EACtB,gBAAkC;IAElC,IAAI,KAA+B,CAAC;IACpC,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,wCAAwC,CACpD,cAAc,EACd,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC/D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC5C,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACnE,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AACpD,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,yCAAyC,CACvD,cAAsB,EACtB,YAA0D;IAE1D,IAAI,KAA8D,CAAC;IACnE,OAAO,CAAC,gBAAgB,EAAE,EAAE;QAC1B,KAAK,KAAK,YAAY,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}

package/dist/agent-peer-discovery.d.ts

@@ -0,0 +1,24 @@
+/** Maximum peer IDs in one wallet-registry page, excluding one lookahead row. */
+export declare const MAX_AGENT_PEER_PAGE_SIZE = 1024;
+export interface AgentPeerPageRequest {
+    /** Positive integer, at most MAX_AGENT_PEER_PAGE_SIZE. */
+    readonly limit: number;
+    /** Exclusive lexical peer-ID cursor; omit for the first page. */
+    readonly afterPeerId?: string;
+    readonly signal?: AbortSignal;
+}
+export interface AgentPeerPage {
+    /** Strictly increasing, duplicate-free peer IDs; at most request.limit. */
+    readonly peerIds: readonly string[];
+    /** Last returned peer ID when another row exists, otherwise null. */
+    readonly nextAfterPeerId: string | null;
+}
+/** Required capability for bounded recovery. Unsupported providers must reject. */
+export interface AgentPeerDiscovery {
+    findAgentPeerPageByAddress(agentAddress: string, request: AgentPeerPageRequest): Promise<AgentPeerPage>;
+}
+export declare function validateAgentPeerPageRequest(request: AgentPeerPageRequest): void;
+/** Reject a broken provider contract before treating a page as registry evidence. */
+export declare function validateAgentPeerPage(page: unknown, request: AgentPeerPageRequest): AgentPeerPage;
+export declare function readAgentPeerPage(discovery: AgentPeerDiscovery, agentAddress: string, request: AgentPeerPageRequest): Promise<AgentPeerPage>;
+//# sourceMappingURL=agent-peer-discovery.d.ts.map

package/dist/agent-peer-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-peer-discovery.d.ts","sourceRoot":"","sources":["../src/agent-peer-discovery.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAE7C,MAAM,WAAW,oBAAoB;IACnC,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,iEAAiE;IACjE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,aAAa;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,qEAAqE;IACrE,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC;AAED,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IACjC,0BAA0B,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACzG;AAED,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAQhF;AAED,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,GAAG,aAAa,CA8BjG;AAED,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,kBAAkB,EAC7B,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,aAAa,CAAC,CAKxB"}

package/dist/agent-peer-discovery.js

@@ -0,0 +1,50 @@
+/** Maximum peer IDs in one wallet-registry page, excluding one lookahead row. */
+export const MAX_AGENT_PEER_PAGE_SIZE = 1024;
+export function validateAgentPeerPageRequest(request) {
+    if (!Number.isSafeInteger(request.limit) || request.limit < 1 || request.limit > MAX_AGENT_PEER_PAGE_SIZE) {
+        throw new RangeError(`Peer page limit must be an integer from 1 to ${MAX_AGENT_PEER_PAGE_SIZE}`);
+    }
+    if (request.afterPeerId !== undefined && (typeof request.afterPeerId !== 'string' || request.afterPeerId.length === 0)) {
+        throw new TypeError('Peer page cursor must be a nonempty string');
+    }
+    request.signal?.throwIfAborted();
+}
+/** Reject a broken provider contract before treating a page as registry evidence. */
+export function validateAgentPeerPage(page, request) {
+    if (page === null || typeof page !== 'object' || Array.isArray(page)) {
+        throw new TypeError('Peer discovery returned an invalid page');
+    }
+    const { peerIds: rawPeerIds, nextAfterPeerId } = page;
+    if (!Array.isArray(rawPeerIds)) {
+        throw new Error('Peer discovery exceeded its page bound');
+    }
+    const peerCount = rawPeerIds.length;
+    if (!Number.isSafeInteger(peerCount) || peerCount < 0 || peerCount > request.limit) {
+        throw new Error('Peer discovery exceeded its page bound');
+    }
+    if (nextAfterPeerId !== null && typeof nextAfterPeerId !== 'string') {
+        throw new TypeError('Peer discovery returned an invalid continuation');
+    }
+    const peerIds = [];
+    let previous = request.afterPeerId;
+    for (let index = 0; index < peerCount; index++) {
+        const peerId = rawPeerIds[index];
+        if (typeof peerId !== 'string' || peerId.length === 0 || (previous !== undefined && peerId <= previous)) {
+            throw new Error('Peer discovery returned a non-monotonic page');
+        }
+        peerIds.push(peerId);
+        previous = peerId;
+    }
+    if (nextAfterPeerId !== null && (peerIds.length !== request.limit || nextAfterPeerId !== previous)) {
+        throw new Error('Peer discovery returned an invalid continuation');
+    }
+    request.signal?.throwIfAborted();
+    return { peerIds, nextAfterPeerId };
+}
+export async function readAgentPeerPage(discovery, agentAddress, request) {
+    const boundedRequest = Object.freeze({ ...request });
+    validateAgentPeerPageRequest(boundedRequest);
+    const page = await discovery.findAgentPeerPageByAddress(agentAddress, boundedRequest);
+    return validateAgentPeerPage(page, boundedRequest);
+}
+//# sourceMappingURL=agent-peer-discovery.js.map

package/dist/agent-peer-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-peer-discovery.js","sourceRoot":"","sources":["../src/agent-peer-discovery.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAsB7C,MAAM,UAAU,4BAA4B,CAAC,OAA6B;IACxE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,GAAG,wBAAwB,EAAE,CAAC;QAC1G,MAAM,IAAI,UAAU,CAAC,gDAAgD,wBAAwB,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACvH,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;AACnC,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,qBAAqB,CAAC,IAAa,EAAE,OAA6B;IAChF,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,IAA+B,CAAC;IACjF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,eAAe,KAAK,IAAI,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;QACpE,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC;IACnC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAY,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,IAAI,QAAQ,CAAC,EAAE,CAAC;YACxG,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,QAAQ,GAAG,MAAM,CAAC;IACpB,CAAC;IACD,IAAI,eAAe,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,IAAI,eAAe,KAAK,QAAQ,CAAC,EAAE,CAAC;QACnG,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAA6B,EAC7B,YAAoB,EACpB,OAA6B;IAE7B,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACrD,4BAA4B,CAAC,cAAc,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,0BAA0B,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACtF,OAAO,qBAAqB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;AACrD,CAAC"}

package/dist/auth/agent-delegation.d.ts

@@ -40,7 +40,28 @@ export interface AgentDelegationPayload {
 export interface SignedAgentDelegation extends AgentDelegationPayload {
     /** EIP-191 signature over `computeDelegationDigest(payload)` by `agentAddress`. */
     signature: string;
+    /**
+     * Optional self-authenticating public keys for cold private enrollment.
+     * Each proof is signed independently by `agentAddress`; the delegation
+     * signature intentionally continues to cover only the stable v2 payload so
+     * older curators can verify it. `workspaceEncryptionKeysSignature` binds
+     * this exact bundle to the signed delegation for upgraded curators.
+     */
+    workspaceEncryptionKeys?: Array<{
+        encryptionKeyAlgorithm: 'X25519';
+        publicEncryptionKey: string;
+        encryptionKeyProof: string;
+    }>;
+    /** Wallet signature over `computeWorkspaceEncryptionKeysAttestationDigest`. */
+    workspaceEncryptionKeysSignature?: string;
 }
+/**
+ * Bind a cold-enrollment key bundle to one otherwise backwards-compatible v2
+ * delegation. Sorting makes transport reordering harmless while retaining
+ * duplicates in the signed payload, so removing or adding any entry changes
+ * the digest.
+ */
+export declare function computeWorkspaceEncryptionKeysAttestationDigest(delegation: Pick<SignedAgentDelegation, 'agentAddress' | 'delegateePeerId' | 'signature' | 'workspaceEncryptionKeys'>): Uint8Array;
 /**
  * Canonical digest used for both signing and verification.
  *

package/dist/auth/agent-delegation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-delegation.d.ts","sourceRoot":"","sources":["../../src/auth/agent-delegation.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,WAAW,sBAAsB;IACrC,sFAAsF;IACtF,YAAY,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,UAAU,EAAE,MAAM,CAAC;IACnB,qFAAqF;IACrF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6FAA6F;IAC7F,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,qBAAsB,SAAQ,sBAAsB;IACnE,mFAAmF;IACnF,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,sBAAsB,GAAG,UAAU,CAcnF;AAED,MAAM,WAAW,yBAA0B,SAAQ,sBAAsB;IACvE,6FAA6F;IAC7F,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAgB3G;AAED,MAAM,WAAW,4BAA4B;IAC3C;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,qBAAqB,EACjC,OAAO,CAAC,EAAE,4BAA4B,GACrC,sBAAsB,CAoCxB"}
+{"version":3,"file":"agent-delegation.d.ts","sourceRoot":"","sources":["../../src/auth/agent-delegation.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,WAAW,sBAAsB;IACrC,sFAAsF;IACtF,YAAY,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,UAAU,EAAE,MAAM,CAAC;IACnB,qFAAqF;IACrF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6FAA6F;IAC7F,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,qBAAsB,SAAQ,sBAAsB;IACnE,mFAAmF;IACnF,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,KAAK,CAAC;QAC9B,sBAAsB,EAAE,QAAQ,CAAC;QACjC,mBAAmB,EAAE,MAAM,CAAC;QAC5B,kBAAkB,EAAE,MAAM,CAAC;KAC5B,CAAC,CAAC;IACH,+EAA+E;IAC/E,gCAAgC,CAAC,EAAE,MAAM,CAAC;CAC3C;AAED;;;;;GAKG;AACH,wBAAgB,+CAA+C,CAC7D,UAAU,EAAE,IAAI,CACd,qBAAqB,EACrB,cAAc,GAAG,iBAAiB,GAAG,WAAW,GAAG,yBAAyB,CAC7E,GACA,UAAU,CA0BZ;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,sBAAsB,GAAG,UAAU,CAcnF;AAED,MAAM,WAAW,yBAA0B,SAAQ,sBAAsB;IACvE,6FAA6F;IAC7F,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAgB3G;AAED,MAAM,WAAW,4BAA4B;IAC3C;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,qBAAqB,EACjC,OAAO,CAAC,EAAE,4BAA4B,GACrC,sBAAsB,CAoCxB"}

package/dist/auth/agent-delegation.js

@@ -1,4 +1,34 @@
 import { ethers } from 'ethers';
+/**
+ * Bind a cold-enrollment key bundle to one otherwise backwards-compatible v2
+ * delegation. Sorting makes transport reordering harmless while retaining
+ * duplicates in the signed payload, so removing or adding any entry changes
+ * the digest.
+ */
+export function computeWorkspaceEncryptionKeysAttestationDigest(delegation) {
+    if (!delegation.workspaceEncryptionKeys?.length) {
+        throw new Error('Workspace encryption-key attestation requires at least one key.');
+    }
+    const canonicalKeys = [...delegation.workspaceEncryptionKeys]
+        .map((key) => ({
+        encryptionKeyAlgorithm: key.encryptionKeyAlgorithm,
+        publicEncryptionKey: key.publicEncryptionKey,
+        encryptionKeyProof: key.encryptionKeyProof,
+    }))
+        .sort((left, right) => {
+        const leftJson = JSON.stringify(left);
+        const rightJson = JSON.stringify(right);
+        return leftJson < rightJson ? -1 : leftJson > rightJson ? 1 : 0;
+    });
+    const encoded = ethers.AbiCoder.defaultAbiCoder().encode(['string', 'address', 'string', 'string', 'string'], [
+        'dkg.join-encryption-keys.v1',
+        delegation.agentAddress.toLowerCase(),
+        delegation.delegateePeerId ?? '',
+        delegation.signature.toLowerCase(),
+        JSON.stringify(canonicalKeys),
+    ]);
+    return ethers.getBytes(ethers.keccak256(encoded));
+}
 /**
  * Canonical digest used for both signing and verification.
  *

package/dist/auth/agent-delegation.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-delegation.js","sourceRoot":"","sources":["../../src/auth/agent-delegation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAgDhC;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAA+B;IACrE,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,MAAM,CACtD,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,EACzE;QACE,yBAAyB;QACzB,OAAO,CAAC,KAAK;QACb,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE;QAClC,OAAO,CAAC,eAAe,IAAI,EAAE;QAC7B,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE;QAClE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;KACrC,CACF,CAAC;IACF,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AACpD,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAiC;IACzE,MAAM,EAAE,eAAe,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC;IAC/C,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CACb,yEAAyE,MAAM,CAAC,OAAO,aAAa,OAAO,CAAC,YAAY,GAAG,CAC5H,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,OAAO,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAmBD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAiC,EACjC,OAAsC;IAEtC,IAAI,CAAC,UAAU,CAAC,eAAe,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,EAAE,aAAa,KAAK,SAAS,IAAI,UAAU,CAAC,KAAK,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CACb,oDAAoD,OAAO,CAAC,aAAa,WAAW,UAAU,CAAC,KAAK,IAAI,CACzG,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,EAAE,WAAW,IAAI,KAAK,CAAC;IAC3C,IAAI,UAAU,CAAC,UAAU,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,UAAU,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW,GAAG,CAAC,IAAI,UAAU,CAAC,WAAW,IAAI,GAAG,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,gDAAgD,UAAU,CAAC,WAAW,SAAS,GAAG,GAAG,CAAC,CAAC;IACzG,CAAC;IAED,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,uBAAuB,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IAC9F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,oDAAoD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3H,CAAC;IACD,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,qDAAqD,SAAS,aAAa,UAAU,CAAC,YAAY,GAAG,CACtG,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,GAAG,UAAU,CAAC;IACzD,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"agent-delegation.js","sourceRoot":"","sources":["../../src/auth/agent-delegation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AA8DhC;;;;;GAKG;AACH,MAAM,UAAU,+CAA+C,CAC7D,UAGC;IAED,IAAI,CAAC,UAAU,CAAC,uBAAuB,EAAE,MAAM,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,aAAa,GAAG,CAAC,GAAG,UAAU,CAAC,uBAAuB,CAAC;SAC1D,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACb,sBAAsB,EAAE,GAAG,CAAC,sBAAsB;QAClD,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;QAC5C,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;KAC3C,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IACL,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,MAAM,CACtD,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,EACnD;QACE,6BAA6B;QAC7B,UAAU,CAAC,YAAY,CAAC,WAAW,EAAE;QACrC,UAAU,CAAC,eAAe,IAAI,EAAE;QAChC,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;QAClC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;KAC9B,CACF,CAAC;IACF,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAA+B;IACrE,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,MAAM,CACtD,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,EACzE;QACE,yBAAyB;QACzB,OAAO,CAAC,KAAK;QACb,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE;QAClC,OAAO,CAAC,eAAe,IAAI,EAAE;QAC7B,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE;QAClE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;KACrC,CACF,CAAC;IACF,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AACpD,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAiC;IACzE,MAAM,EAAE,eAAe,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC;IAC/C,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CACb,yEAAyE,MAAM,CAAC,OAAO,aAAa,OAAO,CAAC,YAAY,GAAG,CAC5H,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,OAAO,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAmBD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAiC,EACjC,OAAsC;IAEtC,IAAI,CAAC,UAAU,CAAC,eAAe,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,EAAE,aAAa,KAAK,SAAS,IAAI,UAAU,CAAC,KAAK,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CACb,oDAAoD,OAAO,CAAC,aAAa,WAAW,UAAU,CAAC,KAAK,IAAI,CACzG,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,EAAE,WAAW,IAAI,KAAK,CAAC;IAC3C,IAAI,UAAU,CAAC,UAAU,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,UAAU,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW,GAAG,CAAC,IAAI,UAAU,CAAC,WAAW,IAAI,GAAG,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,gDAAgD,UAAU,CAAC,WAAW,SAAS,GAAG,GAAG,CAAC,CAAC;IACzG,CAAC;IAED,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,uBAAuB,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IAC9F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,oDAAoD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3H,CAAC;IACD,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,qDAAqD,SAAS,aAAa,UAAU,CAAC,YAAY,GAAG,CACtG,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,GAAG,UAAU,CAAC;IACzD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/authority-index-config.d.ts

@@ -0,0 +1,21 @@
+import { type NormalizedAuthorityIndexSnapshotConfig } from './authority-index-snapshot-service.js';
+/** Explicit trust in the history supplied by these core PeerIDs. */
+export interface AuthorityIndexConfig {
+    mode: 'core-snapshot';
+    trustedCorePeers: readonly string[];
+    maxTailBlocks?: number;
+    /** Increment to discard cached trusted history while keeping the same peers. */
+    cacheEpoch?: number;
+}
+export interface ResolvedAuthorityIndexConfig extends AuthorityIndexConfig {
+    readonly maxTailBlocks: number;
+    readonly cacheEpoch: number;
+    /** Canonical identities retained for transport and persistence namespacing. */
+    readonly snapshot: NormalizedAuthorityIndexSnapshotConfig;
+}
+/**
+ * `nodeRole` is required: this resolver's job includes rejecting cores, so a
+ * default would silently opt an embedder's unlabelled core out of that rule.
+ */
+export declare function resolveAuthorityIndexConfig(config: unknown, nodeRole: 'core' | 'edge'): ResolvedAuthorityIndexConfig | undefined;
+//# sourceMappingURL=authority-index-config.d.ts.map

package/dist/authority-index-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-index-config.d.ts","sourceRoot":"","sources":["../src/authority-index-config.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,sCAAsC,EAC5C,MAAM,uCAAuC,CAAC;AAI/C,oEAAoE;AACpE,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,eAAe,CAAC;IACtB,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,4BAA6B,SAAQ,oBAAoB;IACxE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,sCAAsC,CAAC;CAC3D;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,MAAM,GAAG,MAAM,GACxB,4BAA4B,GAAG,SAAS,CA6C1C"}

package/dist/authority-index-config.js

@@ -0,0 +1,55 @@
+// SPDX-License-Identifier: Apache-2.0
+import { normalizeAuthorityIndexSnapshotConfig, } from './authority-index-snapshot-service.js';
+const resolvedConfigs = new WeakSet();
+/**
+ * `nodeRole` is required: this resolver's job includes rejecting cores, so a
+ * default would silently opt an embedder's unlabelled core out of that rule.
+ */
+export function resolveAuthorityIndexConfig(config, nodeRole) {
+    if (config === undefined)
+        return undefined;
+    if (config === null || typeof config !== 'object' || Array.isArray(config)) {
+        throw new TypeError('authorityIndex must be an object');
+    }
+    const allowedKeys = new Set(['mode', 'trustedCorePeers', 'maxTailBlocks', 'cacheEpoch']);
+    const unknownKeys = Object.keys(config).filter((key) => !allowedKeys.has(key));
+    if (unknownKeys.length > 0) {
+        throw new TypeError(`Unknown authorityIndex option(s): ${unknownKeys.join(', ')}. `
+            + 'Supported options: mode, trustedCorePeers, maxTailBlocks, cacheEpoch');
+    }
+    const value = config;
+    const cacheEpoch = value.cacheEpoch === undefined ? 0 : value.cacheEpoch;
+    if (!Number.isSafeInteger(cacheEpoch) || cacheEpoch < 0) {
+        throw new TypeError('authorityIndex.cacheEpoch must be a non-negative safe integer');
+    }
+    if (value.mode !== 'core-snapshot') {
+        throw new TypeError('authorityIndex.mode must be core-snapshot');
+    }
+    if (nodeRole !== 'edge') {
+        throw new TypeError('authorityIndex core-snapshot mode is only supported on edge nodes');
+    }
+    // The daemon validates before allocating resources, then passes this same
+    // immutable value to DKGAgent.create. Only our own objects bypass re-parsing.
+    if (resolvedConfigs.has(config))
+        return config;
+    try {
+        const normalized = normalizeAuthorityIndexSnapshotConfig(value);
+        const resolved = {
+            mode: 'core-snapshot',
+            trustedCorePeers: Object.freeze(normalized.trustedCorePeers.map((peer) => peer.multiaddr)),
+            maxTailBlocks: normalized.maxTailBlocks,
+            cacheEpoch,
+            snapshot: normalized,
+        };
+        // Persisted config keeps its public wire shape; parsed runtime metadata must
+        // not become an unknown field when a caller serializes a resolved config.
+        Object.defineProperty(resolved, 'snapshot', { enumerable: false });
+        Object.freeze(resolved);
+        resolvedConfigs.add(resolved);
+        return resolved;
+    }
+    catch (cause) {
+        throw new TypeError(`authorityIndex: ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+    }
+}
+//# sourceMappingURL=authority-index-config.js.map

package/dist/authority-index-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-index-config.js","sourceRoot":"","sources":["../src/authority-index-config.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EACL,qCAAqC,GAEtC,MAAM,uCAAuC,CAAC;AAE/C,MAAM,eAAe,GAAG,IAAI,OAAO,EAAU,CAAC;AAkB9C;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAe,EACf,QAAyB;IAEzB,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;IACzF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CACjB,qCAAqC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;cAC7D,sEAAsE,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAuC,CAAC;IACtD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;IACzE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,SAAS,CAAC,+DAA+D,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACnC,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,SAAS,CAAC,mEAAmE,CAAC,CAAC;IAC3F,CAAC;IACD,0EAA0E;IAC1E,8EAA8E;IAC9E,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,MAAsC,CAAC;IAC/E,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,qCAAqC,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG;YACf,IAAI,EAAE,eAAwB;YAC9B,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1F,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,UAAU;YACV,QAAQ,EAAE,UAAU;SACrB,CAAC;QACF,6EAA6E;QAC7E,0EAA0E;QAC1E,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxB,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC,mBAAmB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9G,CAAC;AACH,CAAC"}

package/dist/authority-index-snapshot-client.d.ts

@@ -0,0 +1,42 @@
+import { type ContextGraphAuthorityIndexSnapshotRequest } from '@origintrail-official/dkg-chain';
+import { type AuthorityIndexSnapshotConfig, type AuthorityIndexSnapshotPeer, type NormalizedAuthorityIndexSnapshotConfig } from './authority-index-snapshot-config.js';
+import { type Status } from './authority-index-snapshot-wire.js';
+export interface AuthorityIndexSnapshotTransportOptions {
+    readonly signal: AbortSignal;
+    readonly timeoutMs: number;
+    readonly maxReadBytes: number;
+    readonly payloadReuse: 'single-use';
+}
+export type AuthorityIndexSnapshotClientOptions = ({
+    readonly config: AuthorityIndexSnapshotConfig;
+    readonly normalizedConfig?: never;
+} | {
+    readonly normalizedConfig: NormalizedAuthorityIndexSnapshotConfig;
+    readonly config?: never;
+}) & {
+    /**
+     * Prime peer.multiaddr, then call ProtocolRouter.send(peer.peerId, protocol, ...).
+     * The router's authenticated Noise connection binds the response to that exact
+     * configured PeerID. Never implement this callback with a response-claimed ID.
+     * Pass the complete options object: single-use bypasses pooled buffering and
+     * maxReadBytes aborts the response stream before its wire budget is exceeded.
+     */
+    readonly request: (peer: AuthorityIndexSnapshotPeer, bytes: Uint8Array, options: AuthorityIndexSnapshotTransportOptions) => Promise<Uint8Array>;
+    readonly timeoutMs?: number;
+    /** One peer walk, including chain admission, never gets more than 30 seconds. */
+    readonly overallTimeoutMs?: number;
+};
+export declare class AuthorityIndexSnapshotUnavailableError extends AggregateError {
+    readonly code = "AUTHORITY_INDEX_SNAPSHOT_UNAVAILABLE";
+    constructor(errors: readonly unknown[]);
+}
+export declare class AuthorityIndexSnapshotPeerStatusError extends Error {
+    readonly peerId: string;
+    readonly status: Status;
+    constructor(peerId: string, status: Status);
+}
+/** Ordered, bounded failover; no discovery, multicast, or durable message outbox. */
+export declare function createAuthorityIndexSnapshotClient(options: AuthorityIndexSnapshotClientOptions): {
+    fetchSnapshot(request: ContextGraphAuthorityIndexSnapshotRequest, signal?: AbortSignal, validateSnapshot?: (snapshot: unknown, signal?: AbortSignal) => Promise<void>): Promise<unknown>;
+};
+//# sourceMappingURL=authority-index-snapshot-client.d.ts.map

package/dist/authority-index-snapshot-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-index-snapshot-client.d.ts","sourceRoot":"","sources":["../src/authority-index-snapshot-client.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,yCAAyC,EAC/C,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAEL,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,KAAK,sCAAsC,EAC5C,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAUL,KAAK,MAAM,EACZ,MAAM,oCAAoC,CAAC;AAI5C,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;CACrC;AAED,MAAM,MAAM,mCAAmC,GAAG,CAC9C;IAAE,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,KAAK,CAAA;CAAE,GACpF;IAAE,QAAQ,CAAC,gBAAgB,EAAE,sCAAsC,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAA;CAAE,CACjG,GAAG;IACF;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,EAAE,CAChB,IAAI,EAAE,0BAA0B,EAChC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,sCAAsC,KAC5C,OAAO,CAAC,UAAU,CAAC,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC,CAAC;AAEF,qBAAa,sCAAuC,SAAQ,cAAc;IACxE,QAAQ,CAAC,IAAI,0CAA0C;gBAE3C,MAAM,EAAE,SAAS,OAAO,EAAE;CAIvC;AAED,qBAAa,qCAAsC,SAAQ,KAAK;IAClD,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAvC,MAAM,EAAE,MAAM,EAAW,MAAM,EAAE,MAAM;CAI7D;AAED,qFAAqF;AACrF,wBAAgB,kCAAkC,CAAC,OAAO,EAAE,mCAAmC,GAAG;IAChG,aAAa,CACX,OAAO,EAAE,yCAAyC,EAClD,MAAM,CAAC,EAAE,WAAW,EACpB,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,GAC5E,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB,CAiGA"}

package/dist/authority-index-snapshot-client.js

@@ -0,0 +1,119 @@
+// SPDX-License-Identifier: Apache-2.0
+import { CONTEXT_GRAPH_AUTHORITY_INDEX_BOOTSTRAP_TIMEOUT_MS, decodeContextGraphAuthorityIndexSnapshot, } from '@origintrail-official/dkg-chain';
+import { normalizeAuthorityIndexSnapshotConfig, } from './authority-index-snapshot-config.js';
+import { AUTHORITY_INDEX_SNAPSHOT_MAX_REQUEST_BYTES, AUTHORITY_INDEX_SNAPSHOT_MAX_RESPONSE_BYTES, encoder, exactKeys, hasSnapshotEnvelopeKeys, parseBounded, record, STATUSES, validateRequest, } from './authority-index-snapshot-wire.js';
+const DEFAULT_TIMEOUT_MS = 10_000;
+export class AuthorityIndexSnapshotUnavailableError extends AggregateError {
+    code = 'AUTHORITY_INDEX_SNAPSHOT_UNAVAILABLE';
+    constructor(errors) {
+        super(errors, 'No configured trusted core supplied a usable authority index snapshot; retry later');
+        this.name = 'AuthorityIndexSnapshotUnavailableError';
+    }
+}
+export class AuthorityIndexSnapshotPeerStatusError extends Error {
+    peerId;
+    status;
+    constructor(peerId, status) {
+        super(`Authority index core ${peerId} replied ${status}`);
+        this.peerId = peerId;
+        this.status = status;
+        this.name = 'AuthorityIndexSnapshotPeerStatusError';
+    }
+}
+/** Ordered, bounded failover; no discovery, multicast, or durable message outbox. */
+export function createAuthorityIndexSnapshotClient(options) {
+    const config = options.normalizedConfig ?? normalizeAuthorityIndexSnapshotConfig(options.config);
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > DEFAULT_TIMEOUT_MS) {
+        throw new Error('Authority index snapshot timeout must be an integer between 1 and 10000 ms');
+    }
+    const overallTimeoutMs = options.overallTimeoutMs ?? CONTEXT_GRAPH_AUTHORITY_INDEX_BOOTSTRAP_TIMEOUT_MS;
+    if (!Number.isSafeInteger(overallTimeoutMs) || overallTimeoutMs < 1
+        || overallTimeoutMs > CONTEXT_GRAPH_AUTHORITY_INDEX_BOOTSTRAP_TIMEOUT_MS) {
+        throw new Error('Authority index snapshot overall timeout must be an integer between 1 and 30000 ms');
+    }
+    return Object.freeze({
+        async fetchSnapshot(rawRequest, signal, validateSnapshot) {
+            signal?.throwIfAborted();
+            const request = validateRequest(rawRequest, config.maxTailBlocks);
+            const bytes = encoder.encode(JSON.stringify({ version: 1, request }));
+            if (bytes.byteLength > AUTHORITY_INDEX_SNAPSHOT_MAX_REQUEST_BYTES) {
+                throw new Error('Authority index snapshot request exceeds wire limit');
+            }
+            const failures = [];
+            const overall = new AbortController();
+            const forwardOverallAbort = () => overall.abort(signal.reason);
+            signal?.addEventListener('abort', forwardOverallAbort, { once: true });
+            const overallDeadline = Date.now() + overallTimeoutMs;
+            const overallTimer = setTimeout(() => overall.abort(new Error('Authority index snapshot total seed deadline exceeded')), overallTimeoutMs);
+            try {
+                for (const peer of config.trustedCorePeers) {
+                    signal?.throwIfAborted();
+                    if (overall.signal.aborted)
+                        break;
+                    const attempt = new AbortController();
+                    const forwardAbort = () => attempt.abort(overall.signal.reason);
+                    overall.signal.addEventListener('abort', forwardAbort, { once: true });
+                    const attemptTimeoutMs = Math.min(timeoutMs, Math.max(1, overallDeadline - Date.now()));
+                    const timeout = setTimeout(() => attempt.abort(new Error(`Authority index snapshot peer ${peer.peerId} timeout`)), attemptTimeoutMs);
+                    let onAttemptAbort;
+                    try {
+                        const aborted = new Promise((_, reject) => {
+                            onAttemptAbort = () => reject(attempt.signal.reason);
+                            attempt.signal.addEventListener('abort', onAttemptAbort, { once: true });
+                        });
+                        const fetched = (async () => {
+                            const responseBytes = await options.request(peer, bytes, {
+                                signal: attempt.signal,
+                                timeoutMs: attemptTimeoutMs,
+                                maxReadBytes: AUTHORITY_INDEX_SNAPSHOT_MAX_RESPONSE_BYTES,
+                                payloadReuse: 'single-use',
+                            });
+                            attempt.signal.throwIfAborted();
+                            const response = record(parseBounded(responseBytes, AUTHORITY_INDEX_SNAPSHOT_MAX_RESPONSE_BYTES));
+                            if (response?.version === 1 && typeof response.status === 'string'
+                                && STATUSES.has(response.status) && exactKeys(response, ['version', 'status'])) {
+                                throw new AuthorityIndexSnapshotPeerStatusError(peer.peerId, response.status);
+                            }
+                            if (!response || response.version !== 1 || response.status !== 'ok'
+                                || !exactKeys(response, ['version', 'status', 'snapshot'])) {
+                                throw new Error('Authority index core snapshot invalid response');
+                            }
+                            const snapshot = response.snapshot;
+                            if (!hasSnapshotEnvelopeKeys(snapshot)
+                                || decodeContextGraphAuthorityIndexSnapshot(snapshot, request) === undefined) {
+                                throw new Error('Invalid authority index snapshot envelope, scope, coverage, or integrity');
+                            }
+                            // Canonical hash/integrity errors try the next trusted provider,
+                            // inside both the per-peer and physical seed deadline.
+                            await validateSnapshot?.(snapshot, attempt.signal);
+                            attempt.signal.throwIfAborted();
+                            return snapshot;
+                        })();
+                        return await Promise.race([fetched, aborted]);
+                    }
+                    catch (error) {
+                        signal?.throwIfAborted();
+                        failures.push(error);
+                    }
+                    finally {
+                        clearTimeout(timeout);
+                        overall.signal.removeEventListener('abort', forwardAbort);
+                        if (onAttemptAbort)
+                            attempt.signal.removeEventListener('abort', onAttemptAbort);
+                    }
+                }
+                if (overall.signal.aborted && !failures.includes(overall.signal.reason)) {
+                    failures.push(overall.signal.reason);
+                }
+                // Retry classification and cooldown belong to the chain bootstrap owner.
+                throw new AuthorityIndexSnapshotUnavailableError(failures);
+            }
+            finally {
+                clearTimeout(overallTimer);
+                signal?.removeEventListener('abort', forwardOverallAbort);
+            }
+        },
+    });
+}
+//# sourceMappingURL=authority-index-snapshot-client.js.map

package/dist/authority-index-snapshot-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-index-snapshot-client.js","sourceRoot":"","sources":["../src/authority-index-snapshot-client.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EACL,kDAAkD,EAClD,wCAAwC,GAEzC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,qCAAqC,GAItC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,0CAA0C,EAC1C,2CAA2C,EAC3C,OAAO,EACP,SAAS,EACT,uBAAuB,EACvB,YAAY,EACZ,MAAM,EACN,QAAQ,EACR,eAAe,GAEhB,MAAM,oCAAoC,CAAC;AAE5C,MAAM,kBAAkB,GAAG,MAAM,CAAC;AA8BlC,MAAM,OAAO,sCAAuC,SAAQ,cAAc;IAC/D,IAAI,GAAG,sCAAsC,CAAC;IAEvD,YAAY,MAA0B;QACpC,KAAK,CAAC,MAAM,EAAE,oFAAoF,CAAC,CAAC;QACpG,IAAI,CAAC,IAAI,GAAG,wCAAwC,CAAC;IACvD,CAAC;CACF;AAED,MAAM,OAAO,qCAAsC,SAAQ,KAAK;IACzC;IAAyB;IAA9C,YAAqB,MAAc,EAAW,MAAc;QAC1D,KAAK,CAAC,wBAAwB,MAAM,YAAY,MAAM,EAAE,CAAC,CAAC;QADvC,WAAM,GAAN,MAAM,CAAQ;QAAW,WAAM,GAAN,MAAM,CAAQ;QAE1D,IAAI,CAAC,IAAI,GAAG,uCAAuC,CAAC;IACtD,CAAC;CACF;AAED,qFAAqF;AACrF,MAAM,UAAU,kCAAkC,CAAC,OAA4C;IAO7F,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,IAAI,qCAAqC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjG,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,kBAAkB,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,kDAAkD,CAAC;IACxG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC;WAC9D,gBAAgB,GAAG,kDAAkD,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,CAAC,aAAa,CACjB,UAAqD,EACrD,MAAoB,EACpB,gBAA6E;YAE7E,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;YAClE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACtE,IAAI,KAAK,CAAC,UAAU,GAAG,0CAA0C,EAAE,CAAC;gBAClE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,QAAQ,GAAc,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;YACtC,MAAM,mBAAmB,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAO,CAAC,MAAM,CAAC,CAAC;YAChE,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC;YACtD,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CACjD,IAAI,KAAK,CAAC,uDAAuD,CAAC,CACnE,EAAE,gBAAgB,CAAC,CAAC;YACrB,IAAI,CAAC;gBACH,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;oBAC3C,MAAM,EAAE,cAAc,EAAE,CAAC;oBACzB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;wBAAE,MAAM;oBAClC,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;oBACtC,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBAChE,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBACvE,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;oBACxF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAC5C,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,MAAM,UAAU,CAAC,CAClE,EAAE,gBAAgB,CAAC,CAAC;oBACrB,IAAI,cAAwC,CAAC;oBAC7C,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;4BAC/C,cAAc,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;4BACrD,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC3E,CAAC,CAAC,CAAC;wBACH,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;4BAC1B,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;gCACvD,MAAM,EAAE,OAAO,CAAC,MAAM;gCACtB,SAAS,EAAE,gBAAgB;gCAC3B,YAAY,EAAE,2CAA2C;gCACzD,YAAY,EAAE,YAAY;6BAC3B,CAAC,CAAC;4BACH,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;4BAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE,2CAA2C,CAAC,CAAC,CAAC;4BAClG,IAAI,QAAQ,EAAE,OAAO,KAAK,CAAC,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ;mCAC7D,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;gCACjF,MAAM,IAAI,qCAAqC,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAgB,CAAC,CAAC;4BAC1F,CAAC;4BACD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI;mCAC9D,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;gCAC7D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;4BACpE,CAAC;4BACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;4BACnC,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC;mCACjC,wCAAwC,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;gCAC/E,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;4BAC9F,CAAC;4BACD,iEAAiE;4BACjE,uDAAuD;4BACvD,MAAM,gBAAgB,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;4BACnD,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;4BAChC,OAAO,QAAQ,CAAC;wBAClB,CAAC,CAAC,EAAE,CAAC;wBACL,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;oBAChD,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,EAAE,cAAc,EAAE,CAAC;wBACzB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACvB,CAAC;4BAAS,CAAC;wBACT,YAAY,CAAC,OAAO,CAAC,CAAC;wBACtB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;wBAC1D,IAAI,cAAc;4BAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;oBAClF,CAAC;gBACH,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBACxE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACvC,CAAC;gBACD,yEAAyE;gBACzE,MAAM,IAAI,sCAAsC,CAAC,QAAQ,CAAC,CAAC;YAC7D,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,YAAY,CAAC,CAAC;gBAC3B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/authority-index-snapshot-config.d.ts

@@ -0,0 +1,17 @@
+export declare const AUTHORITY_INDEX_SNAPSHOT_MAX_TRUSTED_PEERS = 8;
+export declare const AUTHORITY_INDEX_SNAPSHOT_DEFAULT_MAX_TAIL_BLOCKS = 2000;
+export interface AuthorityIndexSnapshotConfig {
+    readonly trustedCorePeers: readonly string[];
+    readonly maxTailBlocks?: number;
+}
+export interface AuthorityIndexSnapshotPeer {
+    readonly peerId: string;
+    readonly multiaddr: string;
+}
+export interface NormalizedAuthorityIndexSnapshotConfig {
+    readonly trustedCorePeers: readonly AuthorityIndexSnapshotPeer[];
+    readonly maxTailBlocks: number;
+}
+/** Explicit identities only. Discovery or relay roles never enlarge this trust set. */
+export declare function normalizeAuthorityIndexSnapshotConfig(config: unknown): NormalizedAuthorityIndexSnapshotConfig;
+//# sourceMappingURL=authority-index-snapshot-config.d.ts.map

package/dist/authority-index-snapshot-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-index-snapshot-config.d.ts","sourceRoot":"","sources":["../src/authority-index-snapshot-config.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,0CAA0C,IAA2D,CAAC;AACnH,eAAO,MAAM,gDAAgD,OAAQ,CAAC;AAEtE,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,gBAAgB,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACjE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,uFAAuF;AACvF,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,OAAO,GACd,sCAAsC,CA6CxC"}

package/dist/authority-index-snapshot-config.js

@@ -0,0 +1,54 @@
+// SPDX-License-Identifier: Apache-2.0
+import { peerIdFromString } from '@libp2p/peer-id';
+import { multiaddr } from '@multiformats/multiaddr';
+import { CONTEXT_GRAPH_AUTHORITY_INDEX_SNAPSHOT_MAX_TAIL_BLOCKS, CONTEXT_GRAPH_AUTHORITY_INDEX_SNAPSHOT_MAX_TRUSTED_PEERS, CONTEXT_GRAPH_AUTHORITY_INDEX_SNAPSHOT_MIN_TAIL_BLOCKS, } from '@origintrail-official/dkg-chain';
+import { record } from './authority-index-snapshot-wire.js';
+export const AUTHORITY_INDEX_SNAPSHOT_MAX_TRUSTED_PEERS = CONTEXT_GRAPH_AUTHORITY_INDEX_SNAPSHOT_MAX_TRUSTED_PEERS;
+export const AUTHORITY_INDEX_SNAPSHOT_DEFAULT_MAX_TAIL_BLOCKS = 2_000;
+/** Explicit identities only. Discovery or relay roles never enlarge this trust set. */
+export function normalizeAuthorityIndexSnapshotConfig(config) {
+    const data = record(config);
+    if (!data || !Array.isArray(data.trustedCorePeers)
+        || data.trustedCorePeers.length === 0
+        || data.trustedCorePeers.length > AUTHORITY_INDEX_SNAPSHOT_MAX_TRUSTED_PEERS) {
+        throw new Error(`Authority index trustedCorePeers must contain at least 1 and at most ${AUTHORITY_INDEX_SNAPSHOT_MAX_TRUSTED_PEERS} explicit multiaddrs`);
+    }
+    const maxTailBlocks = data.maxTailBlocks === undefined
+        ? AUTHORITY_INDEX_SNAPSHOT_DEFAULT_MAX_TAIL_BLOCKS
+        : data.maxTailBlocks;
+    if (typeof maxTailBlocks !== 'number' || !Number.isSafeInteger(maxTailBlocks)
+        || maxTailBlocks < CONTEXT_GRAPH_AUTHORITY_INDEX_SNAPSHOT_MIN_TAIL_BLOCKS
+        || maxTailBlocks > CONTEXT_GRAPH_AUTHORITY_INDEX_SNAPSHOT_MAX_TAIL_BLOCKS) {
+        throw new Error(`Authority index maxTailBlocks must be an integer between ${CONTEXT_GRAPH_AUTHORITY_INDEX_SNAPSHOT_MIN_TAIL_BLOCKS} and ${CONTEXT_GRAPH_AUTHORITY_INDEX_SNAPSHOT_MAX_TAIL_BLOCKS}`);
+    }
+    const identities = new Set();
+    const peers = data.trustedCorePeers.map((raw) => {
+        if (typeof raw !== 'string' || raw.length === 0 || raw.length > 1_024) {
+            throw new Error('Authority index trusted core must be an explicit multiaddr');
+        }
+        const parsed = multiaddr(raw);
+        const components = parsed.getComponents();
+        const last = components.at(-1);
+        const circuitIndexes = components.flatMap((part, index) => part.name === 'p2p-circuit' ? [index] : []);
+        const peerIndexes = components.flatMap((part, index) => part.name === 'p2p' ? [index] : []);
+        const host = components[0];
+        if (!host || !['ip4', 'ip6', 'dns', 'dns4', 'dns6'].includes(host.name)
+            || !components.some((part) => part.name === 'tcp' || part.name === 'udp')
+            || last?.name !== 'p2p' || !last.value
+            || circuitIndexes.length > 1
+            || (circuitIndexes.length === 0 && peerIndexes.length !== 1)
+            || (circuitIndexes.length === 1 && (peerIndexes.length !== 2
+                || peerIndexes[0] !== circuitIndexes[0] - 1
+                || peerIndexes[1] !== circuitIndexes[0] + 1))) {
+            throw new Error('Authority index trusted core requires a host transport and unambiguous final /p2p/<peerId>');
+        }
+        // Canonicalize alternate encodings so one identity cannot count twice.
+        const peerId = peerIdFromString(last.value).toString();
+        if (identities.has(peerId))
+            throw new Error('Authority index trustedCorePeers contains a duplicate peer identity');
+        identities.add(peerId);
+        return Object.freeze({ peerId, multiaddr: parsed.toString() });
+    });
+    return Object.freeze({ trustedCorePeers: Object.freeze(peers), maxTailBlocks });
+}
+//# sourceMappingURL=authority-index-snapshot-config.js.map