@origintrail-official/dkg-agent 10.0.16 → 10.0.18

package/README.md

@@ -45,6 +45,30 @@ const agents = await agent.findAgents();
 const skills = await agent.findSkills({ skillType: 'sentiment-analysis' });
 ```
 
+## Bounded peer discovery
+
+`DiscoveryClient.findAgentPeerPageByAddress(wallet, { limit, afterPeerId?, signal? })`
+requires an integer limit from 1 to `MAX_AGENT_PEER_PAGE_SIZE` (1,024). It returns
+`{ peerIds, nextAfterPeerId }`: peer IDs are unique and ordered, the cursor is
+exclusive, and a null continuation means the query found no further row. The
+query retains at most `limit + 1` rows and does not select optional profile fields.
+The existing `findAgentPeerIdsByAddress(wallet, options?)` remains available as a
+deprecated array-returning facade. It walks bounded pages internally, retaining
+the full result only for callers explicitly using that legacy API.
+
+Bounded recovery providers must implement the exported `AgentPeerDiscovery`
+contract. Providers that cannot paginate must reject the lookup; bounded recovery
+reports `lookupFailed` and never substitutes `findAgents()`. This also applies to
+registry discovery during its metadata-refresh fallback. Legacy single-curator
+metadata resolution and callers explicitly using the rich profile API retain
+their existing behavior.
+
+A page walk is not a snapshot of a changing registry. Recovery treats tail pages
+as incomplete roster evidence even when a tail page has no continuation. Only a
+fresh first-page query covering the entire bounded roster can support its existing
+absence-proof checks. These local peer IDs do not themselves establish curator
+authority.
+
 ## Internal Dependencies
 
 - `@origintrail-official/dkg-core` — P2P node, crypto, event bus

package/dist/active-public-context-graph-chain-proof.d.ts

@@ -10,13 +10,16 @@ export type ActivePublicContextGraphChainProof = {
     detail?: string;
 };
 export type OnChainAccessPolicyState = 0 | 1 | 'unregistered' | 'unknown';
-export type OnChainAccessPolicyStateResolver = (contextGraphId: string, operationContext: OperationContext, options: {
-    slotBindingMode: 'chain-attested-repair';
-}) => Promise<OnChainAccessPolicyState>;
+export type FinalizedOnChainAccessPolicyStateResolver = (contextGraphId: string, operationContext: OperationContext) => Promise<OnChainAccessPolicyState>;
 export type OperationAwareActivePublicChainProofResolver = (contextGraphId: string, operationContext: OperationContext) => Promise<ActivePublicContextGraphChainProof>;
 export type BoundActivePublicChainProofResolver = (operationContext: OperationContext) => Promise<ActivePublicContextGraphChainProof>;
-/** Strict proof boundary: owns binding policy, RPC classification, and state conversion. */
-export declare function resolveActivePublicContextGraphChainProof(resolveOnChainAccessPolicyState: OnChainAccessPolicyStateResolver, contextGraphId: string, operationContext: OperationContext): Promise<ActivePublicContextGraphChainProof>;
+/**
+ * Strict metadata-bootstrap proof boundary: owns binding policy, finalized
+ * authority-index consistency, RPC classification, and state conversion.
+ * Runtime SWM/publish policy gates do not use this resolver and retain fresh
+ * current-state reads.
+ */
+export declare function resolveActivePublicContextGraphChainProof(resolveFinalizedOnChainAccessPolicyState: FinalizedOnChainAccessPolicyStateResolver, contextGraphId: string, operationContext: OperationContext): Promise<ActivePublicContextGraphChainProof>;
 /** Bind one lazy proof promise to one normalized graph for repair + confirmation reuse. */
 export declare function memoizeActivePublicContextGraphChainProof(contextGraphId: string, resolveProof: OperationAwareActivePublicChainProofResolver): BoundActivePublicChainProofResolver;
 //# sourceMappingURL=active-public-context-graph-chain-proof.d.ts.map

package/dist/active-public-context-graph-chain-proof.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"active-public-context-graph-chain-proof.d.ts","sourceRoot":"","sources":["../src/active-public-context-graph-chain-proof.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAEvE,MAAM,MAAM,kCAAkC,GAC1C;IAAE,KAAK,EAAE,QAAQ,CAAA;CAAE,GACnB;IAAE,KAAK,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,cAAc,CAAA;CAAE,GAC3D;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,YAAY,GAAG,aAAa,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhF,MAAM,MAAM,wBAAwB,GAAG,CAAC,GAAG,CAAC,GAAG,cAAc,GAAG,SAAS,CAAC;AAE1E,MAAM,MAAM,gCAAgC,GAAG,CAC7C,cAAc,EAAE,MAAM,EACtB,gBAAgB,EAAE,gBAAgB,EAClC,OAAO,EAAE;IAAE,eAAe,EAAE,uBAAuB,CAAA;CAAE,KAClD,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAEvC,MAAM,MAAM,4CAA4C,GAAG,CACzD,cAAc,EAAE,MAAM,EACtB,gBAAgB,EAAE,gBAAgB,KAC/B,OAAO,CAAC,kCAAkC,CAAC,CAAC;AAEjD,MAAM,MAAM,mCAAmC,GAAG,CAChD,gBAAgB,EAAE,gBAAgB,KAC/B,OAAO,CAAC,kCAAkC,CAAC,CAAC;AAEjD,4FAA4F;AAC5F,wBAAsB,yCAAyC,CAC7D,+BAA+B,EAAE,gCAAgC,EACjE,cAAc,EAAE,MAAM,EACtB,gBAAgB,EAAE,gBAAgB,GACjC,OAAO,CAAC,kCAAkC,CAAC,CAqB7C;AAED,2FAA2F;AAC3F,wBAAgB,yCAAyC,CACvD,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,4CAA4C,GACzD,mCAAmC,CAMrC"}
+{"version":3,"file":"active-public-context-graph-chain-proof.d.ts","sourceRoot":"","sources":["../src/active-public-context-graph-chain-proof.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAEvE,MAAM,MAAM,kCAAkC,GAC1C;IAAE,KAAK,EAAE,QAAQ,CAAA;CAAE,GACnB;IAAE,KAAK,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,cAAc,CAAA;CAAE,GAC3D;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,YAAY,GAAG,aAAa,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhF,MAAM,MAAM,wBAAwB,GAAG,CAAC,GAAG,CAAC,GAAG,cAAc,GAAG,SAAS,CAAC;AAE1E,MAAM,MAAM,yCAAyC,GAAG,CACtD,cAAc,EAAE,MAAM,EACtB,gBAAgB,EAAE,gBAAgB,KAC/B,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAEvC,MAAM,MAAM,4CAA4C,GAAG,CACzD,cAAc,EAAE,MAAM,EACtB,gBAAgB,EAAE,gBAAgB,KAC/B,OAAO,CAAC,kCAAkC,CAAC,CAAC;AAEjD,MAAM,MAAM,mCAAmC,GAAG,CAChD,gBAAgB,EAAE,gBAAgB,KAC/B,OAAO,CAAC,kCAAkC,CAAC,CAAC;AAEjD;;;;;GAKG;AACH,wBAAsB,yCAAyC,CAC7D,wCAAwC,EAAE,yCAAyC,EACnF,cAAc,EAAE,MAAM,EACtB,gBAAgB,EAAE,gBAAgB,GACjC,OAAO,CAAC,kCAAkC,CAAC,CAoB7C;AAED,2FAA2F;AAC3F,wBAAgB,yCAAyC,CACvD,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,4CAA4C,GACzD,mCAAmC,CAMrC"}

package/dist/active-public-context-graph-chain-proof.js

@@ -1,9 +1,14 @@
 // SPDX-License-Identifier: Apache-2.0
-/** Strict proof boundary: owns binding policy, RPC classification, and state conversion. */
-export async function resolveActivePublicContextGraphChainProof(resolveOnChainAccessPolicyState, contextGraphId, operationContext) {
+/**
+ * Strict metadata-bootstrap proof boundary: owns binding policy, finalized
+ * authority-index consistency, RPC classification, and state conversion.
+ * Runtime SWM/publish policy gates do not use this resolver and retain fresh
+ * current-state reads.
+ */
+export async function resolveActivePublicContextGraphChainProof(resolveFinalizedOnChainAccessPolicyState, contextGraphId, operationContext) {
     let state;
     try {
-        state = await resolveOnChainAccessPolicyState(contextGraphId, operationContext, { slotBindingMode: 'chain-attested-repair' });
+        state = await resolveFinalizedOnChainAccessPolicyState(contextGraphId, operationContext);
     }
     catch (error) {
         return {

package/dist/active-public-context-graph-chain-proof.js.map

@@ -1 +1 @@
-{"version":3,"file":"active-public-context-graph-chain-proof.js","sourceRoot":"","sources":["../src/active-public-context-graph-chain-proof.ts"],"names":[],"mappings":"AAAA,sCAAsC;AA0BtC,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC7D,+BAAiE,EACjE,cAAsB,EACtB,gBAAkC;IAElC,IAAI,KAA+B,CAAC;IACpC,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,+BAA+B,CAC3C,cAAc,EACd,gBAAgB,EAChB,EAAE,eAAe,EAAE,uBAAuB,EAAE,CAC7C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC/D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC5C,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACnE,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AACpD,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,yCAAyC,CACvD,cAAsB,EACtB,YAA0D;IAE1D,IAAI,KAA8D,CAAC;IACnE,OAAO,CAAC,gBAAgB,EAAE,EAAE;QAC1B,KAAK,KAAK,YAAY,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"active-public-context-graph-chain-proof.js","sourceRoot":"","sources":["../src/active-public-context-graph-chain-proof.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAyBtC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC7D,wCAAmF,EACnF,cAAsB,EACtB,gBAAkC;IAElC,IAAI,KAA+B,CAAC;IACpC,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,wCAAwC,CACpD,cAAc,EACd,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC/D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC5C,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACnE,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AACpD,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,yCAAyC,CACvD,cAAsB,EACtB,YAA0D;IAE1D,IAAI,KAA8D,CAAC;IACnE,OAAO,CAAC,gBAAgB,EAAE,EAAE;QAC1B,KAAK,KAAK,YAAY,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}

package/dist/agent-peer-discovery.d.ts

@@ -0,0 +1,24 @@
+/** Maximum peer IDs in one wallet-registry page, excluding one lookahead row. */
+export declare const MAX_AGENT_PEER_PAGE_SIZE = 1024;
+export interface AgentPeerPageRequest {
+    /** Positive integer, at most MAX_AGENT_PEER_PAGE_SIZE. */
+    readonly limit: number;
+    /** Exclusive lexical peer-ID cursor; omit for the first page. */
+    readonly afterPeerId?: string;
+    readonly signal?: AbortSignal;
+}
+export interface AgentPeerPage {
+    /** Strictly increasing, duplicate-free peer IDs; at most request.limit. */
+    readonly peerIds: readonly string[];
+    /** Last returned peer ID when another row exists, otherwise null. */
+    readonly nextAfterPeerId: string | null;
+}
+/** Required capability for bounded recovery. Unsupported providers must reject. */
+export interface AgentPeerDiscovery {
+    findAgentPeerPageByAddress(agentAddress: string, request: AgentPeerPageRequest): Promise<AgentPeerPage>;
+}
+export declare function validateAgentPeerPageRequest(request: AgentPeerPageRequest): void;
+/** Reject a broken provider contract before treating a page as registry evidence. */
+export declare function validateAgentPeerPage(page: unknown, request: AgentPeerPageRequest): AgentPeerPage;
+export declare function readAgentPeerPage(discovery: AgentPeerDiscovery, agentAddress: string, request: AgentPeerPageRequest): Promise<AgentPeerPage>;
+//# sourceMappingURL=agent-peer-discovery.d.ts.map

package/dist/agent-peer-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-peer-discovery.d.ts","sourceRoot":"","sources":["../src/agent-peer-discovery.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAE7C,MAAM,WAAW,oBAAoB;IACnC,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,iEAAiE;IACjE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,aAAa;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,qEAAqE;IACrE,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC;AAED,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IACjC,0BAA0B,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACzG;AAED,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAQhF;AAED,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,GAAG,aAAa,CA8BjG;AAED,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,kBAAkB,EAC7B,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,aAAa,CAAC,CAKxB"}

package/dist/agent-peer-discovery.js

@@ -0,0 +1,50 @@
+/** Maximum peer IDs in one wallet-registry page, excluding one lookahead row. */
+export const MAX_AGENT_PEER_PAGE_SIZE = 1024;
+export function validateAgentPeerPageRequest(request) {
+    if (!Number.isSafeInteger(request.limit) || request.limit < 1 || request.limit > MAX_AGENT_PEER_PAGE_SIZE) {
+        throw new RangeError(`Peer page limit must be an integer from 1 to ${MAX_AGENT_PEER_PAGE_SIZE}`);
+    }
+    if (request.afterPeerId !== undefined && (typeof request.afterPeerId !== 'string' || request.afterPeerId.length === 0)) {
+        throw new TypeError('Peer page cursor must be a nonempty string');
+    }
+    request.signal?.throwIfAborted();
+}
+/** Reject a broken provider contract before treating a page as registry evidence. */
+export function validateAgentPeerPage(page, request) {
+    if (page === null || typeof page !== 'object' || Array.isArray(page)) {
+        throw new TypeError('Peer discovery returned an invalid page');
+    }
+    const { peerIds: rawPeerIds, nextAfterPeerId } = page;
+    if (!Array.isArray(rawPeerIds)) {
+        throw new Error('Peer discovery exceeded its page bound');
+    }
+    const peerCount = rawPeerIds.length;
+    if (!Number.isSafeInteger(peerCount) || peerCount < 0 || peerCount > request.limit) {
+        throw new Error('Peer discovery exceeded its page bound');
+    }
+    if (nextAfterPeerId !== null && typeof nextAfterPeerId !== 'string') {
+        throw new TypeError('Peer discovery returned an invalid continuation');
+    }
+    const peerIds = [];
+    let previous = request.afterPeerId;
+    for (let index = 0; index < peerCount; index++) {
+        const peerId = rawPeerIds[index];
+        if (typeof peerId !== 'string' || peerId.length === 0 || (previous !== undefined && peerId <= previous)) {
+            throw new Error('Peer discovery returned a non-monotonic page');
+        }
+        peerIds.push(peerId);
+        previous = peerId;
+    }
+    if (nextAfterPeerId !== null && (peerIds.length !== request.limit || nextAfterPeerId !== previous)) {
+        throw new Error('Peer discovery returned an invalid continuation');
+    }
+    request.signal?.throwIfAborted();
+    return { peerIds, nextAfterPeerId };
+}
+export async function readAgentPeerPage(discovery, agentAddress, request) {
+    const boundedRequest = Object.freeze({ ...request });
+    validateAgentPeerPageRequest(boundedRequest);
+    const page = await discovery.findAgentPeerPageByAddress(agentAddress, boundedRequest);
+    return validateAgentPeerPage(page, boundedRequest);
+}
+//# sourceMappingURL=agent-peer-discovery.js.map

package/dist/agent-peer-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-peer-discovery.js","sourceRoot":"","sources":["../src/agent-peer-discovery.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAsB7C,MAAM,UAAU,4BAA4B,CAAC,OAA6B;IACxE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,GAAG,wBAAwB,EAAE,CAAC;QAC1G,MAAM,IAAI,UAAU,CAAC,gDAAgD,wBAAwB,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACvH,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;AACnC,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,qBAAqB,CAAC,IAAa,EAAE,OAA6B;IAChF,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,IAA+B,CAAC;IACjF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,eAAe,KAAK,IAAI,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;QACpE,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC;IACnC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAY,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,IAAI,QAAQ,CAAC,EAAE,CAAC;YACxG,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,QAAQ,GAAG,MAAM,CAAC;IACpB,CAAC;IACD,IAAI,eAAe,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,IAAI,eAAe,KAAK,QAAQ,CAAC,EAAE,CAAC;QACnG,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAA6B,EAC7B,YAAoB,EACpB,OAA6B;IAE7B,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACrD,4BAA4B,CAAC,cAAc,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,0BAA0B,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACtF,OAAO,qBAAqB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;AACrD,CAAC"}

package/dist/authority-index-bootstrap.d.ts

@@ -0,0 +1,13 @@
+import type { ContextGraphAuthorityIndexBootstrap } from '@origintrail-official/dkg-chain';
+import { type AuthorityIndexSnapshotPlan } from './authority-index-config.js';
+export interface AuthorityIndexBootstrapLog {
+    readonly info: (message: string) => void;
+    readonly warn: (message: string) => void;
+}
+/**
+ * The chain index bootstrap for a snapshot plan. Operator trust fails closed
+ * exactly as configured; only the network-relay default degrades to the
+ * local-history scan, and it reports that and the scan's progress.
+ */
+export declare function createAuthorityIndexBootstrap(plan: AuthorityIndexSnapshotPlan, fetchSnapshot: ContextGraphAuthorityIndexBootstrap['fetchSnapshot'], log: AuthorityIndexBootstrapLog): ContextGraphAuthorityIndexBootstrap;
+//# sourceMappingURL=authority-index-bootstrap.d.ts.map

package/dist/authority-index-bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-index-bootstrap.d.ts","sourceRoot":"","sources":["../src/authority-index-bootstrap.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EAA6B,KAAK,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAIzG,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC1C;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,0BAA0B,EAChC,aAAa,EAAE,mCAAmC,CAAC,eAAe,CAAC,EACnE,GAAG,EAAE,0BAA0B,GAC9B,mCAAmC,CAgBrC"}

package/dist/authority-index-bootstrap.js

@@ -0,0 +1,38 @@
+// SPDX-License-Identifier: Apache-2.0
+import { authorityIndexTrustDomain } from './authority-index-config.js';
+const SCAN_PROGRESS_LOG_INTERVAL_MS = 30_000;
+/**
+ * The chain index bootstrap for a snapshot plan. Operator trust fails closed
+ * exactly as configured; only the network-relay default degrades to the
+ * local-history scan, and it reports that and the scan's progress.
+ */
+export function createAuthorityIndexBootstrap(plan, fetchSnapshot, log) {
+    const bootstrap = {
+        maxTailBlocks: plan.config.maxTailBlocks,
+        trustDomain: authorityIndexTrustDomain(plan.config),
+        fetchSnapshot,
+    };
+    if (plan.source === 'operator')
+        return bootstrap;
+    return {
+        ...bootstrap,
+        // No relay may answer; the edge must still bind graphs.
+        localHistoryFallback: true,
+        onLocalHistoryFallback: ({ scope, reason }) => log.warn(`[authority-index] no network relay supplied a snapshot for ${scope}; falling back to local history: ${reason}`),
+        onScanProgress: createScanProgressLogger(log.info),
+    };
+}
+/** One line per scope per 30 s: a mainnet history scan pages for many minutes. */
+function createScanProgressLogger(info) {
+    const lastLoggedAt = new Map();
+    return (progress) => {
+        const at = Date.now();
+        const last = lastLoggedAt.get(progress.scope);
+        if (last !== undefined && at - last < SCAN_PROGRESS_LOG_INTERVAL_MS)
+            return;
+        lastLoggedAt.set(progress.scope, at);
+        info(`[authority-index] scope=${progress.scope} scanned=${progress.scannedBlocks} `
+            + `through=${progress.throughBlockNumber} behind=${progress.finalizedNumber - progress.throughBlockNumber}`);
+    };
+}
+//# sourceMappingURL=authority-index-bootstrap.js.map

package/dist/authority-index-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-index-bootstrap.js","sourceRoot":"","sources":["../src/authority-index-bootstrap.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAGtC,OAAO,EAAE,yBAAyB,EAAmC,MAAM,6BAA6B,CAAC;AAEzG,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAO7C;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAC3C,IAAgC,EAChC,aAAmE,EACnE,GAA+B;IAE/B,MAAM,SAAS,GAAG;QAChB,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;QACxC,WAAW,EAAE,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC;QACnD,aAAa;KACd,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IACjD,OAAO;QACL,GAAG,SAAS;QACZ,wDAAwD;QACxD,oBAAoB,EAAE,IAAI;QAC1B,sBAAsB,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CACrD,8DAA8D,KAAK,oCAAoC,MAAM,EAAE,CAChH;QACD,cAAc,EAAE,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,SAAS,wBAAwB,CAC/B,IAA+B;IAE/B,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,OAAO,CAAC,QAAQ,EAAE,EAAE;QAClB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,IAAI,KAAK,SAAS,IAAI,EAAE,GAAG,IAAI,GAAG,6BAA6B;YAAE,OAAO;QAC5E,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,2BAA2B,QAAQ,CAAC,KAAK,YAAY,QAAQ,CAAC,aAAa,GAAG;cAC/E,WAAW,QAAQ,CAAC,kBAAkB,WAAW,QAAQ,CAAC,eAAe,GAAG,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACjH,CAAC,CAAC;AACJ,CAAC"}

package/dist/authority-index-config.d.ts

@@ -0,0 +1,76 @@
+import { type NormalizedAuthorityIndexSnapshotConfig } from './authority-index-snapshot-service.js';
+/** Explicit trust in the history supplied by these core PeerIDs. */
+export interface AuthorityIndexConfig {
+    mode: 'core-snapshot';
+    trustedCorePeers: readonly string[];
+    maxTailBlocks?: number;
+    /** Increment to discard cached trusted history while keeping the same peers. */
+    cacheEpoch?: number;
+}
+export interface ResolvedAuthorityIndexConfig extends AuthorityIndexConfig {
+    readonly maxTailBlocks: number;
+    readonly cacheEpoch: number;
+    /** Canonical identities retained for transport and persistence namespacing. */
+    readonly snapshot: NormalizedAuthorityIndexSnapshotConfig;
+}
+/**
+ * `nodeRole` is required: this resolver's job includes rejecting cores, so a
+ * default would silently opt an embedder's unlabelled core out of that rule.
+ */
+export declare function resolveAuthorityIndexConfig(config: unknown, nodeRole: 'core' | 'edge'): ResolvedAuthorityIndexConfig | undefined;
+/**
+ * The persistence namespace of a trust set: its sorted PeerIDs, so moving a
+ * core to a new address keeps its imported prefix. Epoch zero preserves the
+ * original namespace; increasing it lets an operator discard a suspect
+ * imported prefix without changing peers.
+ */
+export declare function authorityIndexTrustDomain(config: ResolvedAuthorityIndexConfig): string;
+/** The agent config fields that decide authority-index bootstrap; `DKGAgentConfig` satisfies it. */
+export interface AuthorityIndexBootstrapInput {
+    /** The operator's `authorityIndex` block, raw or already resolved. */
+    readonly authorityIndex?: unknown;
+    readonly nodeRole?: 'core' | 'edge';
+    readonly chainAdapter?: unknown;
+    readonly chainConfig?: {
+        readonly operationalKeys?: readonly string[];
+    };
+    readonly localContextGraphAuthorityIndexStore?: unknown;
+    /** The network file's relay multiaddrs; see `DKGAgentConfig.networkRelays`. */
+    readonly networkRelays?: readonly string[];
+}
+export type AuthorityIndexBootstrapPlan = {
+    /** The operator's `authorityIndex` block: its pinned cores, failing closed. */
+    readonly source: 'operator';
+    readonly config: ResolvedAuthorityIndexConfig;
+} | {
+    /**
+     * The edge default: the network file's relays, each pinned by the PeerID
+     * in its multiaddr, falling back to local history when none answers.
+     */
+    readonly source: 'network-relays';
+    readonly config: ResolvedAuthorityIndexConfig;
+} | {
+    /** No snapshot bootstrap: the index is scanned from chain history. */
+    readonly source: 'local-history';
+    readonly config?: undefined;
+    /** Why an edge without operator config does not seed from the network relays. */
+    readonly skipReason?: string;
+};
+/** A plan that seeds the index from trusted snapshots. */
+export type AuthorityIndexSnapshotPlan = Exclude<AuthorityIndexBootstrapPlan, {
+    readonly source: 'local-history';
+}>;
+/**
+ * How an agent builds its authority index. The daemon plans from the config it
+ * hands `DKGAgent.create`, which plans again from the same config, so the
+ * startup line always describes the policy the agent runs.
+ *
+ * Operator config always wins and is never downgraded: without the agent's
+ * core-snapshot prerequisites it throws. An edge without operator config
+ * seeds from the network file's relays and falls back to local history. Only
+ * those relays are trusted: agent-registry profiles are unauthenticated
+ * gossip, and nothing binds a profile's PeerID to the staked identity it
+ * names. A core indexes its own chain history.
+ */
+export declare function planAuthorityIndexBootstrap(input: AuthorityIndexBootstrapInput): AuthorityIndexBootstrapPlan;
+//# sourceMappingURL=authority-index-config.d.ts.map

package/dist/authority-index-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-index-config.d.ts","sourceRoot":"","sources":["../src/authority-index-config.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,sCAAsC,EAC5C,MAAM,uCAAuC,CAAC;AAI/C,oEAAoE;AACpE,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,eAAe,CAAC;IACtB,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,4BAA6B,SAAQ,oBAAoB;IACxE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,sCAAsC,CAAC;CAC3D;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,MAAM,GAAG,MAAM,GACxB,4BAA4B,GAAG,SAAS,CA6C1C;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,4BAA4B,GAAG,MAAM,CAKtF;AAED,oGAAoG;AACpG,MAAM,WAAW,4BAA4B;IAC3C,sEAAsE;IACtE,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE;QAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;IACxE,QAAQ,CAAC,oCAAoC,CAAC,EAAE,OAAO,CAAC;IACxD,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,MAAM,MAAM,2BAA2B,GACnC;IACA,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;CAC/C,GACC;IACA;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;CAC/C,GACC;IACA,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;IAC5B,iFAAiF;IACjF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEJ,0DAA0D;AAC1D,MAAM,MAAM,0BAA0B,GAAG,OAAO,CAAC,2BAA2B,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;CAAE,CAAC,CAAC;AAEpH;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,4BAA4B,GAAG,2BAA2B,CAkB5G"}

package/dist/authority-index-config.js

@@ -0,0 +1,142 @@
+// SPDX-License-Identifier: Apache-2.0
+import { createHash } from 'node:crypto';
+import { AUTHORITY_INDEX_SNAPSHOT_MAX_TRUSTED_PEERS, normalizeAuthorityIndexSnapshotConfig, } from './authority-index-snapshot-service.js';
+const resolvedConfigs = new WeakSet();
+/**
+ * `nodeRole` is required: this resolver's job includes rejecting cores, so a
+ * default would silently opt an embedder's unlabelled core out of that rule.
+ */
+export function resolveAuthorityIndexConfig(config, nodeRole) {
+    if (config === undefined)
+        return undefined;
+    if (config === null || typeof config !== 'object' || Array.isArray(config)) {
+        throw new TypeError('authorityIndex must be an object');
+    }
+    const allowedKeys = new Set(['mode', 'trustedCorePeers', 'maxTailBlocks', 'cacheEpoch']);
+    const unknownKeys = Object.keys(config).filter((key) => !allowedKeys.has(key));
+    if (unknownKeys.length > 0) {
+        throw new TypeError(`Unknown authorityIndex option(s): ${unknownKeys.join(', ')}. `
+            + 'Supported options: mode, trustedCorePeers, maxTailBlocks, cacheEpoch');
+    }
+    const value = config;
+    const cacheEpoch = value.cacheEpoch === undefined ? 0 : value.cacheEpoch;
+    if (!Number.isSafeInteger(cacheEpoch) || cacheEpoch < 0) {
+        throw new TypeError('authorityIndex.cacheEpoch must be a non-negative safe integer');
+    }
+    if (value.mode !== 'core-snapshot') {
+        throw new TypeError('authorityIndex.mode must be core-snapshot');
+    }
+    if (nodeRole !== 'edge') {
+        throw new TypeError('authorityIndex core-snapshot mode is only supported on edge nodes');
+    }
+    // The daemon validates before allocating resources, then passes this same
+    // immutable value to DKGAgent.create. Only our own objects bypass re-parsing.
+    if (resolvedConfigs.has(config))
+        return config;
+    try {
+        const normalized = normalizeAuthorityIndexSnapshotConfig(value);
+        const resolved = {
+            mode: 'core-snapshot',
+            trustedCorePeers: Object.freeze(normalized.trustedCorePeers.map((peer) => peer.multiaddr)),
+            maxTailBlocks: normalized.maxTailBlocks,
+            cacheEpoch,
+            snapshot: normalized,
+        };
+        // Persisted config keeps its public wire shape; parsed runtime metadata must
+        // not become an unknown field when a caller serializes a resolved config.
+        Object.defineProperty(resolved, 'snapshot', { enumerable: false });
+        Object.freeze(resolved);
+        resolvedConfigs.add(resolved);
+        return resolved;
+    }
+    catch (cause) {
+        throw new TypeError(`authorityIndex: ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+    }
+}
+/**
+ * The persistence namespace of a trust set: its sorted PeerIDs, so moving a
+ * core to a new address keeps its imported prefix. Epoch zero preserves the
+ * original namespace; increasing it lets an operator discard a suspect
+ * imported prefix without changing peers.
+ */
+export function authorityIndexTrustDomain(config) {
+    const peerIds = config.snapshot.trustedCorePeers.map((peer) => peer.peerId).sort();
+    return createHash('sha256').update(JSON.stringify(config.cacheEpoch === 0 ? peerIds : { trustedCorePeers: peerIds, cacheEpoch: config.cacheEpoch })).digest('hex');
+}
+/**
+ * How an agent builds its authority index. The daemon plans from the config it
+ * hands `DKGAgent.create`, which plans again from the same config, so the
+ * startup line always describes the policy the agent runs.
+ *
+ * Operator config always wins and is never downgraded: without the agent's
+ * core-snapshot prerequisites it throws. An edge without operator config
+ * seeds from the network file's relays and falls back to local history. Only
+ * those relays are trusted: agent-registry profiles are unauthenticated
+ * gossip, and nothing binds a profile's PeerID to the staked identity it
+ * names. A core indexes its own chain history.
+ */
+export function planAuthorityIndexBootstrap(input) {
+    const nodeRole = input.nodeRole ?? 'edge';
+    const operatorConfig = resolveAuthorityIndexConfig(input.authorityIndex, nodeRole);
+    const unmet = unmetCoreSnapshotPrerequisite(input);
+    if (operatorConfig !== undefined) {
+        if (unmet !== undefined) {
+            throw new TypeError('authorityIndex core-snapshot mode requires a configured EVM chain and a local authority index store');
+        }
+        return Object.freeze({ source: 'operator', config: operatorConfig });
+    }
+    if (nodeRole !== 'edge')
+        return Object.freeze({ source: 'local-history' });
+    if (unmet !== undefined)
+        return Object.freeze({ source: 'local-history', skipReason: unmet });
+    const relays = pinnableNetworkRelays(input.networkRelays ?? []);
+    if (relays.length === 0) {
+        return Object.freeze({ source: 'local-history', skipReason: 'no network relay is available to seed from' });
+    }
+    const relayConfig = resolveAuthorityIndexConfig({ mode: 'core-snapshot', trustedCorePeers: relays }, 'edge');
+    return Object.freeze({ source: 'network-relays', config: relayConfig });
+}
+/**
+ * Core-snapshot mode needs the agent to construct its own EVM adapter, so it
+ * installs the snapshot transport and trust namespace together, with
+ * operational keys and a durable local index store.
+ */
+function unmetCoreSnapshotPrerequisite(input) {
+    if (input.chainAdapter !== undefined) {
+        return 'the chain adapter is injected (such as the mock chain), not a configured EVM chain';
+    }
+    if (input.chainConfig === undefined)
+        return 'no EVM chain is configured';
+    if (!input.chainConfig.operationalKeys?.length)
+        return 'no operational key is configured';
+    if (input.localContextGraphAuthorityIndexStore === undefined) {
+        return 'no local authority index store is available';
+    }
+    return undefined;
+}
+/**
+ * The network relays an explicit `trustedCorePeers` entry could name: first
+ * address per PeerID, at most eight. A network file may still list
+ * placeholder PeerIDs, which never become trust.
+ */
+function pinnableNetworkRelays(relays) {
+    const peerIds = new Set();
+    const pinnable = [];
+    for (const relay of relays) {
+        if (pinnable.length === AUTHORITY_INDEX_SNAPSHOT_MAX_TRUSTED_PEERS)
+            break;
+        let peerId;
+        try {
+            [{ peerId }] = normalizeAuthorityIndexSnapshotConfig({ trustedCorePeers: [relay] }).trustedCorePeers;
+        }
+        catch {
+            continue;
+        }
+        if (peerIds.has(peerId))
+            continue;
+        peerIds.add(peerId);
+        pinnable.push(relay);
+    }
+    return pinnable;
+}
+//# sourceMappingURL=authority-index-config.js.map

package/dist/authority-index-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-index-config.js","sourceRoot":"","sources":["../src/authority-index-config.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,0CAA0C,EAC1C,qCAAqC,GAEtC,MAAM,uCAAuC,CAAC;AAE/C,MAAM,eAAe,GAAG,IAAI,OAAO,EAAU,CAAC;AAkB9C;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAe,EACf,QAAyB;IAEzB,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;IACzF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CACjB,qCAAqC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;cAC7D,sEAAsE,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAuC,CAAC;IACtD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;IACzE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,SAAS,CAAC,+DAA+D,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACnC,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,SAAS,CAAC,mEAAmE,CAAC,CAAC;IAC3F,CAAC;IACD,0EAA0E;IAC1E,8EAA8E;IAC9E,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,MAAsC,CAAC;IAC/E,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,qCAAqC,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG;YACf,IAAI,EAAE,eAAwB;YAC9B,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1F,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,UAAU;YACV,QAAQ,EAAE,UAAU;SACrB,CAAC;QACF,6EAA6E;QAC7E,0EAA0E;QAC1E,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxB,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC,mBAAmB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9G,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAoC;IAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACnF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAC/C,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CACjG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAuCD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAmC;IAC7E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC;IAC1C,MAAM,cAAc,GAAG,2BAA2B,CAAC,KAAK,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,SAAS,CAAC,qGAAqG,CAAC,CAAC;QAC7H,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAC3E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9F,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,4CAA4C,EAAE,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,WAAW,GAAG,2BAA2B,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;IAC7G,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAY,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,SAAS,6BAA6B,CAAC,KAAmC;IACxE,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,oFAAoF,CAAC;IAC9F,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,4BAA4B,CAAC;IACzE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,eAAe,EAAE,MAAM;QAAE,OAAO,kCAAkC,CAAC;IAC1F,IAAI,KAAK,CAAC,oCAAoC,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,6CAA6C,CAAC;IACvD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,MAAyB;IACtD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,QAAQ,CAAC,MAAM,KAAK,0CAA0C;YAAE,MAAM;QAC1E,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,qCAAqC,CAAC,EAAE,gBAAgB,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC;QACvG,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAClC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/authority-index-snapshot-client.d.ts

@@ -0,0 +1,42 @@
+import { type ContextGraphAuthorityIndexSnapshotRequest } from '@origintrail-official/dkg-chain';
+import { type AuthorityIndexSnapshotConfig, type AuthorityIndexSnapshotPeer, type NormalizedAuthorityIndexSnapshotConfig } from './authority-index-snapshot-config.js';
+import { type Status } from './authority-index-snapshot-wire.js';
+export interface AuthorityIndexSnapshotTransportOptions {
+    readonly signal: AbortSignal;
+    readonly timeoutMs: number;
+    readonly maxReadBytes: number;
+    readonly payloadReuse: 'single-use';
+}
+export type AuthorityIndexSnapshotClientOptions = ({
+    readonly config: AuthorityIndexSnapshotConfig;
+    readonly normalizedConfig?: never;
+} | {
+    readonly normalizedConfig: NormalizedAuthorityIndexSnapshotConfig;
+    readonly config?: never;
+}) & {
+    /**
+     * Prime peer.multiaddr, then call ProtocolRouter.send(peer.peerId, protocol, ...).
+     * The router's authenticated Noise connection binds the response to that exact
+     * configured PeerID. Never implement this callback with a response-claimed ID.
+     * Pass the complete options object: single-use bypasses pooled buffering and
+     * maxReadBytes aborts the response stream before its wire budget is exceeded.
+     */
+    readonly request: (peer: AuthorityIndexSnapshotPeer, bytes: Uint8Array, options: AuthorityIndexSnapshotTransportOptions) => Promise<Uint8Array>;
+    readonly timeoutMs?: number;
+    /** One peer walk, including chain admission, never gets more than 30 seconds. */
+    readonly overallTimeoutMs?: number;
+};
+export declare class AuthorityIndexSnapshotUnavailableError extends AggregateError {
+    readonly code = "AUTHORITY_INDEX_SNAPSHOT_UNAVAILABLE";
+    constructor(errors: readonly unknown[]);
+}
+export declare class AuthorityIndexSnapshotPeerStatusError extends Error {
+    readonly peerId: string;
+    readonly status: Status;
+    constructor(peerId: string, status: Status);
+}
+/** Ordered, bounded failover; no discovery, multicast, or durable message outbox. */
+export declare function createAuthorityIndexSnapshotClient(options: AuthorityIndexSnapshotClientOptions): {
+    fetchSnapshot(request: ContextGraphAuthorityIndexSnapshotRequest, signal?: AbortSignal, validateSnapshot?: (snapshot: unknown, signal?: AbortSignal) => Promise<void>): Promise<unknown>;
+};
+//# sourceMappingURL=authority-index-snapshot-client.d.ts.map

package/dist/authority-index-snapshot-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-index-snapshot-client.d.ts","sourceRoot":"","sources":["../src/authority-index-snapshot-client.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,yCAAyC,EAC/C,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAEL,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,KAAK,sCAAsC,EAC5C,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAUL,KAAK,MAAM,EACZ,MAAM,oCAAoC,CAAC;AAI5C,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;CACrC;AAED,MAAM,MAAM,mCAAmC,GAAG,CAC9C;IAAE,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,KAAK,CAAA;CAAE,GACpF;IAAE,QAAQ,CAAC,gBAAgB,EAAE,sCAAsC,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAA;CAAE,CACjG,GAAG;IACF;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,EAAE,CAChB,IAAI,EAAE,0BAA0B,EAChC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,sCAAsC,KAC5C,OAAO,CAAC,UAAU,CAAC,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC,CAAC;AAEF,qBAAa,sCAAuC,SAAQ,cAAc;IACxE,QAAQ,CAAC,IAAI,0CAA0C;gBAE3C,MAAM,EAAE,SAAS,OAAO,EAAE;CAIvC;AAED,qBAAa,qCAAsC,SAAQ,KAAK;IAClD,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAvC,MAAM,EAAE,MAAM,EAAW,MAAM,EAAE,MAAM;CAI7D;AAED,qFAAqF;AACrF,wBAAgB,kCAAkC,CAAC,OAAO,EAAE,mCAAmC,GAAG;IAChG,aAAa,CACX,OAAO,EAAE,yCAAyC,EAClD,MAAM,CAAC,EAAE,WAAW,EACpB,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,GAC5E,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB,CAiGA"}