@origintrail-official/dkg-agent 10.0.19 → 10.0.21

package/dist/context-graph-membership-persist-scheduler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-graph-membership-persist-scheduler.d.ts","sourceRoot":"","sources":["../src/context-graph-membership-persist-scheduler.ts"],"names":[],"mappings":"AAEA,qBAAa,2CAA4C,SAAQ,KAAK;IACpE,QAAQ,CAAC,IAAI,sCAAsC;gBAEvC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,6CAA8C,SAAQ,KAAK;IACtE,QAAQ,CAAC,IAAI,wCAAwC;;CAMtD;AAED,eAAO,MAAM,4DAA4D,2CAC/B,CAAC;AAE3C,qBAAa,iDAAkD,SAAQ,KAAK;IAC1E,QAAQ,CAAC,IAAI,4CAAgE;gBAEjE,SAAS,EAAE,MAAM;CAI9B;AAgBD,MAAM,WAAW,4CAA4C;IAC3D,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,qBAAa,sCAAsC;IAK/C,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IALpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,MAAM,CAAS;gBAGJ,QAAQ,SAAQ,EAChB,iBAAiB,SAAK;IAUzC,OAAO,CACL,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC1B,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GACjC,OAAO,CAAC,IAAI,CAAC;IAyChB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAK9B,MAAM,IAAI,IAAI;IAOd,MAAM,IAAI,4CAA4C;YAUxC,OAAO;CActB"}
+{"version":3,"file":"context-graph-membership-persist-scheduler.d.ts","sourceRoot":"","sources":["../src/context-graph-membership-persist-scheduler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,KAAK,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAEvG,qBAAa,2CAA4C,SAAQ,KAAK;IACpE,QAAQ,CAAC,IAAI,sCAAsC;gBAEvC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,6CAA8C,SAAQ,KAAK;IACtE,QAAQ,CAAC,IAAI,wCAAwC;;CAMtD;AAED,eAAO,MAAM,4DAA4D,2CAC/B,CAAC;AAE3C,qBAAa,iDAAkD,SAAQ,KAAK;IAC1E,QAAQ,CAAC,IAAI,4CAAgE;gBAEjE,SAAS,EAAE,MAAM;CAI9B;AAED,MAAM,MAAM,4CAA4C,GAAG,2BAA2B,CAAC;AAEvF;;;;;;GAMG;AACH,qBAAa,sCAAuC,SAAQ,qBAAqB;gBACnE,QAAQ,SAAQ,EAAE,iBAAiB,SAAK;CASrD"}

package/dist/context-graph-membership-persist-scheduler.js

@@ -1,4 +1,5 @@
 // SPDX-License-Identifier: Apache-2.0
+import { KeyedPersistScheduler } from './keyed-persist-scheduler.js';
 export class ContextGraphMembershipPersistQueueFullError extends Error {
     code = 'CG_MEMBERSHIP_PERSIST_QUEUE_FULL';
     constructor(message) {
@@ -22,98 +23,21 @@ export class ContextGraphMembershipPersistShutdownTimeoutError extends Error {
     }
 }
 /**
- * Bounded keyed serialization for membership-store mutations.
+ * Bounded keyed serialization for membership-store mutations: a
+ * {@link KeyedPersistScheduler} with membership's bounds and typed errors.
  *
- * Strict operations preserve FIFO order and receive explicit backpressure.
- * Adjacent background mutations coalesce to their latest write while the
- * displaced caller settles successfully: those callers are deliberately
- * best-effort, and only the final persisted state is meaningful.
+ * Background membership writes omit `strict` and coalesce to the latest write
+ * per key; callers that need every write, in order, pass `{ strict: true }`.
  */
-export class ContextGraphMembershipPersistScheduler {
-    maxLanes;
-    maxPendingPerLane;
-    lanes = new Map();
-    closed = false;
+export class ContextGraphMembershipPersistScheduler extends KeyedPersistScheduler {
     constructor(maxLanes = 1_000, maxPendingPerLane = 16) {
-        this.maxLanes = maxLanes;
-        this.maxPendingPerLane = maxPendingPerLane;
-        if (!Number.isSafeInteger(maxLanes) || maxLanes < 1) {
-            throw new Error('Membership persistence maxLanes must be a positive safe integer');
-        }
-        if (!Number.isSafeInteger(maxPendingPerLane) || maxPendingPerLane < 1) {
-            throw new Error('Membership persistence maxPendingPerLane must be a positive safe integer');
-        }
-    }
-    enqueue(key, write, options = {}) {
-        if (this.closed) {
-            return Promise.reject(new ContextGraphMembershipPersistQueueClosedError());
-        }
-        let lane = this.lanes.get(key);
-        if (!lane) {
-            if (this.lanes.size >= this.maxLanes) {
-                return Promise.reject(new ContextGraphMembershipPersistQueueFullError(`Context-graph membership persistence reached its ${this.maxLanes}-lane limit`));
-            }
-            let resolveDrained;
-            const drained = new Promise((resolve) => { resolveDrained = resolve; });
-            lane = { active: false, pending: [], drained, resolveDrained };
-            this.lanes.set(key, lane);
-        }
-        const strict = options.strict === true;
-        return new Promise((resolve, reject) => {
-            const tail = lane.pending.at(-1);
-            if (!strict && tail && !tail.strict) {
-                tail.resolve();
-                lane.pending[lane.pending.length - 1] = { strict, write, resolve, reject };
-            }
-            else {
-                if (lane.pending.length >= this.maxPendingPerLane) {
-                    reject(new ContextGraphMembershipPersistQueueFullError(`Context-graph membership persistence key "${key}" reached its `
-                        + `${this.maxPendingPerLane}-write pending limit`));
-                    return;
-                }
-                lane.pending.push({ strict, write, resolve, reject });
-            }
-            if (!lane.active) {
-                lane.active = true;
-                void this.runLane(key, lane);
-            }
+        super({
+            label: 'context-graph membership persistence',
+            maxLanes,
+            maxPendingPerLane,
+            queueFullError: (message) => new ContextGraphMembershipPersistQueueFullError(message),
+            queueClosedError: () => new ContextGraphMembershipPersistQueueClosedError(),
         });
     }
-    closeAndDrain() {
-        this.closed = true;
-        return Promise.all([...this.lanes.values()].map((lane) => lane.drained)).then(() => undefined);
-    }
-    reopen() {
-        if (this.lanes.size > 0) {
-            throw new Error('Cannot reopen context-graph membership persistence before it drains');
-        }
-        this.closed = false;
-    }
-    status() {
-        let active = 0;
-        let pending = 0;
-        for (const lane of this.lanes.values()) {
-            if (lane.active)
-                active += 1;
-            pending += lane.pending.length;
-        }
-        return { closed: this.closed, lanes: this.lanes.size, active, pending };
-    }
-    async runLane(key, lane) {
-        while (lane.pending.length > 0) {
-            const operation = lane.pending.shift();
-            try {
-                await operation.write();
-                operation.resolve();
-            }
-            catch (error) {
-                operation.reject(error);
-            }
-        }
-        lane.active = false;
-        if (this.lanes.get(key) === lane)
-            this.lanes.delete(key);
-        lane.resolveDrained();
-    }
 }
 //# sourceMappingURL=context-graph-membership-persist-scheduler.js.map

package/dist/context-graph-membership-persist-scheduler.js.map

@@ -1 +1 @@
-{"version":3,"file":"context-graph-membership-persist-scheduler.js","sourceRoot":"","sources":["../src/context-graph-membership-persist-scheduler.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,MAAM,OAAO,2CAA4C,SAAQ,KAAK;IAC3D,IAAI,GAAG,kCAAkC,CAAC;IAEnD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,6CAA6C,CAAC;IAC5D,CAAC;CACF;AAED,MAAM,OAAO,6CAA8C,SAAQ,KAAK;IAC7D,IAAI,GAAG,oCAAoC,CAAC;IAErD;QACE,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,GAAG,+CAA+C,CAAC;IAC9D,CAAC;CACF;AAED,MAAM,CAAC,MAAM,4DAA4D,GACvE,wCAAwC,CAAC;AAE3C,MAAM,OAAO,iDAAkD,SAAQ,KAAK;IACjE,IAAI,GAAG,4DAA4D,CAAC;IAE7E,YAAY,SAAiB;QAC3B,KAAK,CAAC,6DAA6D,SAAS,IAAI,CAAC,CAAC;QAClF,IAAI,CAAC,IAAI,GAAG,mDAAmD,CAAC;IAClE,CAAC;CACF;AAuBD;;;;;;;GAOG;AACH,MAAM,OAAO,sCAAsC;IAK9B;IACA;IALF,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,MAAM,GAAG,KAAK,CAAC;IAEvB,YACmB,WAAW,KAAK,EAChB,oBAAoB,EAAE;QADtB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,sBAAiB,GAAjB,iBAAiB,CAAK;QAEvC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,OAAO,CACL,GAAW,EACX,KAA0B,EAC1B,UAAgC,EAAE;QAElC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,6CAA6C,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACrC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,2CAA2C,CACnE,oDAAoD,IAAI,CAAC,QAAQ,aAAa,CAC/E,CAAC,CAAC;YACL,CAAC;YACD,IAAI,cAA2B,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9E,IAAI,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;YAC/D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC;QACvC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,IAAI,GAAG,IAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACpC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACf,IAAK,CAAC,OAAO,CAAC,IAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,IAAI,IAAK,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACnD,MAAM,CAAC,IAAI,2CAA2C,CACpD,6CAA6C,GAAG,gBAAgB;0BAC9D,GAAG,IAAI,CAAC,iBAAiB,sBAAsB,CAClD,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,IAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,CAAC,IAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,IAAK,CAAC,MAAM,GAAG,IAAI,CAAC;gBACpB,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAK,CAAC,CAAC;YAChC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,aAAa;QACX,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjG,CAAC;IAED,MAAM;QACJ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,MAAM;QACJ,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,CAAC,CAAC;YAC7B,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACjC,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC1E,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,IAAiB;QAClD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAG,CAAC;YACxC,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;gBACxB,SAAS,CAAC,OAAO,EAAE,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,CAAC;CACF"}
+{"version":3,"file":"context-graph-membership-persist-scheduler.js","sourceRoot":"","sources":["../src/context-graph-membership-persist-scheduler.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EAAE,qBAAqB,EAAoC,MAAM,8BAA8B,CAAC;AAEvG,MAAM,OAAO,2CAA4C,SAAQ,KAAK;IAC3D,IAAI,GAAG,kCAAkC,CAAC;IAEnD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,6CAA6C,CAAC;IAC5D,CAAC;CACF;AAED,MAAM,OAAO,6CAA8C,SAAQ,KAAK;IAC7D,IAAI,GAAG,oCAAoC,CAAC;IAErD;QACE,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,GAAG,+CAA+C,CAAC;IAC9D,CAAC;CACF;AAED,MAAM,CAAC,MAAM,4DAA4D,GACvE,wCAAwC,CAAC;AAE3C,MAAM,OAAO,iDAAkD,SAAQ,KAAK;IACjE,IAAI,GAAG,4DAA4D,CAAC;IAE7E,YAAY,SAAiB;QAC3B,KAAK,CAAC,6DAA6D,SAAS,IAAI,CAAC,CAAC;QAClF,IAAI,CAAC,IAAI,GAAG,mDAAmD,CAAC;IAClE,CAAC;CACF;AAID;;;;;;GAMG;AACH,MAAM,OAAO,sCAAuC,SAAQ,qBAAqB;IAC/E,YAAY,QAAQ,GAAG,KAAK,EAAE,iBAAiB,GAAG,EAAE;QAClD,KAAK,CAAC;YACJ,KAAK,EAAE,sCAAsC;YAC7C,QAAQ;YACR,iBAAiB;YACjB,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,2CAA2C,CAAC,OAAO,CAAC;YACrF,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI,6CAA6C,EAAE;SAC5E,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/context-graph-meta-confirmation.d.ts

@@ -1,9 +1,29 @@
 import type { ChainAdapter } from '@origintrail-official/dkg-chain';
 import type { TripleStore } from '@origintrail-official/dkg-storage';
 import type { ActivePublicContextGraphChainProof } from './active-public-context-graph-chain-proof.js';
-export interface ConfirmContextGraphMetadataInput {
+import type { ApprovedMemberAcceptance } from './internal/context-graph-authority/approved-member-acceptance.js';
+/**
+ * What a confirmation is for.
+ *
+ * - `read` (the default): the local metadata is authoritative for reads. A
+ *   public definition confirms on its own, because public reads never depend
+ *   on membership; `rejectUnregisteredPlaceholder` additionally demands a
+ *   chain proof before a public definition next to a local placeholder counts.
+ * - `approved-member`: join bootstrap completion (#2831 review), judged with
+ *   the same `acceptance` the snapshot refresh used. Only the one definition
+ *   that acceptance admits confirms, carrying its member proof: the public
+ *   definition for a public acceptance, whose authority must still hold now,
+ *   and the complete private definition otherwise. Stored triples never
+ *   authenticate the policy themselves. Unless this node still holds the
+ *   approval the acceptance names, nothing confirms.
+ */
+export type ConfirmContextGraphMetadataInput = {
+    readonly purpose?: 'read';
     readonly rejectUnregisteredPlaceholder?: boolean;
-}
+} | {
+    readonly purpose: 'approved-member';
+    readonly acceptance: ApprovedMemberAcceptance;
+};
 export interface ContextGraphMetadataConfirmationDependencies {
     readonly chain: ChainAdapter;
     readonly resolveActivePublicChainProof: () => Promise<ActivePublicContextGraphChainProof>;

package/dist/context-graph-meta-confirmation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-graph-meta-confirmation.d.ts","sourceRoot":"","sources":["../src/context-graph-meta-confirmation.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAOrE,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAChD,8CAA8C,CAAC;AAIjD,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,6BAA6B,CAAC,EAAE,OAAO,CAAC;CAClD;AAED,MAAM,WAAW,4CAA4C;IAC3D,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,6BAA6B,EAAE,MAAM,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC1F,QAAQ,CAAC,qBAAqB,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7E,QAAQ,CAAC,gCAAgC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC,CAAC;CAClF;AAED,2FAA2F;AAC3F,wBAAsB,6BAA6B,CACjD,YAAY,EAAE,4CAA4C,EAC1D,cAAc,EAAE,MAAM,EACtB,KAAK,GAAE,gCAAqC,GAC3C,OAAO,CAAC,OAAO,CAAC,CA+GlB"}
+{"version":3,"file":"context-graph-meta-confirmation.d.ts","sourceRoot":"","sources":["../src/context-graph-meta-confirmation.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAOrE,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAChD,8CAA8C,CAAC;AAIjD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MACtC,kEAAkE,CAAC;AAErE;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,gCAAgC,GACxC;IACE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,6BAA6B,CAAC,EAAE,OAAO,CAAC;CAClD,GACD;IACE,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;CAC/C,CAAC;AAEN,MAAM,WAAW,4CAA4C;IAC3D,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,6BAA6B,EAAE,MAAM,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC1F,QAAQ,CAAC,qBAAqB,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7E,QAAQ,CAAC,gCAAgC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC,CAAC;CAClF;AAED,2FAA2F;AAC3F,wBAAsB,6BAA6B,CACjD,YAAY,EAAE,4CAA4C,EAC1D,cAAc,EAAE,MAAM,EACtB,KAAK,GAAE,gCAAqC,GAC3C,OAAO,CAAC,OAAO,CAAC,CA2GlB"}

package/dist/context-graph-meta-confirmation.js

@@ -12,6 +12,21 @@ export async function confirmContextGraphMetadataV1(dependencies, contextGraphId
     if (isPublicMetaDurabilityPending(dependencies.store, contextGraphId)) {
         return false;
     }
+    if (input.purpose === 'approved-member') {
+        const { proof } = input.acceptance;
+        // A lifecycle race or partial rehydration can drop or change the binding;
+        // the pre-join definition must not then stand in for the member.
+        const stillApproved = () => (dependencies.localApprovedAgentByContextGraph.get(contextGraphId)?.toLowerCase()
+            === proof.approvedAgentAddress.toLowerCase());
+        if (!stillApproved())
+            return false;
+        const confirmed = await findAuthoritativeDefinition(dependencies, contextGraphId, [{ definition: input.acceptance.admittedDefinition, memberProof: proof }], 'agent.contextGraph.confirmedMeta.approvedMember') !== null;
+        // Readiness is declared now, so the authority behind the acceptance and
+        // this node's approval must both still hold now, after the awaits: a
+        // rejection or a new join request can change the binding while they run.
+        return confirmed && await input.acceptance.stillHolds() && stillApproved();
+    }
+    const memberProof = await resolveApprovedMemberProof(dependencies, contextGraphId);
     const metaGraph = contextGraphMetaGraphUri(contextGraphId);
     const contextGraphUri = contextGraphDataGraphUri(contextGraphId);
     const unregisteredPlaceholderResult = await dependencies.store.query(`ASK WHERE {
@@ -29,30 +44,10 @@ export async function confirmContextGraphMetadataV1(dependencies, contextGraphId
             .then((proof) => proof.state === 'public')
             .catch(() => false);
     }
-    const approvedAgentAddress = dependencies.localApprovedAgentByContextGraph.get(contextGraphId);
-    let expectedDelegateeOpKey;
-    if (approvedAgentAddress) {
-        try {
-            expectedDelegateeOpKey = await inferAdapterPublisherAddress(dependencies.chain);
-        }
-        catch {
-            // The libp2p peer binding remains sufficient when no op-key is exposed.
-        }
-    }
-    const authoritativeDefinitionResult = await dependencies.store.query(buildAuthoritativePrivateMetaAskQuery(contextGraphId, approvedAgentAddress
-        ? {
-            approvedAgentAddress,
-            expectedDelegateePeerId: dependencies.peerId,
-            expectedDelegateeOpKey,
-        }
-        : undefined), { source: 'agent.contextGraph.confirmedMeta.privateDefinition' });
-    if (authoritativeDefinitionResult.type === 'boolean'
-        && authoritativeDefinitionResult.value === true) {
+    const authoritativeDefinition = await findAuthoritativeDefinition(dependencies, contextGraphId, [{ definition: 'private', memberProof }, { definition: 'public' }], 'agent.contextGraph.confirmedMeta');
+    if (authoritativeDefinition === 'private')
         return true;
-    }
-    const authoritativePublicDefinitionResult = await dependencies.store.query(buildAuthoritativePublicMetaAskQuery(contextGraphId), { source: 'agent.contextGraph.confirmedMeta.publicDefinition' });
-    if (authoritativePublicDefinitionResult.type === 'boolean'
-        && authoritativePublicDefinitionResult.value === true
+    if (authoritativeDefinition === 'public'
         && (!hasUnregisteredPlaceholder
             || input.rejectUnregisteredPlaceholder !== true
             || hasActivePublicOnChainProof === true)) {
@@ -82,4 +77,40 @@ export async function confirmContextGraphMetadataV1(dependencies, contextGraphId
     }`, { source: 'agent.contextGraph.confirmedMeta.ontologyDeclaration' });
     return ontologyResult.type === 'boolean' && ontologyResult.value === true;
 }
+/** This node's approved-member proof for the graph, when it holds an approval. */
+async function resolveApprovedMemberProof(dependencies, contextGraphId) {
+    const approvedAgentAddress = dependencies.localApprovedAgentByContextGraph.get(contextGraphId);
+    if (!approvedAgentAddress)
+        return undefined;
+    let expectedDelegateeOpKey;
+    try {
+        expectedDelegateeOpKey = await inferAdapterPublisherAddress(dependencies.chain);
+    }
+    catch {
+        // The libp2p peer binding remains sufficient when no op-key is exposed.
+    }
+    return {
+        approvedAgentAddress,
+        expectedDelegateePeerId: dependencies.peerId,
+        expectedDelegateeOpKey,
+    };
+}
+/**
+ * The canonical stored-definition proofs, shared by every confirmation
+ * purpose. Each purpose lists the definitions it admits, in order, with the
+ * member proof each must carry. Returns the first definition that matched.
+ */
+async function findAuthoritativeDefinition(dependencies, contextGraphId, candidates, sourcePrefix) {
+    for (const { definition, memberProof } of candidates) {
+        const query = definition === 'private'
+            ? buildAuthoritativePrivateMetaAskQuery(contextGraphId, memberProof)
+            : buildAuthoritativePublicMetaAskQuery(contextGraphId, memberProof);
+        const result = await dependencies.store.query(query, {
+            source: `${sourcePrefix}.${definition}Definition`,
+        });
+        if (result.type === 'boolean' && result.value === true)
+            return definition;
+    }
+    return null;
+}
 //# sourceMappingURL=context-graph-meta-confirmation.js.map

package/dist/context-graph-meta-confirmation.js.map

@@ -1 +1 @@
-{"version":3,"file":"context-graph-meta-confirmation.js","sourceRoot":"","sources":["../src/context-graph-meta-confirmation.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AAIxC,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,qCAAqC,EAAE,MAC9C,uCAAuC,CAAC;AAC1C,OAAO,EAAE,oCAAoC,EAAE,MAC7C,sCAAsC,CAAC;AAGzC,OAAO,EAAE,6BAA6B,EAAE,MACtC,uCAAuC,CAAC;AAgB1C,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,YAA0D,EAC1D,cAAsB,EACtB,QAA0C,EAAE;IAE5C,IAAK,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAc,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,6BAA6B,CAAC,YAAY,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,wBAAwB,CAAC,cAAc,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,wBAAwB,CAAC,cAAc,CAAC,CAAC;IACjE,MAAM,6BAA6B,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,CAClE;eACW,SAAS;WACb,eAAe,MAAM,YAAY,CAAC,uBAAuB;;MAE9D,EACF,EAAE,MAAM,EAAE,0DAA0D,EAAE,CACvE,CAAC;IACF,MAAM,0BAA0B,GAAG,6BAA6B,CAAC,IAAI,KAAK,SAAS;WAC9E,6BAA6B,CAAC,KAAK,KAAK,IAAI,CAAC;IAClD,IAAI,2BAAgD,CAAC;IACrD,IACE,0BAA0B;WACvB,KAAK,CAAC,6BAA6B,KAAK,IAAI,EAC/C,CAAC;QACD,2BAA2B,GAAG,MAAM,YAAY;aAC7C,6BAA6B,EAAE;aAC/B,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;aACzC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,oBAAoB,GAAG,YAAY,CAAC,gCAAgC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC/F,IAAI,sBAA0C,CAAC;IAC/C,IAAI,oBAAoB,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,sBAAsB,GAAG,MAAM,4BAA4B,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;IACH,CAAC;IACD,MAAM,6BAA6B,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,CAClE,qCAAqC,CACnC,cAAc,EACd,oBAAoB;QAClB,CAAC,CAAC;YACE,oBAAoB;YACpB,uBAAuB,EAAE,YAAY,CAAC,MAAM;YAC5C,sBAAsB;SACvB;QACH,CAAC,CAAC,SAAS,CACd,EACD,EAAE,MAAM,EAAE,oDAAoD,EAAE,CACjE,CAAC;IACF,IACE,6BAA6B,CAAC,IAAI,KAAK,SAAS;WAC7C,6BAA6B,CAAC,KAAK,KAAK,IAAI,EAC/C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,mCAAmC,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,CACxE,oCAAoC,CAAC,cAAc,CAAC,EACpD,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAChE,CAAC;IACF,IACE,mCAAmC,CAAC,IAAI,KAAK,SAAS;WACnD,mCAAmC,CAAC,KAAK,KAAK,IAAI;WAClD,CACD,CAAC,0BAA0B;eACxB,KAAK,CAAC,6BAA6B,KAAK,IAAI;eAC5C,2BAA2B,KAAK,IAAI,CACxC,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,2BAA2B,KAAK,SAAS,EAAE,CAAC;QAC9C,2BAA2B,GAAG,MAAM,YAAY,CAAC,6BAA6B,EAAE;aAC7E,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;aACzC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,2BAA2B;QAAE,OAAO,IAAI,CAAC;IAE7C,IACE,0BAA0B;WACvB,CACD,YAAY,CAAC,gCAAgC,CAAC,GAAG,CAAC,cAAc,CAAC;eAC9D,CACD,CAAC,2BAA2B;mBACzB,CACD,KAAK,CAAC,6BAA6B,KAAK,IAAI;uBACzC,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,WAAW,KAAK,IAAI,CACxE,CACF,CACF,EACD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,MAAM,YAAY,CAAC,qBAAqB,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IAE3E,MAAM,aAAa,GAAG,wBAAwB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC/E,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,CACnD;eACW,aAAa;WACjB,eAAe,MAAM,YAAY,CAAC,QAAQ,MAAM,YAAY,CAAC,iBAAiB;;MAEnF,EACF,EAAE,MAAM,EAAE,sDAAsD,EAAE,CACnE,CAAC;IACF,OAAO,cAAc,CAAC,IAAI,KAAK,SAAS,IAAI,cAAc,CAAC,KAAK,KAAK,IAAI,CAAC;AAC5E,CAAC"}
+{"version":3,"file":"context-graph-meta-confirmation.js","sourceRoot":"","sources":["../src/context-graph-meta-confirmation.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AAIxC,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,qCAAqC,EAAE,MAC9C,uCAAuC,CAAC;AAC1C,OAAO,EAAE,oCAAoC,EAAE,MAC7C,sCAAsC,CAAC;AAGzC,OAAO,EAAE,6BAA6B,EAAE,MACtC,uCAAuC,CAAC;AAwC1C,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,YAA0D,EAC1D,cAAsB,EACtB,QAA0C,EAAE;IAE5C,IAAK,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAc,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,6BAA6B,CAAC,YAAY,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;QACxC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC;QACnC,0EAA0E;QAC1E,iEAAiE;QACjE,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,CAC1B,YAAY,CAAC,gCAAgC,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE;gBAC1E,KAAK,CAAC,oBAAoB,CAAC,WAAW,EAAE,CAC/C,CAAC;QACF,IAAI,CAAC,aAAa,EAAE;YAAE,OAAO,KAAK,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,2BAA2B,CACjD,YAAY,EACZ,cAAc,EACd,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,kBAAkB,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EACzE,iDAAiD,CAClD,KAAK,IAAI,CAAC;QACX,wEAAwE;QACxE,qEAAqE;QACrE,yEAAyE;QACzE,OAAO,SAAS,IAAI,MAAM,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,aAAa,EAAE,CAAC;IAC7E,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,0BAA0B,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAEnF,MAAM,SAAS,GAAG,wBAAwB,CAAC,cAAc,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,wBAAwB,CAAC,cAAc,CAAC,CAAC;IACjE,MAAM,6BAA6B,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,CAClE;eACW,SAAS;WACb,eAAe,MAAM,YAAY,CAAC,uBAAuB;;MAE9D,EACF,EAAE,MAAM,EAAE,0DAA0D,EAAE,CACvE,CAAC;IACF,MAAM,0BAA0B,GAAG,6BAA6B,CAAC,IAAI,KAAK,SAAS;WAC9E,6BAA6B,CAAC,KAAK,KAAK,IAAI,CAAC;IAClD,IAAI,2BAAgD,CAAC;IACrD,IACE,0BAA0B;WACvB,KAAK,CAAC,6BAA6B,KAAK,IAAI,EAC/C,CAAC;QACD,2BAA2B,GAAG,MAAM,YAAY;aAC7C,6BAA6B,EAAE;aAC/B,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;aACzC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,uBAAuB,GAAG,MAAM,2BAA2B,CAC/D,YAAY,EACZ,cAAc,EACd,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAClE,kCAAkC,CACnC,CAAC;IACF,IAAI,uBAAuB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,IACE,uBAAuB,KAAK,QAAQ;WACjC,CACD,CAAC,0BAA0B;eACxB,KAAK,CAAC,6BAA6B,KAAK,IAAI;eAC5C,2BAA2B,KAAK,IAAI,CACxC,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,2BAA2B,KAAK,SAAS,EAAE,CAAC;QAC9C,2BAA2B,GAAG,MAAM,YAAY,CAAC,6BAA6B,EAAE;aAC7E,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;aACzC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,2BAA2B;QAAE,OAAO,IAAI,CAAC;IAE7C,IACE,0BAA0B;WACvB,CACD,YAAY,CAAC,gCAAgC,CAAC,GAAG,CAAC,cAAc,CAAC;eAC9D,CACD,CAAC,2BAA2B;mBACzB,CACD,KAAK,CAAC,6BAA6B,KAAK,IAAI;uBACzC,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,WAAW,KAAK,IAAI,CACxE,CACF,CACF,EACD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,MAAM,YAAY,CAAC,qBAAqB,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IAE3E,MAAM,aAAa,GAAG,wBAAwB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC/E,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,CACnD;eACW,aAAa;WACjB,eAAe,MAAM,YAAY,CAAC,QAAQ,MAAM,YAAY,CAAC,iBAAiB;;MAEnF,EACF,EAAE,MAAM,EAAE,sDAAsD,EAAE,CACnE,CAAC;IACF,OAAO,cAAc,CAAC,IAAI,KAAK,SAAS,IAAI,cAAc,CAAC,KAAK,KAAK,IAAI,CAAC;AAC5E,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,0BAA0B,CACvC,YAA0D,EAC1D,cAAsB;IAEtB,MAAM,oBAAoB,GAAG,YAAY,CAAC,gCAAgC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC/F,IAAI,CAAC,oBAAoB;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,sBAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,sBAAsB,GAAG,MAAM,4BAA4B,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;IAC1E,CAAC;IACD,OAAO;QACL,oBAAoB;QACpB,uBAAuB,EAAE,YAAY,CAAC,MAAM;QAC5C,sBAAsB;KACvB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,2BAA2B,CACxC,YAA0D,EAC1D,cAAsB,EACtB,UAGE,EACF,YAAoB;IAEpB,KAAK,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,UAAU,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,UAAU,KAAK,SAAS;YACpC,CAAC,CAAC,qCAAqC,CAAC,cAAc,EAAE,WAAW,CAAC;YACpE,CAAC,CAAC,oCAAoC,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;YACnD,MAAM,EAAE,GAAG,YAAY,IAAI,UAAU,YAAY;SAClD,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO,UAAU,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/context-graph-meta-projection.d.ts

@@ -48,9 +48,13 @@ export declare class ContextGraphMetaProjection {
     private readonly store;
     private readonly entries;
     private authorityFactsRevision;
+    private allFactsRevision;
     constructor(store: TripleStore);
     /** Invalidate request-local absence proofs when projection sources change. */
     get readAuthorityFactsRevision(): number;
+    /** Fence a source-qualified proof over one CG's metadata without rejecting
+     * it when an unrelated graph or agent profile changes during the read. */
+    readContextGraphAuthorityFactsRevision(contextGraphId: string): string;
     /**
      * A conservative presence projection for batched read admission. Every fact
      * about the exact CG subject in a normal projection source requires full
@@ -65,6 +69,12 @@ export declare class ContextGraphMetaProjection {
     prepareReadAuthorityFactsSnapshot(contextGraphIds: readonly string[], options?: QueryOptions): Promise<ContextGraphReadAuthorityFactsSnapshot>;
     get(contextGraphId: string, options?: QueryOptions): Promise<ContextGraphMetaRecord>;
     markDirty(contextGraphId: string): void;
+    /**
+     * Rebuild this graph's cached record on its next read without reporting a
+     * change of authority facts, for a caller that wrote nothing itself: no
+     * authority-facts revision advances. Supersedes a rebuild in flight.
+     */
+    requireFreshRead(contextGraphId: string): void;
     /**
      * #1863 — dirty the projection for the context graph a single-graph destructive
      * mutation (e.g. `replaceSubject`) targets, derived from the GRAPH itself, not
@@ -73,8 +83,9 @@ export declare class ContextGraphMetaProjection {
      * keying off the inserted quads alone (`markDirtyFromQuads`) misses the delete.
      * Keying off an own meta/catalog graph covers both insert and delete. Shared
      * AGENTS/ONTOLOGY sources invalidate every record because the callback does
-     * not supply the affected subject. Other graphs (e.g. publisher control-plane
-     * jobs) do not dirty the projection.
+     * not supply the affected subject. Other graphs do not dirty projection cache
+     * entries, but still advance the recipient-authority fence because key lookup
+     * scans all named graphs.
      */
     markDirtyForGraph(graphUri: string): void;
     markAllDirty(): void;

package/dist/context-graph-meta-projection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-graph-meta-projection.d.ts","sourceRoot":"","sources":["../src/context-graph-meta-projection.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAIzF,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,0BAA0B,EAAE,CAAC;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,wBAAwB,EAAE,CAAC;IACtC,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;IACrB,wBAAwB,EAAE,OAAO,CAAC;CACnC;AASD,MAAM,WAAW,sCAAsC;IACrD,4EAA4E;IAC5E,aAAa,IAAI,OAAO,CAAC;IACzB,kFAAkF;IAClF,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3C;AAqGD,qBAAa,0BAA0B;IAIzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAHlC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsC;IAC9D,OAAO,CAAC,sBAAsB,CAAK;gBAEN,KAAK,EAAE,WAAW;IAE/C,8EAA8E;IAC9E,IAAI,0BAA0B,IAAI,MAAM,CAEvC;IAED;;;;OAIG;IACG,yCAAyC,CAC7C,eAAe,EAAE,SAAS,MAAM,EAAE,EAClC,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAmD/B;;;;OAIG;IACG,iCAAiC,CACrC,eAAe,EAAE,SAAS,MAAM,EAAE,EAClC,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,sCAAsC,CAAC;IAY5C,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAiC9F,SAAS,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI;IAWvC;;;;;;;;;;OAUG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAiBzC,YAAY,IAAI,IAAI;IAQpB,kBAAkB,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,GAAG,MAAM,EAAE;IAW9C,2BAA2B,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAsClE,mCAAmC;YA+BnC,kCAAkC;YA4BlC,kBAAkB;IAKhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACG,eAAe,CACnB,cAAc,EAAE,MAAM,EACtB,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,sBAAsB,CAAC;YAWpB,OAAO;YAqCP,eAAe;YAwDf,qBAAqB;IA4BnC,OAAO,CAAC,SAAS;YA+DH,aAAa;IA4C3B,OAAO,CAAC,2BAA2B;CA+CpC"}
+{"version":3,"file":"context-graph-meta-projection.d.ts","sourceRoot":"","sources":["../src/context-graph-meta-projection.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAKzF,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,0BAA0B,EAAE,CAAC;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,wBAAwB,EAAE,CAAC;IACtC,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;IACrB,wBAAwB,EAAE,OAAO,CAAC;CACnC;AASD,MAAM,WAAW,sCAAsC;IACrD,4EAA4E;IAC5E,aAAa,IAAI,OAAO,CAAC;IACzB,kFAAkF;IAClF,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3C;AAyHD,qBAAa,0BAA0B;IAKzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAJlC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsC;IAC9D,OAAO,CAAC,sBAAsB,CAAK;IACnC,OAAO,CAAC,gBAAgB,CAAK;gBAEA,KAAK,EAAE,WAAW;IAE/C,8EAA8E;IAC9E,IAAI,0BAA0B,IAAI,MAAM,CAEvC;IAED;8EAC0E;IAC1E,sCAAsC,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM;IAItE;;;;OAIG;IACG,yCAAyC,CAC7C,eAAe,EAAE,SAAS,MAAM,EAAE,EAClC,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAmD/B;;;;OAIG;IACG,iCAAiC,CACrC,eAAe,EAAE,SAAS,MAAM,EAAE,EAClC,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,sCAAsC,CAAC;IAY5C,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAkC9F,SAAS,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI;IAWvC;;;;OAIG;IACH,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI;IAK9C;;;;;;;;;;;OAWG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IA0BzC,YAAY,IAAI,IAAI;IASpB,kBAAkB,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,GAAG,MAAM,EAAE;IAoB9C,2BAA2B,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAsClE,mCAAmC;YA+BnC,kCAAkC;YA4BlC,kBAAkB;IAKhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACG,eAAe,CACnB,cAAc,EAAE,MAAM,EACtB,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,sBAAsB,CAAC;YAWpB,OAAO;YAqCP,eAAe;YAwDf,qBAAqB;IA4BnC,OAAO,CAAC,SAAS;YA+DH,aAAa;IA4C3B,OAAO,CAAC,2BAA2B;CA+CpC"}

package/dist/context-graph-meta-projection.js

@@ -2,6 +2,7 @@
 import { DKG_ONTOLOGY, SYSTEM_CONTEXT_GRAPHS, assertSafeIri, contextGraphCatalogUri, contextGraphDataGraphUri, contextGraphDataUri, contextGraphMetaGraphUri, } from '@origintrail-official/dkg-core';
 import { strip, stripLiteral } from './dkg-agent-utils.js';
 import { mapWithConcurrency } from './map-with-concurrency.js';
+import { cloneMetaRecord } from './internal/context-graph-meta-record-copy.js';
 const DKG_NS = 'https://dkg.network/ontology#';
 const LEGACY_DKG_NS = 'http://dkg.io/ontology/';
 const LEGACY_SCHEMA_NS = 'http://schema.org/';
@@ -32,6 +33,24 @@ const DIRECT_META_PREDICATES = new Set([
     `${DKG_ONTOLOGY.DKG_CONTEXT_GRAPH}OnChainId`,
     `${DKG_ONTOLOGY.DKG_CONTEXT_GRAPH}OnChainHash`,
 ]);
+// Recipient resolution scans these facts across every named graph. They do
+// not populate ContextGraphMetaRecord, but a concurrent insert can still
+// change the exact (agent, key, peer) transport set while a private roster is
+// being rechecked. Share the authority revision with the metadata projection
+// so callers can fence both halves of that decision across awaited reads.
+const WORKSPACE_RECIPIENT_AUTHORITY_PREDICATES = new Set([
+    DKG_ONTOLOGY.DKG_ACCESS_POLICY,
+    DKG_ONTOLOGY.DKG_ALLOWED_AGENT,
+    DKG_ONTOLOGY.DKG_PARTICIPANT_AGENT,
+    DKG_ONTOLOGY.DKG_REVOKED_AGENT,
+    DKG_ONTOLOGY.DKG_PUBLIC_ENCRYPTION_KEY,
+    DKG_ONTOLOGY.DKG_ENCRYPTION_KEY_ALGORITHM,
+    DKG_ONTOLOGY.DKG_ENCRYPTION_KEY_PROOF,
+    DKG_ONTOLOGY.DKG_PEER_ID,
+    DKG_ONTOLOGY.DKG_REVOKED_AT,
+    DKG_ONTOLOGY.DKG_REVOKED_BY,
+    DKG_ONTOLOGY.DKG_ENCRYPTION_KEY_REVOCATION_PROOF,
+]);
 const SUB_GRAPH_META_PREDICATES = new Set([
     DKG_ONTOLOGY.RDF_TYPE,
     DKG_ONTOLOGY.SCHEMA_NAME,
@@ -49,6 +68,7 @@ const SUB_GRAPH_META_PREDICATES = new Set([
 ]);
 const DELEGATION_META_PREDICATES = new Set([
     DKG_ONTOLOGY.DKG_DELEGATION_AGENT,
+    DKG_ONTOLOGY.DKG_DELEGATION_ISSUED_AT,
     DKG_ONTOLOGY.DKG_ALLOWED_DELEGATEE_PEER,
     DKG_ONTOLOGY.DKG_ALLOWED_DELEGATEE_KEY,
     DKG_ONTOLOGY.DKG_DELEGATION_EXPIRES_AT,
@@ -95,6 +115,7 @@ export class ContextGraphMetaProjection {
     store;
     entries = new Map();
     authorityFactsRevision = 0;
+    allFactsRevision = 0;
     constructor(store) {
         this.store = store;
     }
@@ -102,6 +123,11 @@ export class ContextGraphMetaProjection {
     get readAuthorityFactsRevision() {
         return this.authorityFactsRevision;
     }
+    /** Fence a source-qualified proof over one CG's metadata without rejecting
+     * it when an unrelated graph or agent profile changes during the read. */
+    readContextGraphAuthorityFactsRevision(contextGraphId) {
+        return `${this.allFactsRevision}:${this.entries.get(contextGraphId)?.invalidationVersion ?? 0}`;
+    }
     /**
      * A conservative presence projection for batched read admission. Every fact
      * about the exact CG subject in a normal projection source requires full
@@ -186,7 +212,8 @@ export class ContextGraphMetaProjection {
             .then((record) => {
             entry.value = record;
             entry.inflight = undefined;
-            entry.dirty = entry.invalidationVersion !== rebuildVersion;
+            // A fresh-read request during the rebuild leaves the version as it is.
+            entry.dirty ||= entry.invalidationVersion !== rebuildVersion;
             this.entries.set(contextGraphId, entry);
             return record;
         })
@@ -210,6 +237,16 @@ export class ContextGraphMetaProjection {
         }
         this.entries.set(contextGraphId, { dirty: true, invalidationVersion: 1 });
     }
+    /**
+     * Rebuild this graph's cached record on its next read without reporting a
+     * change of authority facts, for a caller that wrote nothing itself: no
+     * authority-facts revision advances. Supersedes a rebuild in flight.
+     */
+    requireFreshRead(contextGraphId) {
+        const existing = this.entries.get(contextGraphId);
+        if (existing)
+            existing.dirty = true;
+    }
     /**
      * #1863 — dirty the projection for the context graph a single-graph destructive
      * mutation (e.g. `replaceSubject`) targets, derived from the GRAPH itself, not
@@ -218,8 +255,9 @@ export class ContextGraphMetaProjection {
      * keying off the inserted quads alone (`markDirtyFromQuads`) misses the delete.
      * Keying off an own meta/catalog graph covers both insert and delete. Shared
      * AGENTS/ONTOLOGY sources invalidate every record because the callback does
-     * not supply the affected subject. Other graphs (e.g. publisher control-plane
-     * jobs) do not dirty the projection.
+     * not supply the affected subject. Other graphs do not dirty projection cache
+     * entries, but still advance the recipient-authority fence because key lookup
+     * scans all named graphs.
      */
     markDirtyForGraph(graphUri) {
         const graph = stripTerm(graphUri);
@@ -232,11 +270,20 @@ export class ContextGraphMetaProjection {
             return;
         }
         const contextGraphId = contextGraphIdFromMetaGraphUri(graphUri) ?? contextGraphIdFromCatalogGraphUri(graphUri);
-        if (contextGraphId)
+        if (contextGraphId) {
             this.markDirty(contextGraphId);
+            return;
+        }
+        // Recipient-key resolution deliberately scans every named graph, including
+        // the durable join-key cache. An atomic subject replacement can delete an
+        // old key/peer route while inserting no authority predicate, so even an
+        // otherwise non-CG target graph must advance the request-local fence. It
+        // does not dirty projection cache entries.
+        this.authorityFactsRevision += 1;
     }
     markAllDirty() {
         this.authorityFactsRevision += 1;
+        this.allFactsRevision += 1;
         for (const entry of this.entries.values()) {
             entry.dirty = true;
             entry.invalidationVersion += 1;
@@ -244,13 +291,23 @@ export class ContextGraphMetaProjection {
     }
     markDirtyFromQuads(quads) {
         const touched = new Set();
+        let recipientAuthorityTouched = false;
         for (const quad of quads) {
+            if (WORKSPACE_RECIPIENT_AUTHORITY_PREDICATES.has(strip(quad.predicate))) {
+                recipientAuthorityTouched = true;
+            }
             const contextGraphId = this.contextGraphIdTouchedByQuad(quad);
             if (!contextGraphId)
                 continue;
             touched.add(contextGraphId);
             this.markDirty(contextGraphId);
         }
+        // Inserts are the generic store mutation for which the decorator can
+        // classify exact quads. Generic delete/update and complete-graph replace
+        // paths already call markAllDirty(), so one conservative bump here closes
+        // the recipient-key/profile insertion race without dirtying every CG cache.
+        if (recipientAuthorityTouched)
+            this.authorityFactsRevision += 1;
         return [...touched];
     }
     async listDeclaredContextGraphIds(options = {}) {
@@ -716,26 +773,6 @@ function contextGraphIdFromCatalogGraphUri(uri) {
         return null;
     return tail;
 }
-function cloneMetaRecord(record) {
-    return {
-        ...record,
-        creators: [...record.creators],
-        curators: [...record.curators],
-        allowedPeers: [...record.allowedPeers],
-        allowedAgents: [...record.allowedAgents],
-        participantAgents: [...record.participantAgents],
-        participantIdentityIds: [...record.participantIdentityIds],
-        revokedAgents: [...record.revokedAgents],
-        delegations: record.delegations.map((delegation) => ({
-            ...delegation,
-            agents: [...delegation.agents],
-            allowedPeers: [...delegation.allowedPeers],
-            allowedKeys: [...delegation.allowedKeys],
-            expiresAtValues: [...delegation.expiresAtValues],
-        })),
-        subGraphs: record.subGraphs.map((subGraph) => ({ ...subGraph })),
-    };
-}
 function raceAgainstAbort(work, signal) {
     if (!signal)
         return work;