@origintrail-official/dkg-agent 10.0.19 → 10.0.21

package/dist/dkg-agent-swm-state.d.ts

@@ -1,6 +1,21 @@
 import type { LocalSwmSenderKeySendState, LocalSwmSenderKeyReceiveState, PendingSenderKeyEntry } from './dkg-agent-types.js';
 export declare function swmSenderStateKey(contextGraphId: string, subGraphName: string | undefined, senderAgentAddress: string): string;
 export declare function swmReceiverStateKey(contextGraphId: string, subGraphName: string | undefined, senderAgentAddress: string, epochId: string): string;
+/**
+ * Hash the exact transport routes that received (or durably queued) setup for
+ * a Sender Key epoch. Logical membership remains `(agent, key)`; this separate
+ * snapshot ensures that adding or removing a peer-bound variant rotates the
+ * epoch without redefining the authenticated member set.
+ */
+export declare function computeSwmSenderKeyRecipientRouteHash(input: {
+    contextGraphId: string;
+    subGraphName?: string;
+    recipients: readonly {
+        agentAddress: string;
+        recipientKeyId: string;
+        peerId?: string;
+    }[];
+}): string;
 export declare function serializeSwmSenderSendState(state: LocalSwmSenderKeySendState): Record<string, unknown>;
 export declare function serializeSwmSenderReceiveState(state: LocalSwmSenderKeyReceiveState): Record<string, unknown>;
 export declare function serializePendingSenderKeyEntry(entry: PendingSenderKeyEntry): Record<string, unknown>;

package/dist/dkg-agent-swm-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dkg-agent-swm-state.d.ts","sourceRoot":"","sources":["../src/dkg-agent-swm-state.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EACV,0BAA0B,EAC1B,6BAA6B,EAC7B,qBAAqB,EACtB,MAAM,sBAAsB,CAAC;AAE9B,wBAAgB,iBAAiB,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,SAAS,EAAE,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAE9H;AAED,wBAAgB,mBAAmB,CACjC,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,kBAAkB,EAAE,MAAM,EAC1B,OAAO,EAAE,MAAM,GACd,MAAM,CAER;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,0BAA0B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAatG;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,6BAA6B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgB5G;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAYpG;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,0BAA0B,CAaxG;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,6BAA6B,CAsB9G;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,qBAAqB,CActG"}
+{"version":3,"file":"dkg-agent-swm-state.d.ts","sourceRoot":"","sources":["../src/dkg-agent-swm-state.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EACV,0BAA0B,EAC1B,6BAA6B,EAC7B,qBAAqB,EACtB,MAAM,sBAAsB,CAAC;AAE9B,wBAAgB,iBAAiB,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,SAAS,EAAE,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAE9H;AAED,wBAAgB,mBAAmB,CACjC,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,kBAAkB,EAAE,MAAM,EAC1B,OAAO,EAAE,MAAM,GACd,MAAM,CAER;AAQD;;;;;GAKG;AACH,wBAAgB,qCAAqC,CAAC,KAAK,EAAE;IAC3D,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,SAAS;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,EAAE,CAAC;CACL,GAAG,MAAM,CAyBT;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,0BAA0B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CActG;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,6BAA6B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgB5G;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAapG;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,0BAA0B,CAcxG;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,6BAA6B,CAsB9G;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,qBAAqB,CAetG"}

package/dist/dkg-agent-swm-state.js

@@ -12,6 +12,7 @@
  * "Invalid Sender Key state" error message tied to this state schema
  * and are not a general-purpose validation library.
  */
+import { createHash } from 'node:crypto';
 import { ethers } from 'ethers';
 import { encodeWorkspaceEncryptionKey, decodeWorkspaceEncryptionKey, } from '@origintrail-official/dkg-core';
 export function swmSenderStateKey(contextGraphId, subGraphName, senderAgentAddress) {
@@ -20,6 +21,44 @@ export function swmSenderStateKey(contextGraphId, subGraphName, senderAgentAddre
 export function swmReceiverStateKey(contextGraphId, subGraphName, senderAgentAddress, epochId) {
     return `${swmSenderStateKey(contextGraphId, subGraphName, senderAgentAddress)}\0${epochId}`;
 }
+// v2 invalidates route hashes written by the short-lived peer-variant build
+// whose pending rows did not yet retain their destination peer. On its first
+// publish after upgrade that state rotates instead of reusing an epoch whose
+// remaining delivery obligations cannot be reconstructed from disk.
+const SWM_SENDER_KEY_RECIPIENT_ROUTES_DOMAIN = 'dkg.swm.sender-key.recipient-routes.v2';
+/**
+ * Hash the exact transport routes that received (or durably queued) setup for
+ * a Sender Key epoch. Logical membership remains `(agent, key)`; this separate
+ * snapshot ensures that adding or removing a peer-bound variant rotates the
+ * epoch without redefining the authenticated member set.
+ */
+export function computeSwmSenderKeyRecipientRouteHash(input) {
+    const uniqueRoutes = new Map();
+    for (const recipient of input.recipients) {
+        const route = [
+            ethers.getAddress(recipient.agentAddress).toLowerCase(),
+            recipient.recipientKeyId,
+            recipient.peerId ?? '',
+        ];
+        uniqueRoutes.set(JSON.stringify(route), route);
+    }
+    const routes = [...uniqueRoutes.values()].sort((left, right) => {
+        const byAgent = left[0].localeCompare(right[0]);
+        if (byAgent !== 0)
+            return byAgent;
+        const byKey = left[1].localeCompare(right[1]);
+        return byKey !== 0 ? byKey : left[2].localeCompare(right[2]);
+    });
+    const digest = createHash('sha256')
+        .update(JSON.stringify({
+        domain: SWM_SENDER_KEY_RECIPIENT_ROUTES_DOMAIN,
+        contextGraphId: input.contextGraphId,
+        subGraphName: input.subGraphName ?? '',
+        routes,
+    }))
+        .digest('hex');
+    return `sha256:${digest}`;
+}
 export function serializeSwmSenderSendState(state) {
     return {
         contextGraphId: state.contextGraphId,
@@ -27,6 +66,7 @@ export function serializeSwmSenderSendState(state) {
         senderAgentAddress: state.senderAgentAddress,
         epochId: state.epochId,
         membershipHash: state.membershipHash,
+        recipientRouteHash: state.recipientRouteHash,
         chainKey: encodeWorkspaceEncryptionKey(state.chainKey),
         nextMessageIndex: state.nextMessageIndex,
         senderSigningSecretKey: encodeWorkspaceEncryptionKey(state.senderSigningSecretKey),
@@ -56,6 +96,7 @@ export function serializePendingSenderKeyEntry(entry) {
         senderAgentAddress: entry.senderAgentAddress,
         recipientAgentAddress: entry.recipientAgentAddress,
         recipientKeyId: entry.recipientKeyId,
+        recipientPeerId: entry.recipientPeerId,
         epochId: entry.epochId,
         contextGraphId: entry.contextGraphId,
         subGraphName: entry.subGraphName,
@@ -71,6 +112,7 @@ export function deserializeSwmSenderSendState(entry) {
         senderAgentAddress: ethers.getAddress(requiredString(entry.senderAgentAddress, 'senderAgentAddress')),
         epochId: requiredString(entry.epochId, 'epochId'),
         membershipHash: requiredString(entry.membershipHash, 'membershipHash'),
+        recipientRouteHash: optionalString(entry.recipientRouteHash),
         chainKey: decodeWorkspaceEncryptionKey(requiredString(entry.chainKey, 'chainKey')),
         nextMessageIndex: requiredNumber(entry.nextMessageIndex, 'nextMessageIndex'),
         senderSigningSecretKey: decodeWorkspaceEncryptionKey(requiredString(entry.senderSigningSecretKey, 'senderSigningSecretKey')),
@@ -105,6 +147,7 @@ export function deserializePendingSenderKeyEntry(entry) {
         senderAgentAddress: senderAgentAddress.toLowerCase(),
         recipientAgentAddress: recipientAgentAddress.toLowerCase(),
         recipientKeyId: requiredString(entry.recipientKeyId, 'pending.recipientKeyId'),
+        recipientPeerId: optionalString(entry.recipientPeerId),
         epochId: requiredString(entry.epochId, 'pending.epochId'),
         contextGraphId: requiredString(entry.contextGraphId, 'pending.contextGraphId'),
         subGraphName: optionalString(entry.subGraphName),

package/dist/dkg-agent-swm-state.js.map

@@ -1 +1 @@
-{"version":3,"file":"dkg-agent-swm-state.js","sourceRoot":"","sources":["../src/dkg-agent-swm-state.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,gCAAgC,CAAC;AAOxC,MAAM,UAAU,iBAAiB,CAAC,cAAsB,EAAE,YAAgC,EAAE,kBAA0B;IACpH,OAAO,GAAG,cAAc,KAAK,YAAY,IAAI,EAAE,KAAK,kBAAkB,CAAC,WAAW,EAAE,EAAE,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,cAAsB,EACtB,YAAgC,EAChC,kBAA0B,EAC1B,OAAe;IAEf,OAAO,GAAG,iBAAiB,CAAC,cAAc,EAAE,YAAY,EAAE,kBAAkB,CAAC,KAAK,OAAO,EAAE,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAiC;IAC3E,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC;QACtD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,sBAAsB,EAAE,4BAA4B,CAAC,KAAK,CAAC,sBAAsB,CAAC;QAClF,sBAAsB,EAAE,4BAA4B,CAAC,KAAK,CAAC,sBAAsB,CAAC;QAClF,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAAoC;IACjF,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC;QACtD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,sBAAsB,EAAE,4BAA4B,CAAC,KAAK,CAAC,sBAAsB,CAAC;QAClF,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,gBAAgB,EAAE,CAAC,GAAG,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YAClF,KAAK;YACL,QAAQ,EAAE,4BAA4B,CAAC,QAAQ,CAAC;SACjD,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAA4B;IACzE,OAAO;QACL,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC;QAC7C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAA8B;IAC1E,OAAO;QACL,cAAc,EAAE,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACtE,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC;QAChD,kBAAkB,EAAE,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;QACrG,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;QACjD,cAAc,EAAE,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACtE,QAAQ,EAAE,4BAA4B,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAClF,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QAC5E,sBAAsB,EAAE,4BAA4B,CAAC,cAAc,CAAC,KAAK,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;QAC5H,sBAAsB,EAAE,4BAA4B,CAAC,cAAc,CAAC,KAAK,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;QAC5H,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAA8B;IAC7E,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAsB,CAAC;IACvD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,GAA8B,CAAC;QAC5C,gBAAgB,CAAC,GAAG,CAClB,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,wBAAwB,CAAC,EACpD,4BAA4B,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC,CACzF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,cAAc,EAAE,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACtE,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC;QAChD,kBAAkB,EAAE,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;QACrG,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;QACjD,cAAc,EAAE,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACtE,QAAQ,EAAE,4BAA4B,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAClF,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QAC5E,sBAAsB,EAAE,4BAA4B,CAAC,cAAc,CAAC,KAAK,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;QAC5H,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC;QAC7D,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAA8B;IAC7E,MAAM,kBAAkB,GAAG,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,kBAAkB,EAAE,4BAA4B,CAAC,CAAC,CAAC;IACrH,MAAM,qBAAqB,GAAG,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,qBAAqB,EAAE,+BAA+B,CAAC,CAAC,CAAC;IAC9H,OAAO;QACL,kBAAkB,EAAE,kBAAkB,CAAC,WAAW,EAAE;QACpD,qBAAqB,EAAE,qBAAqB,CAAC,WAAW,EAAE;QAC1D,cAAc,EAAE,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,wBAAwB,CAAC;QAC9E,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,iBAAiB,CAAC;QACzD,cAAc,EAAE,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,wBAAwB,CAAC;QAC9E,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC;QAChD,YAAY,EAAE,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;QACrF,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;QAC1C,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,qBAAqB,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,IAAY;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,cAAc,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,IAAY;IAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,sCAAsC,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,KAAe,CAAC;AACzB,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,CAAC,kEAAkE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AACtD,CAAC"}
+{"version":3,"file":"dkg-agent-swm-state.js","sourceRoot":"","sources":["../src/dkg-agent-swm-state.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,gCAAgC,CAAC;AAOxC,MAAM,UAAU,iBAAiB,CAAC,cAAsB,EAAE,YAAgC,EAAE,kBAA0B;IACpH,OAAO,GAAG,cAAc,KAAK,YAAY,IAAI,EAAE,KAAK,kBAAkB,CAAC,WAAW,EAAE,EAAE,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,cAAsB,EACtB,YAAgC,EAChC,kBAA0B,EAC1B,OAAe;IAEf,OAAO,GAAG,iBAAiB,CAAC,cAAc,EAAE,YAAY,EAAE,kBAAkB,CAAC,KAAK,OAAO,EAAE,CAAC;AAC9F,CAAC;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,oEAAoE;AACpE,MAAM,sCAAsC,GAAG,wCAAwC,CAAC;AAExF;;;;;GAKG;AACH,MAAM,UAAU,qCAAqC,CAAC,KAQrD;IACC,MAAM,YAAY,GAAG,IAAI,GAAG,EAA6C,CAAC;IAC1E,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG;YACZ,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE;YACvD,SAAS,CAAC,cAAc;YACxB,SAAS,CAAC,MAAM,IAAI,EAAE;SACd,CAAC;QACX,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,OAAO,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QACrB,MAAM,EAAE,sCAAsC;QAC9C,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE;QACtC,MAAM;KACP,CAAC,CAAC;SACF,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,UAAU,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAiC;IAC3E,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,QAAQ,EAAE,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC;QACtD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,sBAAsB,EAAE,4BAA4B,CAAC,KAAK,CAAC,sBAAsB,CAAC;QAClF,sBAAsB,EAAE,4BAA4B,CAAC,KAAK,CAAC,sBAAsB,CAAC;QAClF,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAAoC;IACjF,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC;QACtD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,sBAAsB,EAAE,4BAA4B,CAAC,KAAK,CAAC,sBAAsB,CAAC;QAClF,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,gBAAgB,EAAE,CAAC,GAAG,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YAClF,KAAK;YACL,QAAQ,EAAE,4BAA4B,CAAC,QAAQ,CAAC;SACjD,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAA4B;IACzE,OAAO;QACL,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC;QAC7C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAA8B;IAC1E,OAAO;QACL,cAAc,EAAE,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACtE,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC;QAChD,kBAAkB,EAAE,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;QACrG,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;QACjD,cAAc,EAAE,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACtE,kBAAkB,EAAE,cAAc,CAAC,KAAK,CAAC,kBAAkB,CAAC;QAC5D,QAAQ,EAAE,4BAA4B,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAClF,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QAC5E,sBAAsB,EAAE,4BAA4B,CAAC,cAAc,CAAC,KAAK,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;QAC5H,sBAAsB,EAAE,4BAA4B,CAAC,cAAc,CAAC,KAAK,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;QAC5H,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAA8B;IAC7E,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAsB,CAAC;IACvD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,GAA8B,CAAC;QAC5C,gBAAgB,CAAC,GAAG,CAClB,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,wBAAwB,CAAC,EACpD,4BAA4B,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC,CACzF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,cAAc,EAAE,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACtE,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC;QAChD,kBAAkB,EAAE,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;QACrG,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;QACjD,cAAc,EAAE,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACtE,QAAQ,EAAE,4BAA4B,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAClF,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QAC5E,sBAAsB,EAAE,4BAA4B,CAAC,cAAc,CAAC,KAAK,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;QAC5H,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC;QAC7D,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAA8B;IAC7E,MAAM,kBAAkB,GAAG,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,kBAAkB,EAAE,4BAA4B,CAAC,CAAC,CAAC;IACrH,MAAM,qBAAqB,GAAG,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,qBAAqB,EAAE,+BAA+B,CAAC,CAAC,CAAC;IAC9H,OAAO;QACL,kBAAkB,EAAE,kBAAkB,CAAC,WAAW,EAAE;QACpD,qBAAqB,EAAE,qBAAqB,CAAC,WAAW,EAAE;QAC1D,cAAc,EAAE,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,wBAAwB,CAAC;QAC9E,eAAe,EAAE,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC;QACtD,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,iBAAiB,CAAC;QACzD,cAAc,EAAE,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,wBAAwB,CAAC;QAC9E,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC;QAChD,YAAY,EAAE,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;QACrF,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;QAC1C,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,qBAAqB,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,IAAY;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,cAAc,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,IAAY;IAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,sCAAsC,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,KAAe,CAAC;AACzB,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,CAAC,kEAAkE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AACtD,CAAC"}

package/dist/dkg-agent-swm-substrate.d.ts

@@ -8,15 +8,24 @@ import { FinalizationHandler } from './finalization-handler.js';
 import { type ContextGraphSub } from './dkg-agent-types.js';
 import { DKGAgentBase } from './dkg-agent-base.js';
 import type { DKGAgent } from './dkg-agent.js';
+/** Options for subscribing this node to one context graph. */
+export interface ContextGraphSubscribeOptions {
+    trackSyncScope?: boolean;
+    persist?: boolean;
+    deferSharedMemoryGossipSubscribe?: boolean;
+    syncMode?: 'on-demand' | 'always-on';
+    /** Authoritative numeric slot established by the admission owner. */
+    onChainId?: string;
+}
 export declare class SwmSubstrateMethods extends DKGAgentBase {
-    subscribeToContextGraph(this: DKGAgent, contextGraphId: string, options?: {
-        trackSyncScope?: boolean;
-        persist?: boolean;
-        deferSharedMemoryGossipSubscribe?: boolean;
-        syncMode?: 'on-demand' | 'always-on';
-        /** Authoritative numeric slot established by the admission owner. */
-        onChainId?: string;
-    }): ContextGraphSub;
+    subscribeToContextGraph(this: DKGAgent, contextGraphId: string, options?: ContextGraphSubscribeOptions): ContextGraphSub;
+    /** Apply the process-local remainder of the startup subscription plan. */
+    applyStartupContextGraphGossipPlan(this: DKGAgent): number;
+    /**
+     * Install one subscription after alias adoption: the row, its sync scope
+     * and its gossip handlers, or the RFC-64 catalog-owned equivalent.
+     */
+    protected installContextGraphSubscription(this: DKGAgent, contextGraphId: string, options?: ContextGraphSubscribeOptions): ContextGraphSub;
     /**
      * Inverse of {@link subscribeToContextGraph}: drop the LIVE member
      * subscription (publish / app / update / finalization + member-mode SWM
@@ -57,6 +66,38 @@ export declare class SwmSubstrateMethods extends DKGAgentBase {
     rfc64LegacySwmApplyAllowedForScope(this: DKGAgent, contextGraphId: string, subGraphName: string | null): boolean;
     /** Member transport remains necessary for the named-subgraph lane. */
     rfc64LegacySwmMemberTransportAllowedForContextGraph(this: DKGAgent, contextGraphId: string): boolean;
+    /** The cleartext id behind a wire id, or the id unchanged when it has none. */
+    rfc64AuthorityContextGraphIdV1(this: DKGAgent, contextGraphId: string): string;
+    /**
+     * Whether a private graph's root-scope SWM stays on the legacy member lane
+     * (#2858). RFC-64 closed legacy root-scope apply, admission and recovery for
+     * every catalog-mode graph, so that its selected-private lane carries root
+     * SWM on its own. That lane needs private authority a node may not have, so
+     * a member's RFC-64 authority for the graph can stay blocked or resolving
+     * indefinitely. Nothing then delivers the curator's root writes: they are
+     * declined for good, recovery skips the root scope, and a Knowledge Asset's
+     * updates never reach the member.
+     *
+     * The same holds while that authority is active on a node without private
+     * access-policy authority: the selected-private lane then delivers nothing.
+     *
+     * So unless RFC-64 can deliver private root SWM on this node, a private
+     * graph this node is a member of keeps the legacy member lane. Membership
+     * is read from the graph's own `_meta` on this node: a join approval
+     * delivers it before the curator's first share, and it survives a restart,
+     * whereas RFC-64 responsibility needs chain reads that can lag for a long
+     * time. The lane's own checks (allowlist, envelope, sender key, the
+     * curator's authorization) still apply. Public graphs, explicitly selected
+     * or accepted graphs, and nodes with private access-policy authority keep
+     * their RFC-64 behaviour.
+     */
+    rfc64PrivateRootSwmOnLegacyLaneV1(this: DKGAgent, contextGraphId: string): Promise<boolean>;
+    /**
+     * The RFC-64 half of {@link rfc64PrivateRootSwmOnLegacyLaneV1}: the graph's
+     * authority id when RFC-64 cannot deliver its private root SWM on this node,
+     * otherwise `null`. Synchronous, so the caller can repeat it after an await.
+     */
+    protected rfc64PrivateRootLegacyLaneAuthorityIdV1(this: DKGAgent, contextGraphId: string): string | null;
     reconcileSharedMemoryGossipSubscription(this: DKGAgent, contextGraphId: string): Promise<void>;
     /**
      * Receiver handler for `PROTOCOL_SWM_SHARE_ACK`. Extracted into

package/dist/dkg-agent-swm-substrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dkg-agent-swm-substrate.d.ts","sourceRoot":"","sources":["../src/dkg-agent-swm-substrate.ts"],"names":[],"mappings":"AAkGA,OAAO,EACyB,mBAAmB,EAAE,aAAa,EAqBhE,KAAK,qCAAqC,EAI3C,MAAM,qCAAqC,CAAC;AA0B7C,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAML,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EAEtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,KAAK,YAAY,EAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC3B,MAAM,oCAAoC,CAAC;AAiE5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAA4B,MAAM,2BAA2B,CAAC;AAiF1F,OAAO,EAsBL,KAAK,eAAe,EAcrB,MAAM,sBAAsB,CAAC;AAiC9B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAQ/C,qBAAa,mBAAoB,SAAQ,YAAY;IACnD,uBAAuB,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QACxE,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,gCAAgC,CAAC,EAAE,OAAO,CAAC;QAC3C,QAAQ,CAAC,EAAE,WAAW,GAAG,WAAW,CAAC;QACrC,qEAAqE;QACrE,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,eAAe;IA2HnB;;;;;;;;;;;;;;;;OAgBG;IACH,2BAA2B,CAAC,IAAI,EAAE,QAAQ,EACxC,cAAc,EAAE,MAAM,EACtB,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,uBAAuB,CAAC,EAAE,OAAO,CAAC;QAClC,qEAAqE;QACrE,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GACA,IAAI;IAuEP,mCAAmC,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI;IASjF;;;;;OAKG;IACH,0CAA0C,CACxC,IAAI,EAAE,QAAQ,EACd,cAAc,EAAE,MAAM,GACrB,OAAO;IAyBV;;;;;OAKG;IACH,kCAAkC,CAChC,IAAI,EAAE,QAAQ,EACd,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,GAAG,IAAI,GAC1B,OAAO;IAQV,sEAAsE;IACtE,mDAAmD,CACjD,IAAI,EAAE,QAAQ,EACd,cAAc,EAAE,MAAM,GACrB,OAAO;IAgBJ,uCAAuC,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA4IpG;;;;;;;;OAQG;IACU,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAuCzG;;;;;;;;;OASG;IACG,qCAAqC,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAI7H;;;;;;;;;;OAUG;IACH,qCAAqC,CAAC,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,GAAG;QAC/E,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QACzB,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;QACnC,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,SAAS;IAIb,gCAAgC,CAAC,IAAI,EAAE,QAAQ,GAAG,qBAAqB;IAOvE,kCAAkC,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB,GAAG,0BAA0B;IAIhH,0BAA0B,CACxB,IAAI,EAAE,QAAQ,EACd,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,oBAAoB,GAC5B,IAAI;IAIP,yBAAyB,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAQjG,+BAA+B,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS;IAIvI;;;;;;;;;;;;;OAaG;IACU,oBAAoB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE;QACzD,OAAO,EAAE,IAAI,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,IAAI,CAAC;IA8EjB;;;OAGG;IACI,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO;IAY7E;;;;;;;OAOG;IACI,sBAAsB,CAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,MAAM,EAAE;IAIhE,+BAA+B,CAAC,IAAI,EAAE,QAAQ,GAAG,oBAAoB;IA4BrE,8BAA8B,CAAC,IAAI,EAAE,QAAQ,GAAG,YAAY,CAAC,OAAO,mBAAmB,CAAC;IAqExF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqCG;IACG,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgFtE,6BAA6B,CAAC,IAAI,EAAE,QAAQ,GAAG,kBAAkB;IAoDjE;;;;;;;OAOG;IACG,gCAAgC,CACpC,IAAI,EAAE,QAAQ,EACd,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,qCAAqC,GAAG,IAAI,CAAC;IAYxD;;;;;;;;;;;;;;;;;OAiBG;IACH;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACG,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,EACtC,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,GAC9C,EAAE;QACD,gBAAgB,EAAE,MAAM,CAAC;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,UAAU,CAAC;QACpB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;KACjC,GAAG,OAAO,CAAC,IAAI,CAAC;IAyIjB;;;;;OAKG;IACG,+BAA+B,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC1D,gBAAgB,EAAE,MAAM,CAAC;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,UAAU,CAAC;QACpB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;KACjC,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjB,uBAAuB,CAAC,IAAI,EAAE,QAAQ,GAAG,YAAY;IAuDrD;;;;;;;;;;;;;OAaG;IACH,yBAAyB,CAAC,IAAI,EAAE,QAAQ,GAAG,gBAAgB;IAQ3D;;;;;OAKG;IACH,+BAA+B,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAM7F,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;IAWhG,yBAAyB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM;IAS/D;;;;;;;;;;;;;;OAcG;IACH,6BAA6B,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IAuCxE;;;;;;;;OAQG;IACH;;;;;;;;;;;;;;;;OAgBG;IACG,6BAA6B,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlE,gGAAgG;IAChG,4BAA4B,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM;IAIpD,0BAA0B,CAAC,IAAI,EAAE,QAAQ,GAAG;QAC1C,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,QAAQ,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QACvH,SAAS,EAAE,OAAO,CAAC;KACpB;IAoBD;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,oBAAoB,CAAC,IAAI,EAAE,QAAQ,GAAG;QACpC,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,OAAO,EAAE,MAAM,CAAC;KACjB;IAOD,OAAO,CAAC,aAAa,CAAC,CAAgB;IAEtC,wBAAwB,CAAC,IAAI,EAAE,QAAQ,GAAG,aAAa;IAavD,8BAA8B,CAAC,IAAI,EAAE,QAAQ,GAAG,mBAAmB;CAyDpE"}
+{"version":3,"file":"dkg-agent-swm-substrate.d.ts","sourceRoot":"","sources":["../src/dkg-agent-swm-substrate.ts"],"names":[],"mappings":"AAoGA,OAAO,EACyB,mBAAmB,EAAE,aAAa,EAqBhE,KAAK,qCAAqC,EAI3C,MAAM,qCAAqC,CAAC;AA0B7C,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAML,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EAEtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,KAAK,YAAY,EAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC3B,MAAM,oCAAoC,CAAC;AAiE5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAiFhE,OAAO,EAsBL,KAAK,eAAe,EAcrB,MAAM,sBAAsB,CAAC;AAiC9B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAU/C,8DAA8D;AAC9D,MAAM,WAAW,4BAA4B;IAC3C,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gCAAgC,CAAC,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,EAAE,WAAW,GAAG,WAAW,CAAC;IACrC,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,mBAAoB,SAAQ,YAAY;IACnD,uBAAuB,CACrB,IAAI,EAAE,QAAQ,EACd,cAAc,EAAE,MAAM,EACtB,OAAO,CAAC,EAAE,4BAA4B,GACrC,eAAe;IAkBlB,0EAA0E;IAC1E,kCAAkC,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM;IA0B1D;;;OAGG;IACH,SAAS,CAAC,+BAA+B,CACvC,IAAI,EAAE,QAAQ,EACd,cAAc,EAAE,MAAM,EACtB,OAAO,CAAC,EAAE,4BAA4B,GACrC,eAAe;IAoHlB;;;;;;;;;;;;;;;;OAgBG;IACH,2BAA2B,CAAC,IAAI,EAAE,QAAQ,EACxC,cAAc,EAAE,MAAM,EACtB,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,uBAAuB,CAAC,EAAE,OAAO,CAAC;QAClC,qEAAqE;QACrE,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GACA,IAAI;IAuEP,mCAAmC,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI;IASjF;;;;;OAKG;IACH,0CAA0C,CACxC,IAAI,EAAE,QAAQ,EACd,cAAc,EAAE,MAAM,GACrB,OAAO;IAyBV;;;;;OAKG;IACH,kCAAkC,CAChC,IAAI,EAAE,QAAQ,EACd,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,GAAG,IAAI,GAC1B,OAAO;IAQV,sEAAsE;IACtE,mDAAmD,CACjD,IAAI,EAAE,QAAQ,EACd,cAAc,EAAE,MAAM,GACrB,OAAO;IAOV,+EAA+E;IAC/E,8BAA8B,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM;IAc9E;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACG,iCAAiC,CACrC,IAAI,EAAE,QAAQ,EACd,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,OAAO,CAAC;IAyBnB;;;;OAIG;IACH,SAAS,CAAC,uCAAuC,CAC/C,IAAI,EAAE,QAAQ,EACd,cAAc,EAAE,MAAM,GACrB,MAAM,GAAG,IAAI;IA0BV,uCAAuC,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkJpG;;;;;;;;OAQG;IACU,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAuCzG;;;;;;;;;OASG;IACG,qCAAqC,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAI7H;;;;;;;;;;OAUG;IACH,qCAAqC,CAAC,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,GAAG;QAC/E,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QACzB,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;QACnC,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,SAAS;IAIb,gCAAgC,CAAC,IAAI,EAAE,QAAQ,GAAG,qBAAqB;IAOvE,kCAAkC,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB,GAAG,0BAA0B;IAIhH,0BAA0B,CACxB,IAAI,EAAE,QAAQ,EACd,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,oBAAoB,GAC5B,IAAI;IAIP,yBAAyB,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAQjG,+BAA+B,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS;IAIvI;;;;;;;;;;;;;OAaG;IACU,oBAAoB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE;QACzD,OAAO,EAAE,IAAI,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,IAAI,CAAC;IA8EjB;;;OAGG;IACI,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO;IAY7E;;;;;;;OAOG;IACI,sBAAsB,CAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,MAAM,EAAE;IAIhE,+BAA+B,CAAC,IAAI,EAAE,QAAQ,GAAG,oBAAoB;IA4BrE,8BAA8B,CAAC,IAAI,EAAE,QAAQ,GAAG,YAAY,CAAC,OAAO,mBAAmB,CAAC;IA6FxF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqCG;IACG,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgFtE,6BAA6B,CAAC,IAAI,EAAE,QAAQ,GAAG,kBAAkB;IAqDjE;;;;;;;OAOG;IACG,gCAAgC,CACpC,IAAI,EAAE,QAAQ,EACd,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,qCAAqC,GAAG,IAAI,CAAC;IAYxD;;;;;;;;;;;;;;;;;OAiBG;IACH;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACG,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,EACtC,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,GAC9C,EAAE;QACD,gBAAgB,EAAE,MAAM,CAAC;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,UAAU,CAAC;QACpB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;KACjC,GAAG,OAAO,CAAC,IAAI,CAAC;IAyIjB;;;;;OAKG;IACG,+BAA+B,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC1D,gBAAgB,EAAE,MAAM,CAAC;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,UAAU,CAAC;QACpB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;KACjC,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjB,uBAAuB,CAAC,IAAI,EAAE,QAAQ,GAAG,YAAY;IAuDrD;;;;;;;;;;;;;OAaG;IACH,yBAAyB,CAAC,IAAI,EAAE,QAAQ,GAAG,gBAAgB;IAQ3D;;;;;OAKG;IACH,+BAA+B,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAM7F,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;IAWhG,yBAAyB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM;IAS/D;;;;;;;;;;;;;;OAcG;IACH,6BAA6B,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IAuCxE;;;;;;;;OAQG;IACH;;;;;;;;;;;;;;;;OAgBG;IACG,6BAA6B,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlE,gGAAgG;IAChG,4BAA4B,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM;IAIpD,0BAA0B,CAAC,IAAI,EAAE,QAAQ,GAAG;QAC1C,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,QAAQ,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QACvH,SAAS,EAAE,OAAO,CAAC;KACpB;IAoBD;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,oBAAoB,CAAC,IAAI,EAAE,QAAQ,GAAG;QACpC,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,OAAO,EAAE,MAAM,CAAC;KACjB;IAOD,OAAO,CAAC,aAAa,CAAC,CAAgB;IAEtC,wBAAwB,CAAC,IAAI,EAAE,QAAQ,GAAG,aAAa;IAavD,8BAA8B,CAAC,IAAI,EAAE,QAAQ,GAAG,mBAAmB;CAyEpE"}

package/dist/dkg-agent-swm-substrate.js

@@ -1,4 +1,13 @@
 // SPDX-License-Identifier: Apache-2.0
+/**
+ * SWM substrate / shared-memory subsystem extracted from dkg-agent.ts as a
+ * mixin holder: CG gossip subscription reconcile, SWM share-ACK handling and
+ * quorum tracking, substrate top-up + fan-out bookkeeping/eviction, and the
+ * lazily-constructed gossip/shared-memory/update/finalization handlers. 1:1
+ * move; methods take `this: DKGAgent` so cross-calls resolve against the
+ * composed class.
+ */
+import { isLocalPrivateMember } from './internal/local-private-member.js';
 import { PROTOCOL_SWM_UPDATE, PROTOCOL_SWM_SHARE_ACK, contextGraphPublishTopic, contextGraphWorkspaceTopic, contextGraphAppTopic, contextGraphUpdateTopic, contextGraphFinalizationTopic, SYSTEM_CONTEXT_GRAPHS, createOperationContext, logKaLifecycleEvent, encodeSwmShareAck, decodeSwmShareAck, } from '@origintrail-official/dkg-core';
 import { SharedMemoryHandler, UpdateHandler, projectWorkspaceAgentRecipientFanout, } from '@origintrail-official/dkg-publisher';
 import { prepareRfc64LateLegacySwmBoundaryV1 } from './rfc64/legacy-swm-boundary-v1.js';
@@ -14,6 +23,7 @@ import { resolveContextGraphSyncMode } from './context-graph-subscription-policy
 import { DKGAgentBase } from './dkg-agent-base.js';
 import { CONTEXT_GRAPH_AUTHORITY_RPC_SITES as CG_AUTH_RPC_SITES, withRpcUsageSite, } from '@origintrail-official/dkg-chain';
 import { rfc64ExecutionPlanAllowsLegacySyncV1 } from './rfc64/public-catalog-activation-config-v1.js';
+import { projectRfc64CatalogTransportStateV1 } from './rfc64/catalog-rollout-authority-v1.js';
 export class SwmSubstrateMethods extends DKGAgentBase {
     subscribeToContextGraph(contextGraphId, options) {
         // A name hash this node already resolved (and holds no row for) is the
@@ -24,6 +34,45 @@ export class SwmSubstrateMethods extends DKGAgentBase {
         // Subscribing the cleartext of a graph held only by its name hash moves
         // the subscription: nothing may keep running under the hash id.
         this.retireLiveContextGraphNamePlaceholderFor(contextGraphId);
+        const subscription = this.installContextGraphSubscription(contextGraphId, options);
+        // The row is installed, so the phonebook check sees the subscription it
+        // qualifies against. An Edge keeps no durable `agents` phonebook, so the
+        // curator tier of a public wallet-scoped graph cannot reach its owner's
+        // holders: ask for one bounded fetch. Startup rehydration subscribes
+        // through here too. The request is O(1) and does its checks detached.
+        this.requestOnDemandAgentsPhonebook(contextGraphId, 'subscribe');
+        return subscription;
+    }
+    /** Apply the process-local remainder of the startup subscription plan. */
+    applyStartupContextGraphGossipPlan() {
+        const session = this.gossipSession;
+        const systemContextGraphs = new Set(Object.values(SYSTEM_CONTEXT_GRAPHS));
+        let restored = 0;
+        for (const [contextGraphId, intent] of session.startupLiveIntents) {
+            const subscription = this.subscribedContextGraphs.get(contextGraphId);
+            if (!session.active || subscription?.subscribed !== true || subscription.pendingMeta
+                || systemContextGraphs.has(contextGraphId) || session.gossipRegistered.has(contextGraphId))
+                continue;
+            try {
+                this.subscribeToContextGraph(contextGraphId, {
+                    trackSyncScope: false,
+                    persist: false,
+                    syncMode: intent.syncMode,
+                });
+                restored += 1;
+            }
+            catch (err) {
+                this.log.warn(createOperationContext('system'), `Failed to re-arm gossip for "${contextGraphId}" after restart: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        session.startupLiveIntents.clear();
+        return restored;
+    }
+    /**
+     * Install one subscription after alias adoption: the row, its sync scope
+     * and its gossip handlers, or the RFC-64 catalog-owned equivalent.
+     */
+    installContextGraphSubscription(contextGraphId, options) {
         const existing = this.subscribedContextGraphs.get(contextGraphId);
         const nextSubscription = () => {
             const next = {
@@ -239,19 +288,102 @@ export class SwmSubstrateMethods extends DKGAgentBase {
     }
     /** Member transport remains necessary for the named-subgraph lane. */
     rfc64LegacySwmMemberTransportAllowedForContextGraph(contextGraphId) {
+        return this.rfc64LegacySwmGossipAllowedForContextGraph(contextGraphId)
+            || this.subscribedContextGraphs.get(this.rfc64AuthorityContextGraphIdV1(contextGraphId))?.subscribed === true;
+    }
+    /** The cleartext id behind a wire id, or the id unchanged when it has none. */
+    rfc64AuthorityContextGraphIdV1(contextGraphId) {
         const wireContextGraphId = /^0x[0-9a-fA-F]{64}$/.test(contextGraphId)
             ? contextGraphId.toLowerCase()
             : null;
-        const authorityContextGraphId = wireContextGraphId === null
+        return wireContextGraphId === null
             ? contextGraphId
             : (this.wireIdToLocalCgId.get(wireContextGraphId)
                 ?? this.config.rfc64CatalogExecutionPlan
                     .selectedAuthorityByWireId[wireContextGraphId]?.contextGraphId
                 ?? wireContextGraphId);
-        return this.rfc64LegacySwmGossipAllowedForContextGraph(contextGraphId)
-            || this.subscribedContextGraphs.get(authorityContextGraphId)?.subscribed === true;
+    }
+    /**
+     * Whether a private graph's root-scope SWM stays on the legacy member lane
+     * (#2858). RFC-64 closed legacy root-scope apply, admission and recovery for
+     * every catalog-mode graph, so that its selected-private lane carries root
+     * SWM on its own. That lane needs private authority a node may not have, so
+     * a member's RFC-64 authority for the graph can stay blocked or resolving
+     * indefinitely. Nothing then delivers the curator's root writes: they are
+     * declined for good, recovery skips the root scope, and a Knowledge Asset's
+     * updates never reach the member.
+     *
+     * The same holds while that authority is active on a node without private
+     * access-policy authority: the selected-private lane then delivers nothing.
+     *
+     * So unless RFC-64 can deliver private root SWM on this node, a private
+     * graph this node is a member of keeps the legacy member lane. Membership
+     * is read from the graph's own `_meta` on this node: a join approval
+     * delivers it before the curator's first share, and it survives a restart,
+     * whereas RFC-64 responsibility needs chain reads that can lag for a long
+     * time. The lane's own checks (allowlist, envelope, sender key, the
+     * curator's authorization) still apply. Public graphs, explicitly selected
+     * or accepted graphs, and nodes with private access-policy authority keep
+     * their RFC-64 behaviour.
+     */
+    async rfc64PrivateRootSwmOnLegacyLaneV1(contextGraphId) {
+        const authorityContextGraphId = this.rfc64PrivateRootLegacyLaneAuthorityIdV1(contextGraphId);
+        if (authorityContextGraphId === null)
+            return false;
+        const localAgents = [
+            this.defaultAgentAddress,
+            ...this.listLocalAgents().map(({ agentAddress }) => agentAddress),
+        ];
+        // The cached merged projection only screens out the common case cheaply;
+        // it also holds replicated ONTOLOGY and AGENTS facts, so the decision is
+        // taken from the graph's own `_meta` alone.
+        try {
+            if (!isLocalPrivateMember(await this.getCgMeta(authorityContextGraphId), localAgents)) {
+                return false;
+            }
+            if (!isLocalPrivateMember(await this.getOwnCgMetaFacts(authorityContextGraphId), localAgents)) {
+                return false;
+            }
+        }
+        catch {
+            return false;
+        }
+        // RFC-64 authority can change while the metadata is read: decide on the
+        // authority as it stands now, not as it stood before the reads.
+        return this.rfc64PrivateRootLegacyLaneAuthorityIdV1(contextGraphId) === authorityContextGraphId;
+    }
+    /**
+     * The RFC-64 half of {@link rfc64PrivateRootSwmOnLegacyLaneV1}: the graph's
+     * authority id when RFC-64 cannot deliver its private root SWM on this node,
+     * otherwise `null`. Synchronous, so the caller can repeat it after an await.
+     */
+    rfc64PrivateRootLegacyLaneAuthorityIdV1(contextGraphId) {
+        if (this.rfc64LegacySwmGossipAllowedForContextGraph(contextGraphId))
+            return null;
+        const authorityContextGraphId = this.rfc64AuthorityContextGraphIdV1(contextGraphId);
+        // A wire id with no cleartext binding names no graph this node holds.
+        if (/^0x[0-9a-fA-F]{64}$/.test(authorityContextGraphId))
+            return null;
+        if (this.config.rfc64CatalogExecutionPlan.selectedAuthority[authorityContextGraphId] !== undefined
+            || this.hasRfc64AcceptedCompatibilityAuthorityV1(authorityContextGraphId)
+            || (this.config.rfc64CatalogBootstrap?.acceptedPolicies ?? []).some(({ policyEnvelope }) => policyEnvelope.payload.contextGraphId === authorityContextGraphId))
+            return null;
+        // RFC-64's selected-private lane carries private root SWM only on a node
+        // configured with private access-policy authority. Elsewhere it delivers
+        // nothing, whether or not the graph's RFC-64 authority is active.
+        const transport = projectRfc64CatalogTransportStateV1(this.resolveRfc64CatalogReceiverAuthorityV1(authorityContextGraphId));
+        if (transport === 'legacy')
+            return null;
+        if (transport === 'catalog-active'
+            && this.config.rfc64CatalogAccessPolicyAuthority !== undefined)
+            return null;
+        return authorityContextGraphId;
     }
     async reconcileSharedMemoryGossipSubscription(contextGraphId) {
+        const session = this.gossipSession;
+        const live = session.live();
+        if (live === null)
+            return;
         // Retired name-hash id: skip. It shares the wire topic and host-mode key
         // with the cleartext row, and a topic-wide unsubscribe here would drop
         // that row's handler (see supersedingContextGraphIdFor).
@@ -260,9 +392,9 @@ export class SwmSubstrateMethods extends DKGAgentBase {
             this.log.debug(createOperationContext('system'), `SWM gossip reconcile for "${contextGraphId}" skipped: superseded by cleartext adoption of "${supersedingId}"`);
             return;
         }
-        // Reconcile is the membership boundary; rebuild this CG's policy view
-        // before deciding whether to keep or drop the SWM subscription.
-        this.contextGraphMetaProjection.markDirty(contextGraphId);
+        // Reconcile is the membership boundary: decide on a rebuilt policy view.
+        // It writes no authority fact, so the authority revisions stay as they are.
+        this.contextGraphMetaProjection.requireFreshRead(contextGraphId);
         // OT-RFC-38 / LU-6 Phase B — subscribe on the wire-form (hash) topic.
         // Members compute the hash from their local cleartext id via
         // {@link gossipWireIdFor}; cores hosting CGs they never joined
@@ -271,7 +403,7 @@ export class SwmSubstrateMethods extends DKGAgentBase {
         // identity for them.
         const wireCgId = this.gossipWireIdFor(contextGraphId);
         const swmTopic = contextGraphWorkspaceTopic(wireCgId);
-        const isRegistered = this.sharedMemoryGossipRegistered.has(contextGraphId);
+        const isRegistered = session.sharedMemoryGossipRegistered.has(contextGraphId);
         const ctx = createOperationContext('system');
         if (!this.rfc64LegacySwmMemberTransportAllowedForContextGraph(contextGraphId)) {
             // This is the member-mode transport boundary. An unsubscribed selected
@@ -281,12 +413,12 @@ export class SwmSubstrateMethods extends DKGAgentBase {
                 // GossipSubManager.unsubscribe() is topic-wide, so clear both member
                 // and host bookkeeping before returning. A future live subscription
                 // may explicitly restore the scope-filtered member handler.
-                this.gossip.unsubscribe(swmTopic);
-                this.sharedMemoryGossipRegistered.delete(contextGraphId);
+                live.manager.unsubscribe(swmTopic);
+                session.sharedMemoryGossipRegistered.delete(contextGraphId);
                 const hostKey = this.canonicalSwmHostModeKey(contextGraphId);
-                this.swmHostModeSubscribed.delete(hostKey);
-                this.swmHostModeCurated.delete(hostKey);
-                this.swmHostModeHandlers.delete(hostKey);
+                session.swmHostModeSubscribed.delete(hostKey);
+                session.swmHostModeCurated.delete(hostKey);
+                session.swmHostModeHandlers.delete(hostKey);
                 this.enqueueHostModePersistence(contextGraphId, false);
             }
             else {
@@ -296,7 +428,10 @@ export class SwmSubstrateMethods extends DKGAgentBase {
             }
             return;
         }
-        if (!(await this.canUseSharedMemoryForContextGraph(contextGraphId))) {
+        const canUseSharedMemory = await this.canUseSharedMemoryForContextGraph(contextGraphId);
+        if (!session.active || this.gossipSession !== session)
+            return;
+        if (!canUseSharedMemory) {
             if (isRegistered) {
                 // `gossip.unsubscribe()` drops EVERY handler on the topic,
                 // not just the member-mode one. If this core was already
@@ -328,17 +463,17 @@ export class SwmSubstrateMethods extends DKGAgentBase {
                 // final on-disk state always matches the final in-memory
                 // intent — no possible interleave where the "false" lands
                 // after a later "true" and re-subscribes on next boot.
-                this.gossip.unsubscribe(swmTopic);
-                this.sharedMemoryGossipRegistered.delete(contextGraphId);
+                live.manager.unsubscribe(swmTopic);
+                session.sharedMemoryGossipRegistered.delete(contextGraphId);
                 // Host-mode maps are canonical-keyed (wire-form hash); delete
                 // by canonical id so this cleanup hits the entry regardless
                 // of which discovery path wired it. Without this, the
                 // immediate `reconcileSwmHostModeSubscription()` call below
                 // would see a stale entry and early-return.
                 const hostKey = this.canonicalSwmHostModeKey(contextGraphId);
-                this.swmHostModeSubscribed.delete(hostKey);
-                this.swmHostModeCurated.delete(hostKey);
-                this.swmHostModeHandlers.delete(hostKey);
+                session.swmHostModeSubscribed.delete(hostKey);
+                session.swmHostModeCurated.delete(hostKey);
+                session.swmHostModeHandlers.delete(hostKey);
                 this.enqueueHostModePersistence(contextGraphId, false);
                 this.log.warn(ctx, `SWM gossip unsubscribed for "${contextGraphId}": local node is no longer authorized`);
             }
@@ -362,9 +497,11 @@ export class SwmSubstrateMethods extends DKGAgentBase {
         // dropping every handler on the topic) so we don't double-
         // process every envelope (apply + opaque append).
         this.unwireSwmHostModeHandler(contextGraphId);
-        this.sharedMemoryGossipRegistered.add(contextGraphId);
-        this.gossip.subscribe(swmTopic);
-        this.gossip.onMessage(swmTopic, async (_topic, data, from) => {
+        session.sharedMemoryGossipRegistered.add(contextGraphId);
+        live.manager.subscribe(swmTopic);
+        live.manager.onMessage(swmTopic, async (_topic, data, from) => {
+            if (!session.active)
+                return;
             const wh = this.getOrCreateSharedMemoryHandler();
             const outcome = await wh.handle(data, from);
             // Emit SwmShareAck on gossip-applied shares so the
@@ -621,20 +758,39 @@ export class SwmSubstrateMethods extends DKGAgentBase {
                 sharedMemoryOwnedEntities: this.workspaceOwnedEntities,
                 writeLocks: this.writeLocks,
                 localAgentAddresses: () => [...this.localAgents.keys()],
-                contextGraphMetaOracle: (cgId) => this.getCgMeta(cgId),
-                // Same live on-chain predicate the SENDER uses to decide plaintext vs
-                // encrypted SWM (`resolveWorkspaceRecipientsGated`). Wiring it here
-                // keeps both sides of the wire on one authority. Without it the
-                // receiver judged from local allowedAgent/participantAgent triples and
-                // permanently dropped the plaintext writes the sender is supposed to
-                // send on a public CG — silently breaking member->curator SWM shares on
-                // every public/curated context graph.
-                publicAccessPolicyOnChainOracle: (cgId) => withRpcUsageSite(CG_AUTH_RPC_SITES.swmPublicOracle, () => this.isContextGraphPublicOnChain(cgId, createOperationContext('share'))),
+                contextGraphMetaOracle: async (cgId) => {
+                    // The approved-private proof authorizes this receiver only. Another
+                    // member can be revoked after the metadata snapshot but before that
+                    // proof finishes without invalidating the receiver's proof. Retry
+                    // one changed snapshot so the ordinary revoke race does not drop an
+                    // otherwise valid envelope, then fail closed under continued churn.
+                    for (let attempt = 0; attempt < 2; attempt += 1) {
+                        const metadataRevision = this.contextGraphMetaProjection.readAuthorityFactsRevision;
+                        const meta = await this.getCgMeta(cgId);
+                        const allowedPeers = await this.resolveApprovedPrivateReplicaSwmAllowedPeersOverride(cgId);
+                        if (this.contextGraphMetaProjection.readAuthorityFactsRevision
+                            === metadataRevision) {
+                            return allowedPeers === undefined ? meta : { ...meta, allowedPeers };
+                        }
+                    }
+                    throw new Error(`Context graph "${cgId}" metadata authority kept changing while resolving its SWM gate`);
+                },
+                // Same predicate the SENDER uses to decide plaintext vs encrypted SWM
+                // (`resolveWorkspaceRecipientsGated`), so both sides of the wire stay
+                // on one authority. Without it the receiver judged from local
+                // allowedAgent/participantAgent triples and permanently dropped the
+                // plaintext writes the sender is supposed to send on a public CG —
+                // silently breaking member->curator SWM shares on every public/curated
+                // context graph, registered or owner-signed unregistered (#2827).
+                publicAccessPolicyOracle: (cgId) => withRpcUsageSite(CG_AUTH_RPC_SITES.swmPublicOracle, () => this.isContextGraphSwmPublic(cgId, createOperationContext('share'))),
                 // RFC-64 catalog authority already excludes selected CGs from legacy
                 // durable catch-up. Apply the same decision to live gossip/substrate
                 // delivery so a partial ambient generation cannot race ahead of an
                 // authenticated exact catalog head and make cold bootstrap fail closed.
-                legacyApplyAllowedOracle: (cgId, subGraphName) => (this.rfc64LegacySwmApplyAllowedForScope(cgId, subGraphName)),
+                // A private graph's root scope keeps the legacy member lane while its
+                // RFC-64 authority is not active (#2858).
+                legacyApplyAllowedOracle: async (cgId, subGraphName) => (this.rfc64LegacySwmApplyAllowedForScope(cgId, subGraphName)
+                    || (subGraphName === null && await this.rfc64PrivateRootSwmOnLegacyLaneV1(cgId))),
                 resolveDurableRootAtomicCompanion: (input) => {
                     if (this.config.dataDir === undefined)
                         return;
@@ -825,7 +981,7 @@ export class SwmSubstrateMethods extends DKGAgentBase {
     getOrCreateCGMemberEnumerator() {
         if (!this.cgMemberEnumerator) {
             this.cgMemberEnumerator = createCGMemberEnumerator({
-                getContextGraphAllowedPeers: (cgId) => this.getContextGraphAllowedPeers(cgId),
+                getContextGraphAllowedPeers: (cgId) => this.resolveSwmAllowedPeersForCurrentAuthority(cgId),
                 getContextGraphAllowedAgentPeers: (cgId) => this.resolvePrivateSwmAgentPeerRoster(cgId),
                 isPrivateContextGraph: (cgId) => this.isPrivateContextGraph(cgId),
                 getTopicSubscribers: (topic) => this.gossip.getSubscribers(topic),
@@ -1312,20 +1468,31 @@ export class SwmSubstrateMethods extends DKGAgentBase {
                     this.contextGraphMetaProjection.markDirtyFromQuads(quads);
                 },
                 workspaceWriteLocks: this.writeLocks,
-                retireConfirmedGraphScopedSwmTwinIfOrphaned: createRetireConfirmedGraphScopedSwmTwinIfOrphaned({
-                    store: this.store,
-                    writeLocks: this.writeLocks,
-                    retire: async (candidate, ctx) => {
-                        await this.publisher.clearPublishedKnowledgeAssetSwm(candidate.contextGraphId, {
-                            kind: 'named-lifecycle',
-                            identity: {
-                                agentAddress: candidate.agentAddress,
-                                kaNumber: candidate.kaNumber,
-                            },
-                        }, candidate.subGraphName, ctx, candidate.ual);
-                    },
-                    onTornHeadRemoved: (message, ctx) => this.log.warn(ctx, message),
-                }),
+                retireConfirmedGraphScopedSwmTwinIfOrphaned: (() => {
+                    const retireOrphaned = createRetireConfirmedGraphScopedSwmTwinIfOrphaned({
+                        store: this.store,
+                        writeLocks: this.writeLocks,
+                        retire: async (candidate, ctx) => {
+                            await this.publisher.clearPublishedKnowledgeAssetSwm(candidate.contextGraphId, {
+                                kind: 'named-lifecycle',
+                                identity: {
+                                    agentAddress: candidate.agentAddress,
+                                    kaNumber: candidate.kaNumber,
+                                },
+                            }, candidate.subGraphName, ctx, candidate.ual);
+                        },
+                        onTornHeadRemoved: (message, ctx) => this.log.warn(ctx, message),
+                    });
+                    return async (candidate, ctx) => {
+                        await retireOrphaned(candidate, ctx);
+                        await this.retireLegacySwmAfterVerifiedVmTwin({
+                            contextGraphId: candidate.contextGraphId,
+                            kaUal: candidate.ual,
+                            assertionVersion: candidate.assertionVersion,
+                            subGraphName: candidate.subGraphName,
+                        });
+                    };
+                })(),
                 reconcileConfirmedGraphScopedSwmTwin: async (evidence, ctx) => {
                     const retirement = await reconcileFinalizedSwmTwinFromCatalogProjection({
                         store: this.store,
@@ -1334,6 +1501,12 @@ export class SwmSubstrateMethods extends DKGAgentBase {
                         retire: (candidate) => this.retireFinalizedSwmTwinCandidate(candidate, ctx),
                     });
                     if (retirement === 'retired') {
+                        await this.retireLegacySwmAfterVerifiedVmTwin({
+                            contextGraphId: evidence.contextGraphId,
+                            kaUal: evidence.kaUal,
+                            assertionVersion: evidence.assertionVersion,
+                            subGraphName: evidence.subGraphName,
+                        });
                         this.invalidateListContextGraphsCache();
                         this.log.info(ctx, `Retired byte-identical SWM twin after finalized VM reconciliation for ${evidence.kaUal}`);
                     }