@origintrail-official/dkg-agent 10.0.19 → 10.0.21

package/dist/internal/context-graph-binding-abort.js

@@ -0,0 +1,32 @@
+// SPDX-License-Identifier: Apache-2.0
+export function contextGraphBindingAbortReason(signal) {
+    if (signal.reason instanceof Error)
+        return signal.reason;
+    const error = new Error(String(signal.reason ?? 'Context Graph binding resolution aborted'));
+    error.name = 'AbortError';
+    return error;
+}
+export function raceContextGraphBindingAgainstAbort(work, signal) {
+    if (!signal)
+        return work;
+    if (signal.aborted)
+        return Promise.reject(contextGraphBindingAbortReason(signal));
+    return new Promise((resolve, reject) => {
+        const onAbort = () => {
+            cleanup();
+            reject(contextGraphBindingAbortReason(signal));
+        };
+        const cleanup = () => signal.removeEventListener('abort', onAbort);
+        signal.addEventListener('abort', onAbort, { once: true });
+        work.then((value) => {
+            cleanup();
+            resolve(value);
+        }, (error) => {
+            cleanup();
+            reject(error);
+        });
+        if (signal.aborted)
+            onAbort();
+    });
+}
+//# sourceMappingURL=context-graph-binding-abort.js.map

package/dist/internal/context-graph-binding-abort.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-graph-binding-abort.js","sourceRoot":"","sources":["../../src/internal/context-graph-binding-abort.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAItC,MAAM,UAAU,8BAA8B,CAAC,MAAmB;IAChE,IAAI,MAAM,CAAC,MAAM,YAAY,KAAK;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IACzD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,0CAA0C,CAAC,CAAC,CAAC;IAC7F,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC;IAC1B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,IAAgB,EAChB,MAA+B;IAE/B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC,CAAC;IAClF,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,CACP,CAAC,KAAK,EAAE,EAAE;YACR,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;YACR,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CACF,CAAC;QACF,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/internal/context-graph-cache-invalidating-store.d.ts

@@ -0,0 +1,3 @@
+import { type TripleStore, type Quad, type SortedGraphSetSource } from '@origintrail-official/dkg-storage';
+export declare function createListContextGraphsCacheInvalidatingStore(innerStore: TripleStore, invalidate: () => void, markProjectionDirty?: (quads?: readonly Quad[], targetGraph?: string, targetSubject?: string) => void): TripleStore & Partial<SortedGraphSetSource>;
+//# sourceMappingURL=context-graph-cache-invalidating-store.d.ts.map

package/dist/internal/context-graph-cache-invalidating-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-graph-cache-invalidating-store.d.ts","sourceRoot":"","sources":["../../src/internal/context-graph-cache-invalidating-store.ts"],"names":[],"mappings":"AAGA,OAAO,EAA2D,KAAK,WAAW,EAAE,KAAK,IAAI,EAAE,KAAK,oBAAoB,EAAuB,MAAM,mCAAmC,CAAC;AAEzL,wBAAgB,6CAA6C,CAC3D,UAAU,EAAE,WAAW,EACvB,UAAU,EAAE,MAAM,IAAI,EAGtB,mBAAmB,CAAC,EAAE,CACpB,KAAK,CAAC,EAAE,SAAS,IAAI,EAAE,EACvB,WAAW,CAAC,EAAE,MAAM,EACpB,aAAa,CAAC,EAAE,MAAM,KACnB,IAAI,GACR,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAsO7C"}

package/dist/internal/context-graph-cache-invalidating-store.js

@@ -0,0 +1,167 @@
+// SPDX-License-Identifier: Apache-2.0
+import { isSparqlUpdateOperation } from '@origintrail-official/dkg-core';
+import { deleteByPatternWithoutCount, isStoreOperationNotStarted } from '@origintrail-official/dkg-storage';
+export function createListContextGraphsCacheInvalidatingStore(innerStore, invalidate, 
+// #1863 — `targetGraph` lets a single-graph destructive mutation (replaceSubject)
+// dirty the projection by graph rather than by inserted quads (covers deletes).
+markProjectionDirty) {
+    const invalidateAfterMutation = async (work, changed, markDirty, operation) => {
+        try {
+            const result = await work();
+            if (changed(result)) {
+                invalidate();
+                markDirty?.();
+            }
+            return result;
+        }
+        catch (error) {
+            // A mutation may have committed before its response was lost. Only an
+            // outcome-tagged pre-dispatch refusal proves cache/authority state did
+            // not change; every indeterminate outcome must invalidate fail-closed.
+            if (operation !== undefined && !isStoreOperationNotStarted(error, operation)) {
+                invalidate();
+                markDirty?.();
+            }
+            throw error;
+        }
+    };
+    const sortedSource = typeof innerStore.listGraphsSorted
+        === 'function'
+        ? innerStore
+        : null;
+    const wrapper = {
+        innerStore,
+        get queryCancellation() {
+            return innerStore.queryCancellation;
+        },
+        getPressureSnapshot() {
+            return innerStore.getPressureSnapshot?.();
+        },
+        insert(quads, options) {
+            return invalidateAfterMutation(() => innerStore.insert(quads, options), () => quads.length > 0, () => markProjectionDirty?.(quads), 'insert');
+        },
+        delete(quads, options) {
+            return invalidateAfterMutation(() => innerStore.delete(quads, options), () => quads.length > 0, () => markProjectionDirty?.(quads), 'delete');
+        },
+        deleteByPattern(pattern, options) {
+            return invalidateAfterMutation(() => innerStore.deleteByPattern(pattern, options), removed => removed > 0, () => markProjectionDirty?.(undefined, pattern.graph), 'deleteByPattern');
+        },
+        deleteByPatternWithoutCount(pattern, options) {
+            return invalidateAfterMutation(() => deleteByPatternWithoutCount(innerStore, pattern, options), () => true, () => markProjectionDirty?.(undefined, pattern.graph), 'deleteByPattern');
+        },
+        query(sparql, options) {
+            return invalidateAfterMutation(() => innerStore.query(sparql, options), () => isSparqlUpdateOperation(sparql), () => markProjectionDirty?.(), isSparqlUpdateOperation(sparql) ? 'query' : undefined);
+        },
+        hasGraph(graphUri, options) {
+            return innerStore.hasGraph(graphUri, options);
+        },
+        createGraph(graphUri) {
+            return innerStore.createGraph(graphUri);
+        },
+        dropGraph(graphUri, options) {
+            return invalidateAfterMutation(() => innerStore.dropGraph(graphUri, options), () => true, () => markProjectionDirty?.(undefined, graphUri), 'dropGraph');
+        },
+        replaceGraph: innerStore.replaceGraph
+            ? (graphUri, quads, options) => invalidateAfterMutation(() => innerStore.replaceGraph(graphUri, quads, options), () => true, () => markProjectionDirty?.(undefined, graphUri), 'replaceGraph')
+            : undefined,
+        // Rootless KA materialization replaces the assertion graph and its UAL
+        // metadata subject in one backend transaction. Preserve that optional
+        // capability through the agent decorator just like replaceGraph/update;
+        // omitting it makes every capable production backend appear unsupported.
+        replaceGraphAndSubject: innerStore.replaceGraphAndSubject
+            ? (graphUri, graphQuads, metaGraphUri, metadataSubject, metadataQuads, options) => invalidateAfterMutation(() => innerStore.replaceGraphAndSubject(graphUri, graphQuads, metaGraphUri, metadataSubject, metadataQuads, options), () => true, 
+            // Both deletion targets are named. A graph-scoped invalidation
+            // covers inserted and removed facts without scanning the payload.
+            () => {
+                markProjectionDirty?.(undefined, graphUri);
+                markProjectionDirty?.(undefined, metaGraphUri);
+            }, 'replaceGraphAndSubject')
+            : undefined,
+        // #1863 — the async-lift publisher persists a job transition via this atomic
+        // single-subject replace. Preserve the optional capability through the agent
+        // decorator just like replaceGraph/replaceGraphAndSubject/update; omitting it
+        // makes every capable production backend appear unsupported, so the publisher
+        // silently falls back to non-atomic delete-then-insert and the fix is a no-op.
+        replaceSubject: innerStore.replaceSubject
+            ? (graphUri, subject, quads, options) => invalidateAfterMutation(() => innerStore.replaceSubject(graphUri, subject, quads, options), () => true, 
+            // The target graph covers deleted facts; the replacement quads
+            // cover inserted recipient facts. The subject lets downstream
+            // invalidation distinguish exact atomic replacement paths.
+            () => markProjectionDirty?.(quads, graphUri, subject), 'replaceSubject')
+            : undefined,
+        // RFC-64 author publication moves a complete public-SWM projection and
+        // its bounded semantic control state through one backend CAS. Preserve the
+        // capability through this cache-invalidation decorator and invalidate only
+        // after a proven commit; a clean guard conflict changes nothing.
+        rfc64AuthorCommitCasV1: innerStore.rfc64AuthorCommitCasV1
+            ? (input, options) => invalidateAfterMutation(() => innerStore.rfc64AuthorCommitCasV1(input, options), result => result === 'committed', () => {
+                // The CAS names every graph it replaces. A graph-wide dirty mark
+                // here invalidates an unrelated private CG's own metadata proof
+                // after every authored row, even though the CAS only changed this
+                // exact projection and its control subjects. Fence each named
+                // target, including deleted facts, without losing the conservative
+                // all-graph fallback used by genuinely opaque store mutations.
+                if (markProjectionDirty === undefined)
+                    return;
+                markProjectionDirty(undefined, input.sharedProjectionGraph);
+                markProjectionDirty(undefined, input.authorSealGraph);
+                if ('currentHead' in input) {
+                    for (const transition of [
+                        input.currentHead,
+                        input.subgraphMutationGeneration,
+                        input.contextGraphMutationGeneration,
+                        input.appliedSet,
+                    ]) {
+                        markProjectionDirty(undefined, transition.graphUri);
+                    }
+                }
+                else {
+                    markProjectionDirty(undefined, input.currentHeadGraph);
+                    for (const transition of [
+                        input.kaStateDigest,
+                        input.subgraphMutationGeneration,
+                        input.contextGraphMutationGeneration,
+                        input.appliedSet,
+                        ...input.sealInvalidations,
+                    ]) {
+                        markProjectionDirty(undefined, transition.graphUri);
+                    }
+                }
+            }, 'rfc64AuthorCommitCasV1')
+            : undefined,
+        listGraphs(options) {
+            return innerStore.listGraphs(options);
+        },
+        // This wrapper changes mutation-side cache state but not graph visibility,
+        // so forwarding the direct inner capability preserves the same public
+        // boundary while keeping the responder's identity-stable catalog path live.
+        listGraphsSorted: sortedSource
+            ? (options) => sortedSource.listGraphsSorted(options)
+            : undefined,
+        listGraphsByPrefix(prefix, options) {
+            return innerStore.listGraphsByPrefix
+                ? innerStore.listGraphsByPrefix(prefix, options)
+                : innerStore.listGraphs(options).then((graphs) => graphs.filter((graph) => graph.startsWith(prefix)));
+        },
+        deleteBySubjectPrefix(graphUri, prefix, options) {
+            return invalidateAfterMutation(() => innerStore.deleteBySubjectPrefix(graphUri, prefix, options), removed => removed > 0, () => markProjectionDirty?.(), 'deleteBySubjectPrefix');
+        },
+        countQuads(graphUri, options) {
+            return innerStore.countQuads(graphUri, options);
+        },
+        // Defined iff the inner store supports it, so the capability propagates
+        // truthfully up the decorator chain (callers gate on `typeof store.update
+        // === 'function'`). A server-side UPDATE can create/drop named graphs and
+        // mutate projected content, so it invalidates the listGraphs cache and
+        // marks the projection dirty just like insert/delete.
+        update: innerStore.update
+            ? (sparql, options) => invalidateAfterMutation(() => innerStore.update(sparql, options), () => true, () => markProjectionDirty?.(), 'update')
+            : undefined,
+        flush: innerStore.flush ? (options) => innerStore.flush(options) : undefined,
+        close() {
+            return innerStore.close();
+        },
+    };
+    return wrapper;
+}
+//# sourceMappingURL=context-graph-cache-invalidating-store.js.map

package/dist/internal/context-graph-cache-invalidating-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-graph-cache-invalidating-store.js","sourceRoot":"","sources":["../../src/internal/context-graph-cache-invalidating-store.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,2BAA2B,EAAE,0BAA0B,EAA+E,MAAM,mCAAmC,CAAC;AAEzL,MAAM,UAAU,6CAA6C,CAC3D,UAAuB,EACvB,UAAsB;AACtB,kFAAkF;AAClF,gFAAgF;AAChF,mBAIS;IAET,MAAM,uBAAuB,GAAG,KAAK,EACnC,IAAsB,EACtB,OAA+B,EAC/B,SAAsB,EACtB,SAA0B,EACd,EAAE;QACd,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpB,UAAU,EAAE,CAAC;gBACb,SAAS,EAAE,EAAE,CAAC;YAChB,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sEAAsE;YACtE,uEAAuE;YACvE,uEAAuE;YACvE,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,0BAA0B,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;gBAC7E,UAAU,EAAE,CAAC;gBACb,SAAS,EAAE,EAAE,CAAC;YAChB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,OAAQ,UAA4C,CAAC,gBAAgB;YACpF,UAAU;QACd,CAAC,CAAC,UAAgD;QAClD,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,OAAO,GAE8B;QACzC,UAAU;QACV,IAAI,iBAAiB;YACnB,OAAO,UAAU,CAAC,iBAAiB,CAAC;QACtC,CAAC;QACD,mBAAmB;YACjB,OAAO,UAAU,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAC5C,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,OAAO;YACnB,OAAO,uBAAuB,CAC5B,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EACvC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EACtB,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,EAClC,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,OAAO;YACnB,OAAO,uBAAuB,CAC5B,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EACvC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EACtB,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,EAClC,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,OAAO,EAAE,OAAO;YAC9B,OAAO,uBAAuB,CAC5B,GAAG,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,EAClD,OAAO,CAAC,EAAE,CAAC,OAAO,GAAG,CAAC,EACtB,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,EACrD,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,2BAA2B,CAAC,OAAO,EAAE,OAAO;YAC1C,OAAO,uBAAuB,CAC5B,GAAG,EAAE,CAAC,2BAA2B,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,EAC/D,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,EACrD,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,MAAM,EAAE,OAAO;YACnB,OAAO,uBAAuB,CAC5B,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,GAAG,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC,EACrC,GAAG,EAAE,CAAC,mBAAmB,EAAE,EAAE,EAC7B,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CACtD,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,QAAQ,EAAE,OAAO;YACxB,OAAO,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QACD,WAAW,CAAC,QAAQ;YAClB,OAAO,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,SAAS,CAAC,QAAQ,EAAE,OAAO;YACzB,OAAO,uBAAuB,CAC5B,GAAG,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,EAC7C,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAChD,WAAW,CACZ,CAAC;QACJ,CAAC;QACD,YAAY,EAAE,UAAU,CAAC,YAAY;YACnC,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,uBAAuB,CACnD,GAAG,EAAE,CAAC,UAAU,CAAC,YAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,EACxD,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAChD,cAAc,CACf;YACH,CAAC,CAAC,SAAS;QACb,uEAAuE;QACvE,sEAAsE;QACtE,wEAAwE;QACxE,yEAAyE;QACzE,sBAAsB,EAAE,UAAU,CAAC,sBAAsB;YACvD,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,CAC9E,uBAAuB,CACrB,GAAG,EAAE,CAAC,UAAU,CAAC,sBAAuB,CACtC,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,eAAe,EACf,aAAa,EACb,OAAO,CACR,EACD,GAAG,EAAE,CAAC,IAAI;YACV,+DAA+D;YAC/D,kEAAkE;YAClE,GAAG,EAAE;gBACH,mBAAmB,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAC3C,mBAAmB,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YACjD,CAAC,EACD,wBAAwB,CACzB;YACL,CAAC,CAAC,SAAS;QACb,6EAA6E;QAC7E,6EAA6E;QAC7E,8EAA8E;QAC9E,8EAA8E;QAC9E,+EAA+E;QAC/E,cAAc,EAAE,UAAU,CAAC,cAAc;YACvC,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CACpC,uBAAuB,CACrB,GAAG,EAAE,CAAC,UAAU,CAAC,cAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,EACnE,GAAG,EAAE,CAAC,IAAI;YACV,+DAA+D;YAC/D,8DAA8D;YAC9D,2DAA2D;YAC3D,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,EACrD,gBAAgB,CACjB;YACL,CAAC,CAAC,SAAS;QACb,uEAAuE;QACvE,2EAA2E;QAC3E,2EAA2E;QAC3E,iEAAiE;QACjE,sBAAsB,EAAE,UAAU,CAAC,sBAAsB;YACvD,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,uBAAuB,CACzC,GAAG,EAAE,CAAC,UAAU,CAAC,sBAAuB,CAAC,KAAK,EAAE,OAAO,CAAC,EACxD,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,WAAW,EAChC,GAAG,EAAE;gBACH,iEAAiE;gBACjE,gEAAgE;gBAChE,kEAAkE;gBAClE,8DAA8D;gBAC9D,mEAAmE;gBACnE,+DAA+D;gBAC/D,IAAI,mBAAmB,KAAK,SAAS;oBAAE,OAAO;gBAC9C,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;gBAC5D,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;gBACtD,IAAI,aAAa,IAAI,KAAK,EAAE,CAAC;oBAC3B,KAAK,MAAM,UAAU,IAAI;wBACvB,KAAK,CAAC,WAAW;wBACjB,KAAK,CAAC,0BAA0B;wBAChC,KAAK,CAAC,8BAA8B;wBACpC,KAAK,CAAC,UAAU;qBACjB,EAAE,CAAC;wBACF,mBAAmB,CAAC,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACtD,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;oBACvD,KAAK,MAAM,UAAU,IAAI;wBACvB,KAAK,CAAC,aAAa;wBACnB,KAAK,CAAC,0BAA0B;wBAChC,KAAK,CAAC,8BAA8B;wBACpC,KAAK,CAAC,UAAU;wBAChB,GAAG,KAAK,CAAC,iBAAiB;qBAC3B,EAAE,CAAC;wBACF,mBAAmB,CAAC,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACtD,CAAC;gBACH,CAAC;YACH,CAAC,EACD,wBAAwB,CACzB;YACH,CAAC,CAAC,SAAS;QACb,UAAU,CAAC,OAAO;YAChB,OAAO,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,2EAA2E;QAC3E,sEAAsE;QACtE,4EAA4E;QAC5E,gBAAgB,EAAE,YAAY;YAC5B,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACrD,CAAC,CAAC,SAAS;QACb,kBAAkB,CAAC,MAAM,EAAE,OAAO;YAChC,OAAO,UAAU,CAAC,kBAAkB;gBAClC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC;gBAChD,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1G,CAAC;QACD,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO;YAC7C,OAAO,uBAAuB,CAC5B,GAAG,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EACjE,OAAO,CAAC,EAAE,CAAC,OAAO,GAAG,CAAC,EACtB,GAAG,EAAE,CAAC,mBAAmB,EAAE,EAAE,EAC7B,uBAAuB,CACxB,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,QAAQ,EAAE,OAAO;YAC1B,OAAO,UAAU,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QACD,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,uEAAuE;QACvE,sDAAsD;QACtD,MAAM,EAAE,UAAU,CAAC,MAAM;YACvB,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,uBAAuB,CAC5C,GAAG,EAAE,CAAC,UAAU,CAAC,MAAO,CAAC,MAAM,EAAE,OAAO,CAAC,EACzC,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,mBAAmB,EAAE,EAAE,EAC7B,QAAQ,CACT;YACD,CAAC,CAAC,SAAS;QACb,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,KAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7E,KAAK;YACH,OAAO,UAAU,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;KACF,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/internal/context-graph-meta-record-copy.d.ts

@@ -0,0 +1,3 @@
+import type { ContextGraphMetaRecord } from '../context-graph-meta-projection.js';
+export declare function cloneMetaRecord(record: ContextGraphMetaRecord): ContextGraphMetaRecord;
+//# sourceMappingURL=context-graph-meta-record-copy.d.ts.map

package/dist/internal/context-graph-meta-record-copy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-graph-meta-record-copy.d.ts","sourceRoot":"","sources":["../../src/internal/context-graph-meta-record-copy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAElF,wBAAgB,eAAe,CAAC,MAAM,EAAE,sBAAsB,GAAG,sBAAsB,CAmBtF"}

package/dist/internal/context-graph-meta-record-copy.js

@@ -0,0 +1,21 @@
+export function cloneMetaRecord(record) {
+    return {
+        ...record,
+        creators: [...record.creators],
+        curators: [...record.curators],
+        allowedPeers: [...record.allowedPeers],
+        allowedAgents: [...record.allowedAgents],
+        participantAgents: [...record.participantAgents],
+        participantIdentityIds: [...record.participantIdentityIds],
+        revokedAgents: [...record.revokedAgents],
+        delegations: record.delegations.map((delegation) => ({
+            ...delegation,
+            agents: [...delegation.agents],
+            allowedPeers: [...delegation.allowedPeers],
+            allowedKeys: [...delegation.allowedKeys],
+            expiresAtValues: [...delegation.expiresAtValues],
+        })),
+        subGraphs: record.subGraphs.map((subGraph) => ({ ...subGraph })),
+    };
+}
+//# sourceMappingURL=context-graph-meta-record-copy.js.map

package/dist/internal/context-graph-meta-record-copy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-graph-meta-record-copy.js","sourceRoot":"","sources":["../../src/internal/context-graph-meta-record-copy.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,eAAe,CAAC,MAA8B;IAC5D,OAAO;QACL,GAAG,MAAM;QACT,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC9B,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC9B,YAAY,EAAE,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;QACtC,aAAa,EAAE,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;QACxC,iBAAiB,EAAE,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC;QAChD,sBAAsB,EAAE,CAAC,GAAG,MAAM,CAAC,sBAAsB,CAAC;QAC1D,aAAa,EAAE,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;QACxC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACnD,GAAG,UAAU;YACb,MAAM,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;YAC9B,YAAY,EAAE,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC;YAC1C,WAAW,EAAE,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC;YACxC,eAAe,EAAE,CAAC,GAAG,UAAU,CAAC,eAAe,CAAC;SACjD,CAAC,CAAC;QACH,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;KACjE,CAAC;AACJ,CAAC"}

package/dist/internal/gossip/host-mode-handler.d.ts

@@ -0,0 +1,11 @@
+import { type Logger } from '@origintrail-official/dkg-core';
+import type { GossipSession } from '../../gossip-session.js';
+interface HostModeHandlerPorts {
+    swmHostModeStripCiphertext(): boolean;
+    ingestSwmCiphertextChunkEnvelope(contextGraphId: string, data: Uint8Array, from: string): Promise<unknown>;
+    ingestSwmHostModeEnvelope(contextGraphId: string, data: Uint8Array, from: string): Promise<unknown>;
+}
+/** Dispatch only through the session and classification which own this handler. */
+export declare function createSwmHostModeHandler(ports: HostModeHandlerPorts, log: Pick<Logger, 'debug' | 'warn'>, session: GossipSession, contextGraphId: string, wireCgId: string): (topic: string, data: Uint8Array, from: string) => void;
+export {};
+//# sourceMappingURL=host-mode-handler.d.ts.map

package/dist/internal/gossip/host-mode-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-mode-handler.d.ts","sourceRoot":"","sources":["../../../src/internal/gossip/host-mode-handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,MAAM,EACZ,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE7D,UAAU,oBAAoB;IAC5B,0BAA0B,IAAI,OAAO,CAAC;IACtC,gCAAgC,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3G,yBAAyB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACrG;AAED,mFAAmF;AACnF,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,oBAAoB,EAC3B,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,EACnC,OAAO,EAAE,aAAa,EACtB,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,GACf,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CA6CzD"}

package/dist/internal/gossip/host-mode-handler.js

@@ -0,0 +1,41 @@
+// SPDX-License-Identifier: Apache-2.0
+import { createOperationContext, decodeGossipEnvelope, GOSSIP_TYPE_WORKSPACE_PUBLISH_CHUNKED, } from '@origintrail-official/dkg-core';
+/** Dispatch only through the session and classification which own this handler. */
+export function createSwmHostModeHandler(ports, log, session, contextGraphId, wireCgId) {
+    return (_topic, data, from) => {
+        if (!session.active)
+            return;
+        // Fail closed when the classification is absent. Only an explicitly
+        // non-curated manual subscription retains the public host-mode hatch.
+        if (ports.swmHostModeStripCiphertext() &&
+            session.swmHostModeCurated.get(wireCgId) !== false) {
+            log.debug(createOperationContext('share'), `Dropping host-mode envelope on cg=${contextGraphId} from=${from}: ` +
+                `private-ciphertext strip is ON for a curated CG (OT-RFC-49 WS-A)`);
+            return;
+        }
+        // OT-RFC-38 LU-11: peek envelope type and dispatch. Chunked
+        // envelopes (`type='share-write-chunked'`) take the V2 chunk
+        // persistence path; everything else flows through the legacy
+        // host-mode store unchanged. Failed decode falls through to
+        // `ingestSwmHostModeEnvelope` which is also defensive — the
+        // dispatch here is best-effort, not a security boundary.
+        let envelopeType;
+        try {
+            const peek = decodeGossipEnvelope(data);
+            envelopeType = peek?.type;
+        }
+        catch { /* drop into legacy path */ }
+        if (envelopeType === GOSSIP_TYPE_WORKSPACE_PUBLISH_CHUNKED) {
+            ports.ingestSwmCiphertextChunkEnvelope(contextGraphId, data, from).catch((err) => {
+                const msg = err instanceof Error ? err.message : String(err);
+                log.warn(createOperationContext('system'), `LU-11: chunked SWM ingest failed for "${contextGraphId}": ${msg}`);
+            });
+            return;
+        }
+        ports.ingestSwmHostModeEnvelope(contextGraphId, data, from).catch((err) => {
+            const msg = err instanceof Error ? err.message : String(err);
+            log.warn(createOperationContext('system'), `Host-mode SWM ingest failed for "${contextGraphId}": ${msg}`);
+        });
+    };
+}
+//# sourceMappingURL=host-mode-handler.js.map

package/dist/internal/gossip/host-mode-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-mode-handler.js","sourceRoot":"","sources":["../../../src/internal/gossip/host-mode-handler.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EACL,sBAAsB,EAAE,oBAAoB,EAAE,qCAAqC,GAEpF,MAAM,gCAAgC,CAAC;AASxC,mFAAmF;AACnF,MAAM,UAAU,wBAAwB,CACtC,KAA2B,EAC3B,GAAmC,EACnC,OAAsB,EACtB,cAAsB,EACtB,QAAgB;IAEhB,OAAO,CAAC,MAAc,EAAE,IAAgB,EAAE,IAAY,EAAE,EAAE;QACxD,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO;QAC5B,oEAAoE;QACpE,sEAAsE;QACtE,IACE,KAAK,CAAC,0BAA0B,EAAE;YAClC,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,EAClD,CAAC;YACD,GAAG,CAAC,KAAK,CACP,sBAAsB,CAAC,OAAO,CAAC,EAC/B,qCAAqC,cAAc,SAAS,IAAI,IAAI;gBACpE,kEAAkE,CACnE,CAAC;YACF,OAAO;QACT,CAAC;QACD,4DAA4D;QAC5D,6DAA6D;QAC7D,6DAA6D;QAC7D,4DAA4D;QAC5D,4DAA4D;QAC5D,yDAAyD;QACzD,IAAI,YAAgC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACxC,YAAY,GAAG,IAAI,EAAE,IAAI,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;QACvC,IAAI,YAAY,KAAK,qCAAqC,EAAE,CAAC;YAC3D,KAAK,CAAC,gCAAgC,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACxF,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,GAAG,CAAC,IAAI,CACN,sBAAsB,CAAC,QAAQ,CAAC,EAChC,yCAAyC,cAAc,MAAM,GAAG,EAAE,CACnE,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,KAAK,CAAC,yBAAyB,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACjF,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,GAAG,CAAC,IAAI,CACN,sBAAsB,CAAC,QAAQ,CAAC,EAChC,oCAAoC,cAAc,MAAM,GAAG,EAAE,CAC9D,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/internal/join-encryption-key-bundle.d.ts

@@ -0,0 +1,10 @@
+import { type SignedAgentDelegation } from '../auth/agent-delegation.js';
+interface VerifiedJoinEncryptionKeyBundle {
+    readonly issuedAtMs: number;
+    readonly keySetDigest: string;
+    readonly keys: NonNullable<SignedAgentDelegation['workspaceEncryptionKeys']>;
+}
+export declare function verifiedDelegationKeyIds(agentAddress: string, keys: VerifiedJoinEncryptionKeyBundle['keys']): Set<string>;
+export declare function verifyJoinEncryptionKeyBundle(delegation: SignedAgentDelegation, carrierPeerId: string): VerifiedJoinEncryptionKeyBundle | null;
+export {};
+//# sourceMappingURL=join-encryption-key-bundle.d.ts.map

package/dist/internal/join-encryption-key-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"join-encryption-key-bundle.d.ts","sourceRoot":"","sources":["../../src/internal/join-encryption-key-bundle.ts"],"names":[],"mappings":"AAKA,OAAO,EAA0E,KAAK,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAKjJ,UAAU,+BAA+B;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,qBAAqB,CAAC,yBAAyB,CAAC,CAAC,CAAC;CAC9E;AAED,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,+BAA+B,CAAC,MAAM,CAAC,GAC5C,GAAG,CAAC,MAAM,CAAC,CAKb;AAED,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,qBAAqB,EACjC,aAAa,EAAE,MAAM,GACpB,+BAA+B,GAAG,IAAI,CAsExC"}

package/dist/internal/join-encryption-key-bundle.js

@@ -0,0 +1,72 @@
+// SPDX-License-Identifier: Apache-2.0
+import { createHash } from 'node:crypto';
+import { WORKSPACE_AGENT_ENCRYPTION_KEY_ALGORITHM_X25519, decodeWorkspaceEncryptionKey, workspaceAgentEncryptionKeyId } from '@origintrail-official/dkg-core';
+import { ethers } from 'ethers';
+import { computeWorkspaceEncryptionKeysAttestationDigest, verifyAgentDelegation } from '../auth/agent-delegation.js';
+import { verifyWorkspaceEncryptionKeyBinding } from '../agent-keystore.js';
+const JOIN_ENCRYPTION_KEY_LIMIT = 8;
+export function verifiedDelegationKeyIds(agentAddress, keys) {
+    return new Set(keys.map((key) => workspaceAgentEncryptionKeyId(agentAddress, decodeWorkspaceEncryptionKey(key.publicEncryptionKey)).toLowerCase()));
+}
+export function verifyJoinEncryptionKeyBundle(delegation, carrierPeerId) {
+    const keys = delegation.workspaceEncryptionKeys;
+    if (keys === undefined)
+        return null;
+    if (!Array.isArray(keys) || keys.length === 0 || keys.length > JOIN_ENCRYPTION_KEY_LIMIT) {
+        throw new Error(`Join request must carry between 1 and ${JOIN_ENCRYPTION_KEY_LIMIT} workspace encryption keys.`);
+    }
+    // Preserve the existing admission contract for a signed carrier mismatch:
+    // policy evaluation reports a bounded pending decision. Do not accept the
+    // bundle because the carrier has not proven it is the signed delegatee.
+    if (delegation.delegateePeerId !== carrierPeerId)
+        return null;
+    // issuedAtMs becomes the durable cross-CG cache high-water, so authenticate
+    // the base delegation here as well as at the admission boundary.
+    verifyAgentDelegation(delegation);
+    if (!Number.isSafeInteger(delegation.issuedAtMs) || delegation.issuedAtMs < 0) {
+        throw new Error('Join request carries an invalid encryption-key freshness timestamp.');
+    }
+    const verified = keys.map((key) => {
+        if (key === null
+            || typeof key !== 'object'
+            || key.encryptionKeyAlgorithm !== WORKSPACE_AGENT_ENCRYPTION_KEY_ALGORITHM_X25519
+            || typeof key.publicEncryptionKey !== 'string'
+            || typeof key.encryptionKeyProof !== 'string') {
+            throw new Error('Join request carries a malformed workspace encryption key.');
+        }
+        let valid = false;
+        try {
+            valid = verifyWorkspaceEncryptionKeyBinding(delegation.agentAddress, key.encryptionKeyAlgorithm, key.publicEncryptionKey, key.encryptionKeyProof);
+        }
+        catch {
+            valid = false;
+        }
+        if (!valid) {
+            throw new Error('Join request carries an invalid workspace encryption key proof.');
+        }
+        return key;
+    });
+    if (typeof delegation.workspaceEncryptionKeysSignature !== 'string') {
+        throw new Error('Join request is missing its workspace encryption-key attestation.');
+    }
+    let attestationSigner = '';
+    try {
+        attestationSigner = ethers.verifyMessage(computeWorkspaceEncryptionKeysAttestationDigest(delegation), delegation.workspaceEncryptionKeysSignature);
+    }
+    catch {
+        attestationSigner = '';
+    }
+    if (attestationSigner.toLowerCase() !== delegation.agentAddress.toLowerCase()) {
+        throw new Error('Join request carries an invalid workspace encryption-key attestation.');
+    }
+    const canonicalKeySet = [...new Set(verified.map((key) => JSON.stringify({
+            encryptionKeyAlgorithm: key.encryptionKeyAlgorithm,
+            publicEncryptionKey: key.publicEncryptionKey,
+        })))].sort();
+    return {
+        issuedAtMs: delegation.issuedAtMs,
+        keySetDigest: `0x${createHash('sha256').update(JSON.stringify(canonicalKeySet)).digest('hex')}`,
+        keys: verified,
+    };
+}
+//# sourceMappingURL=join-encryption-key-bundle.js.map

package/dist/internal/join-encryption-key-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"join-encryption-key-bundle.js","sourceRoot":"","sources":["../../src/internal/join-encryption-key-bundle.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,+CAA+C,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AAC9J,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,+CAA+C,EAAE,qBAAqB,EAA8B,MAAM,6BAA6B,CAAC;AACjJ,OAAO,EAAE,mCAAmC,EAAE,MAAM,sBAAsB,CAAC;AAE3E,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAQpC,MAAM,UAAU,wBAAwB,CACtC,YAAoB,EACpB,IAA6C;IAE7C,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,6BAA6B,CAC5D,YAAY,EACZ,4BAA4B,CAAC,GAAG,CAAC,mBAAmB,CAAC,CACtD,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,UAAiC,EACjC,aAAqB;IAErB,MAAM,IAAI,GAAG,UAAU,CAAC,uBAAuB,CAAC;IAChD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CACb,yCAAyC,yBAAyB,6BAA6B,CAChG,CAAC;IACJ,CAAC;IACD,0EAA0E;IAC1E,0EAA0E;IAC1E,wEAAwE;IACxE,IAAI,UAAU,CAAC,eAAe,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IAE9D,4EAA4E;IAC5E,iEAAiE;IACjE,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAChC,IACE,GAAG,KAAK,IAAI;eACT,OAAO,GAAG,KAAK,QAAQ;eACvB,GAAG,CAAC,sBAAsB,KAAK,+CAA+C;eAC9E,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ;eAC3C,OAAO,GAAG,CAAC,kBAAkB,KAAK,QAAQ,EAC7C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,mCAAmC,CACzC,UAAU,CAAC,YAAY,EACvB,GAAG,CAAC,sBAAsB,EAC1B,GAAG,CAAC,mBAAmB,EACvB,GAAG,CAAC,kBAAkB,CACvB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,UAAU,CAAC,gCAAgC,KAAK,QAAQ,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,iBAAiB,GAAG,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,iBAAiB,GAAG,MAAM,CAAC,aAAa,CACtC,+CAA+C,CAAC,UAAU,CAAC,EAC3D,UAAU,CAAC,gCAAgC,CAC5C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB,GAAG,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,iBAAiB,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;YACvE,sBAAsB,EAAE,GAAG,CAAC,sBAAsB;YAClD,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;SAC7C,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACb,OAAO;QACL,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,YAAY,EAAE,KAAK,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QAC/F,IAAI,EAAE,QAAQ;KACf,CAAC;AACJ,CAAC"}

package/dist/internal/knowledge-asset-vm-publish-request.d.ts

@@ -0,0 +1,31 @@
+import { type AssertionSeal, GRAPH_KA_CONTENT_SCOPE_VERSION } from '@origintrail-official/dkg-core';
+import { type PublishOptions, type KnowledgeAssetVmPublishRequest } from '@origintrail-official/dkg-publisher';
+type KnowledgeAssetVmPublicationOperationPlan = {
+    readonly kind: 'initial';
+    readonly pricingPolicy: PublishOptions['pricingPolicy'];
+} | {
+    readonly kind: 'update';
+    readonly vmCurrentAssertion: string;
+};
+/** One operation discriminator shared by admission, sync, and queued execution. */
+export declare function planKnowledgeAssetVmPublication(input: {
+    readonly vmCurrentAssertion?: string;
+    readonly pricingPolicy?: PublishOptions['pricingPolicy'];
+}): KnowledgeAssetVmPublicationOperationPlan;
+/** Required immutable envelope consumed by graph-scoped queued publication. */
+export type GraphScopedKnowledgeAssetVmPublishRequest = KnowledgeAssetVmPublishRequest & {
+    readonly contentScopeVersion: typeof GRAPH_KA_CONTENT_SCOPE_VERSION;
+    readonly kaUal: string;
+    readonly assertionVersion: string;
+    readonly publicTripleCount: number;
+    readonly privateTripleCount: number;
+};
+/** Narrow the existing persisted-envelope checks before any graph mutation. */
+export declare function isGraphScopedKnowledgeAssetVmPublishRequest(request: KnowledgeAssetVmPublishRequest): request is GraphScopedKnowledgeAssetVmPublishRequest;
+/** Rebuild the immutable graph-scoped seal carried by one queued VM request. */
+export declare function assertionSealFromQueuedKnowledgeAssetVmPublishRequest(request: GraphScopedKnowledgeAssetVmPublishRequest): AssertionSeal;
+export type KnowledgeAssetVmPublishRequestWithoutIntentKey = Omit<KnowledgeAssetVmPublishRequest, 'intentKey'>;
+/** Canonical immutable projection of the persisted queued-publish request. */
+export declare function createKnowledgeAssetVmPublishIntentKey(request: KnowledgeAssetVmPublishRequestWithoutIntentKey): string;
+export {};
+//# sourceMappingURL=knowledge-asset-vm-publish-request.d.ts.map

package/dist/internal/knowledge-asset-vm-publish-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"knowledge-asset-vm-publish-request.d.ts","sourceRoot":"","sources":["../../src/internal/knowledge-asset-vm-publish-request.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,aAAa,EAAE,8BAA8B,EAAkC,MAAM,gCAAgC,CAAC;AACpI,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,8BAA8B,EAA4C,MAAM,qCAAqC,CAAC;AAGzJ,KAAK,wCAAwC,GACzC;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;CACzD,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC,CAAC;AAEN,mFAAmF;AACnF,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,aAAa,CAAC,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;CAC1D,GAAG,wCAAwC,CAU3C;AAED,+EAA+E;AAC/E,MAAM,MAAM,yCAAyC,GAAG,8BAA8B,GAAG;IACvF,QAAQ,CAAC,mBAAmB,EAAE,OAAO,8BAA8B,CAAC;IACpE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC,CAAC;AAEF,+EAA+E;AAC/E,wBAAgB,2CAA2C,CACzD,OAAO,EAAE,8BAA8B,GACtC,OAAO,IAAI,yCAAyC,CAOtD;AAED,gFAAgF;AAChF,wBAAgB,qDAAqD,CACnE,OAAO,EAAE,yCAAyC,GACjD,aAAa,CA2Bf;AAED,MAAM,MAAM,8CAA8C,GAAG,IAAI,CAC/D,8BAA8B,EAC9B,WAAW,CACZ,CAAC;AAEF,8EAA8E;AAC9E,wBAAgB,sCAAsC,CACpD,OAAO,EAAE,8CAA8C,GACtD,MAAM,CAqCR"}

package/dist/internal/knowledge-asset-vm-publish-request.js

@@ -0,0 +1,91 @@
+// SPDX-License-Identifier: Apache-2.0
+import { createHash } from 'node:crypto';
+import { GRAPH_KA_CONTENT_SCOPE_VERSION, createGraphKnowledgeAssetScope } from '@origintrail-official/dkg-core';
+import { assertPublicationPricingPolicyApplicable } from '@origintrail-official/dkg-publisher';
+import { ethers } from 'ethers';
+/** One operation discriminator shared by admission, sync, and queued execution. */
+export function planKnowledgeAssetVmPublication(input) {
+    if (input.vmCurrentAssertion) {
+        assertPublicationPricingPolicyApplicable(input.pricingPolicy, { kind: 'update' });
+        return { kind: 'update', vmCurrentAssertion: input.vmCurrentAssertion };
+    }
+    assertPublicationPricingPolicyApplicable(input.pricingPolicy, {
+        kind: 'initial',
+        graphScoped: true,
+    });
+    return { kind: 'initial', pricingPolicy: input.pricingPolicy };
+}
+/** Narrow the existing persisted-envelope checks before any graph mutation. */
+export function isGraphScopedKnowledgeAssetVmPublishRequest(request) {
+    return request.contentScopeVersion === GRAPH_KA_CONTENT_SCOPE_VERSION
+        && request.kaUal !== undefined
+        && request.assertionVersion !== undefined
+        && request.publicTripleCount !== undefined
+        && request.privateTripleCount !== undefined
+        && request.roots.length === 0;
+}
+/** Rebuild the immutable graph-scoped seal carried by one queued VM request. */
+export function assertionSealFromQueuedKnowledgeAssetVmPublishRequest(request) {
+    const graphScope = createGraphKnowledgeAssetScope(request.kaUal, request.assertionVersion);
+    return {
+        merkleRoot: ethers.getBytes(request.seal.merkleRoot),
+        authorAddress: ethers.getAddress(request.seal.authorAddress),
+        authorAttestationR: ethers.getBytes(request.seal.signature.r),
+        authorAttestationVS: ethers.getBytes(request.seal.signature.vs),
+        authorSchemeVersion: request.seal.schemeVersion,
+        chainId: BigInt(request.sealChainId),
+        kav10Address: ethers.getAddress(request.sealKav10Address),
+        finalizedAtIso: request.sealFinalizedAtIso,
+        contentScopeVersion: GRAPH_KA_CONTENT_SCOPE_VERSION,
+        kaUal: graphScope.ual,
+        assertionVersion: graphScope.assertionVersion,
+        publicTripleCount: request.publicTripleCount,
+        ...(request.privateMerkleRoot
+            ? { privateMerkleRoot: ethers.getBytes(request.privateMerkleRoot) }
+            : {}),
+        privateTripleCount: request.privateTripleCount,
+        rootEntities: [],
+        ...(request.seal.reservedKaId !== undefined
+            ? { reservedKaId: BigInt(request.seal.reservedKaId) }
+            : {}),
+    };
+}
+/** Canonical immutable projection of the persisted queued-publish request. */
+export function createKnowledgeAssetVmPublishIntentKey(request) {
+    const canonicalIntent = {
+        contextGraphId: request.contextGraphId,
+        name: request.name,
+        agentAddress: request.agentAddress ?? null,
+        subGraphName: request.subGraphName ?? null,
+        shareOperationId: request.shareOperationId,
+        roots: request.roots,
+        contentScopeVersion: request.contentScopeVersion ?? null,
+        kaUal: request.kaUal ?? null,
+        assertionVersion: request.assertionVersion ?? null,
+        publicTripleCount: request.publicTripleCount ?? null,
+        privateMerkleRoot: request.privateMerkleRoot?.toLowerCase() ?? null,
+        privateTripleCount: request.privateTripleCount ?? null,
+        accessPolicy: request.accessPolicy ?? null,
+        allowedPeers: request.allowedPeers ?? [],
+        entityProofs: request.entityProofs ?? null,
+        sealMerkleRoot: request.sealMerkleRoot.toLowerCase(),
+        seal: request.seal,
+        sealChainId: request.sealChainId,
+        sealKav10Address: request.sealKav10Address,
+        sealFinalizedAtIso: request.sealFinalizedAtIso,
+        wmCurrentAssertion: request.wmCurrentAssertion ?? null,
+        swmCurrentAssertion: request.swmCurrentAssertion ?? null,
+        vmCurrentAssertion: request.vmCurrentAssertion ?? null,
+        kaNumber: request.kaNumber ?? null,
+        reservedUal: request.reservedUal ?? null,
+        publishEpochs: request.publishEpochs ?? null,
+        // Keep the pre-feature canonical JSON unchanged when the policy is omitted.
+        ...(request.pricingPolicy !== undefined
+            ? { pricingPolicy: request.pricingPolicy }
+            : {}),
+        clearSharedMemoryAfter: request.clearSharedMemoryAfter ?? null,
+        publisherNodeIdentityIdOverride: request.publisherNodeIdentityIdOverride ?? null,
+    };
+    return `sha256:${createHash('sha256').update(JSON.stringify(canonicalIntent)).digest('hex')}`;
+}
+//# sourceMappingURL=knowledge-asset-vm-publish-request.js.map

package/dist/internal/knowledge-asset-vm-publish-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"knowledge-asset-vm-publish-request.js","sourceRoot":"","sources":["../../src/internal/knowledge-asset-vm-publish-request.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAsB,8BAA8B,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AACpI,OAAO,EAA4D,wCAAwC,EAAE,MAAM,qCAAqC,CAAC;AACzJ,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAYhC,mFAAmF;AACnF,MAAM,UAAU,+BAA+B,CAAC,KAG/C;IACC,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7B,wCAAwC,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE,CAAC;IAC1E,CAAC;IACD,wCAAwC,CAAC,KAAK,CAAC,aAAa,EAAE;QAC5D,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;AACjE,CAAC;AAWD,+EAA+E;AAC/E,MAAM,UAAU,2CAA2C,CACzD,OAAuC;IAEvC,OAAO,OAAO,CAAC,mBAAmB,KAAK,8BAA8B;WAChE,OAAO,CAAC,KAAK,KAAK,SAAS;WAC3B,OAAO,CAAC,gBAAgB,KAAK,SAAS;WACtC,OAAO,CAAC,iBAAiB,KAAK,SAAS;WACvC,OAAO,CAAC,kBAAkB,KAAK,SAAS;WACxC,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,qDAAqD,CACnE,OAAkD;IAElD,MAAM,UAAU,GAAG,8BAA8B,CAC/C,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,gBAAgB,CACzB,CAAC;IACF,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;QACpD,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;QAC5D,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7D,mBAAmB,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/D,mBAAmB,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa;QAC/C,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QACpC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACzD,cAAc,EAAE,OAAO,CAAC,kBAAkB;QAC1C,mBAAmB,EAAE,8BAA8B;QACnD,KAAK,EAAE,UAAU,CAAC,GAAG;QACrB,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;QAC7C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,GAAG,CAAC,OAAO,CAAC,iBAAiB;YAC3B,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE;YACnE,CAAC,CAAC,EAAE,CAAC;QACP,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,YAAY,EAAE,EAAE;QAChB,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE;YACrD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAOD,8EAA8E;AAC9E,MAAM,UAAU,sCAAsC,CACpD,OAAuD;IAEvD,MAAM,eAAe,GAAG;QACtB,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;QAC1C,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;QAC1C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,IAAI;QACxD,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;QAC5B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,IAAI;QAClD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,IAAI;QACpD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,WAAW,EAAE,IAAI,IAAI;QACnE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,IAAI;QACtD,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;QAC1C,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE;QACxC,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;QAC1C,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,WAAW,EAAE;QACpD,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,IAAI;QACtD,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,IAAI;QACxD,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,IAAI;QACtD,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI;QAClC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;QACxC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;QAC5C,4EAA4E;QAC5E,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;YACrC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE;YAC1C,CAAC,CAAC,EAAE,CAAC;QACP,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,IAAI,IAAI;QAC9D,+BAA+B,EAC7B,OAAO,CAAC,+BAA+B,IAAI,IAAI;KAClD,CAAC;IACF,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAChG,CAAC"}

package/dist/internal/lifecycle-sync-policy.d.ts

@@ -0,0 +1,5 @@
+import { type DKGAgentConfig } from '../dkg-agent-types.js';
+export declare function syncReconcilerEnabled(config: DKGAgentConfig): boolean;
+export declare function syncOnConnectEnabled(config: DKGAgentConfig): boolean;
+export declare function durableSyncEnabled(config: DKGAgentConfig): boolean;
+//# sourceMappingURL=lifecycle-sync-policy.d.ts.map

package/dist/internal/lifecycle-sync-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-sync-policy.d.ts","sourceRoot":"","sources":["../../src/internal/lifecycle-sync-policy.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAErE;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAEpE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAElE"}

package/dist/internal/lifecycle-sync-policy.js

@@ -0,0 +1,12 @@
+// SPDX-License-Identifier: Apache-2.0
+import { resolveBooleanSwitch, resolveSyncReconcilerEnabled } from '../sync/backpressure.js';
+export function syncReconcilerEnabled(config) {
+    return resolveSyncReconcilerEnabled(config.syncReconcilerEnabled);
+}
+export function syncOnConnectEnabled(config) {
+    return resolveBooleanSwitch(config.syncOnConnectEnabled, 'DKG_SYNC_ON_CONNECT_ENABLED', true);
+}
+export function durableSyncEnabled(config) {
+    return resolveBooleanSwitch(config.durableSyncEnabled, 'DKG_DURABLE_SYNC_ENABLED', true);
+}
+//# sourceMappingURL=lifecycle-sync-policy.js.map

package/dist/internal/lifecycle-sync-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-sync-policy.js","sourceRoot":"","sources":["../../src/internal/lifecycle-sync-policy.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAG7F,MAAM,UAAU,qBAAqB,CAAC,MAAsB;IAC1D,OAAO,4BAA4B,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAsB;IACzD,OAAO,oBAAoB,CAAC,MAAM,CAAC,oBAAoB,EAAE,6BAA6B,EAAE,IAAI,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAsB;IACvD,OAAO,oBAAoB,CAAC,MAAM,CAAC,kBAAkB,EAAE,0BAA0B,EAAE,IAAI,CAAC,CAAC;AAC3F,CAAC"}

package/dist/internal/local-private-member.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Whether `meta` declares an explicit private policy (#865) and lists one of
+ * `localAgents` among its allowed agents, participants, curators or creators,
+ * and not among its revoked agents.
+ */
+export declare function isLocalPrivateMember(meta: {
+    readonly accessPolicy?: string;
+    readonly allowedAgents: readonly string[];
+    readonly participantAgents: readonly string[];
+    readonly curators: readonly string[];
+    readonly creators: readonly string[];
+    readonly revokedAgents: readonly string[];
+}, localAgents: readonly (string | undefined)[]): boolean;
+//# sourceMappingURL=local-private-member.d.ts.map

package/dist/internal/local-private-member.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-private-member.d.ts","sourceRoot":"","sources":["../../src/internal/local-private-member.ts"],"names":[],"mappings":"AAUA;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE;IACJ,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C,EACD,WAAW,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAC3C,OAAO,CAWT"}