@origintrail-official/dkg-agent 10.0.19 → 10.0.21

package/dist/vm-recovery-core-transport-preference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vm-recovery-core-transport-preference.js","sourceRoot":"","sources":["../src/vm-recovery-core-transport-preference.ts"],"names":[],"mappings":"AAkCA,+EAA+E;AAC/E,MAAM,OAAO,uCAAuC;IAI/B;IACA;IAJF,OAAO,GAAG,IAAI,GAAG,EAAmC,CAAC;IAEtE,YACmB,IAAoB,EACpB,MAA+D;QAD/D,SAAI,GAAJ,IAAI,CAAgB;QACpB,WAAM,GAAN,MAAM,CAAyD;IAC/E,CAAC;IAEJ,aAAa,CAAC,SAAiB,EAAE,WAAmB,EAAE,eAAkC;QACtF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;eACnE,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;mBAC1D,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/F,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACnC,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IAED,OAAO,CAAC,SAAiB,EAAE,WAAmB,EAAE,gBAAmC;QACjF,MAAM,uBAAuB,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/C,OAAO;YACL,SAAS,EAAE,WAAW,EAAE,uBAAuB,EAAE,UAAU;YAC3D,aAAa,EAAE,uBAAuB,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS;YAC9E,KAAK,EAAE,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS;SACjG,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,OAAuC,EAAE,MAAc,EAAE,eAAkC;QAClG,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,uBAAuB,IAAI,KAAK,EAAE,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB;YAAE,OAAO,KAAK,CAAC;QACnH,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,KAAK,CAAC,KAAK;eACzD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,eAAe,CAAC,KAAK,MAAM;eACtF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,KAAK,CAAC,KAAK;eAC1D,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,eAAe,CAAC,OAAuC,EAAE,MAAc,EAAE,qBAAoC;QAC3G,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,EAAE,IAAI,KAAK,iBAAiB;eAC1C,KAAK,CAAC,MAAM,KAAK,MAAM;eACvB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,KAAK,CAAC,KAAK;eAC1D,qBAAqB,KAAK,KAAK,CAAC,aAAa;eAC7C,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;eAC9B,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,OAAuC,EAAE,MAAc;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,KAAK,EAAE,MAAM,KAAK,MAAM;eACvB,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YACpF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,MAAM,CAAC,OAAuC,EAAE,MAO/C;QACC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;QAChH,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/B,CAAC;aAAM,IAAI,oBAAoB,KAAK,IAAI,EAAE,CAAC;YACzC,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EACtF,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC/H,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,uBAAuB;gBAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnF,CAAC;aAAM,IAAI,OAAO,CAAC,uBAAuB,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAC5D,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EACtF,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;YACjG,IAAI,CAAC,UAAU;gBAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;aAAM,IAAI,YAAY,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpD,OAAO;YACL,KAAK,EAAE,kBAAkB,IAAI,YAAY,IAAI,CAC3C,CAAC,oBAAoB,KAAK,IAAI,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC,CAAC;mBAC7D,CAAC,OAAO,CAAC,uBAAuB,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CACvE;YACD,mBAAmB,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB;SACtF,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,SAAiB,EAAE,WAAmB,EAAE,MAAc,EAAE,aAA4B,EAC3F,KACsD;QACtD,IAAI,aAAa,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;eACxD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,aAAa;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,KAAK,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,aAAa;eAC1D,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC;eACjD,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI;mBAC7D,QAAS,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9D,MAAM,QAAQ,GAAuB;YACnC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa;YAC5D,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK;SAC/C,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,KAAK,iBAAiB;YAC3D,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;YAC9D,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACtF,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAClD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAChD,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM;YAChC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kBAAkB,CAAC,SAAiB,IAAU,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC/E,UAAU,CAAC,MAAc;QACvB,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,KAAK,KAAW,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAE/B,kBAAkB,CAAC,KAA8B;QACvD,OAAO,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC;eAC3E,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,aAAa,CAAC;IACrE,CAAC;CACF"}

package/dist/vm-recovery-experiment-policy.d.ts

@@ -0,0 +1,24 @@
+import { type VmRecoveryPreparationLimits } from './vm-recovery-preparation.js';
+export type VmRecoveryAuthorityRetryPolicy = {
+    readonly kind: 'disabled';
+} | {
+    readonly kind: 'spaced';
+    readonly minIntervalMs: number;
+};
+/** Resolve the bundled experiment once; owner presence is not a policy switch. */
+export declare function resolveVmRecoveryExperimentPolicy(configValue?: boolean, limits?: Readonly<VmRecoveryPreparationLimits>): Readonly<{
+    prefetchEnabled: boolean;
+    sharePassAuthorityEvidence: boolean;
+    authorityRetry: Readonly<{
+        kind: "spaced";
+        minIntervalMs: number;
+    } | {
+        kind: "disabled";
+        minIntervalMs?: undefined;
+    }>;
+    sizing: Readonly<{
+        sizingReadConcurrency: number;
+        sizingReadTimeoutMs: number;
+    }> | undefined;
+}>;
+//# sourceMappingURL=vm-recovery-experiment-policy.d.ts.map

package/dist/vm-recovery-experiment-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vm-recovery-experiment-policy.d.ts","sourceRoot":"","sources":["../src/vm-recovery-experiment-policy.ts"],"names":[],"mappings":"AACA,OAAO,EAAoE,KAAK,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAElJ,MAAM,MAAM,8BAA8B,GACtC;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhE,kFAAkF;AAClF,wBAAgB,iCAAiC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,GAAE,QAAQ,CAAC,2BAA2B,CAAkC;;;;;;;;;;;;;;GAatJ"}

package/dist/vm-recovery-experiment-policy.js

@@ -0,0 +1,18 @@
+// SPDX-License-Identifier: Apache-2.0
+import { resolveVmRecoveryPrefetchEnabled, VM_RECOVERY_PREPARATION_LIMITS } from './vm-recovery-preparation.js';
+/** Resolve the bundled experiment once; owner presence is not a policy switch. */
+export function resolveVmRecoveryExperimentPolicy(configValue, limits = VM_RECOVERY_PREPARATION_LIMITS) {
+    const enabled = resolveVmRecoveryPrefetchEnabled(configValue);
+    return Object.freeze({
+        prefetchEnabled: enabled,
+        sharePassAuthorityEvidence: enabled,
+        authorityRetry: Object.freeze(enabled
+            ? { kind: 'spaced', minIntervalMs: limits.authorityRetryMinIntervalMs }
+            : { kind: 'disabled' }),
+        sizing: enabled ? Object.freeze({
+            sizingReadConcurrency: limits.planningReadConcurrency,
+            sizingReadTimeoutMs: limits.planningReadTimeoutMs,
+        }) : undefined,
+    });
+}
+//# sourceMappingURL=vm-recovery-experiment-policy.js.map

package/dist/vm-recovery-experiment-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vm-recovery-experiment-policy.js","sourceRoot":"","sources":["../src/vm-recovery-experiment-policy.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,gCAAgC,EAAE,8BAA8B,EAAoC,MAAM,8BAA8B,CAAC;AAMlJ,kFAAkF;AAClF,MAAM,UAAU,iCAAiC,CAAC,WAAqB,EAAE,SAAgD,8BAA8B;IACrJ,MAAM,OAAO,GAAG,gCAAgC,CAAC,WAAW,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,eAAe,EAAE,OAAO;QACxB,0BAA0B,EAAE,OAAO;QACnC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;YACnC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,aAAa,EAAE,MAAM,CAAC,2BAA2B,EAAE;YAChF,CAAC,CAAC,EAAE,IAAI,EAAE,UAAmB,EAAE,CAAC;QAClC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YAC9B,qBAAqB,EAAE,MAAM,CAAC,uBAAuB;YACrD,mBAAmB,EAAE,MAAM,CAAC,qBAAqB;SAClD,CAAC,CAAC,CAAC,CAAC,SAAS;KACf,CAAC,CAAC;AACL,CAAC"}

package/dist/vm-recovery-footprint.d.ts

@@ -11,23 +11,77 @@ export interface VmRecoveryFootprintSizingReader {
         signal?: AbortSignal;
     }): Promise<VmRecoveryUpdateContext>;
 }
+/**
+ * Advisory sizing hints prepared before this pass began. A hint is single-use
+ * planning evidence of exactly the same kind a live read produces
+ * (`latest-bounded`); it is never authority to materialize anything.
+ */
+export interface VmRecoveryPreparedHints {
+    /**
+     * The prepared hint for `kaId`, or `undefined` when none is usable (absent,
+     * stale, already taken, failed or not ready within `maxWaitMs`). The caller
+     * then falls back to its own live read, so a miss is never evidence of
+     * absence or permission to skip a candidate.
+     */
+    take(kaId: string, options: {
+        readonly maxWaitMs: number;
+        readonly signal?: AbortSignal;
+    }): Promise<VmRecoveryChainFootprint | undefined>;
+}
 /** Public authority is resolved by the host; this module owns sizing only. */
 export interface VmRecoveryFootprintBridge {
     readonly resolvePublicAccess: (contextGraphId: bigint, options?: {
         signal?: AbortSignal;
     }) => Promise<boolean>;
     readonly sizing: VmRecoveryFootprintSizingReader | null;
+    /** Optional prepared hints consumed before any live read; absent keeps today's behavior. */
+    readonly prepared?: VmRecoveryPreparedHints | null;
 }
 export interface VmRecoveryFootprintBridgeOptions {
     maxContextReads: number;
     sizingReadTimeoutMs?: number;
     signal?: AbortSignal;
     isCurrent: () => boolean;
+    /** Observation only: receives the outcome counts of one enrichment call. */
+    observe?: (observation: VmRecoveryFootprintObservation) => void;
+    /**
+     * How many live sizing reads may be in flight at once. Reads start in
+     * candidate order and each read's deadline starts when that read starts, so
+     * a later candidate never spends its budget queueing behind earlier ones in
+     * the local RPC governor. Omitted keeps every read concurrent from the start.
+     */
+    readConcurrency?: number;
 }
+/** What one enrichment call did; never consulted by any recovery decision. */
+export interface VmRecoveryFootprintObservation {
+    /** Entries whose footprint was unknown and therefore needed a sizing read. */
+    readonly requested: number;
+    /** Reads that produced a valid public footprint. */
+    readonly resolved: number;
+    /** Candidates served by a prepared hint instead of a live read. */
+    readonly prepared: number;
+    /** Reads that outlived the sizing deadline (including governor queue wait). */
+    readonly timedOut: number;
+    /** Reads dropped because the operation was aborted or no longer current. */
+    readonly aborted: number;
+    /** Reads that returned a malformed, zero or unsafe tuple. */
+    readonly invalid: number;
+    /** Reads that rejected. */
+    readonly failed: number;
+    readonly elapsedMs: number;
+}
+export declare const VM_RECOVERY_BRIDGE_ABORTED: unique symbol;
+export declare const VM_RECOVERY_BRIDGE_TIMED_OUT: unique symbol;
 export declare const VM_RECOVERY_FOOTPRINT_READ_TIMEOUT_MS = 2500;
+export declare function readVmRecoveryFootprintWithDeadline<T>(start: (signal: AbortSignal) => Promise<T>, callerSignal: AbortSignal | undefined, timeoutMs: number): Promise<T | typeof VM_RECOVERY_BRIDGE_ABORTED | typeof VM_RECOVERY_BRIDGE_TIMED_OUT>;
 export type VmRecoveryFootprintEnrichedTarget<T extends VmRecoveryFootprintBridgeTarget> = Omit<T, 'recoveryFootprint'> & {
     readonly recoveryFootprint: VmRecoveryChainFootprint;
 };
+/**
+ * The one rule that turns an observed update context into a planning hint.
+ * Zero, negative or unsafe values are not hints: they stay unknown/singleton.
+ */
+export declare function vmRecoveryFootprintFromUpdateContext(context: VmRecoveryUpdateContext): VmRecoveryChainFootprint | undefined;
 /**
  * Enrich a bounded prefix with public-chain sizing hints. Latest-state reads
  * influence soft packing only; unavailable, stale, private, aborted, or

package/dist/vm-recovery-footprint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vm-recovery-footprint.d.ts","sourceRoot":"","sources":["../src/vm-recovery-footprint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAEnF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAEvE,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;CACvD;AAED,gFAAgF;AAChF,MAAM,MAAM,uBAAuB,GAAG,IAAI,CACxC,2BAA2B,EAC3B,kBAAkB,GAAG,UAAU,GAAG,iBAAiB,CACpD,CAAC;AAEF,MAAM,WAAW,+BAA+B;IAC9C,iBAAiB,CACf,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACjC,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACrC;AAED,8EAA8E;AAC9E,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,mBAAmB,EAAE,CAC5B,cAAc,EAAE,MAAM,EACtB,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAC/B,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,+BAA+B,GAAG,IAAI,CAAC;CACzD;AAED,MAAM,WAAW,gCAAgC;IAC/C,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,OAAO,CAAC;CAC1B;AAID,eAAO,MAAM,qCAAqC,OAAQ,CAAC;AAqE3D,MAAM,MAAM,iCAAiC,CAAC,CAAC,SAAS,+BAA+B,IACrF,IAAI,CAAC,CAAC,EAAE,mBAAmB,CAAC,GAAG;IAAE,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB,CAAA;CAAE,CAAC;AA2C1F;;;;GAIG;AACH,wBAAsB,0BAA0B,CAAC,CAAC,SAAS,+BAA+B,EACxF,OAAO,EAAE,SAAS,CAAC,EAAE,EACrB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,yBAAyB,EACjC,OAAO,EAAE,QAAQ,CAAC,gCAAgC,CAAC,GAClD,OAAO,CAAC,iCAAiC,CAAC,CAAC,CAAC,EAAE,CAAC,CAoEjD"}
+{"version":3,"file":"vm-recovery-footprint.d.ts","sourceRoot":"","sources":["../src/vm-recovery-footprint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAGnF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAEvE,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;CACvD;AAED,gFAAgF;AAChF,MAAM,MAAM,uBAAuB,GAAG,IAAI,CACxC,2BAA2B,EAC3B,kBAAkB,GAAG,UAAU,GAAG,iBAAiB,CACpD,CAAC;AAEF,MAAM,WAAW,+BAA+B;IAC9C,iBAAiB,CACf,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACjC,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACrC;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,IAAI,CACF,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACrE,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAC;CAClD;AAED,8EAA8E;AAC9E,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,mBAAmB,EAAE,CAC5B,cAAc,EAAE,MAAM,EACtB,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAC/B,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,+BAA+B,GAAG,IAAI,CAAC;IACxD,4FAA4F;IAC5F,QAAQ,CAAC,QAAQ,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,gCAAgC;IAC/C,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,OAAO,CAAC;IACzB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,8BAA8B,KAAK,IAAI,CAAC;IAChE;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,8EAA8E;AAC9E,MAAM,WAAW,8BAA8B;IAC7C,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,2BAA2B;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,eAAO,MAAM,0BAA0B,eAAuC,CAAC;AAC/E,eAAO,MAAM,4BAA4B,eAAyC,CAAC;AACnF,eAAO,MAAM,qCAAqC,OAAQ,CAAC;AAwB3D,wBAAsB,mCAAmC,CAAC,CAAC,EACzD,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,EAC1C,YAAY,EAAE,WAAW,GAAG,SAAS,EACrC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,CAAC,GAAG,OAAO,0BAA0B,GAAG,OAAO,4BAA4B,CAAC,CAuCtF;AAED,MAAM,MAAM,iCAAiC,CAAC,CAAC,SAAS,+BAA+B,IACrF,IAAI,CAAC,CAAC,EAAE,mBAAmB,CAAC,GAAG;IAAE,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB,CAAA;CAAE,CAAC;AA2C1F;;;GAGG;AACH,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,uBAAuB,GAC/B,wBAAwB,GAAG,SAAS,CActC;AAaD;;;;GAIG;AACH,wBAAsB,0BAA0B,CAAC,CAAC,SAAS,+BAA+B,EACxF,OAAO,EAAE,SAAS,CAAC,EAAE,EACrB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,yBAAyB,EACjC,OAAO,EAAE,QAAQ,CAAC,gCAAgC,CAAC,GAClD,OAAO,CAAC,iCAAiC,CAAC,CAAC,CAAC,EAAE,CAAC,CAyGjD"}

package/dist/vm-recovery-footprint.js

@@ -1,5 +1,6 @@
-const VM_RECOVERY_BRIDGE_ABORTED = Symbol('vm-recovery-bridge-aborted');
-const VM_RECOVERY_BRIDGE_TIMED_OUT = Symbol('vm-recovery-bridge-timed-out');
+import { mapWithConcurrency } from './map-with-concurrency.js';
+export const VM_RECOVERY_BRIDGE_ABORTED = Symbol('vm-recovery-bridge-aborted');
+export const VM_RECOVERY_BRIDGE_TIMED_OUT = Symbol('vm-recovery-bridge-timed-out');
 export const VM_RECOVERY_FOOTPRINT_READ_TIMEOUT_MS = 2_500;
 function vmRecoveryBridgeSignalAborted(signal) {
     return signal?.aborted === true;
@@ -22,7 +23,7 @@ async function raceVmRecoveryBridgeAbort(promise, signal) {
             signal.removeEventListener('abort', abortListener);
     }
 }
-async function readVmRecoveryFootprintWithDeadline(start, callerSignal, timeoutMs) {
+export async function readVmRecoveryFootprintWithDeadline(start, callerSignal, timeoutMs) {
     if (callerSignal?.aborted)
         return VM_RECOVERY_BRIDGE_ABORTED;
     const controller = new AbortController();
@@ -96,6 +97,32 @@ async function resolveVmRecoveryPublicAuthority(onChainCgId, resolvePublicAccess
         return false;
     }
 }
+/**
+ * The one rule that turns an observed update context into a planning hint.
+ * Zero, negative or unsafe values are not hints: they stay unknown/singleton.
+ */
+export function vmRecoveryFootprintFromUpdateContext(context) {
+    if (context.merkleRootsCount <= 0n
+        || context.byteSize <= 0n
+        || !Number.isSafeInteger(context.merkleLeafCount)
+        || context.merkleLeafCount <= 0)
+        return undefined;
+    return {
+        kind: 'public-v10',
+        byteSize: context.byteSize,
+        merkleLeafCount: BigInt(context.merkleLeafCount),
+        assertionVersion: context.merkleRootsCount.toString(),
+        anchor: { kind: 'latest-bounded' },
+    };
+}
+function isUsablePreparedFootprint(footprint) {
+    return footprint?.kind === 'public-v10'
+        && typeof footprint.byteSize === 'bigint'
+        && footprint.byteSize > 0n
+        && typeof footprint.merkleLeafCount === 'bigint'
+        && footprint.merkleLeafCount > 0n
+        && footprint.anchor.kind === 'latest-bounded';
+}
 /**
  * Enrich a bounded prefix with public-chain sizing hints. Latest-state reads
  * influence soft packing only; unavailable, stale, private, aborted, or
@@ -126,36 +153,73 @@ export async function enrichVmRecoveryFootprints(targets, onChainCgId, bridge, o
         || bridge.sizing === null)
         return original;
     const sizing = bridge.sizing;
-    const observed = await Promise.all(unknownEntries.map(async ({ target, index }) => {
-        if (options.signal?.aborted || !options.isCurrent())
+    const counts = { resolved: 0, prepared: 0, timedOut: 0, aborted: 0, invalid: 0, failed: 0 };
+    const startedAt = performance.now();
+    const configuredConcurrency = options.readConcurrency;
+    const readConcurrency = configuredConcurrency !== undefined
+        && Number.isSafeInteger(configuredConcurrency)
+        && configuredConcurrency > 0
+        ? configuredConcurrency
+        : unknownEntries.length;
+    const sizeEntry = async ({ target, index }) => {
+        if (options.signal?.aborted || !options.isCurrent()) {
+            counts.aborted += 1;
             return { index };
+        }
         try {
+            if (bridge.prepared) {
+                // A prepared hint is the same advisory evidence a live read yields. Any
+                // problem with it (absent, stale, failed, late, malformed) is a plain
+                // miss: the live read below runs exactly as it would without hints.
+                const hinted = await bridge.prepared
+                    .take(target.kaId, { maxWaitMs: sizingReadTimeoutMs, signal: options.signal })
+                    .catch(() => undefined);
+                if (options.signal?.aborted || !options.isCurrent()) {
+                    counts.aborted += 1;
+                    return { index };
+                }
+                if (isUsablePreparedFootprint(hinted)) {
+                    counts.prepared += 1;
+                    return { index, footprint: hinted };
+                }
+            }
             const observedContext = await readVmRecoveryFootprintWithDeadline((readSignal) => sizing.readUpdateContext(BigInt(target.kaId), { signal: readSignal }), options.signal, sizingReadTimeoutMs);
-            if (observedContext === VM_RECOVERY_BRIDGE_ABORTED
-                || observedContext === VM_RECOVERY_BRIDGE_TIMED_OUT)
+            if (observedContext === VM_RECOVERY_BRIDGE_ABORTED) {
+                counts.aborted += 1;
                 return { index };
-            if (options.signal?.aborted
-                || !options.isCurrent()
-                || observedContext.merkleRootsCount <= 0n
-                || observedContext.byteSize <= 0n
-                || !Number.isSafeInteger(observedContext.merkleLeafCount)
-                || observedContext.merkleLeafCount <= 0)
+            }
+            if (observedContext === VM_RECOVERY_BRIDGE_TIMED_OUT) {
+                counts.timedOut += 1;
                 return { index };
-            return {
-                index,
-                footprint: {
-                    kind: 'public-v10',
-                    byteSize: observedContext.byteSize,
-                    merkleLeafCount: BigInt(observedContext.merkleLeafCount),
-                    assertionVersion: observedContext.merkleRootsCount.toString(),
-                    anchor: { kind: 'latest-bounded' },
-                },
-            };
+            }
+            if (options.signal?.aborted || !options.isCurrent()) {
+                counts.aborted += 1;
+                return { index };
+            }
+            const footprint = vmRecoveryFootprintFromUpdateContext(observedContext);
+            if (!footprint) {
+                counts.invalid += 1;
+                return { index };
+            }
+            counts.resolved += 1;
+            return { index, footprint };
         }
         catch {
+            counts.failed += 1;
             return { index };
         }
-    }));
+    };
+    const observed = await mapWithConcurrency(unknownEntries, readConcurrency, sizeEntry);
+    if (options.observe) {
+        try {
+            options.observe({
+                requested: unknownEntries.length,
+                ...counts,
+                elapsedMs: performance.now() - startedAt,
+            });
+        }
+        catch { /* observation only */ }
+    }
     if (options.signal?.aborted || !options.isCurrent())
         return unverified;
     const enriched = [...original];

package/dist/vm-recovery-footprint.js.map

@@ -1 +1 @@
-{"version":3,"file":"vm-recovery-footprint.js","sourceRoot":"","sources":["../src/vm-recovery-footprint.ts"],"names":[],"mappings":"AAsCA,MAAM,0BAA0B,GAAG,MAAM,CAAC,4BAA4B,CAAC,CAAC;AACxE,MAAM,4BAA4B,GAAG,MAAM,CAAC,8BAA8B,CAAC,CAAC;AAC5E,MAAM,CAAC,MAAM,qCAAqC,GAAG,KAAK,CAAC;AAE3D,SAAS,6BAA6B,CAAC,MAA+B;IACpE,OAAO,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,OAAmB,EACnB,MAA+B;IAE/B,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,0BAA0B,CAAC;IACtD,IAAI,aAAuC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAoC,CAAC,OAAO,EAAE,EAAE;QACzE,aAAa,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC1D,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,IAAI,aAAa;YAAE,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mCAAmC,CAChD,KAA0C,EAC1C,YAAqC,EACrC,SAAiB;IAEjB,IAAI,YAAY,EAAE,OAAO;QAAE,OAAO,0BAA0B,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,KAAgD,CAAC;IACrD,IAAI,eAAyC,CAAC;IAC9C,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,MAAM,aAAa,GAAG,IAAI,OAAO,CAAoC,CAAC,OAAO,EAAE,EAAE;QAC/E,IAAI,CAAC,YAAY;YAAE,OAAO;QAC1B,eAAe,GAAG,GAAG,EAAE;YACrB,cAAc,GAAG,IAAI,CAAC;YACtB,OAAO,CAAC,0BAA0B,CAAC,CAAC;YACpC,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC,CAAC;QACF,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAsC,CAAC,OAAO,EAAE,EAAE;QAC5E,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,eAAe,GAAG,IAAI,CAAC;YACvB,OAAO,CAAC,4BAA4B,CAAC,CAAC;YACtC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,8CAA8C,SAAS,IAAI,CAAC,CAAC,CAAC;QAC3F,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnE,IAAI,cAAc;YAAE,OAAO,0BAA0B,CAAC;QACtD,IAAI,eAAe;YAAE,OAAO,4BAA4B,CAAC;QACzD,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,YAAY,IAAI,eAAe;YAAE,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAKD,SAAS,4BAA4B,CACnC,MAAS;IAET,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,OAAO,MAA8C,CAAC;IACxD,CAAC;IACD,OAAO;QACL,GAAG,MAAM;QACT,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,mCAAmC,CAC1C,OAAqB;IAErB,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAwC,EAAE,CAClE,MAAM,CAAC,iBAAiB,EAAE,IAAI,KAAK,YAAY;QAC7C,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;QACvD,CAAC,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC7C,WAAmB,EACnB,mBAAqE,EACrE,MAA+B,EAC/B,SAAwB;IAExB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAC7C,mBAAmB,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,EAC5C,MAAM,CACP,CAAC;QACF,OAAO,OAAO,KAAK,0BAA0B;eACxC,OAAO,KAAK,IAAI;eAChB,CAAC,6BAA6B,CAAC,MAAM,CAAC;eACtC,SAAS,EAAE,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAqB,EACrB,WAAmB,EACnB,MAAiC,EACjC,OAAmD;IAEnD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC1C,IAAI,WAAW,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;QAAE,OAAO,UAAU,CAAC;IAE5F,MAAM,eAAe,GAAG,MAAM,gCAAgC,CAC5D,WAAW,EAAE,MAAM,CAAC,mBAAmB,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAC3E,CAAC;IACF,IAAI,CAAC,eAAe,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;QAAE,OAAO,UAAU,CAAC;IAE3F,MAAM,cAAc,GAAG,OAAO;SAC3B,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;SAC3C,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,iBAAiB;WAC5C,MAAM,CAAC,iBAAiB,CAAC,IAAI,KAAK,SAAS,CAAC;SAChD,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACrC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjD,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,qCAAqC,CAAC;IACjG,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,eAAe,CAAC;WAC3C,OAAO,CAAC,eAAe,IAAI,CAAC;WAC5B,CAAC,MAAM,CAAC,aAAa,CAAC,mBAAmB,CAAC;WAC1C,mBAAmB,IAAI,CAAC;WACxB,MAAM,CAAC,MAAM,KAAK,IAAI;QACzB,OAAO,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAE7B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;QAChF,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;YAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,MAAM,mCAAmC,CAC/D,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EACrF,OAAO,CAAC,MAAM,EACd,mBAAmB,CACpB,CAAC;YACF,IACE,eAAe,KAAK,0BAA0B;mBAC3C,eAAe,KAAK,4BAA4B;gBACnD,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,IACE,OAAO,CAAC,MAAM,EAAE,OAAO;mBACpB,CAAC,OAAO,CAAC,SAAS,EAAE;mBACpB,eAAe,CAAC,gBAAgB,IAAI,EAAE;mBACtC,eAAe,CAAC,QAAQ,IAAI,EAAE;mBAC9B,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,eAAe,CAAC;mBACtD,eAAe,CAAC,eAAe,IAAI,CAAC;gBACvC,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,OAAO;gBACL,KAAK;gBACL,SAAS,EAAE;oBACT,IAAI,EAAE,YAAY;oBAClB,QAAQ,EAAE,eAAe,CAAC,QAAQ;oBAClC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC;oBACxD,gBAAgB,EAAE,eAAe,CAAC,gBAAgB,CAAC,QAAQ,EAAE;oBAC7D,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;iBACA;aACrC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC,CAAC;IAEJ,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;QAAE,OAAO,UAAU,CAAC;IACvE,MAAM,QAAQ,GAA2C,CAAC,GAAG,QAAQ,CAAC,CAAC;IACvE,KAAK,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC5C,IAAI,SAAS;YAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,KAAK,CAAE,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC;IACxF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"vm-recovery-footprint.js","sourceRoot":"","sources":["../src/vm-recovery-footprint.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAqF/D,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAC/E,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC,8BAA8B,CAAC,CAAC;AACnF,MAAM,CAAC,MAAM,qCAAqC,GAAG,KAAK,CAAC;AAE3D,SAAS,6BAA6B,CAAC,MAA+B;IACpE,OAAO,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,OAAmB,EACnB,MAA+B;IAE/B,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,0BAA0B,CAAC;IACtD,IAAI,aAAuC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAoC,CAAC,OAAO,EAAE,EAAE;QACzE,aAAa,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC1D,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,IAAI,aAAa;YAAE,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,KAA0C,EAC1C,YAAqC,EACrC,SAAiB;IAEjB,IAAI,YAAY,EAAE,OAAO;QAAE,OAAO,0BAA0B,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,KAAgD,CAAC;IACrD,IAAI,eAAyC,CAAC;IAC9C,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,MAAM,aAAa,GAAG,IAAI,OAAO,CAAoC,CAAC,OAAO,EAAE,EAAE;QAC/E,IAAI,CAAC,YAAY;YAAE,OAAO;QAC1B,eAAe,GAAG,GAAG,EAAE;YACrB,cAAc,GAAG,IAAI,CAAC;YACtB,OAAO,CAAC,0BAA0B,CAAC,CAAC;YACpC,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC,CAAC;QACF,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAsC,CAAC,OAAO,EAAE,EAAE;QAC5E,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,eAAe,GAAG,IAAI,CAAC;YACvB,OAAO,CAAC,4BAA4B,CAAC,CAAC;YACtC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,8CAA8C,SAAS,IAAI,CAAC,CAAC,CAAC;QAC3F,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnE,IAAI,cAAc;YAAE,OAAO,0BAA0B,CAAC;QACtD,IAAI,eAAe;YAAE,OAAO,4BAA4B,CAAC;QACzD,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,YAAY,IAAI,eAAe;YAAE,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAKD,SAAS,4BAA4B,CACnC,MAAS;IAET,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,OAAO,MAA8C,CAAC;IACxD,CAAC;IACD,OAAO;QACL,GAAG,MAAM;QACT,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,mCAAmC,CAC1C,OAAqB;IAErB,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAwC,EAAE,CAClE,MAAM,CAAC,iBAAiB,EAAE,IAAI,KAAK,YAAY;QAC7C,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;QACvD,CAAC,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC7C,WAAmB,EACnB,mBAAqE,EACrE,MAA+B,EAC/B,SAAwB;IAExB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAC7C,mBAAmB,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,EAC5C,MAAM,CACP,CAAC;QACF,OAAO,OAAO,KAAK,0BAA0B;eACxC,OAAO,KAAK,IAAI;eAChB,CAAC,6BAA6B,CAAC,MAAM,CAAC;eACtC,SAAS,EAAE,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oCAAoC,CAClD,OAAgC;IAEhC,IACE,OAAO,CAAC,gBAAgB,IAAI,EAAE;WAC3B,OAAO,CAAC,QAAQ,IAAI,EAAE;WACtB,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,eAAe,CAAC;WAC9C,OAAO,CAAC,eAAe,IAAI,CAAC;QAC/B,OAAO,SAAS,CAAC;IACnB,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;QAChD,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,CAAC,QAAQ,EAAE;QACrD,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,SAA+C;IAE/C,OAAO,SAAS,EAAE,IAAI,KAAK,YAAY;WAClC,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;WACtC,SAAS,CAAC,QAAQ,GAAG,EAAE;WACvB,OAAO,SAAS,CAAC,eAAe,KAAK,QAAQ;WAC7C,SAAS,CAAC,eAAe,GAAG,EAAE;WAC9B,SAAS,CAAC,MAAM,CAAC,IAAI,KAAK,gBAAgB,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAqB,EACrB,WAAmB,EACnB,MAAiC,EACjC,OAAmD;IAEnD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC1C,IAAI,WAAW,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;QAAE,OAAO,UAAU,CAAC;IAE5F,MAAM,eAAe,GAAG,MAAM,gCAAgC,CAC5D,WAAW,EAAE,MAAM,CAAC,mBAAmB,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAC3E,CAAC;IACF,IAAI,CAAC,eAAe,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;QAAE,OAAO,UAAU,CAAC;IAE3F,MAAM,cAAc,GAAG,OAAO;SAC3B,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;SAC3C,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,iBAAiB;WAC5C,MAAM,CAAC,iBAAiB,CAAC,IAAI,KAAK,SAAS,CAAC;SAChD,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACrC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjD,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,qCAAqC,CAAC;IACjG,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,eAAe,CAAC;WAC3C,OAAO,CAAC,eAAe,IAAI,CAAC;WAC5B,CAAC,MAAM,CAAC,aAAa,CAAC,mBAAmB,CAAC;WAC1C,mBAAmB,IAAI,CAAC;WACxB,MAAM,CAAC,MAAM,KAAK,IAAI;QACzB,OAAO,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAE7B,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAC5F,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,qBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC;IACtD,MAAM,eAAe,GAAG,qBAAqB,KAAK,SAAS;WACtD,MAAM,CAAC,aAAa,CAAC,qBAAqB,CAAC;WAC3C,qBAAqB,GAAG,CAAC;QAC5B,CAAC,CAAC,qBAAqB;QACvB,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC;IAC1B,MAAM,SAAS,GAAG,KAAK,EACrB,EAAE,MAAM,EAAE,KAAK,EAAgC,EACmB,EAAE;QACpE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YACpD,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;YACpB,OAAO,EAAE,KAAK,EAAE,CAAC;QACnB,CAAC;QACD,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,wEAAwE;gBACxE,sEAAsE;gBACtE,oEAAoE;gBACpE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ;qBACjC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;qBAC7E,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC1B,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;oBACpD,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;oBACpB,OAAO,EAAE,KAAK,EAAE,CAAC;gBACnB,CAAC;gBACD,IAAI,yBAAyB,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;oBACrB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;gBACtC,CAAC;YACH,CAAC;YACD,MAAM,eAAe,GAAG,MAAM,mCAAmC,CAC/D,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EACrF,OAAO,CAAC,MAAM,EACd,mBAAmB,CACpB,CAAC;YACF,IAAI,eAAe,KAAK,0BAA0B,EAAE,CAAC;gBACnD,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;gBACpB,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,CAAC;YACD,IAAI,eAAe,KAAK,4BAA4B,EAAE,CAAC;gBACrD,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;gBACrB,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;gBACpD,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;gBACpB,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,CAAC;YACD,MAAM,SAAS,GAAG,oCAAoC,CAAC,eAAe,CAAC,CAAC;YACxE,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;gBACpB,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,CAAC;YACD,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;YACrB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;YACnB,OAAO,EAAE,KAAK,EAAE,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,cAAc,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;IACtF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,CAAC,OAAO,CAAC;gBACd,SAAS,EAAE,cAAc,CAAC,MAAM;gBAChC,GAAG,MAAM;gBACT,SAAS,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;aACzC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;QAAE,OAAO,UAAU,CAAC;IACvE,MAAM,QAAQ,GAA2C,CAAC,GAAG,QAAQ,CAAC,CAAC;IACvE,KAAK,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC5C,IAAI,SAAS;YAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,KAAK,CAAE,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC;IACxF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/vm-recovery-microbatch.d.ts

@@ -18,6 +18,8 @@ export interface VmRecoveryMicrobatchPlan<T> {
     readonly selectorBytes: number;
     readonly completeFootprints: boolean;
 }
+/** Conservative byte estimate for an already-validated public asset footprint. */
+export declare function estimateVmRecoveryAssetBytes(byteSize: bigint, merkleLeafCount: bigint, limits: Readonly<Pick<VmRecoveryMicrobatchLimits, 'fixedBytesPerAsset' | 'bytesPerLeafOverhead' | 'byteSizeMultiplierBps'>>): bigint;
 /**
  * Pack one stable exact-recovery prefix. Unknown footprints remain singleton;
  * soft byte/leaf targets never reject an individually large KA, while executor

package/dist/vm-recovery-microbatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vm-recovery-microbatch.d.ts","sourceRoot":"","sources":["../src/vm-recovery-microbatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAEvE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;CACtD;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB,CAAC,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;CACtC;AAYD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,SAAS,yBAAyB,EAC1E,UAAU,EAAE,SAAS,CAAC,EAAE,EACxB,MAAM,EAAE,QAAQ,CAAC,0BAA0B,CAAC,EAC5C,gBAAgB,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,KAAK,MAAM,GAClD,wBAAwB,CAAC,CAAC,CAAC,CAqE7B"}
+{"version":3,"file":"vm-recovery-microbatch.d.ts","sourceRoot":"","sources":["../src/vm-recovery-microbatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAEvE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;CACtD;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB,CAAC,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;CACtC;AAYD,kFAAkF;AAClF,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,QAAQ,CAAC,IAAI,CACnB,0BAA0B,EAC1B,oBAAoB,GAAG,sBAAsB,GAAG,uBAAuB,CACxE,CAAC,GACD,MAAM,CAMR;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,SAAS,yBAAyB,EAC1E,UAAU,EAAE,SAAS,CAAC,EAAE,EACxB,MAAM,EAAE,QAAQ,CAAC,0BAA0B,CAAC,EAC5C,gBAAgB,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,KAAK,MAAM,GAClD,wBAAwB,CAAC,CAAC,CAAC,CAiE7B"}

package/dist/vm-recovery-microbatch.js

@@ -6,6 +6,12 @@ function nonNegativeFiniteInteger(value) {
 function nonNegativeBigint(value) {
     return typeof value === 'bigint' && value >= 0n ? value : undefined;
 }
+/** Conservative byte estimate for an already-validated public asset footprint. */
+export function estimateVmRecoveryAssetBytes(byteSize, merkleLeafCount, limits) {
+    const scaledByteFloor = (byteSize * limits.byteSizeMultiplierBps + 9999n) / 10000n;
+    const graphAndLeafFloor = byteSize + merkleLeafCount * limits.bytesPerLeafOverhead;
+    return (scaledByteFloor > graphAndLeafFloor ? scaledByteFloor : graphAndLeafFloor) + limits.fixedBytesPerAsset;
+}
 /**
  * Pack one stable exact-recovery prefix. Unknown footprints remain singleton;
  * soft byte/leaf targets never reject an individually large KA, while executor
@@ -53,9 +59,7 @@ export function planVmRecoveryMicrobatch(candidates, limits, selectorBytesFor) {
             }
             break;
         }
-        const scaledByteFloor = (byteSize * limits.byteSizeMultiplierBps + 9999n) / 10000n;
-        const graphAndLeafFloor = byteSize + merkleLeafCount * limits.bytesPerLeafOverhead;
-        const candidateEstimatedBytes = (scaledByteFloor > graphAndLeafFloor ? scaledByteFloor : graphAndLeafFloor) + limits.fixedBytesPerAsset;
+        const candidateEstimatedBytes = estimateVmRecoveryAssetBytes(byteSize, merkleLeafCount, limits);
         const nextBytes = estimatedBytes + candidateEstimatedBytes;
         const nextLeaves = estimatedLeaves + merkleLeafCount;
         if (targets.length > 0 && (nextBytes > limits.targetBytes || nextLeaves > limits.targetLeaves))

package/dist/vm-recovery-microbatch.js.map

@@ -1 +1 @@
-{"version":3,"file":"vm-recovery-microbatch.js","sourceRoot":"","sources":["../src/vm-recovery-microbatch.ts"],"names":[],"mappings":"AAwBA,SAAS,wBAAwB,CAAC,KAAc;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAC3E,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAAwB,EACxB,MAA4C,EAC5C,gBAAmD;IAEnD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;WACpC,MAAM,CAAC,SAAS,IAAI,CAAC;WACrB,MAAM,CAAC,WAAW,GAAG,EAAE;WACvB,MAAM,CAAC,YAAY,GAAG,EAAE;WACxB,MAAM,CAAC,kBAAkB,GAAG,EAAE;WAC9B,MAAM,CAAC,oBAAoB,GAAG,EAAE;WAChC,MAAM,CAAC,qBAAqB,GAAG,MAAO;WACtC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,gBAAgB,CAAC;WAC9C,MAAM,CAAC,gBAAgB,IAAI,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAE3D,MAAM,OAAO,GAAQ,EAAE,CAAC;IACxB,IAAI,cAAc,GAAG,EAAE,CAAC;IACxB,IAAI,eAAe,GAAG,EAAE,CAAC;IACzB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,kBAAkB,GAAG,IAAI,CAAC;IAC9B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS;YAAE,MAAM;QAC9C,MAAM,SAAS,GAAG,SAAS,CAAC,iBAAiB,CAAC;QAC9C,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,KAAK,YAAY;YAC9C,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,QAAQ,CAAC;YACvC,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,eAAe,GAAG,SAAS,CAAC,IAAI,KAAK,YAAY;YACrD,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,eAAe,CAAC;YAC9C,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,iBAAiB,GAAG,QAAQ,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,CAAC;QAClF,MAAM,gBAAgB,GAAG,CAAC,GAAG,OAAO,EAAE,SAAS,CAAC,CAAC;QACjD,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACvF,IAAI,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,GAAG,MAAM,CAAC,gBAAgB;YAAE,MAAM;QAC1F,IACE,QAAQ,KAAK,SAAS;eACnB,eAAe,KAAK,SAAS;eAC7B,QAAQ,KAAK,EAAE;eACf,eAAe,KAAK,EAAE,EACzB,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,aAAa,GAAG,iBAAiB,CAAC;gBAClC,kBAAkB,GAAG,iBAAiB,CAAC;YACzC,CAAC;YACD,MAAM;QACR,CAAC;QAED,MAAM,eAAe,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC,qBAAqB,GAAG,KAAM,CAAC,GAAG,MAAO,CAAC;QACrF,MAAM,iBAAiB,GAAG,QAAQ,GAAG,eAAe,GAAG,MAAM,CAAC,oBAAoB,CAAC;QACnF,MAAM,uBAAuB,GAAG,CAC9B,eAAe,GAAG,iBAAiB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAC1E,GAAG,MAAM,CAAC,kBAAkB,CAAC;QAC9B,MAAM,SAAS,GAAG,cAAc,GAAG,uBAAuB,CAAC;QAC3D,MAAM,UAAU,GAAG,eAAe,GAAG,eAAe,CAAC;QACrD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CACxB,SAAS,GAAG,MAAM,CAAC,WAAW,IAAI,UAAU,GAAG,MAAM,CAAC,YAAY,CACnE;YAAE,MAAM;QAET,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,cAAc,GAAG,SAAS,CAAC;QAC3B,eAAe,GAAG,UAAU,CAAC;QAC7B,aAAa,GAAG,iBAAiB,CAAC;QAClC,kBAAkB,KAAK,iBAAiB,CAAC;IAC3C,CAAC;IACD,OAAO;QACL,OAAO;QACP,cAAc;QACd,eAAe;QACf,aAAa;QACb,kBAAkB;KACnB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"vm-recovery-microbatch.js","sourceRoot":"","sources":["../src/vm-recovery-microbatch.ts"],"names":[],"mappings":"AAwBA,SAAS,wBAAwB,CAAC,KAAc;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAC3E,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACtE,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,4BAA4B,CAC1C,QAAgB,EAChB,eAAuB,EACvB,MAGE;IAEF,MAAM,eAAe,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC,qBAAqB,GAAG,KAAM,CAAC,GAAG,MAAO,CAAC;IACrF,MAAM,iBAAiB,GAAG,QAAQ,GAAG,eAAe,GAAG,MAAM,CAAC,oBAAoB,CAAC;IACnF,OAAO,CACL,eAAe,GAAG,iBAAiB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAC1E,GAAG,MAAM,CAAC,kBAAkB,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAAwB,EACxB,MAA4C,EAC5C,gBAAmD;IAEnD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;WACpC,MAAM,CAAC,SAAS,IAAI,CAAC;WACrB,MAAM,CAAC,WAAW,GAAG,EAAE;WACvB,MAAM,CAAC,YAAY,GAAG,EAAE;WACxB,MAAM,CAAC,kBAAkB,GAAG,EAAE;WAC9B,MAAM,CAAC,oBAAoB,GAAG,EAAE;WAChC,MAAM,CAAC,qBAAqB,GAAG,MAAO;WACtC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,gBAAgB,CAAC;WAC9C,MAAM,CAAC,gBAAgB,IAAI,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAE3D,MAAM,OAAO,GAAQ,EAAE,CAAC;IACxB,IAAI,cAAc,GAAG,EAAE,CAAC;IACxB,IAAI,eAAe,GAAG,EAAE,CAAC;IACzB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,kBAAkB,GAAG,IAAI,CAAC;IAC9B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS;YAAE,MAAM;QAC9C,MAAM,SAAS,GAAG,SAAS,CAAC,iBAAiB,CAAC;QAC9C,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,KAAK,YAAY;YAC9C,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,QAAQ,CAAC;YACvC,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,eAAe,GAAG,SAAS,CAAC,IAAI,KAAK,YAAY;YACrD,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,eAAe,CAAC;YAC9C,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,iBAAiB,GAAG,QAAQ,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,CAAC;QAClF,MAAM,gBAAgB,GAAG,CAAC,GAAG,OAAO,EAAE,SAAS,CAAC,CAAC;QACjD,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACvF,IAAI,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,GAAG,MAAM,CAAC,gBAAgB;YAAE,MAAM;QAC1F,IACE,QAAQ,KAAK,SAAS;eACnB,eAAe,KAAK,SAAS;eAC7B,QAAQ,KAAK,EAAE;eACf,eAAe,KAAK,EAAE,EACzB,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,aAAa,GAAG,iBAAiB,CAAC;gBAClC,kBAAkB,GAAG,iBAAiB,CAAC;YACzC,CAAC;YACD,MAAM;QACR,CAAC;QAED,MAAM,uBAAuB,GAAG,4BAA4B,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;QAChG,MAAM,SAAS,GAAG,cAAc,GAAG,uBAAuB,CAAC;QAC3D,MAAM,UAAU,GAAG,eAAe,GAAG,eAAe,CAAC;QACrD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CACxB,SAAS,GAAG,MAAM,CAAC,WAAW,IAAI,UAAU,GAAG,MAAM,CAAC,YAAY,CACnE;YAAE,MAAM;QAET,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,cAAc,GAAG,SAAS,CAAC;QAC3B,eAAe,GAAG,UAAU,CAAC;QAC7B,aAAa,GAAG,iBAAiB,CAAC;QAClC,kBAAkB,KAAK,iBAAiB,CAAC;IAC3C,CAAC;IACD,OAAO;QACL,OAAO;QACP,cAAc;QACd,eAAe;QACf,aAAa;QACb,kBAAkB;KACnB,CAAC;AACJ,CAAC"}

package/dist/vm-recovery-pass-authority.d.ts

@@ -0,0 +1,84 @@
+import type { VmRecoveryAuthorityRetryPolicy } from './vm-recovery-experiment-policy.js';
+import type { RegisteredContextGraphAuthority } from './registered-context-graph-authority.js';
+/**
+ * How long a pass's positive registered-public answer may stand in for the identical read its
+ * own exchange would otherwise repeat.
+ */
+export declare const VM_RECOVERY_REGISTERED_PUBLIC_MAX_AGE_MS = 90000;
+/**
+ * What one exact-recovery pass knows about the graph's registered authority: the repository's
+ * own discriminated answer, plus the two states a pass can be in without one.
+ */
+export type VmRecoveryPassAuthorityObservation = RegisteredContextGraphAuthority | {
+    readonly kind: 'not-read';
+} | {
+    readonly kind: 'read-failed';
+};
+/** The recovery operation a handed-over answer belongs to. */
+export interface VmRecoveryPassAuthorityOwner {
+    readonly contextGraphId: string;
+    /** The recovery operation's cancellation signal. */
+    readonly signal?: AbortSignal;
+    /** Recovery ownership at call time (lifecycle, binding, target). */
+    readonly isCurrent: () => boolean;
+}
+/**
+ * A positive registered-public answer, handed explicitly to the exchange of the pass that
+ * obtained it. Only that exchange holds it, it is revoked when the exchange returns, and it
+ * stays tied to the pass's latest observation, so a later miss withdraws it. Any doubt is
+ * `false`, and the exchange then reads the authority itself.
+ */
+export interface VmRecoveryRegisteredPublicEvidence {
+    /**
+     * True only while the pass's latest observation is public, no older than
+     * {@link VM_RECOVERY_REGISTERED_PUBLIC_MAX_AGE_MS}, for this graph, with the owning operation
+     * still current and neither it nor the asker cancelled.
+     */
+    usableFor(contextGraphId: string, askerSignal?: AbortSignal): boolean;
+    /** The exchange it was handed to is over: it can no longer be relied on. */
+    revoke(): void;
+}
+/**
+ * The pass-local owner of the registered-authority observation that gates the stream wire.
+ * Retry eligibility, the stream decision, the diagnostic label and the answer handed to the
+ * pass's own exchange are all derived from the one typed observation, so none of them can
+ * drift from the others and no decision branches on a log string. Nothing is carried from
+ * one pass to the next: a pass creates its own.
+ */
+export declare class VmRecoveryPassAuthority {
+    #private;
+    private readonly clock;
+    private readonly maxEvidenceAgeMs;
+    private readonly retryPolicy;
+    constructor(clock?: () => number, maxEvidenceAgeMs?: number, retryPolicy?: VmRecoveryAuthorityRetryPolicy);
+    /**
+     * Read once more. Whatever an earlier read of this pass said is superseded by this one, and
+     * a read that throws is recorded as `read-failed` rather than propagated.
+     */
+    read(resolve: () => Promise<RegisteredContextGraphAuthority>): Promise<VmRecoveryPassAuthorityObservation>;
+    get observation(): VmRecoveryPassAuthorityObservation;
+    /** A positive answer: the only state that authorizes the stream wire. */
+    get isPublic(): boolean;
+    /**
+     * The read did not answer. Unlike `private` and `unregistered`, which are answers, this is the
+     * transient case worth asking again.
+     */
+    get missed(): boolean;
+    /** A miss may be read again only under the pass's configured retry spacing. */
+    retryDue(): boolean;
+    /** A single bounded miss retry at pass entry; cancellation releases the wait. */
+    waitForMissRetry(signal?: AbortSignal): Promise<boolean>;
+    /** The observation as a log label. Observation only: nothing branches on it. */
+    get label(): string;
+    /**
+     * A handle for the owning pass to give its own exchange. It reads this observation when it is
+     * asked, so it always reflects the pass's latest answer, and it dies when revoked.
+     */
+    evidence(owner: VmRecoveryPassAuthorityOwner): VmRecoveryRegisteredPublicEvidence;
+}
+/**
+ * Resolve after `ms`, or sooner when `signal` aborts. Never rejects and leaves neither
+ * a timer nor a listener behind, so a cancelled pass is not held by its own wait.
+ */
+export declare function vmRecoveryRetryDelay(ms: number, signal?: AbortSignal): Promise<void>;
+//# sourceMappingURL=vm-recovery-pass-authority.d.ts.map

package/dist/vm-recovery-pass-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vm-recovery-pass-authority.d.ts","sourceRoot":"","sources":["../src/vm-recovery-pass-authority.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oCAAoC,CAAC;AACzF,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,yCAAyC,CAAC;AAE/F;;;GAGG;AACH,eAAO,MAAM,wCAAwC,QAAS,CAAC;AAE/D;;;GAGG;AACH,MAAM,MAAM,kCAAkC,GAC1C,+BAA+B,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC;AAErC,8DAA8D;AAC9D,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,oDAAoD;IACpD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,oEAAoE;IACpE,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,kCAAkC;IACjD;;;;OAIG;IACH,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;IACtE,4EAA4E;IAC5E,MAAM,IAAI,IAAI,CAAC;CAChB;AAED;;;;;;GAMG;AACH,qBAAa,uBAAuB;;IAMhC,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAFX,KAAK,GAAE,MAAM,MAAgC,EAC7C,gBAAgB,GAAE,MAAiD,EACnE,WAAW,GAAE,8BAAqD;IAGrF;;;OAGG;IACG,IAAI,CACR,OAAO,EAAE,MAAM,OAAO,CAAC,+BAA+B,CAAC,GACtD,OAAO,CAAC,kCAAkC,CAAC;IAW9C,IAAI,WAAW,IAAI,kCAAkC,CAEpD;IAED,yEAAyE;IACzE,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED;;;OAGG;IACH,IAAI,MAAM,IAAI,OAAO,CAGpB;IAED,+EAA+E;IAC/E,QAAQ,IAAI,OAAO;IAKnB,iFAAiF;IAC3E,gBAAgB,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAM9D,gFAAgF;IAChF,IAAI,KAAK,IAAI,MAAM,CAIlB;IAED;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,4BAA4B,GAAG,kCAAkC;CAiBlF;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBpF"}

package/dist/vm-recovery-pass-authority.js

@@ -0,0 +1,126 @@
+/**
+ * How long a pass's positive registered-public answer may stand in for the identical read its
+ * own exchange would otherwise repeat.
+ */
+export const VM_RECOVERY_REGISTERED_PUBLIC_MAX_AGE_MS = 90_000;
+/**
+ * The pass-local owner of the registered-authority observation that gates the stream wire.
+ * Retry eligibility, the stream decision, the diagnostic label and the answer handed to the
+ * pass's own exchange are all derived from the one typed observation, so none of them can
+ * drift from the others and no decision branches on a log string. Nothing is carried from
+ * one pass to the next: a pass creates its own.
+ */
+export class VmRecoveryPassAuthority {
+    clock;
+    maxEvidenceAgeMs;
+    retryPolicy;
+    #observation = { kind: 'not-read' };
+    #lastReadStartedAt = Number.NEGATIVE_INFINITY;
+    #publicObservedAt = Number.NEGATIVE_INFINITY;
+    constructor(clock = () => performance.now(), maxEvidenceAgeMs = VM_RECOVERY_REGISTERED_PUBLIC_MAX_AGE_MS, retryPolicy = { kind: 'disabled' }) {
+        this.clock = clock;
+        this.maxEvidenceAgeMs = maxEvidenceAgeMs;
+        this.retryPolicy = retryPolicy;
+    }
+    /**
+     * Read once more. Whatever an earlier read of this pass said is superseded by this one, and
+     * a read that throws is recorded as `read-failed` rather than propagated.
+     */
+    async read(resolve) {
+        this.#lastReadStartedAt = this.clock();
+        try {
+            this.#observation = await resolve();
+        }
+        catch {
+            this.#observation = { kind: 'read-failed' };
+        }
+        if (this.#observation.kind === 'public')
+            this.#publicObservedAt = this.clock();
+        return this.#observation;
+    }
+    get observation() {
+        return this.#observation;
+    }
+    /** A positive answer: the only state that authorizes the stream wire. */
+    get isPublic() {
+        return this.#observation.kind === 'public';
+    }
+    /**
+     * The read did not answer. Unlike `private` and `unregistered`, which are answers, this is the
+     * transient case worth asking again.
+     */
+    get missed() {
+        const { kind } = this.#observation;
+        return kind === 'unavailable' || kind === 'read-failed';
+    }
+    /** A miss may be read again only under the pass's configured retry spacing. */
+    retryDue() {
+        return this.retryPolicy.kind === 'spaced' && this.missed
+            && this.clock() - this.#lastReadStartedAt >= this.retryPolicy.minIntervalMs;
+    }
+    /** A single bounded miss retry at pass entry; cancellation releases the wait. */
+    async waitForMissRetry(signal) {
+        if (!this.missed || this.retryPolicy.kind !== 'spaced')
+            return false;
+        await vmRecoveryRetryDelay(this.retryPolicy.minIntervalMs, signal);
+        return !signal?.aborted;
+    }
+    /** The observation as a log label. Observation only: nothing branches on it. */
+    get label() {
+        const observation = this.#observation;
+        if (observation.kind === 'unavailable')
+            return `unavailable:${observation.reason}`;
+        return observation.kind === 'read-failed' ? 'error' : observation.kind;
+    }
+    /**
+     * A handle for the owning pass to give its own exchange. It reads this observation when it is
+     * asked, so it always reflects the pass's latest answer, and it dies when revoked.
+     */
+    evidence(owner) {
+        let revoked = false;
+        return {
+            usableFor: (contextGraphId, askerSignal) => {
+                if (revoked || this.#observation.kind !== 'public')
+                    return false;
+                if (contextGraphId !== owner.contextGraphId)
+                    return false;
+                if (askerSignal?.aborted || owner.signal?.aborted)
+                    return false;
+                if (this.clock() - this.#publicObservedAt > this.maxEvidenceAgeMs)
+                    return false;
+                try {
+                    return owner.isCurrent();
+                }
+                catch {
+                    return false;
+                }
+            },
+            revoke: () => { revoked = true; },
+        };
+    }
+}
+/**
+ * Resolve after `ms`, or sooner when `signal` aborts. Never rejects and leaves neither
+ * a timer nor a listener behind, so a cancelled pass is not held by its own wait.
+ */
+export function vmRecoveryRetryDelay(ms, signal) {
+    if (ms <= 0 || signal?.aborted)
+        return Promise.resolve();
+    return new Promise((resolve) => {
+        let onAbort;
+        const timer = setTimeout(() => {
+            if (onAbort)
+                signal?.removeEventListener('abort', onAbort);
+            resolve();
+        }, ms);
+        timer.unref?.();
+        if (signal) {
+            onAbort = () => {
+                clearTimeout(timer);
+                resolve();
+            };
+            signal.addEventListener('abort', onAbort, { once: true });
+        }
+    });
+}
+//# sourceMappingURL=vm-recovery-pass-authority.js.map

package/dist/vm-recovery-pass-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vm-recovery-pass-authority.js","sourceRoot":"","sources":["../src/vm-recovery-pass-authority.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAG,MAAM,CAAC;AAqC/D;;;;;;GAMG;AACH,MAAM,OAAO,uBAAuB;IAMf;IACA;IACA;IAPnB,YAAY,GAAuC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACxE,kBAAkB,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAC9C,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAE7C,YACmB,QAAsB,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAC7C,mBAA2B,wCAAwC,EACnE,cAA8C,EAAE,IAAI,EAAE,UAAU,EAAE;QAFlE,UAAK,GAAL,KAAK,CAAwC;QAC7C,qBAAgB,GAAhB,gBAAgB,CAAmD;QACnE,gBAAW,GAAX,WAAW,CAAuD;IAClF,CAAC;IAEJ;;;OAGG;IACH,KAAK,CAAC,IAAI,CACR,OAAuD;QAEvD,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,CAAC,YAAY,GAAG,MAAM,OAAO,EAAE,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QAC9C,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,QAAQ;YAAE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/E,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,yEAAyE;IACzE,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,QAAQ,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,IAAI,MAAM;QACR,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC;QACnC,OAAO,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,aAAa,CAAC;IAC1D,CAAC;IAED,+EAA+E;IAC/E,QAAQ;QACN,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM;eACnD,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC;IAChF,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,gBAAgB,CAAC,MAAoB;QACzC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACnE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;IAC1B,CAAC;IAED,gFAAgF;IAChF,IAAI,KAAK;QACP,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,WAAW,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,eAAe,WAAW,CAAC,MAAM,EAAE,CAAC;QACnF,OAAO,WAAW,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC;IACzE,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,KAAmC;QAC1C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,OAAO;YACL,SAAS,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,EAAE;gBACzC,IAAI,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBACjE,IAAI,cAAc,KAAK,KAAK,CAAC,cAAc;oBAAE,OAAO,KAAK,CAAC;gBAC1D,IAAI,WAAW,EAAE,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;oBAAE,OAAO,KAAK,CAAC;gBAChE,IAAI,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,gBAAgB;oBAAE,OAAO,KAAK,CAAC;gBAChF,IAAI,CAAC;oBACH,OAAO,KAAK,CAAC,SAAS,EAAE,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YACD,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;SAClC,CAAC;IACJ,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAU,EAAE,MAAoB;IACnE,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IACzD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACnC,IAAI,OAAiC,CAAC;QACtC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,OAAO;gBAAE,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3D,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,GAAG,GAAG,EAAE;gBACb,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}