@origintrail-official/dkg-agent 10.0.20 → 10.0.21

package/dist/internal/context-graph-authority/swm-transport-authority.js

@@ -1,4 +1,5 @@
 // SPDX-License-Identifier: Apache-2.0
+const ACCEPTED_PRIVATE_ROSTER_UNAVAILABLE_DETAIL = 'active accepted private RFC-64 authority has no current roster';
 /**
  * The single policy application every SWM consumer shares: one active-policy
  * check, used as the accepted-absence allowance of one registered-authority
@@ -7,51 +8,167 @@
  */
 async function readWithActiveAcceptedPolicy(host, contextGraphId, options) {
     const activeAcceptedPublicPolicy = host.hasActiveAcceptedRfc64PublicUnregisteredAuthorityV1(contextGraphId);
+    const activeAcceptedPrivateRoster = activeAcceptedPublicPolicy
+        ? undefined
+        : host.resolveActiveAcceptedRfc64PrivateUnregisteredRosterV1?.(contextGraphId);
+    const acceptsFinalizedAbsence = activeAcceptedPublicPolicy
+        || activeAcceptedPrivateRoster !== undefined;
     const registered = await host.resolveRegisteredContextGraphAuthority(contextGraphId, {
         ...options,
-        allowAcceptedRfc64FinalizedAbsence: activeAcceptedPublicPolicy,
+        allowAcceptedRfc64FinalizedAbsence: acceptsFinalizedAbsence,
+        allowApprovedPrivateReplicaFinalizedAbsence: true,
     });
     // An `unregistered` answer may rest on the accepted-absence allowance, which
     // holds only while the policy still governs transport. Catalog authority can
     // be killed, blocked or deactivated while the read awaits the index: then
     // read again without the allowance instead of acting on the stale fence. A
     // registered answer never depended on the allowance and stands as read.
-    if (activeAcceptedPublicPolicy
-        && registered.kind === 'unregistered'
-        && !host.hasActiveAcceptedRfc64PublicUnregisteredAuthorityV1(contextGraphId)) {
-        return {
-            registered: await host.resolveRegisteredContextGraphAuthority(contextGraphId, {
+    if (registered.kind === 'unregistered') {
+        // Re-read the synchronous accepted-policy projection after the async
+        // registration lookup. Besides closing deactivation, this makes a private
+        // roster rotation during the lookup use the new exact roster rather than
+        // the stale pre-await snapshot.
+        const currentAcceptedPublicPolicy = host.hasActiveAcceptedRfc64PublicUnregisteredAuthorityV1(contextGraphId);
+        if (currentAcceptedPublicPolicy) {
+            return { registered, activeAcceptedPolicy: { kind: 'plaintext' } };
+        }
+        const currentAcceptedPrivateRoster = host.resolveActiveAcceptedRfc64PrivateUnregisteredRosterV1?.(contextGraphId);
+        if (currentAcceptedPrivateRoster !== undefined) {
+            if (currentAcceptedPrivateRoster === null) {
+                return {
+                    registered: {
+                        kind: 'unavailable',
+                        reason: 'finalized-name-absence-unaccepted',
+                        detail: ACCEPTED_PRIVATE_ROSTER_UNAVAILABLE_DETAIL,
+                    },
+                    activeAcceptedPolicy: null,
+                };
+            }
+            return {
+                registered,
+                activeAcceptedPolicy: {
+                    kind: 'private-roster',
+                    participantAgents: Object.freeze([...currentAcceptedPrivateRoster]),
+                },
+            };
+        }
+        if (acceptsFinalizedAbsence) {
+            const registeredWithoutAcceptedAbsence = await host.resolveRegisteredContextGraphAuthority(contextGraphId, {
                 ...options,
                 allowAcceptedRfc64FinalizedAbsence: false,
-            }),
-            activeAcceptedPublicPolicy: false,
-        };
+                allowApprovedPrivateReplicaFinalizedAbsence: true,
+            });
+            // The accepted authority can reactivate or rotate while that fallback
+            // read awaits the index. If another authority (local-first or approved
+            // replica) independently proved unregistered, the newly current signed
+            // policy still takes precedence over its metadata roster.
+            if (registeredWithoutAcceptedAbsence.kind === 'unregistered') {
+                const reacquiredAcceptedPublicPolicy = host.hasActiveAcceptedRfc64PublicUnregisteredAuthorityV1(contextGraphId);
+                if (reacquiredAcceptedPublicPolicy) {
+                    return {
+                        registered: registeredWithoutAcceptedAbsence,
+                        activeAcceptedPolicy: { kind: 'plaintext' },
+                    };
+                }
+                const reacquiredAcceptedPrivateRoster = host.resolveActiveAcceptedRfc64PrivateUnregisteredRosterV1?.(contextGraphId);
+                if (reacquiredAcceptedPrivateRoster !== undefined) {
+                    if (reacquiredAcceptedPrivateRoster === null) {
+                        return {
+                            registered: {
+                                kind: 'unavailable',
+                                reason: 'finalized-name-absence-unaccepted',
+                                detail: ACCEPTED_PRIVATE_ROSTER_UNAVAILABLE_DETAIL,
+                            },
+                            activeAcceptedPolicy: null,
+                        };
+                    }
+                    return {
+                        registered: registeredWithoutAcceptedAbsence,
+                        activeAcceptedPolicy: {
+                            kind: 'private-roster',
+                            participantAgents: Object.freeze([...reacquiredAcceptedPrivateRoster]),
+                        },
+                    };
+                }
+            }
+            return {
+                registered: registeredWithoutAcceptedAbsence,
+                activeAcceptedPolicy: null,
+            };
+        }
     }
-    return { registered, activeAcceptedPublicPolicy };
+    return { registered, activeAcceptedPolicy: null };
 }
 /**
  * Registered-chain authority for SWM consumers that need the raw roster (the
- * agent gate and member recovery). An active accepted owner-signed PUBLIC
- * policy lets exact finalized name absence count as unregistered, as on the
- * read path; a registration the index shows always wins, and the creator's own
- * graph stays local-first in the registry until its registration commits.
+ * agent gate and member recovery). An active accepted owner-signed policy lets
+ * exact finalized name absence count as unregistered, as on the read path; a
+ * registration the index shows always wins, and the creator's own graph stays
+ * local-first in the registry until its registration commits. Consumers that
+ * need the accepted private roster itself use the transport/recovery decision,
+ * which preserves it alongside this registration result.
  */
 export async function resolveSwmRegisteredAuthorityDecision(host, contextGraphId, options = {}) {
     return (await readWithActiveAcceptedPolicy(host, contextGraphId, options)).registered;
 }
+/**
+ * Resolve member-recovery authority without dropping the accepted private
+ * roster that licensed finalized absence. Keeping the roster and registration
+ * result in one decision also closes a deactivation/rotation race before a
+ * caller could fall back to stale local metadata.
+ */
+export async function resolveSwmMemberRecoveryAuthorityDecision(host, contextGraphId, options = {}) {
+    const { registered, activeAcceptedPolicy } = await readWithActiveAcceptedPolicy(host, contextGraphId, options);
+    switch (registered.kind) {
+        case 'private':
+            return { kind: 'private-roster', participantAgents: registered.participantAgents };
+        case 'unregistered':
+            return activeAcceptedPolicy?.kind === 'private-roster'
+                ? activeAcceptedPolicy
+                : { kind: 'legacy-unregistered' };
+        case 'public':
+        case 'unavailable':
+            return { kind: 'denied' };
+    }
+}
 /** How SWM on this graph may travel, for both ends of the wire. */
 export async function resolveSwmTransportAuthorityDecision(host, contextGraphId, options = {}) {
-    const { registered, activeAcceptedPublicPolicy } = await readWithActiveAcceptedPolicy(host, contextGraphId, options);
+    const { registered, activeAcceptedPolicy } = await readWithActiveAcceptedPolicy(host, contextGraphId, options);
     switch (registered.kind) {
         case 'public':
             return { kind: 'plaintext' };
         case 'unregistered':
-            // Exact finalized absence under the active public policy, or the
-            // registry's local-first answer for a graph this node created.
-            return activeAcceptedPublicPolicy ? { kind: 'plaintext' } : { kind: 'legacy-unregistered' };
+            // An active accepted owner policy is authoritative over both the stale
+            // local metadata roster and participant-only replica approval.
+            if (activeAcceptedPolicy !== null)
+                return activeAcceptedPolicy;
+            if (registered.approvedPrivateReplicaAuthority === undefined) {
+                return { kind: 'legacy-unregistered' };
+            }
+            const allowedPeers = registered.approvedPrivateReplicaAuthority.allowedPeers;
+            if (!Array.isArray(allowedPeers)
+                || !allowedPeers.every((peerId) => typeof peerId === 'string' && peerId.length > 0)) {
+                return {
+                    kind: 'unavailable',
+                    reason: 'finalized-name-absence-unaccepted',
+                    detail: 'approved private replica authority is missing a valid source-qualified peer gate',
+                };
+            }
+            return {
+                kind: 'approved-private-replica',
+                allowedPeers: Object.freeze([...allowedPeers]),
+            };
         case 'private':
             return { kind: 'private-roster', participantAgents: registered.participantAgents };
         case 'unavailable':
+            if (registered.reason === 'finalized-name-absence-unaccepted'
+                && registered.detail === ACCEPTED_PRIVATE_ROSTER_UNAVAILABLE_DETAIL) {
+                return {
+                    kind: 'unavailable',
+                    reason: 'rfc64-private-read-roster-unavailable',
+                    detail: registered.detail,
+                };
+            }
             return registered;
     }
 }

package/dist/internal/context-graph-authority/swm-transport-authority.js.map

@@ -1 +1 @@
-{"version":3,"file":"swm-transport-authority.js","sourceRoot":"","sources":["../../../src/internal/context-graph-authority/swm-transport-authority.ts"],"names":[],"mappings":"AAAA,sCAAsC;AA6CtC;;;;;GAKG;AACH,KAAK,UAAU,4BAA4B,CACzC,IAAsB,EACtB,cAAsB,EACtB,OAA0C;IAK1C,MAAM,0BAA0B,GAC9B,IAAI,CAAC,mDAAmD,CAAC,cAAc,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,sCAAsC,CAAC,cAAc,EAAE;QACnF,GAAG,OAAO;QACV,kCAAkC,EAAE,0BAA0B;KAC/D,CAAC,CAAC;IACH,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,2EAA2E;IAC3E,wEAAwE;IACxE,IACE,0BAA0B;WACvB,UAAU,CAAC,IAAI,KAAK,cAAc;WAClC,CAAC,IAAI,CAAC,mDAAmD,CAAC,cAAc,CAAC,EAC5E,CAAC;QACD,OAAO;YACL,UAAU,EAAE,MAAM,IAAI,CAAC,sCAAsC,CAAC,cAAc,EAAE;gBAC5E,GAAG,OAAO;gBACV,kCAAkC,EAAE,KAAK;aAC1C,CAAC;YACF,0BAA0B,EAAE,KAAK;SAClC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,0BAA0B,EAAE,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,IAAsB,EACtB,cAAsB,EACtB,UAA6C,EAAE;IAE/C,OAAO,CAAC,MAAM,4BAA4B,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;AACxF,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,IAAsB,EACtB,cAAsB,EACtB,UAA6C,EAAE;IAE/C,MAAM,EAAE,UAAU,EAAE,0BAA0B,EAAE,GAC9C,MAAM,4BAA4B,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;IACpE,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,QAAQ;YACX,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC/B,KAAK,cAAc;YACjB,iEAAiE;YACjE,+DAA+D;YAC/D,OAAO,0BAA0B,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;QAC9F,KAAK,SAAS;YACZ,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,UAAU,CAAC,iBAAiB,EAAE,CAAC;QACrF,KAAK,aAAa;YAChB,OAAO,UAAU,CAAC;IACtB,CAAC;AACH,CAAC"}
+{"version":3,"file":"swm-transport-authority.js","sourceRoot":"","sources":["../../../src/internal/context-graph-authority/swm-transport-authority.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAyCtC,MAAM,0CAA0C,GAC9C,gEAAgE,CAAC;AAoCnE;;;;;GAKG;AACH,KAAK,UAAU,4BAA4B,CACzC,IAAsB,EACtB,cAAsB,EACtB,OAA0C;IAQ1C,MAAM,0BAA0B,GAC9B,IAAI,CAAC,mDAAmD,CAAC,cAAc,CAAC,CAAC;IAC3E,MAAM,2BAA2B,GAAG,0BAA0B;QAC5D,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC,qDAAqD,EAAE,CAAC,cAAc,CAAC,CAAC;IACjF,MAAM,uBAAuB,GAAG,0BAA0B;WACrD,2BAA2B,KAAK,SAAS,CAAC;IAC/C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,sCAAsC,CAAC,cAAc,EAAE;QACnF,GAAG,OAAO;QACV,kCAAkC,EAAE,uBAAuB;QAC3D,2CAA2C,EAAE,IAAI;KAClD,CAAC,CAAC;IACH,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,2EAA2E;IAC3E,wEAAwE;IACxE,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACvC,qEAAqE;QACrE,0EAA0E;QAC1E,yEAAyE;QACzE,gCAAgC;QAChC,MAAM,2BAA2B,GAC/B,IAAI,CAAC,mDAAmD,CAAC,cAAc,CAAC,CAAC;QAC3E,IAAI,2BAA2B,EAAE,CAAC;YAChC,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;QACrE,CAAC;QACD,MAAM,4BAA4B,GAChC,IAAI,CAAC,qDAAqD,EAAE,CAAC,cAAc,CAAC,CAAC;QAC/E,IAAI,4BAA4B,KAAK,SAAS,EAAE,CAAC;YAC/C,IAAI,4BAA4B,KAAK,IAAI,EAAE,CAAC;gBAC1C,OAAO;oBACL,UAAU,EAAE;wBACV,IAAI,EAAE,aAAa;wBACnB,MAAM,EAAE,mCAAmC;wBAC3C,MAAM,EAAE,0CAA0C;qBACnD;oBACD,oBAAoB,EAAE,IAAI;iBAC3B,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,UAAU;gBACV,oBAAoB,EAAE;oBACpB,IAAI,EAAE,gBAAgB;oBACtB,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,4BAA4B,CAAC,CAAC;iBACpE;aACF,CAAC;QACJ,CAAC;QAED,IAAI,uBAAuB,EAAE,CAAC;YAC5B,MAAM,gCAAgC,GACpC,MAAM,IAAI,CAAC,sCAAsC,CAAC,cAAc,EAAE;gBAChE,GAAG,OAAO;gBACV,kCAAkC,EAAE,KAAK;gBACzC,2CAA2C,EAAE,IAAI;aAClD,CAAC,CAAC;YACL,sEAAsE;YACtE,uEAAuE;YACvE,uEAAuE;YACvE,0DAA0D;YAC1D,IAAI,gCAAgC,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBAC7D,MAAM,8BAA8B,GAClC,IAAI,CAAC,mDAAmD,CAAC,cAAc,CAAC,CAAC;gBAC3E,IAAI,8BAA8B,EAAE,CAAC;oBACnC,OAAO;wBACL,UAAU,EAAE,gCAAgC;wBAC5C,oBAAoB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;qBAC5C,CAAC;gBACJ,CAAC;gBACD,MAAM,+BAA+B,GACnC,IAAI,CAAC,qDAAqD,EAAE,CAAC,cAAc,CAAC,CAAC;gBAC/E,IAAI,+BAA+B,KAAK,SAAS,EAAE,CAAC;oBAClD,IAAI,+BAA+B,KAAK,IAAI,EAAE,CAAC;wBAC7C,OAAO;4BACL,UAAU,EAAE;gCACV,IAAI,EAAE,aAAa;gCACnB,MAAM,EAAE,mCAAmC;gCAC3C,MAAM,EAAE,0CAA0C;6BACnD;4BACD,oBAAoB,EAAE,IAAI;yBAC3B,CAAC;oBACJ,CAAC;oBACD,OAAO;wBACL,UAAU,EAAE,gCAAgC;wBAC5C,oBAAoB,EAAE;4BACpB,IAAI,EAAE,gBAAgB;4BACtB,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,+BAA+B,CAAC,CAAC;yBACvE;qBACF,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO;gBACL,UAAU,EAAE,gCAAgC;gBAC5C,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;AACpD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,IAAsB,EACtB,cAAsB,EACtB,UAA6C,EAAE;IAE/C,OAAO,CAAC,MAAM,4BAA4B,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;AACxF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC7D,IAAsB,EACtB,cAAsB,EACtB,UAA6C,EAAE;IAE/C,MAAM,EAAE,UAAU,EAAE,oBAAoB,EAAE,GACxC,MAAM,4BAA4B,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;IACpE,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,SAAS;YACZ,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,UAAU,CAAC,iBAAiB,EAAE,CAAC;QACrF,KAAK,cAAc;YACjB,OAAO,oBAAoB,EAAE,IAAI,KAAK,gBAAgB;gBACpD,CAAC,CAAC,oBAAoB;gBACtB,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;QACtC,KAAK,QAAQ,CAAC;QACd,KAAK,aAAa;YAChB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,IAAsB,EACtB,cAAsB,EACtB,UAA6C,EAAE;IAE/C,MAAM,EAAE,UAAU,EAAE,oBAAoB,EAAE,GACxC,MAAM,4BAA4B,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;IACpE,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,QAAQ;YACX,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC/B,KAAK,cAAc;YACjB,uEAAuE;YACvE,+DAA+D;YAC/D,IAAI,oBAAoB,KAAK,IAAI;gBAAE,OAAO,oBAAoB,CAAC;YAC/D,IAAI,UAAU,CAAC,+BAA+B,KAAK,SAAS,EAAE,CAAC;gBAC7D,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;YACzC,CAAC;YACD,MAAM,YAAY,GAChB,UAAU,CAAC,+BAA+B,CAAC,YAAY,CAAC;YAC1D,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;mBACzB,CAAC,YAAY,CAAC,KAAK,CACpB,CAAC,MAAM,EAAoB,EAAE,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAC9E,EACD,CAAC;gBACD,OAAO;oBACL,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,mCAAmC;oBAC3C,MAAM,EAAE,kFAAkF;iBAC3F,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,0BAA0B;gBAChC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC;aAC/C,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,UAAU,CAAC,iBAAiB,EAAE,CAAC;QACrF,KAAK,aAAa;YAChB,IACE,UAAU,CAAC,MAAM,KAAK,mCAAmC;mBACtD,UAAU,CAAC,MAAM,KAAK,0CAA0C,EACnE,CAAC;gBACD,OAAO;oBACL,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,uCAAuC;oBAC/C,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC;YACJ,CAAC;YACD,OAAO,UAAU,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/internal/context-graph-binding-abort.d.ts

@@ -0,0 +1,3 @@
+export declare function contextGraphBindingAbortReason(signal: AbortSignal): Error;
+export declare function raceContextGraphBindingAgainstAbort<T>(work: Promise<T>, signal: AbortSignal | undefined): Promise<T>;
+//# sourceMappingURL=context-graph-binding-abort.d.ts.map

package/dist/internal/context-graph-binding-abort.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-graph-binding-abort.d.ts","sourceRoot":"","sources":["../../src/internal/context-graph-binding-abort.ts"],"names":[],"mappings":"AAIA,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,WAAW,GAAG,KAAK,CAKzE;AAED,wBAAgB,mCAAmC,CAAC,CAAC,EACnD,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAChB,MAAM,EAAE,WAAW,GAAG,SAAS,GAC9B,OAAO,CAAC,CAAC,CAAC,CAsBZ"}

package/dist/internal/context-graph-binding-abort.js

@@ -0,0 +1,32 @@
+// SPDX-License-Identifier: Apache-2.0
+export function contextGraphBindingAbortReason(signal) {
+    if (signal.reason instanceof Error)
+        return signal.reason;
+    const error = new Error(String(signal.reason ?? 'Context Graph binding resolution aborted'));
+    error.name = 'AbortError';
+    return error;
+}
+export function raceContextGraphBindingAgainstAbort(work, signal) {
+    if (!signal)
+        return work;
+    if (signal.aborted)
+        return Promise.reject(contextGraphBindingAbortReason(signal));
+    return new Promise((resolve, reject) => {
+        const onAbort = () => {
+            cleanup();
+            reject(contextGraphBindingAbortReason(signal));
+        };
+        const cleanup = () => signal.removeEventListener('abort', onAbort);
+        signal.addEventListener('abort', onAbort, { once: true });
+        work.then((value) => {
+            cleanup();
+            resolve(value);
+        }, (error) => {
+            cleanup();
+            reject(error);
+        });
+        if (signal.aborted)
+            onAbort();
+    });
+}
+//# sourceMappingURL=context-graph-binding-abort.js.map

package/dist/internal/context-graph-binding-abort.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-graph-binding-abort.js","sourceRoot":"","sources":["../../src/internal/context-graph-binding-abort.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAItC,MAAM,UAAU,8BAA8B,CAAC,MAAmB;IAChE,IAAI,MAAM,CAAC,MAAM,YAAY,KAAK;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IACzD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,0CAA0C,CAAC,CAAC,CAAC;IAC7F,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC;IAC1B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,IAAgB,EAChB,MAA+B;IAE/B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC,CAAC;IAClF,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,CACP,CAAC,KAAK,EAAE,EAAE;YACR,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;YACR,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CACF,CAAC;QACF,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/internal/context-graph-cache-invalidating-store.d.ts

@@ -0,0 +1,3 @@
+import { type TripleStore, type Quad, type SortedGraphSetSource } from '@origintrail-official/dkg-storage';
+export declare function createListContextGraphsCacheInvalidatingStore(innerStore: TripleStore, invalidate: () => void, markProjectionDirty?: (quads?: readonly Quad[], targetGraph?: string, targetSubject?: string) => void): TripleStore & Partial<SortedGraphSetSource>;
+//# sourceMappingURL=context-graph-cache-invalidating-store.d.ts.map

package/dist/internal/context-graph-cache-invalidating-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-graph-cache-invalidating-store.d.ts","sourceRoot":"","sources":["../../src/internal/context-graph-cache-invalidating-store.ts"],"names":[],"mappings":"AAGA,OAAO,EAA2D,KAAK,WAAW,EAAE,KAAK,IAAI,EAAE,KAAK,oBAAoB,EAAuB,MAAM,mCAAmC,CAAC;AAEzL,wBAAgB,6CAA6C,CAC3D,UAAU,EAAE,WAAW,EACvB,UAAU,EAAE,MAAM,IAAI,EAGtB,mBAAmB,CAAC,EAAE,CACpB,KAAK,CAAC,EAAE,SAAS,IAAI,EAAE,EACvB,WAAW,CAAC,EAAE,MAAM,EACpB,aAAa,CAAC,EAAE,MAAM,KACnB,IAAI,GACR,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAsO7C"}

package/dist/internal/context-graph-cache-invalidating-store.js

@@ -0,0 +1,167 @@
+// SPDX-License-Identifier: Apache-2.0
+import { isSparqlUpdateOperation } from '@origintrail-official/dkg-core';
+import { deleteByPatternWithoutCount, isStoreOperationNotStarted } from '@origintrail-official/dkg-storage';
+export function createListContextGraphsCacheInvalidatingStore(innerStore, invalidate, 
+// #1863 — `targetGraph` lets a single-graph destructive mutation (replaceSubject)
+// dirty the projection by graph rather than by inserted quads (covers deletes).
+markProjectionDirty) {
+    const invalidateAfterMutation = async (work, changed, markDirty, operation) => {
+        try {
+            const result = await work();
+            if (changed(result)) {
+                invalidate();
+                markDirty?.();
+            }
+            return result;
+        }
+        catch (error) {
+            // A mutation may have committed before its response was lost. Only an
+            // outcome-tagged pre-dispatch refusal proves cache/authority state did
+            // not change; every indeterminate outcome must invalidate fail-closed.
+            if (operation !== undefined && !isStoreOperationNotStarted(error, operation)) {
+                invalidate();
+                markDirty?.();
+            }
+            throw error;
+        }
+    };
+    const sortedSource = typeof innerStore.listGraphsSorted
+        === 'function'
+        ? innerStore
+        : null;
+    const wrapper = {
+        innerStore,
+        get queryCancellation() {
+            return innerStore.queryCancellation;
+        },
+        getPressureSnapshot() {
+            return innerStore.getPressureSnapshot?.();
+        },
+        insert(quads, options) {
+            return invalidateAfterMutation(() => innerStore.insert(quads, options), () => quads.length > 0, () => markProjectionDirty?.(quads), 'insert');
+        },
+        delete(quads, options) {
+            return invalidateAfterMutation(() => innerStore.delete(quads, options), () => quads.length > 0, () => markProjectionDirty?.(quads), 'delete');
+        },
+        deleteByPattern(pattern, options) {
+            return invalidateAfterMutation(() => innerStore.deleteByPattern(pattern, options), removed => removed > 0, () => markProjectionDirty?.(undefined, pattern.graph), 'deleteByPattern');
+        },
+        deleteByPatternWithoutCount(pattern, options) {
+            return invalidateAfterMutation(() => deleteByPatternWithoutCount(innerStore, pattern, options), () => true, () => markProjectionDirty?.(undefined, pattern.graph), 'deleteByPattern');
+        },
+        query(sparql, options) {
+            return invalidateAfterMutation(() => innerStore.query(sparql, options), () => isSparqlUpdateOperation(sparql), () => markProjectionDirty?.(), isSparqlUpdateOperation(sparql) ? 'query' : undefined);
+        },
+        hasGraph(graphUri, options) {
+            return innerStore.hasGraph(graphUri, options);
+        },
+        createGraph(graphUri) {
+            return innerStore.createGraph(graphUri);
+        },
+        dropGraph(graphUri, options) {
+            return invalidateAfterMutation(() => innerStore.dropGraph(graphUri, options), () => true, () => markProjectionDirty?.(undefined, graphUri), 'dropGraph');
+        },
+        replaceGraph: innerStore.replaceGraph
+            ? (graphUri, quads, options) => invalidateAfterMutation(() => innerStore.replaceGraph(graphUri, quads, options), () => true, () => markProjectionDirty?.(undefined, graphUri), 'replaceGraph')
+            : undefined,
+        // Rootless KA materialization replaces the assertion graph and its UAL
+        // metadata subject in one backend transaction. Preserve that optional
+        // capability through the agent decorator just like replaceGraph/update;
+        // omitting it makes every capable production backend appear unsupported.
+        replaceGraphAndSubject: innerStore.replaceGraphAndSubject
+            ? (graphUri, graphQuads, metaGraphUri, metadataSubject, metadataQuads, options) => invalidateAfterMutation(() => innerStore.replaceGraphAndSubject(graphUri, graphQuads, metaGraphUri, metadataSubject, metadataQuads, options), () => true, 
+            // Both deletion targets are named. A graph-scoped invalidation
+            // covers inserted and removed facts without scanning the payload.
+            () => {
+                markProjectionDirty?.(undefined, graphUri);
+                markProjectionDirty?.(undefined, metaGraphUri);
+            }, 'replaceGraphAndSubject')
+            : undefined,
+        // #1863 — the async-lift publisher persists a job transition via this atomic
+        // single-subject replace. Preserve the optional capability through the agent
+        // decorator just like replaceGraph/replaceGraphAndSubject/update; omitting it
+        // makes every capable production backend appear unsupported, so the publisher
+        // silently falls back to non-atomic delete-then-insert and the fix is a no-op.
+        replaceSubject: innerStore.replaceSubject
+            ? (graphUri, subject, quads, options) => invalidateAfterMutation(() => innerStore.replaceSubject(graphUri, subject, quads, options), () => true, 
+            // The target graph covers deleted facts; the replacement quads
+            // cover inserted recipient facts. The subject lets downstream
+            // invalidation distinguish exact atomic replacement paths.
+            () => markProjectionDirty?.(quads, graphUri, subject), 'replaceSubject')
+            : undefined,
+        // RFC-64 author publication moves a complete public-SWM projection and
+        // its bounded semantic control state through one backend CAS. Preserve the
+        // capability through this cache-invalidation decorator and invalidate only
+        // after a proven commit; a clean guard conflict changes nothing.
+        rfc64AuthorCommitCasV1: innerStore.rfc64AuthorCommitCasV1
+            ? (input, options) => invalidateAfterMutation(() => innerStore.rfc64AuthorCommitCasV1(input, options), result => result === 'committed', () => {
+                // The CAS names every graph it replaces. A graph-wide dirty mark
+                // here invalidates an unrelated private CG's own metadata proof
+                // after every authored row, even though the CAS only changed this
+                // exact projection and its control subjects. Fence each named
+                // target, including deleted facts, without losing the conservative
+                // all-graph fallback used by genuinely opaque store mutations.
+                if (markProjectionDirty === undefined)
+                    return;
+                markProjectionDirty(undefined, input.sharedProjectionGraph);
+                markProjectionDirty(undefined, input.authorSealGraph);
+                if ('currentHead' in input) {
+                    for (const transition of [
+                        input.currentHead,
+                        input.subgraphMutationGeneration,
+                        input.contextGraphMutationGeneration,
+                        input.appliedSet,
+                    ]) {
+                        markProjectionDirty(undefined, transition.graphUri);
+                    }
+                }
+                else {
+                    markProjectionDirty(undefined, input.currentHeadGraph);
+                    for (const transition of [
+                        input.kaStateDigest,
+                        input.subgraphMutationGeneration,
+                        input.contextGraphMutationGeneration,
+                        input.appliedSet,
+                        ...input.sealInvalidations,
+                    ]) {
+                        markProjectionDirty(undefined, transition.graphUri);
+                    }
+                }
+            }, 'rfc64AuthorCommitCasV1')
+            : undefined,
+        listGraphs(options) {
+            return innerStore.listGraphs(options);
+        },
+        // This wrapper changes mutation-side cache state but not graph visibility,
+        // so forwarding the direct inner capability preserves the same public
+        // boundary while keeping the responder's identity-stable catalog path live.
+        listGraphsSorted: sortedSource
+            ? (options) => sortedSource.listGraphsSorted(options)
+            : undefined,
+        listGraphsByPrefix(prefix, options) {
+            return innerStore.listGraphsByPrefix
+                ? innerStore.listGraphsByPrefix(prefix, options)
+                : innerStore.listGraphs(options).then((graphs) => graphs.filter((graph) => graph.startsWith(prefix)));
+        },
+        deleteBySubjectPrefix(graphUri, prefix, options) {
+            return invalidateAfterMutation(() => innerStore.deleteBySubjectPrefix(graphUri, prefix, options), removed => removed > 0, () => markProjectionDirty?.(), 'deleteBySubjectPrefix');
+        },
+        countQuads(graphUri, options) {
+            return innerStore.countQuads(graphUri, options);
+        },
+        // Defined iff the inner store supports it, so the capability propagates
+        // truthfully up the decorator chain (callers gate on `typeof store.update
+        // === 'function'`). A server-side UPDATE can create/drop named graphs and
+        // mutate projected content, so it invalidates the listGraphs cache and
+        // marks the projection dirty just like insert/delete.
+        update: innerStore.update
+            ? (sparql, options) => invalidateAfterMutation(() => innerStore.update(sparql, options), () => true, () => markProjectionDirty?.(), 'update')
+            : undefined,
+        flush: innerStore.flush ? (options) => innerStore.flush(options) : undefined,
+        close() {
+            return innerStore.close();
+        },
+    };
+    return wrapper;
+}
+//# sourceMappingURL=context-graph-cache-invalidating-store.js.map

package/dist/internal/context-graph-cache-invalidating-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-graph-cache-invalidating-store.js","sourceRoot":"","sources":["../../src/internal/context-graph-cache-invalidating-store.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,2BAA2B,EAAE,0BAA0B,EAA+E,MAAM,mCAAmC,CAAC;AAEzL,MAAM,UAAU,6CAA6C,CAC3D,UAAuB,EACvB,UAAsB;AACtB,kFAAkF;AAClF,gFAAgF;AAChF,mBAIS;IAET,MAAM,uBAAuB,GAAG,KAAK,EACnC,IAAsB,EACtB,OAA+B,EAC/B,SAAsB,EACtB,SAA0B,EACd,EAAE;QACd,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpB,UAAU,EAAE,CAAC;gBACb,SAAS,EAAE,EAAE,CAAC;YAChB,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sEAAsE;YACtE,uEAAuE;YACvE,uEAAuE;YACvE,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,0BAA0B,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;gBAC7E,UAAU,EAAE,CAAC;gBACb,SAAS,EAAE,EAAE,CAAC;YAChB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,OAAQ,UAA4C,CAAC,gBAAgB;YACpF,UAAU;QACd,CAAC,CAAC,UAAgD;QAClD,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,OAAO,GAE8B;QACzC,UAAU;QACV,IAAI,iBAAiB;YACnB,OAAO,UAAU,CAAC,iBAAiB,CAAC;QACtC,CAAC;QACD,mBAAmB;YACjB,OAAO,UAAU,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAC5C,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,OAAO;YACnB,OAAO,uBAAuB,CAC5B,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EACvC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EACtB,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,EAClC,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,OAAO;YACnB,OAAO,uBAAuB,CAC5B,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EACvC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EACtB,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,EAClC,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,OAAO,EAAE,OAAO;YAC9B,OAAO,uBAAuB,CAC5B,GAAG,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,EAClD,OAAO,CAAC,EAAE,CAAC,OAAO,GAAG,CAAC,EACtB,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,EACrD,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,2BAA2B,CAAC,OAAO,EAAE,OAAO;YAC1C,OAAO,uBAAuB,CAC5B,GAAG,EAAE,CAAC,2BAA2B,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,EAC/D,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,EACrD,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,MAAM,EAAE,OAAO;YACnB,OAAO,uBAAuB,CAC5B,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,GAAG,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC,EACrC,GAAG,EAAE,CAAC,mBAAmB,EAAE,EAAE,EAC7B,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CACtD,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,QAAQ,EAAE,OAAO;YACxB,OAAO,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QACD,WAAW,CAAC,QAAQ;YAClB,OAAO,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,SAAS,CAAC,QAAQ,EAAE,OAAO;YACzB,OAAO,uBAAuB,CAC5B,GAAG,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,EAC7C,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAChD,WAAW,CACZ,CAAC;QACJ,CAAC;QACD,YAAY,EAAE,UAAU,CAAC,YAAY;YACnC,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,uBAAuB,CACnD,GAAG,EAAE,CAAC,UAAU,CAAC,YAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,EACxD,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAChD,cAAc,CACf;YACH,CAAC,CAAC,SAAS;QACb,uEAAuE;QACvE,sEAAsE;QACtE,wEAAwE;QACxE,yEAAyE;QACzE,sBAAsB,EAAE,UAAU,CAAC,sBAAsB;YACvD,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,CAC9E,uBAAuB,CACrB,GAAG,EAAE,CAAC,UAAU,CAAC,sBAAuB,CACtC,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,eAAe,EACf,aAAa,EACb,OAAO,CACR,EACD,GAAG,EAAE,CAAC,IAAI;YACV,+DAA+D;YAC/D,kEAAkE;YAClE,GAAG,EAAE;gBACH,mBAAmB,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAC3C,mBAAmB,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YACjD,CAAC,EACD,wBAAwB,CACzB;YACL,CAAC,CAAC,SAAS;QACb,6EAA6E;QAC7E,6EAA6E;QAC7E,8EAA8E;QAC9E,8EAA8E;QAC9E,+EAA+E;QAC/E,cAAc,EAAE,UAAU,CAAC,cAAc;YACvC,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CACpC,uBAAuB,CACrB,GAAG,EAAE,CAAC,UAAU,CAAC,cAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,EACnE,GAAG,EAAE,CAAC,IAAI;YACV,+DAA+D;YAC/D,8DAA8D;YAC9D,2DAA2D;YAC3D,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,EACrD,gBAAgB,CACjB;YACL,CAAC,CAAC,SAAS;QACb,uEAAuE;QACvE,2EAA2E;QAC3E,2EAA2E;QAC3E,iEAAiE;QACjE,sBAAsB,EAAE,UAAU,CAAC,sBAAsB;YACvD,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,uBAAuB,CACzC,GAAG,EAAE,CAAC,UAAU,CAAC,sBAAuB,CAAC,KAAK,EAAE,OAAO,CAAC,EACxD,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,WAAW,EAChC,GAAG,EAAE;gBACH,iEAAiE;gBACjE,gEAAgE;gBAChE,kEAAkE;gBAClE,8DAA8D;gBAC9D,mEAAmE;gBACnE,+DAA+D;gBAC/D,IAAI,mBAAmB,KAAK,SAAS;oBAAE,OAAO;gBAC9C,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;gBAC5D,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;gBACtD,IAAI,aAAa,IAAI,KAAK,EAAE,CAAC;oBAC3B,KAAK,MAAM,UAAU,IAAI;wBACvB,KAAK,CAAC,WAAW;wBACjB,KAAK,CAAC,0BAA0B;wBAChC,KAAK,CAAC,8BAA8B;wBACpC,KAAK,CAAC,UAAU;qBACjB,EAAE,CAAC;wBACF,mBAAmB,CAAC,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACtD,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;oBACvD,KAAK,MAAM,UAAU,IAAI;wBACvB,KAAK,CAAC,aAAa;wBACnB,KAAK,CAAC,0BAA0B;wBAChC,KAAK,CAAC,8BAA8B;wBACpC,KAAK,CAAC,UAAU;wBAChB,GAAG,KAAK,CAAC,iBAAiB;qBAC3B,EAAE,CAAC;wBACF,mBAAmB,CAAC,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACtD,CAAC;gBACH,CAAC;YACH,CAAC,EACD,wBAAwB,CACzB;YACH,CAAC,CAAC,SAAS;QACb,UAAU,CAAC,OAAO;YAChB,OAAO,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,2EAA2E;QAC3E,sEAAsE;QACtE,4EAA4E;QAC5E,gBAAgB,EAAE,YAAY;YAC5B,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACrD,CAAC,CAAC,SAAS;QACb,kBAAkB,CAAC,MAAM,EAAE,OAAO;YAChC,OAAO,UAAU,CAAC,kBAAkB;gBAClC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC;gBAChD,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1G,CAAC;QACD,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO;YAC7C,OAAO,uBAAuB,CAC5B,GAAG,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EACjE,OAAO,CAAC,EAAE,CAAC,OAAO,GAAG,CAAC,EACtB,GAAG,EAAE,CAAC,mBAAmB,EAAE,EAAE,EAC7B,uBAAuB,CACxB,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,QAAQ,EAAE,OAAO;YAC1B,OAAO,UAAU,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QACD,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,uEAAuE;QACvE,sDAAsD;QACtD,MAAM,EAAE,UAAU,CAAC,MAAM;YACvB,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,uBAAuB,CAC5C,GAAG,EAAE,CAAC,UAAU,CAAC,MAAO,CAAC,MAAM,EAAE,OAAO,CAAC,EACzC,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,mBAAmB,EAAE,EAAE,EAC7B,QAAQ,CACT;YACD,CAAC,CAAC,SAAS;QACb,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,KAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7E,KAAK;YACH,OAAO,UAAU,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;KACF,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/internal/context-graph-meta-record-copy.d.ts

@@ -0,0 +1,3 @@
+import type { ContextGraphMetaRecord } from '../context-graph-meta-projection.js';
+export declare function cloneMetaRecord(record: ContextGraphMetaRecord): ContextGraphMetaRecord;
+//# sourceMappingURL=context-graph-meta-record-copy.d.ts.map

package/dist/internal/context-graph-meta-record-copy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-graph-meta-record-copy.d.ts","sourceRoot":"","sources":["../../src/internal/context-graph-meta-record-copy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAElF,wBAAgB,eAAe,CAAC,MAAM,EAAE,sBAAsB,GAAG,sBAAsB,CAmBtF"}

package/dist/internal/context-graph-meta-record-copy.js

@@ -0,0 +1,21 @@
+export function cloneMetaRecord(record) {
+    return {
+        ...record,
+        creators: [...record.creators],
+        curators: [...record.curators],
+        allowedPeers: [...record.allowedPeers],
+        allowedAgents: [...record.allowedAgents],
+        participantAgents: [...record.participantAgents],
+        participantIdentityIds: [...record.participantIdentityIds],
+        revokedAgents: [...record.revokedAgents],
+        delegations: record.delegations.map((delegation) => ({
+            ...delegation,
+            agents: [...delegation.agents],
+            allowedPeers: [...delegation.allowedPeers],
+            allowedKeys: [...delegation.allowedKeys],
+            expiresAtValues: [...delegation.expiresAtValues],
+        })),
+        subGraphs: record.subGraphs.map((subGraph) => ({ ...subGraph })),
+    };
+}
+//# sourceMappingURL=context-graph-meta-record-copy.js.map

package/dist/internal/context-graph-meta-record-copy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-graph-meta-record-copy.js","sourceRoot":"","sources":["../../src/internal/context-graph-meta-record-copy.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,eAAe,CAAC,MAA8B;IAC5D,OAAO;QACL,GAAG,MAAM;QACT,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC9B,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC9B,YAAY,EAAE,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;QACtC,aAAa,EAAE,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;QACxC,iBAAiB,EAAE,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC;QAChD,sBAAsB,EAAE,CAAC,GAAG,MAAM,CAAC,sBAAsB,CAAC;QAC1D,aAAa,EAAE,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;QACxC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACnD,GAAG,UAAU;YACb,MAAM,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;YAC9B,YAAY,EAAE,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC;YAC1C,WAAW,EAAE,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC;YACxC,eAAe,EAAE,CAAC,GAAG,UAAU,CAAC,eAAe,CAAC;SACjD,CAAC,CAAC;QACH,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;KACjE,CAAC;AACJ,CAAC"}

package/dist/internal/gossip/host-mode-handler.d.ts

@@ -0,0 +1,11 @@
+import { type Logger } from '@origintrail-official/dkg-core';
+import type { GossipSession } from '../../gossip-session.js';
+interface HostModeHandlerPorts {
+    swmHostModeStripCiphertext(): boolean;
+    ingestSwmCiphertextChunkEnvelope(contextGraphId: string, data: Uint8Array, from: string): Promise<unknown>;
+    ingestSwmHostModeEnvelope(contextGraphId: string, data: Uint8Array, from: string): Promise<unknown>;
+}
+/** Dispatch only through the session and classification which own this handler. */
+export declare function createSwmHostModeHandler(ports: HostModeHandlerPorts, log: Pick<Logger, 'debug' | 'warn'>, session: GossipSession, contextGraphId: string, wireCgId: string): (topic: string, data: Uint8Array, from: string) => void;
+export {};
+//# sourceMappingURL=host-mode-handler.d.ts.map

package/dist/internal/gossip/host-mode-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-mode-handler.d.ts","sourceRoot":"","sources":["../../../src/internal/gossip/host-mode-handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,MAAM,EACZ,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE7D,UAAU,oBAAoB;IAC5B,0BAA0B,IAAI,OAAO,CAAC;IACtC,gCAAgC,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3G,yBAAyB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACrG;AAED,mFAAmF;AACnF,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,oBAAoB,EAC3B,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,EACnC,OAAO,EAAE,aAAa,EACtB,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,GACf,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CA6CzD"}

package/dist/internal/gossip/host-mode-handler.js

@@ -0,0 +1,41 @@
+// SPDX-License-Identifier: Apache-2.0
+import { createOperationContext, decodeGossipEnvelope, GOSSIP_TYPE_WORKSPACE_PUBLISH_CHUNKED, } from '@origintrail-official/dkg-core';
+/** Dispatch only through the session and classification which own this handler. */
+export function createSwmHostModeHandler(ports, log, session, contextGraphId, wireCgId) {
+    return (_topic, data, from) => {
+        if (!session.active)
+            return;
+        // Fail closed when the classification is absent. Only an explicitly
+        // non-curated manual subscription retains the public host-mode hatch.
+        if (ports.swmHostModeStripCiphertext() &&
+            session.swmHostModeCurated.get(wireCgId) !== false) {
+            log.debug(createOperationContext('share'), `Dropping host-mode envelope on cg=${contextGraphId} from=${from}: ` +
+                `private-ciphertext strip is ON for a curated CG (OT-RFC-49 WS-A)`);
+            return;
+        }
+        // OT-RFC-38 LU-11: peek envelope type and dispatch. Chunked
+        // envelopes (`type='share-write-chunked'`) take the V2 chunk
+        // persistence path; everything else flows through the legacy
+        // host-mode store unchanged. Failed decode falls through to
+        // `ingestSwmHostModeEnvelope` which is also defensive — the
+        // dispatch here is best-effort, not a security boundary.
+        let envelopeType;
+        try {
+            const peek = decodeGossipEnvelope(data);
+            envelopeType = peek?.type;
+        }
+        catch { /* drop into legacy path */ }
+        if (envelopeType === GOSSIP_TYPE_WORKSPACE_PUBLISH_CHUNKED) {
+            ports.ingestSwmCiphertextChunkEnvelope(contextGraphId, data, from).catch((err) => {
+                const msg = err instanceof Error ? err.message : String(err);
+                log.warn(createOperationContext('system'), `LU-11: chunked SWM ingest failed for "${contextGraphId}": ${msg}`);
+            });
+            return;
+        }
+        ports.ingestSwmHostModeEnvelope(contextGraphId, data, from).catch((err) => {
+            const msg = err instanceof Error ? err.message : String(err);
+            log.warn(createOperationContext('system'), `Host-mode SWM ingest failed for "${contextGraphId}": ${msg}`);
+        });
+    };
+}
+//# sourceMappingURL=host-mode-handler.js.map

package/dist/internal/gossip/host-mode-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-mode-handler.js","sourceRoot":"","sources":["../../../src/internal/gossip/host-mode-handler.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EACL,sBAAsB,EAAE,oBAAoB,EAAE,qCAAqC,GAEpF,MAAM,gCAAgC,CAAC;AASxC,mFAAmF;AACnF,MAAM,UAAU,wBAAwB,CACtC,KAA2B,EAC3B,GAAmC,EACnC,OAAsB,EACtB,cAAsB,EACtB,QAAgB;IAEhB,OAAO,CAAC,MAAc,EAAE,IAAgB,EAAE,IAAY,EAAE,EAAE;QACxD,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO;QAC5B,oEAAoE;QACpE,sEAAsE;QACtE,IACE,KAAK,CAAC,0BAA0B,EAAE;YAClC,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,EAClD,CAAC;YACD,GAAG,CAAC,KAAK,CACP,sBAAsB,CAAC,OAAO,CAAC,EAC/B,qCAAqC,cAAc,SAAS,IAAI,IAAI;gBACpE,kEAAkE,CACnE,CAAC;YACF,OAAO;QACT,CAAC;QACD,4DAA4D;QAC5D,6DAA6D;QAC7D,6DAA6D;QAC7D,4DAA4D;QAC5D,4DAA4D;QAC5D,yDAAyD;QACzD,IAAI,YAAgC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACxC,YAAY,GAAG,IAAI,EAAE,IAAI,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;QACvC,IAAI,YAAY,KAAK,qCAAqC,EAAE,CAAC;YAC3D,KAAK,CAAC,gCAAgC,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACxF,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,GAAG,CAAC,IAAI,CACN,sBAAsB,CAAC,QAAQ,CAAC,EAChC,yCAAyC,cAAc,MAAM,GAAG,EAAE,CACnE,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,KAAK,CAAC,yBAAyB,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACjF,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,GAAG,CAAC,IAAI,CACN,sBAAsB,CAAC,QAAQ,CAAC,EAChC,oCAAoC,cAAc,MAAM,GAAG,EAAE,CAC9D,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/internal/join-encryption-key-bundle.d.ts

@@ -0,0 +1,10 @@
+import { type SignedAgentDelegation } from '../auth/agent-delegation.js';
+interface VerifiedJoinEncryptionKeyBundle {
+    readonly issuedAtMs: number;
+    readonly keySetDigest: string;
+    readonly keys: NonNullable<SignedAgentDelegation['workspaceEncryptionKeys']>;
+}
+export declare function verifiedDelegationKeyIds(agentAddress: string, keys: VerifiedJoinEncryptionKeyBundle['keys']): Set<string>;
+export declare function verifyJoinEncryptionKeyBundle(delegation: SignedAgentDelegation, carrierPeerId: string): VerifiedJoinEncryptionKeyBundle | null;
+export {};
+//# sourceMappingURL=join-encryption-key-bundle.d.ts.map

package/dist/internal/join-encryption-key-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"join-encryption-key-bundle.d.ts","sourceRoot":"","sources":["../../src/internal/join-encryption-key-bundle.ts"],"names":[],"mappings":"AAKA,OAAO,EAA0E,KAAK,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAKjJ,UAAU,+BAA+B;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,qBAAqB,CAAC,yBAAyB,CAAC,CAAC,CAAC;CAC9E;AAED,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,+BAA+B,CAAC,MAAM,CAAC,GAC5C,GAAG,CAAC,MAAM,CAAC,CAKb;AAED,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,qBAAqB,EACjC,aAAa,EAAE,MAAM,GACpB,+BAA+B,GAAG,IAAI,CAsExC"}