@origintrail-official/dkg-agent 10.0.20 → 10.0.21

package/dist/internal/join-encryption-key-bundle.js

@@ -0,0 +1,72 @@
+// SPDX-License-Identifier: Apache-2.0
+import { createHash } from 'node:crypto';
+import { WORKSPACE_AGENT_ENCRYPTION_KEY_ALGORITHM_X25519, decodeWorkspaceEncryptionKey, workspaceAgentEncryptionKeyId } from '@origintrail-official/dkg-core';
+import { ethers } from 'ethers';
+import { computeWorkspaceEncryptionKeysAttestationDigest, verifyAgentDelegation } from '../auth/agent-delegation.js';
+import { verifyWorkspaceEncryptionKeyBinding } from '../agent-keystore.js';
+const JOIN_ENCRYPTION_KEY_LIMIT = 8;
+export function verifiedDelegationKeyIds(agentAddress, keys) {
+    return new Set(keys.map((key) => workspaceAgentEncryptionKeyId(agentAddress, decodeWorkspaceEncryptionKey(key.publicEncryptionKey)).toLowerCase()));
+}
+export function verifyJoinEncryptionKeyBundle(delegation, carrierPeerId) {
+    const keys = delegation.workspaceEncryptionKeys;
+    if (keys === undefined)
+        return null;
+    if (!Array.isArray(keys) || keys.length === 0 || keys.length > JOIN_ENCRYPTION_KEY_LIMIT) {
+        throw new Error(`Join request must carry between 1 and ${JOIN_ENCRYPTION_KEY_LIMIT} workspace encryption keys.`);
+    }
+    // Preserve the existing admission contract for a signed carrier mismatch:
+    // policy evaluation reports a bounded pending decision. Do not accept the
+    // bundle because the carrier has not proven it is the signed delegatee.
+    if (delegation.delegateePeerId !== carrierPeerId)
+        return null;
+    // issuedAtMs becomes the durable cross-CG cache high-water, so authenticate
+    // the base delegation here as well as at the admission boundary.
+    verifyAgentDelegation(delegation);
+    if (!Number.isSafeInteger(delegation.issuedAtMs) || delegation.issuedAtMs < 0) {
+        throw new Error('Join request carries an invalid encryption-key freshness timestamp.');
+    }
+    const verified = keys.map((key) => {
+        if (key === null
+            || typeof key !== 'object'
+            || key.encryptionKeyAlgorithm !== WORKSPACE_AGENT_ENCRYPTION_KEY_ALGORITHM_X25519
+            || typeof key.publicEncryptionKey !== 'string'
+            || typeof key.encryptionKeyProof !== 'string') {
+            throw new Error('Join request carries a malformed workspace encryption key.');
+        }
+        let valid = false;
+        try {
+            valid = verifyWorkspaceEncryptionKeyBinding(delegation.agentAddress, key.encryptionKeyAlgorithm, key.publicEncryptionKey, key.encryptionKeyProof);
+        }
+        catch {
+            valid = false;
+        }
+        if (!valid) {
+            throw new Error('Join request carries an invalid workspace encryption key proof.');
+        }
+        return key;
+    });
+    if (typeof delegation.workspaceEncryptionKeysSignature !== 'string') {
+        throw new Error('Join request is missing its workspace encryption-key attestation.');
+    }
+    let attestationSigner = '';
+    try {
+        attestationSigner = ethers.verifyMessage(computeWorkspaceEncryptionKeysAttestationDigest(delegation), delegation.workspaceEncryptionKeysSignature);
+    }
+    catch {
+        attestationSigner = '';
+    }
+    if (attestationSigner.toLowerCase() !== delegation.agentAddress.toLowerCase()) {
+        throw new Error('Join request carries an invalid workspace encryption-key attestation.');
+    }
+    const canonicalKeySet = [...new Set(verified.map((key) => JSON.stringify({
+            encryptionKeyAlgorithm: key.encryptionKeyAlgorithm,
+            publicEncryptionKey: key.publicEncryptionKey,
+        })))].sort();
+    return {
+        issuedAtMs: delegation.issuedAtMs,
+        keySetDigest: `0x${createHash('sha256').update(JSON.stringify(canonicalKeySet)).digest('hex')}`,
+        keys: verified,
+    };
+}
+//# sourceMappingURL=join-encryption-key-bundle.js.map

package/dist/internal/join-encryption-key-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"join-encryption-key-bundle.js","sourceRoot":"","sources":["../../src/internal/join-encryption-key-bundle.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,+CAA+C,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AAC9J,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,+CAA+C,EAAE,qBAAqB,EAA8B,MAAM,6BAA6B,CAAC;AACjJ,OAAO,EAAE,mCAAmC,EAAE,MAAM,sBAAsB,CAAC;AAE3E,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAQpC,MAAM,UAAU,wBAAwB,CACtC,YAAoB,EACpB,IAA6C;IAE7C,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,6BAA6B,CAC5D,YAAY,EACZ,4BAA4B,CAAC,GAAG,CAAC,mBAAmB,CAAC,CACtD,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,UAAiC,EACjC,aAAqB;IAErB,MAAM,IAAI,GAAG,UAAU,CAAC,uBAAuB,CAAC;IAChD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CACb,yCAAyC,yBAAyB,6BAA6B,CAChG,CAAC;IACJ,CAAC;IACD,0EAA0E;IAC1E,0EAA0E;IAC1E,wEAAwE;IACxE,IAAI,UAAU,CAAC,eAAe,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IAE9D,4EAA4E;IAC5E,iEAAiE;IACjE,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAChC,IACE,GAAG,KAAK,IAAI;eACT,OAAO,GAAG,KAAK,QAAQ;eACvB,GAAG,CAAC,sBAAsB,KAAK,+CAA+C;eAC9E,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ;eAC3C,OAAO,GAAG,CAAC,kBAAkB,KAAK,QAAQ,EAC7C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,mCAAmC,CACzC,UAAU,CAAC,YAAY,EACvB,GAAG,CAAC,sBAAsB,EAC1B,GAAG,CAAC,mBAAmB,EACvB,GAAG,CAAC,kBAAkB,CACvB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,UAAU,CAAC,gCAAgC,KAAK,QAAQ,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,iBAAiB,GAAG,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,iBAAiB,GAAG,MAAM,CAAC,aAAa,CACtC,+CAA+C,CAAC,UAAU,CAAC,EAC3D,UAAU,CAAC,gCAAgC,CAC5C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB,GAAG,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,iBAAiB,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;YACvE,sBAAsB,EAAE,GAAG,CAAC,sBAAsB;YAClD,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;SAC7C,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACb,OAAO;QACL,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,YAAY,EAAE,KAAK,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QAC/F,IAAI,EAAE,QAAQ;KACf,CAAC;AACJ,CAAC"}

package/dist/internal/knowledge-asset-vm-publish-request.d.ts

@@ -0,0 +1,31 @@
+import { type AssertionSeal, GRAPH_KA_CONTENT_SCOPE_VERSION } from '@origintrail-official/dkg-core';
+import { type PublishOptions, type KnowledgeAssetVmPublishRequest } from '@origintrail-official/dkg-publisher';
+type KnowledgeAssetVmPublicationOperationPlan = {
+    readonly kind: 'initial';
+    readonly pricingPolicy: PublishOptions['pricingPolicy'];
+} | {
+    readonly kind: 'update';
+    readonly vmCurrentAssertion: string;
+};
+/** One operation discriminator shared by admission, sync, and queued execution. */
+export declare function planKnowledgeAssetVmPublication(input: {
+    readonly vmCurrentAssertion?: string;
+    readonly pricingPolicy?: PublishOptions['pricingPolicy'];
+}): KnowledgeAssetVmPublicationOperationPlan;
+/** Required immutable envelope consumed by graph-scoped queued publication. */
+export type GraphScopedKnowledgeAssetVmPublishRequest = KnowledgeAssetVmPublishRequest & {
+    readonly contentScopeVersion: typeof GRAPH_KA_CONTENT_SCOPE_VERSION;
+    readonly kaUal: string;
+    readonly assertionVersion: string;
+    readonly publicTripleCount: number;
+    readonly privateTripleCount: number;
+};
+/** Narrow the existing persisted-envelope checks before any graph mutation. */
+export declare function isGraphScopedKnowledgeAssetVmPublishRequest(request: KnowledgeAssetVmPublishRequest): request is GraphScopedKnowledgeAssetVmPublishRequest;
+/** Rebuild the immutable graph-scoped seal carried by one queued VM request. */
+export declare function assertionSealFromQueuedKnowledgeAssetVmPublishRequest(request: GraphScopedKnowledgeAssetVmPublishRequest): AssertionSeal;
+export type KnowledgeAssetVmPublishRequestWithoutIntentKey = Omit<KnowledgeAssetVmPublishRequest, 'intentKey'>;
+/** Canonical immutable projection of the persisted queued-publish request. */
+export declare function createKnowledgeAssetVmPublishIntentKey(request: KnowledgeAssetVmPublishRequestWithoutIntentKey): string;
+export {};
+//# sourceMappingURL=knowledge-asset-vm-publish-request.d.ts.map

package/dist/internal/knowledge-asset-vm-publish-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"knowledge-asset-vm-publish-request.d.ts","sourceRoot":"","sources":["../../src/internal/knowledge-asset-vm-publish-request.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,aAAa,EAAE,8BAA8B,EAAkC,MAAM,gCAAgC,CAAC;AACpI,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,8BAA8B,EAA4C,MAAM,qCAAqC,CAAC;AAGzJ,KAAK,wCAAwC,GACzC;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;CACzD,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC,CAAC;AAEN,mFAAmF;AACnF,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,aAAa,CAAC,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;CAC1D,GAAG,wCAAwC,CAU3C;AAED,+EAA+E;AAC/E,MAAM,MAAM,yCAAyC,GAAG,8BAA8B,GAAG;IACvF,QAAQ,CAAC,mBAAmB,EAAE,OAAO,8BAA8B,CAAC;IACpE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC,CAAC;AAEF,+EAA+E;AAC/E,wBAAgB,2CAA2C,CACzD,OAAO,EAAE,8BAA8B,GACtC,OAAO,IAAI,yCAAyC,CAOtD;AAED,gFAAgF;AAChF,wBAAgB,qDAAqD,CACnE,OAAO,EAAE,yCAAyC,GACjD,aAAa,CA2Bf;AAED,MAAM,MAAM,8CAA8C,GAAG,IAAI,CAC/D,8BAA8B,EAC9B,WAAW,CACZ,CAAC;AAEF,8EAA8E;AAC9E,wBAAgB,sCAAsC,CACpD,OAAO,EAAE,8CAA8C,GACtD,MAAM,CAqCR"}

package/dist/internal/knowledge-asset-vm-publish-request.js

@@ -0,0 +1,91 @@
+// SPDX-License-Identifier: Apache-2.0
+import { createHash } from 'node:crypto';
+import { GRAPH_KA_CONTENT_SCOPE_VERSION, createGraphKnowledgeAssetScope } from '@origintrail-official/dkg-core';
+import { assertPublicationPricingPolicyApplicable } from '@origintrail-official/dkg-publisher';
+import { ethers } from 'ethers';
+/** One operation discriminator shared by admission, sync, and queued execution. */
+export function planKnowledgeAssetVmPublication(input) {
+    if (input.vmCurrentAssertion) {
+        assertPublicationPricingPolicyApplicable(input.pricingPolicy, { kind: 'update' });
+        return { kind: 'update', vmCurrentAssertion: input.vmCurrentAssertion };
+    }
+    assertPublicationPricingPolicyApplicable(input.pricingPolicy, {
+        kind: 'initial',
+        graphScoped: true,
+    });
+    return { kind: 'initial', pricingPolicy: input.pricingPolicy };
+}
+/** Narrow the existing persisted-envelope checks before any graph mutation. */
+export function isGraphScopedKnowledgeAssetVmPublishRequest(request) {
+    return request.contentScopeVersion === GRAPH_KA_CONTENT_SCOPE_VERSION
+        && request.kaUal !== undefined
+        && request.assertionVersion !== undefined
+        && request.publicTripleCount !== undefined
+        && request.privateTripleCount !== undefined
+        && request.roots.length === 0;
+}
+/** Rebuild the immutable graph-scoped seal carried by one queued VM request. */
+export function assertionSealFromQueuedKnowledgeAssetVmPublishRequest(request) {
+    const graphScope = createGraphKnowledgeAssetScope(request.kaUal, request.assertionVersion);
+    return {
+        merkleRoot: ethers.getBytes(request.seal.merkleRoot),
+        authorAddress: ethers.getAddress(request.seal.authorAddress),
+        authorAttestationR: ethers.getBytes(request.seal.signature.r),
+        authorAttestationVS: ethers.getBytes(request.seal.signature.vs),
+        authorSchemeVersion: request.seal.schemeVersion,
+        chainId: BigInt(request.sealChainId),
+        kav10Address: ethers.getAddress(request.sealKav10Address),
+        finalizedAtIso: request.sealFinalizedAtIso,
+        contentScopeVersion: GRAPH_KA_CONTENT_SCOPE_VERSION,
+        kaUal: graphScope.ual,
+        assertionVersion: graphScope.assertionVersion,
+        publicTripleCount: request.publicTripleCount,
+        ...(request.privateMerkleRoot
+            ? { privateMerkleRoot: ethers.getBytes(request.privateMerkleRoot) }
+            : {}),
+        privateTripleCount: request.privateTripleCount,
+        rootEntities: [],
+        ...(request.seal.reservedKaId !== undefined
+            ? { reservedKaId: BigInt(request.seal.reservedKaId) }
+            : {}),
+    };
+}
+/** Canonical immutable projection of the persisted queued-publish request. */
+export function createKnowledgeAssetVmPublishIntentKey(request) {
+    const canonicalIntent = {
+        contextGraphId: request.contextGraphId,
+        name: request.name,
+        agentAddress: request.agentAddress ?? null,
+        subGraphName: request.subGraphName ?? null,
+        shareOperationId: request.shareOperationId,
+        roots: request.roots,
+        contentScopeVersion: request.contentScopeVersion ?? null,
+        kaUal: request.kaUal ?? null,
+        assertionVersion: request.assertionVersion ?? null,
+        publicTripleCount: request.publicTripleCount ?? null,
+        privateMerkleRoot: request.privateMerkleRoot?.toLowerCase() ?? null,
+        privateTripleCount: request.privateTripleCount ?? null,
+        accessPolicy: request.accessPolicy ?? null,
+        allowedPeers: request.allowedPeers ?? [],
+        entityProofs: request.entityProofs ?? null,
+        sealMerkleRoot: request.sealMerkleRoot.toLowerCase(),
+        seal: request.seal,
+        sealChainId: request.sealChainId,
+        sealKav10Address: request.sealKav10Address,
+        sealFinalizedAtIso: request.sealFinalizedAtIso,
+        wmCurrentAssertion: request.wmCurrentAssertion ?? null,
+        swmCurrentAssertion: request.swmCurrentAssertion ?? null,
+        vmCurrentAssertion: request.vmCurrentAssertion ?? null,
+        kaNumber: request.kaNumber ?? null,
+        reservedUal: request.reservedUal ?? null,
+        publishEpochs: request.publishEpochs ?? null,
+        // Keep the pre-feature canonical JSON unchanged when the policy is omitted.
+        ...(request.pricingPolicy !== undefined
+            ? { pricingPolicy: request.pricingPolicy }
+            : {}),
+        clearSharedMemoryAfter: request.clearSharedMemoryAfter ?? null,
+        publisherNodeIdentityIdOverride: request.publisherNodeIdentityIdOverride ?? null,
+    };
+    return `sha256:${createHash('sha256').update(JSON.stringify(canonicalIntent)).digest('hex')}`;
+}
+//# sourceMappingURL=knowledge-asset-vm-publish-request.js.map

package/dist/internal/knowledge-asset-vm-publish-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"knowledge-asset-vm-publish-request.js","sourceRoot":"","sources":["../../src/internal/knowledge-asset-vm-publish-request.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAsB,8BAA8B,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AACpI,OAAO,EAA4D,wCAAwC,EAAE,MAAM,qCAAqC,CAAC;AACzJ,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAYhC,mFAAmF;AACnF,MAAM,UAAU,+BAA+B,CAAC,KAG/C;IACC,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7B,wCAAwC,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE,CAAC;IAC1E,CAAC;IACD,wCAAwC,CAAC,KAAK,CAAC,aAAa,EAAE;QAC5D,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;AACjE,CAAC;AAWD,+EAA+E;AAC/E,MAAM,UAAU,2CAA2C,CACzD,OAAuC;IAEvC,OAAO,OAAO,CAAC,mBAAmB,KAAK,8BAA8B;WAChE,OAAO,CAAC,KAAK,KAAK,SAAS;WAC3B,OAAO,CAAC,gBAAgB,KAAK,SAAS;WACtC,OAAO,CAAC,iBAAiB,KAAK,SAAS;WACvC,OAAO,CAAC,kBAAkB,KAAK,SAAS;WACxC,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,qDAAqD,CACnE,OAAkD;IAElD,MAAM,UAAU,GAAG,8BAA8B,CAC/C,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,gBAAgB,CACzB,CAAC;IACF,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;QACpD,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;QAC5D,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7D,mBAAmB,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/D,mBAAmB,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa;QAC/C,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QACpC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACzD,cAAc,EAAE,OAAO,CAAC,kBAAkB;QAC1C,mBAAmB,EAAE,8BAA8B;QACnD,KAAK,EAAE,UAAU,CAAC,GAAG;QACrB,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;QAC7C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,GAAG,CAAC,OAAO,CAAC,iBAAiB;YAC3B,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE;YACnE,CAAC,CAAC,EAAE,CAAC;QACP,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,YAAY,EAAE,EAAE;QAChB,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE;YACrD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAOD,8EAA8E;AAC9E,MAAM,UAAU,sCAAsC,CACpD,OAAuD;IAEvD,MAAM,eAAe,GAAG;QACtB,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;QAC1C,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;QAC1C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,IAAI;QACxD,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;QAC5B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,IAAI;QAClD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,IAAI;QACpD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,WAAW,EAAE,IAAI,IAAI;QACnE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,IAAI;QACtD,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;QAC1C,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE;QACxC,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;QAC1C,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,WAAW,EAAE;QACpD,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,IAAI;QACtD,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,IAAI;QACxD,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,IAAI;QACtD,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI;QAClC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;QACxC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;QAC5C,4EAA4E;QAC5E,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;YACrC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE;YAC1C,CAAC,CAAC,EAAE,CAAC;QACP,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,IAAI,IAAI;QAC9D,+BAA+B,EAC7B,OAAO,CAAC,+BAA+B,IAAI,IAAI;KAClD,CAAC;IACF,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAChG,CAAC"}

package/dist/internal/lifecycle-sync-policy.d.ts

@@ -0,0 +1,5 @@
+import { type DKGAgentConfig } from '../dkg-agent-types.js';
+export declare function syncReconcilerEnabled(config: DKGAgentConfig): boolean;
+export declare function syncOnConnectEnabled(config: DKGAgentConfig): boolean;
+export declare function durableSyncEnabled(config: DKGAgentConfig): boolean;
+//# sourceMappingURL=lifecycle-sync-policy.d.ts.map

package/dist/internal/lifecycle-sync-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-sync-policy.d.ts","sourceRoot":"","sources":["../../src/internal/lifecycle-sync-policy.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAErE;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAEpE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAElE"}

package/dist/internal/lifecycle-sync-policy.js

@@ -0,0 +1,12 @@
+// SPDX-License-Identifier: Apache-2.0
+import { resolveBooleanSwitch, resolveSyncReconcilerEnabled } from '../sync/backpressure.js';
+export function syncReconcilerEnabled(config) {
+    return resolveSyncReconcilerEnabled(config.syncReconcilerEnabled);
+}
+export function syncOnConnectEnabled(config) {
+    return resolveBooleanSwitch(config.syncOnConnectEnabled, 'DKG_SYNC_ON_CONNECT_ENABLED', true);
+}
+export function durableSyncEnabled(config) {
+    return resolveBooleanSwitch(config.durableSyncEnabled, 'DKG_DURABLE_SYNC_ENABLED', true);
+}
+//# sourceMappingURL=lifecycle-sync-policy.js.map

package/dist/internal/lifecycle-sync-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-sync-policy.js","sourceRoot":"","sources":["../../src/internal/lifecycle-sync-policy.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAG7F,MAAM,UAAU,qBAAqB,CAAC,MAAsB;IAC1D,OAAO,4BAA4B,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAsB;IACzD,OAAO,oBAAoB,CAAC,MAAM,CAAC,oBAAoB,EAAE,6BAA6B,EAAE,IAAI,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAsB;IACvD,OAAO,oBAAoB,CAAC,MAAM,CAAC,kBAAkB,EAAE,0BAA0B,EAAE,IAAI,CAAC,CAAC;AAC3F,CAAC"}

package/dist/internal/local-private-member.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Whether `meta` declares an explicit private policy (#865) and lists one of
+ * `localAgents` among its allowed agents, participants, curators or creators,
+ * and not among its revoked agents.
+ */
+export declare function isLocalPrivateMember(meta: {
+    readonly accessPolicy?: string;
+    readonly allowedAgents: readonly string[];
+    readonly participantAgents: readonly string[];
+    readonly curators: readonly string[];
+    readonly creators: readonly string[];
+    readonly revokedAgents: readonly string[];
+}, localAgents: readonly (string | undefined)[]): boolean;
+//# sourceMappingURL=local-private-member.d.ts.map

package/dist/internal/local-private-member.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-private-member.d.ts","sourceRoot":"","sources":["../../src/internal/local-private-member.ts"],"names":[],"mappings":"AAUA;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE;IACJ,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C,EACD,WAAW,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAC3C,OAAO,CAWT"}

package/dist/internal/local-private-member.js

@@ -0,0 +1,21 @@
+// SPDX-License-Identifier: Apache-2.0
+/** A context graph member identity: a bare agent address or its `did:dkg:agent:` DID. */
+function memberAgentAddress(value) {
+    const match = /^(?:did:dkg:agent:)?(0x[0-9a-fA-F]{40})$/.exec(value.trim());
+    return match?.[1]?.toLowerCase();
+}
+/**
+ * Whether `meta` declares an explicit private policy (#865) and lists one of
+ * `localAgents` among its allowed agents, participants, curators or creators,
+ * and not among its revoked agents.
+ */
+export function isLocalPrivateMember(meta, localAgents) {
+    if (meta.accessPolicy?.trim().toLowerCase() !== 'private')
+        return false;
+    const revoked = new Set(meta.revokedAgents.map(memberAgentAddress));
+    const members = new Set([...meta.allowedAgents, ...meta.participantAgents, ...meta.curators, ...meta.creators]
+        .map(memberAgentAddress)
+        .filter((member) => member !== undefined && !revoked.has(member)));
+    return localAgents.some((local) => (local !== undefined && members.has(memberAgentAddress(local))));
+}
+//# sourceMappingURL=local-private-member.js.map

package/dist/internal/local-private-member.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-private-member.js","sourceRoot":"","sources":["../../src/internal/local-private-member.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAItC,yFAAyF;AACzF,SAAS,kBAAkB,CAAC,KAAa;IACvC,MAAM,KAAK,GAAG,0CAA0C,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5E,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAOC,EACD,WAA4C;IAE5C,IAAI,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,CAAC,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;SACnF,GAAG,CAAC,kBAAkB,CAAC;SACvB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CACpE,CAAC;IACF,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACjC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAC9D,CAAC,CAAC;AACL,CAAC"}

package/dist/internal/promote/assertion-promote-precommit.d.ts

@@ -16,11 +16,51 @@ type AssertionPromotePreCommitResult = {
     gossipSigner: GossipSigner;
     publisherOptions: PublisherAssertionPromoteOptions;
 };
+/**
+ * The same translation for the root promote's boundary companion, which the
+ * publisher prepares synchronously. Only the retirement fence is transient:
+ * every other refusal from the prepare (unavailable persistence, the head
+ * limit, invalid input) is a hard failure and passes through unchanged.
+ */
+export declare function translateLegacySwmRetirementFence<T>(prepare: () => T): T;
+/** Waits before each repeat of a promote's recipient read. */
+export declare const PROMOTE_RECIPIENT_RETRY_DELAYS_MS: readonly number[];
+/**
+ * No repeat starts later than this after the first read began. It sits below
+ * the chain authority read deadline, so a read that ran into that deadline is
+ * reported at once instead of being asked again.
+ */
+export declare const PROMOTE_RECIPIENT_RETRY_BUDGET_MS = 2000;
+/** The clock and sleep of the recipient repeat, replaceable in tests. */
+export interface PromoteRecipientRetryTiming {
+    now(): number;
+    sleep(delayMs: number): Promise<void>;
+}
+/**
+ * Repeat a promote's recipient read while it fails with a retryable authority
+ * outage and the bound allows.
+ *
+ * The recipient read accepts its roster only while the node-wide authority
+ * facts revision stands still, and it gives up after a few attempts. Work that
+ * has nothing to do with this promote moves that revision: after a Context
+ * Graph is registered the node reconciles the new graph's gossip subscription
+ * several times within a few hundred milliseconds. A share sent straight after
+ * a registration can therefore use up those attempts and report the roster as
+ * temporarily unavailable, although no fact changed and the same read succeeds
+ * moments later.
+ *
+ * Repeating it is safe. It only reads authority and recipient keys, it fails
+ * closed every time, and the publisher asks for it before the attempt claims
+ * an operation id or writes Shared Memory. The bound is short on purpose: each
+ * repeat costs chain reads, and a failure that outlasts the bound is reported
+ * to the caller, which retries the whole promote.
+ */
+export declare function resolvePromoteRecipientsWithinBound<T>(resolve: () => Promise<T>, timing?: PromoteRecipientRetryTiming): Promise<T>;
 /**
  * Resolve agent prerequisites without access to the committing publisher.
  * The publisher receives concrete, pre-wrapped recipient and curator callbacks,
  * not a policy that it could apply to arbitrary commit/finalization failures.
  */
-export declare function prepareAssertionPromote(host: AssertionPromotePreCommitHost, input: AssertionPromotePreCommitInput): Promise<AssertionPromotePreCommitResult>;
+export declare function prepareAssertionPromote(host: AssertionPromotePreCommitHost, input: AssertionPromotePreCommitInput, recipientRetryTiming?: PromoteRecipientRetryTiming): Promise<AssertionPromotePreCommitResult>;
 export {};
 //# sourceMappingURL=assertion-promote-precommit.d.ts.map

package/dist/internal/promote/assertion-promote-precommit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assertion-promote-precommit.d.ts","sourceRoot":"","sources":["../../../src/internal/promote/assertion-promote-precommit.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,gCAAgC,EACtC,MAAM,qCAAqC,CAAC;AAM7C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACxE,KAAK,YAAY,GAAG,OAAO,CACzB,UAAU,CAAC,QAAQ,CAAC,oCAAoC,CAAC,CAAC,CAC3D,CAAC;AAEF,KAAK,gCAAgC,GAAG,IAAI,CAC1C,uBAAuB,EACrB,cAAc,GACd,iBAAiB,GACjB,qBAAqB,GACrB,cAAc,GACd,cAAc,CACjB,CAAC;AAEF,KAAK,mCAAmC,GACpC,oCAAoC,GACpC,0BAA0B,GAC1B,iCAAiC,GACjC,8BAA8B,GAC9B,2BAA2B,CAAC;AAEhC,KAAK,6BAA6B,GAAG;KAClC,MAAM,IAAI,mCAAmC,GAAG,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;CACrF,CAAC;AAEF,UAAU,8BAA8B;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,gCAAgC,CAAC;CAC5C;AAED,KAAK,+BAA+B,GAAG;IACrC,YAAY,EAAE,YAAY,CAAC;IAC3B,gBAAgB,EAAE,gCAAgC,CAAC;CACpD,CAAC;AAoBF;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,6BAA6B,EACnC,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,+BAA+B,CAAC,CA4C1C"}
+{"version":3,"file":"assertion-promote-precommit.d.ts","sourceRoot":"","sources":["../../../src/internal/promote/assertion-promote-precommit.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,gCAAgC,EACtC,MAAM,qCAAqC,CAAC;AAM7C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACxE,KAAK,YAAY,GAAG,OAAO,CACzB,UAAU,CAAC,QAAQ,CAAC,oCAAoC,CAAC,CAAC,CAC3D,CAAC;AAEF,KAAK,gCAAgC,GAAG,IAAI,CAC1C,uBAAuB,EACrB,cAAc,GACd,iBAAiB,GACjB,qBAAqB,GACrB,cAAc,GACd,cAAc,CACjB,CAAC;AAEF,KAAK,mCAAmC,GACpC,oCAAoC,GACpC,0BAA0B,GAC1B,iCAAiC,GACjC,8BAA8B,GAC9B,2BAA2B,CAAC;AAEhC,KAAK,6BAA6B,GAAG;KAClC,MAAM,IAAI,mCAAmC,GAAG,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;CACrF,CAAC;AAEF,UAAU,8BAA8B;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,gCAAgC,CAAC;CAC5C;AAED,KAAK,+BAA+B,GAAG;IACrC,YAAY,EAAE,YAAY,CAAC;IAC3B,gBAAgB,EAAE,gCAAgC,CAAC;CACpD,CAAC;AAuBF;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CASxE;AAED,8DAA8D;AAC9D,eAAO,MAAM,iCAAiC,EAAE,SAAS,MAAM,EAAmC,CAAC;AAEnG;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,OAAQ,CAAC;AAEvD,yEAAyE;AACzE,MAAM,WAAW,2BAA2B;IAC1C,GAAG,IAAI,MAAM,CAAC;IACd,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAOD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,mCAAmC,CAAC,CAAC,EACzD,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACzB,MAAM,GAAE,2BAAiE,GACxE,OAAO,CAAC,CAAC,CAAC,CAiBZ;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,6BAA6B,EACnC,KAAK,EAAE,8BAA8B,EACrC,oBAAoB,CAAC,EAAE,2BAA2B,GACjD,OAAO,CAAC,+BAA+B,CAAC,CA+C1C"}

package/dist/internal/promote/assertion-promote-precommit.js

@@ -1,7 +1,12 @@
 // SPDX-License-Identifier: Apache-2.0
-import { createOperationContext } from '@origintrail-official/dkg-core';
+import { createOperationContext, isRfc64LegacySwmBoundaryRetirementInProgressError, } from '@origintrail-official/dkg-core';
 import { createPromoteRetryableFailure, } from '@origintrail-official/dkg-publisher';
 import { isContextGraphAuthorityUnavailableMarker, isRetryableContextGraphAuthorityUnavailableReason, } from '../context-graph-authority/context-graph-authority.js';
+/** An authority failure that can heal on its own (the shared classification). */
+function isRetryableAuthorityUnavailable(error) {
+    return isContextGraphAuthorityUnavailableMarker(error)
+        && isRetryableContextGraphAuthorityUnavailableReason(error.reason);
+}
 /**
  * Retry translation belongs to these concrete agent prerequisite callbacks;
  * which reasons are retryable is the shared authority classification.
@@ -11,19 +16,83 @@ async function resolvePromoteAuthority(resolve) {
         return await resolve();
     }
     catch (error) {
-        if (isContextGraphAuthorityUnavailableMarker(error)
-            && isRetryableContextGraphAuthorityUnavailableReason(error.reason)) {
+        if (isRetryableAuthorityUnavailable(error)) {
+            throw createPromoteRetryableFailure(error);
+        }
+        throw error;
+    }
+}
+/**
+ * The same translation for the root promote's boundary companion, which the
+ * publisher prepares synchronously. Only the retirement fence is transient:
+ * every other refusal from the prepare (unavailable persistence, the head
+ * limit, invalid input) is a hard failure and passes through unchanged.
+ */
+export function translateLegacySwmRetirementFence(prepare) {
+    try {
+        return prepare();
+    }
+    catch (error) {
+        if (isRfc64LegacySwmBoundaryRetirementInProgressError(error)) {
             throw createPromoteRetryableFailure(error);
         }
         throw error;
     }
 }
+/** Waits before each repeat of a promote's recipient read. */
+export const PROMOTE_RECIPIENT_RETRY_DELAYS_MS = Object.freeze([100, 300, 700]);
+/**
+ * No repeat starts later than this after the first read began. It sits below
+ * the chain authority read deadline, so a read that ran into that deadline is
+ * reported at once instead of being asked again.
+ */
+export const PROMOTE_RECIPIENT_RETRY_BUDGET_MS = 2_000;
+const REAL_PROMOTE_RECIPIENT_RETRY_TIMING = Object.freeze({
+    now: () => performance.now(),
+    sleep: (delayMs) => new Promise((resolve) => { setTimeout(resolve, delayMs); }),
+});
+/**
+ * Repeat a promote's recipient read while it fails with a retryable authority
+ * outage and the bound allows.
+ *
+ * The recipient read accepts its roster only while the node-wide authority
+ * facts revision stands still, and it gives up after a few attempts. Work that
+ * has nothing to do with this promote moves that revision: after a Context
+ * Graph is registered the node reconciles the new graph's gossip subscription
+ * several times within a few hundred milliseconds. A share sent straight after
+ * a registration can therefore use up those attempts and report the roster as
+ * temporarily unavailable, although no fact changed and the same read succeeds
+ * moments later.
+ *
+ * Repeating it is safe. It only reads authority and recipient keys, it fails
+ * closed every time, and the publisher asks for it before the attempt claims
+ * an operation id or writes Shared Memory. The bound is short on purpose: each
+ * repeat costs chain reads, and a failure that outlasts the bound is reported
+ * to the caller, which retries the whole promote.
+ */
+export async function resolvePromoteRecipientsWithinBound(resolve, timing = REAL_PROMOTE_RECIPIENT_RETRY_TIMING) {
+    const startedAt = timing.now();
+    for (let attempt = 0;; attempt += 1) {
+        try {
+            return await resolve();
+        }
+        catch (error) {
+            const delayMs = PROMOTE_RECIPIENT_RETRY_DELAYS_MS[attempt];
+            if (delayMs === undefined
+                || !isRetryableAuthorityUnavailable(error)
+                || timing.now() - startedAt + delayMs > PROMOTE_RECIPIENT_RETRY_BUDGET_MS) {
+                throw error;
+            }
+            await timing.sleep(delayMs);
+        }
+    }
+}
 /**
  * Resolve agent prerequisites without access to the committing publisher.
  * The publisher receives concrete, pre-wrapped recipient and curator callbacks,
  * not a policy that it could apply to arbitrary commit/finalization failures.
  */
-export async function prepareAssertionPromote(host, input) {
+export async function prepareAssertionPromote(host, input, recipientRetryTiming) {
     return resolvePromoteAuthority(async () => {
         const gossipSigner = await host.resolveWorkspaceGossipSigningAgent(input.contextGraphId);
         const confirmBeforeCommit = await host.buildCuratorAckConfirmer(input.contextGraphId, gossipSigner, {
@@ -52,7 +121,7 @@ export async function prepareAssertionPromote(host, input) {
                 confirmBeforeCommit: confirmBeforeCommit === undefined
                     ? undefined
                     : (message) => resolvePromoteAuthority(() => confirmBeforeCommit(message)),
-                resolveWorkspaceRecipients: (request) => resolvePromoteAuthority(() => host.resolveWorkspaceRecipientsGated(request)),
+                resolveWorkspaceRecipients: (request) => resolvePromoteAuthority(() => resolvePromoteRecipientsWithinBound(() => host.resolveWorkspaceRecipientsGated(request), recipientRetryTiming)),
                 ...(shareAccessPolicy !== undefined ? { accessPolicy: shareAccessPolicy } : {}),
                 ...(input.options?.allowedPeers !== undefined
                     ? { allowedPeers: [...input.options.allowedPeers] }

package/dist/internal/promote/assertion-promote-precommit.js.map

@@ -1 +1 @@
-{"version":3,"file":"assertion-promote-precommit.js","sourceRoot":"","sources":["../../../src/internal/promote/assertion-promote-precommit.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EACL,6BAA6B,GAE9B,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EACL,wCAAwC,EACxC,iDAAiD,GAClD,MAAM,uDAAuD,CAAC;AAsC/D;;;GAGG;AACH,KAAK,UAAU,uBAAuB,CAAI,OAAyB;IACjE,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,wCAAwC,CAAC,KAAK,CAAC;eAC5C,iDAAiD,CAAC,KAAK,CAAC,MAAM,CAAC,EAClE,CAAC;YACD,MAAM,6BAA6B,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAmC,EACnC,KAAqC;IAErC,OAAO,uBAAuB,CAAC,KAAK,IAAI,EAAE;QACxC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kCAAkC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACzF,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAC7D,KAAK,CAAC,cAAc,EACpB,YAAY,EACZ;YACE,eAAe,EAAE,KAAK,CAAC,OAAO,EAAE,eAAe;YAC/C,mBAAmB,EAAE,KAAK,CAAC,OAAO,EAAE,mBAAmB;SACxD,EACD,sBAAsB,CAAC,OAAO,CAAC,CAChC,CAAC;QAEF,IAAI,iBAAiB,GAAG,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC;QACpD,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAClF,IAAI,WAAW,CAAC,YAAY,KAAK,CAAC;gBAAE,iBAAiB,GAAG,WAAW,CAAC;iBAC/D,IAAI,WAAW,CAAC,YAAY,KAAK,CAAC;gBAAE,iBAAiB,GAAG,QAAQ,CAAC;iBACjE,IAAI,MAAM,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1E,iBAAiB,GAAG,WAAW,CAAC;YAClC,CAAC;QACH,CAAC;QAED,OAAO;YACL,YAAY;YACZ,gBAAgB,EAAE;gBAChB,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,KAAK,SAAS;oBAC3C,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE;oBAC9C,CAAC,CAAC,EAAE,CAAC;gBACP,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,kBAAkB,EAAE,YAAY,EAAE,YAAY;gBAC9C,mBAAmB,EAAE,mBAAmB,KAAK,SAAS;oBACpD,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;gBAC5E,0BAA0B,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,uBAAuB,CAC9D,GAAG,EAAE,CAAC,IAAI,CAAC,+BAA+B,CAAC,OAAO,CAAC,CACpD;gBACD,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/E,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,KAAK,SAAS;oBAC3C,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE;oBACnD,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"assertion-promote-precommit.js","sourceRoot":"","sources":["../../../src/internal/promote/assertion-promote-precommit.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EACL,sBAAsB,EACtB,iDAAiD,GAClD,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,6BAA6B,GAE9B,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EACL,wCAAwC,EACxC,iDAAiD,GAClD,MAAM,uDAAuD,CAAC;AAsC/D,iFAAiF;AACjF,SAAS,+BAA+B,CAAC,KAAc;IACrD,OAAO,wCAAwC,CAAC,KAAK,CAAC;WACjD,iDAAiD,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACvE,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,uBAAuB,CAAI,OAAyB;IACjE,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,+BAA+B,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,6BAA6B,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iCAAiC,CAAI,OAAgB;IACnE,IAAI,CAAC;QACH,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,iDAAiD,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,6BAA6B,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,MAAM,iCAAiC,GAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAEnG;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,KAAK,CAAC;AAQvD,MAAM,mCAAmC,GAAgC,MAAM,CAAC,MAAM,CAAC;IACrF,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;IAC5B,KAAK,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;CAC9F,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,OAAyB,EACzB,SAAsC,mCAAmC;IAEzE,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;IAC/B,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;YAC3D,IACE,OAAO,KAAK,SAAS;mBAClB,CAAC,+BAA+B,CAAC,KAAK,CAAC;mBACvC,MAAM,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,OAAO,GAAG,iCAAiC,EACzE,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAmC,EACnC,KAAqC,EACrC,oBAAkD;IAElD,OAAO,uBAAuB,CAAC,KAAK,IAAI,EAAE;QACxC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kCAAkC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACzF,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAC7D,KAAK,CAAC,cAAc,EACpB,YAAY,EACZ;YACE,eAAe,EAAE,KAAK,CAAC,OAAO,EAAE,eAAe;YAC/C,mBAAmB,EAAE,KAAK,CAAC,OAAO,EAAE,mBAAmB;SACxD,EACD,sBAAsB,CAAC,OAAO,CAAC,CAChC,CAAC;QAEF,IAAI,iBAAiB,GAAG,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC;QACpD,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAClF,IAAI,WAAW,CAAC,YAAY,KAAK,CAAC;gBAAE,iBAAiB,GAAG,WAAW,CAAC;iBAC/D,IAAI,WAAW,CAAC,YAAY,KAAK,CAAC;gBAAE,iBAAiB,GAAG,QAAQ,CAAC;iBACjE,IAAI,MAAM,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1E,iBAAiB,GAAG,WAAW,CAAC;YAClC,CAAC;QACH,CAAC;QAED,OAAO;YACL,YAAY;YACZ,gBAAgB,EAAE;gBAChB,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,KAAK,SAAS;oBAC3C,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE;oBAC9C,CAAC,CAAC,EAAE,CAAC;gBACP,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,kBAAkB,EAAE,YAAY,EAAE,YAAY;gBAC9C,mBAAmB,EAAE,mBAAmB,KAAK,SAAS;oBACpD,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;gBAC5E,0BAA0B,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,uBAAuB,CAC9D,GAAG,EAAE,CAAC,mCAAmC,CACvC,GAAG,EAAE,CAAC,IAAI,CAAC,+BAA+B,CAAC,OAAO,CAAC,EACnD,oBAAoB,CACrB,CACF;gBACD,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/E,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,KAAK,SAAS;oBAC3C,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE;oBACnD,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/internal/storage-ack-owned-request.d.ts

@@ -0,0 +1,16 @@
+import { type ACKCollectorDeps } from '@origintrail-official/dkg-publisher';
+interface ACKReliableMessenger {
+    sendRequestOwned(peerId: string, protocol: string, data: Uint8Array, opts: {
+        timeoutMs: number;
+    }): Promise<{
+        delivered: boolean;
+        error?: unknown;
+        response?: Uint8Array;
+    }>;
+}
+export declare function createACKSendP2P(input: {
+    messenger: ACKReliableMessenger;
+    timeoutMs: number;
+}): ACKCollectorDeps['sendP2P'];
+export {};
+//# sourceMappingURL=storage-ack-owned-request.d.ts.map

package/dist/internal/storage-ack-owned-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-ack-owned-request.d.ts","sourceRoot":"","sources":["../../src/internal/storage-ack-owned-request.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAE5E,UAAU,oBAAoB;IAC5B,gBAAgB,CACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAC1B,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;CAC5E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,SAAS,EAAE,oBAAoB,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAa9B"}

package/dist/internal/storage-ack-owned-request.js

@@ -0,0 +1,16 @@
+// SPDX-License-Identifier: Apache-2.0
+export function createACKSendP2P(input) {
+    return async (peerId, protocol, data) => {
+        const sendResult = await input.messenger.sendRequestOwned(peerId, protocol, data, {
+            timeoutMs: input.timeoutMs,
+        });
+        if (!sendResult.delivered) {
+            throw new Error(`substrate send already in flight (transport): ${sendResult.error}`);
+        }
+        if (!sendResult.response) {
+            throw new Error('substrate delivered (transport) without response');
+        }
+        return sendResult.response;
+    };
+}
+//# sourceMappingURL=storage-ack-owned-request.js.map

package/dist/internal/storage-ack-owned-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-ack-owned-request.js","sourceRoot":"","sources":["../../src/internal/storage-ack-owned-request.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAatC,MAAM,UAAU,gBAAgB,CAAC,KAGhC;IACC,OAAO,KAAK,EAAE,MAAc,EAAE,QAAgB,EAAE,IAAgB,EAAE,EAAE;QAClE,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;YAChF,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,iDAAiD,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,CAAC;IAC7B,CAAC,CAAC;AACJ,CAAC"}

package/dist/internal/vm-reconcile-local-admission-wait.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Graphs waiting for node-local sync admission, served in turn.
+ *
+ * A reconcile pass that the node's own sync admission refused has nothing to
+ * gain from running again while that capacity is still in use: every repeat
+ * costs the pass's chain reads and is refused the same way, and every waiting
+ * graph pays them at once. This component owns the wait instead. A refused
+ * graph is kept in arrival order and nudged once the admission can take its
+ * fetch, one graph at a time.
+ *
+ * A pass that could not start its work at all, because the source it had to
+ * ask did not answer, waits here too (see {@link VmReconcileLocalAdmissionWait.defer}).
+ *
+ * It owns no sync lease and no VM worker. A nudge re-enters the ordinary
+ * bounded dispatcher, and the periodic sweep still visits a waiting graph.
+ */
+export interface LocalAdmissionWaitOptions {
+    signal?: AbortSignal;
+    isCurrent: () => boolean;
+    /** Whether the node's sync admission would take this graph's fetch right now. */
+    canAdmit: () => boolean;
+}
+/** One pass of a graph, from the moment it started. */
+export interface LocalAdmissionPass {
+    readonly key: string;
+    /** The graph's place in the wait when the pass started, if it had one. */
+    readonly waiting: object | undefined;
+}
+export interface VmReconcileLocalAdmissionWaitDeps {
+    /**
+     * Nudge one graph and return its pass's completion. Undefined when the
+     * nudge was not admitted (held after a failed pass, or no queue room).
+     * `deferred` says the graph was parked by `defer`, so the hold a failed
+     * pass leaves is its own and this nudge is the retry.
+     */
+    readonly nudge: (key: string, deferred: boolean) => Promise<unknown> | undefined;
+    /** Bound on retained waiters. */
+    readonly maxWaiters: number;
+}
+export declare class VmReconcileLocalAdmissionWait {
+    private readonly deps;
+    /** Waiting graphs, in the order they are served. */
+    private readonly waiters;
+    /** The waiter nudged last, until its pass settles. */
+    private turn;
+    /** No waiter is nudged before this time: a nudged pass was refused all the same. */
+    private holdUntil;
+    private timer;
+    private closed;
+    constructor(deps: VmReconcileLocalAdmissionWaitDeps);
+    /**
+     * The node's sync admission refused this graph's fetch. `canAdmit` reads the
+     * admission the fetch will ask. Every waiter uses this readiness contract.
+     */
+    retry(key: string, options: LocalAdmissionWaitOptions): void;
+    /**
+     * A graph that just used the node's sync admission and has more to fetch
+     * goes behind the graphs already waiting for it. Returns false, and parks
+     * nothing, when no other graph is waiting.
+     */
+    yieldTurn(key: string, options: LocalAdmissionWaitOptions): boolean;
+    /**
+     * A pass ended before its work started: the source it had to ask gave no
+     * answer. Nothing here can read when it will, so the graph goes behind the
+     * others and no waiter is nudged for one delay. A graph that keeps getting
+     * no answer then costs one short pass per delay, in turn with the rest.
+     * `canAdmit` is the same readiness contract as for a refused fetch: the
+     * graph is not asked again while its fetch could not start anyway.
+     *
+     * Returns `again` when the pass was this wait's own nudge, `parked` when it
+     * came from elsewhere, and undefined when the graph was not taken.
+     */
+    defer(key: string, options: LocalAdmissionWaitOptions): 'parked' | 'again' | undefined;
+    /** A pass of this graph is starting. Hand the result to {@link passEnded}. */
+    passStarted(key: string): LocalAdmissionPass;
+    /**
+     * The pass ended. A graph whose place in the wait is still the one it had
+     * when the pass started was not refused again, so it is no longer waiting.
+     * Whatever the pass used is free now, so this is also when the next waiter
+     * can go.
+     */
+    passEnded(pass: LocalAdmissionPass): void;
+    close(): void;
+    private park;
+    private remove;
+    /**
+     * Nudge the longest waiter the node's sync admission can take, unless a
+     * nudged pass is still out. Waiters are read in arrival order and one that
+     * cannot be admitted yet is passed over, so a graph with capacity of its own
+     * is not held behind one without.
+     */
+    private wake;
+    /** One timer for the whole wait: the next delay to run out, else a capacity re-read per interval. */
+    private armTimer;
+}
+//# sourceMappingURL=vm-reconcile-local-admission-wait.d.ts.map

package/dist/internal/vm-reconcile-local-admission-wait.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vm-reconcile-local-admission-wait.d.ts","sourceRoot":"","sources":["../../src/internal/vm-reconcile-local-admission-wait.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAYH,MAAM,WAAW,yBAAyB;IACxC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,OAAO,CAAC;IACzB,iFAAiF;IACjF,QAAQ,EAAE,MAAM,OAAO,CAAC;CACzB;AAQD,uDAAuD;AACvD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,iCAAiC;IAChD;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;IACjF,iCAAiC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAWD,qBAAa,6BAA6B;IAU5B,OAAO,CAAC,QAAQ,CAAC,IAAI;IATjC,oDAAoD;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,sDAAsD;IACtD,OAAO,CAAC,IAAI,CAAiD;IAC7D,oFAAoF;IACpF,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,KAAK,CAA4C;IACzD,OAAO,CAAC,MAAM,CAAS;gBAEM,IAAI,EAAE,iCAAiC;IAEpE;;;OAGG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,GAAG,IAAI;IAY5D;;;;OAIG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,GAAG,OAAO;IAYnE;;;;;;;;;;OAUG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS;IAStF,8EAA8E;IAC9E,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB;IAI5C;;;;;OAKG;IACH,SAAS,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI;IAOzC,KAAK,IAAI,IAAI;IAOb,OAAO,CAAC,IAAI;IAkCZ,OAAO,CAAC,MAAM;IAOd;;;;;OAKG;IACH,OAAO,CAAC,IAAI;IA6BZ,qGAAqG;IACrG,OAAO,CAAC,QAAQ;CAejB"}