@origintrail-official/dkg-agent 10.0.22 → 10.0.23

package/dist/approved-private-replica-proof-runs.d.ts

@@ -0,0 +1,40 @@
+import { type ApprovedPrivateReplicaAuthorityResolution } from './approved-private-replica.js';
+import type { DKGAgent } from './dkg-agent.js';
+/** Runs of the local proof one decision may use: the first and two more. */
+export declare const APPROVED_PRIVATE_REPLICA_PROOF_MAX_RUNS = 3;
+/** Why a run said nothing about the member, so the proof may run again. */
+export type ApprovedPrivateReplicaProofRerunCause = 'metadata-moved' | 'timeout';
+export type ApprovedPrivateReplicaProofOutcome = Readonly<{
+    kind: 'proved';
+    resolution: ApprovedPrivateReplicaAuthorityResolution;
+}>
+/** A run read unmoved metadata to the end and found no current proof. */
+ | Readonly<{
+    kind: 'absent';
+}>
+/** Every run was discarded because the graph's metadata moved while it read. */
+ | Readonly<{
+    kind: 'metadata-moved';
+}>;
+/**
+ * Run the approved member's local proof for one decision, and run it again
+ * where a run said nothing about the member: its time limit ended it, or the
+ * graph's metadata revision moved under reads that otherwise all held.
+ *
+ * Nothing is relaxed. Each run is the complete proof under its own time limit
+ * and its own revision fence, the approval is read again before each run, and
+ * every run is held to the request generation the first one read. A run that
+ * finds anything else (no approval, another generation, a pending registration,
+ * a failed read) ends the decision exactly as a single run does: `absent`, or
+ * the error it threw. So does the last permitted run, whatever its cause.
+ */
+export declare function resolveApprovedPrivateReplicaAuthorityWithinRuns(agent: DKGAgent, contextGraphId: string, approvedAgentAddress: string, fences: {
+    readonly approvalStillHolds: () => boolean;
+    readonly readMetadataRevision: () => string;
+}, options: {
+    readonly timeoutMs: number;
+    readonly signal?: AbortSignal;
+    /** Told before each further run, for the log. */
+    readonly onRerun?: (cause: ApprovedPrivateReplicaProofRerunCause, run: number) => void;
+}): Promise<ApprovedPrivateReplicaProofOutcome>;
+//# sourceMappingURL=approved-private-replica-proof-runs.d.ts.map

package/dist/approved-private-replica-proof-runs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approved-private-replica-proof-runs.d.ts","sourceRoot":"","sources":["../src/approved-private-replica-proof-runs.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,yCAAyC,EAC/C,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C,4EAA4E;AAC5E,eAAO,MAAM,uCAAuC,IAAI,CAAC;AAEzD,2EAA2E;AAC3E,MAAM,MAAM,qCAAqC,GAAG,gBAAgB,GAAG,SAAS,CAAC;AAEjF,MAAM,MAAM,kCAAkC,GAC1C,QAAQ,CAAC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,UAAU,EAAE,yCAAyC,CAAA;CAAE,CAAC;AACrF,yEAAyE;GACvE,QAAQ,CAAC;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAC9B,gFAAgF;GAC9E,QAAQ,CAAC;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,CAAC,CAAC;AAEzC;;;;;;;;;;;GAWG;AACH,wBAAsB,gDAAgD,CACpE,KAAK,EAAE,QAAQ,EACf,cAAc,EAAE,MAAM,EACtB,oBAAoB,EAAE,MAAM,EAC5B,MAAM,EAAE;IACN,QAAQ,CAAC,kBAAkB,EAAE,MAAM,OAAO,CAAC;IAC3C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,MAAM,CAAC;CAC7C,EACD,OAAO,EAAE;IACP,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,iDAAiD;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,qCAAqC,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACxF,GACA,OAAO,CAAC,kCAAkC,CAAC,CAsC7C"}

package/dist/approved-private-replica-proof-runs.js

@@ -0,0 +1,49 @@
+// SPDX-License-Identifier: Apache-2.0
+import { resolveApprovedPrivateReplicaAuthority, } from './approved-private-replica.js';
+import { isBoundedOperationTimeoutError, runBoundedOperation } from './bounded-operation.js';
+/** Runs of the local proof one decision may use: the first and two more. */
+export const APPROVED_PRIVATE_REPLICA_PROOF_MAX_RUNS = 3;
+/**
+ * Run the approved member's local proof for one decision, and run it again
+ * where a run said nothing about the member: its time limit ended it, or the
+ * graph's metadata revision moved under reads that otherwise all held.
+ *
+ * Nothing is relaxed. Each run is the complete proof under its own time limit
+ * and its own revision fence, the approval is read again before each run, and
+ * every run is held to the request generation the first one read. A run that
+ * finds anything else (no approval, another generation, a pending registration,
+ * a failed read) ends the decision exactly as a single run does: `absent`, or
+ * the error it threw. So does the last permitted run, whatever its cause.
+ */
+export async function resolveApprovedPrivateReplicaAuthorityWithinRuns(agent, contextGraphId, approvedAgentAddress, fences, options) {
+    let requestGeneration;
+    const acceptsRequestGeneration = (observed) => ((requestGeneration ??= observed) === observed);
+    for (let run = 1;; run += 1) {
+        const metadataRevision = fences.readMetadataRevision();
+        let metadataMoved = false;
+        let timeout;
+        try {
+            const resolution = await runBoundedOperation((signal) => resolveApprovedPrivateReplicaAuthority(agent, contextGraphId, approvedAgentAddress, fences.approvalStillHolds, () => fences.readMetadataRevision() === metadataRevision, signal, { acceptsRequestGeneration, metadataMoved: () => { metadataMoved = true; } }), {
+                label: `resolveApprovedPrivateReplicaAuthority(${contextGraphId})`,
+                timeoutMs: options.timeoutMs,
+                signal: options.signal,
+            });
+            if (resolution !== null)
+                return { kind: 'proved', resolution };
+            if (!metadataMoved)
+                return { kind: 'absent' };
+        }
+        catch (error) {
+            if (!isBoundedOperationTimeoutError(error))
+                throw error;
+            timeout = error;
+        }
+        if (run >= APPROVED_PRIVATE_REPLICA_PROOF_MAX_RUNS || !fences.approvalStillHolds()) {
+            if (timeout !== undefined)
+                throw timeout;
+            return { kind: 'metadata-moved' };
+        }
+        options.onRerun?.(timeout === undefined ? 'metadata-moved' : 'timeout', run + 1);
+    }
+}
+//# sourceMappingURL=approved-private-replica-proof-runs.js.map

package/dist/approved-private-replica-proof-runs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approved-private-replica-proof-runs.js","sourceRoot":"","sources":["../src/approved-private-replica-proof-runs.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EACL,sCAAsC,GAEvC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,8BAA8B,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAG7F,4EAA4E;AAC5E,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC;AAYzD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gDAAgD,CACpE,KAAe,EACf,cAAsB,EACtB,oBAA4B,EAC5B,MAGC,EACD,OAKC;IAED,IAAI,iBAAqC,CAAC;IAC1C,MAAM,wBAAwB,GAAG,CAAC,QAAgB,EAAW,EAAE,CAAC,CAC9D,CAAC,iBAAiB,KAAK,QAAQ,CAAC,KAAK,QAAQ,CAC9C,CAAC;IACF,KAAK,IAAI,GAAG,GAAG,CAAC,GAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,gBAAgB,GAAG,MAAM,CAAC,oBAAoB,EAAE,CAAC;QACvD,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAC1C,CAAC,MAAM,EAAE,EAAE,CAAC,sCAAsC,CAChD,KAAK,EACL,cAAc,EACd,oBAAoB,EACpB,MAAM,CAAC,kBAAkB,EACzB,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,gBAAgB,EACxD,MAAM,EACN,EAAE,wBAAwB,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAC7E,EACD;gBACE,KAAK,EAAE,0CAA0C,cAAc,GAAG;gBAClE,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CACF,CAAC;YACF,IAAI,UAAU,KAAK,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;YAC/D,IAAI,CAAC,aAAa;gBAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,8BAA8B,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YACxD,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;QACD,IAAI,GAAG,IAAI,uCAAuC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,CAAC;YACnF,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,OAAO,CAAC;YACzC,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;QACpC,CAAC;QACD,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IACnF,CAAC;AACH,CAAC"}

package/dist/approved-private-replica.d.ts

@@ -43,6 +43,23 @@ export type ApprovedPrivateReplicaAuthorityResolution = Readonly<{
     onChainId: string;
     authority: ApprovedPrivateReplicaAuthority;
 }>;
+/**
+ * Hooks for a caller that may run the proof again for the same decision. Both
+ * can only take a result away from a run; neither can add one.
+ */
+export interface ApprovedPrivateReplicaProofRun {
+    /**
+     * Called with the generation of the approved request the run starts from.
+     * `false` ends the run without a proof, which is how every run of one
+     * decision is held to the generation the first one read.
+     */
+    acceptsRequestGeneration(requestGeneration: string): boolean;
+    /**
+     * Called when a run is discarded for a moved metadata revision and nothing
+     * else: every check before that one held.
+     */
+    metadataMoved(): void;
+}
 /**
  * Resolve the current authority proved by a durable approved private join.
  *
@@ -50,5 +67,5 @@ export type ApprovedPrivateReplicaAuthorityResolution = Readonly<{
  * source-qualified private roster. Callers must independently establish exact
  * finalized chain-name absence before treating the graph as unregistered.
  */
-export declare function resolveApprovedPrivateReplicaAuthority(agent: DKGAgent, contextGraphId: string, approvedAgentAddress: string | undefined, approvalStillHolds: () => boolean, metadataStillCurrent: () => boolean, signal?: AbortSignal): Promise<ApprovedPrivateReplicaAuthorityResolution | null>;
+export declare function resolveApprovedPrivateReplicaAuthority(agent: DKGAgent, contextGraphId: string, approvedAgentAddress: string | undefined, approvalStillHolds: () => boolean, metadataStillCurrent: () => boolean, signal?: AbortSignal, run?: ApprovedPrivateReplicaProofRun): Promise<ApprovedPrivateReplicaAuthorityResolution | null>;
 //# sourceMappingURL=approved-private-replica.d.ts.map

package/dist/approved-private-replica.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approved-private-replica.d.ts","sourceRoot":"","sources":["../src/approved-private-replica.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAK/C,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C;;;;;;OAMG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChD;AAED;;;;GAIG;AACH,wBAAgB,wCAAwC,CACtD,SAAS,EAAE,+BAA+B,EAC1C,KAAK,SAAa,GACjB,OAAO,CAGT;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,yCAAyC,GACjD,QAAQ,CAAC;IACP,IAAI,EAAE,8BAA8B,CAAC;IACrC,SAAS,EAAE,+BAA+B,CAAC;CAC5C,CAAC,GACF,QAAQ,CAAC;IACP,IAAI,EAAE,2BAA2B,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,+BAA+B,CAAC;CAC5C,CAAC,CAAC;AA4BP;;;;;;GAMG;AACH,wBAAsB,sCAAsC,CAC1D,KAAK,EAAE,QAAQ,EACf,cAAc,EAAE,MAAM,EACtB,oBAAoB,EAAE,MAAM,GAAG,SAAS,EACxC,kBAAkB,EAAE,MAAM,OAAO,EACjC,oBAAoB,EAAE,MAAM,OAAO,EACnC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,yCAAyC,GAAG,IAAI,CAAC,CA4G3D"}
+{"version":3,"file":"approved-private-replica.d.ts","sourceRoot":"","sources":["../src/approved-private-replica.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAK/C,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C;;;;;;OAMG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChD;AAED;;;;GAIG;AACH,wBAAgB,wCAAwC,CACtD,SAAS,EAAE,+BAA+B,EAC1C,KAAK,SAAa,GACjB,OAAO,CAGT;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,yCAAyC,GACjD,QAAQ,CAAC;IACP,IAAI,EAAE,8BAA8B,CAAC;IACrC,SAAS,EAAE,+BAA+B,CAAC;CAC5C,CAAC,GACF,QAAQ,CAAC;IACP,IAAI,EAAE,2BAA2B,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,+BAA+B,CAAC;CAC5C,CAAC,CAAC;AAEP;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C;;;;OAIG;IACH,wBAAwB,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC;IAC7D;;;OAGG;IACH,aAAa,IAAI,IAAI,CAAC;CACvB;AA4BD;;;;;;GAMG;AACH,wBAAsB,sCAAsC,CAC1D,KAAK,EAAE,QAAQ,EACf,cAAc,EAAE,MAAM,EACtB,oBAAoB,EAAE,MAAM,GAAG,SAAS,EACxC,kBAAkB,EAAE,MAAM,OAAO,EACjC,oBAAoB,EAAE,MAAM,OAAO,EACnC,MAAM,CAAC,EAAE,WAAW,EACpB,GAAG,CAAC,EAAE,8BAA8B,GACnC,OAAO,CAAC,yCAAyC,GAAG,IAAI,CAAC,CAiH3D"}

package/dist/approved-private-replica.js

@@ -48,7 +48,7 @@ function parseRegisteredMetaOnChainId(bindings) {
  * source-qualified private roster. Callers must independently establish exact
  * finalized chain-name absence before treating the graph as unregistered.
  */
-export async function resolveApprovedPrivateReplicaAuthority(agent, contextGraphId, approvedAgentAddress, approvalStillHolds, metadataStillCurrent, signal) {
+export async function resolveApprovedPrivateReplicaAuthority(agent, contextGraphId, approvedAgentAddress, approvalStillHolds, metadataStillCurrent, signal, run) {
     const approved = approvedAgentAddress?.toLowerCase();
     const hasLocalAgent = () => agent.listLocalAgents().some(({ agentAddress }) => agentAddress.toLowerCase() === approved);
     if (!approved || !hasLocalAgent())
@@ -64,6 +64,8 @@ export async function resolveApprovedPrivateReplicaAuthority(agent, contextGraph
         || !EVM_ADDRESS.test(state.curatorAgentAddress)
         || state.curatorAgentAddress === ZERO_ADDRESS)
         return null;
+    if (run?.acceptsRequestGeneration(state.requestGeneration) === false)
+        return null;
     const ownerAddress = state.curatorAgentAddress;
     const meta = await agent.getOwnCgMetaFacts(contextGraphId, { signal });
     const owners = new Set(meta.curators.map((did) => did
@@ -111,9 +113,13 @@ export async function resolveApprovedPrivateReplicaAuthority(agent, contextGraph
         || current.requestGeneration !== state.requestGeneration
         || current.curatorPeerId !== state.curatorPeerId
         || current.curatorAgentAddress !== ownerAddress
-        || current.curatorAuthorityEra !== '0'
-        || !metadataStillCurrent())
+        || current.curatorAuthorityEra !== '0')
+        return null;
+    // Checked last, so a run discarded here had every earlier check hold.
+    if (!metadataStillCurrent()) {
+        run?.metadataMoved();
         return null;
+    }
     // The proof query embeds its start time. Recheck the deadline it proved
     // after every await so a delegation cannot expire while the read is in
     // flight and still authorize the replica.

package/dist/approved-private-replica.js.map

@@ -1 +1 @@
-{"version":3,"file":"approved-private-replica.js","sourceRoot":"","sources":["../src/approved-private-replica.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EACL,sCAAsC,EACtC,mCAAmC,GACpC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,6CAA6C,GAC9C,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,sCAAsC,EAAE,MAAM,kCAAkC,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,MAAM,YAAY,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AAwB3C;;;;GAIG;AACH,MAAM,UAAU,wCAAwC,CACtD,SAA0C,EAC1C,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;IAElB,OAAO,SAAS,CAAC,qBAAqB,KAAK,SAAS;WAC/C,sCAAsC,CAAC,SAAS,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;AACtF,CAAC;AAsBD;;;;GAIG;AACH,SAAS,4BAA4B,CACnC,QAAqD;IAErD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC7C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,UAAU,GAAG,IAAI,CAAC;YAClB,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,sCAAsC,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;IACxC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,UAAU;QAAE,OAAO,SAAS,CAAC;IACjC,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,KAAe,EACf,cAAsB,EACtB,oBAAwC,EACxC,kBAAiC,EACjC,oBAAmC,EACnC,MAAoB;IAEpB,MAAM,QAAQ,GAAG,oBAAoB,EAAE,WAAW,EAAE,CAAC;IACrD,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,IAAI,CACtD,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,QAAQ,CAC9D,CAAC;IACF,IAAI,CAAC,QAAQ,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO,IAAI,CAAC;IAC/C,8EAA8E;IAC9E,wEAAwE;IACxE,4CAA4C;IAC5C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,6BAA6B,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAClF,IACE,KAAK,EAAE,MAAM,KAAK,UAAU;WACzB,CAAC,KAAK,CAAC,aAAa;WACpB,KAAK,CAAC,mBAAmB,KAAK,GAAG;WACjC,CAAC,KAAK,CAAC,mBAAmB;WAC1B,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;WAC5C,KAAK,CAAC,mBAAmB,KAAK,YAAY;QAC7C,OAAO,IAAI,CAAC;IAEd,MAAM,YAAY,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG;SAClD,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,kBAAkB,GAAG,MAAM,KAAK,CAAC,uCAAuC,CAAC,cAAc,CAAC,CAAC;IAC/F,IACE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,SAAS;WAClD,MAAM,CAAC,IAAI,KAAK,CAAC;WACjB,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;WACzB,QAAQ,CAAC,IAAI,KAAK,CAAC;WACnB,CAAC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,aAAa,EAAE,CAAC;QACxD,sEAAsE;QACtE,2EAA2E;QAC3E,kEAAkE;WAC/D,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;WAC3E,kBAAkB,KAAK,SAAS;QACnC,OAAO,IAAI,CAAC;IAEd,uEAAuE;IACvE,wEAAwE;IACxE,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,6CAA6C,CACjF,cAAc,EACd,EAAE,oBAAoB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,KAAK,CAAC,MAAM,EAAE,CAC1E,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC,CAAC;IACpE,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,gBAAgB,GAAG,mCAAmC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7E,IAAI,gBAAgB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,uBAAuB,GAAG,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7E,IAAI,uBAAuB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEvD,0EAA0E;IAC1E,oEAAoE;IACpE,4EAA4E;IAC5E,+CAA+C;IAC/C,MAAM,yBAAyB,GAAG,MAAM,KAAK;SAC1C,uCAAuC,CAAC,cAAc,CAAC,CAAC;IAC3D,IACE,yBAAyB,KAAK,SAAS;WACpC,CACD,uBAAuB,KAAK,IAAI;eAC7B,yBAAyB,KAAK,cAAc,CAChD,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,6BAA6B,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACpF,IACE,CAAC,kBAAkB,EAAE;WAClB,CAAC,aAAa,EAAE;WAChB,OAAO,EAAE,MAAM,KAAK,UAAU;WAC9B,OAAO,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;WACrD,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;WAC7C,OAAO,CAAC,mBAAmB,KAAK,YAAY;WAC5C,OAAO,CAAC,mBAAmB,KAAK,GAAG;WACnC,CAAC,oBAAoB,EAAE;QAC1B,OAAO,IAAI,CAAC;IAEd,wEAAwE;IACxE,uEAAuE;IACvE,0CAA0C;IAC1C,IAAI,CAAC,sCAAsC,CAAC,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3E,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,oBAAoB,EAAE,QAAQ;QAC9B,YAAY;QACZ,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,0EAA0E;QAC1E,sEAAsE;QACtE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC1C,sEAAsE;QACtE,yEAAyE;QACzE,8BAA8B;QAC9B,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;QACnD,qBAAqB,EAAE,gBAAgB;KACxC,CAAC,CAAC;IACH,IAAI,uBAAuB,KAAK,IAAI,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,2BAA2B;YACjC,SAAS,EAAE,uBAAuB;YAClC,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,8BAA8B;QACpC,SAAS;KACV,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"approved-private-replica.js","sourceRoot":"","sources":["../src/approved-private-replica.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EACL,sCAAsC,EACtC,mCAAmC,GACpC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,6CAA6C,GAC9C,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,sCAAsC,EAAE,MAAM,kCAAkC,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,MAAM,YAAY,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AAwB3C;;;;GAIG;AACH,MAAM,UAAU,wCAAwC,CACtD,SAA0C,EAC1C,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;IAElB,OAAO,SAAS,CAAC,qBAAqB,KAAK,SAAS;WAC/C,sCAAsC,CAAC,SAAS,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;AACtF,CAAC;AAwCD;;;;GAIG;AACH,SAAS,4BAA4B,CACnC,QAAqD;IAErD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC7C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,UAAU,GAAG,IAAI,CAAC;YAClB,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,sCAAsC,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;IACxC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,UAAU;QAAE,OAAO,SAAS,CAAC;IACjC,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,KAAe,EACf,cAAsB,EACtB,oBAAwC,EACxC,kBAAiC,EACjC,oBAAmC,EACnC,MAAoB,EACpB,GAAoC;IAEpC,MAAM,QAAQ,GAAG,oBAAoB,EAAE,WAAW,EAAE,CAAC;IACrD,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,IAAI,CACtD,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,QAAQ,CAC9D,CAAC;IACF,IAAI,CAAC,QAAQ,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO,IAAI,CAAC;IAC/C,8EAA8E;IAC9E,wEAAwE;IACxE,4CAA4C;IAC5C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,6BAA6B,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAClF,IACE,KAAK,EAAE,MAAM,KAAK,UAAU;WACzB,CAAC,KAAK,CAAC,aAAa;WACpB,KAAK,CAAC,mBAAmB,KAAK,GAAG;WACjC,CAAC,KAAK,CAAC,mBAAmB;WAC1B,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;WAC5C,KAAK,CAAC,mBAAmB,KAAK,YAAY;QAC7C,OAAO,IAAI,CAAC;IACd,IAAI,GAAG,EAAE,wBAAwB,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAElF,MAAM,YAAY,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG;SAClD,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,kBAAkB,GAAG,MAAM,KAAK,CAAC,uCAAuC,CAAC,cAAc,CAAC,CAAC;IAC/F,IACE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,SAAS;WAClD,MAAM,CAAC,IAAI,KAAK,CAAC;WACjB,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;WACzB,QAAQ,CAAC,IAAI,KAAK,CAAC;WACnB,CAAC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,aAAa,EAAE,CAAC;QACxD,sEAAsE;QACtE,2EAA2E;QAC3E,kEAAkE;WAC/D,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;WAC3E,kBAAkB,KAAK,SAAS;QACnC,OAAO,IAAI,CAAC;IAEd,uEAAuE;IACvE,wEAAwE;IACxE,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,6CAA6C,CACjF,cAAc,EACd,EAAE,oBAAoB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,KAAK,CAAC,MAAM,EAAE,CAC1E,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC,CAAC;IACpE,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,gBAAgB,GAAG,mCAAmC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7E,IAAI,gBAAgB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,uBAAuB,GAAG,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7E,IAAI,uBAAuB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEvD,0EAA0E;IAC1E,oEAAoE;IACpE,4EAA4E;IAC5E,+CAA+C;IAC/C,MAAM,yBAAyB,GAAG,MAAM,KAAK;SAC1C,uCAAuC,CAAC,cAAc,CAAC,CAAC;IAC3D,IACE,yBAAyB,KAAK,SAAS;WACpC,CACD,uBAAuB,KAAK,IAAI;eAC7B,yBAAyB,KAAK,cAAc,CAChD,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,6BAA6B,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACpF,IACE,CAAC,kBAAkB,EAAE;WAClB,CAAC,aAAa,EAAE;WAChB,OAAO,EAAE,MAAM,KAAK,UAAU;WAC9B,OAAO,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;WACrD,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;WAC7C,OAAO,CAAC,mBAAmB,KAAK,YAAY;WAC5C,OAAO,CAAC,mBAAmB,KAAK,GAAG;QACtC,OAAO,IAAI,CAAC;IACd,sEAAsE;IACtE,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;QAC5B,GAAG,EAAE,aAAa,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wEAAwE;IACxE,uEAAuE;IACvE,0CAA0C;IAC1C,IAAI,CAAC,sCAAsC,CAAC,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3E,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,oBAAoB,EAAE,QAAQ;QAC9B,YAAY;QACZ,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,0EAA0E;QAC1E,sEAAsE;QACtE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC1C,sEAAsE;QACtE,yEAAyE;QACzE,8BAA8B;QAC9B,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;QACnD,qBAAqB,EAAE,gBAAgB;KACxC,CAAC,CAAC;IACH,IAAI,uBAAuB,KAAK,IAAI,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,2BAA2B;YACjC,SAAS,EAAE,uBAAuB;YAClC,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,8BAA8B;QACpC,SAAS;KACV,CAAC,CAAC;AACL,CAAC"}

package/dist/context-graph-chain-discovery-binding.d.ts

@@ -1,4 +1,6 @@
 import type { ChainAdapter, ContextGraphOnChain } from '@origintrail-official/dkg-chain';
+/** Automatic discovery may fill a binding, but cannot replace an owned canonical slot. */
+export declare function conflictsWithOwnedContextGraphBinding(currentId: string | undefined, incomingId: string | undefined): boolean;
 export type DiscoveredContextGraphBinding = {
     kind: 'unrevealed';
     registryNameHash: string | null;

package/dist/context-graph-chain-discovery-binding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-graph-chain-discovery-binding.d.ts","sourceRoot":"","sources":["../src/context-graph-chain-discovery-binding.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAEzF,MAAM,MAAM,6BAA6B,GACrC;IACA,IAAI,EAAE,YAAY,CAAC;IACnB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,GACC;IACA,IAAI,EAAE,SAAS,CAAC;IAChB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB,GACC;IACA,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,CAAC;AAEJ;;;;;GAKG;AACH,wBAAsB,oCAAoC,CACxD,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,6BAA6B,CAAC,CAyExC"}
+{"version":3,"file":"context-graph-chain-discovery-binding.d.ts","sourceRoot":"","sources":["../src/context-graph-chain-discovery-binding.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAGzF,0FAA0F;AAC1F,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAIT;AAED,MAAM,MAAM,6BAA6B,GACrC;IACA,IAAI,EAAE,YAAY,CAAC;IACnB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,GACC;IACA,IAAI,EAAE,SAAS,CAAC;IAChB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB,GACC;IACA,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,CAAC;AAEJ;;;;;GAKG;AACH,wBAAsB,oCAAoC,CACxD,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,6BAA6B,CAAC,CAyExC"}

package/dist/context-graph-chain-discovery-binding.js

@@ -1,4 +1,11 @@
 import { ethers } from 'ethers';
+import { isCanonicalAuthoritativeContextGraphId } from './context-graph-binding-state.js';
+/** Automatic discovery may fill a binding, but cannot replace an owned canonical slot. */
+export function conflictsWithOwnedContextGraphBinding(currentId, incomingId) {
+    return isCanonicalAuthoritativeContextGraphId(currentId)
+        && isCanonicalAuthoritativeContextGraphId(incomingId)
+        && currentId !== incomingId;
+}
 /**
  * Normalize the legacy ContextGraphOnChain identifier boundary before any
  * agent-local RDF or subscription mutation. Production EVM enumeration

package/dist/context-graph-chain-discovery-binding.js.map

@@ -1 +1 @@
-{"version":3,"file":"context-graph-chain-discovery-binding.js","sourceRoot":"","sources":["../src/context-graph-chain-discovery-binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAqBhC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,KAAmB,EACnB,KAA0B;IAE1B,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;QACnE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE;QACpC,CAAC,CAAC,IAAI,CAAC;IAET,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC;IAClD,CAAC;IAED,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,gBAAgB,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACxF,IAAI,gBAAgB,KAAK,gBAAgB,EAAE,CAAC;YAC1C,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,gBAAgB;gBAChB,gBAAgB,EAAE,IAAI;gBACtB,OAAO,EACL,kCAAkC,KAAK,CAAC,IAAI,wBAAwB;oBACpE,GAAG,gBAAgB,wCAAwC,gBAAgB,EAAE;aAChF,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,GAAG,KAAK,CAAC,+BAA+B,CAAC;QAChE,IAAI,OAAO,iBAAiB,KAAK,UAAU,EAAE,CAAC;YAC5C,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,gBAAgB;gBAChB,gBAAgB,EAAE,KAAK;gBACvB,OAAO,EACL,kCAAkC,KAAK,CAAC,IAAI,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;oBACrF,iEAAiE;aACpE,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,wEAAwE;QACxE,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACxE,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;YAC1C,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,gBAAgB;gBAChB,gBAAgB,EAAE,KAAK;gBACvB,OAAO,EACL,kCAAkC,KAAK,CAAC,IAAI,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;oBACrF,uEAAuE;aAC1E,CAAC;QACJ,CAAC;QAED,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE;YAC/B,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/C,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,cAAc;YAC/B,gBAAgB,EAAE,IAAI;SACvB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,SAAS;QACf,gBAAgB,EAAE,IAAI;QACtB,gBAAgB,EAAE,KAAK;QACvB,OAAO,EACL,kCAAkC,KAAK,CAAC,IAAI,qCAAqC;YACjF,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC;KACvC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"context-graph-chain-discovery-binding.js","sourceRoot":"","sources":["../src/context-graph-chain-discovery-binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EAAE,sCAAsC,EAAE,MAAM,kCAAkC,CAAC;AAE1F,0FAA0F;AAC1F,MAAM,UAAU,qCAAqC,CACnD,SAA6B,EAC7B,UAA8B;IAE9B,OAAO,sCAAsC,CAAC,SAAS,CAAC;WACnD,sCAAsC,CAAC,UAAU,CAAC;WAClD,SAAS,KAAK,UAAU,CAAC;AAChC,CAAC;AAoBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,KAAmB,EACnB,KAA0B;IAE1B,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;QACnE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE;QACpC,CAAC,CAAC,IAAI,CAAC;IAET,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC;IAClD,CAAC;IAED,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,gBAAgB,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACxF,IAAI,gBAAgB,KAAK,gBAAgB,EAAE,CAAC;YAC1C,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,gBAAgB;gBAChB,gBAAgB,EAAE,IAAI;gBACtB,OAAO,EACL,kCAAkC,KAAK,CAAC,IAAI,wBAAwB;oBACpE,GAAG,gBAAgB,wCAAwC,gBAAgB,EAAE;aAChF,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,GAAG,KAAK,CAAC,+BAA+B,CAAC;QAChE,IAAI,OAAO,iBAAiB,KAAK,UAAU,EAAE,CAAC;YAC5C,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,gBAAgB;gBAChB,gBAAgB,EAAE,KAAK;gBACvB,OAAO,EACL,kCAAkC,KAAK,CAAC,IAAI,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;oBACrF,iEAAiE;aACpE,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,wEAAwE;QACxE,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACxE,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;YAC1C,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,gBAAgB;gBAChB,gBAAgB,EAAE,KAAK;gBACvB,OAAO,EACL,kCAAkC,KAAK,CAAC,IAAI,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;oBACrF,uEAAuE;aAC1E,CAAC;QACJ,CAAC;QAED,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE;YAC/B,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/C,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,cAAc;YAC/B,gBAAgB,EAAE,IAAI;SACvB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,SAAS;QACf,gBAAgB,EAAE,IAAI;QACtB,gBAAgB,EAAE,KAAK;QACvB,OAAO,EACL,kCAAkC,KAAK,CAAC,IAAI,qCAAqC;YACjF,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC;KACvC,CAAC;AACJ,CAAC"}

package/dist/context-graph-dormant-identity.d.ts

@@ -0,0 +1,8 @@
+import type { ContextGraphSubInput, ContextGraphSubscriptionRecord } from './dkg-agent-types.js';
+/**
+ * Restore exact saved identity independently of subscription activity. This
+ * projection owns no state, authority reads, network effects or persistence.
+ * Conflicting/invalid rows cannot select a numeric slot by snapshot order.
+ */
+export declare function projectDormantContextGraphIdentities(rows: readonly ContextGraphSubscriptionRecord[]): ReadonlyMap<string, ContextGraphSubInput>;
+//# sourceMappingURL=context-graph-dormant-identity.d.ts.map

package/dist/context-graph-dormant-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-graph-dormant-identity.d.ts","sourceRoot":"","sources":["../src/context-graph-dormant-identity.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAEjG;;;;GAIG;AACH,wBAAgB,oCAAoC,CAClD,IAAI,EAAE,SAAS,8BAA8B,EAAE,GAC9C,WAAW,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAuC3C"}

package/dist/context-graph-dormant-identity.js

@@ -0,0 +1,48 @@
+// SPDX-License-Identifier: Apache-2.0
+import { ethers } from 'ethers';
+import { isCanonicalAuthoritativeContextGraphId } from './context-graph-binding-state.js';
+/**
+ * Restore exact saved identity independently of subscription activity. This
+ * projection owns no state, authority reads, network effects or persistence.
+ * Conflicting/invalid rows cannot select a numeric slot by snapshot order.
+ */
+export function projectDormantContextGraphIdentities(rows) {
+    const projected = new Map();
+    for (const row of rows) {
+        let identity = null;
+        if (isCanonicalAuthoritativeContextGraphId(row.onChainId)) {
+            try {
+                const commitment = ethers.keccak256(ethers.toUtf8Bytes(row.id)).toLowerCase();
+                const explicitHash = row.onChainHash?.toLowerCase();
+                const hashShaped = /^0x[0-9a-f]{64}$/i.test(row.id);
+                const wirePlaceholder = hashShaped && explicitHash === row.id.toLowerCase();
+                // A legacy hash-keyed row without its hash is ambiguous. Leave it for
+                // matching native chain observation to stage/repair rather than invent
+                // the commitment of a possible placeholder's literal spelling.
+                if ((explicitHash === undefined && !hashShaped) || explicitHash === commitment || wirePlaceholder) {
+                    identity = {
+                        name: row.name,
+                        onChainId: row.onChainId,
+                        onChainHash: explicitHash ?? commitment,
+                        syncMode: 'always-on',
+                        subscribed: false, coreHosted: false, synced: false,
+                        sharedMemorySynced: false, metaSynced: false,
+                        lastReconciledOrdinal: row.lastReconciledOrdinal,
+                    };
+                }
+            }
+            catch {
+                // Invalid UTF-16 cannot establish a committed local graph identity.
+            }
+        }
+        const previous = projected.get(row.id);
+        if (projected.has(row.id) && (previous === null || identity === null
+            || previous?.onChainId !== identity.onChainId
+            || previous?.onChainHash !== identity.onChainHash))
+            projected.set(row.id, null);
+        else
+            projected.set(row.id, identity);
+    }
+    return new Map([...projected].filter((entry) => entry[1] !== null));
+}
+//# sourceMappingURL=context-graph-dormant-identity.js.map

package/dist/context-graph-dormant-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-graph-dormant-identity.js","sourceRoot":"","sources":["../src/context-graph-dormant-identity.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,sCAAsC,EAAE,MAAM,kCAAkC,CAAC;AAG1F;;;;GAIG;AACH,MAAM,UAAU,oCAAoC,CAClD,IAA+C;IAE/C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuC,CAAC;IACjE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,QAAQ,GAAgC,IAAI,CAAC;QACjD,IAAI,sCAAsC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC9E,MAAM,YAAY,GAAG,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC;gBACpD,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpD,MAAM,eAAe,GAAG,UAAU,IAAI,YAAY,KAAK,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC5E,sEAAsE;gBACtE,uEAAuE;gBACvE,+DAA+D;gBAC/D,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,YAAY,KAAK,UAAU,IAAI,eAAe,EAAE,CAAC;oBAClG,QAAQ,GAAG;wBACT,IAAI,EAAE,GAAG,CAAC,IAAI;wBACd,SAAS,EAAE,GAAG,CAAC,SAAS;wBACxB,WAAW,EAAE,YAAY,IAAI,UAAU;wBACvC,QAAQ,EAAE,WAAW;wBACrB,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK;wBACnD,kBAAkB,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK;wBAC5C,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;qBACjD,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,oEAAoE;YACtE,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAC3B,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI;eACnC,QAAQ,EAAE,SAAS,KAAK,QAAQ,CAAC,SAAS;eAC1C,QAAQ,EAAE,WAAW,KAAK,QAAQ,CAAC,WAAW,CAClD;YAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;;YAC1B,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,KAAK,EAA2C,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CACtE,CAAC,CAAC;AACL,CAAC"}

package/dist/context-graph-meta-projection.d.ts

@@ -1,45 +1,9 @@
 import type { Quad, QueryOptions, TripleStore } from '@origintrail-official/dkg-storage';
+import type { StoreMutation } from './internal/store-mutation.js';
 import { PeerGateRevision } from './internal/peer-gate-revision.js';
 import { RecipientKeyRouteFence } from './internal/recipient-key-route-fence.js';
-export interface ContextGraphSubGraphMeta {
-    uri: string;
-    name: string;
-    createdBy: string;
-    createdAt?: string;
-    description?: string;
-}
-export interface ContextGraphDelegationMeta {
-    uri: string;
-    agents: string[];
-    allowedPeers: string[];
-    allowedKeys: string[];
-    expiresAtValues: string[];
-}
-export interface ContextGraphMetaRecord {
-    id: string;
-    uri: string;
-    declared: boolean;
-    isSystem: boolean;
-    name?: string;
-    description?: string;
-    creator?: string;
-    creators: string[];
-    curator?: string;
-    curators: string[];
-    accessPolicy?: string;
-    createdAt?: string;
-    allowedPeers: string[];
-    allowedAgents: string[];
-    participantAgents: string[];
-    participantIdentityIds: string[];
-    revokedAgents: string[];
-    delegations: ContextGraphDelegationMeta[];
-    onChainId?: string;
-    subGraphs: ContextGraphSubGraphMeta[];
-    hasAgentGate: boolean;
-    hasPeerGate: boolean;
-    hasLegacyParticipantGate: boolean;
-}
+import type { ContextGraphMetaRecord } from './internal/context-graph-meta-record.js';
+export type { ContextGraphMetaRecord, ContextGraphSubGraphMeta, ContextGraphDelegationMeta } from './internal/context-graph-meta-record.js';
 export interface ContextGraphReadAuthorityFactsSnapshot {
     /** True only while no projection source has changed since capture began. */
     assertCurrent(): boolean;
@@ -54,6 +18,12 @@ export declare class ContextGraphMetaProjection {
     /** What a recipient resolution depends on: key and route facts, and each graph's peer allowlist (GH#3067). */
     readonly recipientKeyRouteFence: RecipientKeyRouteFence;
     readonly peerGateRevision: PeerGateRevision;
+    /** Historical callbacks remain bound and also notify the recipient fence. */
+    readonly markDirtyForGraph: (graph: string, subject?: string, predicate?: string) => void;
+    readonly markAllDirty: () => void;
+    readonly markDirtyFromQuads: (quads: readonly Quad[]) => string[];
+    /** Projection-only dispatch: the observed store owns recipient-fence settlement. */
+    readonly invalidateStoreMutation: (mutation: StoreMutation) => void;
     constructor(store: TripleStore);
     /** Invalidate request-local absence proofs when projection sources change. */
     get readAuthorityFactsRevision(): number;
@@ -80,17 +50,10 @@ export declare class ContextGraphMetaProjection {
      * authority-facts revision advances. Supersedes a rebuild in flight.
      */
     requireFreshRead(contextGraphId: string): void;
-    /**
-     * #1863 — dirty the projection for the context graph a single-graph destructive
-     * mutation (e.g. `replaceSubject`) targets, derived from the GRAPH itself, not
-     * from the inserted quads, so a delete is covered too. Shared AGENTS/ONTOLOGY
-     * sources invalidate every record. Other graphs dirty no cache entry but still
-     * advance the authority revision, because key lookup scans all named graphs.
-     * The recipient fences are told what the mutation names. */
-    markDirtyForGraph(graphUri: string, subject?: string, predicate?: string): void;
-    markAllDirty(): void;
+    /** Destructive graph mutations invalidate their target cache and request-local revisions. */
+    private invalidateGraph;
     private dirtyAll;
-    markDirtyFromQuads(quads: readonly Quad[]): string[];
+    private invalidateQuads;
     listDeclaredContextGraphIds(options?: QueryOptions): Promise<string[]>;
     private listRootMetaDeclaredContextGraphIds;
     private listCatalogDeclaredContextGraphIds;

package/dist/context-graph-meta-projection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-graph-meta-projection.d.ts","sourceRoot":"","sources":["../src/context-graph-meta-projection.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAIzF,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAkC,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAEjH,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,0BAA0B,EAAE,CAAC;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,wBAAwB,EAAE,CAAC;IACtC,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;IACrB,wBAAwB,EAAE,OAAO,CAAC;CACnC;AASD,MAAM,WAAW,sCAAsC;IACrD,4EAA4E;IAC5E,aAAa,IAAI,OAAO,CAAC;IACzB,kFAAkF;IAClF,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3C;AAkHD,qBAAa,0BAA0B;IAQzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAPlC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsC;IAC9D,OAAO,CAAC,sBAAsB,CAAK;IACnC,OAAO,CAAC,gBAAgB,CAAK;IAC7B,8GAA8G;IAC9G,QAAQ,CAAC,sBAAsB,EAAE,sBAAsB,CAAC;IACxD,QAAQ,CAAC,gBAAgB,mBAAsD;gBAElD,KAAK,EAAE,WAAW;IAI/C,8EAA8E;IAC9E,IAAI,0BAA0B,IAAI,MAAM,CAEvC;IAED;8EAC0E;IAC1E,sCAAsC,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM;IAItE;;;;OAIG;IACG,yCAAyC,CAC7C,eAAe,EAAE,SAAS,MAAM,EAAE,EAClC,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAmD/B;;;;OAIG;IACG,iCAAiC,CACrC,eAAe,EAAE,SAAS,MAAM,EAAE,EAClC,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,sCAAsC,CAAC;IAY5C,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAkC9F,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,eAAe,UAAO,GAAG,IAAI;IAY/D;;;;OAIG;IACH,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI;IAK9C;;;;;;gEAM4D;IAC5D,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;IA0B/E,YAAY,IAAI,IAAI;IAKpB,OAAO,CAAC,QAAQ;IAUhB,kBAAkB,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,GAAG,MAAM,EAAE;IAmB9C,2BAA2B,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAsClE,mCAAmC;YA+BnC,kCAAkC;YA4BlC,kBAAkB;IAKhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACG,eAAe,CACnB,cAAc,EAAE,MAAM,EACtB,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,sBAAsB,CAAC;YAWpB,OAAO;YAqCP,eAAe;YAwDf,qBAAqB;IA4BnC,OAAO,CAAC,SAAS;YA+DH,aAAa;IA4C3B,OAAO,CAAC,2BAA2B;CA+CpC"}
+{"version":3,"file":"context-graph-meta-projection.d.ts","sourceRoot":"","sources":["../src/context-graph-meta-projection.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAIzF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAEjF,OAAO,KAAK,EAAE,sBAAsB,EAAwD,MAAM,yCAAyC,CAAC;AAC5I,YAAY,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAS5I,MAAM,WAAW,sCAAsC;IACrD,4EAA4E;IAC5E,aAAa,IAAI,OAAO,CAAC;IACzB,kFAAkF;IAClF,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3C;AA8GD,qBAAa,0BAA0B;IAmCzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAlClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsC;IAC9D,OAAO,CAAC,sBAAsB,CAAK;IACnC,OAAO,CAAC,gBAAgB,CAAK;IAC7B,8GAA8G;IAC9G,QAAQ,CAAC,sBAAsB,EAAE,sBAAsB,CAAC;IACxD,QAAQ,CAAC,gBAAgB,mBAAsD;IAE/E,6EAA6E;IAC7E,QAAQ,CAAC,iBAAiB,GAAI,OAAO,MAAM,EAAE,UAAU,MAAM,EAAE,YAAY,MAAM,KAAG,IAAI,CAGtF;IACF,QAAQ,CAAC,YAAY,QAAO,IAAI,CAG9B;IACF,QAAQ,CAAC,kBAAkB,GAAI,OAAO,SAAS,IAAI,EAAE,KAAG,MAAM,EAAE,CAG9D;IAEF,oFAAoF;IACpF,QAAQ,CAAC,uBAAuB,GAAI,UAAU,aAAa,KAAG,IAAI,CAUhE;gBAE2B,KAAK,EAAE,WAAW;IAI/C,8EAA8E;IAC9E,IAAI,0BAA0B,IAAI,MAAM,CAEvC;IAED;8EAC0E;IAC1E,sCAAsC,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM;IAItE;;;;OAIG;IACG,yCAAyC,CAC7C,eAAe,EAAE,SAAS,MAAM,EAAE,EAClC,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAmD/B;;;;OAIG;IACG,iCAAiC,CACrC,eAAe,EAAE,SAAS,MAAM,EAAE,EAClC,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,sCAAsC,CAAC;IAY5C,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAkC9F,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,eAAe,UAAO,GAAG,IAAI;IAY/D;;;;OAIG;IACH,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI;IAK9C,6FAA6F;IAC7F,OAAO,CAAC,eAAe;IAyBvB,OAAO,CAAC,QAAQ;IAUhB,OAAO,CAAC,eAAe;IAoBjB,2BAA2B,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAsClE,mCAAmC;YA+BnC,kCAAkC;YA4BlC,kBAAkB;IAKhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACG,eAAe,CACnB,cAAc,EAAE,MAAM,EACtB,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,sBAAsB,CAAC;YAWpB,OAAO;YAqCP,eAAe;YAwDf,qBAAqB;IA4BnC,OAAO,CAAC,SAAS;YA+DH,aAAa;IA4C3B,OAAO,CAAC,2BAA2B;CA+CpC"}

package/dist/context-graph-meta-projection.js

@@ -1,10 +1,11 @@
 // SPDX-License-Identifier: Apache-2.0
-import { DKG_ONTOLOGY, SYSTEM_CONTEXT_GRAPHS, assertSafeIri, contextGraphCatalogUri, contextGraphDataGraphUri, contextGraphDataUri, contextGraphMetaGraphUri, } from '@origintrail-official/dkg-core';
+import { DKG_ONTOLOGY, SYSTEM_CONTEXT_GRAPHS, assertSafeIri, isSafeIri, contextGraphCatalogUri, contextGraphDataGraphUri, contextGraphDataUri, contextGraphMetaGraphUri, } from '@origintrail-official/dkg-core';
+import { WORKSPACE_RECIPIENT_AUTHORITY_PREDICATES as RECIPIENT_AUTHORITY_PREDICATES } from '@origintrail-official/dkg-publisher';
 import { strip, stripLiteral } from './dkg-agent-utils.js';
 import { mapWithConcurrency } from './map-with-concurrency.js';
 import { cloneMetaRecord } from './internal/context-graph-meta-record-copy.js';
 import { PeerGateRevision } from './internal/peer-gate-revision.js';
-import { RECIPIENT_KEY_ROUTE_PREDICATES, RecipientKeyRouteFence } from './internal/recipient-key-route-fence.js';
+import { RecipientKeyRouteFence } from './internal/recipient-key-route-fence.js';
 const DKG_NS = 'https://dkg.network/ontology#';
 const LEGACY_DKG_NS = 'http://dkg.io/ontology/';
 const LEGACY_SCHEMA_NS = 'http://schema.org/';
@@ -37,13 +38,7 @@ const DIRECT_META_PREDICATES = new Set([
 ]);
 // Recipient resolution scans these facts across every named graph. They do not
 // populate ContextGraphMetaRecord, but they can change a recipient set.
-const WORKSPACE_RECIPIENT_AUTHORITY_PREDICATES = new Set([
-    DKG_ONTOLOGY.DKG_ACCESS_POLICY,
-    DKG_ONTOLOGY.DKG_ALLOWED_AGENT,
-    DKG_ONTOLOGY.DKG_PARTICIPANT_AGENT,
-    DKG_ONTOLOGY.DKG_REVOKED_AGENT,
-    ...RECIPIENT_KEY_ROUTE_PREDICATES,
-]);
+const WORKSPACE_RECIPIENT_AUTHORITY_PREDICATES = new Set(RECIPIENT_AUTHORITY_PREDICATES);
 const SUB_GRAPH_META_PREDICATES = new Set([
     DKG_ONTOLOGY.RDF_TYPE,
     DKG_ONTOLOGY.SCHEMA_NAME,
@@ -80,6 +75,9 @@ const CATALOG_META_PREDICATES = new Set([
 const PROJECTION_RECORD_PREDICATES = new Set([
     ...DIRECT_META_PREDICATES, ...SUB_GRAPH_META_PREDICATES, ...DELEGATION_META_PREDICATES, ...CATALOG_META_PREDICATES
 ]);
+const AGENT_ROSTER_PREDICATES = new Set([
+    DKG_ONTOLOGY.DKG_ALLOWED_AGENT, DKG_ONTOLOGY.DKG_PARTICIPANT_AGENT, DKG_ONTOLOGY.DKG_REVOKED_AGENT
+]);
 /**
  * A `ContextGraphMetaRecord` with no facts loaded yet.
  *
@@ -115,6 +113,46 @@ export class ContextGraphMetaProjection {
     /** What a recipient resolution depends on: key and route facts, and each graph's peer allowlist (GH#3067). */
     recipientKeyRouteFence;
     peerGateRevision = new PeerGateRevision(PROJECTION_RECORD_PREDICATES);
+    /** Historical callbacks remain bound and also notify the recipient fence. */
+    markDirtyForGraph = (graph, subject, predicate) => {
+        try {
+            this.invalidateGraph(graph, subject, predicate);
+        }
+        finally {
+            this.recipientKeyRouteFence.noteRemoval({ graph, subject, predicate });
+        }
+    };
+    markAllDirty = () => {
+        try {
+            this.dirtyAll();
+        }
+        finally {
+            this.recipientKeyRouteFence.noteUnscopedWrite();
+        }
+    };
+    markDirtyFromQuads = (quads) => {
+        try {
+            return this.invalidateQuads(quads);
+        }
+        finally {
+            this.recipientKeyRouteFence.noteQuads(quads);
+        }
+    };
+    /** Projection-only dispatch: the observed store owns recipient-fence settlement. */
+    invalidateStoreMutation = (mutation) => {
+        if (mutation.everything || mutation.quads?.some((quad) => !isSafeIri(quad.predicate))) {
+            this.dirtyAll();
+            return;
+        }
+        for (const { graph, subject, predicate } of mutation.removals ?? []) {
+            if (graph === undefined || !isSafeIri(graph))
+                this.dirtyAll();
+            else
+                this.invalidateGraph(graph, subject, predicate);
+        }
+        if (mutation.quads)
+            this.invalidateQuads(mutation.quads);
+    };
     constructor(store) {
         this.store = store;
         this.recipientKeyRouteFence = new RecipientKeyRouteFence(store);
@@ -249,15 +287,8 @@ export class ContextGraphMetaProjection {
         if (existing)
             existing.dirty = true;
     }
-    /**
-     * #1863 — dirty the projection for the context graph a single-graph destructive
-     * mutation (e.g. `replaceSubject`) targets, derived from the GRAPH itself, not
-     * from the inserted quads, so a delete is covered too. Shared AGENTS/ONTOLOGY
-     * sources invalidate every record. Other graphs dirty no cache entry but still
-     * advance the authority revision, because key lookup scans all named graphs.
-     * The recipient fences are told what the mutation names. */
-    markDirtyForGraph(graphUri, subject, predicate) {
-        this.recipientKeyRouteFence.noteRemoval({ graph: graphUri, subject, predicate });
+    /** Destructive graph mutations invalidate their target cache and request-local revisions. */
+    invalidateGraph(graphUri, subject, predicate) {
         const graph = stripTerm(graphUri);
         if (graph === contextGraphDataGraphUri(SYSTEM_CONTEXT_GRAPHS.AGENTS)
             || graph === contextGraphDataGraphUri(SYSTEM_CONTEXT_GRAPHS.ONTOLOGY)) {
@@ -278,10 +309,6 @@ export class ContextGraphMetaProjection {
         // non-CG graph advances the request-local fence without dirtying a cache entry.
         this.authorityFactsRevision += 1;
     }
-    markAllDirty() {
-        this.dirtyAll();
-        this.recipientKeyRouteFence.noteUnscopedWrite();
-    }
     dirtyAll() {
         this.peerGateRevision.noteEverything();
         this.authorityFactsRevision += 1;
@@ -291,7 +318,7 @@ export class ContextGraphMetaProjection {
             entry.invalidationVersion += 1;
         }
     }
-    markDirtyFromQuads(quads) {
+    invalidateQuads(quads) {
         const touched = new Set();
         let recipientAuthorityTouched = false;
         for (const quad of quads) {
@@ -306,9 +333,11 @@ export class ContextGraphMetaProjection {
         }
         // Generic update and complete-graph replace paths call markAllDirty(); one
         // conservative bump here closes the recipient-key insertion race.
-        this.recipientKeyRouteFence.noteQuads(quads);
         if (recipientAuthorityTouched)
             this.authorityFactsRevision += 1;
+        // The loop marks only the context graph a quad names; such a fact may be any graph's.
+        if (quads.some(mayChangeUnnamedRoster))
+            this.dirtyAll();
         return [...touched];
     }
     async listDeclaredContextGraphIds(options = {}) {
@@ -738,6 +767,24 @@ function applyAccessPolicy(record, value) {
     }
     record.accessPolicy ??= value;
 }
+/**
+ * A roster fact, written or removed by value, whose context graph its terms do
+ * not prove. Only a plain IRI is stored as written: an adapter matches a blank
+ * node in a delete against any subject, and drops unsafe characters from a
+ * graph name. A plainly named graph that is not a metadata source is harmless,
+ * because no record reads a roster from it.
+ */
+function mayChangeUnnamedRoster(quad) {
+    if (!AGENT_ROSTER_PREDICATES.has(strip(quad.predicate)))
+        return false;
+    if (!isSafeIri(quad.graph))
+        return true;
+    if (isSafeIri(quad.subject))
+        return false;
+    return contextGraphIdFromMetaGraphUri(quad.graph) !== null
+        || quad.graph === contextGraphDataGraphUri(SYSTEM_CONTEXT_GRAPHS.AGENTS)
+        || quad.graph === contextGraphDataGraphUri(SYSTEM_CONTEXT_GRAPHS.ONTOLOGY);
+}
 function contextGraphIdFromContextGraphUri(uri) {
     if (!uri.startsWith(CONTEXT_GRAPH_PREFIX))
         return null;