@origintrail-official/dkg-agent 10.0.22 → 10.0.24

package/dist/agent-chain-signer-source.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Where the agent's own chain adapter takes its operational wallets from:
+ * local keys (`operationalKeys`, the first the primary), external signers
+ * (`signers`, so the node holds no operational key), or neither, for a
+ * configuration whose wallets come with a supplied `chainAdapter` or that
+ * writes nothing on-chain. Exclusive, like the chain package's
+ * `OperationalSignerSource`, which it is normalized to when the agent builds
+ * its adapter.
+ */
+import type { ExternalEvmSigner, OperationalSignerSource } from '@origintrail-official/dkg-chain';
+export type AgentChainSignerSource = {
+    operationalKeys?: string[];
+    signers?: never;
+} | {
+    signers?: readonly ExternalEvmSigner[];
+    operationalKeys?: never;
+} | {
+    operationalKeys?: never;
+    signers?: never;
+};
+/**
+ * The adapter's operational signer source from the agent's chain
+ * configuration, or undefined when it names none. Exclusivity is checked here
+ * too, for callers the types do not reach.
+ */
+export declare function operationalSignerSourceOf(chainConfig: {
+    readonly operationalKeys?: readonly string[];
+    readonly signers?: readonly ExternalEvmSigner[];
+}): OperationalSignerSource | undefined;
+//# sourceMappingURL=agent-chain-signer-source.d.ts.map

package/dist/agent-chain-signer-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-chain-signer-source.d.ts","sourceRoot":"","sources":["../src/agent-chain-signer-source.ts"],"names":[],"mappings":"AACA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAElG,MAAM,MAAM,sBAAsB,GAE9B;IAAE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,KAAK,CAAA;CAAE,GAC/C;IAAE,OAAO,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAAC,eAAe,CAAC,EAAE,KAAK,CAAA;CAAE,GACnE;IAAE,eAAe,CAAC,EAAE,KAAK,CAAC;IAAC,OAAO,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC;AAEjD;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,WAAW,EAAE;IACrD,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACjD,GAAG,uBAAuB,GAAG,SAAS,CAStC"}

package/dist/agent-chain-signer-source.js

@@ -0,0 +1,18 @@
+/**
+ * The adapter's operational signer source from the agent's chain
+ * configuration, or undefined when it names none. Exclusivity is checked here
+ * too, for callers the types do not reach.
+ */
+export function operationalSignerSourceOf(chainConfig) {
+    const keys = chainConfig.operationalKeys ?? [];
+    const signers = chainConfig.signers ?? [];
+    if (keys.length > 0 && signers.length > 0) {
+        throw new Error('DKGAgentConfig.chainConfig: configure either operationalKeys or signers, not both');
+    }
+    if (signers.length > 0)
+        return { signers };
+    if (keys.length > 0)
+        return { privateKey: keys[0], additionalKeys: keys.slice(1) };
+    return undefined;
+}
+//# sourceMappingURL=agent-chain-signer-source.js.map

package/dist/agent-chain-signer-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-chain-signer-source.js","sourceRoot":"","sources":["../src/agent-chain-signer-source.ts"],"names":[],"mappings":"AAkBA;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,WAGzC;IACC,MAAM,IAAI,GAAG,WAAW,CAAC,eAAe,IAAI,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,IAAI,EAAE,CAAC;IAC1C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/agent-keystore.d.ts

@@ -83,6 +83,27 @@ export declare function generateAgentToken(): string;
  * never reveal bearer credentials.
  */
 export declare function hashAgentToken(token: string): string;
+/** The agent keystore of a node's data directory. */
+export declare function agentKeystorePath(dataDir: string): string;
+/** The entries of the keystore at `path`; none when it is missing or unreadable. */
+export declare function readAgentKeystore(path: string): Promise<Record<string, KeystoreEntry>>;
+/**
+ * Refuse a keystore that holds the private key of one of `payerAddresses`,
+ * the accounts an external signer pays from: a payer never signs as an
+ * agent, and a node that signs through an external signer must not sign with
+ * a payer key itself. A node that used local wallets keeps its former
+ * operational key here as its first agent's key, so turning that wallet into
+ * a payer is caught before any agent loads. Entries without a key pass.
+ */
+export declare function assertKeystoreHoldsNoPayerKey(keystore: Readonly<Record<string, KeystoreEntry>>, payerAddresses: readonly string[], keystorePath: string): void;
+/**
+ * Add or replace `address`'s entry in the keystore file at `path`. The writes
+ * to one file run one at a time, so concurrent registrations never drop each
+ * other's entries in the read-modify-write.
+ */
+export declare function writeKeystoreEntry(path: string, address: string, entry: KeystoreEntry): Promise<void>;
+/** Throws when `name` is already the name of one of `agents` (agent names are unique on a node). */
+export declare function assertAgentNameFree(agents: Iterable<AgentKeyRecord>, name: string): void;
 /**
  * Generate a custodial agent keypair.
  * Returns the full key material (private key included).

package/dist/agent-keystore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-keystore.d.ts","sourceRoot":"","sources":["../src/agent-keystore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,EACL,+CAA+C,EAOhD,MAAM,gCAAgC,CAAC;AAExC;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA2B;IAC1C,sBAAsB,EAAE,OAAO,+CAA+C,CAAC;IAC/E,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uBAAuB,CAAC,EAAE,2BAA2B,EAAE,CAAC;IACxD,sBAAsB,CAAC,EAAE,OAAO,+CAA+C,CAAC;IAChF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;OAOG;IACH,uBAAuB,EAAE,2BAA2B,EAAE,CAAC;IACvD,sBAAsB,CAAC,EAAE,OAAO,+CAA+C,CAAC;IAChF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,WAAW,GAAG,gBAAgB,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,cAAc,CAevF;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,MAAM,EAClB,mBAAmB,CAAC,EAAE;IACpB,sBAAsB,EAAE,OAAO,+CAA+C,CAAC;IAC/E,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,EAAE,MAAM,CAAC;CAC5B,GACA,cAAc,CAgBhB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,GACjB,cAAc,CAehB;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAW5E;AAED;;;;GAIG;AACH,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,cAAc,GACrB,2BAA2B,CAK7B;AAED;;;;;;GAMG;AACH,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE,MAAM,GACZ,2BAA2B,CAsB7B;AAED;;;;GAIG;AACH,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,GACtB,2BAA2B,CAoB7B;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,mBAAmB,EAAE,MAAM,GAC1B;IAAE,kBAAkB,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAazD;AAED,wBAAgB,mCAAmC,CACjD,YAAY,EAAE,MAAM,EACpB,sBAAsB,EAAE,MAAM,EAC9B,mBAAmB,EAAE,MAAM,EAC3B,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAaT;AAED;;;;;GAKG;AACH,wBAAgB,sCAAsC,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAoCnF;AAED,oEAAoE;AACpE,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,cAAc,GAAG,2BAA2B,EAAE,CAEnG;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAe5E"}
+{"version":3,"file":"agent-keystore.d.ts","sourceRoot":"","sources":["../src/agent-keystore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,EACL,+CAA+C,EAOhD,MAAM,gCAAgC,CAAC;AAGxC;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA2B;IAC1C,sBAAsB,EAAE,OAAO,+CAA+C,CAAC;IAC/E,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uBAAuB,CAAC,EAAE,2BAA2B,EAAE,CAAC;IACxD,sBAAsB,CAAC,EAAE,OAAO,+CAA+C,CAAC;IAChF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;OAOG;IACH,uBAAuB,EAAE,2BAA2B,EAAE,CAAC;IACvD,sBAAsB,CAAC,EAAE,OAAO,+CAA+C,CAAC;IAChF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,WAAW,GAAG,gBAAgB,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,qDAAqD;AACrD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,oFAAoF;AACpF,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAM5F;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,EACjD,cAAc,EAAE,SAAS,MAAM,EAAE,EACjC,YAAY,EAAE,MAAM,GACnB,IAAI,CAmBN;AAKD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAWrG;AAED,oGAAoG;AACpG,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAIxF;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,cAAc,CAevF;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,MAAM,EAClB,mBAAmB,CAAC,EAAE;IACpB,sBAAsB,EAAE,OAAO,+CAA+C,CAAC;IAC/E,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,EAAE,MAAM,CAAC;CAC5B,GACA,cAAc,CAgBhB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,GACjB,cAAc,CAehB;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAW5E;AAED;;;;GAIG;AACH,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,cAAc,GACrB,2BAA2B,CAK7B;AAED;;;;;;GAMG;AACH,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE,MAAM,GACZ,2BAA2B,CAsB7B;AAED;;;;GAIG;AACH,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,GACtB,2BAA2B,CAoB7B;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,mBAAmB,EAAE,MAAM,GAC1B;IAAE,kBAAkB,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAazD;AAED,wBAAgB,mCAAmC,CACjD,YAAY,EAAE,MAAM,EACpB,sBAAsB,EAAE,MAAM,EAC9B,mBAAmB,EAAE,MAAM,EAC3B,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAaT;AAED;;;;;GAKG;AACH,wBAAgB,sCAAsC,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAoCnF;AAED,oEAAoE;AACpE,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,cAAc,GAAG,2BAA2B,EAAE,CAEnG;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAe5E"}

package/dist/agent-keystore.js

@@ -13,7 +13,11 @@
  */
 import { ethers } from 'ethers';
 import { randomBytes, createHash } from 'node:crypto';
+import { chmod, mkdir, readFile, writeFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { withKeyedLocks } from '@origintrail-official/dkg-publisher';
 import { WORKSPACE_AGENT_ENCRYPTION_KEY_ALGORITHM_X25519, computeWorkspaceAgentEncryptionKeyProofPayload, computeWorkspaceAgentEncryptionKeyRevocationPayload, decodeWorkspaceEncryptionKey, encodeWorkspaceEncryptionKey, generateWorkspaceRecipientEncryptionKey, workspaceAgentEncryptionKeyId, } from '@origintrail-official/dkg-core';
+import { agentKeyWallet } from './author-signer.js';
 /**
  * Generate a per-agent Bearer token.
  * Prefix `dkg_at_` makes it distinguishable from node-level tokens.
@@ -30,6 +34,75 @@ export function generateAgentToken() {
 export function hashAgentToken(token) {
     return createHash('sha256').update(token).digest('hex');
 }
+/** The agent keystore of a node's data directory. */
+export function agentKeystorePath(dataDir) {
+    return `${dataDir}/agent-keystore.json`;
+}
+/** The entries of the keystore at `path`; none when it is missing or unreadable. */
+export async function readAgentKeystore(path) {
+    try {
+        return JSON.parse(await readFile(path, 'utf-8'));
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Refuse a keystore that holds the private key of one of `payerAddresses`,
+ * the accounts an external signer pays from: a payer never signs as an
+ * agent, and a node that signs through an external signer must not sign with
+ * a payer key itself. A node that used local wallets keeps its former
+ * operational key here as its first agent's key, so turning that wallet into
+ * a payer is caught before any agent loads. Entries without a key pass.
+ */
+export function assertKeystoreHoldsNoPayerKey(keystore, payerAddresses, keystorePath) {
+    const payers = new Set(payerAddresses.map((address) => address.toLowerCase()));
+    for (const [entryAddress, entry] of Object.entries(keystore)) {
+        const privateKey = entry?.privateKey;
+        if (typeof privateKey !== 'string' || privateKey === '')
+            continue;
+        let address = entryAddress;
+        try {
+            address = agentKeyWallet(privateKey).address;
+        }
+        catch {
+            // A key that does not parse is checked by the address it is filed under.
+        }
+        if (!payers.has(address.toLowerCase()))
+            continue;
+        throw new Error(`${keystorePath} holds the private key of ${address}, which the external signer serves as a payer account, ` +
+            'and a payer never signs as an agent. To keep it only as a payer, delete its entry from that file: the agent ' +
+            'stays registered without a key, and author work then needs the token of an agent whose author key the ' +
+            'external signer holds. To keep it as a local agent instead, stop serving it as a payer (chain.signer.addresses).');
+    }
+}
+/** One lock per keystore file. */
+const keystoreWriteLocks = new Map();
+/**
+ * Add or replace `address`'s entry in the keystore file at `path`. The writes
+ * to one file run one at a time, so concurrent registrations never drop each
+ * other's entries in the read-modify-write.
+ */
+export function writeKeystoreEntry(path, address, entry) {
+    return withKeyedLocks(keystoreWriteLocks, [path], async () => {
+        let existing = {};
+        try {
+            existing = JSON.parse(await readFile(path, 'utf-8'));
+        }
+        catch { /* first write */ }
+        existing[address.toLowerCase()] = entry;
+        await mkdir(dirname(path), { recursive: true });
+        await writeFile(path, JSON.stringify(existing, null, 2), { mode: 0o600 });
+        await chmod(path, 0o600);
+    });
+}
+/** Throws when `name` is already the name of one of `agents` (agent names are unique on a node). */
+export function assertAgentNameFree(agents, name) {
+    for (const existing of agents) {
+        if (existing.name === name)
+            throw new Error(`Agent name "${name}" already registered on this node`);
+    }
+}
 /**
  * Generate a custodial agent keypair.
  * Returns the full key material (private key included).

package/dist/agent-keystore.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-keystore.js","sourceRoot":"","sources":["../src/agent-keystore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,+CAA+C,EAC/C,8CAA8C,EAC9C,mDAAmD,EACnD,4BAA4B,EAC5B,4BAA4B,EAC5B,uCAAuC,EACvC,6BAA6B,GAC9B,MAAM,gCAAgC,CAAC;AAgExC;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,UAAU,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,SAAkB;IACrE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAmB;QAC7B,YAAY,EAAE,MAAM,CAAC,OAAO;QAC5B,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS;QACtC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,uBAAuB,EAAE,EAAE;QAC3B,IAAI;QACJ,SAAS;QACT,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,kBAAkB,EAAE;QAC/B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,mCAAmC,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,IAAY,EACZ,SAAiB,EACjB,SAAkB,EAClB,mBAIC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,MAAM,GAAmB;QAC7B,YAAY,EAAE,OAAO;QACrB,SAAS;QACT,uBAAuB,EAAE,EAAE;QAC3B,IAAI;QACJ,SAAS;QACT,IAAI,EAAE,gBAAgB;QACtB,SAAS,EAAE,kBAAkB,EAAE;QAC/B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,IAAI,mBAAmB,EAAE,CAAC;QACxB,0CAA0C,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,IAAY,EACZ,SAAkB;IAElB,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAmB;QAC7B,YAAY,EAAE,MAAM,CAAC,OAAO;QAC5B,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS;QACtC,UAAU;QACV,uBAAuB,EAAE,EAAE;QAC3B,IAAI;QACJ,SAAS;QACT,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,kBAAkB,EAAE;QAC/B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,mCAAmC,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAsB;IACjE,IAAI,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACrE,+BAA+B,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACtD,+BAA+B,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,mCAAmC,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qCAAqC,CACnD,MAAsB;IAEtB,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,sDAAsD,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,mCAAmC,CAAC,MAAM,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qCAAqC,CACnD,MAAsB,EACtB,KAAa;IAEb,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,uDAAuD,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,KAAK,CAAC,CAAC;IACtF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,wBAAwB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,eAAe;QAAE,OAAO,KAAK,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,cAAc,GAAG,4BAA4B,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,mDAAmD,CAAC;QAClE,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC;QACpD,sBAAsB,EAAE,+CAA+C;QACvE,cAAc;QACd,SAAS;KACV,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACpD,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IACvF,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wCAAwC,CACtD,MAAsB,EACtB,KAAa,EACb,SAAiB,EACjB,eAAuB;IAEvB,MAAM,KAAK,GAAG,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,KAAK,CAAC,CAAC;IACtF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,wBAAwB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,cAAc,GAAG,4BAA4B,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,mDAAmD,CAAC;QAClE,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC;QACpD,sBAAsB,EAAE,+CAA+C;QACvE,cAAc;QACd,SAAS;KACV,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACjE,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,kCAAkC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,eAAe,GAAG,eAAe,CAAC;IACxC,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,YAAoB,EACpB,UAAkB,EAClB,mBAA2B;IAE3B,MAAM,cAAc,GAAG,4BAA4B,CAAC,mBAAmB,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,8CAA8C,CAAC;QAC7D,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC;QAC7C,sBAAsB,EAAE,+CAA+C;QACvE,cAAc;KACf,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IAC7E,OAAO;QACL,kBAAkB,EAAE,KAAK;QACzB,eAAe,EAAE,6BAA6B,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,cAAc,CAAC;KAChG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,YAAoB,EACpB,sBAA8B,EAC9B,mBAA2B,EAC3B,kBAA0B;IAE1B,IAAI,sBAAsB,KAAK,+CAA+C,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,4BAA4B,CAAC,mBAAmB,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,8CAA8C,CAAC;QAC7D,YAAY,EAAE,QAAQ;QACtB,sBAAsB,EAAE,+CAA+C;QACvE,cAAc;KACf,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACpE,OAAO,SAAS,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sCAAsC,CAAC,MAAsB;IAC3E,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC;QACpC,MAAM,CAAC,uBAAuB,GAAG,EAAE,CAAC;IACtC,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,sBAAsB,CAAC;IAChD,MAAM,mBAAmB,GAAG,MAAM,CAAC,mBAAmB,CAAC;IACvD,MAAM,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC;IACrD,IAAI,CAAC,SAAS,IAAI,CAAC,mBAAmB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC9D,+BAA+B,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IACD,IAAI,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;IAC7C,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,eAAe,GAAG,6BAA6B,CAC7C,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,EACtC,4BAA4B,CAAC,mBAAmB,CAAC,CAClD,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,eAAe,CAAC,EAAE,CAAC;QACtF,+BAA+B,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IACD,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC;QAClC,sBAAsB,EAAE,SAAS;QACjC,eAAe;QACf,mBAAmB;QACnB,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,kBAAkB;QAClB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACxD,CAAC,CAAC;IACH,+BAA+B,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,6BAA6B,CAAC,MAAsB;IAClE,OAAO,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAAC,MAAsB;IACpE,MAAM,MAAM,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,sBAAsB,GAAG,MAAM,CAAC,sBAAsB,CAAC;QAC9D,MAAM,CAAC,mBAAmB,GAAG,MAAM,CAAC,mBAAmB,CAAC;QACxD,MAAM,CAAC,oBAAoB,GAAG,MAAM,CAAC,oBAAoB,CAAC;QAC1D,MAAM,CAAC,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC;QACtD,MAAM,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,sBAAsB,GAAG,SAAS,CAAC;QAC1C,MAAM,CAAC,mBAAmB,GAAG,SAAS,CAAC;QACvC,MAAM,CAAC,oBAAoB,GAAG,SAAS,CAAC;QACxC,MAAM,CAAC,kBAAkB,GAAG,SAAS,CAAC;QACtC,MAAM,CAAC,eAAe,GAAG,SAAS,CAAC;IACrC,CAAC;AACH,CAAC;AAED,SAAS,mCAAmC,CAAC,MAAsB;IACjE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,mEAAmE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,MAAM,YAAY,GAAG,uCAAuC,CAC1D,iBAAiB,MAAM,CAAC,YAAY,EAAE,EACtC,iBAAiB,MAAM,CAAC,YAAY,mBAAmB,CACxD,CAAC;IACF,MAAM,mBAAmB,GAAG,4BAA4B,CAAC,YAAY,CAAC,cAAe,CAAC,CAAC;IACvF,MAAM,oBAAoB,GAAG,4BAA4B,CAAC,YAAY,CAAC,eAAgB,CAAC,CAAC;IACzF,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAE,GAAG,0BAA0B,CACxE,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,UAAU,EACjB,mBAAmB,CACpB,CAAC;IACF,MAAM,KAAK,GAAgC;QACzC,sBAAsB,EAAE,+CAA+C;QACvE,eAAe;QACf,mBAAmB;QACnB,oBAAoB;QACpB,kBAAkB;QAClB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,0CAA0C,CACjD,MAAsB,EACtB,mBAIC;IAED,IAAI,CAAC,mCAAmC,CACtC,MAAM,CAAC,YAAY,EACnB,mBAAmB,CAAC,sBAAsB,EAC1C,mBAAmB,CAAC,mBAAmB,EACvC,mBAAmB,CAAC,kBAAkB,CACvC,EAAE,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,oDAAoD,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,cAAc,GAAG,4BAA4B,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,CAAC;IAC7F,MAAM,eAAe,GAAG,6BAA6B,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC3F,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,eAAe,CAAC,EAAE,CAAC;QACvF,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC;YAClC,sBAAsB,EAAE,mBAAmB,CAAC,sBAAsB;YAClE,eAAe;YACf,mBAAmB,EAAE,mBAAmB,CAAC,mBAAmB;YAC5D,kBAAkB,EAAE,mBAAmB,CAAC,kBAAkB;YAC1D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;IACD,+BAA+B,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"agent-keystore.js","sourceRoot":"","sources":["../src/agent-keystore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EACL,+CAA+C,EAC/C,8CAA8C,EAC9C,mDAAmD,EACnD,4BAA4B,EAC5B,4BAA4B,EAC5B,uCAAuC,EACvC,6BAA6B,GAC9B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAgEpD;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,UAAU,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,GAAG,OAAO,sBAAsB,CAAC;AAC1C,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAClD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,6BAA6B,CAC3C,QAAiD,EACjD,cAAiC,EACjC,YAAoB;IAEpB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC/E,KAAK,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7D,MAAM,UAAU,GAAG,KAAK,EAAE,UAAU,CAAC;QACrC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,EAAE;YAAE,SAAS;QAClE,IAAI,OAAO,GAAG,YAAY,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QACjD,MAAM,IAAI,KAAK,CACb,GAAG,YAAY,6BAA6B,OAAO,yDAAyD;YAC1G,8GAA8G;YAC9G,wGAAwG;YACxG,kHAAkH,CACrH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,kCAAkC;AAClC,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAyB,CAAC;AAE5D;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,OAAe,EAAE,KAAoB;IACpF,OAAO,cAAc,CAAC,kBAAkB,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE;QAC3D,IAAI,QAAQ,GAAkC,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC7B,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC;QACxC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,mBAAmB,CAAC,MAAgC,EAAE,IAAY;IAChF,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,CAAC;QAC9B,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,mCAAmC,CAAC,CAAC;IACtG,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,SAAkB;IACrE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAmB;QAC7B,YAAY,EAAE,MAAM,CAAC,OAAO;QAC5B,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS;QACtC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,uBAAuB,EAAE,EAAE;QAC3B,IAAI;QACJ,SAAS;QACT,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,kBAAkB,EAAE;QAC/B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,mCAAmC,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,IAAY,EACZ,SAAiB,EACjB,SAAkB,EAClB,mBAIC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,MAAM,GAAmB;QAC7B,YAAY,EAAE,OAAO;QACrB,SAAS;QACT,uBAAuB,EAAE,EAAE;QAC3B,IAAI;QACJ,SAAS;QACT,IAAI,EAAE,gBAAgB;QACtB,SAAS,EAAE,kBAAkB,EAAE;QAC/B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,IAAI,mBAAmB,EAAE,CAAC;QACxB,0CAA0C,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,IAAY,EACZ,SAAkB;IAElB,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAmB;QAC7B,YAAY,EAAE,MAAM,CAAC,OAAO;QAC5B,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS;QACtC,UAAU;QACV,uBAAuB,EAAE,EAAE;QAC3B,IAAI;QACJ,SAAS;QACT,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,kBAAkB,EAAE;QAC/B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,mCAAmC,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAsB;IACjE,IAAI,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACrE,+BAA+B,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACtD,+BAA+B,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,mCAAmC,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qCAAqC,CACnD,MAAsB;IAEtB,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,sDAAsD,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,mCAAmC,CAAC,MAAM,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qCAAqC,CACnD,MAAsB,EACtB,KAAa;IAEb,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,uDAAuD,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,KAAK,CAAC,CAAC;IACtF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,wBAAwB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,eAAe;QAAE,OAAO,KAAK,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,cAAc,GAAG,4BAA4B,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,mDAAmD,CAAC;QAClE,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC;QACpD,sBAAsB,EAAE,+CAA+C;QACvE,cAAc;QACd,SAAS;KACV,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACpD,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IACvF,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wCAAwC,CACtD,MAAsB,EACtB,KAAa,EACb,SAAiB,EACjB,eAAuB;IAEvB,MAAM,KAAK,GAAG,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,KAAK,CAAC,CAAC;IACtF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,wBAAwB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,cAAc,GAAG,4BAA4B,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,mDAAmD,CAAC;QAClE,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC;QACpD,sBAAsB,EAAE,+CAA+C;QACvE,cAAc;QACd,SAAS;KACV,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACjE,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,kCAAkC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,eAAe,GAAG,eAAe,CAAC;IACxC,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,YAAoB,EACpB,UAAkB,EAClB,mBAA2B;IAE3B,MAAM,cAAc,GAAG,4BAA4B,CAAC,mBAAmB,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,8CAA8C,CAAC;QAC7D,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC;QAC7C,sBAAsB,EAAE,+CAA+C;QACvE,cAAc;KACf,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IAC7E,OAAO;QACL,kBAAkB,EAAE,KAAK;QACzB,eAAe,EAAE,6BAA6B,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,cAAc,CAAC;KAChG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,YAAoB,EACpB,sBAA8B,EAC9B,mBAA2B,EAC3B,kBAA0B;IAE1B,IAAI,sBAAsB,KAAK,+CAA+C,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,4BAA4B,CAAC,mBAAmB,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,8CAA8C,CAAC;QAC7D,YAAY,EAAE,QAAQ;QACtB,sBAAsB,EAAE,+CAA+C;QACvE,cAAc;KACf,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACpE,OAAO,SAAS,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sCAAsC,CAAC,MAAsB;IAC3E,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC;QACpC,MAAM,CAAC,uBAAuB,GAAG,EAAE,CAAC;IACtC,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,sBAAsB,CAAC;IAChD,MAAM,mBAAmB,GAAG,MAAM,CAAC,mBAAmB,CAAC;IACvD,MAAM,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC;IACrD,IAAI,CAAC,SAAS,IAAI,CAAC,mBAAmB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC9D,+BAA+B,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IACD,IAAI,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;IAC7C,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,eAAe,GAAG,6BAA6B,CAC7C,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,EACtC,4BAA4B,CAAC,mBAAmB,CAAC,CAClD,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,eAAe,CAAC,EAAE,CAAC;QACtF,+BAA+B,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IACD,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC;QAClC,sBAAsB,EAAE,SAAS;QACjC,eAAe;QACf,mBAAmB;QACnB,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,kBAAkB;QAClB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACxD,CAAC,CAAC;IACH,+BAA+B,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,6BAA6B,CAAC,MAAsB;IAClE,OAAO,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAAC,MAAsB;IACpE,MAAM,MAAM,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,sBAAsB,GAAG,MAAM,CAAC,sBAAsB,CAAC;QAC9D,MAAM,CAAC,mBAAmB,GAAG,MAAM,CAAC,mBAAmB,CAAC;QACxD,MAAM,CAAC,oBAAoB,GAAG,MAAM,CAAC,oBAAoB,CAAC;QAC1D,MAAM,CAAC,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC;QACtD,MAAM,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,sBAAsB,GAAG,SAAS,CAAC;QAC1C,MAAM,CAAC,mBAAmB,GAAG,SAAS,CAAC;QACvC,MAAM,CAAC,oBAAoB,GAAG,SAAS,CAAC;QACxC,MAAM,CAAC,kBAAkB,GAAG,SAAS,CAAC;QACtC,MAAM,CAAC,eAAe,GAAG,SAAS,CAAC;IACrC,CAAC;AACH,CAAC;AAED,SAAS,mCAAmC,CAAC,MAAsB;IACjE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,mEAAmE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,MAAM,YAAY,GAAG,uCAAuC,CAC1D,iBAAiB,MAAM,CAAC,YAAY,EAAE,EACtC,iBAAiB,MAAM,CAAC,YAAY,mBAAmB,CACxD,CAAC;IACF,MAAM,mBAAmB,GAAG,4BAA4B,CAAC,YAAY,CAAC,cAAe,CAAC,CAAC;IACvF,MAAM,oBAAoB,GAAG,4BAA4B,CAAC,YAAY,CAAC,eAAgB,CAAC,CAAC;IACzF,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAE,GAAG,0BAA0B,CACxE,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,UAAU,EACjB,mBAAmB,CACpB,CAAC;IACF,MAAM,KAAK,GAAgC;QACzC,sBAAsB,EAAE,+CAA+C;QACvE,eAAe;QACf,mBAAmB;QACnB,oBAAoB;QACpB,kBAAkB;QAClB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,0CAA0C,CACjD,MAAsB,EACtB,mBAIC;IAED,IAAI,CAAC,mCAAmC,CACtC,MAAM,CAAC,YAAY,EACnB,mBAAmB,CAAC,sBAAsB,EAC1C,mBAAmB,CAAC,mBAAmB,EACvC,mBAAmB,CAAC,kBAAkB,CACvC,EAAE,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,oDAAoD,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,cAAc,GAAG,4BAA4B,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,CAAC;IAC7F,MAAM,eAAe,GAAG,6BAA6B,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC3F,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,eAAe,CAAC,EAAE,CAAC;QACvF,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC;YAClC,sBAAsB,EAAE,mBAAmB,CAAC,sBAAsB;YAClE,eAAe;YACf,mBAAmB,EAAE,mBAAmB,CAAC,mBAAmB;YAC5D,kBAAkB,EAAE,mBAAmB,CAAC,kBAAkB;YAC1D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;IACD,+BAA+B,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC"}

package/dist/approved-private-replica-proof-runs.d.ts

@@ -0,0 +1,40 @@
+import { type ApprovedPrivateReplicaAuthorityResolution } from './approved-private-replica.js';
+import type { DKGAgent } from './dkg-agent.js';
+/** Runs of the local proof one decision may use: the first and two more. */
+export declare const APPROVED_PRIVATE_REPLICA_PROOF_MAX_RUNS = 3;
+/** Why a run said nothing about the member, so the proof may run again. */
+export type ApprovedPrivateReplicaProofRerunCause = 'metadata-moved' | 'timeout';
+export type ApprovedPrivateReplicaProofOutcome = Readonly<{
+    kind: 'proved';
+    resolution: ApprovedPrivateReplicaAuthorityResolution;
+}>
+/** A run read unmoved metadata to the end and found no current proof. */
+ | Readonly<{
+    kind: 'absent';
+}>
+/** Every run was discarded because the graph's metadata moved while it read. */
+ | Readonly<{
+    kind: 'metadata-moved';
+}>;
+/**
+ * Run the approved member's local proof for one decision, and run it again
+ * where a run said nothing about the member: its time limit ended it, or the
+ * graph's metadata revision moved under reads that otherwise all held.
+ *
+ * Nothing is relaxed. Each run is the complete proof under its own time limit
+ * and its own revision fence, the approval is read again before each run, and
+ * every run is held to the request generation the first one read. A run that
+ * finds anything else (no approval, another generation, a pending registration,
+ * a failed read) ends the decision exactly as a single run does: `absent`, or
+ * the error it threw. So does the last permitted run, whatever its cause.
+ */
+export declare function resolveApprovedPrivateReplicaAuthorityWithinRuns(agent: DKGAgent, contextGraphId: string, approvedAgentAddress: string, fences: {
+    readonly approvalStillHolds: () => boolean;
+    readonly readMetadataRevision: () => string;
+}, options: {
+    readonly timeoutMs: number;
+    readonly signal?: AbortSignal;
+    /** Told before each further run, for the log. */
+    readonly onRerun?: (cause: ApprovedPrivateReplicaProofRerunCause, run: number) => void;
+}): Promise<ApprovedPrivateReplicaProofOutcome>;
+//# sourceMappingURL=approved-private-replica-proof-runs.d.ts.map

package/dist/approved-private-replica-proof-runs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approved-private-replica-proof-runs.d.ts","sourceRoot":"","sources":["../src/approved-private-replica-proof-runs.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,yCAAyC,EAC/C,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C,4EAA4E;AAC5E,eAAO,MAAM,uCAAuC,IAAI,CAAC;AAEzD,2EAA2E;AAC3E,MAAM,MAAM,qCAAqC,GAAG,gBAAgB,GAAG,SAAS,CAAC;AAEjF,MAAM,MAAM,kCAAkC,GAC1C,QAAQ,CAAC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,UAAU,EAAE,yCAAyC,CAAA;CAAE,CAAC;AACrF,yEAAyE;GACvE,QAAQ,CAAC;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAC9B,gFAAgF;GAC9E,QAAQ,CAAC;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,CAAC,CAAC;AAEzC;;;;;;;;;;;GAWG;AACH,wBAAsB,gDAAgD,CACpE,KAAK,EAAE,QAAQ,EACf,cAAc,EAAE,MAAM,EACtB,oBAAoB,EAAE,MAAM,EAC5B,MAAM,EAAE;IACN,QAAQ,CAAC,kBAAkB,EAAE,MAAM,OAAO,CAAC;IAC3C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,MAAM,CAAC;CAC7C,EACD,OAAO,EAAE;IACP,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,iDAAiD;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,qCAAqC,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACxF,GACA,OAAO,CAAC,kCAAkC,CAAC,CAsC7C"}

package/dist/approved-private-replica-proof-runs.js

@@ -0,0 +1,49 @@
+// SPDX-License-Identifier: Apache-2.0
+import { resolveApprovedPrivateReplicaAuthority, } from './approved-private-replica.js';
+import { isBoundedOperationTimeoutError, runBoundedOperation } from './bounded-operation.js';
+/** Runs of the local proof one decision may use: the first and two more. */
+export const APPROVED_PRIVATE_REPLICA_PROOF_MAX_RUNS = 3;
+/**
+ * Run the approved member's local proof for one decision, and run it again
+ * where a run said nothing about the member: its time limit ended it, or the
+ * graph's metadata revision moved under reads that otherwise all held.
+ *
+ * Nothing is relaxed. Each run is the complete proof under its own time limit
+ * and its own revision fence, the approval is read again before each run, and
+ * every run is held to the request generation the first one read. A run that
+ * finds anything else (no approval, another generation, a pending registration,
+ * a failed read) ends the decision exactly as a single run does: `absent`, or
+ * the error it threw. So does the last permitted run, whatever its cause.
+ */
+export async function resolveApprovedPrivateReplicaAuthorityWithinRuns(agent, contextGraphId, approvedAgentAddress, fences, options) {
+    let requestGeneration;
+    const acceptsRequestGeneration = (observed) => ((requestGeneration ??= observed) === observed);
+    for (let run = 1;; run += 1) {
+        const metadataRevision = fences.readMetadataRevision();
+        let metadataMoved = false;
+        let timeout;
+        try {
+            const resolution = await runBoundedOperation((signal) => resolveApprovedPrivateReplicaAuthority(agent, contextGraphId, approvedAgentAddress, fences.approvalStillHolds, () => fences.readMetadataRevision() === metadataRevision, signal, { acceptsRequestGeneration, metadataMoved: () => { metadataMoved = true; } }), {
+                label: `resolveApprovedPrivateReplicaAuthority(${contextGraphId})`,
+                timeoutMs: options.timeoutMs,
+                signal: options.signal,
+            });
+            if (resolution !== null)
+                return { kind: 'proved', resolution };
+            if (!metadataMoved)
+                return { kind: 'absent' };
+        }
+        catch (error) {
+            if (!isBoundedOperationTimeoutError(error))
+                throw error;
+            timeout = error;
+        }
+        if (run >= APPROVED_PRIVATE_REPLICA_PROOF_MAX_RUNS || !fences.approvalStillHolds()) {
+            if (timeout !== undefined)
+                throw timeout;
+            return { kind: 'metadata-moved' };
+        }
+        options.onRerun?.(timeout === undefined ? 'metadata-moved' : 'timeout', run + 1);
+    }
+}
+//# sourceMappingURL=approved-private-replica-proof-runs.js.map

package/dist/approved-private-replica-proof-runs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approved-private-replica-proof-runs.js","sourceRoot":"","sources":["../src/approved-private-replica-proof-runs.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EACL,sCAAsC,GAEvC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,8BAA8B,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAG7F,4EAA4E;AAC5E,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC;AAYzD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gDAAgD,CACpE,KAAe,EACf,cAAsB,EACtB,oBAA4B,EAC5B,MAGC,EACD,OAKC;IAED,IAAI,iBAAqC,CAAC;IAC1C,MAAM,wBAAwB,GAAG,CAAC,QAAgB,EAAW,EAAE,CAAC,CAC9D,CAAC,iBAAiB,KAAK,QAAQ,CAAC,KAAK,QAAQ,CAC9C,CAAC;IACF,KAAK,IAAI,GAAG,GAAG,CAAC,GAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,gBAAgB,GAAG,MAAM,CAAC,oBAAoB,EAAE,CAAC;QACvD,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAC1C,CAAC,MAAM,EAAE,EAAE,CAAC,sCAAsC,CAChD,KAAK,EACL,cAAc,EACd,oBAAoB,EACpB,MAAM,CAAC,kBAAkB,EACzB,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,gBAAgB,EACxD,MAAM,EACN,EAAE,wBAAwB,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAC7E,EACD;gBACE,KAAK,EAAE,0CAA0C,cAAc,GAAG;gBAClE,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CACF,CAAC;YACF,IAAI,UAAU,KAAK,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;YAC/D,IAAI,CAAC,aAAa;gBAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,8BAA8B,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YACxD,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;QACD,IAAI,GAAG,IAAI,uCAAuC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,CAAC;YACnF,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,OAAO,CAAC;YACzC,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;QACpC,CAAC;QACD,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IACnF,CAAC;AACH,CAAC"}

package/dist/approved-private-replica.d.ts

@@ -43,6 +43,23 @@ export type ApprovedPrivateReplicaAuthorityResolution = Readonly<{
     onChainId: string;
     authority: ApprovedPrivateReplicaAuthority;
 }>;
+/**
+ * Hooks for a caller that may run the proof again for the same decision. Both
+ * can only take a result away from a run; neither can add one.
+ */
+export interface ApprovedPrivateReplicaProofRun {
+    /**
+     * Called with the generation of the approved request the run starts from.
+     * `false` ends the run without a proof, which is how every run of one
+     * decision is held to the generation the first one read.
+     */
+    acceptsRequestGeneration(requestGeneration: string): boolean;
+    /**
+     * Called when a run is discarded for a moved metadata revision and nothing
+     * else: every check before that one held.
+     */
+    metadataMoved(): void;
+}
 /**
  * Resolve the current authority proved by a durable approved private join.
  *
@@ -50,5 +67,5 @@ export type ApprovedPrivateReplicaAuthorityResolution = Readonly<{
  * source-qualified private roster. Callers must independently establish exact
  * finalized chain-name absence before treating the graph as unregistered.
  */
-export declare function resolveApprovedPrivateReplicaAuthority(agent: DKGAgent, contextGraphId: string, approvedAgentAddress: string | undefined, approvalStillHolds: () => boolean, metadataStillCurrent: () => boolean, signal?: AbortSignal): Promise<ApprovedPrivateReplicaAuthorityResolution | null>;
+export declare function resolveApprovedPrivateReplicaAuthority(agent: DKGAgent, contextGraphId: string, approvedAgentAddress: string | undefined, approvalStillHolds: () => boolean, metadataStillCurrent: () => boolean, signal?: AbortSignal, run?: ApprovedPrivateReplicaProofRun): Promise<ApprovedPrivateReplicaAuthorityResolution | null>;
 //# sourceMappingURL=approved-private-replica.d.ts.map

package/dist/approved-private-replica.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approved-private-replica.d.ts","sourceRoot":"","sources":["../src/approved-private-replica.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAK/C,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C;;;;;;OAMG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChD;AAED;;;;GAIG;AACH,wBAAgB,wCAAwC,CACtD,SAAS,EAAE,+BAA+B,EAC1C,KAAK,SAAa,GACjB,OAAO,CAGT;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,yCAAyC,GACjD,QAAQ,CAAC;IACP,IAAI,EAAE,8BAA8B,CAAC;IACrC,SAAS,EAAE,+BAA+B,CAAC;CAC5C,CAAC,GACF,QAAQ,CAAC;IACP,IAAI,EAAE,2BAA2B,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,+BAA+B,CAAC;CAC5C,CAAC,CAAC;AA4BP;;;;;;GAMG;AACH,wBAAsB,sCAAsC,CAC1D,KAAK,EAAE,QAAQ,EACf,cAAc,EAAE,MAAM,EACtB,oBAAoB,EAAE,MAAM,GAAG,SAAS,EACxC,kBAAkB,EAAE,MAAM,OAAO,EACjC,oBAAoB,EAAE,MAAM,OAAO,EACnC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,yCAAyC,GAAG,IAAI,CAAC,CA4G3D"}
+{"version":3,"file":"approved-private-replica.d.ts","sourceRoot":"","sources":["../src/approved-private-replica.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAK/C,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C;;;;;;OAMG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChD;AAED;;;;GAIG;AACH,wBAAgB,wCAAwC,CACtD,SAAS,EAAE,+BAA+B,EAC1C,KAAK,SAAa,GACjB,OAAO,CAGT;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,yCAAyC,GACjD,QAAQ,CAAC;IACP,IAAI,EAAE,8BAA8B,CAAC;IACrC,SAAS,EAAE,+BAA+B,CAAC;CAC5C,CAAC,GACF,QAAQ,CAAC;IACP,IAAI,EAAE,2BAA2B,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,+BAA+B,CAAC;CAC5C,CAAC,CAAC;AAEP;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C;;;;OAIG;IACH,wBAAwB,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC;IAC7D;;;OAGG;IACH,aAAa,IAAI,IAAI,CAAC;CACvB;AA4BD;;;;;;GAMG;AACH,wBAAsB,sCAAsC,CAC1D,KAAK,EAAE,QAAQ,EACf,cAAc,EAAE,MAAM,EACtB,oBAAoB,EAAE,MAAM,GAAG,SAAS,EACxC,kBAAkB,EAAE,MAAM,OAAO,EACjC,oBAAoB,EAAE,MAAM,OAAO,EACnC,MAAM,CAAC,EAAE,WAAW,EACpB,GAAG,CAAC,EAAE,8BAA8B,GACnC,OAAO,CAAC,yCAAyC,GAAG,IAAI,CAAC,CAiH3D"}

package/dist/approved-private-replica.js

@@ -48,7 +48,7 @@ function parseRegisteredMetaOnChainId(bindings) {
  * source-qualified private roster. Callers must independently establish exact
  * finalized chain-name absence before treating the graph as unregistered.
  */
-export async function resolveApprovedPrivateReplicaAuthority(agent, contextGraphId, approvedAgentAddress, approvalStillHolds, metadataStillCurrent, signal) {
+export async function resolveApprovedPrivateReplicaAuthority(agent, contextGraphId, approvedAgentAddress, approvalStillHolds, metadataStillCurrent, signal, run) {
     const approved = approvedAgentAddress?.toLowerCase();
     const hasLocalAgent = () => agent.listLocalAgents().some(({ agentAddress }) => agentAddress.toLowerCase() === approved);
     if (!approved || !hasLocalAgent())
@@ -64,6 +64,8 @@ export async function resolveApprovedPrivateReplicaAuthority(agent, contextGraph
         || !EVM_ADDRESS.test(state.curatorAgentAddress)
         || state.curatorAgentAddress === ZERO_ADDRESS)
         return null;
+    if (run?.acceptsRequestGeneration(state.requestGeneration) === false)
+        return null;
     const ownerAddress = state.curatorAgentAddress;
     const meta = await agent.getOwnCgMetaFacts(contextGraphId, { signal });
     const owners = new Set(meta.curators.map((did) => did
@@ -111,9 +113,13 @@ export async function resolveApprovedPrivateReplicaAuthority(agent, contextGraph
         || current.requestGeneration !== state.requestGeneration
         || current.curatorPeerId !== state.curatorPeerId
         || current.curatorAgentAddress !== ownerAddress
-        || current.curatorAuthorityEra !== '0'
-        || !metadataStillCurrent())
+        || current.curatorAuthorityEra !== '0')
+        return null;
+    // Checked last, so a run discarded here had every earlier check hold.
+    if (!metadataStillCurrent()) {
+        run?.metadataMoved();
         return null;
+    }
     // The proof query embeds its start time. Recheck the deadline it proved
     // after every await so a delegation cannot expire while the read is in
     // flight and still authorize the replica.

package/dist/approved-private-replica.js.map

@@ -1 +1 @@
-{"version":3,"file":"approved-private-replica.js","sourceRoot":"","sources":["../src/approved-private-replica.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EACL,sCAAsC,EACtC,mCAAmC,GACpC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,6CAA6C,GAC9C,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,sCAAsC,EAAE,MAAM,kCAAkC,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,MAAM,YAAY,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AAwB3C;;;;GAIG;AACH,MAAM,UAAU,wCAAwC,CACtD,SAA0C,EAC1C,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;IAElB,OAAO,SAAS,CAAC,qBAAqB,KAAK,SAAS;WAC/C,sCAAsC,CAAC,SAAS,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;AACtF,CAAC;AAsBD;;;;GAIG;AACH,SAAS,4BAA4B,CACnC,QAAqD;IAErD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC7C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,UAAU,GAAG,IAAI,CAAC;YAClB,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,sCAAsC,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;IACxC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,UAAU;QAAE,OAAO,SAAS,CAAC;IACjC,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,KAAe,EACf,cAAsB,EACtB,oBAAwC,EACxC,kBAAiC,EACjC,oBAAmC,EACnC,MAAoB;IAEpB,MAAM,QAAQ,GAAG,oBAAoB,EAAE,WAAW,EAAE,CAAC;IACrD,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,IAAI,CACtD,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,QAAQ,CAC9D,CAAC;IACF,IAAI,CAAC,QAAQ,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO,IAAI,CAAC;IAC/C,8EAA8E;IAC9E,wEAAwE;IACxE,4CAA4C;IAC5C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,6BAA6B,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAClF,IACE,KAAK,EAAE,MAAM,KAAK,UAAU;WACzB,CAAC,KAAK,CAAC,aAAa;WACpB,KAAK,CAAC,mBAAmB,KAAK,GAAG;WACjC,CAAC,KAAK,CAAC,mBAAmB;WAC1B,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;WAC5C,KAAK,CAAC,mBAAmB,KAAK,YAAY;QAC7C,OAAO,IAAI,CAAC;IAEd,MAAM,YAAY,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG;SAClD,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,kBAAkB,GAAG,MAAM,KAAK,CAAC,uCAAuC,CAAC,cAAc,CAAC,CAAC;IAC/F,IACE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,SAAS;WAClD,MAAM,CAAC,IAAI,KAAK,CAAC;WACjB,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;WACzB,QAAQ,CAAC,IAAI,KAAK,CAAC;WACnB,CAAC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,aAAa,EAAE,CAAC;QACxD,sEAAsE;QACtE,2EAA2E;QAC3E,kEAAkE;WAC/D,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;WAC3E,kBAAkB,KAAK,SAAS;QACnC,OAAO,IAAI,CAAC;IAEd,uEAAuE;IACvE,wEAAwE;IACxE,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,6CAA6C,CACjF,cAAc,EACd,EAAE,oBAAoB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,KAAK,CAAC,MAAM,EAAE,CAC1E,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC,CAAC;IACpE,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,gBAAgB,GAAG,mCAAmC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7E,IAAI,gBAAgB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,uBAAuB,GAAG,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7E,IAAI,uBAAuB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEvD,0EAA0E;IAC1E,oEAAoE;IACpE,4EAA4E;IAC5E,+CAA+C;IAC/C,MAAM,yBAAyB,GAAG,MAAM,KAAK;SAC1C,uCAAuC,CAAC,cAAc,CAAC,CAAC;IAC3D,IACE,yBAAyB,KAAK,SAAS;WACpC,CACD,uBAAuB,KAAK,IAAI;eAC7B,yBAAyB,KAAK,cAAc,CAChD,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,6BAA6B,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACpF,IACE,CAAC,kBAAkB,EAAE;WAClB,CAAC,aAAa,EAAE;WAChB,OAAO,EAAE,MAAM,KAAK,UAAU;WAC9B,OAAO,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;WACrD,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;WAC7C,OAAO,CAAC,mBAAmB,KAAK,YAAY;WAC5C,OAAO,CAAC,mBAAmB,KAAK,GAAG;WACnC,CAAC,oBAAoB,EAAE;QAC1B,OAAO,IAAI,CAAC;IAEd,wEAAwE;IACxE,uEAAuE;IACvE,0CAA0C;IAC1C,IAAI,CAAC,sCAAsC,CAAC,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3E,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,oBAAoB,EAAE,QAAQ;QAC9B,YAAY;QACZ,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,0EAA0E;QAC1E,sEAAsE;QACtE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC1C,sEAAsE;QACtE,yEAAyE;QACzE,8BAA8B;QAC9B,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;QACnD,qBAAqB,EAAE,gBAAgB;KACxC,CAAC,CAAC;IACH,IAAI,uBAAuB,KAAK,IAAI,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,2BAA2B;YACjC,SAAS,EAAE,uBAAuB;YAClC,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,8BAA8B;QACpC,SAAS;KACV,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"approved-private-replica.js","sourceRoot":"","sources":["../src/approved-private-replica.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EACL,sCAAsC,EACtC,mCAAmC,GACpC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,6CAA6C,GAC9C,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,sCAAsC,EAAE,MAAM,kCAAkC,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,MAAM,YAAY,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AAwB3C;;;;GAIG;AACH,MAAM,UAAU,wCAAwC,CACtD,SAA0C,EAC1C,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;IAElB,OAAO,SAAS,CAAC,qBAAqB,KAAK,SAAS;WAC/C,sCAAsC,CAAC,SAAS,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;AACtF,CAAC;AAwCD;;;;GAIG;AACH,SAAS,4BAA4B,CACnC,QAAqD;IAErD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC7C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,UAAU,GAAG,IAAI,CAAC;YAClB,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,sCAAsC,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;IACxC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,UAAU;QAAE,OAAO,SAAS,CAAC;IACjC,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,KAAe,EACf,cAAsB,EACtB,oBAAwC,EACxC,kBAAiC,EACjC,oBAAmC,EACnC,MAAoB,EACpB,GAAoC;IAEpC,MAAM,QAAQ,GAAG,oBAAoB,EAAE,WAAW,EAAE,CAAC;IACrD,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,IAAI,CACtD,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,QAAQ,CAC9D,CAAC;IACF,IAAI,CAAC,QAAQ,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO,IAAI,CAAC;IAC/C,8EAA8E;IAC9E,wEAAwE;IACxE,4CAA4C;IAC5C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,6BAA6B,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAClF,IACE,KAAK,EAAE,MAAM,KAAK,UAAU;WACzB,CAAC,KAAK,CAAC,aAAa;WACpB,KAAK,CAAC,mBAAmB,KAAK,GAAG;WACjC,CAAC,KAAK,CAAC,mBAAmB;WAC1B,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;WAC5C,KAAK,CAAC,mBAAmB,KAAK,YAAY;QAC7C,OAAO,IAAI,CAAC;IACd,IAAI,GAAG,EAAE,wBAAwB,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAElF,MAAM,YAAY,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG;SAClD,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,kBAAkB,GAAG,MAAM,KAAK,CAAC,uCAAuC,CAAC,cAAc,CAAC,CAAC;IAC/F,IACE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,SAAS;WAClD,MAAM,CAAC,IAAI,KAAK,CAAC;WACjB,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;WACzB,QAAQ,CAAC,IAAI,KAAK,CAAC;WACnB,CAAC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,aAAa,EAAE,CAAC;QACxD,sEAAsE;QACtE,2EAA2E;QAC3E,kEAAkE;WAC/D,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;WAC3E,kBAAkB,KAAK,SAAS;QACnC,OAAO,IAAI,CAAC;IAEd,uEAAuE;IACvE,wEAAwE;IACxE,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,6CAA6C,CACjF,cAAc,EACd,EAAE,oBAAoB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,KAAK,CAAC,MAAM,EAAE,CAC1E,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC,CAAC;IACpE,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,gBAAgB,GAAG,mCAAmC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7E,IAAI,gBAAgB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,uBAAuB,GAAG,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7E,IAAI,uBAAuB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEvD,0EAA0E;IAC1E,oEAAoE;IACpE,4EAA4E;IAC5E,+CAA+C;IAC/C,MAAM,yBAAyB,GAAG,MAAM,KAAK;SAC1C,uCAAuC,CAAC,cAAc,CAAC,CAAC;IAC3D,IACE,yBAAyB,KAAK,SAAS;WACpC,CACD,uBAAuB,KAAK,IAAI;eAC7B,yBAAyB,KAAK,cAAc,CAChD,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,6BAA6B,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACpF,IACE,CAAC,kBAAkB,EAAE;WAClB,CAAC,aAAa,EAAE;WAChB,OAAO,EAAE,MAAM,KAAK,UAAU;WAC9B,OAAO,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;WACrD,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;WAC7C,OAAO,CAAC,mBAAmB,KAAK,YAAY;WAC5C,OAAO,CAAC,mBAAmB,KAAK,GAAG;QACtC,OAAO,IAAI,CAAC;IACd,sEAAsE;IACtE,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;QAC5B,GAAG,EAAE,aAAa,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wEAAwE;IACxE,uEAAuE;IACvE,0CAA0C;IAC1C,IAAI,CAAC,sCAAsC,CAAC,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3E,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,oBAAoB,EAAE,QAAQ;QAC9B,YAAY;QACZ,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,0EAA0E;QAC1E,sEAAsE;QACtE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC1C,sEAAsE;QACtE,yEAAyE;QACzE,8BAA8B;QAC9B,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;QACnD,qBAAqB,EAAE,gBAAgB;KACxC,CAAC,CAAC;IACH,IAAI,uBAAuB,KAAK,IAAI,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,2BAA2B;YACjC,SAAS,EAAE,uBAAuB;YAClC,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,8BAA8B;QACpC,SAAS;KACV,CAAC,CAAC;AACL,CAAC"}

package/dist/author-signer.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Who signs as an agent of the node, resolved into one signing capability:
+ * the agent's key held on the node, as a wallet, else the external signer that
+ * holds the agent's address as an author key (never a payer). Author
+ * attestations (EIP-712 typed data), sync requests and shared-memory gossip
+ * (EIP-191 messages) sign through it, and no protocol builds a wallet from a
+ * stored key itself. Which agent may sign stays each protocol's decision; a
+ * pre-signed attestation, an author callback and the publisher's own fallback
+ * stay explicit at their call sites.
+ */
+import { ethers } from 'ethers';
+import type { AuthorSigner, ExternalAuthorSigners } from '@origintrail-official/dkg-chain';
+/** The node's local agents, as far as author signing needs them. */
+interface LocalAgentKeys {
+    getLocalAgentMode(address: string): 'custodial' | 'self-sovereign' | undefined;
+    getCustodialAgentPrivateKey(address: string): string | undefined;
+}
+/**
+ * The wallet of an agent key held on the node, the key stored with or without
+ * its 0x prefix: the one place where an agent key becomes a signer.
+ */
+export declare function agentKeyWallet(privateKey: string): ethers.Wallet;
+/** The external signer for `address`, when it is one of the author keys `authors`. */
+export declare function externalAuthorSignerFor(authors: ExternalAuthorSigners | undefined, address: string): Promise<AuthorSigner | undefined>;
+/**
+ * The signer of the agent `address`: `privateKey`, the agent's key held on
+ * the node, as a wallet, which takes precedence and asks the external signer
+ * nothing; else the external signer that holds `address` as one of the author
+ * keys `authors`. Undefined when the node can sign as the agent neither way.
+ */
+export declare function agentSigner(authors: ExternalAuthorSigners | undefined, address: string, privateKey: string | undefined): Promise<AuthorSigner | undefined>;
+/**
+ * The signer of `address` when the node can sign for it without the
+ * publisher: its custodial key held on the node, else the external signer
+ * that holds it as an author key.
+ */
+export declare function heldAuthorSigner(agents: LocalAgentKeys, authors: ExternalAuthorSigners | undefined, address: string): Promise<AuthorSigner | undefined>;
+/**
+ * The signer of a registered local agent named as the author: a
+ * self-sovereign agent through the external signer that holds its author key;
+ * a custodial agent with its key on the node, which takes precedence, else
+ * through the external signer when the key moved there as an author key.
+ * Errors start with `label`; the one for a custodial agent that neither has a
+ * key on file nor is an author key of the signer carries `missingKeyCode`.
+ */
+export declare function registeredAgentAuthorSigner(agents: LocalAgentKeys, authors: ExternalAuthorSigners | undefined, address: string, label: string, missingKeyCode?: string): Promise<AuthorSigner>;
+export {};
+//# sourceMappingURL=author-signer.d.ts.map

package/dist/author-signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"author-signer.d.ts","sourceRoot":"","sources":["../src/author-signer.ts"],"names":[],"mappings":"AACA;;;;;;;;;GASG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,KAAK,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAE3F,oEAAoE;AACpE,UAAU,cAAc;IACtB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,GAAG,gBAAgB,GAAG,SAAS,CAAC;IAC/E,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CAClE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAEhE;AAED,sFAAsF;AACtF,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,qBAAqB,GAAG,SAAS,EAC1C,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAGnC;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,qBAAqB,GAAG,SAAS,EAC1C,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAEnC;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,qBAAqB,GAAG,SAAS,EAC1C,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAEnC;AAED;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,qBAAqB,GAAG,SAAS,EAC1C,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,YAAY,CAAC,CAmBvB"}

package/dist/author-signer.js

@@ -0,0 +1,68 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Who signs as an agent of the node, resolved into one signing capability:
+ * the agent's key held on the node, as a wallet, else the external signer that
+ * holds the agent's address as an author key (never a payer). Author
+ * attestations (EIP-712 typed data), sync requests and shared-memory gossip
+ * (EIP-191 messages) sign through it, and no protocol builds a wallet from a
+ * stored key itself. Which agent may sign stays each protocol's decision; a
+ * pre-signed attestation, an author callback and the publisher's own fallback
+ * stay explicit at their call sites.
+ */
+import { ethers } from 'ethers';
+/**
+ * The wallet of an agent key held on the node, the key stored with or without
+ * its 0x prefix: the one place where an agent key becomes a signer.
+ */
+export function agentKeyWallet(privateKey) {
+    return new ethers.Wallet(privateKey.startsWith('0x') ? privateKey : `0x${privateKey}`);
+}
+/** The external signer for `address`, when it is one of the author keys `authors`. */
+export async function externalAuthorSignerFor(authors, address) {
+    if (authors === undefined || !ethers.isAddress(address))
+        return undefined;
+    return authors.signerFor(address);
+}
+/**
+ * The signer of the agent `address`: `privateKey`, the agent's key held on
+ * the node, as a wallet, which takes precedence and asks the external signer
+ * nothing; else the external signer that holds `address` as one of the author
+ * keys `authors`. Undefined when the node can sign as the agent neither way.
+ */
+export async function agentSigner(authors, address, privateKey) {
+    return privateKey ? agentKeyWallet(privateKey) : externalAuthorSignerFor(authors, address);
+}
+/**
+ * The signer of `address` when the node can sign for it without the
+ * publisher: its custodial key held on the node, else the external signer
+ * that holds it as an author key.
+ */
+export async function heldAuthorSigner(agents, authors, address) {
+    return agentSigner(authors, address, agents.getCustodialAgentPrivateKey(address));
+}
+/**
+ * The signer of a registered local agent named as the author: a
+ * self-sovereign agent through the external signer that holds its author key;
+ * a custodial agent with its key on the node, which takes precedence, else
+ * through the external signer when the key moved there as an author key.
+ * Errors start with `label`; the one for a custodial agent that neither has a
+ * key on file nor is an author key of the signer carries `missingKeyCode`.
+ */
+export async function registeredAgentAuthorSigner(agents, authors, address, label, missingKeyCode) {
+    const mode = agents.getLocalAgentMode(address);
+    if (mode === undefined) {
+        throw new Error(`${label}: authorAgentAddress ${address} is not a registered local agent on this node`);
+    }
+    if (mode === 'self-sovereign') {
+        const external = await externalAuthorSignerFor(authors, address);
+        if (external)
+            return external;
+        throw new Error(`${label}: agent ${address} is registered as self-sovereign — ` +
+            `this node does not hold its private key. Use preSignedAuthorAttestation instead.`);
+    }
+    const signer = await agentSigner(authors, address, agents.getCustodialAgentPrivateKey(address));
+    if (signer)
+        return signer;
+    throw Object.assign(new Error(`${label}: custodial agent ${address} has no private key on file`), missingKeyCode === undefined ? {} : { code: missingKeyCode });
+}
+//# sourceMappingURL=author-signer.js.map

package/dist/author-signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"author-signer.js","sourceRoot":"","sources":["../src/author-signer.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;;;;GASG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAShC;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAA0C,EAC1C,OAAe;IAEf,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1E,OAAO,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAA0C,EAC1C,OAAe,EACf,UAA8B;IAE9B,OAAO,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC7F,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAsB,EACtB,OAA0C,EAC1C,OAAe;IAEf,OAAO,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAsB,EACtB,OAA0C,EAC1C,OAAe,EACf,KAAa,EACb,cAAuB;IAEvB,MAAM,IAAI,GAAG,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wBAAwB,OAAO,+CAA+C,CAAC,CAAC;IAC1G,CAAC;IACD,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjE,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,WAAW,OAAO,qCAAqC;YAC7D,kFAAkF,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAC;IAChG,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,OAAO,6BAA6B,CAAC,EAC5E,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAC7D,CAAC;AACJ,CAAC"}

package/dist/authority-index-config.d.ts

@@ -33,6 +33,7 @@ export interface AuthorityIndexBootstrapInput {
     readonly chainAdapter?: unknown;
     readonly chainConfig?: {
         readonly operationalKeys?: readonly string[];
+        readonly signers?: readonly unknown[];
     };
     readonly localContextGraphAuthorityIndexStore?: unknown;
     /** The network file's relay multiaddrs; see `DKGAgentConfig.networkRelays`. */

package/dist/authority-index-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authority-index-config.d.ts","sourceRoot":"","sources":["../src/authority-index-config.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,sCAAsC,EAC5C,MAAM,uCAAuC,CAAC;AAI/C,oEAAoE;AACpE,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,eAAe,CAAC;IACtB,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,4BAA6B,SAAQ,oBAAoB;IACxE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,sCAAsC,CAAC;CAC3D;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,MAAM,GAAG,MAAM,GACxB,4BAA4B,GAAG,SAAS,CA6C1C;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,4BAA4B,GAAG,MAAM,CAKtF;AAED,oGAAoG;AACpG,MAAM,WAAW,4BAA4B;IAC3C,sEAAsE;IACtE,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE;QAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;IACxE,QAAQ,CAAC,oCAAoC,CAAC,EAAE,OAAO,CAAC;IACxD,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,MAAM,MAAM,2BAA2B,GACnC;IACA,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;CAC/C,GACC;IACA;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;CAC/C,GACC;IACA,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;IAC5B,iFAAiF;IACjF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEJ,0DAA0D;AAC1D,MAAM,MAAM,0BAA0B,GAAG,OAAO,CAAC,2BAA2B,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;CAAE,CAAC,CAAC;AAEpH;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,4BAA4B,GAAG,2BAA2B,CAkB5G"}
+{"version":3,"file":"authority-index-config.d.ts","sourceRoot":"","sources":["../src/authority-index-config.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,sCAAsC,EAC5C,MAAM,uCAAuC,CAAC;AAI/C,oEAAoE;AACpE,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,eAAe,CAAC;IACtB,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,4BAA6B,SAAQ,oBAAoB;IACxE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,sCAAsC,CAAC;CAC3D;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,MAAM,GAAG,MAAM,GACxB,4BAA4B,GAAG,SAAS,CA6C1C;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,4BAA4B,GAAG,MAAM,CAKtF;AAED,oGAAoG;AACpG,MAAM,WAAW,4BAA4B;IAC3C,sEAAsE;IACtE,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE;QAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;KAAE,CAAC;IAC/G,QAAQ,CAAC,oCAAoC,CAAC,EAAE,OAAO,CAAC;IACxD,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,MAAM,MAAM,2BAA2B,GACnC;IACA,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;CAC/C,GACC;IACA;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;CAC/C,GACC;IACA,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;IAC5B,iFAAiF;IACjF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEJ,0DAA0D;AAC1D,MAAM,MAAM,0BAA0B,GAAG,OAAO,CAAC,2BAA2B,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;CAAE,CAAC,CAAC;AAEpH;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,4BAA4B,GAAG,2BAA2B,CAkB5G"}

package/dist/authority-index-config.js

@@ -99,7 +99,7 @@ export function planAuthorityIndexBootstrap(input) {
 /**
  * Core-snapshot mode needs the agent to construct its own EVM adapter, so it
  * installs the snapshot transport and trust namespace together, with
- * operational keys and a durable local index store.
+ * operational keys (or external signers) and a durable local index store.
  */
 function unmetCoreSnapshotPrerequisite(input) {
     if (input.chainAdapter !== undefined) {
@@ -107,7 +107,7 @@ function unmetCoreSnapshotPrerequisite(input) {
     }
     if (input.chainConfig === undefined)
         return 'no EVM chain is configured';
-    if (!input.chainConfig.operationalKeys?.length)
+    if (!input.chainConfig.operationalKeys?.length && !input.chainConfig.signers?.length)
         return 'no operational key is configured';
     if (input.localContextGraphAuthorityIndexStore === undefined) {
         return 'no local authority index store is available';