@origintrail-official/dkg-agent 10.0.24 → 10.0.25

package/dist/agent-query-options.d.ts

@@ -0,0 +1,75 @@
+import type { GetView, TrustLevel, OperationContext } from "@origintrail-official/dkg-core";
+import type { PublicSnapshotMode } from "./public-snapshot-evidence.js";
+export interface AgentQueryOptions {
+    contextGraphId?: string;
+    accessDenied?: "empty" | "error";
+    /** Require routing to preserve every selected graph. */
+    requireCompleteGraphScope?: boolean;
+    redactQuery?: boolean;
+    maxResponseBytes?: number;
+    /** Independent literal hydration limit; defaults to the response cap. */
+    maxLiteralHydrationBytes?: number;
+    /** Explicit acceptance of configured-core chain evidence for this graph. */
+    chainEvidenceMode?: PublicSnapshotMode;
+    graphSuffix?: "_shared_memory";
+    includeSharedMemory?: boolean;
+    /** @deprecated Use includeSharedMemory */
+    includeWorkspace?: boolean;
+    /**
+     * Opt-in for dashboard/count queries that intentionally enumerate all
+     * registered public content partitions in a scoped `GRAPH ?g` scan.
+     */
+    includeContextGraphPartitions?: boolean;
+    excludeWorkingMemoryPartitions?: boolean;
+    /**
+     * Opt-in: allow the scoped query to reference the context graph's own
+     * `_private` partition (excluded from the scope guard's allow-set by
+     * default). Used by the EPCIS events query, whose SPARQL always names
+     * `<cg>/_private`. Does not widen access for other callers.
+     */
+    includePrivate?: boolean;
+    /** Cancel the underlying store request when the outer caller disconnects. */
+    signal?: AbortSignal;
+    /** Store admission lane used by the query engine. */
+    priority?: import("@origintrail-official/dkg-storage").StoreWorkPriority;
+    /** Store diagnostics / slow-query attribution label. */
+    source?: string;
+    operationCtx?: OperationContext;
+    view?: GetView;
+    agentAddress?: string;
+    verifiedGraph?: string;
+    assertionName?: string;
+    subGraphName?: string;
+    /**
+     * EVM address of the authenticated caller, as resolved by an
+     * outer layer (typically the daemon's per-request auth token).
+     * When set, the agent layer enforces that `view: 'working-memory'`
+     * queries can only read this caller's own WM — cross-agent reads
+     * via a foreign `agentAddress` are silently denied.
+     *
+     * Undefined = no caller authentication context (in-process call
+     * from trusted code). Backwards-compatible with callers that
+     * predate A-1 — they bypass the isolation check.
+     *
+     * Invariant: on a `view: 'working-memory'` read, the agent layer
+     * rejects (silently, with an empty-per-kind result) any
+     * `agentAddress` that differs from `callerAgentAddress`. If
+     * `agentAddress` is omitted, it defaults to `callerAgentAddress`
+     * so an authenticated caller cannot escape isolation by omission.
+     * See spec §04 / RFC-29 for the policy source.
+     */
+    callerAgentAddress?: string;
+    /**
+     * Minimum trust level for the verifiable-memory view (spec §14).
+     * Values above `SelfAttested` require explicit writer-side
+     * `dkg:trustLevel` metadata. Ignored for other views.
+     */
+    minTrust?: TrustLevel;
+    /**
+     * @deprecated Use `minTrust`. Legacy underscore alias preserved for
+     * V10-rc SDK consumers. When both are supplied, `minTrust` wins.
+     * See QueryOptions._minTrust for the deprecation policy.
+     */
+    _minTrust?: TrustLevel;
+}
+//# sourceMappingURL=agent-query-options.d.ts.map

package/dist/agent-query-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-query-options.d.ts","sourceRoot":"","sources":["../src/agent-query-options.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,OAAO,EACP,UAAU,EACV,gBAAgB,EACjB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACxE,MAAM,WAAW,iBAAiB;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;IACjC,wDAAwD;IACxD,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yEAAyE;IACzE,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,4EAA4E;IAC5E,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;IACvC,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,0CAA0C;IAC1C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;OAGG;IACH,6BAA6B,CAAC,EAAE,OAAO,CAAC;IACxC,8BAA8B,CAAC,EAAE,OAAO,CAAC;IACzC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,6EAA6E;IAC7E,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,OAAO,mCAAmC,EAAE,iBAAiB,CAAC;IACzE,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;;;;;;;;OAiBG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB;;;;OAIG;IACH,SAAS,CAAC,EAAE,UAAU,CAAC;CACxB"}

package/dist/agent-query-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=agent-query-options.js.map

package/dist/agent-query-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-query-options.js","sourceRoot":"","sources":["../src/agent-query-options.ts"],"names":[],"mappings":""}

package/dist/agent-work-lifetime.d.ts

@@ -0,0 +1,18 @@
+/** One node lifetime for asynchronous work shared across agent subsystems.
+ * Cancellation fences callers; physical ownership remains until dependencies settle.
+ * Reopening never makes a continuation captured before close current again. */
+export declare class AgentWorkLifetime {
+    private controller;
+    private epoch;
+    private readonly runs;
+    /** Read-only diagnostics; tracking owns retirement of every physical run. */
+    get physicalRuns(): ReadonlySet<Promise<unknown>>;
+    get signal(): AbortSignal;
+    get generation(): number;
+    get closed(): boolean;
+    close(reason?: unknown): void;
+    open(): void;
+    track<T>(run: Promise<T>): Promise<T>;
+    drain(): Promise<void>;
+}
+//# sourceMappingURL=agent-work-lifetime.d.ts.map

package/dist/agent-work-lifetime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-work-lifetime.d.ts","sourceRoot":"","sources":["../src/agent-work-lifetime.ts"],"names":[],"mappings":"AAEA;;+EAE+E;AAC/E,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,UAAU,CAAyB;IAC3C,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA+B;IAEpD,6EAA6E;IAC7E,IAAI,YAAY,IAAI,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAsB;IAEvE,IAAI,MAAM,IAAI,WAAW,CAAmC;IAC5D,IAAI,UAAU,IAAI,MAAM,CAAuB;IAC/C,IAAI,MAAM,IAAI,OAAO,CAAgC;IAErD,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI;IAM7B,IAAI,IAAI,IAAI;IAIZ,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAO/B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAK7B"}

package/dist/agent-work-lifetime.js

@@ -0,0 +1,37 @@
+// SPDX-License-Identifier: Apache-2.0
+/** One node lifetime for asynchronous work shared across agent subsystems.
+ * Cancellation fences callers; physical ownership remains until dependencies settle.
+ * Reopening never makes a continuation captured before close current again. */
+export class AgentWorkLifetime {
+    controller = new AbortController();
+    epoch = 0;
+    runs = new Set();
+    /** Read-only diagnostics; tracking owns retirement of every physical run. */
+    get physicalRuns() { return this.runs; }
+    get signal() { return this.controller.signal; }
+    get generation() { return this.epoch; }
+    get closed() { return this.signal.aborted; }
+    close(reason) {
+        if (this.closed)
+            return;
+        this.epoch++;
+        this.controller.abort(reason);
+    }
+    open() {
+        if (this.closed)
+            this.controller = new AbortController();
+    }
+    track(run) {
+        this.runs.add(run);
+        const retire = () => { this.runs.delete(run); };
+        void run.then(retire, retire);
+        return run;
+    }
+    async drain() {
+        // A retiring dependency may enqueue writes or cleanup on the same owner.
+        // Only track() retires entries; resample until all physical work settles.
+        while (this.runs.size > 0)
+            await Promise.allSettled(this.runs);
+    }
+}
+//# sourceMappingURL=agent-work-lifetime.js.map

package/dist/agent-work-lifetime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-work-lifetime.js","sourceRoot":"","sources":["../src/agent-work-lifetime.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC;;+EAE+E;AAC/E,MAAM,OAAO,iBAAiB;IACpB,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,KAAK,GAAG,CAAC,CAAC;IACD,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;IAEpD,6EAA6E;IAC7E,IAAI,YAAY,KAAoC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEvE,IAAI,MAAM,KAAkB,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,IAAI,UAAU,KAAa,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/C,IAAI,MAAM,KAAc,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAErD,KAAK,CAAC,MAAgB;QACpB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IAC3D,CAAC;IAED,KAAK,CAAI,GAAe;QACtB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,KAAK;QACT,yEAAyE;QACzE,0EAA0E;QAC1E,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;YAAE,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;CACF"}

package/dist/bounded-operation.d.ts

@@ -9,6 +9,12 @@ export declare function isBoundedOperationTimeoutError(error: unknown): error is
 export declare function createAbortError(reason: unknown): Error;
 /** Refuse cancelled work using the canonical normalized AbortError. */
 export declare function throwIfOperationAborted(signal: AbortSignal | undefined): void;
+/**
+ * `work`'s outcome, or the canonical normalized AbortError as soon as `signal`
+ * aborts. Only the caller stops waiting: `work` goes on, and its late outcome
+ * is consumed.
+ */
+export declare function untilOperationAborted<T>(work: Promise<T>, signal: AbortSignal | undefined): Promise<T>;
 /**
  * Run one lazily-started operation with a caller-abort and deadline boundary.
  *

package/dist/bounded-operation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bounded-operation.d.ts","sourceRoot":"","sources":["../src/bounded-operation.ts"],"names":[],"mappings":"AAEA,uDAAuD;AACvD,qBAAa,4BAA6B,SAAQ,KAAK;IAInD,QAAQ,CAAC,cAAc,EAAE,MAAM;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM;IAJ5B,QAAQ,CAAC,IAAI,+BAA+B;gBAGjC,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM;CAK7B;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,4BAA4B,CAMvC;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,GAAG,KAAK,CAWvD;AAED,uEAAuE;AACvE,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAE7E;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,EAClD,OAAO,EAAE;IACP,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GACA,OAAO,CAAC,CAAC,CAAC,CA2DZ"}
+{"version":3,"file":"bounded-operation.d.ts","sourceRoot":"","sources":["../src/bounded-operation.ts"],"names":[],"mappings":"AAEA,uDAAuD;AACvD,qBAAa,4BAA6B,SAAQ,KAAK;IAInD,QAAQ,CAAC,cAAc,EAAE,MAAM;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM;IAJ5B,QAAQ,CAAC,IAAI,+BAA+B;gBAGjC,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM;CAK7B;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,4BAA4B,CAMvC;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,GAAG,KAAK,CAWvD;AAED,uEAAuE;AACvE,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAE7E;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAQtG;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,EAClD,OAAO,EAAE;IACP,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GACA,OAAO,CAAC,CAAC,CAAC,CA2DZ"}

package/dist/bounded-operation.js

@@ -34,6 +34,23 @@ export function throwIfOperationAborted(signal) {
     if (signal?.aborted)
         throw createAbortError(signal.reason);
 }
+/**
+ * `work`'s outcome, or the canonical normalized AbortError as soon as `signal`
+ * aborts. Only the caller stops waiting: `work` goes on, and its late outcome
+ * is consumed.
+ */
+export function untilOperationAborted(work, signal) {
+    if (signal === undefined)
+        return work;
+    return new Promise((resolve, reject) => {
+        const onAbort = () => reject(createAbortError(signal.reason));
+        if (signal.aborted)
+            onAbort();
+        else
+            signal.addEventListener('abort', onAbort, { once: true });
+        void work.then(resolve, reject).finally(() => signal.removeEventListener('abort', onAbort));
+    });
+}
 /**
  * Run one lazily-started operation with a caller-abort and deadline boundary.
  *

package/dist/bounded-operation.js.map

@@ -1 +1 @@
-{"version":3,"file":"bounded-operation.js","sourceRoot":"","sources":["../src/bounded-operation.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,uDAAuD;AACvD,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAI1C;IACA;IAJF,IAAI,GAAG,2BAA2B,CAAC;IAE5C,YACW,cAAsB,EACtB,SAAiB;QAE1B,KAAK,CAAC,GAAG,cAAc,oBAAoB,SAAS,IAAI,CAAC,CAAC;QAHjD,mBAAc,GAAd,cAAc,CAAQ;QACtB,cAAS,GAAT,SAAS,CAAQ;QAG1B,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,UAAU,8BAA8B,CAC5C,KAAc;IAEd,OAAO,KAAK,YAAY,4BAA4B;WAC/C,CACD,KAAK,YAAY,KAAK;eAClB,KAAoC,CAAC,IAAI,KAAK,2BAA2B,CAC9E,CAAC;AACN,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAe;IAC9C,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC;QAC5B,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,MAAM,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,KAAqC,CAAC,KAAK,GAAG,MAAM,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzE,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC;IAC1B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,uBAAuB,CAAC,MAA+B;IACrE,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAkD,EAClD,OAIC;IAED,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QAClD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,4CAA4C,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAE5E,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,KAAgD,CAAC;QACrD,MAAM,mBAAmB,GAAG,IAAI,eAAe,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,CAAC,QAAoB,EAAE,EAAE;YACtC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC;QACF,MAAM,cAAc,GAAG,CAAC,MAAe,EAAE,EAAE;YACzC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO;gBAAE,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7E,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC/C,cAAc,CAAC,MAAM,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC;YACxC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC,CAAC;QAEF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE;YACH,MAAM,KAAK,GAAG,IAAI,4BAA4B,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACjE,cAAc,CAAC,KAAK,CAAC,CAAC;YACtB,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC,EACD,SAAS,CACV,CAAC;QACF,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,qEAAqE;QACrE,oCAAoC;QACpC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,IAAI,IAAgB,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YACd,qEAAqE;QACvE,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CACP,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EACvC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CACvC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"bounded-operation.js","sourceRoot":"","sources":["../src/bounded-operation.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,uDAAuD;AACvD,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAI1C;IACA;IAJF,IAAI,GAAG,2BAA2B,CAAC;IAE5C,YACW,cAAsB,EACtB,SAAiB;QAE1B,KAAK,CAAC,GAAG,cAAc,oBAAoB,SAAS,IAAI,CAAC,CAAC;QAHjD,mBAAc,GAAd,cAAc,CAAQ;QACtB,cAAS,GAAT,SAAS,CAAQ;QAG1B,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,UAAU,8BAA8B,CAC5C,KAAc;IAEd,OAAO,KAAK,YAAY,4BAA4B;WAC/C,CACD,KAAK,YAAY,KAAK;eAClB,KAAoC,CAAC,IAAI,KAAK,2BAA2B,CAC9E,CAAC;AACN,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAe;IAC9C,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC;QAC5B,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,MAAM,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,KAAqC,CAAC,KAAK,GAAG,MAAM,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzE,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC;IAC1B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,uBAAuB,CAAC,MAA+B;IACrE,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAI,IAAgB,EAAE,MAA+B;IACxF,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;;YACzB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAkD,EAClD,OAIC;IAED,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QAClD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,4CAA4C,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAE5E,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,KAAgD,CAAC;QACrD,MAAM,mBAAmB,GAAG,IAAI,eAAe,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,CAAC,QAAoB,EAAE,EAAE;YACtC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC;QACF,MAAM,cAAc,GAAG,CAAC,MAAe,EAAE,EAAE;YACzC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO;gBAAE,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7E,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC/C,cAAc,CAAC,MAAM,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC;YACxC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC,CAAC;QAEF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE;YACH,MAAM,KAAK,GAAG,IAAI,4BAA4B,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACjE,cAAc,CAAC,KAAK,CAAC,CAAC;YACtB,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC,EACD,SAAS,CACV,CAAC;QACF,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,qEAAqE;QACrE,oCAAoC;QACpC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,IAAI,IAAgB,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YACd,qEAAqE;QACvE,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CACP,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EACvC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CACvC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/context-graph-meta-confirmation.d.ts

@@ -25,6 +25,7 @@ export type ConfirmContextGraphMetadataInput = {
     readonly acceptance: ApprovedMemberAcceptance;
 };
 export interface ContextGraphMetadataConfirmationDependencies {
+    readonly signal?: AbortSignal;
     readonly chain: ChainAdapter;
     readonly resolveActivePublicChainProof: () => Promise<ActivePublicContextGraphChainProof>;
     readonly isPrivateContextGraph: (contextGraphId: string) => Promise<boolean>;
@@ -35,6 +36,31 @@ export interface ContextGraphMetadataConfirmationDependencies {
         pendingMeta?: boolean;
     }>>;
 }
-/** Canonical authority policy shared by bootstrap, gossip, and shared-memory admission. */
+export type ContextGraphMetadataConfirmation = {
+    readonly outcome: 'confirmed' | 'unconfirmed';
+} | {
+    readonly outcome: 'unavailable';
+    readonly source: 'chain-proof';
+    readonly proof: Extract<ActivePublicContextGraphChainProof, {
+        state: 'unknown';
+    }>;
+};
+/** Legacy boolean presentation preserves its fail-closed chain-proof behavior. */
+export declare function confirmedMetadataBoolean(result: ContextGraphMetadataConfirmation): boolean;
 export declare function confirmContextGraphMetadataV1(dependencies: ContextGraphMetadataConfirmationDependencies, contextGraphId: string, input?: ConfirmContextGraphMetadataInput): Promise<boolean>;
+/** Canonical facts shared by bootstrap, gossip, and shared-memory admission. */
+export declare function resolveContextGraphMetadataConfirmationV1(dependencies: ContextGraphMetadataConfirmationDependencies, contextGraphId: string, input?: ConfirmContextGraphMetadataInput): Promise<ContextGraphMetadataConfirmation>;
+/**
+ * Whether the local root `_meta` itself declares the graph public: the
+ * canonical facts (`rdf:type dkg:ContextGraph`, `dkg:accessPolicy "public"`)
+ * with no contradicting policy beside them. This is what a replica must HOLD
+ * before it can list, read or write the graph by its definition.
+ *
+ * `confirmContextGraphMetadataV1` answers a different question: whether the
+ * graph is readable now. There an active public chain proof confirms on its
+ * own, so a registered public graph is "confirmed" on a replica that holds no
+ * declaration at all. A pull that asks whether the declaration is still
+ * missing must therefore not take that answer (#3264).
+ */
+export declare function holdsAuthoritativePublicDefinitionV1(store: TripleStore, contextGraphId: string): Promise<boolean>;
 //# sourceMappingURL=context-graph-meta-confirmation.d.ts.map

package/dist/context-graph-meta-confirmation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-graph-meta-confirmation.d.ts","sourceRoot":"","sources":["../src/context-graph-meta-confirmation.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAOrE,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAChD,8CAA8C,CAAC;AAIjD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MACtC,kEAAkE,CAAC;AAErE;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,gCAAgC,GACxC;IACE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,6BAA6B,CAAC,EAAE,OAAO,CAAC;CAClD,GACD;IACE,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;CAC/C,CAAC;AAEN,MAAM,WAAW,4CAA4C;IAC3D,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,6BAA6B,EAAE,MAAM,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC1F,QAAQ,CAAC,qBAAqB,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7E,QAAQ,CAAC,gCAAgC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC,CAAC;CAClF;AAED,2FAA2F;AAC3F,wBAAsB,6BAA6B,CACjD,YAAY,EAAE,4CAA4C,EAC1D,cAAc,EAAE,MAAM,EACtB,KAAK,GAAE,gCAAqC,GAC3C,OAAO,CAAC,OAAO,CAAC,CA2GlB"}
+{"version":3,"file":"context-graph-meta-confirmation.d.ts","sourceRoot":"","sources":["../src/context-graph-meta-confirmation.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAOrE,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAChD,8CAA8C,CAAC;AAIjD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MACtC,kEAAkE,CAAC;AAErE;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,gCAAgC,GACxC;IACE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,6BAA6B,CAAC,EAAE,OAAO,CAAC;CAClD,GACD;IACE,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;CAC/C,CAAC;AAEN,MAAM,WAAW,4CAA4C;IAC3D,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,6BAA6B,EAAE,MAAM,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC1F,QAAQ,CAAC,qBAAqB,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7E,QAAQ,CAAC,gCAAgC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC,CAAC;CAClF;AAED,MAAM,MAAM,gCAAgC,GACxC;IAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,aAAa,CAAA;CAAE,GACjD;IAAE,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAChE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,kCAAkC,EAAE;QAAE,KAAK,EAAE,SAAS,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC;AAE1F,kFAAkF;AAClF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,gCAAgC,GAAG,OAAO,CAE1F;AAED,wBAAsB,6BAA6B,CACjD,YAAY,EAAE,4CAA4C,EAC1D,cAAc,EAAE,MAAM,EACtB,KAAK,GAAE,gCAAqC,GAC3C,OAAO,CAAC,OAAO,CAAC,CAElB;AAED,gFAAgF;AAChF,wBAAsB,yCAAyC,CAC7D,YAAY,EAAE,4CAA4C,EAC1D,cAAc,EAAE,MAAM,EACtB,KAAK,GAAE,gCAAqC,GAC3C,OAAO,CAAC,gCAAgC,CAAC,CAO3C;AAyHD;;;;;;;;;;;GAWG;AACH,wBAAsB,oCAAoC,CACxD,KAAK,EAAE,WAAW,EAClB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,OAAO,CAAC,CAKlB"}

package/dist/context-graph-meta-confirmation.js

@@ -4,13 +4,31 @@ import { inferAdapterPublisherAddress } from './dkg-agent-helpers.js';
 import { buildAuthoritativePrivateMetaAskQuery } from './context-graph-private-meta-proof.js';
 import { buildAuthoritativePublicMetaAskQuery } from './context-graph-public-meta-proof.js';
 import { isPublicMetaDurabilityPending } from './context-graph-public-meta-repair.js';
-/** Canonical authority policy shared by bootstrap, gossip, and shared-memory admission. */
+/** Legacy boolean presentation preserves its fail-closed chain-proof behavior. */
+export function confirmedMetadataBoolean(result) {
+    return result.outcome === 'confirmed';
+}
 export async function confirmContextGraphMetadataV1(dependencies, contextGraphId, input = {}) {
+    return confirmedMetadataBoolean(await resolveContextGraphMetadataConfirmationV1(dependencies, contextGraphId, input));
+}
+/** Canonical facts shared by bootstrap, gossip, and shared-memory admission. */
+export async function resolveContextGraphMetadataConfirmationV1(dependencies, contextGraphId, input = {}) {
+    dependencies.signal?.throwIfAborted();
+    try {
+        return await resolveMetadataConfirmation(dependencies, contextGraphId, input);
+    }
+    finally {
+        dependencies.signal?.throwIfAborted();
+    }
+}
+/** Canonical authority policy shared by bootstrap, gossip, and shared-memory admission. */
+async function resolveMetadataConfirmation(dependencies, contextGraphId, input = {}) {
+    dependencies.signal?.throwIfAborted();
     if (Object.values(SYSTEM_CONTEXT_GRAPHS).includes(contextGraphId)) {
-        return true;
+        return { outcome: 'confirmed' };
     }
     if (isPublicMetaDurabilityPending(dependencies.store, contextGraphId)) {
-        return false;
+        return { outcome: 'unconfirmed' };
     }
     if (input.purpose === 'approved-member') {
         const { proof } = input.acceptance;
@@ -19,12 +37,12 @@ export async function confirmContextGraphMetadataV1(dependencies, contextGraphId
         const stillApproved = () => (dependencies.localApprovedAgentByContextGraph.get(contextGraphId)?.toLowerCase()
             === proof.approvedAgentAddress.toLowerCase());
         if (!stillApproved())
-            return false;
+            return { outcome: 'unconfirmed' };
         const confirmed = await findAuthoritativeDefinition(dependencies, contextGraphId, [{ definition: input.acceptance.admittedDefinition, memberProof: proof }], 'agent.contextGraph.confirmedMeta.approvedMember') !== null;
         // Readiness is declared now, so the authority behind the acceptance and
         // this node's approval must both still hold now, after the awaits: a
         // rejection or a new join request can change the binding while they run.
-        return confirmed && await input.acceptance.stillHolds() && stillApproved();
+        return { outcome: confirmed && await input.acceptance.stillHolds() && stillApproved() ? 'confirmed' : 'unconfirmed' };
     }
     const memberProof = await resolveApprovedMemberProof(dependencies, contextGraphId);
     const metaGraph = contextGraphMetaGraphUri(contextGraphId);
@@ -33,49 +51,78 @@ export async function confirmContextGraphMetadataV1(dependencies, contextGraphId
       GRAPH <${metaGraph}> {
         <${contextGraphUri}> <${DKG_ONTOLOGY.DKG_REGISTRATION_STATUS}> "unregistered" .
       }
-    }`, { source: 'agent.contextGraph.confirmedMeta.unregisteredPlaceholder' });
+    }`, { source: 'agent.contextGraph.confirmedMeta.unregisteredPlaceholder', signal: dependencies.signal });
     const hasUnregisteredPlaceholder = unregisteredPlaceholderResult.type === 'boolean'
         && unregisteredPlaceholderResult.value === true;
-    let hasActivePublicOnChainProof;
+    let publicProof;
+    const readPublicProof = async () => {
+        let proof;
+        try {
+            proof = await dependencies.resolveActivePublicChainProof();
+        }
+        catch (error) {
+            proof = { state: 'unknown', reason: 'rpc-failure',
+                detail: error instanceof Error ? error.message : String(error) };
+        }
+        dependencies.signal?.throwIfAborted();
+        return proof;
+    };
+    const unconfirmed = () => publicProof?.state === 'unknown'
+        ? { outcome: 'unavailable', source: 'chain-proof', proof: publicProof }
+        : { outcome: 'unconfirmed' };
     if (hasUnregisteredPlaceholder
         && input.rejectUnregisteredPlaceholder === true) {
-        hasActivePublicOnChainProof = await dependencies
-            .resolveActivePublicChainProof()
-            .then((proof) => proof.state === 'public')
-            .catch(() => false);
+        publicProof = await readPublicProof();
     }
     const authoritativeDefinition = await findAuthoritativeDefinition(dependencies, contextGraphId, [{ definition: 'private', memberProof }, { definition: 'public' }], 'agent.contextGraph.confirmedMeta');
     if (authoritativeDefinition === 'private')
-        return true;
+        return { outcome: 'confirmed' };
     if (authoritativeDefinition === 'public'
         && (!hasUnregisteredPlaceholder
             || input.rejectUnregisteredPlaceholder !== true
-            || hasActivePublicOnChainProof === true)) {
-        return true;
+            || publicProof?.state === 'public')) {
+        return { outcome: 'confirmed' };
     }
-    if (hasActivePublicOnChainProof === undefined) {
-        hasActivePublicOnChainProof = await dependencies.resolveActivePublicChainProof()
-            .then((proof) => proof.state === 'public')
-            .catch(() => false);
+    if (publicProof === undefined) {
+        publicProof = await readPublicProof();
     }
-    if (hasActivePublicOnChainProof)
-        return true;
+    if (publicProof?.state === 'public')
+        return { outcome: 'confirmed' };
     if (hasUnregisteredPlaceholder
         && (dependencies.localApprovedAgentByContextGraph.has(contextGraphId)
-            || (!hasActivePublicOnChainProof
-                && (input.rejectUnregisteredPlaceholder === true
-                    || dependencies.subscriptions.get(contextGraphId)?.pendingMeta === true)))) {
-        return false;
+            || input.rejectUnregisteredPlaceholder === true
+            || dependencies.subscriptions.get(contextGraphId)?.pendingMeta === true)) {
+        return unconfirmed();
     }
     if (await dependencies.isPrivateContextGraph(contextGraphId))
-        return false;
+        return unconfirmed();
     const ontologyGraph = contextGraphDataGraphUri(SYSTEM_CONTEXT_GRAPHS.ONTOLOGY);
     const ontologyResult = await dependencies.store.query(`ASK WHERE {
       GRAPH <${ontologyGraph}> {
         <${contextGraphUri}> <${DKG_ONTOLOGY.RDF_TYPE}> <${DKG_ONTOLOGY.DKG_CONTEXT_GRAPH}> .
       }
-    }`, { source: 'agent.contextGraph.confirmedMeta.ontologyDeclaration' });
-    return ontologyResult.type === 'boolean' && ontologyResult.value === true;
+    }`, { source: 'agent.contextGraph.confirmedMeta.ontologyDeclaration', signal: dependencies.signal });
+    if (ontologyResult.type === 'boolean' && ontologyResult.value === true)
+        return { outcome: 'confirmed' };
+    return unconfirmed();
+}
+/**
+ * Whether the local root `_meta` itself declares the graph public: the
+ * canonical facts (`rdf:type dkg:ContextGraph`, `dkg:accessPolicy "public"`)
+ * with no contradicting policy beside them. This is what a replica must HOLD
+ * before it can list, read or write the graph by its definition.
+ *
+ * `confirmContextGraphMetadataV1` answers a different question: whether the
+ * graph is readable now. There an active public chain proof confirms on its
+ * own, so a registered public graph is "confirmed" on a replica that holds no
+ * declaration at all. A pull that asks whether the declaration is still
+ * missing must therefore not take that answer (#3264).
+ */
+export async function holdsAuthoritativePublicDefinitionV1(store, contextGraphId) {
+    const result = await store.query(buildAuthoritativePublicMetaAskQuery(contextGraphId), {
+        source: 'agent.contextGraph.publicDefinition.held',
+    });
+    return result.type === 'boolean' && result.value === true;
 }
 /** This node's approved-member proof for the graph, when it holds an approval. */
 async function resolveApprovedMemberProof(dependencies, contextGraphId) {
@@ -106,7 +153,7 @@ async function findAuthoritativeDefinition(dependencies, contextGraphId, candida
             ? buildAuthoritativePrivateMetaAskQuery(contextGraphId, memberProof)
             : buildAuthoritativePublicMetaAskQuery(contextGraphId, memberProof);
         const result = await dependencies.store.query(query, {
-            source: `${sourcePrefix}.${definition}Definition`,
+            source: `${sourcePrefix}.${definition}Definition`, signal: dependencies.signal,
         });
         if (result.type === 'boolean' && result.value === true)
             return definition;

package/dist/context-graph-meta-confirmation.js.map

@@ -1 +1 @@
-{"version":3,"file":"context-graph-meta-confirmation.js","sourceRoot":"","sources":["../src/context-graph-meta-confirmation.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AAIxC,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,qCAAqC,EAAE,MAC9C,uCAAuC,CAAC;AAC1C,OAAO,EAAE,oCAAoC,EAAE,MAC7C,sCAAsC,CAAC;AAGzC,OAAO,EAAE,6BAA6B,EAAE,MACtC,uCAAuC,CAAC;AAwC1C,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,YAA0D,EAC1D,cAAsB,EACtB,QAA0C,EAAE;IAE5C,IAAK,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAc,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,6BAA6B,CAAC,YAAY,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;QACxC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC;QACnC,0EAA0E;QAC1E,iEAAiE;QACjE,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,CAC1B,YAAY,CAAC,gCAAgC,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE;gBAC1E,KAAK,CAAC,oBAAoB,CAAC,WAAW,EAAE,CAC/C,CAAC;QACF,IAAI,CAAC,aAAa,EAAE;YAAE,OAAO,KAAK,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,2BAA2B,CACjD,YAAY,EACZ,cAAc,EACd,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,kBAAkB,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EACzE,iDAAiD,CAClD,KAAK,IAAI,CAAC;QACX,wEAAwE;QACxE,qEAAqE;QACrE,yEAAyE;QACzE,OAAO,SAAS,IAAI,MAAM,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,aAAa,EAAE,CAAC;IAC7E,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,0BAA0B,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAEnF,MAAM,SAAS,GAAG,wBAAwB,CAAC,cAAc,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,wBAAwB,CAAC,cAAc,CAAC,CAAC;IACjE,MAAM,6BAA6B,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,CAClE;eACW,SAAS;WACb,eAAe,MAAM,YAAY,CAAC,uBAAuB;;MAE9D,EACF,EAAE,MAAM,EAAE,0DAA0D,EAAE,CACvE,CAAC;IACF,MAAM,0BAA0B,GAAG,6BAA6B,CAAC,IAAI,KAAK,SAAS;WAC9E,6BAA6B,CAAC,KAAK,KAAK,IAAI,CAAC;IAClD,IAAI,2BAAgD,CAAC;IACrD,IACE,0BAA0B;WACvB,KAAK,CAAC,6BAA6B,KAAK,IAAI,EAC/C,CAAC;QACD,2BAA2B,GAAG,MAAM,YAAY;aAC7C,6BAA6B,EAAE;aAC/B,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;aACzC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,uBAAuB,GAAG,MAAM,2BAA2B,CAC/D,YAAY,EACZ,cAAc,EACd,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAClE,kCAAkC,CACnC,CAAC;IACF,IAAI,uBAAuB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,IACE,uBAAuB,KAAK,QAAQ;WACjC,CACD,CAAC,0BAA0B;eACxB,KAAK,CAAC,6BAA6B,KAAK,IAAI;eAC5C,2BAA2B,KAAK,IAAI,CACxC,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,2BAA2B,KAAK,SAAS,EAAE,CAAC;QAC9C,2BAA2B,GAAG,MAAM,YAAY,CAAC,6BAA6B,EAAE;aAC7E,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;aACzC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,2BAA2B;QAAE,OAAO,IAAI,CAAC;IAE7C,IACE,0BAA0B;WACvB,CACD,YAAY,CAAC,gCAAgC,CAAC,GAAG,CAAC,cAAc,CAAC;eAC9D,CACD,CAAC,2BAA2B;mBACzB,CACD,KAAK,CAAC,6BAA6B,KAAK,IAAI;uBACzC,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,WAAW,KAAK,IAAI,CACxE,CACF,CACF,EACD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,MAAM,YAAY,CAAC,qBAAqB,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IAE3E,MAAM,aAAa,GAAG,wBAAwB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC/E,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,CACnD;eACW,aAAa;WACjB,eAAe,MAAM,YAAY,CAAC,QAAQ,MAAM,YAAY,CAAC,iBAAiB;;MAEnF,EACF,EAAE,MAAM,EAAE,sDAAsD,EAAE,CACnE,CAAC;IACF,OAAO,cAAc,CAAC,IAAI,KAAK,SAAS,IAAI,cAAc,CAAC,KAAK,KAAK,IAAI,CAAC;AAC5E,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,0BAA0B,CACvC,YAA0D,EAC1D,cAAsB;IAEtB,MAAM,oBAAoB,GAAG,YAAY,CAAC,gCAAgC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC/F,IAAI,CAAC,oBAAoB;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,sBAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,sBAAsB,GAAG,MAAM,4BAA4B,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;IAC1E,CAAC;IACD,OAAO;QACL,oBAAoB;QACpB,uBAAuB,EAAE,YAAY,CAAC,MAAM;QAC5C,sBAAsB;KACvB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,2BAA2B,CACxC,YAA0D,EAC1D,cAAsB,EACtB,UAGE,EACF,YAAoB;IAEpB,KAAK,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,UAAU,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,UAAU,KAAK,SAAS;YACpC,CAAC,CAAC,qCAAqC,CAAC,cAAc,EAAE,WAAW,CAAC;YACpE,CAAC,CAAC,oCAAoC,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;YACnD,MAAM,EAAE,GAAG,YAAY,IAAI,UAAU,YAAY;SAClD,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO,UAAU,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"context-graph-meta-confirmation.js","sourceRoot":"","sources":["../src/context-graph-meta-confirmation.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AAIxC,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,qCAAqC,EAAE,MAC9C,uCAAuC,CAAC;AAC1C,OAAO,EAAE,oCAAoC,EAAE,MAC7C,sCAAsC,CAAC;AAGzC,OAAO,EAAE,6BAA6B,EAAE,MACtC,uCAAuC,CAAC;AA8C1C,kFAAkF;AAClF,MAAM,UAAU,wBAAwB,CAAC,MAAwC;IAC/E,OAAO,MAAM,CAAC,OAAO,KAAK,WAAW,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,YAA0D,EAC1D,cAAsB,EACtB,QAA0C,EAAE;IAE5C,OAAO,wBAAwB,CAAC,MAAM,yCAAyC,CAAC,YAAY,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;AACxH,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC7D,YAA0D,EAC1D,cAAsB,EACtB,QAA0C,EAAE;IAE5C,YAAY,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,2BAA2B,CAAC,YAAY,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;IAChF,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACxC,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,KAAK,UAAU,2BAA2B,CACxC,YAA0D,EAC1D,cAAsB,EACtB,QAA0C,EAAE;IAE5C,YAAY,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACtC,IAAK,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAc,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAChF,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,6BAA6B,CAAC,YAAY,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACpC,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;QACxC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC;QACnC,0EAA0E;QAC1E,iEAAiE;QACjE,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,CAC1B,YAAY,CAAC,gCAAgC,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE;gBAC1E,KAAK,CAAC,oBAAoB,CAAC,WAAW,EAAE,CAC/C,CAAC;QACF,IAAI,CAAC,aAAa,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QACxD,MAAM,SAAS,GAAG,MAAM,2BAA2B,CACjD,YAAY,EACZ,cAAc,EACd,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,kBAAkB,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EACzE,iDAAiD,CAClD,KAAK,IAAI,CAAC;QACX,wEAAwE;QACxE,qEAAqE;QACrE,yEAAyE;QACzE,OAAO,EAAE,OAAO,EAAE,SAAS,IAAI,MAAM,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,aAAa,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACxH,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,0BAA0B,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAEnF,MAAM,SAAS,GAAG,wBAAwB,CAAC,cAAc,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,wBAAwB,CAAC,cAAc,CAAC,CAAC;IACjE,MAAM,6BAA6B,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,CAClE;eACW,SAAS;WACb,eAAe,MAAM,YAAY,CAAC,uBAAuB;;MAE9D,EACF,EAAE,MAAM,EAAE,0DAA0D,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CACpG,CAAC;IACF,MAAM,0BAA0B,GAAG,6BAA6B,CAAC,IAAI,KAAK,SAAS;WAC9E,6BAA6B,CAAC,KAAK,KAAK,IAAI,CAAC;IAClD,IAAI,WAA2D,CAAC;IAChE,MAAM,eAAe,GAAG,KAAK,IAAI,EAAE;QACjC,IAAI,KAAyC,CAAC;QAC9C,IAAI,CAAC;YAAC,KAAK,GAAG,MAAM,YAAY,CAAC,6BAA6B,EAAE,CAAC;QAAC,CAAC;QACnE,OAAO,KAAK,EAAE,CAAC;YACb,KAAK,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa;gBAC/C,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACrE,CAAC;QACD,YAAY,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,GAAqC,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,SAAS;QAC1F,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE;QACvE,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IAC/B,IACE,0BAA0B;WACvB,KAAK,CAAC,6BAA6B,KAAK,IAAI,EAC/C,CAAC;QACD,WAAW,GAAG,MAAM,eAAe,EAAE,CAAC;IACxC,CAAC;IAED,MAAM,uBAAuB,GAAG,MAAM,2BAA2B,CAC/D,YAAY,EACZ,cAAc,EACd,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAClE,kCAAkC,CACnC,CAAC;IACF,IAAI,uBAAuB,KAAK,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAC3E,IACE,uBAAuB,KAAK,QAAQ;WACjC,CACD,CAAC,0BAA0B;eACxB,KAAK,CAAC,6BAA6B,KAAK,IAAI;eAC5C,WAAW,EAAE,KAAK,KAAK,QAAQ,CACnC,EACD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAClC,CAAC;IAED,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,WAAW,GAAG,MAAM,eAAe,EAAE,CAAC;IACxC,CAAC;IACD,IAAI,WAAW,EAAE,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAErE,IACE,0BAA0B;WACvB,CACD,YAAY,CAAC,gCAAgC,CAAC,GAAG,CAAC,cAAc,CAAC;eAC9D,KAAK,CAAC,6BAA6B,KAAK,IAAI;eAC5C,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,WAAW,KAAK,IAAI,CACxE,EACD,CAAC;QACD,OAAO,WAAW,EAAE,CAAC;IACvB,CAAC;IAED,IAAI,MAAM,YAAY,CAAC,qBAAqB,CAAC,cAAc,CAAC;QAAE,OAAO,WAAW,EAAE,CAAC;IAEnF,MAAM,aAAa,GAAG,wBAAwB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC/E,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,CACnD;eACW,aAAa;WACjB,eAAe,MAAM,YAAY,CAAC,QAAQ,MAAM,YAAY,CAAC,iBAAiB;;MAEnF,EACF,EAAE,MAAM,EAAE,sDAAsD,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAChG,CAAC;IACF,IAAI,cAAc,CAAC,IAAI,KAAK,SAAS,IAAI,cAAc,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IACxG,OAAO,WAAW,EAAE,CAAC;AACvB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,KAAkB,EAClB,cAAsB;IAEtB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,oCAAoC,CAAC,cAAc,CAAC,EAAE;QACrF,MAAM,EAAE,0CAA0C;KACnD,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC;AAC5D,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,0BAA0B,CACvC,YAA0D,EAC1D,cAAsB;IAEtB,MAAM,oBAAoB,GAAG,YAAY,CAAC,gCAAgC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC/F,IAAI,CAAC,oBAAoB;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,sBAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,sBAAsB,GAAG,MAAM,4BAA4B,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;IAC1E,CAAC;IACD,OAAO;QACL,oBAAoB;QACpB,uBAAuB,EAAE,YAAY,CAAC,MAAM;QAC5C,sBAAsB;KACvB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,2BAA2B,CACxC,YAA0D,EAC1D,cAAsB,EACtB,UAGE,EACF,YAAoB;IAEpB,KAAK,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,UAAU,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,UAAU,KAAK,SAAS;YACpC,CAAC,CAAC,qCAAqC,CAAC,cAAc,EAAE,WAAW,CAAC;YACpE,CAAC,CAAC,oCAAoC,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;YACnD,MAAM,EAAE,GAAG,YAAY,IAAI,UAAU,YAAY,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM;SAC/E,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO,UAAU,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/context-graph-meta-projection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-graph-meta-projection.d.ts","sourceRoot":"","sources":["../src/context-graph-meta-projection.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAIzF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAEjF,OAAO,KAAK,EAAE,sBAAsB,EAAwD,MAAM,yCAAyC,CAAC;AAC5I,YAAY,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAS5I,MAAM,WAAW,sCAAsC;IACrD,4EAA4E;IAC5E,aAAa,IAAI,OAAO,CAAC;IACzB,kFAAkF;IAClF,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3C;AA8GD,qBAAa,0BAA0B;IAoCzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAnClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsC;IAC9D,OAAO,CAAC,sBAAsB,CAAK;IACnC,OAAO,CAAC,gBAAgB,CAAK;IAC7B,8GAA8G;IAC9G,QAAQ,CAAC,sBAAsB,EAAE,sBAAsB,CAAC;IACxD,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAClD,QAAQ,CAAC,gBAAgB,mBAAsD;IAE/E,6EAA6E;IAC7E,QAAQ,CAAC,iBAAiB,GAAI,OAAO,MAAM,EAAE,UAAU,MAAM,EAAE,YAAY,MAAM,KAAG,IAAI,CAGtF;IACF,QAAQ,CAAC,YAAY,QAAO,IAAI,CAG9B;IACF,QAAQ,CAAC,kBAAkB,GAAI,OAAO,SAAS,IAAI,EAAE,KAAG,MAAM,EAAE,CAG9D;IAEF,oFAAoF;IACpF,QAAQ,CAAC,uBAAuB,GAAI,UAAU,aAAa,KAAG,IAAI,CAUhE;gBAE2B,KAAK,EAAE,WAAW;IAK/C,8EAA8E;IAC9E,IAAI,0BAA0B,IAAI,MAAM,CAEvC;IAED;8EAC0E;IAC1E,sCAAsC,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM;IAItE;;;;OAIG;IACG,yCAAyC,CAC7C,eAAe,EAAE,SAAS,MAAM,EAAE,EAClC,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAmD/B;;;;OAIG;IACG,iCAAiC,CACrC,eAAe,EAAE,SAAS,MAAM,EAAE,EAClC,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,sCAAsC,CAAC;IAY5C,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAkC9F,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,eAAe,UAAO,GAAG,IAAI;IAY/D;;;;OAIG;IACH,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI;IAK9C,6FAA6F;IAC7F,OAAO,CAAC,eAAe;IAyBvB,OAAO,CAAC,QAAQ;IAUhB,OAAO,CAAC,eAAe;IAoBjB,2BAA2B,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAsClE,mCAAmC;YA+BnC,kCAAkC;YA4BlC,kBAAkB;IAKhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACG,eAAe,CACnB,cAAc,EAAE,MAAM,EACtB,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,sBAAsB,CAAC;YAWpB,OAAO;YAqCP,eAAe;YAwDf,qBAAqB;IA4BnC,OAAO,CAAC,SAAS;YA+DH,aAAa;IA4C3B,OAAO,CAAC,2BAA2B;CA+CpC"}
+{"version":3,"file":"context-graph-meta-projection.d.ts","sourceRoot":"","sources":["../src/context-graph-meta-projection.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAKzF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAEjF,OAAO,KAAK,EAAE,sBAAsB,EAAwD,MAAM,yCAAyC,CAAC;AAC5I,YAAY,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAE5I,MAAM,WAAW,sCAAsC;IACrD,4EAA4E;IAC5E,aAAa,IAAI,OAAO,CAAC;IACzB,kFAAkF;IAClF,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3C;AA8GD,qBAAa,0BAA0B;IAoCzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAnClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiD;IACzE,OAAO,CAAC,sBAAsB,CAAK;IACnC,OAAO,CAAC,gBAAgB,CAAK;IAC7B,8GAA8G;IAC9G,QAAQ,CAAC,sBAAsB,EAAE,sBAAsB,CAAC;IACxD,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAClD,QAAQ,CAAC,gBAAgB,mBAAsD;IAE/E,6EAA6E;IAC7E,QAAQ,CAAC,iBAAiB,GAAI,OAAO,MAAM,EAAE,UAAU,MAAM,EAAE,YAAY,MAAM,KAAG,IAAI,CAGtF;IACF,QAAQ,CAAC,YAAY,QAAO,IAAI,CAG9B;IACF,QAAQ,CAAC,kBAAkB,GAAI,OAAO,SAAS,IAAI,EAAE,KAAG,MAAM,EAAE,CAG9D;IAEF,oFAAoF;IACpF,QAAQ,CAAC,uBAAuB,GAAI,UAAU,aAAa,KAAG,IAAI,CAUhE;gBAE2B,KAAK,EAAE,WAAW;IAK/C,8EAA8E;IAC9E,IAAI,0BAA0B,IAAI,MAAM,CAEvC;IAED;8EAC0E;IAC1E,sCAAsC,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM;IAItE;;;;OAIG;IACG,yCAAyC,CAC7C,eAAe,EAAE,SAAS,MAAM,EAAE,EAClC,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAmD/B;;;;OAIG;IACG,iCAAiC,CACrC,eAAe,EAAE,SAAS,MAAM,EAAE,EAClC,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,sCAAsC,CAAC;IAY5C,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAU9F,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,eAAe,UAAO,GAAG,IAAI;IAa/D;;;;OAIG;IACH,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI;IAK9C,6FAA6F;IAC7F,OAAO,CAAC,eAAe;IA6BvB,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,eAAe;IAqBjB,2BAA2B,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAsClE,mCAAmC;YA+BnC,kCAAkC;YA4BlC,kBAAkB;IAKhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACG,eAAe,CACnB,cAAc,EAAE,MAAM,EACtB,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,sBAAsB,CAAC;YAWpB,OAAO;YAqCP,eAAe;YAwDf,qBAAqB;IA4BnC,OAAO,CAAC,SAAS;YA+DH,aAAa;IA4C3B,OAAO,CAAC,2BAA2B;CA+CpC"}

package/dist/context-graph-meta-projection.js

@@ -4,6 +4,7 @@ import { resolveWorkspaceAgentRecipientKeys, WORKSPACE_RECIPIENT_AUTHORITY_PREDI
 import { strip, stripLiteral } from './dkg-agent-utils.js';
 import { mapWithConcurrency } from './map-with-concurrency.js';
 import { cloneMetaRecord } from './internal/context-graph-meta-record-copy.js';
+import { ContextGraphMetaCacheEntry, throwIfMetaReadAborted } from './internal/context-graph-meta-cache-entry.js';
 import { RecipientKeyCollect } from './internal/recipient-key-collect.js';
 import { PeerGateRevision } from './internal/peer-gate-revision.js';
 import { RecipientKeyRouteFence } from './internal/recipient-key-route-fence.js';
@@ -181,7 +182,7 @@ export class ContextGraphMetaProjection {
         for (const id of ids) {
             const entry = this.entries.get(id);
             const value = entry?.value;
-            if (entry?.inflight || (value && (value.accessPolicy !== undefined || value.hasAgentGate || value.hasPeerGate
+            if (entry?.hasInflight || (value && (value.accessPolicy !== undefined || value.hasAgentGate || value.hasPeerGate
                 || value.onChainId !== undefined)))
                 present.add(id);
         }
@@ -236,37 +237,13 @@ export class ContextGraphMetaProjection {
         });
     }
     async get(contextGraphId, options = {}) {
-        const existing = this.entries.get(contextGraphId);
-        if (existing?.inflight) {
-            if (!existing.dirty)
-                return cloneMetaRecord(await raceAgainstAbort(existing.inflight, options.signal));
-            await raceAgainstAbort(existing.inflight, options.signal);
-            return this.get(contextGraphId, options);
-        }
-        if (existing?.value && !existing.dirty)
-            return cloneMetaRecord(existing.value);
-        const entry = existing ?? { dirty: true, invalidationVersion: 0 };
-        const rebuildVersion = entry.invalidationVersion;
-        entry.dirty = false;
-        const rebuildOptions = options.source ? { source: options.source } : {};
-        const inflight = this.rebuild(contextGraphId, rebuildOptions)
-            .then((record) => {
-            entry.value = record;
-            entry.inflight = undefined;
-            // A fresh-read request during the rebuild leaves the version as it is.
-            entry.dirty ||= entry.invalidationVersion !== rebuildVersion;
-            this.entries.set(contextGraphId, entry);
-            return record;
-        })
-            .catch((err) => {
-            entry.inflight = undefined;
-            entry.dirty = true;
+        throwIfMetaReadAborted(options.signal);
+        let entry = this.entries.get(contextGraphId);
+        if (!entry) {
+            entry = new ContextGraphMetaCacheEntry();
             this.entries.set(contextGraphId, entry);
-            throw err;
-        });
-        entry.inflight = inflight;
-        this.entries.set(contextGraphId, entry);
-        return cloneMetaRecord(await raceAgainstAbort(inflight, options.signal));
+        }
+        return cloneMetaRecord(await entry.get(options, (readOptions) => this.rebuild(contextGraphId, readOptions)));
     }
     markDirty(contextGraphId, changesPeerGate = true) {
         if (changesPeerGate)
@@ -274,11 +251,12 @@ export class ContextGraphMetaProjection {
         this.authorityFactsRevision += 1;
         const existing = this.entries.get(contextGraphId);
         if (existing) {
-            existing.dirty = true;
-            existing.invalidationVersion += 1;
+            existing.invalidate();
             return;
         }
-        this.entries.set(contextGraphId, { dirty: true, invalidationVersion: 1 });
+        const entry = new ContextGraphMetaCacheEntry();
+        entry.invalidate();
+        this.entries.set(contextGraphId, entry);
     }
     /**
      * Rebuild this graph's cached record on its next read without reporting a
@@ -288,7 +266,7 @@ export class ContextGraphMetaProjection {
     requireFreshRead(contextGraphId) {
         const existing = this.entries.get(contextGraphId);
         if (existing)
-            existing.dirty = true;
+            existing.requireFreshRead();
     }
     /** Destructive graph mutations invalidate their target cache and request-local revisions. */
     invalidateGraph(graphUri, subject, predicate) {
@@ -304,7 +282,11 @@ export class ContextGraphMetaProjection {
         const contextGraphId = contextGraphIdFromMetaGraphUri(graphUri) ?? contextGraphIdFromCatalogGraphUri(graphUri);
         if (contextGraphId) {
             this.markDirty(contextGraphId, false);
-            this.peerGateRevision.noteRemoval(contextGraphId, { subject, predicate });
+            // Catalog reads admit only the disclosure floor, never peers or roster.
+            // Keep projection/node-wide and recipient-key invalidation independent.
+            if (!isSafeIri(graphUri) || contextGraphIdFromCatalogGraphUri(graphUri) === null) {
+                this.peerGateRevision.noteRemoval(contextGraphId, { subject, predicate });
+            }
             return;
         }
         // Key lookup scans every named graph, and an atomic replacement can delete
@@ -317,8 +299,7 @@ export class ContextGraphMetaProjection {
         this.authorityFactsRevision += 1;
         this.allFactsRevision += 1;
         for (const entry of this.entries.values()) {
-            entry.dirty = true;
-            entry.invalidationVersion += 1;
+            entry.invalidate();
         }
     }
     invalidateQuads(quads) {
@@ -332,7 +313,8 @@ export class ContextGraphMetaProjection {
             if (!contextGraphId)
                 continue;
             touched.add(contextGraphId);
-            this.markDirty(contextGraphId);
+            this.markDirty(contextGraphId, !isSafeIri(quad.graph)
+                || contextGraphIdFromCatalogGraphUri(quad.graph) !== contextGraphId);
         }
         // Generic update and complete-graph replace paths call markAllDirty(); one
         // conservative bump here closes the recipient-key insertion race.
@@ -824,25 +806,4 @@ function contextGraphIdFromCatalogGraphUri(uri) {
         return null;
     return tail;
 }
-function raceAgainstAbort(work, signal) {
-    if (!signal)
-        return work;
-    throwIfAborted(signal);
-    return new Promise((resolve, reject) => {
-        const onAbort = () => {
-            const reason = signal.reason;
-            reject(reason instanceof Error ? reason : new Error(String(reason ?? 'aborted')));
-        };
-        signal.addEventListener('abort', onAbort, { once: true });
-        work.then(resolve, reject).finally(() => {
-            signal.removeEventListener('abort', onAbort);
-        });
-    });
-}
-function throwIfAborted(signal) {
-    if (!signal?.aborted)
-        return;
-    const reason = signal.reason;
-    throw reason instanceof Error ? reason : new Error(String(reason ?? 'aborted'));
-}
 //# sourceMappingURL=context-graph-meta-projection.js.map