@origintrail-official/dkg-core 10.0.5 → 10.0.7

package/dist/assertion-seal.d.ts

@@ -1,3 +1,4 @@
+import { GRAPH_KA_CONTENT_SCOPE_VERSION, LEGACY_ROOT_CONTENT_SCOPE_VERSION } from './ka-content-scope.js';
 /**
  * Predicates written by `/api/knowledge-assets/:name/wm/finalize` (sealed at
  * the moment the agent commits the assertion's content to a chain).
@@ -27,6 +28,18 @@ export declare const ASSERTION_SEAL_PREDICATES: {
     readonly RESERVED_KA_ID: "http://dkg.io/ontology/reservedKaId";
     /** Daemon-clock dateTime when the seal was written (xsd:dateTime). */
     readonly ASSERTION_FINALIZED_AT: "http://dkg.io/ontology/assertionFinalizedAt";
+    /** Rootless content-scope discriminator. Missing means legacy v1. */
+    readonly CONTENT_SCOPE_VERSION: "http://dkg.io/ontology/contentScopeVersion";
+    /** Canonical deterministic graph-scoped KA UAL. */
+    readonly KA_UAL: "http://dkg.io/ontology/kaUal";
+    /** One-based assertion/Merkle-root index. */
+    readonly ASSERTION_VERSION: "http://dkg.io/ontology/assertionVersion";
+    /** Complete public RDF triple count for the graph-scoped assertion. */
+    readonly PUBLIC_TRIPLE_COUNT: "http://dkg.io/ontology/publicTripleCount";
+    /** Single KA-level private Merkle commitment (xsd:hexBinary). */
+    readonly PRIVATE_MERKLE_ROOT: "http://dkg.io/ontology/privateMerkleRoot";
+    /** Number of private RDF triples committed by PRIVATE_MERKLE_ROOT. */
+    readonly PRIVATE_TRIPLE_COUNT: "http://dkg.io/ontology/privateTripleCount";
     /**
      * Root entity bound to the seal (multi-valued). Recorded at finalize
      * time so that `publishFromFinalizedAssertion` can scope the SWM
@@ -78,7 +91,7 @@ export declare const ASSERTION_PUBLISH_RECEIPT_PREDICATES: {
  * Every quad is pinned to the `metaGraph` so the gossip layer
  * propagates them with the rest of `_meta`.
  */
-export declare function buildAssertionSealQuads(args: {
+interface AssertionSealBuildBaseArgs {
     assertionUri: string;
     metaGraph: string;
     merkleRoot: Uint8Array;
@@ -91,13 +104,24 @@ export declare function buildAssertionSealQuads(args: {
     /** OT-RFC-43 §F2 — the packed id bound into the AuthorAttestation digest. */
     reservedKaId: bigint;
     finalizedAtIso: string;
-    /**
-     * Root entities the seal commits to (one per emitted quad). Required
-     * — the SWM-publish path uses these to scope its CONSTRUCT instead
-     * of bundling the entire shared-memory graph (Round 4 review §9).
-     */
+}
+export type AssertionSealBuildArgs = AssertionSealBuildBaseArgs & ({
+    /** Missing/one keeps the deployed root-scoped read-only wire shape. */
+    contentScopeVersion?: typeof LEGACY_ROOT_CONTENT_SCOPE_VERSION;
     rootEntities: ReadonlyArray<string>;
-}): Array<{
+    kaUal?: never;
+    assertionVersion?: never;
+    publicTripleCount?: never;
+} | {
+    contentScopeVersion: typeof GRAPH_KA_CONTENT_SCOPE_VERSION;
+    kaUal: string;
+    assertionVersion: string | number | bigint;
+    publicTripleCount: number;
+    privateMerkleRoot?: Uint8Array;
+    privateTripleCount: number;
+    rootEntities?: never;
+});
+export declare function buildAssertionSealQuads(args: AssertionSealBuildArgs): Array<{
     subject: string;
     predicate: string;
     object: string;
@@ -145,6 +169,18 @@ export interface AssertionSeal {
      */
     reservedKaId?: bigint;
     finalizedAtIso: string;
+    /** Missing on disk is normalized to legacy v1 by the parser. */
+    contentScopeVersion: typeof LEGACY_ROOT_CONTENT_SCOPE_VERSION | typeof GRAPH_KA_CONTENT_SCOPE_VERSION;
+    /** Present only for graph-scoped v2 seals. */
+    kaUal?: string;
+    /** Present only for graph-scoped v2 seals. */
+    assertionVersion?: string;
+    /** Present only for graph-scoped v2 seals. */
+    publicTripleCount?: number;
+    /** Present only for graph-scoped v2 seals with private content. */
+    privateMerkleRoot?: Uint8Array;
+    /** Present only for graph-scoped v2 seals. */
+    privateTripleCount?: number;
     /**
      * Root entities the seal commits to. Set at finalize time, used at
      * publish time to scope the SWM SPARQL CONSTRUCT (so a named publish
@@ -163,4 +199,5 @@ export declare function parseAssertionSealQuads(quads: ReadonlyArray<{
     predicate: string;
     object: string;
 }>, assertionUri: string): AssertionSeal | undefined;
+export {};
 //# sourceMappingURL=assertion-seal.d.ts.map

package/dist/assertion-seal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assertion-seal.d.ts","sourceRoot":"","sources":["../src/assertion-seal.ts"],"names":[],"mappings":"AAyBA;;;GAGG;AACH,eAAO,MAAM,yBAAyB;IACpC,sFAAsF;;IAEtF,oFAAoF;;IAEpF,iEAAiE;;IAEjE,kEAAkE;;IAElE,0EAA0E;;IAE1E,8DAA8D;;IAE9D,gGAAgG;;IAEhG;;;;;;OAMG;;IAEH,sEAAsE;;IAEtE;;;;;;;;;;OAUG;;IAEH;;;;;;;;;OASG;;CAEK,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,oCAAoC;IAC/C,8DAA8D;;IAE9D,kCAAkC;;IAElC;;;;;;OAMG;;CAEK,CAAC;AAWX;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,UAAU,CAAC;IAC/B,mBAAmB,EAAE,UAAU,CAAC;IAChC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACrC,GAAG,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CA8E/E;AAQD;;;;GAIG;AACH,wBAAgB,iCAAiC,CAAC,IAAI,EAAE;IACtD,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAgB/E;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,UAAU,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,UAAU,CAAC;IAC/B,mBAAmB,EAAE,UAAU,CAAC;IAChC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,aAAa,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,EAC5E,YAAY,EAAE,MAAM,GACnB,aAAa,GAAG,SAAS,CAqF3B"}
+{"version":3,"file":"assertion-seal.d.ts","sourceRoot":"","sources":["../src/assertion-seal.ts"],"names":[],"mappings":"AAuBA,OAAO,EACL,8BAA8B,EAC9B,iCAAiC,EAElC,MAAM,uBAAuB,CAAC;AAI/B;;;GAGG;AACH,eAAO,MAAM,yBAAyB;IACpC,sFAAsF;;IAEtF,oFAAoF;;IAEpF,iEAAiE;;IAEjE,kEAAkE;;IAElE,0EAA0E;;IAE1E,8DAA8D;;IAE9D,gGAAgG;;IAEhG;;;;;;OAMG;;IAEH,sEAAsE;;IAEtE,qEAAqE;;IAErE,mDAAmD;;IAEnD,6CAA6C;;IAE7C,uEAAuE;;IAEvE,iEAAiE;;IAEjE,sEAAsE;;IAEtE;;;;;;;;;;OAUG;;IAEH;;;;;;;;;OASG;;CAEK,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,oCAAoC;IAC/C,8DAA8D;;IAE9D,kCAAkC;;IAElC;;;;;;OAMG;;CAEK,CAAC;AAWX;;;;;;;;GAQG;AACH,UAAU,0BAA0B;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,UAAU,CAAC;IAC/B,mBAAmB,EAAE,UAAU,CAAC;IAChC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,sBAAsB,GAAG,0BAA0B,GAAG,CAC9D;IACE,uEAAuE;IACvE,mBAAmB,CAAC,EAAE,OAAO,iCAAiC,CAAC;IAC/D,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,gBAAgB,CAAC,EAAE,KAAK,CAAC;IACzB,iBAAiB,CAAC,EAAE,KAAK,CAAC;CAC3B,GACD;IACE,mBAAmB,EAAE,OAAO,8BAA8B,CAAC;IAC3D,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAC3C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,UAAU,CAAC;IAC/B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,KAAK,CAAC;CACtB,CACJ,CAAC;AAEF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,sBAAsB,GAAG,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CA2IlJ;AAQD;;;;GAIG;AACH,wBAAgB,iCAAiC,CAAC,IAAI,EAAE;IACtD,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAgB/E;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,UAAU,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,UAAU,CAAC;IAC/B,mBAAmB,EAAE,UAAU,CAAC;IAChC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,gEAAgE;IAChE,mBAAmB,EACf,OAAO,iCAAiC,GACxC,OAAO,8BAA8B,CAAC;IAC1C,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,8CAA8C;IAC9C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mEAAmE;IACnE,iBAAiB,CAAC,EAAE,UAAU,CAAC;IAC/B,8CAA8C;IAC9C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,aAAa,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,EAC5E,YAAY,EAAE,MAAM,GACnB,aAAa,GAAG,SAAS,CA4K3B"}

package/dist/assertion-seal.js

@@ -20,6 +20,7 @@
 // merkle root is stored as `xsd:hexBinary` (lexical form WITHOUT a
 // `0x` prefix per spec); addresses and tx hashes ride as plain
 // string literals; sizes/IDs as `xsd:integer`.
+import { GRAPH_KA_CONTENT_SCOPE_VERSION, LEGACY_ROOT_CONTENT_SCOPE_VERSION, createGraphKnowledgeAssetScope, } from './ka-content-scope.js';
 const ONT = 'http://dkg.io/ontology/';
 /**
  * Predicates written by `/api/knowledge-assets/:name/wm/finalize` (sealed at
@@ -50,6 +51,18 @@ export const ASSERTION_SEAL_PREDICATES = {
     RESERVED_KA_ID: `${ONT}reservedKaId`,
     /** Daemon-clock dateTime when the seal was written (xsd:dateTime). */
     ASSERTION_FINALIZED_AT: `${ONT}assertionFinalizedAt`,
+    /** Rootless content-scope discriminator. Missing means legacy v1. */
+    CONTENT_SCOPE_VERSION: `${ONT}contentScopeVersion`,
+    /** Canonical deterministic graph-scoped KA UAL. */
+    KA_UAL: `${ONT}kaUal`,
+    /** One-based assertion/Merkle-root index. */
+    ASSERTION_VERSION: `${ONT}assertionVersion`,
+    /** Complete public RDF triple count for the graph-scoped assertion. */
+    PUBLIC_TRIPLE_COUNT: `${ONT}publicTripleCount`,
+    /** Single KA-level private Merkle commitment (xsd:hexBinary). */
+    PRIVATE_MERKLE_ROOT: `${ONT}privateMerkleRoot`,
+    /** Number of private RDF triples committed by PRIVATE_MERKLE_ROOT. */
+    PRIVATE_TRIPLE_COUNT: `${ONT}privateTripleCount`,
     /**
      * Root entity bound to the seal (multi-valued). Recorded at finalize
      * time so that `publishFromFinalizedAssertion` can scope the SWM
@@ -100,15 +113,6 @@ function hexBinaryLexical(hex) {
     const trimmed = hex.startsWith('0x') || hex.startsWith('0X') ? hex.slice(2) : hex;
     return trimmed.toLowerCase();
 }
-/**
- * Build the full set of `_meta` quads emitted at finalize time.
- *
- * Caller supplies the resolved `assertionUri` (subject), the `_meta`
- * graph URI for the context graph (typically
- * `contextGraphMetaUri(contextGraphId)`), and the seal payload.
- * Every quad is pinned to the `metaGraph` so the gossip layer
- * propagates them with the rest of `_meta`.
- */
 export function buildAssertionSealQuads(args) {
     if (args.merkleRoot.length !== 32) {
         throw new Error(`merkleRoot must be 32 bytes, got ${args.merkleRoot.length}`);
@@ -119,8 +123,37 @@ export function buildAssertionSealQuads(args) {
     if (args.authorAttestationVS.length !== 32) {
         throw new Error(`authorAttestationVS must be 32 bytes, got ${args.authorAttestationVS.length}`);
     }
-    if (args.rootEntities.length === 0) {
-        throw new Error('rootEntities must be non-empty: the seal must commit to at least one root entity');
+    let graphScope;
+    let legacyRootEntities = [];
+    let graphPublicTripleCount;
+    let graphPrivateTripleCount;
+    let graphPrivateMerkleRoot;
+    if (args.contentScopeVersion === GRAPH_KA_CONTENT_SCOPE_VERSION) {
+        graphScope = createGraphKnowledgeAssetScope(args.kaUal, args.assertionVersion);
+        graphPublicTripleCount = args.publicTripleCount;
+        graphPrivateTripleCount = args.privateTripleCount;
+        graphPrivateMerkleRoot = args.privateMerkleRoot;
+        if (!Number.isSafeInteger(graphPublicTripleCount) || graphPublicTripleCount < 0) {
+            throw new Error(`Graph-scoped assertion publicTripleCount must be a non-negative safe integer, got ${graphPublicTripleCount}`);
+        }
+        if (!Number.isSafeInteger(graphPrivateTripleCount) || graphPrivateTripleCount < 0) {
+            throw new Error(`Graph-scoped assertion privateTripleCount must be a non-negative safe integer, got ${graphPrivateTripleCount}`);
+        }
+        if (graphPublicTripleCount === 0 && graphPrivateTripleCount === 0) {
+            throw new Error('Graph-scoped assertion must contain at least one public or private triple');
+        }
+        if (graphPrivateTripleCount > 0 && graphPrivateMerkleRoot?.length !== 32) {
+            throw new Error('Graph-scoped assertion with private triples requires one 32-byte privateMerkleRoot');
+        }
+        if (graphPrivateTripleCount === 0 && graphPrivateMerkleRoot !== undefined) {
+            throw new Error('Graph-scoped assertion privateMerkleRoot requires a positive privateTripleCount');
+        }
+    }
+    else {
+        legacyRootEntities = args.rootEntities;
+        if (legacyRootEntities.length === 0) {
+            throw new Error('rootEntities must be non-empty: the seal must commit to at least one root entity');
+        }
     }
     const merkleRootHex = bytesToHexLower(args.merkleRoot);
     const rHex = bytesToHexLower(args.authorAttestationR);
@@ -137,7 +170,7 @@ export function buildAssertionSealQuads(args) {
     // OT-RFC-43 §10.1 — dual-write the entity list under BOTH the legacy
     // dkg:assertionRootEntity and the new dkg:assertionEntity so a mixed fleet
     // (and the dual-read follow-up) resolves either name.
-    const rootEntityQuads = args.rootEntities.flatMap((root) => {
+    const rootEntityQuads = legacyRootEntities.flatMap((root) => {
         if (UNSAFE_IRI_CHARS.test(root) || root.length === 0) {
             throw new Error(`Unsafe rootEntity literal: ${root}`);
         }
@@ -156,6 +189,14 @@ export function buildAssertionSealQuads(args) {
             },
         ];
     });
+    const contentScopeQuads = graphScope ? [
+        quad(ASSERTION_SEAL_PREDICATES.CONTENT_SCOPE_VERSION, `"${GRAPH_KA_CONTENT_SCOPE_VERSION}"^^${xsdInteger}`),
+        quad(ASSERTION_SEAL_PREDICATES.KA_UAL, `<${graphScope.ual}>`),
+        quad(ASSERTION_SEAL_PREDICATES.ASSERTION_VERSION, `"${graphScope.assertionVersion}"^^${xsdInteger}`),
+        quad(ASSERTION_SEAL_PREDICATES.PUBLIC_TRIPLE_COUNT, `"${graphPublicTripleCount}"^^${xsdInteger}`),
+        quad(ASSERTION_SEAL_PREDICATES.PRIVATE_TRIPLE_COUNT, `\"${graphPrivateTripleCount}\"^^${xsdInteger}`),
+        ...(graphPrivateMerkleRoot ? [quad(ASSERTION_SEAL_PREDICATES.PRIVATE_MERKLE_ROOT, `\"${bytesToHexLower(graphPrivateMerkleRoot)}\"^^${xsdHexBinary}`)] : []),
+    ] : [];
     return [
         quad(ASSERTION_SEAL_PREDICATES.ASSERTION_MERKLE_ROOT, `"${merkleRootHex}"^^${xsdHexBinary}`),
         quad(ASSERTION_SEAL_PREDICATES.AUTHOR_ADDRESS, JSON.stringify(args.authorAddress)),
@@ -166,6 +207,7 @@ export function buildAssertionSealQuads(args) {
         quad(ASSERTION_SEAL_PREDICATES.ASSERTED_AT_KAV10_ADDRESS, JSON.stringify(args.kav10Address)),
         quad(ASSERTION_SEAL_PREDICATES.RESERVED_KA_ID, `"${args.reservedKaId.toString()}"^^${xsdInteger}`),
         quad(ASSERTION_SEAL_PREDICATES.ASSERTION_FINALIZED_AT, `"${args.finalizedAtIso}"^^${xsdDateTime}`),
+        ...contentScopeQuads,
         ...rootEntityQuads,
     ];
 }
@@ -245,10 +287,69 @@ export function parseAssertionSealQuads(quads, assertionUri) {
                 `_meta is corrupt; rebuild from the source assertion.`);
         }
     }
-    if (rootEntities.length === 0) {
-        throw new Error(`Partial assertion seal for <${assertionUri}>: at least one ` +
-            `<${ASSERTION_SEAL_PREDICATES.ASSERTION_ROOT_ENTITY}> is required ` +
-            `(seal predates the per-assertion-rootEntities binding — re-finalize the assertion).`);
+    const contentScopeVersion = seen.has(ASSERTION_SEAL_PREDICATES.CONTENT_SCOPE_VERSION)
+        ? Number(integerLiteralToValue(seen.get(ASSERTION_SEAL_PREDICATES.CONTENT_SCOPE_VERSION)))
+        : LEGACY_ROOT_CONTENT_SCOPE_VERSION;
+    let kaUal;
+    let assertionVersion;
+    let publicTripleCount;
+    let privateMerkleRoot;
+    let privateTripleCount;
+    if (contentScopeVersion === GRAPH_KA_CONTENT_SCOPE_VERSION) {
+        const graphRequired = [
+            ASSERTION_SEAL_PREDICATES.KA_UAL,
+            ASSERTION_SEAL_PREDICATES.ASSERTION_VERSION,
+            ASSERTION_SEAL_PREDICATES.PUBLIC_TRIPLE_COUNT,
+            ASSERTION_SEAL_PREDICATES.PRIVATE_TRIPLE_COUNT,
+        ];
+        for (const predicate of graphRequired) {
+            if (!seen.has(predicate)) {
+                throw new Error(`Partial graph-scoped assertion seal for <${assertionUri}>: missing <${predicate}>.`);
+            }
+        }
+        if (rootEntities.length > 0) {
+            throw new Error(`Graph-scoped assertion seal for <${assertionUri}> must not contain root entities`);
+        }
+        const scope = createGraphKnowledgeAssetScope(iriObjectToValue(seen.get(ASSERTION_SEAL_PREDICATES.KA_UAL)), integerLiteralToValue(seen.get(ASSERTION_SEAL_PREDICATES.ASSERTION_VERSION)));
+        const count = integerLiteralToValue(seen.get(ASSERTION_SEAL_PREDICATES.PUBLIC_TRIPLE_COUNT));
+        const privateCount = integerLiteralToValue(seen.get(ASSERTION_SEAL_PREDICATES.PRIVATE_TRIPLE_COUNT));
+        if (count < 0n || count > BigInt(Number.MAX_SAFE_INTEGER)) {
+            throw new Error(`Invalid graph-scoped publicTripleCount for <${assertionUri}>: ${count}`);
+        }
+        if (privateCount < 0n || privateCount > BigInt(Number.MAX_SAFE_INTEGER)) {
+            throw new Error(`Invalid graph-scoped privateTripleCount for <${assertionUri}>: ${privateCount}`);
+        }
+        if (count === 0n && privateCount === 0n) {
+            throw new Error(`Graph-scoped assertion seal for <${assertionUri}> contains no public or private triples`);
+        }
+        const privateRootObject = seen.get(ASSERTION_SEAL_PREDICATES.PRIVATE_MERKLE_ROOT);
+        if (privateCount > 0n) {
+            if (privateRootObject === undefined) {
+                throw new Error(`Partial graph-scoped assertion seal for <${assertionUri}>: missing ` +
+                    `<${ASSERTION_SEAL_PREDICATES.PRIVATE_MERKLE_ROOT}>.`);
+            }
+            privateMerkleRoot = hexBinaryLiteralToBytes(privateRootObject);
+            if (privateMerkleRoot.length !== 32) {
+                throw new Error(`Invalid graph-scoped privateMerkleRoot for <${assertionUri}>: expected 32 bytes, got ${privateMerkleRoot.length}`);
+            }
+        }
+        else if (privateRootObject !== undefined) {
+            throw new Error(`Graph-scoped assertion seal for <${assertionUri}> has privateMerkleRoot with zero privateTripleCount`);
+        }
+        kaUal = scope.ual;
+        assertionVersion = scope.assertionVersion;
+        publicTripleCount = Number(count);
+        privateTripleCount = Number(privateCount);
+    }
+    else if (contentScopeVersion === LEGACY_ROOT_CONTENT_SCOPE_VERSION) {
+        if (rootEntities.length === 0) {
+            throw new Error(`Partial assertion seal for <${assertionUri}>: at least one ` +
+                `<${ASSERTION_SEAL_PREDICATES.ASSERTION_ROOT_ENTITY}> is required ` +
+                `(seal predates the per-assertion-rootEntities binding — re-finalize the assertion).`);
+        }
+    }
+    else {
+        throw new Error(`Unsupported assertion content scope version ${contentScopeVersion} for <${assertionUri}>`);
     }
     return {
         merkleRoot: hexBinaryLiteralToBytes(seen.get(ASSERTION_SEAL_PREDICATES.ASSERTION_MERKLE_ROOT)),
@@ -264,6 +365,12 @@ export function parseAssertionSealQuads(quads, assertionUri) {
             ? integerLiteralToValue(seen.get(ASSERTION_SEAL_PREDICATES.RESERVED_KA_ID))
             : undefined,
         finalizedAtIso: dateTimeLiteralToValue(seen.get(ASSERTION_SEAL_PREDICATES.ASSERTION_FINALIZED_AT)),
+        contentScopeVersion,
+        ...(kaUal ? { kaUal } : {}),
+        ...(assertionVersion ? { assertionVersion } : {}),
+        ...(publicTripleCount !== undefined ? { publicTripleCount } : {}),
+        ...(privateMerkleRoot !== undefined ? { privateMerkleRoot } : {}),
+        ...(privateTripleCount !== undefined ? { privateTripleCount } : {}),
         rootEntities,
     };
 }
@@ -299,6 +406,14 @@ function integerLiteralToValue(literal) {
         throw new Error(`Invalid xsd:integer literal: ${literal}`);
     return BigInt(m[1]);
 }
+function iriObjectToValue(object) {
+    const wrapped = object.match(/^<([^>]+)>$/);
+    const iri = wrapped ? wrapped[1] : object;
+    if (!iri || iri.startsWith('"') || UNSAFE_IRI_CHARS.test(iri)) {
+        throw new Error(`Invalid assertion seal IRI object: ${object}`);
+    }
+    return iri;
+}
 function dateTimeLiteralToValue(literal) {
     const m = literal.match(/^"([^"]+)"\^\^<http:\/\/www\.w3\.org\/2001\/XMLSchema#dateTime>$/) ??
         literal.match(/^"([^"]+)"$/);

package/dist/assertion-seal.js.map

@@ -1 +1 @@
-{"version":3,"file":"assertion-seal.js","sourceRoot":"","sources":["../src/assertion-seal.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,EAAE;AACF,kEAAkE;AAClE,gEAAgE;AAChE,oEAAoE;AACpE,6DAA6D;AAC7D,iEAAiE;AACjE,qBAAqB;AACrB,EAAE;AACF,+DAA+D;AAC/D,+DAA+D;AAC/D,oEAAoE;AACpE,mEAAmE;AACnE,gEAAgE;AAChE,4BAA4B;AAC5B,EAAE;AACF,gEAAgE;AAChE,gEAAgE;AAChE,gEAAgE;AAChE,mEAAmE;AACnE,+DAA+D;AAC/D,+CAA+C;AAE/C,MAAM,GAAG,GAAG,yBAAyB,CAAC;AAEtC;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,sFAAsF;IACtF,qBAAqB,EAAE,GAAG,GAAG,qBAAqB;IAClD,oFAAoF;IACpF,cAAc,EAAE,GAAG,GAAG,eAAe;IACrC,iEAAiE;IACjE,oBAAoB,EAAE,GAAG,GAAG,oBAAoB;IAChD,kEAAkE;IAClE,qBAAqB,EAAE,GAAG,GAAG,qBAAqB;IAClD,0EAA0E;IAC1E,qBAAqB,EAAE,GAAG,GAAG,qBAAqB;IAClD,8DAA8D;IAC9D,oBAAoB,EAAE,GAAG,GAAG,mBAAmB;IAC/C,gGAAgG;IAChG,yBAAyB,EAAE,GAAG,GAAG,wBAAwB;IACzD;;;;;;OAMG;IACH,cAAc,EAAE,GAAG,GAAG,cAAc;IACpC,sEAAsE;IACtE,sBAAsB,EAAE,GAAG,GAAG,sBAAsB;IACpD;;;;;;;;;;OAUG;IACH,qBAAqB,EAAE,GAAG,GAAG,qBAAqB;IAClD;;;;;;;;;OASG;IACH,gBAAgB,EAAE,GAAG,GAAG,iBAAiB;CACjC,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,8DAA8D;IAC9D,eAAe,EAAE,GAAG,GAAG,eAAe;IACtC,kCAAkC;IAClC,kBAAkB,EAAE,GAAG,GAAG,kBAAkB;IAC5C;;;;;;OAMG;IACH,kBAAkB,EAAE,GAAG,GAAG,iBAAiB;CACnC,CAAC;AAEX;;;GAGG;AACH,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAClF,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAmBvC;IACC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,IAAI,CAAC,mBAAmB,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAExD,MAAM,YAAY,GAAG,8CAA8C,CAAC;IACpE,MAAM,UAAU,GAAG,4CAA4C,CAAC;IAChE,MAAM,WAAW,GAAG,6CAA6C,CAAC;IAElE,MAAM,IAAI,GAAG,CAAC,SAAiB,EAAE,aAAqB,EAAE,EAAE,CAAC,CAAC;QAC1D,OAAO,EAAE,IAAI,CAAC,YAAY;QAC1B,SAAS;QACT,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,IAAI,CAAC,SAAS;KACtB,CAAC,CAAC;IAEH,qEAAqE;IACrE,2EAA2E;IAC3E,sDAAsD;IACtD,MAAM,eAAe,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACzD,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,OAAO;YACL;gBACE,OAAO,EAAE,IAAI,CAAC,YAAY;gBAC1B,SAAS,EAAE,yBAAyB,CAAC,qBAAqB;gBAC1D,MAAM,EAAE,IAAI,IAAI,GAAG;gBACnB,KAAK,EAAE,IAAI,CAAC,SAAS;aACtB;YACD;gBACE,OAAO,EAAE,IAAI,CAAC,YAAY;gBAC1B,SAAS,EAAE,yBAAyB,CAAC,gBAAgB;gBACrD,MAAM,EAAE,IAAI,IAAI,GAAG;gBACnB,KAAK,EAAE,IAAI,CAAC,SAAS;aACtB;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,CAAC,yBAAyB,CAAC,qBAAqB,EAAE,IAAI,aAAa,MAAM,YAAY,EAAE,CAAC;QAC5F,IAAI,CAAC,yBAAyB,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAClF,IAAI,CAAC,yBAAyB,CAAC,oBAAoB,EAAE,IAAI,IAAI,MAAM,YAAY,EAAE,CAAC;QAClF,IAAI,CAAC,yBAAyB,CAAC,qBAAqB,EAAE,IAAI,KAAK,MAAM,YAAY,EAAE,CAAC;QACpF,IAAI,CACF,yBAAyB,CAAC,qBAAqB,EAC/C,IAAI,IAAI,CAAC,mBAAmB,MAAM,UAAU,EAAE,CAC/C;QACD,IAAI,CACF,yBAAyB,CAAC,oBAAoB,EAC9C,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,UAAU,EAAE,CAC9C;QACD,IAAI,CACF,yBAAyB,CAAC,yBAAyB,EACnD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAClC;QACD,IAAI,CACF,yBAAyB,CAAC,cAAc,EACxC,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,UAAU,EAAE,CACnD;QACD,IAAI,CACF,yBAAyB,CAAC,sBAAsB,EAChD,IAAI,IAAI,CAAC,cAAc,MAAM,WAAW,EAAE,CAC3C;QACD,GAAG,eAAe;KACnB,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,yEAAyE;AACzE,sEAAsE;AACtE,kEAAkE;AAClE,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAEjD;;;;GAIG;AACH,MAAM,UAAU,iCAAiC,CAAC,IAYjD;IACC,MAAM,UAAU,GAAG,4CAA4C,CAAC;IAChE,OAAO;QACL;YACE,OAAO,EAAE,IAAI,CAAC,YAAY;YAC1B,SAAS,EAAE,oCAAoC,CAAC,eAAe;YAC/D,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;YACnC,KAAK,EAAE,IAAI,CAAC,SAAS;SACtB;QACD;YACE,OAAO,EAAE,IAAI,CAAC,YAAY;YAC1B,SAAS,EAAE,oCAAoC,CAAC,kBAAkB;YAClE,MAAM,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,UAAU,EAAE;YACzD,KAAK,EAAE,IAAI,CAAC,SAAS;SACtB;KACF,CAAC;AACJ,CAAC;AA6BD;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAA4E,EAC5E,YAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,OAAO,KAAK,YAAY;YAAE,SAAS;QACzC,IAAI,CAAC,CAAC,SAAS,KAAK,yBAAyB,CAAC,qBAAqB,EAAE,CAAC;YACpE,iEAAiE;YACjE,+DAA+D;YAC/D,6DAA6D;YAC7D,2DAA2D;YAC3D,kEAAkE;YAClE,mDAAmD;YACnD,4BAA4B;YAC5B,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CACb,gDAAgD,YAAY,MAAM,CAAC,CAAC,MAAM,GAAG;oBAC3E,uEAAuE,CAC1E,CAAC;YACJ,CAAC;YACD,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,qBAAqB,CAAC;QAAE,OAAO,SAAS,CAAC;IAEjF,MAAM,QAAQ,GAAG;QACf,yBAAyB,CAAC,qBAAqB;QAC/C,yBAAyB,CAAC,cAAc;QACxC,yBAAyB,CAAC,oBAAoB;QAC9C,yBAAyB,CAAC,qBAAqB;QAC/C,yBAAyB,CAAC,qBAAqB;QAC/C,yBAAyB,CAAC,oBAAoB;QAC9C,yBAAyB,CAAC,yBAAyB;QACnD,yBAAyB,CAAC,sBAAsB;KACjD,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,+BAA+B,YAAY,eAAe,CAAC,KAAK;gBAC9D,sDAAsD,CACzD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,+BAA+B,YAAY,kBAAkB;YAC3D,IAAI,yBAAyB,CAAC,qBAAqB,gBAAgB;YACnE,qFAAqF,CACxF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,UAAU,EAAE,uBAAuB,CACjC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,qBAAqB,CAAE,CAC3D;QACD,aAAa,EAAE,oBAAoB,CACjC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,cAAc,CAAE,CACpD;QACD,kBAAkB,EAAE,uBAAuB,CACzC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,oBAAoB,CAAE,CAC1D;QACD,mBAAmB,EAAE,uBAAuB,CAC1C,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,qBAAqB,CAAE,CAC3D;QACD,mBAAmB,EAAE,MAAM,CACzB,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,qBAAqB,CAAE,CAAC,CAClF;QACD,OAAO,EAAE,qBAAqB,CAC5B,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,oBAAoB,CAAE,CAC1D;QACD,YAAY,EAAE,oBAAoB,CAChC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,yBAAyB,CAAE,CAC/D;QACD,yEAAyE;QACzE,6EAA6E;QAC7E,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,cAAc,CAAC;YAC9D,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,cAAc,CAAE,CAAC;YAC5E,CAAC,CAAC,SAAS;QACb,cAAc,EAAE,sBAAsB,CACpC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,sBAAsB,CAAE,CAC5D;QACD,YAAY;KACb,CAAC;AACJ,CAAC;AAED,mEAAmE;AAEnE,SAAS,eAAe,CAAC,KAAiB;IACxC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAe;IAC9C,kEAAkE;IAClE,MAAM,CAAC,GACL,OAAO,CAAC,KAAK,CAAC,0EAA0E,CAAC;QACzF,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,kCAAkC,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,yCAAyC,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe;IAC5C,mDAAmD;IACnD,MAAM,CAAC,GACL,OAAO,CAAC,KAAK,CAAC,iEAAiE,CAAC;QAChF,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,EAAE,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe;IAC7C,MAAM,CAAC,GACL,OAAO,CAAC,KAAK,CAAC,kEAAkE,CAAC;QACjF,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;IACpE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,kEAAkE;IAClE,iEAAiE;IACjE,2CAA2C;IAC3C,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"assertion-seal.js","sourceRoot":"","sources":["../src/assertion-seal.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,EAAE;AACF,kEAAkE;AAClE,gEAAgE;AAChE,oEAAoE;AACpE,6DAA6D;AAC7D,iEAAiE;AACjE,qBAAqB;AACrB,EAAE;AACF,+DAA+D;AAC/D,+DAA+D;AAC/D,oEAAoE;AACpE,mEAAmE;AACnE,gEAAgE;AAChE,4BAA4B;AAC5B,EAAE;AACF,gEAAgE;AAChE,gEAAgE;AAChE,gEAAgE;AAChE,mEAAmE;AACnE,+DAA+D;AAC/D,+CAA+C;AAE/C,OAAO,EACL,8BAA8B,EAC9B,iCAAiC,EACjC,8BAA8B,GAC/B,MAAM,uBAAuB,CAAC;AAE/B,MAAM,GAAG,GAAG,yBAAyB,CAAC;AAEtC;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,sFAAsF;IACtF,qBAAqB,EAAE,GAAG,GAAG,qBAAqB;IAClD,oFAAoF;IACpF,cAAc,EAAE,GAAG,GAAG,eAAe;IACrC,iEAAiE;IACjE,oBAAoB,EAAE,GAAG,GAAG,oBAAoB;IAChD,kEAAkE;IAClE,qBAAqB,EAAE,GAAG,GAAG,qBAAqB;IAClD,0EAA0E;IAC1E,qBAAqB,EAAE,GAAG,GAAG,qBAAqB;IAClD,8DAA8D;IAC9D,oBAAoB,EAAE,GAAG,GAAG,mBAAmB;IAC/C,gGAAgG;IAChG,yBAAyB,EAAE,GAAG,GAAG,wBAAwB;IACzD;;;;;;OAMG;IACH,cAAc,EAAE,GAAG,GAAG,cAAc;IACpC,sEAAsE;IACtE,sBAAsB,EAAE,GAAG,GAAG,sBAAsB;IACpD,qEAAqE;IACrE,qBAAqB,EAAE,GAAG,GAAG,qBAAqB;IAClD,mDAAmD;IACnD,MAAM,EAAE,GAAG,GAAG,OAAO;IACrB,6CAA6C;IAC7C,iBAAiB,EAAE,GAAG,GAAG,kBAAkB;IAC3C,uEAAuE;IACvE,mBAAmB,EAAE,GAAG,GAAG,mBAAmB;IAC9C,iEAAiE;IACjE,mBAAmB,EAAE,GAAG,GAAG,mBAAmB;IAC9C,sEAAsE;IACtE,oBAAoB,EAAE,GAAG,GAAG,oBAAoB;IAChD;;;;;;;;;;OAUG;IACH,qBAAqB,EAAE,GAAG,GAAG,qBAAqB;IAClD;;;;;;;;;OASG;IACH,gBAAgB,EAAE,GAAG,GAAG,iBAAiB;CACjC,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,8DAA8D;IAC9D,eAAe,EAAE,GAAG,GAAG,eAAe;IACtC,kCAAkC;IAClC,kBAAkB,EAAE,GAAG,GAAG,kBAAkB;IAC5C;;;;;;OAMG;IACH,kBAAkB,EAAE,GAAG,GAAG,iBAAiB;CACnC,CAAC;AAEX;;;GAGG;AACH,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAClF,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC;AAC/B,CAAC;AA8CD,MAAM,UAAU,uBAAuB,CAAC,IAA4B;IAClE,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,IAAI,CAAC,mBAAmB,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,UAAyE,CAAC;IAC9E,IAAI,kBAAkB,GAA0B,EAAE,CAAC;IACnD,IAAI,sBAA0C,CAAC;IAC/C,IAAI,uBAA2C,CAAC;IAChD,IAAI,sBAA8C,CAAC;IACnD,IAAI,IAAI,CAAC,mBAAmB,KAAK,8BAA8B,EAAE,CAAC;QAChE,UAAU,GAAG,8BAA8B,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC/E,sBAAsB,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAChD,uBAAuB,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAClD,sBAAsB,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,sBAAsB,CAAC,IAAI,sBAAsB,GAAG,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,KAAK,CACb,qFAAqF,sBAAsB,EAAE,CAC9G,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,uBAAuB,CAAC,IAAI,uBAAuB,GAAG,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,KAAK,CACb,sFAAsF,uBAAuB,EAAE,CAChH,CAAC;QACJ,CAAC;QACD,IAAI,sBAAsB,KAAK,CAAC,IAAI,uBAAuB,KAAK,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,uBAAuB,GAAG,CAAC,IAAI,sBAAsB,EAAE,MAAM,KAAK,EAAE,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;QACJ,CAAC;QACD,IAAI,uBAAuB,KAAK,CAAC,IAAI,sBAAsB,KAAK,SAAS,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,kBAAkB,GAAG,IAAI,CAAC,YAAY,CAAC;QACvC,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;QACtG,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAExD,MAAM,YAAY,GAAG,8CAA8C,CAAC;IACpE,MAAM,UAAU,GAAG,4CAA4C,CAAC;IAChE,MAAM,WAAW,GAAG,6CAA6C,CAAC;IAElE,MAAM,IAAI,GAAG,CAAC,SAAiB,EAAE,aAAqB,EAAE,EAAE,CAAC,CAAC;QAC1D,OAAO,EAAE,IAAI,CAAC,YAAY;QAC1B,SAAS;QACT,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,IAAI,CAAC,SAAS;KACtB,CAAC,CAAC;IAEH,qEAAqE;IACrE,2EAA2E;IAC3E,sDAAsD;IACtD,MAAM,eAAe,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1D,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,OAAO;YACL;gBACE,OAAO,EAAE,IAAI,CAAC,YAAY;gBAC1B,SAAS,EAAE,yBAAyB,CAAC,qBAAqB;gBAC1D,MAAM,EAAE,IAAI,IAAI,GAAG;gBACnB,KAAK,EAAE,IAAI,CAAC,SAAS;aACtB;YACD;gBACE,OAAO,EAAE,IAAI,CAAC,YAAY;gBAC1B,SAAS,EAAE,yBAAyB,CAAC,gBAAgB;gBACrD,MAAM,EAAE,IAAI,IAAI,GAAG;gBACnB,KAAK,EAAE,IAAI,CAAC,SAAS;aACtB;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,iBAAiB,GAAG,UAAU,CAAC,CAAC,CAAC;QACrC,IAAI,CACF,yBAAyB,CAAC,qBAAqB,EAC/C,IAAI,8BAA8B,MAAM,UAAU,EAAE,CACrD;QACD,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,IAAI,UAAU,CAAC,GAAG,GAAG,CAAC;QAC7D,IAAI,CACF,yBAAyB,CAAC,iBAAiB,EAC3C,IAAI,UAAU,CAAC,gBAAgB,MAAM,UAAU,EAAE,CAClD;QACD,IAAI,CACF,yBAAyB,CAAC,mBAAmB,EAC7C,IAAI,sBAAsB,MAAM,UAAU,EAAE,CAC7C;QACD,IAAI,CACF,yBAAyB,CAAC,oBAAoB,EAC9C,KAAK,uBAAuB,OAAO,UAAU,EAAE,CAChD;QACD,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,IAAI,CAChC,yBAAyB,CAAC,mBAAmB,EAC7C,KAAK,eAAe,CAAC,sBAAsB,CAAC,OAAO,YAAY,EAAE,CAClE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACT,CAAC,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;QACL,IAAI,CAAC,yBAAyB,CAAC,qBAAqB,EAAE,IAAI,aAAa,MAAM,YAAY,EAAE,CAAC;QAC5F,IAAI,CAAC,yBAAyB,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAClF,IAAI,CAAC,yBAAyB,CAAC,oBAAoB,EAAE,IAAI,IAAI,MAAM,YAAY,EAAE,CAAC;QAClF,IAAI,CAAC,yBAAyB,CAAC,qBAAqB,EAAE,IAAI,KAAK,MAAM,YAAY,EAAE,CAAC;QACpF,IAAI,CACF,yBAAyB,CAAC,qBAAqB,EAC/C,IAAI,IAAI,CAAC,mBAAmB,MAAM,UAAU,EAAE,CAC/C;QACD,IAAI,CACF,yBAAyB,CAAC,oBAAoB,EAC9C,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,UAAU,EAAE,CAC9C;QACD,IAAI,CACF,yBAAyB,CAAC,yBAAyB,EACnD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAClC;QACD,IAAI,CACF,yBAAyB,CAAC,cAAc,EACxC,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,UAAU,EAAE,CACnD;QACD,IAAI,CACF,yBAAyB,CAAC,sBAAsB,EAChD,IAAI,IAAI,CAAC,cAAc,MAAM,WAAW,EAAE,CAC3C;QACD,GAAG,iBAAiB;QACpB,GAAG,eAAe;KACnB,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,yEAAyE;AACzE,sEAAsE;AACtE,kEAAkE;AAClE,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAEjD;;;;GAIG;AACH,MAAM,UAAU,iCAAiC,CAAC,IAYjD;IACC,MAAM,UAAU,GAAG,4CAA4C,CAAC;IAChE,OAAO;QACL;YACE,OAAO,EAAE,IAAI,CAAC,YAAY;YAC1B,SAAS,EAAE,oCAAoC,CAAC,eAAe;YAC/D,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;YACnC,KAAK,EAAE,IAAI,CAAC,SAAS;SACtB;QACD;YACE,OAAO,EAAE,IAAI,CAAC,YAAY;YAC1B,SAAS,EAAE,oCAAoC,CAAC,kBAAkB;YAClE,MAAM,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,UAAU,EAAE;YACzD,KAAK,EAAE,IAAI,CAAC,SAAS;SACtB;KACF,CAAC;AACJ,CAAC;AA2CD;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAA4E,EAC5E,YAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,OAAO,KAAK,YAAY;YAAE,SAAS;QACzC,IAAI,CAAC,CAAC,SAAS,KAAK,yBAAyB,CAAC,qBAAqB,EAAE,CAAC;YACpE,iEAAiE;YACjE,+DAA+D;YAC/D,6DAA6D;YAC7D,2DAA2D;YAC3D,kEAAkE;YAClE,mDAAmD;YACnD,4BAA4B;YAC5B,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CACb,gDAAgD,YAAY,MAAM,CAAC,CAAC,MAAM,GAAG;oBAC3E,uEAAuE,CAC1E,CAAC;YACJ,CAAC;YACD,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,qBAAqB,CAAC;QAAE,OAAO,SAAS,CAAC;IAEjF,MAAM,QAAQ,GAAG;QACf,yBAAyB,CAAC,qBAAqB;QAC/C,yBAAyB,CAAC,cAAc;QACxC,yBAAyB,CAAC,oBAAoB;QAC9C,yBAAyB,CAAC,qBAAqB;QAC/C,yBAAyB,CAAC,qBAAqB;QAC/C,yBAAyB,CAAC,oBAAoB;QAC9C,yBAAyB,CAAC,yBAAyB;QACnD,yBAAyB,CAAC,sBAAsB;KACjD,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,+BAA+B,YAAY,eAAe,CAAC,KAAK;gBAC9D,sDAAsD,CACzD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,qBAAqB,CAAC;QACnF,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,qBAAqB,CAAE,CAAC,CAAC;QAC3F,CAAC,CAAC,iCAAiC,CAAC;IACtC,IAAI,KAAyB,CAAC;IAC9B,IAAI,gBAAoC,CAAC;IACzC,IAAI,iBAAqC,CAAC;IAC1C,IAAI,iBAAyC,CAAC;IAC9C,IAAI,kBAAsC,CAAC;IAC3C,IAAI,mBAAmB,KAAK,8BAA8B,EAAE,CAAC;QAC3D,MAAM,aAAa,GAAG;YACpB,yBAAyB,CAAC,MAAM;YAChC,yBAAyB,CAAC,iBAAiB;YAC3C,yBAAyB,CAAC,mBAAmB;YAC7C,yBAAyB,CAAC,oBAAoB;SAC/C,CAAC;QACF,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CACb,4CAA4C,YAAY,eAAe,SAAS,IAAI,CACrF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,oCAAoC,YAAY,kCAAkC,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,8BAA8B,CAC1C,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,MAAM,CAAE,CAAC,EAC7D,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,iBAAiB,CAAE,CAAC,CAC9E,CAAC;QACF,MAAM,KAAK,GAAG,qBAAqB,CACjC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,mBAAmB,CAAE,CACzD,CAAC;QACF,MAAM,YAAY,GAAG,qBAAqB,CACxC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,oBAAoB,CAAE,CAC1D,CAAC;QACF,IAAI,KAAK,GAAG,EAAE,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CACb,+CAA+C,YAAY,MAAM,KAAK,EAAE,CACzE,CAAC;QACJ,CAAC;QACD,IAAI,YAAY,GAAG,EAAE,IAAI,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CACb,gDAAgD,YAAY,MAAM,YAAY,EAAE,CACjF,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,KAAK,EAAE,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,oCAAoC,YAAY,yCAAyC,CAC1F,CAAC;QACJ,CAAC;QACD,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,mBAAmB,CAAC,CAAC;QAClF,IAAI,YAAY,GAAG,EAAE,EAAE,CAAC;YACtB,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CACb,4CAA4C,YAAY,aAAa;oBACnE,IAAI,yBAAyB,CAAC,mBAAmB,IAAI,CACxD,CAAC;YACJ,CAAC;YACD,iBAAiB,GAAG,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;YAC/D,IAAI,iBAAiB,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CACb,+CAA+C,YAAY,6BAA6B,iBAAiB,CAAC,MAAM,EAAE,CACnH,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,oCAAoC,YAAY,sDAAsD,CACvG,CAAC;QACJ,CAAC;QACD,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC;QAClB,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;QAC1C,iBAAiB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,kBAAkB,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;SAAM,IAAI,mBAAmB,KAAK,iCAAiC,EAAE,CAAC;QACrE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,+BAA+B,YAAY,kBAAkB;gBAC3D,IAAI,yBAAyB,CAAC,qBAAqB,gBAAgB;gBACnE,qFAAqF,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CACb,+CAA+C,mBAAmB,SAAS,YAAY,GAAG,CAC3F,CAAC;IACJ,CAAC;IACD,OAAO;QACL,UAAU,EAAE,uBAAuB,CACjC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,qBAAqB,CAAE,CAC3D;QACD,aAAa,EAAE,oBAAoB,CACjC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,cAAc,CAAE,CACpD;QACD,kBAAkB,EAAE,uBAAuB,CACzC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,oBAAoB,CAAE,CAC1D;QACD,mBAAmB,EAAE,uBAAuB,CAC1C,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,qBAAqB,CAAE,CAC3D;QACD,mBAAmB,EAAE,MAAM,CACzB,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,qBAAqB,CAAE,CAAC,CAClF;QACD,OAAO,EAAE,qBAAqB,CAC5B,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,oBAAoB,CAAE,CAC1D;QACD,YAAY,EAAE,oBAAoB,CAChC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,yBAAyB,CAAE,CAC/D;QACD,yEAAyE;QACzE,6EAA6E;QAC7E,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,cAAc,CAAC;YAC9D,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,cAAc,CAAE,CAAC;YAC5E,CAAC,CAAC,SAAS;QACb,cAAc,EAAE,sBAAsB,CACpC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,sBAAsB,CAAE,CAC5D;QACD,mBAAmB;QACnB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,YAAY;KACb,CAAC;AACJ,CAAC;AAED,mEAAmE;AAEnE,SAAS,eAAe,CAAC,KAAiB;IACxC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAe;IAC9C,kEAAkE;IAClE,MAAM,CAAC,GACL,OAAO,CAAC,KAAK,CAAC,0EAA0E,CAAC;QACzF,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,kCAAkC,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,yCAAyC,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe;IAC5C,mDAAmD;IACnD,MAAM,CAAC,GACL,OAAO,CAAC,KAAK,CAAC,iEAAiE,CAAC;QAChF,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,EAAE,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe;IAC7C,MAAM,CAAC,GACL,OAAO,CAAC,KAAK,CAAC,kEAAkE,CAAC;QACjF,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;IACpE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,kEAAkE;IAClE,iEAAiE;IACjE,2CAA2C;IAC3C,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/constants.d.ts

@@ -3,6 +3,8 @@ export declare const PROTOCOL_PUBLISH = "/dkg/10.0.0/publish";
 export declare const PROTOCOL_QUERY = "/dkg/10.0.0/query";
 export declare const PROTOCOL_DISCOVER = "/dkg/10.0.0/discover";
 export declare const PROTOCOL_SYNC = "/dkg/10.0.2/sync";
+export declare const PROTOCOL_SYNC_POOLED = "/dkg/10.0.3/sync";
+export declare const PROTOCOL_SYNC_CHANGELOG = "/dkg/10.0.2/sync-changelog";
 export declare const PROTOCOL_GET_ASSERTION_ARTIFACT = "/dkg/10.0.2/get-assertion-artifact";
 export declare const PROTOCOL_MESSAGE = "/dkg/10.0.1/message";
 export declare const PROTOCOL_ACCESS = "/dkg/10.0.1/private-access";
@@ -11,7 +13,7 @@ export declare const PROTOCOL_SWM_SENDER_KEY = "/dkg/10.0.1/swm-sender-key";
 export declare const PROTOCOL_SWM_UPDATE = "/dkg/10.0.1/swm-update";
 export declare const PROTOCOL_SWM_SHARE_ACK = "/dkg/10.0.1/swm-share-ack";
 export declare const PROTOCOL_SWM_HOST_CATCHUP = "/dkg/10.0.1/swm-host-catchup";
-export declare const PROTOCOL_JOIN_REQUEST = "/dkg/10.0.1/join-request";
+export declare const PROTOCOL_JOIN_REQUEST = "/dkg/10.0.2/join-request";
 export declare const PROTOCOL_VERIFY_PROPOSAL = "/dkg/10.0.1/verify-proposal";
 export declare const PROTOCOL_VERIFY_APPROVAL = "/dkg/10.0.0/verify-approval";
 export declare const PROTOCOL_STORAGE_ACK = "/dkg/10.0.1/storage-ack";
@@ -39,6 +41,14 @@ export declare const PROTOCOL_STORAGE_ACK_V2 = "/dkg/10.0.2/storage-ack";
  * V2-vs-V1 graceful-fallback pattern.
  */
 export declare const PROTOCOL_STORAGE_UPDATE_ACK = "/dkg/10.0.1/storage-update-ack";
+/**
+ * Graph-scoped UPDATE StorageACK protocol. V1 update responders interpret
+ * `subGraphName` using the legacy entity-root layout and do not validate the
+ * graph-scoped content envelope. Keep V2 on a distinct capability so a
+ * rootless update can never be acknowledged by a peer that silently ignores
+ * its scope/version fields.
+ */
+export declare const PROTOCOL_STORAGE_UPDATE_ACK_V2 = "/dkg/10.0.2/storage-update-ack";
 /**
  * OT-RFC-38 LU-11 / OT-RFC-39 — point-to-point sync verb for one
  * curated-CG ciphertext chunk identified by (cgId, batchId,
@@ -93,6 +103,12 @@ export declare function contextGraphSharedMemoryMetaUri(contextGraphId: string,
 export declare function contextGraphVerifiableMemoryUri(contextGraphId: string, verifiableMemoryId: string): string;
 export declare function contextGraphVerifiableMemoryMetaUri(contextGraphId: string, verifiableMemoryId: string): string;
 export declare function contextGraphAssertionUri(contextGraphId: string, agentAddress: string, name: string, subGraphName?: string): string;
+/** Canonical identity segment used by all new per-KA memory-layer writes. */
+export declare function canonicalKnowledgeAssetAgentAddress(agentAddress: string): string;
+/** Compare graph identity addresses using EVM case-folding and legacy exactness. */
+export declare function knowledgeAssetAgentAddressesEqual(left: string, right: string): boolean;
+/** Build the layer-independent canonical `{address}/{number}` suffix. */
+export declare function canonicalKnowledgeAssetGraphIdentitySuffix(agentAddress: string, kaNumber: string | number | bigint): string;
 /**
  * Uniform per-KA graph URI for ANY memory layer (OT-RFC-46 Chorus).
  *
@@ -102,9 +118,18 @@ export declare function contextGraphAssertionUri(contextGraphId: string, agentAd
  * builder, and (downstream) ONE read path. `kaNumber` is the per-author KA
  * number (the identifying half of the UAL `did:dkg:{chain}/{addr}/{number}`),
  * minted at create. A KA moves between layers by swapping only the `{_layer}`
- * segment; the `{addr}/{number}` suffix is stable for its whole lifecycle.
+ * segment; the canonical `{addr}/{number}` suffix is stable for its whole
+ * lifecycle.
  */
 export declare function contextGraphLayerUri(contextGraphId: string, layer: MemoryLayer, agentAddress: string, kaNumber: string | number | bigint, subGraphName?: string): string;
+/**
+ * Canonical per-KA graph first, followed by the caller-known historical casing
+ * when it differs. Store-backed readers can discover additional aliases and
+ * compare them with `knowledgeAssetAgentAddressesEqual`.
+ */
+export declare function contextGraphLayerUriCandidates(contextGraphId: string, layer: MemoryLayer, agentAddress: string, kaNumber: string | number | bigint, subGraphName?: string): string[];
+/** Canonical and caller-known legacy prefixes for an unscoped layer read. */
+export declare function contextGraphLayerPrefixCandidates(contextGraphId: string, layer: MemoryLayer, agentAddress: string, subGraphName?: string): string[];
 export interface ContextGraphLayerIdentity {
     contextGraphId: string;
     subGraphName?: string;
@@ -158,6 +183,19 @@ export declare function validateContextGraphId(id: string): {
     valid: boolean;
     reason?: string;
 };
+/**
+ * Validate a newly-created context graph ID against the storage namespace.
+ *
+ * Existing stores may contain IDs that predate the reserved-partition rule,
+ * so read/sync paths intentionally keep using {@link validateContextGraphId}.
+ * New roots must not claim a path segment used by a structural graph such as
+ * `_meta`, otherwise their payload graph can alias another root's control
+ * plane.
+ */
+export declare function validateNewContextGraphId(id: string): {
+    valid: boolean;
+    reason?: string;
+};
 /**
  * V10 wallet-scoped context-graph IDs follow the convention
  * `<curatorAddress>/<name>` — e.g. `0xabc.../my-project`. For these

package/dist/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAmB,MAAM,mBAAmB,CAAC;AAKjE,eAAO,MAAM,gBAAgB,wBAAwB,CAAC;AACtD,eAAO,MAAM,cAAc,sBAAsB,CAAC;AAClD,eAAO,MAAM,iBAAiB,yBAAyB,CAAC;AAiBxD,eAAO,MAAM,aAAa,qBAAqB,CAAC;AAChD,eAAO,MAAM,+BAA+B,uCAAuC,CAAC;AAUpF,eAAO,MAAM,gBAAgB,wBAAwB,CAAC;AAStD,eAAO,MAAM,eAAe,+BAA+B,CAAC;AAS5D,eAAO,MAAM,qBAAqB,6BAA6B,CAAC;AAKhE,eAAO,MAAM,uBAAuB,+BAA+B,CAAC;AAapE,eAAO,MAAM,mBAAmB,2BAA2B,CAAC;AAc5D,eAAO,MAAM,sBAAsB,8BAA8B,CAAC;AAkBlE,eAAO,MAAM,yBAAyB,iCAAiC,CAAC;AAMxE,eAAO,MAAM,qBAAqB,6BAA6B,CAAC;AAUhE,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AACtE,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AACtE,eAAO,MAAM,oBAAoB,4BAA4B,CAAC;AAC9D;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,4BAA4B,CAAC;AAEjE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,2BAA2B,mCAAmC,CAAC;AAE5E;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B,qCAAqC,CAAC;AAChF,eAAO,MAAM,yBAAyB,iCAAiC,CAAC;AAExE,eAAO,MAAM,YAAY,mBAAmB,CAAC;AAK7C,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAUnF;AAED,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAGlF;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAOjH;AAED,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS3H;AAED,sFAAsF;AACtF,eAAO,MAAM,4BAA4B,QAAmB,CAAC;AAE7D,6EAA6E;AAC7E,eAAO,MAAM,wBAAwB,QAA4C,CAAC;AAIlF,wBAAgB,6BAA6B,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED,oDAAoD;AACpD,eAAO,MAAM,0BAA0B,sCAAgC,CAAC;AAExE,wBAAgB,6BAA6B,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAgB,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAExE;AAED,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1F;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAID,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAKvF;AAED,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAKvF;AAED,wBAAgB,sBAAsB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,wBAAgB,2BAA2B,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAGjG;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAa,GAAG,MAAM,CAM5F;AAED,wBAAgB,+BAA+B,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAGrG;AAED,wBAAgB,+BAA+B,CAAC,cAAc,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAE1G;AAED,wBAAgB,mCAAmC,CAAC,cAAc,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAE9G;AAED,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAGlI;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,WAAW,EAClB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAClC,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,CAKR;AAED,MAAM,WAAW,yBAAyB;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,WAAW,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAQD,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,yBAAyB,GAAG,SAAS,CAyBjG;AAED,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAG/H;AAED,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAE5F;AAED,wBAAgB,2BAA2B,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAEhG;AAED,wBAAgB,8BAA8B,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAEnG;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAKtF;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI9E;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAOtF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAMvF;AAED,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,wBAAgB,2BAA2B,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,wBAAgB,6BAA6B,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED,wBAAgB,iCAAiC,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEhF"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAmB,MAAM,mBAAmB,CAAC;AAKjE,eAAO,MAAM,gBAAgB,wBAAwB,CAAC;AACtD,eAAO,MAAM,cAAc,sBAAsB,CAAC;AAClD,eAAO,MAAM,iBAAiB,yBAAyB,CAAC;AAiBxD,eAAO,MAAM,aAAa,qBAAqB,CAAC;AAIhD,eAAO,MAAM,oBAAoB,qBAAqB,CAAC;AASvD,eAAO,MAAM,uBAAuB,+BAA+B,CAAC;AACpE,eAAO,MAAM,+BAA+B,uCAAuC,CAAC;AAUpF,eAAO,MAAM,gBAAgB,wBAAwB,CAAC;AAStD,eAAO,MAAM,eAAe,+BAA+B,CAAC;AAS5D,eAAO,MAAM,qBAAqB,6BAA6B,CAAC;AAKhE,eAAO,MAAM,uBAAuB,+BAA+B,CAAC;AAapE,eAAO,MAAM,mBAAmB,2BAA2B,CAAC;AAc5D,eAAO,MAAM,sBAAsB,8BAA8B,CAAC;AAkBlE,eAAO,MAAM,yBAAyB,iCAAiC,CAAC;AASxE,eAAO,MAAM,qBAAqB,6BAA6B,CAAC;AAUhE,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AACtE,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AACtE,eAAO,MAAM,oBAAoB,4BAA4B,CAAC;AAC9D;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,4BAA4B,CAAC;AAEjE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,2BAA2B,mCAAmC,CAAC;AAE5E;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,mCAAmC,CAAC;AAE/E;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B,qCAAqC,CAAC;AAChF,eAAO,MAAM,yBAAyB,iCAAiC,CAAC;AAExE,eAAO,MAAM,YAAY,mBAAmB,CAAC;AAK7C,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAUnF;AAED,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAGlF;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAOjH;AAED,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS3H;AAED,sFAAsF;AACtF,eAAO,MAAM,4BAA4B,QAAmB,CAAC;AAE7D,6EAA6E;AAC7E,eAAO,MAAM,wBAAwB,QAA4C,CAAC;AAIlF,wBAAgB,6BAA6B,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED,oDAAoD;AACpD,eAAO,MAAM,0BAA0B,sCAAgC,CAAC;AAExE,wBAAgB,6BAA6B,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAgB,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAExE;AAED,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1F;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAID,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAKvF;AAED,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAKvF;AAED,wBAAgB,sBAAsB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,wBAAgB,2BAA2B,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAGjG;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAa,GAAG,MAAM,CAM5F;AAED,wBAAgB,+BAA+B,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAGrG;AAED,wBAAgB,+BAA+B,CAAC,cAAc,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAE1G;AAED,wBAAgB,mCAAmC,CAAC,cAAc,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAE9G;AAED,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAGlI;AAED,6EAA6E;AAC7E,wBAAgB,mCAAmC,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAKhF;AAED,oFAAoF;AACpF,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEtF;AAED,yEAAyE;AACzE,wBAAgB,0CAA0C,CACxD,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GACjC,MAAM,CAGR;AAaD;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,WAAW,EAClB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAClC,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,CAGR;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,WAAW,EAClB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAClC,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,EAAE,CAKV;AAED,6EAA6E;AAC7E,wBAAgB,iCAAiC,CAC/C,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,WAAW,EAClB,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,EAAE,CAKV;AAED,MAAM,WAAW,yBAAyB;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,WAAW,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAQD,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,yBAAyB,GAAG,SAAS,CAyBjG;AAED,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAG/H;AAED,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAE5F;AAED,wBAAgB,2BAA2B,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAEhG;AAED,wBAAgB,8BAA8B,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAEnG;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAKtF;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAWzF;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI9E;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAOtF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAMvF;AAED,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,wBAAgB,2BAA2B,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,wBAAgB,6BAA6B,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED,wBAAgB,iCAAiC,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEhF"}

package/dist/constants.js

@@ -21,6 +21,19 @@ export const PROTOCOL_DISCOVER = '/dkg/10.0.0/discover';
 // (sync is a self-healing catch-up net, so the brief mixed-version
 // window during auto-update is no-data-loss).
 export const PROTOCOL_SYNC = '/dkg/10.0.2/sync';
+// Framed, long-lived transport overlay for PROTOCOL_SYNC. The logical request
+// and response bytes are unchanged; the distinct wire id lets upgraded peers
+// negotiate stream reuse while older peers cleanly fall back to one-shot sync.
+export const PROTOCOL_SYNC_POOLED = '/dkg/10.0.3/sync';
+// OT-RFC-59 changelog read-lane — a SEPARATE protocol id, not a field on
+// PROTOCOL_SYNC: the legacy sync response is bare N-Quads with no envelope, so a
+// structured (era, headSeq, nextSeq, records) head cannot ride the existing
+// wire. Same 10.0.2 family; the distinct suffix means legacy peers never dial it
+// and identify simply omits it. Advertised ONLY when config.changelog is on
+// (the responder registers it iff asChangelogReader(store) is non-null), so it
+// is default-off and mixed-version-safe: a changelog-capable requester falls
+// back to PROTOCOL_SYNC when a peer does not advertise this id.
+export const PROTOCOL_SYNC_CHANGELOG = '/dkg/10.0.2/sync-changelog';
 export const PROTOCOL_GET_ASSERTION_ARTIFACT = '/dkg/10.0.2/get-assertion-artifact';
 // Universal Messenger pilot protocol (rc.9 PR-3). Bumped from
 // /dkg/10.0.0/message to /dkg/10.0.1/message to opt into the
@@ -103,7 +116,10 @@ export const PROTOCOL_SWM_HOST_CATCHUP = '/dkg/10.0.1/swm-host-catchup';
 // Universal Messenger substrate. The in-memory JoinApprovalRetryQueue
 // (rc.9 PR #510) is replaced by the substrate's durable SQLite outbox
 // — same backoff ladder semantics, persists across daemon restart.
-export const PROTOCOL_JOIN_REQUEST = '/dkg/10.0.1/join-request';
+// 10.0.2 binds decisions to the signed request generation. Keep this distinct
+// from 10.0.1 so mixed-version peers fail negotiation instead of ACK-dropping
+// generation-less approval/rejection messages and stranding the requester.
+export const PROTOCOL_JOIN_REQUEST = '/dkg/10.0.2/join-request';
 // rc.9 PR-11: bumped from /dkg/10.0.0/* to opt into the Universal
 // Messenger substrate. ACKCollector + VerifyCollector keep their
 // existing app-level fan-out + quorum semantics; substrate gives
@@ -139,6 +155,14 @@ export const PROTOCOL_STORAGE_ACK_V2 = '/dkg/10.0.2/storage-ack';
  * V2-vs-V1 graceful-fallback pattern.
  */
 export const PROTOCOL_STORAGE_UPDATE_ACK = '/dkg/10.0.1/storage-update-ack';
+/**
+ * Graph-scoped UPDATE StorageACK protocol. V1 update responders interpret
+ * `subGraphName` using the legacy entity-root layout and do not validate the
+ * graph-scoped content envelope. Keep V2 on a distinct capability so a
+ * rootless update can never be acknowledged by a peer that silently ignores
+ * its scope/version fields.
+ */
+export const PROTOCOL_STORAGE_UPDATE_ACK_V2 = '/dkg/10.0.2/storage-update-ack';
 /**
  * OT-RFC-38 LU-11 / OT-RFC-39 — point-to-point sync verb for one
  * curated-CG ciphertext chunk identified by (cgId, batchId,
@@ -278,6 +302,28 @@ export function contextGraphAssertionUri(contextGraphId, agentAddress, name, sub
         return `did:dkg:context-graph:${contextGraphId}/${subGraphName}/assertion/${agentAddress}/${name}`;
     return `did:dkg:context-graph:${contextGraphId}/assertion/${agentAddress}/${name}`;
 }
+/** Canonical identity segment used by all new per-KA memory-layer writes. */
+export function canonicalKnowledgeAssetAgentAddress(agentAddress) {
+    // Non-EVM legacy identities (notably peer IDs) remain byte-for-byte stable.
+    return /^0x[0-9a-fA-F]{40}$/.test(agentAddress)
+        ? agentAddress.toLowerCase()
+        : agentAddress;
+}
+/** Compare graph identity addresses using EVM case-folding and legacy exactness. */
+export function knowledgeAssetAgentAddressesEqual(left, right) {
+    return canonicalKnowledgeAssetAgentAddress(left) === canonicalKnowledgeAssetAgentAddress(right);
+}
+/** Build the layer-independent canonical `{address}/{number}` suffix. */
+export function canonicalKnowledgeAssetGraphIdentitySuffix(agentAddress, kaNumber) {
+    const canonicalAgentAddress = canonicalKnowledgeAssetAgentAddress(agentAddress);
+    return `${canonicalAgentAddress}/${kaNumber}`;
+}
+function contextGraphLayerBaseUri(contextGraphId, layer, subGraphName) {
+    const base = subGraphName
+        ? `did:dkg:context-graph:${contextGraphId}/${subGraphName}`
+        : `did:dkg:context-graph:${contextGraphId}`;
+    return `${base}/${memoryLayerSlug(layer)}`;
+}
 /**
  * Uniform per-KA graph URI for ANY memory layer (OT-RFC-46 Chorus).
  *
@@ -287,13 +333,30 @@ export function contextGraphAssertionUri(contextGraphId, agentAddress, name, sub
  * builder, and (downstream) ONE read path. `kaNumber` is the per-author KA
  * number (the identifying half of the UAL `did:dkg:{chain}/{addr}/{number}`),
  * minted at create. A KA moves between layers by swapping only the `{_layer}`
- * segment; the `{addr}/{number}` suffix is stable for its whole lifecycle.
+ * segment; the canonical `{addr}/{number}` suffix is stable for its whole
+ * lifecycle.
  */
 export function contextGraphLayerUri(contextGraphId, layer, agentAddress, kaNumber, subGraphName) {
-    const base = subGraphName
-        ? `did:dkg:context-graph:${contextGraphId}/${subGraphName}`
-        : `did:dkg:context-graph:${contextGraphId}`;
-    return `${base}/${memoryLayerSlug(layer)}/${agentAddress}/${kaNumber}`;
+    const layerBase = contextGraphLayerBaseUri(contextGraphId, layer, subGraphName);
+    return `${layerBase}/${canonicalKnowledgeAssetGraphIdentitySuffix(agentAddress, kaNumber)}`;
+}
+/**
+ * Canonical per-KA graph first, followed by the caller-known historical casing
+ * when it differs. Store-backed readers can discover additional aliases and
+ * compare them with `knowledgeAssetAgentAddressesEqual`.
+ */
+export function contextGraphLayerUriCandidates(contextGraphId, layer, agentAddress, kaNumber, subGraphName) {
+    const layerBase = contextGraphLayerBaseUri(contextGraphId, layer, subGraphName);
+    const canonical = `${layerBase}/${canonicalKnowledgeAssetGraphIdentitySuffix(agentAddress, kaNumber)}`;
+    const legacy = `${layerBase}/${agentAddress}/${kaNumber}`;
+    return canonical === legacy ? [canonical] : [canonical, legacy];
+}
+/** Canonical and caller-known legacy prefixes for an unscoped layer read. */
+export function contextGraphLayerPrefixCandidates(contextGraphId, layer, agentAddress, subGraphName) {
+    const layerBase = contextGraphLayerBaseUri(contextGraphId, layer, subGraphName);
+    const canonical = `${layerBase}/${canonicalKnowledgeAssetAgentAddress(agentAddress)}/`;
+    const legacy = `${layerBase}/${agentAddress}/`;
+    return canonical === legacy ? [canonical] : [canonical, legacy];
 }
 const MEMORY_LAYER_BY_SLUG = new Map([
     [memoryLayerSlug(MemoryLayer.WorkingMemory), MemoryLayer.WorkingMemory],
@@ -391,6 +454,28 @@ export function validateContextGraphId(id) {
         return { valid: false, reason: 'Context graph ID contains disallowed characters (allowed: alphanumeric, _, :, /, ., @, -)' };
     return { valid: true };
 }
+/**
+ * Validate a newly-created context graph ID against the storage namespace.
+ *
+ * Existing stores may contain IDs that predate the reserved-partition rule,
+ * so read/sync paths intentionally keep using {@link validateContextGraphId}.
+ * New roots must not claim a path segment used by a structural graph such as
+ * `_meta`, otherwise their payload graph can alias another root's control
+ * plane.
+ */
+export function validateNewContextGraphId(id) {
+    const validation = validateContextGraphId(id);
+    if (!validation.valid)
+        return validation;
+    const reservedSegment = id.split('/').find((segment) => segment.startsWith('_'));
+    if (reservedSegment) {
+        return {
+            valid: false,
+            reason: `Context graph ID contains reserved storage partition segment "${reservedSegment}"`,
+        };
+    }
+    return { valid: true };
+}
 /**
  * V10 wallet-scoped context-graph IDs follow the convention
  * `<curatorAddress>/<name>` — e.g. `0xabc.../my-project`. For these