@xyo-network/chain-sdk 5.0.3 → 5.1.0

package/dist/browser/index.d.ts

@@ -3,6 +3,7 @@ export * from './modules/ethereum/index.js';
 export * from './modules/modules/index.js';
 export * from './modules/protocol/index.js';
 export * from './modules/services/index.js';
+export * from './modules/slashing/index.js';
 export * from './modules/telemetry/index.js';
 export * from './modules/utils/index.js';
 export * from './modules/validation/index.js';

package/dist/browser/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAGA,cAAc,UAAU,CAAA;AACxB,cAAc,WAAW,CAAA;AACzB,cAAc,UAAU,CAAA;AACxB,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,YAAY,CAAA;AAC1B,cAAc,QAAQ,CAAA;AACtB,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAGA,cAAc,UAAU,CAAA;AACxB,cAAc,WAAW,CAAA;AACzB,cAAc,UAAU,CAAA;AACxB,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,YAAY,CAAA;AAC1B,cAAc,QAAQ,CAAA;AACtB,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA"}

package/dist/browser/index.mjs

@@ -4,6 +4,7 @@ export * from "#ethereum";
 export * from "#modules";
 export * from "#protocol";
 export * from "#services";
+export * from "#slashing";
 export * from "#telemetry";
 export * from "#utils";
 export * from "#validation";

package/dist/browser/index.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/index.ts"],
-  "sourcesContent": ["// Generated by xy monolith layout sync (package-sync-layout) \u2014 do not edit by hand.\n/* eslint-disable @typescript-eslint/ban-ts-comment -- conditional package imports */\n// @ts-nocheck\nexport * from '#analyze'\nexport * from '#ethereum'\nexport * from '#modules'\nexport * from '#protocol'\nexport * from '#services'\nexport * from '#telemetry'\nexport * from '#utils'\nexport * from '#validation'\nexport * from '#wrappers'\n"],
-  "mappings": ";AAGA,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;",
+  "sourcesContent": ["// Generated by xy monolith layout sync (package-sync-layout) \u2014 do not edit by hand.\n/* eslint-disable @typescript-eslint/ban-ts-comment -- conditional package imports */\n// @ts-nocheck\nexport * from '#analyze'\nexport * from '#ethereum'\nexport * from '#modules'\nexport * from '#protocol'\nexport * from '#services'\nexport * from '#slashing'\nexport * from '#telemetry'\nexport * from '#utils'\nexport * from '#validation'\nexport * from '#wrappers'\n"],
+  "mappings": ";AAGA,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;",
   "names": []
 }

package/dist/browser/modules/analyze/ChainHeadSelector.d.ts

@@ -1,8 +1,13 @@
 import type { Address } from '@ariestools/sdk';
 import type { BaseContext, MempoolViewer, SignedHydratedBlockWithHashMeta } from '@xyo-network/xl1-sdk';
+import type { AdmissionAssessment, AdmissionMode, AdmissionShadowReport, ProducerEligibilityEvaluator } from './admission.js';
 import type { ChainFinalizerParams } from './ChainFinalizer.js';
 import { ChainFinalizer } from './ChainFinalizer.js';
 export interface ChainHeadSelectorParams extends ChainFinalizerParams {
+    /**
+     * How candidates are admitted. Defaults to `allowlist`, which is how the chain runs today.
+     */
+    admission?: AdmissionMode;
     /**
      * List of allowed producer addresses, if undefined anyone can participate
      */
@@ -14,14 +19,22 @@ export interface ChainHeadSelectorParams extends ChainFinalizerParams {
      */
     backoffMs?: number;
     context: BaseContext;
+    /**
+     * Computes whether a candidate's producer had standing. Absent means the question is never
+     * asked, which is what keeps a node with no stake readers running exactly as it does today.
+     */
+    eligibility?: ProducerEligibilityEvaluator;
     mempoolViewer: MempoolViewer;
     /**
      * Minimum number of uncle candidates required before accepting one.
      * When undefined, findBestUncle applies DEFAULT_MIN_CANDIDATES from the protocol SDK.
      */
     minCandidates?: number;
+    /** Where to publish what the two gates concluded, in shadow posture. */
+    publishAdmissionShadow?: (report: AdmissionShadowReport) => Promise<void>;
 }
 export declare class ChainHeadSelector extends ChainFinalizer<ChainHeadSelectorParams> {
+    protected admission: AdmissionMode;
     protected allowedProducers?: Address[];
     protected backoffMs?: number;
     protected minCandidates?: number;
@@ -37,5 +50,32 @@ export declare class ChainHeadSelector extends ChainFinalizer<ChainHeadSelectorP
     };
     protected get mempoolViewer(): MempoolViewer;
     findBestHead(): Promise<SignedHydratedBlockWithHashMeta[]>;
+    /**
+     * Applies the configured admission posture.
+     *
+     * In `shadow` the allow-list still decides — participation is computed and published beside it,
+     * and changes nothing. That is the entire value of the posture: the network keeps behaving
+     * exactly as it did while everyone gets to see what the new rule would have done.
+     *
+     * In `enforce` participation gates, but only when it reached a conclusion. A candidate whose
+     * standing cannot be established is admitted, not rejected — otherwise a finalizer that lost
+     * its stake reader would quietly stop accepting anyone's blocks and stall the chain.
+     *
+     * Assessments publish in both postures. The audit trail must not disappear at the moment
+     * admission starts gating — enforce is when it matters most.
+     */
+    protected admit(all: SignedHydratedBlockWithHashMeta[], allowed: SignedHydratedBlockWithHashMeta[]): Promise<SignedHydratedBlockWithHashMeta[]>;
+    /**
+     * Runs both gates over every candidate.
+     *
+     * An evaluator that throws yields an unresolvable assessment rather than an exception: this
+     * sits on the head-selection path, and a flaky stake reader must never be able to stop the
+     * chain from finalizing.
+     */
+    protected assess(all: SignedHydratedBlockWithHashMeta[]): Promise<AdmissionAssessment[]>;
+    /** Whether the configured allow-list admits a candidate. An empty list admits everyone. */
+    protected isAllowed(candidate: SignedHydratedBlockWithHashMeta): boolean;
+    /** Publishes what the two gates concluded, swallowing failures. */
+    protected publishShadow(assessments: AdmissionAssessment[]): Promise<void>;
 }
 //# sourceMappingURL=ChainHeadSelector.d.ts.map

package/dist/browser/modules/analyze/ChainHeadSelector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ChainHeadSelector.d.ts","sourceRoot":"","sources":["../../../../src/modules/analyze/ChainHeadSelector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAI9C,OAAO,KAAK,EACV,WAAW,EAAE,aAAa,EAAE,+BAA+B,EAC5D,MAAM,sBAAsB,CAAA;AAK7B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpD,MAAM,WAAW,uBAAwB,SAAQ,oBAAoB;IACnE;;OAEG;IACH,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAA;IAC5B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,WAAW,CAAA;IACpB,aAAa,EAAE,aAAa,CAAA;IAC5B;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,qBAAa,iBAAkB,SAAQ,cAAc,CAAC,uBAAuB,CAAC;IAC5E,SAAS,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAA;IACtC,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC5B,SAAS,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAChC,OAAO,CAAC,mBAAmB,CAAa;gBAE5B,MAAM,EAAE,uBAAuB;IAO3C,SAAS,KAAK,OAAO;;;;;;;MAEpB;IAED,SAAS,KAAK,aAAa,kBAE1B;IAEK,YAAY,IAAI,OAAO,CAAC,+BAA+B,EAAE,CAAC;CAgBjE"}
+{"version":3,"file":"ChainHeadSelector.d.ts","sourceRoot":"","sources":["../../../../src/modules/analyze/ChainHeadSelector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAI9C,OAAO,KAAK,EACV,WAAW,EAAE,aAAa,EAAE,+BAA+B,EAC5D,MAAM,sBAAsB,CAAA;AAK7B,OAAO,KAAK,EACV,mBAAmB,EAAE,aAAa,EAAE,qBAAqB,EAAE,4BAA4B,EACxF,MAAM,gBAAgB,CAAA;AAEvB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpD,MAAM,WAAW,uBAAwB,SAAQ,oBAAoB;IACnE;;OAEG;IACH,SAAS,CAAC,EAAE,aAAa,CAAA;IACzB;;OAEG;IACH,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAA;IAC5B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,WAAW,CAAA;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,4BAA4B,CAAA;IAC1C,aAAa,EAAE,aAAa,CAAA;IAC5B;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,wEAAwE;IACxE,sBAAsB,CAAC,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAC1E;AAED,qBAAa,iBAAkB,SAAQ,cAAc,CAAC,uBAAuB,CAAC;IAC5E,SAAS,CAAC,SAAS,EAAE,aAAa,CAAA;IAClC,SAAS,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAA;IACtC,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC5B,SAAS,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAChC,OAAO,CAAC,mBAAmB,CAAa;gBAE5B,MAAM,EAAE,uBAAuB;IAQ3C,SAAS,KAAK,OAAO;;;;;;;MAEpB;IAED,SAAS,KAAK,aAAa,kBAE1B;IAEK,YAAY,IAAI,OAAO,CAAC,+BAA+B,EAAE,CAAC;IAahE;;;;;;;;;;;;;OAaG;cACa,KAAK,CACnB,GAAG,EAAE,+BAA+B,EAAE,EACtC,OAAO,EAAE,+BAA+B,EAAE,GACzC,OAAO,CAAC,+BAA+B,EAAE,CAAC;IAW7C;;;;;;OAMG;cACa,MAAM,CAAC,GAAG,EAAE,+BAA+B,EAAE,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAmB9F,2FAA2F;IAC3F,SAAS,CAAC,SAAS,CAAC,SAAS,EAAE,+BAA+B,GAAG,OAAO;IAOxE,mEAAmE;cACnD,aAAa,CAAC,WAAW,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAcjF"}

package/dist/browser/modules/analyze/admission.d.ts

@@ -0,0 +1,65 @@
+import type { Promisable } from '@ariestools/sdk';
+import type { XyoAddress } from '@xyo-network/sdk';
+import type { SignedHydratedBlockWithHashMeta } from '@xyo-network/xl1-sdk';
+import type { EligibilityEvaluation } from '../slashing/index.js';
+/**
+ * How a finalizer decides which candidates it will consider.
+ *
+ * Three postures, and moving between them is a configuration change rather than a different
+ * build. That constraint is deliberate: a network that had to be redeployed to step back from
+ * enforcement would, in the moment it most needed to step back, be unable to.
+ *
+ * - `allowlist` — only the named producers, which is how the chain runs today
+ * - `shadow` — the same gate, plus participation computed and published for every candidate
+ * - `enforce` — participation itself gates
+ */
+export declare const AdmissionModes: readonly ["allowlist", "shadow", "enforce"];
+/** How a finalizer decides which candidates it will consider. */
+export type AdmissionMode = typeof AdmissionModes[number];
+/** Evaluates whether a candidate's producer had standing to produce it. */
+export type ProducerEligibilityEvaluator = (candidate: SignedHydratedBlockWithHashMeta) => Promisable<EligibilityEvaluation>;
+/** What both gates concluded about one candidate. */
+export interface AdmissionAssessment {
+    /** Whether the allow-list admits it. */
+    admittedByAllowList: boolean;
+    /** The candidate's height. */
+    block: number;
+    /** The candidate's signed identity. */
+    dataHash: string;
+    /** What the participation predicate concluded. */
+    eligibility: EligibilityEvaluation;
+    /** The producer. */
+    producer: XyoAddress;
+}
+/**
+ * What the two gates said about a round of candidates, and where they disagreed.
+ *
+ * Published rather than logged, because the whole purpose of the shadow posture is that anyone —
+ * not just the operator holding the terminal — can see what enforcement would have done before it
+ * does it. An operator convinced by their own logs has convinced nobody.
+ */
+export interface AdmissionShadowReport {
+    /** Every candidate considered this round. */
+    assessments: AdmissionAssessment[];
+    /** Only those where the two gates disagreed. */
+    divergent: AdmissionAssessment[];
+    /** The finalized height this round was selected against. */
+    head: number;
+}
+/** Moniker the admission shadow publisher resolves under. */
+export declare const AdmissionShadowPublishRunnerMoniker = "AdmissionShadowPublishRunner";
+/**
+ * Publishes what both admission gates concluded.
+ *
+ * An interface rather than a class here because the finalizer must not depend on the launcher
+ * that supplies the implementation — the actor states what it needs, and orchestration decides
+ * what satisfies it.
+ */
+export interface AdmissionShadowPublishRunner {
+    publish(report: AdmissionShadowReport): Promisable<void>;
+}
+/** Whether a resolved provider can actually publish shadow reports. */
+export declare function isAdmissionShadowPublishRunner(value: unknown): value is AdmissionShadowPublishRunner;
+/** Whether the two gates reached different conclusions about a candidate. */
+export declare function isDivergent(assessment: AdmissionAssessment): boolean;
+//# sourceMappingURL=admission.d.ts.map

package/dist/browser/modules/analyze/admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission.d.ts","sourceRoot":"","sources":["../../../../src/modules/analyze/admission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAA;AAE3E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAA;AAEtD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,cAAc,6CAA8C,CAAA;AAEzE,iEAAiE;AACjE,MAAM,MAAM,aAAa,GAAG,OAAO,cAAc,CAAC,MAAM,CAAC,CAAA;AAEzD,2EAA2E;AAC3E,MAAM,MAAM,4BAA4B,GACpC,CAAC,SAAS,EAAE,+BAA+B,KAAK,UAAU,CAAC,qBAAqB,CAAC,CAAA;AAErF,qDAAqD;AACrD,MAAM,WAAW,mBAAmB;IAClC,wCAAwC;IACxC,mBAAmB,EAAE,OAAO,CAAA;IAC5B,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAA;IAChB,kDAAkD;IAClD,WAAW,EAAE,qBAAqB,CAAA;IAClC,oBAAoB;IACpB,QAAQ,EAAE,UAAU,CAAA;CACrB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,6CAA6C;IAC7C,WAAW,EAAE,mBAAmB,EAAE,CAAA;IAClC,gDAAgD;IAChD,SAAS,EAAE,mBAAmB,EAAE,CAAA;IAChC,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAA;CACb;AAED,6DAA6D;AAC7D,eAAO,MAAM,mCAAmC,iCAAiC,CAAA;AAEjF;;;;;;GAMG;AACH,MAAM,WAAW,4BAA4B;IAC3C,OAAO,CAAC,MAAM,EAAE,qBAAqB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;CACzD;AAED,uEAAuE;AACvE,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,4BAA4B,CAEpG;AAED,6EAA6E;AAC7E,wBAAgB,WAAW,CAAC,UAAU,EAAE,mBAAmB,GAAG,OAAO,CAIpE"}

package/dist/browser/modules/analyze/index.d.ts

@@ -1,3 +1,4 @@
+export * from './admission.js';
 export * from './analyzeChain.js';
 export * from './BalanceAnalyzer/index.js';
 export * from './ChainFinalizer.js';

package/dist/browser/modules/analyze/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/modules/analyze/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAA;AACjC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,qBAAqB,CAAA;AACnC,cAAc,wBAAwB,CAAA;AACtC,cAAc,qBAAqB,CAAA;AACnC,cAAc,6BAA6B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/modules/analyze/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,mBAAmB,CAAA;AACjC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,qBAAqB,CAAA;AACnC,cAAc,wBAAwB,CAAA;AACtC,cAAc,qBAAqB,CAAA;AACnC,cAAc,6BAA6B,CAAA"}

package/dist/browser/modules/protocol/block/BuildBlockOptions.d.ts

@@ -20,6 +20,14 @@ export interface BuildNextBlockOptions extends BaseBuildBlockOptions {
     previousBlockNumber: XL1BlockNumber;
     previousStepHashes: Hash[];
     stepRewardPoolBalance: AttoXL1;
+    /**
+     * Hash of this producer's own earlier candidate at the same height and parent, when re-proposing.
+     *
+     * Signed, so it cannot be added or dropped after the fact. Its whole job is to make honest
+     * re-proposal distinguishable from equivocation: two differing candidates at one height are
+     * indistinguishable from outside unless the later one says which one it replaces.
+     */
+    supersedes?: Hash;
 }
 export declare const isBuildNextBlockOptions: (value: unknown) => value is BuildNextBlockOptions;
 export type BuildBlockOptions = BuildGenesisBlockOptions | BuildNextBlockOptions;

package/dist/browser/modules/protocol/block/BuildBlockOptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BuildBlockOptions.d.ts","sourceRoot":"","sources":["../../../../../src/modules/protocol/block/BuildBlockOptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAKpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,KAAK,EACV,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,yBAAyB,EAChE,cAAc,EACf,MAAM,sBAAsB,CAAA;AAE7B,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,mBAAmB,EAAE,CAAA;IACpC,OAAO,EAAE,OAAO,CAAA;IAChB,sBAAsB,CAAC,EAAE,OAAO,CAAA;IAChC,mBAAmB,CAAC,EAAE,cAAc,CAAA;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,eAAe,EAAE,CAAA;IAC1B,GAAG,EAAE,yBAAyB,EAAE,CAAA;CACjC;AAED,eAAO,MAAM,uBAAuB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,qBASjE,CAAA;AAED,MAAM,WAAW,wBAAyB,SAAQ,qBAAqB;IACrE,iBAAiB,EAAE,IAAI,CAAA;CACxB;AAED,eAAO,MAAM,0BAA0B,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,wBAYpE,CAAA;AAED,MAAM,WAAW,qBAAsB,SAAQ,qBAAqB;IAClE,iBAAiB,EAAE,IAAI,CAAA;IACvB,mBAAmB,EAAE,cAAc,CAAA;IACnC,kBAAkB,EAAE,IAAI,EAAE,CAAA;IAC1B,qBAAqB,EAAE,OAAO,CAAA;CAC/B;AAED,eAAO,MAAM,uBAAuB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,qBAejE,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG,wBAAwB,GAAG,qBAAqB,CAAA"}
+{"version":3,"file":"BuildBlockOptions.d.ts","sourceRoot":"","sources":["../../../../../src/modules/protocol/block/BuildBlockOptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAKpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,KAAK,EACV,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,yBAAyB,EAChE,cAAc,EACf,MAAM,sBAAsB,CAAA;AAE7B,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,mBAAmB,EAAE,CAAA;IACpC,OAAO,EAAE,OAAO,CAAA;IAChB,sBAAsB,CAAC,EAAE,OAAO,CAAA;IAChC,mBAAmB,CAAC,EAAE,cAAc,CAAA;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,eAAe,EAAE,CAAA;IAC1B,GAAG,EAAE,yBAAyB,EAAE,CAAA;CACjC;AAED,eAAO,MAAM,uBAAuB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,qBASjE,CAAA;AAED,MAAM,WAAW,wBAAyB,SAAQ,qBAAqB;IACrE,iBAAiB,EAAE,IAAI,CAAA;CACxB;AAED,eAAO,MAAM,0BAA0B,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,wBAYpE,CAAA;AAED,MAAM,WAAW,qBAAsB,SAAQ,qBAAqB;IAClE,iBAAiB,EAAE,IAAI,CAAA;IACvB,mBAAmB,EAAE,cAAc,CAAA;IACnC,kBAAkB,EAAE,IAAI,EAAE,CAAA;IAC1B,qBAAqB,EAAE,OAAO,CAAA;IAC9B;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,IAAI,CAAA;CAClB;AAED,eAAO,MAAM,uBAAuB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,qBAejE,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG,wBAAwB,GAAG,qBAAqB,CAAA"}

package/dist/browser/modules/protocol/block/buildBlock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"buildBlock.d.ts","sourceRoot":"","sources":["../../../../../src/modules/protocol/block/buildBlock.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACS,+BAA+B,EACnD,MAAM,sBAAsB,CAAA;AAY7B,OAAO,EACL,KAAK,iBAAiB,EACvB,MAAM,wBAAwB,CAAA;AAiB/B,wBAAsB,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAiErG"}
+{"version":3,"file":"buildBlock.d.ts","sourceRoot":"","sources":["../../../../../src/modules/protocol/block/buildBlock.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACS,+BAA+B,EACnD,MAAM,sBAAsB,CAAA;AAY7B,OAAO,EACL,KAAK,iBAAiB,EACvB,MAAM,wBAAwB,CAAA;AA6B/B,wBAAsB,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAsErG"}

package/dist/browser/modules/protocol/block/buildNextBlock.d.ts

@@ -1,3 +1,4 @@
+import type { Hash } from '@ariestools/sdk';
 import type { AccountInstance, WithHashMeta } from '@xyo-network/sdk';
 import type { AllowedBlockPayload, BlockBoundWitness, ChainId, SignedHydratedBlockWithHashMeta, SignedHydratedTransaction } from '@xyo-network/xl1-sdk';
 import { AttoXL1 } from '@xyo-network/xl1-sdk';
@@ -5,5 +6,5 @@ export declare function buildNextBlock(previousBlock: WithHashMeta<BlockBoundWit
     readonly __hex: true;
 } & {
     readonly __address: true;
-}, stepRewardPoolBalance?: AttoXL1, protocol?: number, chainId?: ChainId): Promise<SignedHydratedBlockWithHashMeta>;
+}, stepRewardPoolBalance?: AttoXL1, protocol?: number, chainId?: ChainId, supersedes?: Hash): Promise<SignedHydratedBlockWithHashMeta>;
 //# sourceMappingURL=buildNextBlock.d.ts.map

package/dist/browser/modules/protocol/block/buildNextBlock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"buildNextBlock.d.ts","sourceRoot":"","sources":["../../../../../src/modules/protocol/block/buildNextBlock.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AACrE,OAAO,KAAK,EACV,mBAAmB,EAAE,iBAAiB,EACtC,OAAO,EACP,+BAA+B,EAC/B,yBAAyB,EAC1B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,OAAO,EAER,MAAM,sBAAsB,CAAA;AAI7B,wBAAsB,cAAc,CAClC,aAAa,EAAE,YAAY,CAAC,iBAAiB,CAAC,EAC9C,GAAG,EAAE,yBAAyB,EAAE,EAChC,aAAa,EAAE,mBAAmB,EAAE,EACpC,OAAO,EAAE,eAAe,EAAE,EAC1B,sBAAsB;;;;CAA0B,EAChD,qBAAqB,GAAE,OAAqB,EAC5C,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,+BAA+B,CAAC,CAa1C"}
+{"version":3,"file":"buildNextBlock.d.ts","sourceRoot":"","sources":["../../../../../src/modules/protocol/block/buildNextBlock.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AACrE,OAAO,KAAK,EACV,mBAAmB,EAAE,iBAAiB,EACtC,OAAO,EACP,+BAA+B,EAC/B,yBAAyB,EAC1B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,OAAO,EAER,MAAM,sBAAsB,CAAA;AAI7B,wBAAsB,cAAc,CAClC,aAAa,EAAE,YAAY,CAAC,iBAAiB,CAAC,EAC9C,GAAG,EAAE,yBAAyB,EAAE,EAChC,aAAa,EAAE,mBAAmB,EAAE,EACpC,OAAO,EAAE,eAAe,EAAE,EAC1B,sBAAsB;;;;CAA0B,EAChD,qBAAqB,GAAE,OAAqB,EAC5C,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,OAAO,EACjB,UAAU,CAAC,EAAE,IAAI,GAChB,OAAO,CAAC,+BAA+B,CAAC,CAc1C"}

package/dist/browser/modules/services/implementation/processPendingBlocks.d.ts

@@ -1,13 +1,18 @@
 import type { Address, Logger } from '@ariestools/sdk';
 import type { AccountInstance } from '@xyo-network/sdk';
 import type { BaseContext, BlockValidationViewer, BlockViewer, DeadLetterQueueRunner, FinalizationRunner, MempoolViewer } from '@xyo-network/xl1-sdk';
+import type { AdmissionMode, AdmissionShadowReport, ProducerEligibilityEvaluator } from '../../analyze/index.js';
 interface ProcessPendingBlocksParams {
+    /** How candidates are admitted; defaults to the allow-list the chain runs on today. */
+    admission?: AdmissionMode;
     allowedProducers?: Address[];
     backoffMs?: number;
     blockValidationViewer: BlockValidationViewer;
     blockViewer: BlockViewer;
     context: BaseContext;
     deadLetterQueueRunner?: DeadLetterQueueRunner;
+    /** Computes producer standing, for the shadow and enforce postures. */
+    eligibility?: ProducerEligibilityEvaluator;
     finalizationRunner: FinalizationRunner;
     logger?: Logger;
     mempoolViewer: MempoolViewer;
@@ -17,8 +22,10 @@ interface ProcessPendingBlocksParams {
      * carry its signature, which is what makes them attributable evidence rather than a local note.
      */
     observer?: AccountInstance;
+    /** Where to publish what both admission gates concluded, in shadow posture. */
+    publishAdmissionShadow?: (report: AdmissionShadowReport) => Promise<void>;
 }
-export declare function processPendingBlocks({ blockValidationViewer, blockViewer, context, logger, mempoolViewer, finalizationRunner, allowedProducers, backoffMs, minCandidates, deadLetterQueueRunner, observer, }: ProcessPendingBlocksParams): Promise<[{
+export declare function processPendingBlocks({ blockValidationViewer, blockViewer, context, logger, mempoolViewer, finalizationRunner, allowedProducers, backoffMs, minCandidates, deadLetterQueueRunner, observer, admission, eligibility, publishAdmissionShadow, }: ProcessPendingBlocksParams): Promise<[{
     schema: "network.xyo.boundwitness" & {
         readonly __schema: true;
     };
@@ -45,6 +52,7 @@ export declare function processPendingBlocks({ blockValidationViewer, blockViewe
     $sourceQuery?: import("@ariestools/sdk").BrandedHash | undefined;
     protocol?: number | undefined;
     step_hashes?: import("@ariestools/sdk").BrandedHash[] | undefined;
+    supersedes?: import("@ariestools/sdk").BrandedHash | undefined;
 }, {
     [x: string]: unknown;
     schema: import("@xyo-network/sdk").BrandedSchema<string>;

package/dist/browser/modules/services/implementation/processPendingBlocks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"processPendingBlocks.d.ts","sourceRoot":"","sources":["../../../../../src/modules/services/implementation/processPendingBlocks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAEtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,KAAK,EACV,WAAW,EAAE,qBAAqB,EAAE,WAAW,EAAE,qBAAqB,EAAE,kBAAkB,EAA6B,aAAa,EACrI,MAAM,sBAAsB,CAAA;AAS7B,UAAU,0BAA0B;IAClC,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAA;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,qBAAqB,EAAE,qBAAqB,CAAA;IAC5C,WAAW,EAAE,WAAW,CAAA;IACxB,OAAO,EAAE,WAAW,CAAA;IACpB,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAC7C,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,aAAa,CAAA;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;OAGG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAA;CAC3B;AAgCD,wBAAsB,oBAAoB,CAAC,EACzC,qBAAqB,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,qBAAqB,EAAE,QAAQ,GACpK,EAAE,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAiE5B"}
+{"version":3,"file":"processPendingBlocks.d.ts","sourceRoot":"","sources":["../../../../../src/modules/services/implementation/processPendingBlocks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAEtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,KAAK,EACV,WAAW,EAAE,qBAAqB,EAAE,WAAW,EAAE,qBAAqB,EAAE,kBAAkB,EAA6B,aAAa,EACrI,MAAM,sBAAsB,CAAA;AAK7B,OAAO,KAAK,EACV,aAAa,EAAE,qBAAqB,EAAE,4BAA4B,EACnE,MAAM,UAAU,CAAA;AAKjB,UAAU,0BAA0B;IAClC,uFAAuF;IACvF,SAAS,CAAC,EAAE,aAAa,CAAA;IACzB,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAA;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,qBAAqB,EAAE,qBAAqB,CAAA;IAC5C,WAAW,EAAE,WAAW,CAAA;IACxB,OAAO,EAAE,WAAW,CAAA;IACpB,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAC7C,uEAAuE;IACvE,WAAW,CAAC,EAAE,4BAA4B,CAAA;IAC1C,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,aAAa,CAAA;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;OAGG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAA;IAC1B,+EAA+E;IAC/E,sBAAsB,CAAC,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAC1E;AAgCD,wBAAsB,oBAAoB,CAAC,EACzC,qBAAqB,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,qBAAqB,EAAE,QAAQ,EACnK,SAAS,EAAE,WAAW,EAAE,sBAAsB,GAC/C,EAAE,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBA2E5B"}

package/dist/browser/modules/services/simple/block/runner/SimpleBlockRunner.d.ts

@@ -37,7 +37,7 @@ export interface SimpleBlockRunnerParams extends CreatableProviderParams {
 export declare class SimpleBlockRunner extends AbstractCreatableProvider<SimpleBlockRunnerParams> implements BlockRunner {
     static readonly connectionTypes: readonly ["lmdb", "mongo", "memory"];
     static readonly defaultMoniker: "BlockRunner";
-    static readonly dependencies: ("MempoolViewer" | "BlockRewardViewer" | "AccountBalanceViewer" | "BlockValidationViewer" | "FinalizationViewer" | "TimeSyncViewer")[];
+    static readonly dependencies: ("AccountBalanceViewer" | "MempoolViewer" | "BlockRewardViewer" | "BlockValidationViewer" | "FinalizationViewer" | "TimeSyncViewer")[];
     static readonly monikers: "BlockRunner"[];
     static readonly surface: "node";
     moniker: "BlockRunner";
@@ -51,7 +51,10 @@ export declare class SimpleBlockRunner extends AbstractCreatableProvider<SimpleB
     private _address?;
     private _blockRewardViewer?;
     private _blockValidationViewer?;
+    private _chainParamsViewer?;
     private _finalizationViewer?;
+    /** Cache of the last candidate this runner signed; the mempool is the source of truth. */
+    private _lastSignedCandidate?;
     private _mempoolViewer?;
     private _rewardAddress?;
     private _timeSyncViewer?;
@@ -127,6 +130,7 @@ export declare class SimpleBlockRunner extends AbstractCreatableProvider<SimpleB
         $sourceQuery?: import("@ariestools/sdk").BrandedHash | undefined;
         protocol?: number | undefined;
         step_hashes?: import("@ariestools/sdk").BrandedHash[] | undefined;
+        supersedes?: import("@ariestools/sdk").BrandedHash | undefined;
     }, {
         [x: string]: unknown;
         schema: import("@xyo-network/sdk").BrandedSchema<string>;
@@ -152,8 +156,37 @@ export declare class SimpleBlockRunner extends AbstractCreatableProvider<SimpleB
      * @returns True if a heartbeat is required, false otherwise
      */
     private heartbeatRequired;
+    /**
+     * The hash of this producer's own earlier candidate at the same height and parent, if any.
+     *
+     * The parent is part of the match on purpose. Two candidates at one height built on different
+     * parents are not a re-proposal, they are different branches, and linking across them would
+     * assert a supersession that never happened.
+     *
+     * Memory is only a cache. A restart wipes it while the pool still holds the prior candidate, so
+     * the pool is consulted whenever memory misses. Following the chain to its tip keeps a third
+     * proposal pointing at the second rather than back at the first.
+     * @param block The height being proposed
+     * @param previous The parent this proposal builds on
+     * @returns The prior candidate's signed data hash, or undefined when there is none
+     */
+    private previousOwnCandidateHash;
     private rejectExhaustedBlock;
     private rejectWrongChainTransactions;
+    /**
+     * The candidate this proposal supersedes, or undefined when nothing should be stamped.
+     *
+     * Identity is the signed data hash rather than the storage hash, because that is what an
+     * observer recomputes when deciding whether two candidates are the same block — client meta
+     * such as `$epoch` must not be able to make one candidate look like two.
+     *
+     * With no register wired, or with the field unactivated, this never stamps. That is what keeps
+     * a producer running this build emission-identical to one running the release before it, which
+     * the rollout depends on: stamping before the fleet has upgraded would partition validation.
+     * @param head The block being built on
+     * @returns The superseded candidate's hash, or undefined
+     */
+    private resolveSupersedes;
     private runBuildValidateRetryLoop;
 }
 //# sourceMappingURL=SimpleBlockRunner.d.ts.map

package/dist/browser/modules/services/simple/block/runner/SimpleBlockRunner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SimpleBlockRunner.d.ts","sourceRoot":"","sources":["../../../../../../../src/modules/services/simple/block/runner/SimpleBlockRunner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,OAAO,EAAQ,UAAU,EAC1B,MAAM,iBAAiB,CAAA;AAKxB,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EAAE,YAAY,EAChC,MAAM,kBAAkB,CAAA;AAKzB,OAAO,KAAK,EACV,oBAAoB,EAAuB,iBAAiB,EACxC,iBAAiB,EAAE,WAAW,EAAE,qBAAqB,EAAW,gBAAgB,EAAE,uBAAuB,EAC7H,qBAAqB,EACrB,kBAAkB,EAClB,oCAAoC,EAAgC,aAAa,EACjF,mCAAmC,EACnC,+BAA+B,EAClB,cAAc,EAAE,QAAQ,EACtC,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,yBAAyB,EAM1B,MAAM,sBAAsB,CAAA;AAE7B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAQlD;;GAEG;AACH,eAAO,MAAM,kBAAkB,KAAK,CAAA;AAEpC;;GAEG;AACH,eAAO,MAAM,mCAAmC,MAAM,CAAA;AAEtD;;;GAGG;AACH,eAAO,MAAM,iCAAiC,MAAM,CAAA;AAEpD,MAAM,WAAW,uBAAwB,SAAQ,uBAAuB;IACtE,4FAA4F;IAC5F,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB,0BAA0B,CAAC,EAAE,OAAO,CAAA;IACpC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,6BAA6B,CAAC,EAAE,iBAAiB,CAAA;IACjD,gGAAgG;IAChG,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,0BAA0B,CAAC,EAAE,oCAAoC,CAAA;CAClE;AAED,qBACa,iBAAkB,SAAQ,yBAAyB,CAAC,uBAAuB,CAAE,YAAW,WAAW;IAC9G,MAAM,CAAC,QAAQ,CAAC,eAAe,uCAAuC;IACtE,MAAM,CAAC,QAAQ,CAAC,cAAc,gBAAqB;IACnD,MAAM,CAAC,QAAQ,CAAC,YAAY,yIAO3B;IAED,MAAM,CAAC,QAAQ,CAAC,QAAQ,kBAAuB;IAC/C,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAG,MAAM,CAAS;IACzC,OAAO,gBAAmC;IAE1C,SAAS,CAAC,mBAAmB,CAAC,EAAE,kBAAkB,CAAA;IAClD,SAAS,CAAC,sBAAsB,CAAC,EAAE,qBAAqB,CAAA;IAGxD,SAAS,CAAC,0BAA0B,6CAAkB;IACtD,SAAS,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAC1C,SAAS,CAAC,8BAA8B,CAAC,EAAE,iBAAiB,CAAA;IAE5D,OAAO,CAAC,QAAQ,CAAC,CAAiB;IAClC,OAAO,CAAC,qBAAqB,CAAC,CAAsB;IACpD,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B,OAAO,CAAC,kBAAkB,CAAC,CAAmB;IAC9C,OAAO,CAAC,sBAAsB,CAAC,CAAuB;IACtD,OAAO,CAAC,mBAAmB,CAAC,CAAoB;IAChD,OAAO,CAAC,cAAc,CAAC,CAAe;IACtC,OAAO,CAAC,cAAc,CAAC,CAAS;IAChC,OAAO,CAAC,eAAe,CAAC,CAAgB;IAExC;;OAEG;IACH,MAAM,KAAK,gBAAgB,IAAI,MAAM,CAEpC;IAED;;;OAGG;IACH,MAAM,KAAK,qBAAqB,IAAI,MAAM,CAEzC;IAED;;;OAGG;IACH,MAAM,KAAK,mBAAmB,IAAI,MAAM,CAEvC;IAED,SAAS,KAAK,OAAO,oBAEpB;IAED,SAAS,KAAK,oBAAoB,yBAEjC;IAED,SAAS,KAAK,OAAO;;;;MAEpB;IAED,SAAS,KAAK,iBAAiB,sBAE9B;IAED,SAAS,KAAK,qBAAqB,0BAElC;IAED,SAAS,KAAK,kBAAkB,uBAE/B;IAED,SAAS,KAAK,iBAAiB,WAE9B;IAED,SAAS,KAAK,aAAa,kBAE1B;IAED,SAAS,KAAK,cAAc;;;;MAE3B;IAMD,SAAS,KAAK,6BAA6B,mPAE1C;IAED,SAAS,KAAK,aAAa,IAAI,OAAO,CAErC;IAMD,SAAS,KAAK,cAAc,IAAI,cAAc,CAE7C;IAMc,aAAa;IAqBtB,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,iBAAiB,CAAC,GAAG,OAAO,CAAC,+BAA+B,GAAG,SAAS,CAAC;IAgBjG,gBAAgB,CAAC,IAAI,EAAE,mCAAmC,EAAE,KAAK,EAAE,IAAI,GAAG,OAAO,CAAC,+BAA+B,CAAC;IAClH,gBAAgB,CAAC,IAAI,EAAE,mCAAmC,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,+BAA+B,GAAG,SAAS,CAAC;cAOtH,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAiB3E;;;;OAIG;IACH,SAAS,CAAC,wBAAwB,CAAC,IAAI,EAAE,YAAY,CAAC,iBAAiB,CAAC,GAAG,UAAU,CAAC,gBAAgB,GAAG,SAAS,CAAC;cAsBnG,qBAAqB,CAAC,IAAI,EAAE,YAAY,CAAC,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,EAAE,OAAO,EAAE,KAAK,UAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAsEtH;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IAS1B,OAAO,CAAC,yBAAyB;YAiBnB,cAAc;YAsDd,mBAAmB;IAIjC;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;YAQX,oBAAoB;YAkBpB,4BAA4B;YAiC5B,yBAAyB;CAqDxC"}
+{"version":3,"file":"SimpleBlockRunner.d.ts","sourceRoot":"","sources":["../../../../../../../src/modules/services/simple/block/runner/SimpleBlockRunner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,OAAO,EAAQ,UAAU,EAC1B,MAAM,iBAAiB,CAAA;AAKxB,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EAAE,YAAY,EAChC,MAAM,kBAAkB,CAAA;AAKzB,OAAO,KAAK,EACV,oBAAoB,EAAuB,iBAAiB,EACxC,iBAAiB,EAAE,WAAW,EAAE,qBAAqB,EACzE,gBAAgB,EAAE,uBAAuB,EACzC,qBAAqB,EACrB,kBAAkB,EAClB,oCAAoC,EAAgC,aAAa,EACjF,mCAAmC,EACnC,+BAA+B,EAClB,cAAc,EAAE,QAAQ,EACtC,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,yBAAyB,EAQ1B,MAAM,sBAAsB,CAAA;AAE7B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AASlD;;GAEG;AACH,eAAO,MAAM,kBAAkB,KAAK,CAAA;AAEpC;;GAEG;AACH,eAAO,MAAM,mCAAmC,MAAM,CAAA;AAEtD;;;GAGG;AACH,eAAO,MAAM,iCAAiC,MAAM,CAAA;AAEpD,MAAM,WAAW,uBAAwB,SAAQ,uBAAuB;IACtE,4FAA4F;IAC5F,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB,0BAA0B,CAAC,EAAE,OAAO,CAAA;IACpC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,6BAA6B,CAAC,EAAE,iBAAiB,CAAA;IACjD,gGAAgG;IAChG,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,0BAA0B,CAAC,EAAE,oCAAoC,CAAA;CAClE;AAED,qBACa,iBAAkB,SAAQ,yBAAyB,CAAC,uBAAuB,CAAE,YAAW,WAAW;IAC9G,MAAM,CAAC,QAAQ,CAAC,eAAe,uCAAuC;IACtE,MAAM,CAAC,QAAQ,CAAC,cAAc,gBAAqB;IACnD,MAAM,CAAC,QAAQ,CAAC,YAAY,yIAO3B;IAED,MAAM,CAAC,QAAQ,CAAC,QAAQ,kBAAuB;IAC/C,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAG,MAAM,CAAS;IACzC,OAAO,gBAAmC;IAE1C,SAAS,CAAC,mBAAmB,CAAC,EAAE,kBAAkB,CAAA;IAClD,SAAS,CAAC,sBAAsB,CAAC,EAAE,qBAAqB,CAAA;IAGxD,SAAS,CAAC,0BAA0B,6CAAkB;IACtD,SAAS,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAC1C,SAAS,CAAC,8BAA8B,CAAC,EAAE,iBAAiB,CAAA;IAE5D,OAAO,CAAC,QAAQ,CAAC,CAAiB;IAClC,OAAO,CAAC,qBAAqB,CAAC,CAAsB;IACpD,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B,OAAO,CAAC,kBAAkB,CAAC,CAAmB;IAC9C,OAAO,CAAC,sBAAsB,CAAC,CAAuB;IACtD,OAAO,CAAC,kBAAkB,CAAC,CAAmB;IAC9C,OAAO,CAAC,mBAAmB,CAAC,CAAoB;IAChD,0FAA0F;IAC1F,OAAO,CAAC,oBAAoB,CAAC,CAA+C;IAC5E,OAAO,CAAC,cAAc,CAAC,CAAe;IACtC,OAAO,CAAC,cAAc,CAAC,CAAS;IAChC,OAAO,CAAC,eAAe,CAAC,CAAgB;IAExC;;OAEG;IACH,MAAM,KAAK,gBAAgB,IAAI,MAAM,CAEpC;IAED;;;OAGG;IACH,MAAM,KAAK,qBAAqB,IAAI,MAAM,CAEzC;IAED;;;OAGG;IACH,MAAM,KAAK,mBAAmB,IAAI,MAAM,CAEvC;IAED,SAAS,KAAK,OAAO,oBAEpB;IAED,SAAS,KAAK,oBAAoB,yBAEjC;IAED,SAAS,KAAK,OAAO;;;;MAEpB;IAED,SAAS,KAAK,iBAAiB,sBAE9B;IAED,SAAS,KAAK,qBAAqB,0BAElC;IAED,SAAS,KAAK,kBAAkB,uBAE/B;IAED,SAAS,KAAK,iBAAiB,WAE9B;IAED,SAAS,KAAK,aAAa,kBAE1B;IAED,SAAS,KAAK,cAAc;;;;MAE3B;IAMD,SAAS,KAAK,6BAA6B,mPAE1C;IAED,SAAS,KAAK,aAAa,IAAI,OAAO,CAErC;IAMD,SAAS,KAAK,cAAc,IAAI,cAAc,CAE7C;IAMc,aAAa;IAwBtB,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,iBAAiB,CAAC,GAAG,OAAO,CAAC,+BAA+B,GAAG,SAAS,CAAC;IAgBjG,gBAAgB,CAAC,IAAI,EAAE,mCAAmC,EAAE,KAAK,EAAE,IAAI,GAAG,OAAO,CAAC,+BAA+B,CAAC;IAClH,gBAAgB,CAAC,IAAI,EAAE,mCAAmC,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,+BAA+B,GAAG,SAAS,CAAC;cAOtH,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAiB3E;;;;OAIG;IACH,SAAS,CAAC,wBAAwB,CAAC,IAAI,EAAE,YAAY,CAAC,iBAAiB,CAAC,GAAG,UAAU,CAAC,gBAAgB,GAAG,SAAS,CAAC;cAsBnG,qBAAqB,CAAC,IAAI,EAAE,YAAY,CAAC,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,EAAE,OAAO,EAAE,KAAK,UAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAsEtH;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IAS1B,OAAO,CAAC,yBAAyB;YAiBnB,cAAc;YAsDd,mBAAmB;IAIjC;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAQzB;;;;;;;;;;;;;OAaG;YACW,wBAAwB;YAOxB,oBAAoB;YAkBpB,4BAA4B;IAiC1C;;;;;;;;;;;;OAYG;YACW,iBAAiB;YASjB,yBAAyB;CA4DxC"}

package/dist/browser/modules/services/simple/block/runner/index.d.ts

@@ -1,2 +1,3 @@
+export * from './selectSupersededCandidate.js';
 export * from './SimpleBlockRunner.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/browser/modules/services/simple/block/runner/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/modules/services/simple/block/runner/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/modules/services/simple/block/runner/index.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAA;AAC9C,cAAc,wBAAwB,CAAA"}

package/dist/browser/modules/services/simple/block/runner/selectSupersededCandidate.d.ts

@@ -0,0 +1,22 @@
+import type { Hash } from '@ariestools/sdk';
+import type { WithHashMeta, XyoAddress } from '@xyo-network/sdk';
+import type { BlockBoundWitness } from '@xyo-network/xl1-sdk';
+/**
+ * Which of a producer's own pending candidates a new proposal at this height supersedes.
+ *
+ * Matching on the parent as well as the height is the guard that matters. Two candidates at one
+ * height built on different parents are not a re-proposal, they are competing branches, and
+ * stamping a link across them would assert a supersession that never happened — turning an
+ * honest producer's block into evidence against it.
+ *
+ * When several of its own candidates are already in the pool, the tip of the supersedes chain is
+ * the one to point at: the tip is the candidate nothing else has replaced, so a third proposal
+ * links to the second rather than reaching back past it and leaving the second orphaned.
+ * @param candidates Pending candidates visible to this producer
+ * @param address The producer's own signing address
+ * @param block The height being proposed
+ * @param previous The parent this proposal builds on
+ * @returns The signed data hash to supersede, or undefined when there is nothing to link
+ */
+export declare function selectSupersededCandidate(candidates: WithHashMeta<BlockBoundWitness>[], address: XyoAddress, block: number, previous: Hash): Hash | undefined;
+//# sourceMappingURL=selectSupersededCandidate.d.ts.map

package/dist/browser/modules/services/simple/block/runner/selectSupersededCandidate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"selectSupersededCandidate.d.ts","sourceRoot":"","sources":["../../../../../../../src/modules/services/simple/block/runner/selectSupersededCandidate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAE3C,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAChE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAE7D;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,YAAY,CAAC,iBAAiB,CAAC,EAAE,EAC7C,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,IAAI,GACb,IAAI,GAAG,SAAS,CAOlB"}

package/dist/browser/modules/slashing/detect/DetectedOffense.d.ts

@@ -0,0 +1,27 @@
+import type { Payload } from '@xyo-network/sdk';
+import type { OffenseCode } from '@xyo-network/xl1-sdk';
+import type { OffenseKey } from '../model/offenseKey.js';
+import type { OffenseVerdict } from '../model/VerificationOutcome.js';
+/**
+ * Conduct a watcher found and then verified.
+ *
+ * Carries the verdict rather than a bare flag, because the transcript is what makes the detection
+ * worth anything: it is the same record an arbiter would publish, so an operator watching in
+ * telemetry mode can see exactly what a report would have said before any are ever filed.
+ */
+export interface DetectedOffense {
+    /**
+     * The artifacts the verdict rests on.
+     *
+     * Carried because a report has to supply them: a reporter that named hashes without producing
+     * the objects would be asking everyone else to take its word for it.
+     */
+    artifacts: Payload[];
+    /** What the offense is filed under. */
+    key: OffenseKey;
+    /** Which class. */
+    offense: OffenseCode;
+    /** What verification concluded, with its transcript. */
+    verdict: OffenseVerdict;
+}
+//# sourceMappingURL=DetectedOffense.d.ts.map

package/dist/browser/modules/slashing/detect/DetectedOffense.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DetectedOffense.d.ts","sourceRoot":"","sources":["../../../../../src/modules/slashing/detect/DetectedOffense.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAEvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAA;AAErE;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,SAAS,EAAE,OAAO,EAAE,CAAA;IACpB,uCAAuC;IACvC,GAAG,EAAE,UAAU,CAAA;IACf,mBAAmB;IACnB,OAAO,EAAE,WAAW,CAAA;IACpB,wDAAwD;IACxD,OAAO,EAAE,cAAc,CAAA;CACxB"}

package/dist/browser/modules/slashing/detect/candidatePairs.d.ts

@@ -0,0 +1,44 @@
+import type { Hash } from '@ariestools/sdk';
+import type { XyoAddress } from '@xyo-network/sdk';
+/** One candidate a watcher saw a producer sign, reduced to what deciding equivocation needs. */
+export interface CandidateSighting {
+    /** Height the candidate claims. */
+    block: number;
+    /** Recomputed signed identity — never the storage hash, which client meta can move. */
+    dataHash: Hash;
+    /** Parent the candidate builds on. */
+    previous: Hash | null;
+    /** Address that signed it. */
+    producer: XyoAddress;
+    /** The candidate this one declares it replaces, when it declares one. */
+    supersedes?: Hash;
+}
+/** Two candidates from one producer that compete for the same slot. */
+export interface CandidatePair {
+    /** Height they compete at. */
+    block: number;
+    /** The earlier sighting. */
+    first: CandidateSighting;
+    /** Who signed both. */
+    producer: XyoAddress;
+    /** The later sighting. */
+    second: CandidateSighting;
+}
+/**
+ * Finds candidate pairs that look like equivocation among what a watcher has seen.
+ *
+ * This is detection, not judgment. It answers which pairs are worth verifying, and a pair reaching
+ * this list is not yet an accusation — the verification procedure decides that, and it re-derives
+ * everything from the artifacts rather than trusting anything here.
+ *
+ * A declared link clears the pair immediately, so an honest producer's re-proposal never enters
+ * the pipeline at all. Doing that here rather than later matters: a watcher that queued every
+ * re-proposal for verification would spend its budget on producers doing exactly what they should.
+ *
+ * Sightings are compared by recomputed identity, so a candidate seen twice through different paths
+ * collapses to one rather than becoming a pair with itself.
+ * @param sightings Candidates the watcher has observed
+ * @returns Pairs worth verifying, one per competing combination
+ */
+export declare function findCandidatePairs(sightings: readonly CandidateSighting[]): CandidatePair[];
+//# sourceMappingURL=candidatePairs.d.ts.map

package/dist/browser/modules/slashing/detect/candidatePairs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"candidatePairs.d.ts","sourceRoot":"","sources":["../../../../../src/modules/slashing/detect/candidatePairs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAElD,gGAAgG;AAChG,MAAM,WAAW,iBAAiB;IAChC,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAA;IACb,uFAAuF;IACvF,QAAQ,EAAE,IAAI,CAAA;IACd,sCAAsC;IACtC,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAA;IACrB,8BAA8B;IAC9B,QAAQ,EAAE,UAAU,CAAA;IACpB,yEAAyE;IACzE,UAAU,CAAC,EAAE,IAAI,CAAA;CAClB;AAED,uEAAuE;AACvE,MAAM,WAAW,aAAa;IAC5B,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,4BAA4B;IAC5B,KAAK,EAAE,iBAAiB,CAAA;IACxB,uBAAuB;IACvB,QAAQ,EAAE,UAAU,CAAA;IACpB,0BAA0B;IAC1B,MAAM,EAAE,iBAAiB,CAAA;CAC1B;AAaD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,SAAS,iBAAiB,EAAE,GAAG,aAAa,EAAE,CAqB3F"}

package/dist/browser/modules/slashing/detect/index.d.ts

@@ -0,0 +1,5 @@
+export * from './candidatePairs.js';
+export * from './DetectedOffense.js';
+export * from './offenseGate.js';
+export * from './suppression.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/browser/modules/slashing/detect/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/modules/slashing/detect/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAA;AACnC,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA;AAChC,cAAc,kBAAkB,CAAA"}

package/dist/browser/modules/slashing/detect/offenseGate.d.ts

@@ -0,0 +1,18 @@
+import type { ChainParams, OffenseCode } from '@xyo-network/xl1-sdk';
+/**
+ * Whether a watcher may treat conduct at a height as a reportable offense.
+ *
+ * Two gates, and the second one only applies to equivocation. A producer cannot declare that one
+ * candidate replaces another until the field that says so is active, so before that activation
+ * every honest re-proposal is indistinguishable from equivocation. Reporting the class then would
+ * accuse operators of an offense the protocol gave them no way to avoid.
+ *
+ * That conjunction is fixed here rather than left to configuration. An operator who could switch
+ * it off would be arming their node to file accusations the chain cannot sustain.
+ * @param params The register version covering the offense height
+ * @param offense The offense class being considered
+ * @param height The XL1 height the conduct occurred at
+ * @returns True when reports naming this class at this height may be recorded
+ */
+export declare function isOffenseWatchable(params: ChainParams, offense: OffenseCode, height: number): boolean;
+//# sourceMappingURL=offenseGate.d.ts.map

package/dist/browser/modules/slashing/detect/offenseGate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"offenseGate.d.ts","sourceRoot":"","sources":["../../../../../src/modules/slashing/detect/offenseGate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAGpE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAGrG"}

package/dist/browser/modules/slashing/detect/suppression.d.ts

@@ -0,0 +1,23 @@
+import type { OffenseKey } from '../model/offenseKey.js';
+import type { SlashHistoryReader } from '../model/SlashHistoryReader.js';
+/** Why a watcher should not file a report it would otherwise have filed. */
+export type SuppressionReason = 'adjudicated' | 'already-reported';
+/**
+ * Whether an offense a watcher has detected is already spoken for.
+ *
+ * Duplicate detection is normal — every validator watching the same chain sees the same
+ * misconduct — so the interesting question is not whether to detect it but whether to add another
+ * report of it.
+ *
+ * A settled offense is the stronger case. Filing against something already adjudicated is not
+ * merely redundant: an adjudicated offense cannot be re-litigated, so the new report is itself
+ * invalid and exposes its filer to a counter-slash. A watcher must never walk into that.
+ *
+ * An existing unsettled report is only redundant. Nothing is lost by staying quiet — the offense
+ * is already on the record and the bounty already claimed by whoever got there first.
+ * @param history Finalized slash traffic as this watcher can see it
+ * @param key The offense being considered
+ * @returns Why to stay quiet, or undefined when the report is worth filing
+ */
+export declare function suppressionFor(history: SlashHistoryReader, key: OffenseKey): Promise<SuppressionReason | undefined>;
+//# sourceMappingURL=suppression.d.ts.map

package/dist/browser/modules/slashing/detect/suppression.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"suppression.d.ts","sourceRoot":"","sources":["../../../../../src/modules/slashing/detect/suppression.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AAExE,4EAA4E;AAC5E,MAAM,MAAM,iBAAiB,GAAG,aAAa,GAAG,kBAAkB,CAAA;AAElE;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,kBAAkB,EAC3B,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAGxC"}