@xyo-network/event-kit-statement-graph 0.0.1 → 0.1.0

package/README.md

@@ -1,59 +1,179 @@
 # `@xyo-network/event-kit-statement-graph`
 
-Read-model adapter between the canonical XL1 Statement Graph viewer and the
-Event Kit wake-grant authorizer.
+Finalized Statement Graph replay and Event Kit handshake read models.
+
+The package has three public seams:
+
+- `createFinalizedEventKitReplayController` folds the Event Kit lifecycle
+  vocabulary from finalized XL1 blocks and hash-verified bodies;
+- `createEventKitHandshakeReadModel` derives publisher service, key,
+  subscription, grant, acceptance, replacement, and revocation views from that
+  replay; and
+- `createStatementGraphGrantReadModel` adapts a canonical Statement Graph
+  viewer to the narrower wake-admission grant port.
+
+## Finalized replay
 
 ```ts
-const readModel = createStatementGraphGrantReadModel({ viewer })
-const grants = createStatementGraphWakeGrantAuthorizer({ viewer: readModel })
+const replay = await createFinalizedEventKitReplayController({
+  bodies: dataLakeViewer,
+  chain: finalizedBlockViewer,
+  chainId,
+  checkpointStore,
+  floorBlock: 0,
+  network: 'local',
+  publisher,
+  sourceId: dataLakeEndpoint,
+})
+
+await replay.sync()
+
+const handshakes = createEventKitHandshakeReadModel({
+  body: hash => replay.body(hash),
+  viewer: replay.viewer(),
+})
 ```
 
-`viewer` is any `StatementGraphViewer` — a `StateStatementGraphViewer` over
-engine state, a replay controller's viewer, or another backing.
+The candidate controller walks one finalized block at a time through Statement
+Graph with the exact Event Kit object-schema allowlist. Each block is staged
+before publication. An unresolved Statement Graph event, a missing or corrupt
+claimed object, or a missing or corrupt challenge/response attachment records
+an explicit blocked boundary and leaves `indexedThrough` before that block. A
+later `sync()` retries the same block; unavailability is never interpreted as
+absence or revocation.
+
+Published Statement Graph `0.5.0` admits consensus-elevated, subject-bearing
+Claims and decodes Claim bodies from finalized block carriers while resolving
+claimed objects and acceptance attachments through the datalake. The Gate 2
+live rerun against that release remains the acceptance boundary.
+
+Statement Graph `0.5.0` uses fold version 4 and scan-checkpoint format 2. Event
+Kit's publisher-scoped outer checkpoint is also format 2. Checkpoints produced
+by the earlier pre-subject Phase 2 candidate fail closed; archive or discard
+them and rebuild from the configured floor. Gate 2 has not accepted a durable
+format that requires in-place migration.
+
+`status()` exposes two distinct watermarks:
+
+- `finalizedHead` is the latest finalized height observed from XL1; and
+- `indexedThrough` is the highest block whose Event Kit projection was fully
+  committed, or `null` before the floor block has been indexed.
+
+The strict `EventKitReplayCheckpointZod` checkpoint binds network, chain ID,
+publisher, datalake source identity, floor block, Statement Graph fold version,
+and the ordered schema policy. It retains the complete canonical
+`AppliedEventRecord` history and verified bodies in addition to the upstream
+slim claim checkpoint. That extra history is required to reconstruct exact
+same-claim subscription fans after restart. A checkpoint from another dataset
+fails closed instead of being silently reused. Restoration also recomputes
+every persisted body hash and cross-checks progress, fold records, applied-event
+provenance, resume watermark keys, and blocked position. Concurrent `sync()`
+calls are serialized around durable checkpoint replacement.
+
+`EventKitReplayCheckpointStore.save` is an atomic-persistence port. The new
+snapshot becomes visible only after `save` resolves. This package includes a
+memory implementation for structural tests; a filesystem or SQLite adapter is
+not supplied here.
+
+`createCheckpointStatementGraphViewer` restores the canonical viewer surface
+from a checkpoint, including `claimsByObject`, `claimsBySubject`, per-source
+applied history, and resolved objects.
+
+## Handshake discovery
 
-## What this package does and does not do
+The handshake read model:
 
-It is a translation seam only. It narrows the canonical branded source/hash
-types, preserves every field the authorizer needs as grant evidence, and drops
-nothing. It makes no authorization decision and applies no freshness policy.
+1. independently reports the currently selectable publisher-authored service
+   and preferred key, if one exists;
+2. uses `claimsBySubject(publisher)` to discover candidate subscriber sources
+   without a full-chain source scan;
+3. enumerates each candidate source's applied-event history under that same
+   publisher subject and
+   groups it by immutable `(txHash, eventHash)` evidence;
+4. accepts only an exact same-claim fan containing one selected service, one
+   grant, and one encrypted subscription with matching publisher, chain,
+   service, key, key ID, grant, event kind, and lifetime policy;
+5. resolves publisher-authored acceptances and their hash-bound challenge and
+   response attachments; and
+6. applies authorized service, key, grant, subscription, and acceptance
+   revocations plus deterministic revision cutover.
 
-Under Statement Graph v2 the protocol owns **claim only**: there is no `target`
-and no revoke verb, so the grant body names its own `publisher` and negation is
-an Event Kit revocation object claimed by the pinned controller. See
+The reconciliation view is intentionally separate from current advertisement
+discovery. Under `existing-acceptances-continue`, an exact finalized acceptance
+continues after service/key expiry, revocation, removal, or supersession; those
+retirement events only prevent a new acceptance under that descriptor.
+
+An accepted subscription becomes active at `acceptanceBlock + 1`. Wrong-source
+revocations are ignored. Current-advertisement discovery fails closed on an
+unavailable, malformed, or ambiguous selection. Reconciliation rejects stale,
+ahead-of-finality, or unavailable projections but can still return exact
+continuing acceptances alongside a nested advertisement-selection failure. Both
+surfaces retain concrete block/transaction/event/hash evidence.
+
+This read model intentionally does not hold publisher private keys, decrypt a
+subscription, compare the grant's deployment and queue to the encrypted
+plaintext, perform the endpoint challenge, or verify its proof. The Phase 3
+publisher client in `@xyo-network/event-kit-node/handshake` consumes this
+finalized candidate view, performs those private checks through protocol APIs,
+durably records the one-time challenge decision, and publishes the exact
+acceptance. Phase 4 adds the resident scanner and service orchestration.
+
+## Wake-grant admission adapter
+
+```ts
+const readModel = createStatementGraphGrantReadModel({ viewer: replay.viewer() })
+const grants = createStatementGraphWakeGrantAuthorizer({ viewer: readModel })
+```
+
+The adapter parses branded addresses and hashes rather than casting them and
+preserves the materializing claim evidence used by the D-002 admission gate.
+Statement Graph owns Claim only: it provides structural
+`{source, subject, hashes}`, no `target`, and no revoke verb. The admission
+adapter requires Claim `subject` to equal the grant body's publisher. Event Kit
+negation is an ordinary revocation object under that same publisher subject,
+claimed by the authorized controller. See
 [D-003](../../docs/decisions/D-003-STATEMENT-GRAPH-V2-GRANTS.md).
 
-Addresses and hashes are **parsed**, not cast. A malformed address therefore
-reaches the caller as `grant-unavailable` rather than silently querying a
-nonsense key and reading as "no grant".
-
-## Evidence
-
-Specs fold a `FakeStatementChain` through the real engine —
-`applyStatementTransaction` over decoded blocks and verified bodies — and drive
-`admitAndEnqueue` against the resulting viewer. Exact-scope claims admit; a
-wrong controller, a differently scoped or unscoped route, a missing `enqueue`
-permission, and a revoke all reject; a lagging view rejects as stale and an
-ahead-of-finality view rejects rather than being trusted.
-
-A never-folded read model carries watermark `-1` and fails closed as
-`grant-unavailable`, keeping "the view is not ready" distinguishable from "the
-controller granted nothing".
-
-Live specs under `src/spec/api-local/` run the same fold against a **real local
-XL1 chain**: a Claim transaction published with the statement-graph SDK,
-confirmed and finalized, then folded from real finalized blocks into an
-admission decision whose evidence cites the on-chain claim at its real height.
-The gateway viewer satisfies `FinalizedBlockViewer` structurally, so the fold
-code is identical across both substrates. Run with
-`pnpm test:api-local-statements` — publishing specs need their own chain, since
-the dev chain stops producing blocks after one statement transaction.
-
-The full lifecycle runs live: a grant admits, a negation in a **later** finalized
-transaction disables, and a later redundant claim leaves the asserted height
-frozen while only the liveness clock advances. Same-block negation is covered too
-via v2's `hashes[]` fan-out, where a grant and the revocation naming it ride one
-transaction and the publisher is born disabled.
-
-Bodies are served from an in-process datalake; the chain carries commitments, not
-bodies. Scope-mismatch and wrong-controller vectors stay on the deterministic
-chain.
+## Evidence boundary
+
+Offline deterministic-chain specs currently cover:
+
+- strict checkpoint round-trip and dataset-identity rejection;
+- full applied-history persistence and equivalent viewer restoration;
+- block-atomic retry after a missing claimed object or acceptance attachment;
+- refusal to publish staged state after checkpoint-save failure;
+- rejection of hash-tampered or cross-field-inconsistent restored checkpoints
+  and serialization of concurrent sync calls;
+- publisher service/key discovery and a pending unaccepted tuple;
+- exact same-claim reconstruction rather than assembly across separate claims;
+- activation at `acceptanceBlock + 1`, authorized revocation, and ignored
+  wrong-source revocation;
+- exact acceptance-revocation grouping, source-scoped tuple identity, and
+  continuity after service/key retirement;
+- stale and ahead-of-finality rejection; and
+- equivalent lifecycle state after replay from block zero.
+
+The original `api-local` fold evidence used legacy unelevated Claim semantics
+with `MemoryStatementDataLake`. It is superseded by the passing Statement Graph
+`0.5.0` live run and these two stronger structural boundaries:
+
+- `src/spec/node/restDataLakeProcess.spec.ts` uses real XL1 SDK REST runner and
+  viewer clients against a separate child process. The fixture stores one
+  canonical body per hash on the filesystem and proves readback, temporary
+  unavailability, restoration, process restart, and readback after restart.
+- `src/spec/api-local/liveHandshake.spec.ts` uses two independently derived
+  accounts, the real `apiLocal` XL1 runner/viewer,
+  `publishFinalizedStatements`, and separately constructed REST writer/reader
+  clients against that process. It proves finalized service/key discovery and
+  hash verification, a pending same-claim subscription/grant, acceptance-block
+  cutover at `A + 1`, revocation, replay-from-zero equality, distinct
+  `finalizedHead`/`indexedThrough` watermarks, and retry from the exact blocked
+  block after a required body is restored.
+
+`pnpm test:live` runs this handshake alongside the existing local-chain head,
+admission, and Statement Graph fold specs. All 14 tests pass against xyo-chain
+and `apiLocal` `5.3.0`, XL1 SDK/protocol `5.4.0`, and Statement Graph `0.5.0`:
+the chain validates elevated Claims and Statement Graph reads each Claim from
+its finalized block carrier. The REST service is a test-owned loopback fixture,
+not the hosted shared public datalake, so this is not public-stack, Sequence,
+Mainnet, Proxmox, multi-VM, or production qualification.

package/dist/neutral/checkpointViewer.d.ts

@@ -0,0 +1,5 @@
+import type { StatementGraphViewer } from '@xyo-network/xl1-statement-graph-engine';
+import type { EventKitReplayCheckpoint } from './replayCheckpoint.ts';
+/** Restores the canonical Statement Graph read surface from a durable Event Kit checkpoint. */
+export declare function createCheckpointStatementGraphViewer(checkpoint: EventKitReplayCheckpoint): StatementGraphViewer;
+//# sourceMappingURL=checkpointViewer.d.ts.map

package/dist/neutral/checkpointViewer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpointViewer.d.ts","sourceRoot":"","sources":["../../src/checkpointViewer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,oBAAoB,EAIrB,MAAM,yCAAyC,CAAA;AAQhD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAmErE,+FAA+F;AAC/F,wBAAgB,oCAAoC,CAClD,UAAU,EAAE,wBAAwB,GACnC,oBAAoB,CAwEtB"}

package/dist/neutral/eventKitSchemaPolicy.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Exact Statement Graph object vocabulary folded by the Event Kit handshake
+ * projection. Challenge and response bodies are datalake attachments named by
+ * an acceptance; they are not independently claimed lifecycle objects.
+ */
+export declare const EventKitClaimedObjectSchemas: readonly ["network.xyo.event.wake.publisher" & {
+    readonly __schema: true;
+}, "network.xyo.event.wake.publisher.key" & {
+    readonly __schema: true;
+}, "network.xyo.event.wake.publisher.revocation" & {
+    readonly __schema: true;
+}, "network.xyo.event.wake.publisher.key.revocation" & {
+    readonly __schema: true;
+}, "network.xyo.event.wake.subscription" & {
+    readonly __schema: true;
+}, "network.xyo.event.wake.grant" & {
+    readonly __schema: true;
+}, "network.xyo.event.wake.subscription.revocation" & {
+    readonly __schema: true;
+}, "network.xyo.event.wake.grant.revocation" & {
+    readonly __schema: true;
+}, "network.xyo.event.wake.subscription.acceptance" & {
+    readonly __schema: true;
+}, "network.xyo.event.wake.subscription.acceptance.revocation" & {
+    readonly __schema: true;
+}];
+export declare const EventKitClaimedObjectSchemaSet: ReadonlySet<string>;
+//# sourceMappingURL=eventKitSchemaPolicy.d.ts.map

package/dist/neutral/eventKitSchemaPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eventKitSchemaPolicy.d.ts","sourceRoot":"","sources":["../../src/eventKitSchemaPolicy.ts"],"names":[],"mappings":"AAaA;;;;GAIG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;EAW9B,CAAA;AAEX,eAAO,MAAM,8BAA8B,EAAE,WAAW,CAAC,MAAM,CAAyC,CAAA"}

package/dist/neutral/finalizedReplayController.d.ts

@@ -0,0 +1,35 @@
+import type { StatementGraphViewer } from '@xyo-network/xl1-statement-graph-engine';
+import type { BodyReader, FinalizedBlockViewer } from '@xyo-network/xl1-statement-graph-sdk';
+import type { EventKitReplayCheckpoint, EventKitReplayCheckpointIdentity, ReplayBlockedState } from './replayCheckpoint.ts';
+export interface EventKitReplayCheckpointStore {
+    /** Returns durable JSON-compatible checkpoint content, if one exists. */
+    load(): Promise<unknown>;
+    /** Must atomically replace the prior checkpoint or reject without publishing it. */
+    save(checkpoint: EventKitReplayCheckpoint): Promise<void>;
+}
+export interface FinalizedEventKitReplayOptions extends EventKitReplayCheckpointIdentity {
+    readonly bodies: BodyReader;
+    readonly chain: FinalizedBlockViewer;
+    readonly checkpointStore: EventKitReplayCheckpointStore;
+}
+export interface FinalizedEventKitReplayStatus {
+    readonly blocked?: ReplayBlockedState;
+    readonly finalizedHead: number;
+    readonly indexedThrough: number | null;
+}
+export interface FinalizedEventKitReplayController {
+    /** Resolve a verified lifecycle or acceptance-attachment body from the durable projection. */
+    body(hash: string): Readonly<Record<string, unknown>> | undefined;
+    snapshot(): Readonly<EventKitReplayCheckpoint>;
+    status(): FinalizedEventKitReplayStatus;
+    /** Walks clean finalized blocks and stops before the first unavailable body boundary. */
+    sync(): Promise<FinalizedEventKitReplayStatus>;
+    /** Snapshot viewer; request it again after `sync()` to observe the new checkpoint. */
+    viewer(): StatementGraphViewer;
+}
+export declare function createFinalizedEventKitReplayController(rawOptions: FinalizedEventKitReplayOptions): Promise<FinalizedEventKitReplayController>;
+/** Simple structural fixture; production durability belongs to the storage adapter. */
+export declare function createMemoryEventKitReplayCheckpointStore(initial?: unknown): EventKitReplayCheckpointStore & {
+    readonly saved: readonly EventKitReplayCheckpoint[];
+};
+//# sourceMappingURL=finalizedReplayController.d.ts.map

package/dist/neutral/finalizedReplayController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finalizedReplayController.d.ts","sourceRoot":"","sources":["../../src/finalizedReplayController.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAA;AAMnF,OAAO,KAAK,EACV,UAAU,EACV,oBAAoB,EAErB,MAAM,sCAAsC,CAAA;AAQ7C,OAAO,KAAK,EACV,wBAAwB,EACxB,gCAAgC,EAChC,kBAAkB,EAGnB,MAAM,uBAAuB,CAAA;AAO9B,MAAM,WAAW,6BAA6B;IAC5C,yEAAyE;IACzE,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;IACxB,oFAAoF;IACpF,IAAI,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC1D;AAED,MAAM,WAAW,8BAA+B,SAAQ,gCAAgC;IACtF,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAA;IACpC,QAAQ,CAAC,eAAe,EAAE,6BAA6B,CAAA;CACxD;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAA;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CACvC;AAED,MAAM,WAAW,iCAAiC;IAChD,8FAA8F;IAC9F,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAAA;IACjE,QAAQ,IAAI,QAAQ,CAAC,wBAAwB,CAAC,CAAA;IAC9C,MAAM,IAAI,6BAA6B,CAAA;IACvC,yFAAyF;IACzF,IAAI,IAAI,OAAO,CAAC,6BAA6B,CAAC,CAAA;IAC9C,sFAAsF;IACtF,MAAM,IAAI,oBAAoB,CAAA;CAC/B;AAgRD,wBAAsB,uCAAuC,CAC3D,UAAU,EAAE,8BAA8B,GACzC,OAAO,CAAC,iCAAiC,CAAC,CAkB5C;AAED,uFAAuF;AACvF,wBAAgB,yCAAyC,CACvD,OAAO,CAAC,EAAE,OAAO,GAChB,6BAA6B,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,wBAAwB,EAAE,CAAA;CAAE,CAazF"}

package/dist/neutral/grantReadModel.d.ts

@@ -14,8 +14,8 @@ export interface StatementGraphGrantReadModelOptions {
  * This is a translation seam only. It narrows branded query and record types
  * and preserves every field the authorizer needs as grant evidence; it makes no
  * authorization decision, applies no freshness policy, and drops no claim.
- * Statement Graph remains the sole owner of claim semantics — and under v2 that
- * is the whole lifecycle, since there is no revoke verb to own.
+ * Statement Graph remains the sole owner of claim semantics; Event Kit's
+ * authorizer separately interprets grant bodies and claimed negations.
  */
 export declare function createStatementGraphGrantReadModel(options: StatementGraphGrantReadModelOptions): StatementGraphGrantReadModel;
 //# sourceMappingURL=grantReadModel.d.ts.map

package/dist/neutral/handshakeCatalog.d.ts

@@ -0,0 +1,45 @@
+import type { PublisherEncryptionKeyLifecycle, PublisherServiceLifecycleRevision } from '@xyo-network/event-kit-protocol';
+import type { PublisherEncryptionKey, PublisherService } from '@xyo-network/event-kit-schemas';
+import type { StatementGraphViewer } from '@xyo-network/xl1-statement-graph-engine';
+import type { AppliedEventRecord } from '@xyo-network/xl1-statement-graph-schemas';
+import type { ClaimedHandshakeObject, EventKitHandshakeReadModelOptions, HandshakeClaimEvidence, PublisherHandshakeQuery, PublisherServiceDiscovery } from './handshakeReadModelTypes.ts';
+export interface HandshakeCatalogs {
+    readonly keyByHash: ReadonlyMap<string, ClaimedHandshakeObject<PublisherEncryptionKey>>;
+    readonly keyLifecycles: readonly PublisherEncryptionKeyLifecycle[];
+    readonly serviceByHash: ReadonlyMap<string, ClaimedHandshakeObject<PublisherService>>;
+    readonly serviceLifecycles: readonly PublisherServiceLifecycleRevision[];
+}
+export interface HandshakeServiceDiscovery {
+    readonly catalogs?: HandshakeCatalogs;
+    readonly query: PublisherHandshakeQuery;
+    readonly result: PublisherServiceDiscovery;
+}
+export declare function handshakeEvidence(record: AppliedEventRecord): HandshakeClaimEvidence;
+export declare function handshakeEventEvidence(record: AppliedEventRecord): Omit<HandshakeClaimEvidence, 'hashIndex' | 'objectHash'>;
+export declare function handshakeEventKey(record: Pick<AppliedEventRecord, 'eventHash' | 'txHash'>): string;
+export declare function verifiedHandshakeObjectBody(viewer: StatementGraphViewer, record: AppliedEventRecord): Promise<Record<string, unknown> | undefined>;
+export declare function verifiedHandshakeAttachmentBody(resolver: EventKitHandshakeReadModelOptions['body'], hash: string): Promise<Record<string, unknown> | undefined>;
+export declare function firstHandshakeRevocation(revocations: readonly {
+    readonly block: number;
+    readonly target: string;
+}[], target: string): number | undefined;
+export declare function parsedHandshakeObjects<T>(viewer: StatementGraphViewer, records: readonly AppliedEventRecord[], parse: (value: unknown) => {
+    readonly data: T;
+    readonly success: true;
+} | {
+    readonly success: false;
+}): Promise<ClaimedHandshakeObject<T>[]>;
+export declare function handshakeRevocations(viewer: StatementGraphViewer, records: readonly AppliedEventRecord[], parse: (value: unknown) => {
+    readonly data: Record<string, string>;
+    readonly success: true;
+} | {
+    readonly success: false;
+}, field: string): Promise<{
+    block: number;
+    target: string;
+}[]>;
+export declare function buildHandshakeCatalogs(viewer: StatementGraphViewer, publisher: string): Promise<HandshakeCatalogs>;
+export declare function exactHandshakeServiceAt(catalogs: HandshakeCatalogs, service: ClaimedHandshakeObject<PublisherService>, publisher: string, finalizedHead: number): boolean;
+export declare function exactHandshakeKeyAt(catalogs: HandshakeCatalogs, service: ClaimedHandshakeObject<PublisherService>, keyHash: string, finalizedHead: number): boolean;
+export declare function discoverHandshakeService(options: EventKitHandshakeReadModelOptions, rawQuery: PublisherHandshakeQuery): Promise<HandshakeServiceDiscovery>;
+//# sourceMappingURL=handshakeCatalog.d.ts.map

package/dist/neutral/handshakeCatalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshakeCatalog.d.ts","sourceRoot":"","sources":["../../src/handshakeCatalog.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,+BAA+B,EAC/B,iCAAiC,EAClC,MAAM,iCAAiC,CAAA;AAKxC,OAAO,KAAK,EACV,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,gCAAgC,CAAA;AAiBvC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAA;AACnF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAA;AAElF,OAAO,KAAK,EACV,sBAAsB,EACtB,iCAAiC,EACjC,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EAE1B,MAAM,8BAA8B,CAAA;AAErC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,sBAAsB,CAAC,sBAAsB,CAAC,CAAC,CAAA;IACvF,QAAQ,CAAC,aAAa,EAAE,SAAS,+BAA+B,EAAE,CAAA;IAClE,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,sBAAsB,CAAC,gBAAgB,CAAC,CAAC,CAAA;IACrF,QAAQ,CAAC,iBAAiB,EAAE,SAAS,iCAAiC,EAAE,CAAA;CACzE;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IACrC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAA;IACvC,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAA;CAC3C;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,kBAAkB,GAAG,sBAAsB,CAUpF;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,kBAAkB,GACzB,IAAI,CAAC,sBAAsB,EAAE,WAAW,GAAG,YAAY,CAAC,CAS1D;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,GAAG,QAAQ,CAAC,GAAG,MAAM,CAElG;AAkBD,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,oBAAoB,EAC5B,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,CAO9C;AAED,wBAAsB,+BAA+B,CACnD,QAAQ,EAAE,iCAAiC,CAAC,MAAM,CAAC,EACnD,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,CAI9C;AAED,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,SAAS;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,EAC3E,MAAM,EAAE,MAAM,GACb,MAAM,GAAG,SAAS,CAGpB;AAED,wBAAsB,sBAAsB,CAAC,CAAC,EAC5C,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,SAAS,kBAAkB,EAAE,EACtC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK;IAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAA;CAAE,GACpG,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC,CAatC;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,SAAS,kBAAkB,EAAE,EACtC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAA;CAAE,EAC1H,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC,CAS9C;AAED,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,iBAAiB,CAAC,CAmE5B;AA0BD,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,sBAAsB,CAAC,gBAAgB,CAAC,EACjD,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACpB,OAAO,CAST;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,sBAAsB,CAAC,gBAAgB,CAAC,EACjD,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,GACpB,OAAO,CAST;AAcD,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,iCAAiC,EAC1C,QAAQ,EAAE,uBAAuB,GAChC,OAAO,CAAC,yBAAyB,CAAC,CAkEpC"}

package/dist/neutral/handshakeReadModel.d.ts

@@ -0,0 +1,3 @@
+import type { EventKitHandshakeReadModel, EventKitHandshakeReadModelOptions } from './handshakeReadModelTypes.ts';
+export declare function createEventKitHandshakeReadModel(options: EventKitHandshakeReadModelOptions): EventKitHandshakeReadModel;
+//# sourceMappingURL=handshakeReadModel.d.ts.map

package/dist/neutral/handshakeReadModel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshakeReadModel.d.ts","sourceRoot":"","sources":["../../src/handshakeReadModel.ts"],"names":[],"mappings":"AA8CA,OAAO,KAAK,EAEV,0BAA0B,EAC1B,iCAAiC,EAWlC,MAAM,8BAA8B,CAAA;AA8YrC,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,iCAAiC,GACzC,0BAA0B,CA8D5B"}

package/dist/neutral/handshakeReadModelTypes.d.ts

@@ -0,0 +1,142 @@
+import type { SubscriptionActivationFailureReason } from '@xyo-network/event-kit-protocol';
+import type { EncryptedWakeSubscription, FINALIZED_HEAD_EVENT_KIND, PublisherEncryptionKey, PublisherService, WakeGrantObject, WakeSubscriptionAcceptance } from '@xyo-network/event-kit-schemas';
+import type { StatementGraphViewer } from '@xyo-network/xl1-statement-graph-engine';
+export interface HandshakeClaimEvidence {
+    readonly block: number;
+    readonly eventHash: string;
+    readonly hashIndex: number;
+    readonly objectHash: string;
+    readonly ordinal: {
+        readonly event: number;
+        readonly tx: number;
+    };
+    readonly source: string;
+    readonly txHash: string;
+}
+export interface ClaimedHandshakeObject<T> {
+    readonly body: T;
+    readonly evidence: HandshakeClaimEvidence;
+    readonly objectHash: string;
+    readonly revokedAtBlock?: number;
+}
+export interface PublisherServiceDiscoverySuccess {
+    readonly finalizedHead: number;
+    readonly indexedThrough: number;
+    readonly key: ClaimedHandshakeObject<PublisherEncryptionKey>;
+    readonly ok: true;
+    readonly service: ClaimedHandshakeObject<PublisherService>;
+}
+export type PublisherServiceDiscoveryFailureReason = 'ahead-of-finality' | 'ambiguous-key' | 'ambiguous-service' | 'invalid-revision-chain' | 'preferred-key-inactive' | 'preferred-key-not-found' | 'preferred-key-not-referenced' | 'service-not-found' | 'service-pending' | 'stale-view' | 'view-unavailable';
+export interface PublisherServiceDiscoveryFailure {
+    readonly finalizedHead: number;
+    readonly indexedThrough: number | null;
+    readonly ok: false;
+    readonly reason: PublisherServiceDiscoveryFailureReason;
+}
+export type PublisherServiceDiscovery = PublisherServiceDiscoveryFailure | PublisherServiceDiscoverySuccess;
+export type SubscriptionTupleRejectionReason = 'ambiguous-fan' | 'expiry-out-of-policy' | 'grant-binding-invalid' | 'key-binding-invalid' | 'malformed-grant' | 'malformed-subscription' | 'service-inactive-at-claim' | 'subscription-binding-invalid';
+export interface SubscriptionTupleRejection {
+    readonly evidence: Omit<HandshakeClaimEvidence, 'hashIndex' | 'objectHash'>;
+    readonly reason: SubscriptionTupleRejectionReason;
+    readonly subscriber: string;
+}
+export interface FinalizedSubscriptionTuple {
+    readonly grant: ClaimedHandshakeObject<WakeGrantObject>;
+    readonly service: ClaimedHandshakeObject<PublisherService>;
+    readonly subscriber: string;
+    readonly subscription: ClaimedHandshakeObject<EncryptedWakeSubscription>;
+    readonly tupleEvent: Omit<HandshakeClaimEvidence, 'hashIndex' | 'objectHash'>;
+}
+export type SubscriptionLifecycleState = 'active' | 'expired' | 'inactive' | 'pending' | 'rejected' | 'revoked';
+export interface PublisherSubscriptionView {
+    readonly acceptance?: ClaimedHandshakeObject<WakeSubscriptionAcceptance>;
+    readonly activeFromBlock?: number;
+    readonly pendingReplacement?: boolean;
+    readonly reason?: SubscriptionActivationFailureReason | 'grant-revoked';
+    readonly selectedSubscription?: string;
+    readonly state: SubscriptionLifecycleState;
+    readonly subscriber: string;
+    readonly subscriptionId: string;
+    readonly tuples: readonly FinalizedSubscriptionTuple[];
+}
+/**
+ * One exact, finalized subscription tuple eligible to enter the publisher's
+ * decrypt, scope-validation, and endpoint-challenge workflow under the
+ * currently selected service and preferred encryption key. Presence here is
+ * not permission to publish an acceptance.
+ *
+ * Eligibility is intentionally a point-in-time statement at `finalizedHead`.
+ * A caller must resolve the view again after the endpoint challenge and before
+ * publishing an acceptance, because a later finalized lifecycle claim can
+ * retire any candidate.
+ */
+export interface PublisherAcceptanceCandidate {
+    readonly key: ClaimedHandshakeObject<PublisherEncryptionKey>;
+    readonly subscriber: string;
+    readonly subscriptionId: string;
+    readonly tuple: FinalizedSubscriptionTuple;
+}
+interface PublisherHandshakeViewSuccessBase {
+    readonly finalizedHead: number;
+    readonly indexedThrough: number;
+    readonly ok: true;
+    readonly rejections: readonly SubscriptionTupleRejection[];
+    readonly subscriptions: readonly PublisherSubscriptionView[];
+}
+export interface PublisherHandshakeViewWithCurrentService extends PublisherHandshakeViewSuccessBase {
+    readonly hasCurrentAdvertisement: true;
+    readonly key: ClaimedHandshakeObject<PublisherEncryptionKey>;
+    readonly service: ClaimedHandshakeObject<PublisherService>;
+    readonly serviceDiscovery: PublisherServiceDiscoverySuccess;
+}
+export interface PublisherHandshakeViewWithoutCurrentService extends PublisherHandshakeViewSuccessBase {
+    readonly hasCurrentAdvertisement: false;
+    readonly serviceDiscovery: PublisherServiceDiscoveryFailure;
+}
+export type PublisherHandshakeViewSuccess = PublisherHandshakeViewWithCurrentService | PublisherHandshakeViewWithoutCurrentService;
+export type PublisherHandshakeView = PublisherServiceDiscoveryFailure | PublisherHandshakeViewSuccess;
+export interface PublisherAcceptanceCandidateDiscoverySuccess extends PublisherServiceDiscoverySuccess {
+    readonly candidates: readonly PublisherAcceptanceCandidate[];
+    readonly rejections: readonly SubscriptionTupleRejection[];
+    readonly subscriptions: readonly PublisherSubscriptionView[];
+}
+export type PublisherAcceptanceCandidateDiscovery = PublisherAcceptanceCandidateDiscoverySuccess | PublisherServiceDiscoveryFailure;
+export interface SubscriberSubscriptionLookupWithCurrentService extends PublisherHandshakeViewWithCurrentService {
+    readonly subscriber: string;
+}
+export interface SubscriberSubscriptionLookupWithoutCurrentService extends PublisherHandshakeViewWithoutCurrentService {
+    readonly subscriber: string;
+}
+export type SubscriberSubscriptionLookupSuccess = SubscriberSubscriptionLookupWithCurrentService | SubscriberSubscriptionLookupWithoutCurrentService;
+export type SubscriberSubscriptionLookup = PublisherServiceDiscoveryFailure | SubscriberSubscriptionLookupSuccess;
+export interface EventKitHandshakeReadModelOptions {
+    /** Resolves hash-verified acceptance attachments retained by the replay controller. */
+    readonly body?: (hash: string) => Readonly<Record<string, unknown>> | undefined;
+    readonly viewer: StatementGraphViewer;
+}
+export interface PublisherHandshakeQuery {
+    readonly chainId: string;
+    readonly eventKind?: typeof FINALIZED_HEAD_EVENT_KIND;
+    readonly finalizedHead: number;
+    readonly publisher: string;
+    readonly serviceId?: string;
+}
+export interface PublisherAcceptanceCandidateQuery extends PublisherHandshakeQuery {
+    /** Restricts discovery to one finalized Statement Graph claim source. */
+    readonly subscriber?: string;
+    /** Restricts discovery to one stable subscription revision chain. */
+    readonly subscriptionId?: string;
+}
+export interface SubscriberSubscriptionQuery extends PublisherHandshakeQuery {
+    readonly subscriber: string;
+    /** Omit to return every subscription identity owned by `subscriber`. */
+    readonly subscriptionId?: string;
+}
+export interface EventKitHandshakeReadModel {
+    acceptanceCandidates(query: PublisherAcceptanceCandidateQuery): Promise<PublisherAcceptanceCandidateDiscovery>;
+    discoverPublisherService(query: PublisherHandshakeQuery): Promise<PublisherServiceDiscovery>;
+    publisher(query: PublisherHandshakeQuery): Promise<PublisherHandshakeView>;
+    subscriber(query: SubscriberSubscriptionQuery): Promise<SubscriberSubscriptionLookup>;
+}
+export {};
+//# sourceMappingURL=handshakeReadModelTypes.d.ts.map

package/dist/neutral/handshakeReadModelTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshakeReadModelTypes.d.ts","sourceRoot":"","sources":["../../src/handshakeReadModelTypes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,iCAAiC,CAAA;AAC1F,OAAO,KAAK,EACV,yBAAyB,EACzB,yBAAyB,EACzB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,0BAA0B,EAC3B,MAAM,gCAAgC,CAAA;AACvC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAA;AAEnF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;IACjE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,sBAAsB,CAAC,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;IAChB,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAA;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CACjC;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,GAAG,EAAE,sBAAsB,CAAC,sBAAsB,CAAC,CAAA;IAC5D,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC,gBAAgB,CAAC,CAAA;CAC3D;AAED,MAAM,MAAM,sCAAsC,GAC5C,mBAAmB,GACnB,eAAe,GACf,mBAAmB,GACnB,wBAAwB,GACxB,wBAAwB,GACxB,yBAAyB,GACzB,8BAA8B,GAC9B,mBAAmB,GACnB,iBAAiB,GACjB,YAAY,GACZ,kBAAkB,CAAA;AAExB,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IACtC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAA;IAClB,QAAQ,CAAC,MAAM,EAAE,sCAAsC,CAAA;CACxD;AAED,MAAM,MAAM,yBAAyB,GAAG,gCAAgC,GAAG,gCAAgC,CAAA;AAE3G,MAAM,MAAM,gCAAgC,GACtC,eAAe,GACf,sBAAsB,GACtB,uBAAuB,GACvB,qBAAqB,GACrB,iBAAiB,GACjB,wBAAwB,GACxB,2BAA2B,GAC3B,8BAA8B,CAAA;AAEpC,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,WAAW,GAAG,YAAY,CAAC,CAAA;IAC3E,QAAQ,CAAC,MAAM,EAAE,gCAAgC,CAAA;IACjD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC,eAAe,CAAC,CAAA;IACvD,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC,gBAAgB,CAAC,CAAA;IAC1D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC,yBAAyB,CAAC,CAAA;IACxE,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,sBAAsB,EAAE,WAAW,GAAG,YAAY,CAAC,CAAA;CAC9E;AAED,MAAM,MAAM,0BAA0B,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAA;AAE/G,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,UAAU,CAAC,EAAE,sBAAsB,CAAC,0BAA0B,CAAC,CAAA;IACxE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,mCAAmC,GAAG,eAAe,CAAA;IACvE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IACtC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAA;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,MAAM,EAAE,SAAS,0BAA0B,EAAE,CAAA;CACvD;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,EAAE,sBAAsB,CAAC,sBAAsB,CAAC,CAAA;IAC5D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAA;CAC3C;AAED,UAAU,iCAAiC;IACzC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,QAAQ,CAAC,UAAU,EAAE,SAAS,0BAA0B,EAAE,CAAA;IAC1D,QAAQ,CAAC,aAAa,EAAE,SAAS,yBAAyB,EAAE,CAAA;CAC7D;AAED,MAAM,WAAW,wCAAyC,SAAQ,iCAAiC;IACjG,QAAQ,CAAC,uBAAuB,EAAE,IAAI,CAAA;IACtC,QAAQ,CAAC,GAAG,EAAE,sBAAsB,CAAC,sBAAsB,CAAC,CAAA;IAC5D,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC,gBAAgB,CAAC,CAAA;IAC1D,QAAQ,CAAC,gBAAgB,EAAE,gCAAgC,CAAA;CAC5D;AAED,MAAM,WAAW,2CAA4C,SAAQ,iCAAiC;IACpG,QAAQ,CAAC,uBAAuB,EAAE,KAAK,CAAA;IACvC,QAAQ,CAAC,gBAAgB,EAAE,gCAAgC,CAAA;CAC5D;AAED,MAAM,MAAM,6BAA6B,GACnC,wCAAwC,GACxC,2CAA2C,CAAA;AAEjD,MAAM,MAAM,sBAAsB,GAAG,gCAAgC,GAAG,6BAA6B,CAAA;AAErG,MAAM,WAAW,4CAA6C,SAAQ,gCAAgC;IACpG,QAAQ,CAAC,UAAU,EAAE,SAAS,4BAA4B,EAAE,CAAA;IAC5D,QAAQ,CAAC,UAAU,EAAE,SAAS,0BAA0B,EAAE,CAAA;IAC1D,QAAQ,CAAC,aAAa,EAAE,SAAS,yBAAyB,EAAE,CAAA;CAC7D;AAED,MAAM,MAAM,qCAAqC,GAC3C,4CAA4C,GAC5C,gCAAgC,CAAA;AAEtC,MAAM,WAAW,8CAA+C,SAAQ,wCAAwC;IAC9G,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,iDAAkD,SAAQ,2CAA2C;IACpH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,MAAM,mCAAmC,GACzC,8CAA8C,GAC9C,iDAAiD,CAAA;AAEvD,MAAM,MAAM,4BAA4B,GAClC,gCAAgC,GAChC,mCAAmC,CAAA;AAEzC,MAAM,WAAW,iCAAiC;IAChD,uFAAuF;IACvF,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAAA;IAC/E,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAA;CACtC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,yBAAyB,CAAA;IACrD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,iCAAkC,SAAQ,uBAAuB;IAChF,yEAAyE;IACzE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,qEAAqE;IACrE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CACjC;AAED,MAAM,WAAW,2BAA4B,SAAQ,uBAAuB;IAC1E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CACjC;AAED,MAAM,WAAW,0BAA0B;IACzC,oBAAoB,CAAC,KAAK,EAAE,iCAAiC,GAAG,OAAO,CAAC,qCAAqC,CAAC,CAAA;IAC9G,wBAAwB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAA;IAC5F,SAAS,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAA;IAC1E,UAAU,CAAC,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAA;CACtF"}

package/dist/neutral/index.d.ts

@@ -1,3 +1,11 @@
+export { createCheckpointStatementGraphViewer } from './checkpointViewer.ts';
+export { EventKitClaimedObjectSchemas, EventKitClaimedObjectSchemaSet, } from './eventKitSchemaPolicy.ts';
+export type { EventKitReplayCheckpointStore, FinalizedEventKitReplayController, FinalizedEventKitReplayOptions, FinalizedEventKitReplayStatus, } from './finalizedReplayController.ts';
+export { createFinalizedEventKitReplayController, createMemoryEventKitReplayCheckpointStore, } from './finalizedReplayController.ts';
 export type { StatementGraphGrantReadModelOptions } from './grantReadModel.ts';
 export { createStatementGraphGrantReadModel } from './grantReadModel.ts';
+export { createEventKitHandshakeReadModel } from './handshakeReadModel.ts';
+export type { ClaimedHandshakeObject, EventKitHandshakeReadModel, EventKitHandshakeReadModelOptions, FinalizedSubscriptionTuple, HandshakeClaimEvidence, PublisherAcceptanceCandidate, PublisherAcceptanceCandidateDiscovery, PublisherAcceptanceCandidateDiscoverySuccess, PublisherAcceptanceCandidateQuery, PublisherHandshakeQuery, PublisherHandshakeView, PublisherHandshakeViewSuccess, PublisherHandshakeViewWithCurrentService, PublisherHandshakeViewWithoutCurrentService, PublisherServiceDiscovery, PublisherServiceDiscoveryFailure, PublisherServiceDiscoveryFailureReason, PublisherServiceDiscoverySuccess, PublisherSubscriptionView, SubscriberSubscriptionLookup, SubscriberSubscriptionLookupSuccess, SubscriberSubscriptionLookupWithCurrentService, SubscriberSubscriptionLookupWithoutCurrentService, SubscriberSubscriptionQuery, SubscriptionLifecycleState, SubscriptionTupleRejection, SubscriptionTupleRejectionReason, } from './handshakeReadModelTypes.ts';
+export type { EventKitReplayCheckpoint, EventKitReplayCheckpointIdentity, EventKitReplayCheckpointLoad, ReplayBlockedState, ReplayCorruptBody, ResolvedReplayBody, } from './replayCheckpoint.ts';
+export { EVENT_KIT_REPLAY_CHECKPOINT_VERSION, EventKitReplayCheckpointZod, loadEventKitReplayCheckpoint, ReplayBlockedStateZod, ReplayCorruptBodyZod, ResolvedReplayBodyZod, } from './replayCheckpoint.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/neutral/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,mCAAmC,EAAE,MAAM,qBAAqB,CAAA;AAC9E,OAAO,EAAE,kCAAkC,EAAE,MAAM,qBAAqB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,uBAAuB,CAAA;AAC5E,OAAO,EACL,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,6BAA6B,EAC7B,iCAAiC,EACjC,8BAA8B,EAC9B,6BAA6B,GAC9B,MAAM,gCAAgC,CAAA;AACvC,OAAO,EACL,uCAAuC,EACvC,yCAAyC,GAC1C,MAAM,gCAAgC,CAAA;AACvC,YAAY,EAAE,mCAAmC,EAAE,MAAM,qBAAqB,CAAA;AAC9E,OAAO,EAAE,kCAAkC,EAAE,MAAM,qBAAqB,CAAA;AACxE,OAAO,EAAE,gCAAgC,EAAE,MAAM,yBAAyB,CAAA;AAC1E,YAAY,EACV,sBAAsB,EACtB,0BAA0B,EAC1B,iCAAiC,EACjC,0BAA0B,EAC1B,sBAAsB,EACtB,4BAA4B,EAC5B,qCAAqC,EACrC,4CAA4C,EAC5C,iCAAiC,EACjC,uBAAuB,EACvB,sBAAsB,EACtB,6BAA6B,EAC7B,wCAAwC,EACxC,2CAA2C,EAC3C,yBAAyB,EACzB,gCAAgC,EAChC,sCAAsC,EACtC,gCAAgC,EAChC,yBAAyB,EACzB,4BAA4B,EAC5B,mCAAmC,EACnC,8CAA8C,EAC9C,iDAAiD,EACjD,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,8BAA8B,CAAA;AACrC,YAAY,EACV,wBAAwB,EACxB,gCAAgC,EAChC,4BAA4B,EAC5B,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,mCAAmC,EACnC,2BAA2B,EAC3B,4BAA4B,EAC5B,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,uBAAuB,CAAA"}