@xyo-network/service-kit-protocol 0.2.0 → 0.2.2

package/README.md

@@ -95,3 +95,20 @@ Missing content is unavailable, not proof of nonexistence or revocation.
 See the [normative contract](../../papers/B1_PUBLIC_OBJECT_RESOLUTION.md) and
 [verification status](../../docs/IMPLEMENTATION_STATUS.md) for the exact B1
 boundary, dated verification results and remaining broader work.
+
+## Local B4 primitives
+
+The unpublished local 0.2.1 candidate additionally exports `verifyFleetPayload`
+and `resolveFleetPayload` for original SDK-root verification and configured
+bounded content resolution; `foldFleetControls`/`matchFleetPublisher` for a pure
+caller-validated lifecycle fold; and `createLocalFleetConfigurationStore` for
+volatile opaque private provision. These surfaces do not change B1's data-hash
+contract. The fold reports `validated-input-only`, without authenticated carrying
+correspondence or complete finalized history. Private acknowledgments report
+`private-provision-only` and confer no publication grant. See the
+[selected local profiles and gate results](../../docs/B4_LOCAL_PRIMITIVES_2026-10-11.md).
+Authenticated composition belongs to the existing XL1 adapter under its
+[selected local profile](../../docs/B4_AUTHENTICATED_LOCAL_PROFILE_2026-10-11.md).
+The supported strict public profiles are Node and browser; supplemental ES-only
+dependency diagnostics remain an unsupported baseline. These protocol primitives
+retain their narrower assurances. This candidate is unpublished and local.

package/dist/neutral/fleetConfiguration.d.ts

@@ -0,0 +1,32 @@
+export interface LocalFleetConfigurationProfile {
+    readonly fleetRoot: string;
+    readonly maxConfigurationBytes: number;
+    readonly maxMembers: number;
+    readonly maxRevisionBytes: number;
+    readonly maxTotalBytes: number;
+    readonly owner: string;
+}
+export interface OpaqueFleetConfiguration {
+    readonly bytes: Uint8Array;
+    readonly memberRoot: string;
+    readonly revision: string;
+}
+export interface FleetConfigurationAcknowledgment {
+    readonly assurance: 'private-provision-only';
+    readonly memberRoot: string;
+    readonly revision: string;
+    readonly status: 'acknowledged' | 'stale' | 'missing';
+}
+export interface LocalFleetConfigurationStore {
+    acknowledge(memberRoot: string, revision: string): FleetConfigurationAcknowledgment;
+    acknowledgment(memberRoot: string): FleetConfigurationAcknowledgment | undefined;
+    /** Return an independent opaque byte copy. No parser or public authority is applied. */
+    provide(memberRoot: string): OpaqueFleetConfiguration | undefined;
+    provision(configuration: OpaqueFleetConfiguration): void;
+}
+/**
+ * Volatile one-realm private provision profile. The configured local manager controls calls;
+ * it is not a remote authentication protocol, a public grant, or a persistent backend.
+ */
+export declare function createLocalFleetConfigurationStore(configurationProfile: LocalFleetConfigurationProfile): LocalFleetConfigurationStore;
+//# sourceMappingURL=fleetConfiguration.d.ts.map

package/dist/neutral/fleetConfiguration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleetConfiguration.d.ts","sourceRoot":"","sources":["../../src/fleetConfiguration.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAA;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AACD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AACD,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAA;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,GAAG,SAAS,CAAA;CACtD;AACD,MAAM,WAAW,4BAA4B;IAC3C,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,gCAAgC,CAAA;IACnF,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,gCAAgC,GAAG,SAAS,CAAA;IAChF,wFAAwF;IACxF,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAAA;IACjE,SAAS,CAAC,aAAa,EAAE,wBAAwB,GAAG,IAAI,CAAA;CACzD;AA+CD;;;GAGG;AACH,wBAAgB,kCAAkC,CAAC,oBAAoB,EAAE,8BAA8B,GAAG,4BAA4B,CA8CrI"}

package/dist/neutral/fleetFold.d.ts

@@ -0,0 +1,77 @@
+import type { FleetControl, FleetPayload } from '@xyo-network/service-kit-schemas';
+import type { VerificationLimits } from './types.js';
+export interface FleetFoldLimits extends VerificationLimits {
+    readonly maxControls: number;
+    readonly maxDeclarations: number;
+    readonly maxGrants: number;
+    readonly maxMembers: number;
+}
+export interface FleetDeclarationFact {
+    readonly payload: Readonly<FleetPayload>;
+    readonly root: string;
+}
+/** Caller-validated native occurrence facts. This interface itself proves no signatures or completeness. */
+export interface FleetControlFact extends FleetDeclarationFact {
+    readonly authorizer: string;
+    readonly block: number;
+    readonly chainId: string;
+    readonly payload: Readonly<FleetControl>;
+    readonly payloadIndex: number;
+    readonly transactionIndex: number;
+}
+export interface FoldFleetControlsOptions {
+    readonly chainId: string;
+    readonly controls: readonly FleetControlFact[];
+    readonly declarations: readonly FleetDeclarationFact[];
+    readonly fleetRoot: string;
+    readonly genesisRoot: string;
+    readonly limits: FleetFoldLimits;
+    readonly owner: string;
+    readonly publicationBlock: number;
+    readonly signal?: AbortSignal;
+}
+export interface FleetMemberState {
+    readonly active: boolean;
+    readonly roleId: string;
+    readonly root: string;
+}
+export interface FleetGrantState {
+    readonly controlRoot: string;
+    readonly expiresAtBlock?: number;
+    readonly memberRoot: string;
+    readonly publisherAddress: string;
+    readonly scopeRoot: string;
+}
+export interface FoldedFleetView {
+    readonly assurance: 'validated-input-only';
+    readonly chainId: string;
+    readonly fleetActive: boolean;
+    readonly fleetRoot: string;
+    readonly genesisRoot: string;
+    readonly grants: readonly FleetGrantState[];
+    readonly headRoot?: string;
+    readonly members: readonly FleetMemberState[];
+    readonly owner: string;
+    readonly publicationBlock: number;
+    readonly status: 'folded';
+}
+export interface FleetFoldFailure {
+    readonly assurance: 'validated-input-only';
+    readonly reason: 'resource-limit' | 'missing-declaration' | 'invalid-input' | 'invalid-transition' | 'missing-predecessor' | 'bootstrap' | 'successor' | 'definition' | 'cancelled';
+    readonly status: 'incomplete' | 'conflict' | 'unsupported' | 'aborted';
+}
+export type FleetFoldResult = FoldedFleetView | FleetFoldFailure;
+/**
+ * Pure B4 lifecycle fold of caller-validated facts. It never claims authenticated or complete history.
+ * A native finalized-evidence composition must prove original root/signature/carrying correspondence,
+ * every height's fork identity, the exact anchor and complete enumeration before using it as authority.
+ */
+export declare function foldFleetControls(options: FoldFleetControlsOptions): FleetFoldResult;
+export interface FleetPublisherMatch {
+    readonly assurance: 'validated-input-only';
+    readonly grant?: FleetGrantState;
+    readonly status: 'matched' | 'absent' | 'conflict';
+}
+/** Match only within the supplied fold; this supplies no public authorization or completeness claim. */
+export declare function matchFleetPublisher(view: FoldedFleetView, scopeRoot: string, publisherAddress: string): FleetPublisherMatch;
+//# sourceMappingURL=fleetFold.d.ts.map

package/dist/neutral/fleetFold.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleetFold.d.ts","sourceRoot":"","sources":["../../src/fleetFold.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EAAe,YAAY,EACxC,MAAM,kCAAkC,CAAA;AAQzC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAEpD,MAAM,WAAW,eAAgB,SAAQ,kBAAkB;IACzD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AACD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAA;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AACD,4GAA4G;AAC5G,MAAM,WAAW,gBAAiB,SAAQ,oBAAoB;IAC5D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAA;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;CAClC;AACD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAA;IAC9C,QAAQ,CAAC,YAAY,EAAE,SAAS,oBAAoB,EAAE,CAAA;IACtD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AACD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AACD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AACD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAA;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAA;IAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAA;IAC7C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;CAC1B;AACD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAA;IAC1C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,qBAAqB,GAAG,eAAe,GAAG,oBAAoB,GAAG,qBAAqB,GAAG,WAAW,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,CAAA;IACnL,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,UAAU,GAAG,aAAa,GAAG,SAAS,CAAA;CACvE;AACD,MAAM,MAAM,eAAe,GAAG,eAAe,GAAG,gBAAgB,CAAA;AAwLhE;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,eAAe,CAqBpF;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAA;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAA;CACnD;AACD,wGAAwG;AACxG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,mBAAmB,CAU3H"}

package/dist/neutral/fleetSignal.d.ts

@@ -0,0 +1,5 @@
+/** Native-brand admission without consulting shadowable caller instance properties. */
+export declare function captureFleetSignal(value: unknown): AbortSignal | undefined;
+export declare function fleetSignalAborted(signal: AbortSignal): boolean;
+export declare function listenFleetAbort(signal: AbortSignal | undefined, listener: () => void): () => void;
+//# sourceMappingURL=fleetSignal.d.ts.map

package/dist/neutral/fleetSignal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleetSignal.d.ts","sourceRoot":"","sources":["../../src/fleetSignal.ts"],"names":[],"mappings":"AAOA,uFAAuF;AACvF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,CAK1E;AACD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAG/D;AACD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAMlG"}

package/dist/neutral/index.d.ts

@@ -1,5 +1,9 @@
+export * from './fleetConfiguration.js';
+export * from './fleetFold.js';
 export { DEFAULT_RESOLUTION_LIMITS, DEFAULT_VERIFICATION_LIMITS } from './limits.js';
+export * from './resolveFleetPayload.js';
 export { resolveObject } from './resolveObject.js';
 export type { AbortedResolution, AttemptStatus, ConfiguredSeed, ContentPayload, InvalidObject, JsonObject, JsonValue, ObjectResolutionResult, ObjectVerificationFailureReason, ObjectVerificationResult, PublicObjectReader, PublicObjectReadOptions, ResolutionAttempt, ResolutionLimits, ResolvedObject, ResolveObjectOptions, UnavailableObject, VerificationLimits, VerifiedObject, } from './types.js';
+export * from './verifyFleetPayload.js';
 export { verifyObject } from './verifyObject.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/neutral/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAA;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,cAAc,EACd,aAAa,EACb,UAAU,EACV,SAAS,EACT,sBAAsB,EACtB,+BAA+B,EAC/B,wBAAwB,EACxB,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,GACf,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAA;AACvC,cAAc,gBAAgB,CAAA;AAC9B,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAA;AACpF,cAAc,0BAA0B,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,cAAc,EACd,aAAa,EACb,UAAU,EACV,SAAS,EACT,sBAAsB,EACtB,+BAA+B,EAC/B,wBAAwB,EACxB,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,GACf,MAAM,YAAY,CAAA;AACnB,cAAc,yBAAyB,CAAA;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/neutral/index.mjs

@@ -1,90 +1,5 @@
-// src/limits.ts
-var MAX_TIMER_DELAY_MS = 2147483647;
-var DEFAULT_VERIFICATION_LIMITS = Object.freeze({
-  maxBodyBytes: 65536,
-  maxDepth: 32,
-  maxNodes: 1e4
-});
-var DEFAULT_RESOLUTION_LIMITS = Object.freeze({
-  ...DEFAULT_VERIFICATION_LIMITS,
-  maxSeeds: 16,
-  maxCandidatesPerSeed: 16,
-  attemptTimeoutMs: 2e3,
-  totalTimeoutMs: 1e4
-});
-function positiveInteger(value, name) {
-  if (!Number.isSafeInteger(value) || value <= 0) {
-    throw new RangeError(name + " must be a positive safe integer");
-  }
-}
-function verificationLimits(options = {}) {
-  const limits = { ...DEFAULT_VERIFICATION_LIMITS, ...options };
-  positiveInteger(limits.maxBodyBytes, "maxBodyBytes");
-  positiveInteger(limits.maxDepth, "maxDepth");
-  positiveInteger(limits.maxNodes, "maxNodes");
-  return Object.freeze(limits);
-}
-function resolutionLimits(options = {}) {
-  const limits = { ...DEFAULT_RESOLUTION_LIMITS, ...options };
-  verificationLimits(limits);
-  positiveInteger(limits.maxSeeds, "maxSeeds");
-  positiveInteger(limits.maxCandidatesPerSeed, "maxCandidatesPerSeed");
-  positiveInteger(limits.attemptTimeoutMs, "attemptTimeoutMs");
-  positiveInteger(limits.totalTimeoutMs, "totalTimeoutMs");
-  if (limits.attemptTimeoutMs > MAX_TIMER_DELAY_MS || limits.totalTimeoutMs > MAX_TIMER_DELAY_MS) {
-    throw new RangeError("Timeouts must fit a signed 32-bit millisecond timer");
-  }
-  return Object.freeze(limits);
-}
-
-// src/resolveObject.ts
-import { ObjectReferenceZod as ObjectReferenceZod2 } from "@xyo-network/service-kit-schemas";
-
-// src/clock.ts
-function monotonicClock() {
-  const clock = "performance" in globalThis ? globalThis.performance : void 0;
-  if (typeof clock !== "object" || clock === null || !("now" in clock) || typeof clock.now !== "function") {
-    throw new TypeError("Object resolution requires performance.now()");
-  }
-  const read = clock.now.bind(clock);
-  return () => {
-    const now = read();
-    if (typeof now !== "number" || !Number.isFinite(now)) throw new TypeError("Invalid monotonic clock");
-    return now;
-  };
-}
-function scheduleDeadline(now, deadline, expired) {
-  let cancelled = false;
-  let timer;
-  const tick = () => {
-    if (cancelled) return;
-    if (now() >= deadline) {
-      cancelled = true;
-      expired();
-    } else {
-      arm();
-    }
-  };
-  const arm = () => {
-    const delay = Math.min(MAX_TIMER_DELAY_MS, Math.max(1, Math.ceil(deadline - now())));
-    timer = setTimeout(tick, delay);
-  };
-  arm();
-  return () => {
-    cancelled = true;
-    clearTimeout(timer);
-  };
-}
-
-// src/verifyObject.ts
-import { isAnyPayload, PayloadBuilder } from "@xyo-network/sdk-protocol";
-import {
-  DataLakeLocatorSchema,
-  DataLakeLocatorZod,
-  ObjectReferenceZod,
-  ServiceAdvertisementSchema,
-  ServiceAdvertisementZod
-} from "@xyo-network/service-kit-schemas";
+// src/fleetConfiguration.ts
+import { AddressZod, HashZod } from "@xyo-network/service-kit-schemas";
 
 // src/jsonSnapshot.ts
 var ObjectInputError = class extends Error {
@@ -185,7 +100,603 @@ function snapshotJson(candidate, limits) {
   }, 0);
 }
 
+// src/fleetConfiguration.ts
+function selectedProfile(configuration) {
+  const profile = snapshotJson(configuration, {
+    maxBodyBytes: 1024,
+    maxDepth: 2,
+    maxNodes: 16
+  });
+  const keys = ["fleetRoot", "maxConfigurationBytes", "maxMembers", "maxRevisionBytes", "maxTotalBytes", "owner"];
+  if (Object.keys(profile).toSorted().join(",") !== keys.join(",")) throw new TypeError("Select a strict complete private configuration profile");
+  AddressZod.parse(profile.owner);
+  HashZod.parse(profile.fleetRoot);
+  for (const value of [profile.maxConfigurationBytes, profile.maxMembers, profile.maxRevisionBytes, profile.maxTotalBytes]) {
+    if (!Number.isSafeInteger(value) || value <= 0) throw new RangeError("Select finite positive private configuration limits");
+  }
+  if (profile.maxConfigurationBytes > profile.maxTotalBytes) throw new RangeError("Configuration cap must fit total storage cap");
+  return Object.freeze({ ...profile });
+}
+function pinConfiguration(configuration) {
+  const keys = ["bytes", "memberRoot", "revision"];
+  if (Reflect.ownKeys(configuration).length !== keys.length) throw new TypeError("Opaque provision requires a closed data record");
+  const values = {};
+  for (const key of keys) {
+    const property = Object.getOwnPropertyDescriptor(configuration, key);
+    if (property?.enumerable !== true || !("value" in property)) throw new TypeError("Opaque provision requires own data properties");
+    values[key] = property.value;
+  }
+  return Object.freeze(values);
+}
+function copyBytes(bytes, maxBytes) {
+  if (!(bytes instanceof Uint8Array) || Object.getPrototypeOf(bytes) !== Uint8Array.prototype) throw new TypeError("Opaque configuration must be plain Uint8Array");
+  if (bytes.byteLength > maxBytes) throw new RangeError("Opaque configuration exceeds selected cap");
+  return Uint8Array.from(bytes);
+}
+var encoder2 = new TextEncoder();
+function checkRevision(revision, maximum) {
+  if (typeof revision !== "string" || revision.length === 0 || revision.length > maximum || encoder2.encode(revision).byteLength > maximum) {
+    throw new RangeError("Opaque revision must fit its selected byte cap");
+  }
+}
+function sameBytes(left, right) {
+  return left.length === right.length && left.every((value, index) => value === right[index]);
+}
+function createLocalFleetConfigurationStore(configurationProfile) {
+  const profile = selectedProfile(configurationProfile);
+  const desired = /* @__PURE__ */ new Map();
+  const received = /* @__PURE__ */ new Map();
+  let totalBytes = 0;
+  const provide = (memberRoot) => {
+    HashZod.parse(memberRoot);
+    const current = desired.get(memberRoot);
+    return current === void 0 ? void 0 : Object.freeze({
+      memberRoot,
+      revision: current.revision,
+      bytes: Uint8Array.from(current.bytes)
+    });
+  };
+  const provision = (input) => {
+    const configuration = pinConfiguration(input);
+    HashZod.parse(configuration.memberRoot);
+    checkRevision(configuration.revision, profile.maxRevisionBytes);
+    const bytes = copyBytes(configuration.bytes, profile.maxConfigurationBytes);
+    const prior = desired.get(configuration.memberRoot);
+    if (prior?.revision === configuration.revision && !sameBytes(prior.bytes, bytes)) throw new TypeError("An opaque revision cannot name different bytes");
+    if (prior === void 0 && desired.size >= profile.maxMembers) throw new RangeError("Private member capacity exceeded");
+    const nextBytes = totalBytes - (prior?.bytes.byteLength ?? 0) + bytes.byteLength;
+    if (nextBytes > profile.maxTotalBytes) throw new RangeError("Private storage capacity exceeded");
+    if (prior?.revision !== configuration.revision) received.delete(configuration.memberRoot);
+    desired.set(configuration.memberRoot, { revision: configuration.revision, bytes });
+    totalBytes = nextBytes;
+  };
+  const acknowledge = (memberRoot, revision) => {
+    HashZod.parse(memberRoot);
+    checkRevision(revision, profile.maxRevisionBytes);
+    const current = desired.get(memberRoot);
+    const status = current === void 0 ? "missing" : current.revision === revision ? "acknowledged" : "stale";
+    const result = Object.freeze({
+      status,
+      assurance: "private-provision-only",
+      memberRoot,
+      revision
+    });
+    if (status === "acknowledged") received.set(memberRoot, result);
+    return result;
+  };
+  const acknowledgment = (memberRoot) => {
+    HashZod.parse(memberRoot);
+    return received.get(memberRoot);
+  };
+  return Object.freeze({
+    provide,
+    provision,
+    acknowledge,
+    acknowledgment
+  });
+}
+
+// src/fleetFold.ts
+import {
+  AddressZod as AddressZod2,
+  ChainIdZod,
+  FleetControlSchema,
+  FleetControlZod,
+  FleetMemberZod,
+  FleetPublicationScopeZod,
+  FleetZod,
+  HashZod as HashZod2,
+  parseFleetPayload
+} from "@xyo-network/service-kit-schemas";
+
+// src/fleetSignal.ts
+var abortedDescriptor = Object.getOwnPropertyDescriptor(AbortSignal.prototype, "aborted");
+var abortedGetter = Reflect.get(abortedDescriptor ?? {}, "get");
+var nativeEvents = EventTarget.prototype;
+var addListener = nativeEvents.addEventListener;
+var removeListener = nativeEvents.removeEventListener;
+var apply = Reflect.apply;
+function captureFleetSignal(value) {
+  if (value === void 0) return;
+  if (typeof abortedGetter !== "function") throw new TypeError("Native AbortSignal is required");
+  apply(abortedGetter, value, []);
+  return value;
+}
+function fleetSignalAborted(signal) {
+  if (typeof abortedGetter !== "function") throw new TypeError("Native AbortSignal is required");
+  return apply(abortedGetter, signal, []);
+}
+function listenFleetAbort(signal, listener) {
+  if (signal === void 0) return () => {
+  };
+  apply(addListener, signal, ["abort", listener, { once: true }]);
+  return () => {
+    apply(removeListener, signal, ["abort", listener]);
+  };
+}
+
+// src/limits.ts
+var MAX_TIMER_DELAY_MS = 2147483647;
+var DEFAULT_VERIFICATION_LIMITS = Object.freeze({
+  maxBodyBytes: 65536,
+  maxDepth: 32,
+  maxNodes: 1e4
+});
+var DEFAULT_RESOLUTION_LIMITS = Object.freeze({
+  ...DEFAULT_VERIFICATION_LIMITS,
+  maxSeeds: 16,
+  maxCandidatesPerSeed: 16,
+  attemptTimeoutMs: 2e3,
+  totalTimeoutMs: 1e4
+});
+function positiveInteger(value, name) {
+  if (!Number.isSafeInteger(value) || value <= 0) {
+    throw new RangeError(name + " must be a positive safe integer");
+  }
+}
+function verificationLimits(options = {}) {
+  const limits = { ...DEFAULT_VERIFICATION_LIMITS, ...options };
+  positiveInteger(limits.maxBodyBytes, "maxBodyBytes");
+  positiveInteger(limits.maxDepth, "maxDepth");
+  positiveInteger(limits.maxNodes, "maxNodes");
+  return Object.freeze(limits);
+}
+function resolutionLimits(options = {}) {
+  const limits = { ...DEFAULT_RESOLUTION_LIMITS, ...options };
+  verificationLimits(limits);
+  positiveInteger(limits.maxSeeds, "maxSeeds");
+  positiveInteger(limits.maxCandidatesPerSeed, "maxCandidatesPerSeed");
+  positiveInteger(limits.attemptTimeoutMs, "attemptTimeoutMs");
+  positiveInteger(limits.totalTimeoutMs, "totalTimeoutMs");
+  if (limits.attemptTimeoutMs > MAX_TIMER_DELAY_MS || limits.totalTimeoutMs > MAX_TIMER_DELAY_MS) {
+    throw new RangeError("Timeouts must fit a signed 32-bit millisecond timer");
+  }
+  return Object.freeze(limits);
+}
+
+// src/fleetFold.ts
+function failure(status, reason) {
+  return Object.freeze({
+    status,
+    reason,
+    assurance: "validated-input-only"
+  });
+}
+function safeBlock(value) {
+  return Number.isSafeInteger(value) && value >= 0;
+}
+function selectedLimits(limits) {
+  const pinned = snapshotJson(limits, {
+    maxBodyBytes: 1024,
+    maxDepth: 2,
+    maxNodes: 16
+  });
+  const keys = ["maxBodyBytes", "maxControls", "maxDeclarations", "maxDepth", "maxGrants", "maxMembers", "maxNodes"];
+  if (Object.keys(pinned).toSorted().join(",") !== keys.join(",")) throw new TypeError("Select a strict complete fleet fold profile");
+  verificationLimits(pinned);
+  for (const value of [pinned.maxControls, pinned.maxDeclarations, pinned.maxGrants, pinned.maxMembers]) {
+    if (!Number.isSafeInteger(value) || value <= 0) throw new RangeError("Select finite positive fold limits");
+  }
+  return Object.freeze({ ...pinned });
+}
+function boundedSlots(values, maximum) {
+  if (!Array.isArray(values) || values.length > maximum) throw new RangeError("Fleet input exceeds selected limit");
+  return Object.freeze(Array.from({ length: values.length }, (_, index) => {
+    const descriptor = Object.getOwnPropertyDescriptor(values, String(index));
+    if (descriptor?.enumerable !== true || !("value" in descriptor)) throw new TypeError("Fleet inputs require dense own data slots");
+    return descriptor.value;
+  }));
+}
+function declarationMap(facts, limits) {
+  const declarations = /* @__PURE__ */ new Map();
+  for (const input of facts) {
+    const fact = snapshotJson(input, limits);
+    HashZod2.parse(fact.root);
+    const payload = parseFleetPayload(fact.payload);
+    if (payload === void 0 || payload.schema === FleetControlSchema || declarations.has(fact.root)) throw new TypeError("Invalid fleet declaration fact");
+    declarations.set(fact.root, payload);
+  }
+  return declarations;
+}
+function positionAfter(left, right) {
+  return left.block > right.block || left.block === right.block && (left.transactionIndex > right.transactionIndex || left.transactionIndex === right.transactionIndex && left.payloadIndex > right.payloadIndex);
+}
+function controlFact(fact, limits) {
+  const pinned = snapshotJson(fact, limits);
+  const isValidPosition = safeBlock(pinned.block) && safeBlock(pinned.transactionIndex) && safeBlock(pinned.payloadIndex);
+  const hasCanonicalLabels = AddressZod2.safeParse(pinned.authorizer).success && ChainIdZod.safeParse(pinned.chainId).success && HashZod2.safeParse(pinned.root).success;
+  if (!isValidPosition || !hasCanonicalLabels) return;
+  const parsed = FleetControlZod.safeParse(pinned.payload);
+  return parsed.success ? { ...pinned, payload: parsed.data } : void 0;
+}
+function member(state, root, fleetRoot) {
+  const parsed = FleetMemberZod.safeParse(state.declarations.get(root));
+  return parsed.success && parsed.data.fleetRoot === fleetRoot ? parsed.data : void 0;
+}
+function scope(state, root, fleetRoot) {
+  const parsed = FleetPublicationScopeZod.safeParse(state.declarations.get(root));
+  return parsed.success && parsed.data.fleetRoot === fleetRoot ? parsed.data : void 0;
+}
+function clearMemberGrants(state, memberRoot) {
+  for (const [key, grant] of state.grants) {
+    if (grant.memberRoot === memberRoot) state.grants.delete(key);
+  }
+}
+function grantKey(payload) {
+  return `${payload.memberRoot}:${payload.scopeRoot}:${payload.publisherAddress}`;
+}
+function changeMember(state, payload, limits) {
+  if (member(state, payload.memberRoot, payload.fleetRoot) === void 0) return failure("incomplete", "missing-declaration");
+  if (payload.operation === "activate-member" && !state.active) return failure("incomplete", "invalid-transition");
+  state.members.set(payload.memberRoot, payload.operation === "activate-member");
+  if (state.members.size > limits.maxMembers) return failure("incomplete", "resource-limit");
+  if (payload.operation === "remove-member") clearMemberGrants(state, payload.memberRoot);
+}
+function changeGrant(state, fact, payload, limits) {
+  const selectedMember = member(state, payload.memberRoot, payload.fleetRoot);
+  const selectedScope = scope(state, payload.scopeRoot, payload.fleetRoot);
+  if (selectedMember === void 0 || selectedScope === void 0) return failure("incomplete", "missing-declaration");
+  if (selectedMember.roleId !== selectedScope.roleId) return failure("incomplete", "invalid-transition");
+  const key = grantKey(payload);
+  if (payload.operation === "remove-publisher") {
+    state.grants.delete(key);
+    return;
+  }
+  if (!state.active || state.members.get(payload.memberRoot) !== true) return failure("incomplete", "invalid-transition");
+  const activation = fact.block + 1;
+  if (!Number.isSafeInteger(activation) || payload.expiresAtBlock !== void 0 && payload.expiresAtBlock <= activation) {
+    return failure("incomplete", "invalid-transition");
+  }
+  state.grants.set(key, Object.freeze({
+    memberRoot: payload.memberRoot,
+    scopeRoot: payload.scopeRoot,
+    publisherAddress: payload.publisherAddress,
+    controlRoot: fact.root,
+    ...payload.expiresAtBlock !== void 0 && { expiresAtBlock: payload.expiresAtBlock }
+  }));
+  if (state.grants.size > limits.maxGrants) return failure("incomplete", "resource-limit");
+}
+function applyControl(state, fact, limits) {
+  const payload = fact.payload;
+  switch (payload.operation) {
+    case "activate-fleet": {
+      state.active = true;
+      return;
+    }
+    case "remove-fleet": {
+      state.active = false;
+      state.grants.clear();
+      return;
+    }
+    case "activate-member":
+    case "remove-member": {
+      return changeMember(state, payload, limits);
+    }
+    case "grant-publisher":
+    case "remove-publisher": {
+      return changeGrant(state, fact, payload, limits);
+    }
+  }
+}
+function advance(state, fact, limits) {
+  if (state.seen.has(fact.root)) return;
+  const previous = fact.payload.previousControlRoot;
+  if (state.head === void 0 && (previous !== void 0 || fact.payload.operation !== "activate-fleet")) return failure("incomplete", "missing-predecessor");
+  if (previous === void 0 && state.head !== void 0) return failure("conflict", "bootstrap");
+  if (state.head !== void 0 && previous !== state.head) {
+    return state.seen.has(previous ?? "") ? failure("conflict", "successor") : failure("incomplete", "missing-predecessor");
+  }
+  const error = applyControl(state, fact, limits);
+  if (error !== void 0) return error;
+  state.head = fact.root;
+  state.seen.add(fact.root);
+}
+function foldedView(state, options) {
+  const members = [...state.members].map(([root, active]) => {
+    const declaration = member(state, root, options.fleetRoot);
+    if (declaration === void 0) throw new TypeError("Missing applied member");
+    return Object.freeze({
+      root,
+      active,
+      roleId: declaration.roleId
+    });
+  });
+  const grants = state.grants.values().filter((grant) => grant.expiresAtBlock === void 0 || options.publicationBlock < grant.expiresAtBlock).toArray();
+  return Object.freeze({
+    status: "folded",
+    assurance: "validated-input-only",
+    owner: options.owner,
+    fleetRoot: options.fleetRoot,
+    chainId: options.chainId,
+    genesisRoot: options.genesisRoot,
+    publicationBlock: options.publicationBlock,
+    fleetActive: state.active,
+    ...state.head !== void 0 && { headRoot: state.head },
+    members: Object.freeze(members),
+    grants: Object.freeze(grants)
+  });
+}
+function foldFacts(state, facts, options, limits) {
+  let previous;
+  for (const input of facts) {
+    if (options.signal !== void 0 && fleetSignalAborted(options.signal)) return failure("aborted", "cancelled");
+    const fact = controlFact(input, limits);
+    if (fact === void 0) return failure("unsupported", "definition");
+    if (fact.block > options.publicationBlock || previous !== void 0 && !positionAfter(fact, previous)) return failure("incomplete", "invalid-input");
+    previous = fact;
+    if (fact.chainId !== options.chainId || fact.authorizer !== options.owner || fact.payload.fleetRoot !== options.fleetRoot || fact.block === options.publicationBlock) continue;
+    const error = advance(state, fact, limits);
+    if (error !== void 0) return error;
+  }
+  return foldedView(state, options);
+}
+function foldFleetControls(options) {
+  const limits = selectedLimits(options.limits);
+  const signal = captureFleetSignal(options.signal);
+  AddressZod2.parse(options.owner);
+  HashZod2.parse(options.fleetRoot);
+  HashZod2.parse(options.genesisRoot);
+  ChainIdZod.parse(options.chainId);
+  if (!safeBlock(options.publicationBlock)) throw new RangeError("Publication block must be a nonnegative safe integer");
+  if (options.signal !== void 0 && fleetSignalAborted(options.signal)) return failure("aborted", "cancelled");
+  try {
+    const declarations = declarationMap(boundedSlots(options.declarations, limits.maxDeclarations), limits);
+    const fleet = FleetZod.safeParse(declarations.get(options.fleetRoot));
+    if (!fleet.success) return failure("incomplete", "missing-declaration");
+    if (fleet.data.owner !== options.owner) return failure("incomplete", "invalid-input");
+    const state = {
+      active: false,
+      declarations,
+      grants: /* @__PURE__ */ new Map(),
+      members: /* @__PURE__ */ new Map(),
+      seen: /* @__PURE__ */ new Set()
+    };
+    return foldFacts(state, boundedSlots(options.controls, limits.maxControls), { ...options, signal }, limits);
+  } catch (error) {
+    return failure("incomplete", error instanceof RangeError ? "resource-limit" : "invalid-input");
+  }
+}
+function matchFleetPublisher(view, scopeRoot, publisherAddress) {
+  HashZod2.parse(scopeRoot);
+  AddressZod2.parse(publisherAddress);
+  const matching = view.fleetActive ? view.grants.filter((grant) => grant.scopeRoot === scopeRoot && grant.publisherAddress === publisherAddress) : [];
+  if (matching.length > 1) return Object.freeze({ status: "conflict", assurance: "validated-input-only" });
+  return matching.length === 0 ? Object.freeze({ status: "absent", assurance: "validated-input-only" }) : Object.freeze({
+    status: "matched",
+    assurance: "validated-input-only",
+    grant: matching[0]
+  });
+}
+
+// src/resolveFleetPayload.ts
+import { HashZod as HashZod4 } from "@xyo-network/service-kit-schemas";
+
+// src/clock.ts
+function monotonicClock() {
+  const clock = "performance" in globalThis ? globalThis.performance : void 0;
+  if (typeof clock !== "object" || clock === null || !("now" in clock) || typeof clock.now !== "function") {
+    throw new TypeError("Object resolution requires performance.now()");
+  }
+  const read = clock.now.bind(clock);
+  return () => {
+    const now = read();
+    if (typeof now !== "number" || !Number.isFinite(now)) throw new TypeError("Invalid monotonic clock");
+    return now;
+  };
+}
+function scheduleDeadline(now, deadline, expired) {
+  let cancelled = false;
+  let timer;
+  const tick = () => {
+    if (cancelled) return;
+    if (now() >= deadline) {
+      cancelled = true;
+      expired();
+    } else {
+      arm();
+    }
+  };
+  const arm = () => {
+    const delay = Math.min(MAX_TIMER_DELAY_MS, Math.max(1, Math.ceil(deadline - now())));
+    timer = setTimeout(tick, delay);
+  };
+  arm();
+  return () => {
+    cancelled = true;
+    clearTimeout(timer);
+  };
+}
+
+// src/verifyFleetPayload.ts
+import { isAnyPayload, PayloadBuilder } from "@xyo-network/sdk-protocol";
+import {
+  FLEET_PAYLOAD_VERSION,
+  HashZod as HashZod3,
+  parseFleetPayload as parseFleetPayload2
+} from "@xyo-network/service-kit-schemas";
+async function verifyFleetPayload(root, family, candidate, options = {}) {
+  HashZod3.parse(root);
+  const limits = verificationLimits(options);
+  try {
+    const snapshot = snapshotJson(candidate, limits);
+    if (snapshot === null || typeof snapshot !== "object" || Array.isArray(snapshot) || !isAnyPayload(snapshot)) {
+      return Object.freeze({ status: "invalid", reason: "invalid-envelope" });
+    }
+    if (await PayloadBuilder.hash(snapshot) !== root) return Object.freeze({ status: "invalid", reason: "hash-mismatch" });
+    if (snapshot.schema !== family) return Object.freeze({ status: "unsupported", reason: "family" });
+    if (snapshot.$version !== FLEET_PAYLOAD_VERSION) return Object.freeze({ status: "unsupported", reason: "version" });
+    const body = PayloadBuilder.omitStorageMeta(snapshot);
+    if (parseFleetPayload2(body) === void 0) return Object.freeze({ status: "invalid", reason: "invalid-envelope" });
+    return Object.freeze({
+      status: "verified",
+      assurance: "sdk-root-verified",
+      root,
+      nativePayload: snapshot,
+      payload: snapshotJson(body, limits)
+    });
+  } catch (error) {
+    const reason = error instanceof ObjectInputError && (error.reason === "body-too-large" || error.reason === "structure-limit") ? error.reason : "invalid-json";
+    return Object.freeze({ status: "invalid", reason });
+  }
+}
+
+// src/resolveFleetPayload.ts
+function pinSeeds(value, maxSeeds) {
+  if (!Array.isArray(value) || value.length === 0 || value.length > maxSeeds) throw new RangeError("Explicit bounded readers required");
+  const ids = /* @__PURE__ */ new Set();
+  return Object.freeze(Array.from({ length: value.length }, (_, index) => {
+    const slot = Object.getOwnPropertyDescriptor(value, String(index));
+    if (slot?.enumerable !== true || !("value" in slot)) throw new TypeError("Reader slots must be dense own data");
+    const seed = slot.value;
+    const idSlot = Object.getOwnPropertyDescriptor(seed, "id");
+    const readerSlot = Object.getOwnPropertyDescriptor(seed, "reader");
+    if (idSlot === void 0 || readerSlot === void 0 || !("value" in idSlot) || !("value" in readerSlot)) {
+      throw new TypeError("Reader configuration must use own data properties");
+    }
+    const id = idSlot.value;
+    if (typeof id !== "string" || id.length === 0 || id.length > 128 || id.trim() !== id || ids.has(id)) {
+      throw new TypeError("Each reader requires a unique bounded ID");
+    }
+    const reader = readerSlot.value;
+    if (typeof reader !== "object" || reader === null) throw new TypeError("Each reader requires get");
+    const methodSlot = Object.getOwnPropertyDescriptor(reader, "get");
+    if (methodSlot === void 0 || !("value" in methodSlot) || typeof methodSlot.value !== "function") {
+      throw new TypeError("Each reader requires an own data get method");
+    }
+    const get = methodSlot.value;
+    ids.add(id);
+    return Object.freeze({ id, get: get.bind(reader) });
+  }));
+}
+async function readSeed(seed, root, family, limits, signal, expired) {
+  if (fleetSignalAborted(signal) || expired()) return { status: "timeout" };
+  const response = await seed.get([root], { signal, maxBodyBytes: limits.maxBodyBytes });
+  if (fleetSignalAborted(signal) || expired()) return { status: "timeout" };
+  if (!Array.isArray(response) || response.length > limits.maxCandidatesPerSeed) return { status: "resource-limit" };
+  const candidates = Array.from({ length: response.length }, (_, index) => Object.getOwnPropertyDescriptor(response, String(index)));
+  let status = candidates.length === 0 ? "missing" : "invalid";
+  for (const slot of candidates) {
+    if (fleetSignalAborted(signal) || expired()) return { status: "timeout" };
+    if (slot?.enumerable !== true || !("value" in slot)) continue;
+    const result = await verifyFleetPayload(root, family, slot.value, limits);
+    if (fleetSignalAborted(signal) || expired()) return { status: "timeout" };
+    if (result.status === "verified") return { status: "resolved", payload: result };
+    if (result.status === "unsupported") status = "unsupported";
+  }
+  return { status };
+}
+function attemptSeed(seed, root, family, limits, signal, now, totalDeadline) {
+  const deadline = Math.min(totalDeadline, now() + limits.attemptTimeoutMs);
+  const expired = () => now() >= deadline;
+  return new Promise((resolve) => {
+    const controller = new AbortController();
+    let isSettled = false;
+    const finish = (result) => {
+      if (isSettled) return;
+      isSettled = true;
+      cancelTimer();
+      unlisten();
+      controller.abort();
+      resolve(expired() ? { status: "timeout" } : result);
+    };
+    const onAbort = () => finish({ status: "timeout" });
+    const cancelTimer = scheduleDeadline(now, deadline, () => finish({ status: "timeout" }));
+    const unlisten = listenFleetAbort(signal, onAbort);
+    if (fleetSignalAborted(signal)) {
+      onAbort();
+      return;
+    }
+    queueMicrotask(() => {
+      void (async () => {
+        let result;
+        try {
+          result = await readSeed(seed, root, family, limits, controller.signal, expired);
+        } catch {
+          result = { status: "reader-error" };
+        }
+        finish(result);
+      })();
+    });
+  });
+}
+async function resolveFleetPayload(root, family, options) {
+  HashZod4.parse(root);
+  const limits = resolutionLimits(options.limits);
+  const seeds = pinSeeds(options.seeds, limits.maxSeeds);
+  const signal = captureFleetSignal(options.signal);
+  const now = monotonicClock();
+  const deadline = now() + limits.totalTimeoutMs;
+  const attempts = [];
+  const controller = new AbortController();
+  const state = {};
+  const terminate = (reason) => {
+    state.terminal ??= reason;
+    controller.abort();
+  };
+  const onAbort = () => terminate("aborted");
+  const unlisten = listenFleetAbort(signal, onAbort);
+  if (signal !== void 0 && fleetSignalAborted(signal)) onAbort();
+  const cancelTotal = scheduleDeadline(now, deadline, () => terminate("deadline"));
+  try {
+    for (const seed of seeds) {
+      if (now() >= deadline) terminate("deadline");
+      if (state.terminal !== void 0) break;
+      const result = await attemptSeed(seed, root, family, limits, controller.signal, now, deadline);
+      attempts.push(Object.freeze({ seedId: seed.id, status: result.status }));
+      if (now() >= deadline) terminate("deadline");
+      if (state.terminal !== void 0) break;
+      if (result.payload !== void 0) return Object.freeze({ ...result.payload, attempts: Object.freeze(attempts) });
+      if (result.status === "resource-limit") return Object.freeze({
+        status: "incomplete",
+        reason: "resource-limit",
+        attempts: Object.freeze(attempts)
+      });
+    }
+    const frozen = Object.freeze(attempts);
+    return state.terminal === "aborted" ? Object.freeze({ status: "aborted", attempts: frozen }) : Object.freeze({
+      status: "incomplete",
+      reason: state.terminal === "deadline" ? "deadline" : "unavailable",
+      attempts: frozen
+    });
+  } finally {
+    cancelTotal();
+    controller.abort();
+    unlisten();
+  }
+}
+
+// src/resolveObject.ts
+import { ObjectReferenceZod as ObjectReferenceZod2 } from "@xyo-network/service-kit-schemas";
+
 // src/verifyObject.ts
+import { isAnyPayload as isAnyPayload2, PayloadBuilder as PayloadBuilder2 } from "@xyo-network/sdk-protocol";
+import {
+  DataLakeLocatorSchema,
+  DataLakeLocatorZod,
+  ObjectReferenceZod,
+  ServiceAdvertisementSchema,
+  ServiceAdvertisementZod
+} from "@xyo-network/service-kit-schemas";
 async function verifyObject(reference, candidate, options = {}) {
   const expected = Object.freeze(ObjectReferenceZod.parse(reference));
   const limits = verificationLimits(options);
@@ -194,9 +705,9 @@ async function verifyObject(reference, candidate, options = {}) {
     if (snapshot === null || typeof snapshot !== "object" || Array.isArray(snapshot)) {
       return { status: "invalid", reason: "not-payload" };
     }
-    const data = PayloadBuilder.omitMeta(snapshot);
-    if (!isAnyPayload(data)) return { status: "invalid", reason: "not-payload" };
-    const actualHash = await PayloadBuilder.dataHash(data);
+    const data = PayloadBuilder2.omitMeta(snapshot);
+    if (!isAnyPayload2(data)) return { status: "invalid", reason: "not-payload" };
+    const actualHash = await PayloadBuilder2.dataHash(data);
     if (actualHash !== expected.dataHash) return { status: "invalid", reason: "hash-mismatch" };
     if (data.schema !== expected.schema) return { status: "invalid", reason: "schema-mismatch" };
     if (data.schema === ServiceAdvertisementSchema && !ServiceAdvertisementZod.safeParse(data).success) {
@@ -276,7 +787,7 @@ async function readCandidates(seed, reference, limits, signal, expired) {
   }
   return { status: "invalid-object", candidateFailures };
 }
-function attemptSeed(seed, reference, limits, outerSignal, now, totalDeadline) {
+function attemptSeed2(seed, reference, limits, outerSignal, now, totalDeadline) {
   const deadline = Math.min(now() + limits.attemptTimeoutMs, totalDeadline);
   const expired = () => now() >= deadline;
   return new Promise((resolve) => {
@@ -348,7 +859,7 @@ async function resolveObject(reference, options) {
     for (const seed of seeds) {
       if (now() >= deadline) terminate("deadline-exceeded");
       if (state.terminal !== void 0) break;
-      const result = await attemptSeed(seed, expected, limits, controller.signal, now, deadline);
+      const result = await attemptSeed2(seed, expected, limits, controller.signal, now, deadline);
       attempts.push(diagnostic(seed.id, result));
       if (now() >= deadline) terminate("deadline-exceeded");
       if (state.terminal !== void 0) break;
@@ -377,7 +888,12 @@ async function resolveObject(reference, options) {
 export {
   DEFAULT_RESOLUTION_LIMITS,
   DEFAULT_VERIFICATION_LIMITS,
+  createLocalFleetConfigurationStore,
+  foldFleetControls,
+  matchFleetPublisher,
+  resolveFleetPayload,
   resolveObject,
+  verifyFleetPayload,
   verifyObject
 };
 //# sourceMappingURL=index.mjs.map

package/dist/neutral/index.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["../../src/limits.ts", "../../src/resolveObject.ts", "../../src/clock.ts", "../../src/verifyObject.ts", "../../src/jsonSnapshot.ts"],
-  "sourcesContent": ["import type { ResolutionLimits, VerificationLimits } from './types.js'\n\nexport const MAX_TIMER_DELAY_MS = 2_147_483_647\n\nexport const DEFAULT_VERIFICATION_LIMITS: VerificationLimits = Object.freeze({\n  maxBodyBytes: 65_536,\n  maxDepth: 32,\n  maxNodes: 10_000,\n})\n\nexport const DEFAULT_RESOLUTION_LIMITS: ResolutionLimits = Object.freeze({\n  ...DEFAULT_VERIFICATION_LIMITS,\n  maxSeeds: 16,\n  maxCandidatesPerSeed: 16,\n  attemptTimeoutMs: 2000,\n  totalTimeoutMs: 10_000,\n})\n\nfunction positiveInteger(value: number, name: string) {\n  if (!Number.isSafeInteger(value) || value <= 0) {\n    throw new RangeError(name + ' must be a positive safe integer')\n  }\n}\n\nexport function verificationLimits(options: Partial<VerificationLimits> = {}): VerificationLimits {\n  const limits = { ...DEFAULT_VERIFICATION_LIMITS, ...options }\n  positiveInteger(limits.maxBodyBytes, 'maxBodyBytes')\n  positiveInteger(limits.maxDepth, 'maxDepth')\n  positiveInteger(limits.maxNodes, 'maxNodes')\n  return Object.freeze(limits)\n}\n\nexport function resolutionLimits(options: Partial<ResolutionLimits> = {}): ResolutionLimits {\n  const limits = { ...DEFAULT_RESOLUTION_LIMITS, ...options }\n  verificationLimits(limits)\n  positiveInteger(limits.maxSeeds, 'maxSeeds')\n  positiveInteger(limits.maxCandidatesPerSeed, 'maxCandidatesPerSeed')\n  positiveInteger(limits.attemptTimeoutMs, 'attemptTimeoutMs')\n  positiveInteger(limits.totalTimeoutMs, 'totalTimeoutMs')\n  if (limits.attemptTimeoutMs > MAX_TIMER_DELAY_MS || limits.totalTimeoutMs > MAX_TIMER_DELAY_MS) {\n    throw new RangeError('Timeouts must fit a signed 32-bit millisecond timer')\n  }\n  return Object.freeze(limits)\n}\n", "import type { ObjectReference } from '@xyo-network/service-kit-schemas'\nimport { ObjectReferenceZod } from '@xyo-network/service-kit-schemas'\n\nimport { monotonicClock, scheduleDeadline } from './clock.js'\nimport { resolutionLimits } from './limits.js'\nimport type {\n  AttemptStatus,\n  ConfiguredSeed,\n  ObjectResolutionResult,\n  ObjectVerificationFailureReason,\n  ResolutionAttempt,\n  ResolutionLimits,\n  ResolveObjectOptions,\n  VerifiedObject,\n} from './types.js'\nimport { verifyObject } from './verifyObject.js'\n\ninterface SeedResult {\n  readonly candidateFailures?: readonly ObjectVerificationFailureReason[]\n  readonly object?: VerifiedObject\n  readonly status: AttemptStatus\n}\n\nfunction configuredSeeds(seeds: readonly ConfiguredSeed[], limits: ResolutionLimits) {\n  if (!Array.isArray(seeds) || seeds.length === 0 || seeds.length > limits.maxSeeds) {\n    throw new RangeError('Configure between one and maxSeeds explicit readers')\n  }\n  const ids = new Set<string>()\n  const configured = seeds.map((seed: ConfiguredSeed): ConfiguredSeed => {\n    if (typeof seed.id !== 'string' || seed.id.length === 0 || seed.id.length > 128 || seed.id.trim() !== seed.id) {\n      throw new TypeError('Seed IDs must be nonempty, trimmed strings of at most 128 characters')\n    }\n    if (ids.has(seed.id)) throw new TypeError('Seed IDs must be unique')\n    if (typeof seed.reader?.get !== 'function') throw new TypeError('Each seed requires a reader.get method')\n    ids.add(seed.id)\n    // Pin the reader and label before the first await; do not consult mutable seed configuration later.\n    return Object.freeze({\n      id: seed.id,\n      reader: Object.freeze({ get: seed.reader.get.bind(seed.reader) }),\n    })\n  })\n  for (let index = 0; index < configured.length; index++) {\n    if (!Object.hasOwn(configured, index)) throw new TypeError('Seed configuration must not contain sparse slots')\n  }\n  return configured\n}\n\nasync function readCandidates(\n  seed: ConfiguredSeed,\n  reference: ObjectReference,\n  limits: ResolutionLimits,\n  signal: AbortSignal,\n  expired: () => boolean,\n): Promise<SeedResult> {\n  if (signal.aborted) return { status: 'aborted' }\n  if (expired()) return { status: 'timeout' }\n  const response: unknown = await seed.reader.get([reference.dataHash], { signal, maxBodyBytes: limits.maxBodyBytes })\n  if (signal.aborted) return { status: 'aborted' }\n  if (expired()) return { status: 'timeout' }\n  if (!Array.isArray(response)) return { status: 'malformed-response' }\n  const candidateCount = response.length\n  if (!Number.isSafeInteger(candidateCount) || candidateCount < 0) return { status: 'malformed-response' }\n  if (candidateCount > limits.maxCandidatesPerSeed) return { status: 'too-many-candidates' }\n  if (candidateCount === 0) return { status: 'missing' }\n  // Pin the bounded slots before verification yields; a reader must not enlarge the work budget.\n  const candidates = Array.from({ length: candidateCount }, (_, index) => Object.getOwnPropertyDescriptor(response, String(index)))\n  const candidateFailures: ObjectVerificationFailureReason[] = []\n  for (const descriptor of candidates) {\n    if (signal.aborted) return { status: 'aborted' }\n    if (expired()) return { status: 'timeout' }\n    if (descriptor === undefined || !('value' in descriptor)) {\n      candidateFailures.push('invalid-json')\n      continue\n    }\n    const candidate: unknown = descriptor.value\n    const result = await verifyObject(reference, candidate, limits)\n    if (signal.aborted) return { status: 'aborted' }\n    if (expired()) return { status: 'timeout' }\n    if (result.status === 'verified') return {\n      status: 'resolved', object: result, candidateFailures,\n    }\n    candidateFailures.push(result.reason)\n  }\n  return { status: 'invalid-object', candidateFailures }\n}\n\nfunction attemptSeed(\n  seed: ConfiguredSeed,\n  reference: ObjectReference,\n  limits: ResolutionLimits,\n  outerSignal: AbortSignal,\n  now: () => number,\n  totalDeadline: number,\n): Promise<SeedResult> {\n  const deadline = Math.min(now() + limits.attemptTimeoutMs, totalDeadline)\n  const expired = () => now() >= deadline\n  return new Promise((resolve) => {\n    const controller = new AbortController()\n    let isSettled = false\n    const finish = (result: SeedResult) => {\n      if (isSettled) return\n      // Timer callbacks may be delayed by synchronous work or a busy microtask queue.\n      // Reject late completions even when the timer has not had a chance to run.\n      const outcome: SeedResult = result.status !== 'aborted' && expired() ? { status: 'timeout' } : result\n      isSettled = true\n      cancelTimer()\n      outerSignal.removeEventListener('abort', onAbort)\n      if (outcome.status === 'timeout') controller.abort()\n      resolve(outcome)\n    }\n    const onAbort = () => {\n      controller.abort()\n      finish({ status: 'aborted' })\n    }\n    const cancelTimer = scheduleDeadline(now, deadline, () => {\n      controller.abort()\n      finish({ status: 'timeout' })\n    })\n    outerSignal.addEventListener('abort', onAbort, { once: true })\n    if (outerSignal.aborted) {\n      onAbort()\n      return\n    }\n    // Defer the read one microtask so abort and deadline checks win, then settle either outcome.\n    // Keep finish outside the rejection path so a failure inside finish is not reported as a reader error.\n    queueMicrotask(() => {\n      void (async () => {\n        let result: SeedResult\n        try {\n          result = await readCandidates(seed, reference, limits, controller.signal, expired)\n        } catch {\n          finish({ status: 'reader-error' })\n          return\n        }\n        finish(result)\n      })()\n    })\n  })\n}\n\nfunction diagnostic(seedId: string, result: SeedResult): ResolutionAttempt {\n  return Object.freeze({\n    seedId,\n    status: result.status,\n    ...(result.candidateFailures !== undefined && { candidateFailures: Object.freeze([...result.candidateFailures]) }),\n  })\n}\n\n/** Resolve exact content through configured readers only; never infer service absence or authority. */\nexport async function resolveObject(\n  reference: ObjectReference,\n  options: ResolveObjectOptions,\n): Promise<ObjectResolutionResult> {\n  const expected = Object.freeze(ObjectReferenceZod.parse(reference))\n  const limits = resolutionLimits(options.limits)\n  const seeds = configuredSeeds(options.seeds, limits)\n  const signal = options.signal\n  const attempts: ResolutionAttempt[] = []\n  if (signal?.aborted === true) return { status: 'aborted', attempts: Object.freeze(attempts) }\n\n  const now = monotonicClock()\n  const deadline = now() + limits.totalTimeoutMs\n  const controller = new AbortController()\n  const state: { terminal?: 'aborted' | 'deadline-exceeded' } = {}\n  const terminate = (reason: 'aborted' | 'deadline-exceeded') => {\n    if (state.terminal !== undefined) return\n    state.terminal = reason\n    controller.abort()\n  }\n  const onAbort = () => terminate('aborted')\n  signal?.addEventListener('abort', onAbort, { once: true })\n  const cancelTimer = scheduleDeadline(now, deadline, () => terminate('deadline-exceeded'))\n  try {\n    for (const seed of seeds) {\n      if (now() >= deadline) terminate('deadline-exceeded')\n      if (state.terminal !== undefined) break\n      const result = await attemptSeed(seed, expected, limits, controller.signal, now, deadline)\n      attempts.push(diagnostic(seed.id, result))\n      if (now() >= deadline) terminate('deadline-exceeded')\n      if (state.terminal !== undefined) break\n      if (result.object !== undefined) {\n        return Object.freeze({\n          status: 'resolved',\n          assurance: 'content-hash-verified',\n          reference: result.object.reference,\n          payload: result.object.payload,\n          seedId: seed.id,\n          attempts: Object.freeze([...attempts]),\n        })\n      }\n    }\n    if (state.terminal === 'aborted') return { status: 'aborted', attempts: Object.freeze([...attempts]) }\n    return {\n      status: 'unavailable',\n      reason: state.terminal === 'deadline-exceeded' ? 'deadline-exceeded' : 'seeds-exhausted',\n      attempts: Object.freeze([...attempts]),\n    }\n  } finally {\n    cancelTimer()\n    signal?.removeEventListener('abort', onAbort)\n  }\n}\n", "/** Use the common runtime clock without introducing Node- or DOM-only ambient types. */\nexport function monotonicClock(): () => number {\n  const clock: unknown = 'performance' in globalThis ? globalThis.performance : undefined\n  if (typeof clock !== 'object' || clock === null || !('now' in clock) || typeof clock.now !== 'function') {\n    throw new TypeError('Object resolution requires performance.now()')\n  }\n  const read = clock.now.bind(clock) as () => unknown\n  return () => {\n    const now = read()\n    if (typeof now !== 'number' || !Number.isFinite(now)) throw new TypeError('Invalid monotonic clock')\n    return now\n  }\n}\n\n/** Native timers are wake-ups to check a deadline, not proof that its monotonic time has arrived. */\nexport function scheduleDeadline(now: () => number, deadline: number, expired: () => void): () => void {\n  let cancelled = false\n  let timer: ReturnType<typeof setTimeout> | undefined\n  const tick = () => {\n    if (cancelled) return\n    if (now() >= deadline) {\n      cancelled = true\n      expired()\n    } else {\n      arm()\n    }\n  }\n  const arm = () => {\n    // Round up and recheck: timer implementations may truncate delays or wake before the deadline.\n    const delay = Math.min(MAX_TIMER_DELAY_MS, Math.max(1, Math.ceil(deadline - now())))\n    timer = setTimeout(tick, delay)\n  }\n  arm()\n  return () => {\n    cancelled = true\n    clearTimeout(timer)\n  }\n}\nimport { MAX_TIMER_DELAY_MS } from './limits.js'\n", "import { isAnyPayload, PayloadBuilder } from '@xyo-network/sdk-protocol'\nimport type { ObjectReference } from '@xyo-network/service-kit-schemas'\nimport {\n  DataLakeLocatorSchema, DataLakeLocatorZod,\n  ObjectReferenceZod,\n  ServiceAdvertisementSchema, ServiceAdvertisementZod,\n} from '@xyo-network/service-kit-schemas'\n\nimport { ObjectInputError, snapshotJson } from './jsonSnapshot.js'\nimport { verificationLimits } from './limits.js'\nimport type {\n  ContentPayload, ObjectVerificationResult, VerificationLimits,\n} from './types.js'\n\n/** Verify content only. No Claim, lifecycle, publisher authority, or freshness is established. */\nexport async function verifyObject(\n  reference: ObjectReference,\n  candidate: unknown,\n  options: Partial<VerificationLimits> = {},\n): Promise<ObjectVerificationResult> {\n  const expected = Object.freeze(ObjectReferenceZod.parse(reference))\n  const limits = verificationLimits(options)\n  try {\n    const snapshot = snapshotJson(candidate, limits)\n    if (snapshot === null || typeof snapshot !== 'object' || Array.isArray(snapshot)) {\n      return { status: 'invalid', reason: 'not-payload' }\n    }\n    // Metadata is bounded JSON input, but cannot decide the committed Payload representation.\n    const data = PayloadBuilder.omitMeta(snapshot)\n    // Use a guard, never a parser that strips unknown fields before hashing.\n    if (!isAnyPayload(data)) return { status: 'invalid', reason: 'not-payload' }\n    const actualHash = await PayloadBuilder.dataHash(data)\n    if (actualHash !== expected.dataHash) return { status: 'invalid', reason: 'hash-mismatch' }\n    if (data.schema !== expected.schema) return { status: 'invalid', reason: 'schema-mismatch' }\n\n    // These are strict validators without coercion, defaults, or transformations.\n    // Hash the complete data first, and return the data rather than a parser projection.\n    if (data.schema === ServiceAdvertisementSchema && !ServiceAdvertisementZod.safeParse(data).success) {\n      return { status: 'invalid', reason: 'invalid-descriptor' }\n    }\n    if (data.schema === DataLakeLocatorSchema && !DataLakeLocatorZod.safeParse(data).success) {\n      return { status: 'invalid', reason: 'invalid-descriptor' }\n    }\n    const payload = snapshotJson(data, limits) as ContentPayload\n    return Object.freeze({\n      status: 'verified', assurance: 'content-hash-verified', reference: expected, payload,\n    })\n  } catch (error) {\n    return {\n      status: 'invalid',\n      reason: error instanceof ObjectInputError ? error.reason : 'invalid-json',\n    }\n  }\n}\n", "import type {\n  JsonValue, ObjectVerificationFailureReason, VerificationLimits,\n} from './types.js'\n\nexport class ObjectInputError extends Error {\n  readonly reason: ObjectVerificationFailureReason\n\n  constructor(reason: ObjectVerificationFailureReason) {\n    super(reason)\n    this.name = 'ObjectInputError'\n    this.reason = reason\n  }\n}\n\ninterface Budget {\n  readonly ancestors: WeakSet<object>\n  bytes: number\n  readonly limits: VerificationLimits\n  nodes: number\n}\n\nconst encoder = new TextEncoder()\n\nfunction spend(budget: Budget, bytes: number) {\n  budget.bytes += bytes\n  if (budget.bytes > budget.limits.maxBodyBytes) throw new ObjectInputError('body-too-large')\n}\n\nfunction textSize(budget: Budget, text: string) {\n  // Reject an oversized string before allocating its serialized/encoded copy.\n  if (text.length > budget.limits.maxBodyBytes - budget.bytes) throw new ObjectInputError('body-too-large')\n  spend(budget, encoder.encode(JSON.stringify(text)).byteLength)\n}\n\nfunction propertyValue(object: object, key: string): unknown {\n  const descriptor = Object.getOwnPropertyDescriptor(object, key)\n  if (descriptor?.enumerable !== true || !('value' in descriptor)) {\n    throw new ObjectInputError('invalid-json')\n  }\n  return descriptor.value\n}\n\nfunction snapshotArray(value: unknown[], budget: Budget, depth: number): readonly JsonValue[] {\n  if (Object.getPrototypeOf(value) !== Array.prototype) throw new ObjectInputError('invalid-json')\n  if (value.length > budget.limits.maxNodes - budget.nodes) throw new ObjectInputError('structure-limit')\n  // JSON arrays cannot carry holes, symbols, accessors, or extra object fields.\n  if (Reflect.ownKeys(value).length !== value.length + 1) throw new ObjectInputError('invalid-json')\n  spend(budget, 2)\n  const output: JsonValue[] = []\n  for (let index = 0; index < value.length; index++) {\n    if (index > 0) spend(budget, 1)\n    output.push(snapshotValue(propertyValue(value, String(index)), budget, depth + 1))\n  }\n  return Object.freeze(output)\n}\n\nfunction snapshotObject(value: object, budget: Budget, depth: number): JsonValue {\n  const prototype: unknown = Object.getPrototypeOf(value)\n  if (prototype !== null && prototype !== Object.prototype) throw new ObjectInputError('invalid-json')\n  const keys = Reflect.ownKeys(value)\n  if (keys.length > budget.limits.maxNodes - budget.nodes) throw new ObjectInputError('structure-limit')\n  spend(budget, 2)\n  const entries: [string, JsonValue][] = []\n  for (const key of keys) {\n    // The SDK's object reconstruction cannot bind a literal __proto__ key reliably.\n    if (typeof key !== 'string' || key === '__proto__') throw new ObjectInputError('invalid-json')\n    if (entries.length > 0) spend(budget, 1)\n    textSize(budget, key)\n    spend(budget, 1)\n    entries.push([key, snapshotValue(propertyValue(value, key), budget, depth + 1)])\n  }\n  // Construct own data properties without interpreting object keys as setters.\n  return Object.freeze(Object.fromEntries(entries))\n}\n\nfunction snapshotValue(value: unknown, budget: Budget, depth: number): JsonValue {\n  budget.nodes++\n  if (depth > budget.limits.maxDepth || budget.nodes > budget.limits.maxNodes) {\n    throw new ObjectInputError('structure-limit')\n  }\n  if (value === null) {\n    spend(budget, 4)\n    return null\n  }\n  switch (typeof value) {\n    case 'string': {\n      textSize(budget, value)\n      return value\n    }\n    case 'boolean': {\n      spend(budget, value ? 4 : 5)\n      return value\n    }\n    case 'number': {\n      if (!Number.isFinite(value)) throw new ObjectInputError('invalid-json')\n      spend(budget, JSON.stringify(value).length)\n      return value\n    }\n    case 'object': {\n      if (budget.ancestors.has(value)) throw new ObjectInputError('invalid-json')\n      budget.ancestors.add(value)\n      try {\n        return Array.isArray(value)\n          ? snapshotArray(value, budget, depth)\n          : snapshotObject(value, budget, depth)\n      } finally {\n        budget.ancestors.delete(value)\n      }\n    }\n    default: {\n      throw new ObjectInputError('invalid-json')\n    }\n  }\n}\n\n/** Bounded, immutable JSON copy. This is not a replacement canonicalization algorithm. */\nexport function snapshotJson(candidate: unknown, limits: VerificationLimits): JsonValue {\n  return snapshotValue(candidate, {\n    limits, ancestors: new WeakSet<object>(), bytes: 0, nodes: 0,\n  }, 0)\n}\n"],
-  "mappings": ";AAEO,IAAM,qBAAqB;AAE3B,IAAM,8BAAkD,OAAO,OAAO;AAAA,EAC3E,cAAc;AAAA,EACd,UAAU;AAAA,EACV,UAAU;AACZ,CAAC;AAEM,IAAM,4BAA8C,OAAO,OAAO;AAAA,EACvE,GAAG;AAAA,EACH,UAAU;AAAA,EACV,sBAAsB;AAAA,EACtB,kBAAkB;AAAA,EAClB,gBAAgB;AAClB,CAAC;AAED,SAAS,gBAAgB,OAAe,MAAc;AACpD,MAAI,CAAC,OAAO,cAAc,KAAK,KAAK,SAAS,GAAG;AAC9C,UAAM,IAAI,WAAW,OAAO,kCAAkC;AAAA,EAChE;AACF;AAEO,SAAS,mBAAmB,UAAuC,CAAC,GAAuB;AAChG,QAAM,SAAS,EAAE,GAAG,6BAA6B,GAAG,QAAQ;AAC5D,kBAAgB,OAAO,cAAc,cAAc;AACnD,kBAAgB,OAAO,UAAU,UAAU;AAC3C,kBAAgB,OAAO,UAAU,UAAU;AAC3C,SAAO,OAAO,OAAO,MAAM;AAC7B;AAEO,SAAS,iBAAiB,UAAqC,CAAC,GAAqB;AAC1F,QAAM,SAAS,EAAE,GAAG,2BAA2B,GAAG,QAAQ;AAC1D,qBAAmB,MAAM;AACzB,kBAAgB,OAAO,UAAU,UAAU;AAC3C,kBAAgB,OAAO,sBAAsB,sBAAsB;AACnE,kBAAgB,OAAO,kBAAkB,kBAAkB;AAC3D,kBAAgB,OAAO,gBAAgB,gBAAgB;AACvD,MAAI,OAAO,mBAAmB,sBAAsB,OAAO,iBAAiB,oBAAoB;AAC9F,UAAM,IAAI,WAAW,qDAAqD;AAAA,EAC5E;AACA,SAAO,OAAO,OAAO,MAAM;AAC7B;;;AC1CA,SAAS,sBAAAA,2BAA0B;;;ACA5B,SAAS,iBAA+B;AAC7C,QAAM,QAAiB,iBAAiB,aAAa,WAAW,cAAc;AAC9E,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,EAAE,SAAS,UAAU,OAAO,MAAM,QAAQ,YAAY;AACvG,UAAM,IAAI,UAAU,8CAA8C;AAAA,EACpE;AACA,QAAM,OAAO,MAAM,IAAI,KAAK,KAAK;AACjC,SAAO,MAAM;AACX,UAAM,MAAM,KAAK;AACjB,QAAI,OAAO,QAAQ,YAAY,CAAC,OAAO,SAAS,GAAG,EAAG,OAAM,IAAI,UAAU,yBAAyB;AACnG,WAAO;AAAA,EACT;AACF;AAGO,SAAS,iBAAiB,KAAmB,UAAkB,SAAiC;AACrG,MAAI,YAAY;AAChB,MAAI;AACJ,QAAM,OAAO,MAAM;AACjB,QAAI,UAAW;AACf,QAAI,IAAI,KAAK,UAAU;AACrB,kBAAY;AACZ,cAAQ;AAAA,IACV,OAAO;AACL,UAAI;AAAA,IACN;AAAA,EACF;AACA,QAAM,MAAM,MAAM;AAEhB,UAAM,QAAQ,KAAK,IAAI,oBAAoB,KAAK,IAAI,GAAG,KAAK,KAAK,WAAW,IAAI,CAAC,CAAC,CAAC;AACnF,YAAQ,WAAW,MAAM,KAAK;AAAA,EAChC;AACA,MAAI;AACJ,SAAO,MAAM;AACX,gBAAY;AACZ,iBAAa,KAAK;AAAA,EACpB;AACF;;;ACrCA,SAAS,cAAc,sBAAsB;AAE7C;AAAA,EACE;AAAA,EAAuB;AAAA,EACvB;AAAA,EACA;AAAA,EAA4B;AAAA,OACvB;;;ACFA,IAAM,mBAAN,cAA+B,MAAM;AAAA,EACjC;AAAA,EAET,YAAY,QAAyC;AACnD,UAAM,MAAM;AACZ,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAChB;AACF;AASA,IAAM,UAAU,IAAI,YAAY;AAEhC,SAAS,MAAM,QAAgB,OAAe;AAC5C,SAAO,SAAS;AAChB,MAAI,OAAO,QAAQ,OAAO,OAAO,aAAc,OAAM,IAAI,iBAAiB,gBAAgB;AAC5F;AAEA,SAAS,SAAS,QAAgB,MAAc;AAE9C,MAAI,KAAK,SAAS,OAAO,OAAO,eAAe,OAAO,MAAO,OAAM,IAAI,iBAAiB,gBAAgB;AACxG,QAAM,QAAQ,QAAQ,OAAO,KAAK,UAAU,IAAI,CAAC,EAAE,UAAU;AAC/D;AAEA,SAAS,cAAc,QAAgB,KAAsB;AAC3D,QAAM,aAAa,OAAO,yBAAyB,QAAQ,GAAG;AAC9D,MAAI,YAAY,eAAe,QAAQ,EAAE,WAAW,aAAa;AAC/D,UAAM,IAAI,iBAAiB,cAAc;AAAA,EAC3C;AACA,SAAO,WAAW;AACpB;AAEA,SAAS,cAAc,OAAkB,QAAgB,OAAqC;AAC5F,MAAI,OAAO,eAAe,KAAK,MAAM,MAAM,UAAW,OAAM,IAAI,iBAAiB,cAAc;AAC/F,MAAI,MAAM,SAAS,OAAO,OAAO,WAAW,OAAO,MAAO,OAAM,IAAI,iBAAiB,iBAAiB;AAEtG,MAAI,QAAQ,QAAQ,KAAK,EAAE,WAAW,MAAM,SAAS,EAAG,OAAM,IAAI,iBAAiB,cAAc;AACjG,QAAM,QAAQ,CAAC;AACf,QAAM,SAAsB,CAAC;AAC7B,WAAS,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS;AACjD,QAAI,QAAQ,EAAG,OAAM,QAAQ,CAAC;AAC9B,WAAO,KAAK,cAAc,cAAc,OAAO,OAAO,KAAK,CAAC,GAAG,QAAQ,QAAQ,CAAC,CAAC;AAAA,EACnF;AACA,SAAO,OAAO,OAAO,MAAM;AAC7B;AAEA,SAAS,eAAe,OAAe,QAAgB,OAA0B;AAC/E,QAAM,YAAqB,OAAO,eAAe,KAAK;AACtD,MAAI,cAAc,QAAQ,cAAc,OAAO,UAAW,OAAM,IAAI,iBAAiB,cAAc;AACnG,QAAM,OAAO,QAAQ,QAAQ,KAAK;AAClC,MAAI,KAAK,SAAS,OAAO,OAAO,WAAW,OAAO,MAAO,OAAM,IAAI,iBAAiB,iBAAiB;AACrG,QAAM,QAAQ,CAAC;AACf,QAAM,UAAiC,CAAC;AACxC,aAAW,OAAO,MAAM;AAEtB,QAAI,OAAO,QAAQ,YAAY,QAAQ,YAAa,OAAM,IAAI,iBAAiB,cAAc;AAC7F,QAAI,QAAQ,SAAS,EAAG,OAAM,QAAQ,CAAC;AACvC,aAAS,QAAQ,GAAG;AACpB,UAAM,QAAQ,CAAC;AACf,YAAQ,KAAK,CAAC,KAAK,cAAc,cAAc,OAAO,GAAG,GAAG,QAAQ,QAAQ,CAAC,CAAC,CAAC;AAAA,EACjF;AAEA,SAAO,OAAO,OAAO,OAAO,YAAY,OAAO,CAAC;AAClD;AAEA,SAAS,cAAc,OAAgB,QAAgB,OAA0B;AAC/E,SAAO;AACP,MAAI,QAAQ,OAAO,OAAO,YAAY,OAAO,QAAQ,OAAO,OAAO,UAAU;AAC3E,UAAM,IAAI,iBAAiB,iBAAiB;AAAA,EAC9C;AACA,MAAI,UAAU,MAAM;AAClB,UAAM,QAAQ,CAAC;AACf,WAAO;AAAA,EACT;AACA,UAAQ,OAAO,OAAO;AAAA,IACpB,KAAK,UAAU;AACb,eAAS,QAAQ,KAAK;AACtB,aAAO;AAAA,IACT;AAAA,IACA,KAAK,WAAW;AACd,YAAM,QAAQ,QAAQ,IAAI,CAAC;AAC3B,aAAO;AAAA,IACT;AAAA,IACA,KAAK,UAAU;AACb,UAAI,CAAC,OAAO,SAAS,KAAK,EAAG,OAAM,IAAI,iBAAiB,cAAc;AACtE,YAAM,QAAQ,KAAK,UAAU,KAAK,EAAE,MAAM;AAC1C,aAAO;AAAA,IACT;AAAA,IACA,KAAK,UAAU;AACb,UAAI,OAAO,UAAU,IAAI,KAAK,EAAG,OAAM,IAAI,iBAAiB,cAAc;AAC1E,aAAO,UAAU,IAAI,KAAK;AAC1B,UAAI;AACF,eAAO,MAAM,QAAQ,KAAK,IACtB,cAAc,OAAO,QAAQ,KAAK,IAClC,eAAe,OAAO,QAAQ,KAAK;AAAA,MACzC,UAAE;AACA,eAAO,UAAU,OAAO,KAAK;AAAA,MAC/B;AAAA,IACF;AAAA,IACA,SAAS;AACP,YAAM,IAAI,iBAAiB,cAAc;AAAA,IAC3C;AAAA,EACF;AACF;AAGO,SAAS,aAAa,WAAoB,QAAuC;AACtF,SAAO,cAAc,WAAW;AAAA,IAC9B;AAAA,IAAQ,WAAW,oBAAI,QAAgB;AAAA,IAAG,OAAO;AAAA,IAAG,OAAO;AAAA,EAC7D,GAAG,CAAC;AACN;;;ADzGA,eAAsB,aACpB,WACA,WACA,UAAuC,CAAC,GACL;AACnC,QAAM,WAAW,OAAO,OAAO,mBAAmB,MAAM,SAAS,CAAC;AAClE,QAAM,SAAS,mBAAmB,OAAO;AACzC,MAAI;AACF,UAAM,WAAW,aAAa,WAAW,MAAM;AAC/C,QAAI,aAAa,QAAQ,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,GAAG;AAChF,aAAO,EAAE,QAAQ,WAAW,QAAQ,cAAc;AAAA,IACpD;AAEA,UAAM,OAAO,eAAe,SAAS,QAAQ;AAE7C,QAAI,CAAC,aAAa,IAAI,EAAG,QAAO,EAAE,QAAQ,WAAW,QAAQ,cAAc;AAC3E,UAAM,aAAa,MAAM,eAAe,SAAS,IAAI;AACrD,QAAI,eAAe,SAAS,SAAU,QAAO,EAAE,QAAQ,WAAW,QAAQ,gBAAgB;AAC1F,QAAI,KAAK,WAAW,SAAS,OAAQ,QAAO,EAAE,QAAQ,WAAW,QAAQ,kBAAkB;AAI3F,QAAI,KAAK,WAAW,8BAA8B,CAAC,wBAAwB,UAAU,IAAI,EAAE,SAAS;AAClG,aAAO,EAAE,QAAQ,WAAW,QAAQ,qBAAqB;AAAA,IAC3D;AACA,QAAI,KAAK,WAAW,yBAAyB,CAAC,mBAAmB,UAAU,IAAI,EAAE,SAAS;AACxF,aAAO,EAAE,QAAQ,WAAW,QAAQ,qBAAqB;AAAA,IAC3D;AACA,UAAM,UAAU,aAAa,MAAM,MAAM;AACzC,WAAO,OAAO,OAAO;AAAA,MACnB,QAAQ;AAAA,MAAY,WAAW;AAAA,MAAyB,WAAW;AAAA,MAAU;AAAA,IAC/E,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ,iBAAiB,mBAAmB,MAAM,SAAS;AAAA,IAC7D;AAAA,EACF;AACF;;;AF9BA,SAAS,gBAAgB,OAAkC,QAA0B;AACnF,MAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,KAAK,MAAM,SAAS,OAAO,UAAU;AACjF,UAAM,IAAI,WAAW,qDAAqD;AAAA,EAC5E;AACA,QAAM,MAAM,oBAAI,IAAY;AAC5B,QAAM,aAAa,MAAM,IAAI,CAAC,SAAyC;AACrE,QAAI,OAAO,KAAK,OAAO,YAAY,KAAK,GAAG,WAAW,KAAK,KAAK,GAAG,SAAS,OAAO,KAAK,GAAG,KAAK,MAAM,KAAK,IAAI;AAC7G,YAAM,IAAI,UAAU,sEAAsE;AAAA,IAC5F;AACA,QAAI,IAAI,IAAI,KAAK,EAAE,EAAG,OAAM,IAAI,UAAU,yBAAyB;AACnE,QAAI,OAAO,KAAK,QAAQ,QAAQ,WAAY,OAAM,IAAI,UAAU,wCAAwC;AACxG,QAAI,IAAI,KAAK,EAAE;AAEf,WAAO,OAAO,OAAO;AAAA,MACnB,IAAI,KAAK;AAAA,MACT,QAAQ,OAAO,OAAO,EAAE,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;AAAA,IAClE,CAAC;AAAA,EACH,CAAC;AACD,WAAS,QAAQ,GAAG,QAAQ,WAAW,QAAQ,SAAS;AACtD,QAAI,CAAC,OAAO,OAAO,YAAY,KAAK,EAAG,OAAM,IAAI,UAAU,kDAAkD;AAAA,EAC/G;AACA,SAAO;AACT;AAEA,eAAe,eACb,MACA,WACA,QACA,QACA,SACqB;AACrB,MAAI,OAAO,QAAS,QAAO,EAAE,QAAQ,UAAU;AAC/C,MAAI,QAAQ,EAAG,QAAO,EAAE,QAAQ,UAAU;AAC1C,QAAM,WAAoB,MAAM,KAAK,OAAO,IAAI,CAAC,UAAU,QAAQ,GAAG,EAAE,QAAQ,cAAc,OAAO,aAAa,CAAC;AACnH,MAAI,OAAO,QAAS,QAAO,EAAE,QAAQ,UAAU;AAC/C,MAAI,QAAQ,EAAG,QAAO,EAAE,QAAQ,UAAU;AAC1C,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,EAAE,QAAQ,qBAAqB;AACpE,QAAM,iBAAiB,SAAS;AAChC,MAAI,CAAC,OAAO,cAAc,cAAc,KAAK,iBAAiB,EAAG,QAAO,EAAE,QAAQ,qBAAqB;AACvG,MAAI,iBAAiB,OAAO,qBAAsB,QAAO,EAAE,QAAQ,sBAAsB;AACzF,MAAI,mBAAmB,EAAG,QAAO,EAAE,QAAQ,UAAU;AAErD,QAAM,aAAa,MAAM,KAAK,EAAE,QAAQ,eAAe,GAAG,CAAC,GAAG,UAAU,OAAO,yBAAyB,UAAU,OAAO,KAAK,CAAC,CAAC;AAChI,QAAM,oBAAuD,CAAC;AAC9D,aAAW,cAAc,YAAY;AACnC,QAAI,OAAO,QAAS,QAAO,EAAE,QAAQ,UAAU;AAC/C,QAAI,QAAQ,EAAG,QAAO,EAAE,QAAQ,UAAU;AAC1C,QAAI,eAAe,UAAa,EAAE,WAAW,aAAa;AACxD,wBAAkB,KAAK,cAAc;AACrC;AAAA,IACF;AACA,UAAM,YAAqB,WAAW;AACtC,UAAM,SAAS,MAAM,aAAa,WAAW,WAAW,MAAM;AAC9D,QAAI,OAAO,QAAS,QAAO,EAAE,QAAQ,UAAU;AAC/C,QAAI,QAAQ,EAAG,QAAO,EAAE,QAAQ,UAAU;AAC1C,QAAI,OAAO,WAAW,WAAY,QAAO;AAAA,MACvC,QAAQ;AAAA,MAAY,QAAQ;AAAA,MAAQ;AAAA,IACtC;AACA,sBAAkB,KAAK,OAAO,MAAM;AAAA,EACtC;AACA,SAAO,EAAE,QAAQ,kBAAkB,kBAAkB;AACvD;AAEA,SAAS,YACP,MACA,WACA,QACA,aACA,KACA,eACqB;AACrB,QAAM,WAAW,KAAK,IAAI,IAAI,IAAI,OAAO,kBAAkB,aAAa;AACxE,QAAM,UAAU,MAAM,IAAI,KAAK;AAC/B,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,UAAM,aAAa,IAAI,gBAAgB;AACvC,QAAI,YAAY;AAChB,UAAM,SAAS,CAAC,WAAuB;AACrC,UAAI,UAAW;AAGf,YAAM,UAAsB,OAAO,WAAW,aAAa,QAAQ,IAAI,EAAE,QAAQ,UAAU,IAAI;AAC/F,kBAAY;AACZ,kBAAY;AACZ,kBAAY,oBAAoB,SAAS,OAAO;AAChD,UAAI,QAAQ,WAAW,UAAW,YAAW,MAAM;AACnD,cAAQ,OAAO;AAAA,IACjB;AACA,UAAM,UAAU,MAAM;AACpB,iBAAW,MAAM;AACjB,aAAO,EAAE,QAAQ,UAAU,CAAC;AAAA,IAC9B;AACA,UAAM,cAAc,iBAAiB,KAAK,UAAU,MAAM;AACxD,iBAAW,MAAM;AACjB,aAAO,EAAE,QAAQ,UAAU,CAAC;AAAA,IAC9B,CAAC;AACD,gBAAY,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAC7D,QAAI,YAAY,SAAS;AACvB,cAAQ;AACR;AAAA,IACF;AAGA,mBAAe,MAAM;AACnB,YAAM,YAAY;AAChB,YAAI;AACJ,YAAI;AACF,mBAAS,MAAM,eAAe,MAAM,WAAW,QAAQ,WAAW,QAAQ,OAAO;AAAA,QACnF,QAAQ;AACN,iBAAO,EAAE,QAAQ,eAAe,CAAC;AACjC;AAAA,QACF;AACA,eAAO,MAAM;AAAA,MACf,GAAG;AAAA,IACL,CAAC;AAAA,EACH,CAAC;AACH;AAEA,SAAS,WAAW,QAAgB,QAAuC;AACzE,SAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,QAAQ,OAAO;AAAA,IACf,GAAI,OAAO,sBAAsB,UAAa,EAAE,mBAAmB,OAAO,OAAO,CAAC,GAAG,OAAO,iBAAiB,CAAC,EAAE;AAAA,EAClH,CAAC;AACH;AAGA,eAAsB,cACpB,WACA,SACiC;AACjC,QAAM,WAAW,OAAO,OAAOC,oBAAmB,MAAM,SAAS,CAAC;AAClE,QAAM,SAAS,iBAAiB,QAAQ,MAAM;AAC9C,QAAM,QAAQ,gBAAgB,QAAQ,OAAO,MAAM;AACnD,QAAM,SAAS,QAAQ;AACvB,QAAM,WAAgC,CAAC;AACvC,MAAI,QAAQ,YAAY,KAAM,QAAO,EAAE,QAAQ,WAAW,UAAU,OAAO,OAAO,QAAQ,EAAE;AAE5F,QAAM,MAAM,eAAe;AAC3B,QAAM,WAAW,IAAI,IAAI,OAAO;AAChC,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAwD,CAAC;AAC/D,QAAM,YAAY,CAAC,WAA4C;AAC7D,QAAI,MAAM,aAAa,OAAW;AAClC,UAAM,WAAW;AACjB,eAAW,MAAM;AAAA,EACnB;AACA,QAAM,UAAU,MAAM,UAAU,SAAS;AACzC,UAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AACzD,QAAM,cAAc,iBAAiB,KAAK,UAAU,MAAM,UAAU,mBAAmB,CAAC;AACxF,MAAI;AACF,eAAW,QAAQ,OAAO;AACxB,UAAI,IAAI,KAAK,SAAU,WAAU,mBAAmB;AACpD,UAAI,MAAM,aAAa,OAAW;AAClC,YAAM,SAAS,MAAM,YAAY,MAAM,UAAU,QAAQ,WAAW,QAAQ,KAAK,QAAQ;AACzF,eAAS,KAAK,WAAW,KAAK,IAAI,MAAM,CAAC;AACzC,UAAI,IAAI,KAAK,SAAU,WAAU,mBAAmB;AACpD,UAAI,MAAM,aAAa,OAAW;AAClC,UAAI,OAAO,WAAW,QAAW;AAC/B,eAAO,OAAO,OAAO;AAAA,UACnB,QAAQ;AAAA,UACR,WAAW;AAAA,UACX,WAAW,OAAO,OAAO;AAAA,UACzB,SAAS,OAAO,OAAO;AAAA,UACvB,QAAQ,KAAK;AAAA,UACb,UAAU,OAAO,OAAO,CAAC,GAAG,QAAQ,CAAC;AAAA,QACvC,CAAC;AAAA,MACH;AAAA,IACF;AACA,QAAI,MAAM,aAAa,UAAW,QAAO,EAAE,QAAQ,WAAW,UAAU,OAAO,OAAO,CAAC,GAAG,QAAQ,CAAC,EAAE;AACrG,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ,MAAM,aAAa,sBAAsB,sBAAsB;AAAA,MACvE,UAAU,OAAO,OAAO,CAAC,GAAG,QAAQ,CAAC;AAAA,IACvC;AAAA,EACF,UAAE;AACA,gBAAY;AACZ,YAAQ,oBAAoB,SAAS,OAAO;AAAA,EAC9C;AACF;",
-  "names": ["ObjectReferenceZod", "ObjectReferenceZod"]
+  "sources": ["../../src/fleetConfiguration.ts", "../../src/jsonSnapshot.ts", "../../src/fleetFold.ts", "../../src/fleetSignal.ts", "../../src/limits.ts", "../../src/resolveFleetPayload.ts", "../../src/clock.ts", "../../src/verifyFleetPayload.ts", "../../src/resolveObject.ts", "../../src/verifyObject.ts"],
+  "sourcesContent": ["import { AddressZod, HashZod } from '@xyo-network/service-kit-schemas'\n\nimport { snapshotJson } from './jsonSnapshot.js'\n\nexport interface LocalFleetConfigurationProfile {\n  readonly fleetRoot: string\n  readonly maxConfigurationBytes: number\n  readonly maxMembers: number\n  readonly maxRevisionBytes: number\n  readonly maxTotalBytes: number\n  readonly owner: string\n}\nexport interface OpaqueFleetConfiguration {\n  readonly bytes: Uint8Array\n  readonly memberRoot: string\n  readonly revision: string\n}\nexport interface FleetConfigurationAcknowledgment {\n  readonly assurance: 'private-provision-only'\n  readonly memberRoot: string\n  readonly revision: string\n  readonly status: 'acknowledged' | 'stale' | 'missing'\n}\nexport interface LocalFleetConfigurationStore {\n  acknowledge(memberRoot: string, revision: string): FleetConfigurationAcknowledgment\n  acknowledgment(memberRoot: string): FleetConfigurationAcknowledgment | undefined\n  /** Return an independent opaque byte copy. No parser or public authority is applied. */\n  provide(memberRoot: string): OpaqueFleetConfiguration | undefined\n  provision(configuration: OpaqueFleetConfiguration): void\n}\ninterface StoredConfiguration {\n  readonly bytes: Uint8Array\n  readonly revision: string\n}\n\nfunction selectedProfile(configuration: LocalFleetConfigurationProfile) {\n  const profile = snapshotJson(configuration, {\n    maxBodyBytes: 1024, maxDepth: 2, maxNodes: 16,\n  }) as unknown as LocalFleetConfigurationProfile\n  const keys = ['fleetRoot', 'maxConfigurationBytes', 'maxMembers', 'maxRevisionBytes', 'maxTotalBytes', 'owner']\n  if (Object.keys(profile).toSorted().join(',') !== keys.join(',')) throw new TypeError('Select a strict complete private configuration profile')\n  AddressZod.parse(profile.owner)\n  HashZod.parse(profile.fleetRoot)\n  for (const value of [profile.maxConfigurationBytes, profile.maxMembers, profile.maxRevisionBytes, profile.maxTotalBytes]) {\n    if (!Number.isSafeInteger(value) || value <= 0) throw new RangeError('Select finite positive private configuration limits')\n  }\n  if (profile.maxConfigurationBytes > profile.maxTotalBytes) throw new RangeError('Configuration cap must fit total storage cap')\n  return Object.freeze({ ...profile })\n}\nfunction pinConfiguration(configuration: OpaqueFleetConfiguration) {\n  const keys = ['bytes', 'memberRoot', 'revision']\n  if (Reflect.ownKeys(configuration).length !== keys.length) throw new TypeError('Opaque provision requires a closed data record')\n  const values: Record<string, unknown> = {}\n  for (const key of keys) {\n    const property = Object.getOwnPropertyDescriptor(configuration, key)\n    if (property?.enumerable !== true || !('value' in property)) throw new TypeError('Opaque provision requires own data properties')\n    values[key] = property.value\n  }\n  return Object.freeze(values) as unknown as OpaqueFleetConfiguration\n}\nfunction copyBytes(bytes: Uint8Array, maxBytes: number) {\n  if (!(bytes instanceof Uint8Array) || Object.getPrototypeOf(bytes) !== Uint8Array.prototype) throw new TypeError('Opaque configuration must be plain Uint8Array')\n  if (bytes.byteLength > maxBytes) throw new RangeError('Opaque configuration exceeds selected cap')\n  return Uint8Array.from(bytes)\n}\nconst encoder = new TextEncoder()\n\nfunction checkRevision(revision: string, maximum: number) {\n  if (typeof revision !== 'string' || revision.length === 0 || revision.length > maximum || encoder.encode(revision).byteLength > maximum) {\n    throw new RangeError('Opaque revision must fit its selected byte cap')\n  }\n}\nfunction sameBytes(left: Uint8Array, right: Uint8Array) {\n  return left.length === right.length && left.every((value, index) => value === right[index])\n}\n\n/**\n * Volatile one-realm private provision profile. The configured local manager controls calls;\n * it is not a remote authentication protocol, a public grant, or a persistent backend.\n */\nexport function createLocalFleetConfigurationStore(configurationProfile: LocalFleetConfigurationProfile): LocalFleetConfigurationStore {\n  const profile = selectedProfile(configurationProfile)\n  const desired = new Map<string, StoredConfiguration>()\n  const received = new Map<string, FleetConfigurationAcknowledgment>()\n  let totalBytes = 0\n  const provide = (memberRoot: string): OpaqueFleetConfiguration | undefined => {\n    HashZod.parse(memberRoot)\n    const current = desired.get(memberRoot)\n    return current === undefined\n      ? undefined\n      : Object.freeze({\n          memberRoot, revision: current.revision, bytes: Uint8Array.from(current.bytes),\n        })\n  }\n  const provision = (input: OpaqueFleetConfiguration) => {\n    const configuration = pinConfiguration(input)\n    HashZod.parse(configuration.memberRoot)\n    checkRevision(configuration.revision, profile.maxRevisionBytes)\n    const bytes = copyBytes(configuration.bytes, profile.maxConfigurationBytes)\n    const prior = desired.get(configuration.memberRoot)\n    if (prior?.revision === configuration.revision && !sameBytes(prior.bytes, bytes)) throw new TypeError('An opaque revision cannot name different bytes')\n    if (prior === undefined && desired.size >= profile.maxMembers) throw new RangeError('Private member capacity exceeded')\n    const nextBytes = totalBytes - (prior?.bytes.byteLength ?? 0) + bytes.byteLength\n    if (nextBytes > profile.maxTotalBytes) throw new RangeError('Private storage capacity exceeded')\n    if (prior?.revision !== configuration.revision) received.delete(configuration.memberRoot)\n    desired.set(configuration.memberRoot, { revision: configuration.revision, bytes })\n    totalBytes = nextBytes\n  }\n  const acknowledge = (memberRoot: string, revision: string): FleetConfigurationAcknowledgment => {\n    HashZod.parse(memberRoot)\n    checkRevision(revision, profile.maxRevisionBytes)\n    const current = desired.get(memberRoot)\n    const status = current === undefined ? 'missing' : (current.revision === revision ? 'acknowledged' : 'stale')\n    const result = Object.freeze({\n      status, assurance: 'private-provision-only' as const, memberRoot, revision,\n    })\n    if (status === 'acknowledged') received.set(memberRoot, result)\n    return result\n  }\n  const acknowledgment = (memberRoot: string): FleetConfigurationAcknowledgment | undefined => {\n    HashZod.parse(memberRoot)\n    return received.get(memberRoot)\n  }\n  return Object.freeze({\n    provide, provision, acknowledge, acknowledgment,\n  })\n}\n", "import type {\n  JsonValue, ObjectVerificationFailureReason, VerificationLimits,\n} from './types.js'\n\nexport class ObjectInputError extends Error {\n  readonly reason: ObjectVerificationFailureReason\n\n  constructor(reason: ObjectVerificationFailureReason) {\n    super(reason)\n    this.name = 'ObjectInputError'\n    this.reason = reason\n  }\n}\n\ninterface Budget {\n  readonly ancestors: WeakSet<object>\n  bytes: number\n  readonly limits: VerificationLimits\n  nodes: number\n}\n\nconst encoder = new TextEncoder()\n\nfunction spend(budget: Budget, bytes: number) {\n  budget.bytes += bytes\n  if (budget.bytes > budget.limits.maxBodyBytes) throw new ObjectInputError('body-too-large')\n}\n\nfunction textSize(budget: Budget, text: string) {\n  // Reject an oversized string before allocating its serialized/encoded copy.\n  if (text.length > budget.limits.maxBodyBytes - budget.bytes) throw new ObjectInputError('body-too-large')\n  spend(budget, encoder.encode(JSON.stringify(text)).byteLength)\n}\n\nfunction propertyValue(object: object, key: string): unknown {\n  const descriptor = Object.getOwnPropertyDescriptor(object, key)\n  if (descriptor?.enumerable !== true || !('value' in descriptor)) {\n    throw new ObjectInputError('invalid-json')\n  }\n  return descriptor.value\n}\n\nfunction snapshotArray(value: unknown[], budget: Budget, depth: number): readonly JsonValue[] {\n  if (Object.getPrototypeOf(value) !== Array.prototype) throw new ObjectInputError('invalid-json')\n  if (value.length > budget.limits.maxNodes - budget.nodes) throw new ObjectInputError('structure-limit')\n  // JSON arrays cannot carry holes, symbols, accessors, or extra object fields.\n  if (Reflect.ownKeys(value).length !== value.length + 1) throw new ObjectInputError('invalid-json')\n  spend(budget, 2)\n  const output: JsonValue[] = []\n  for (let index = 0; index < value.length; index++) {\n    if (index > 0) spend(budget, 1)\n    output.push(snapshotValue(propertyValue(value, String(index)), budget, depth + 1))\n  }\n  return Object.freeze(output)\n}\n\nfunction snapshotObject(value: object, budget: Budget, depth: number): JsonValue {\n  const prototype: unknown = Object.getPrototypeOf(value)\n  if (prototype !== null && prototype !== Object.prototype) throw new ObjectInputError('invalid-json')\n  const keys = Reflect.ownKeys(value)\n  if (keys.length > budget.limits.maxNodes - budget.nodes) throw new ObjectInputError('structure-limit')\n  spend(budget, 2)\n  const entries: [string, JsonValue][] = []\n  for (const key of keys) {\n    // The SDK's object reconstruction cannot bind a literal __proto__ key reliably.\n    if (typeof key !== 'string' || key === '__proto__') throw new ObjectInputError('invalid-json')\n    if (entries.length > 0) spend(budget, 1)\n    textSize(budget, key)\n    spend(budget, 1)\n    entries.push([key, snapshotValue(propertyValue(value, key), budget, depth + 1)])\n  }\n  // Construct own data properties without interpreting object keys as setters.\n  return Object.freeze(Object.fromEntries(entries))\n}\n\nfunction snapshotValue(value: unknown, budget: Budget, depth: number): JsonValue {\n  budget.nodes++\n  if (depth > budget.limits.maxDepth || budget.nodes > budget.limits.maxNodes) {\n    throw new ObjectInputError('structure-limit')\n  }\n  if (value === null) {\n    spend(budget, 4)\n    return null\n  }\n  switch (typeof value) {\n    case 'string': {\n      textSize(budget, value)\n      return value\n    }\n    case 'boolean': {\n      spend(budget, value ? 4 : 5)\n      return value\n    }\n    case 'number': {\n      if (!Number.isFinite(value)) throw new ObjectInputError('invalid-json')\n      spend(budget, JSON.stringify(value).length)\n      return value\n    }\n    case 'object': {\n      if (budget.ancestors.has(value)) throw new ObjectInputError('invalid-json')\n      budget.ancestors.add(value)\n      try {\n        return Array.isArray(value)\n          ? snapshotArray(value, budget, depth)\n          : snapshotObject(value, budget, depth)\n      } finally {\n        budget.ancestors.delete(value)\n      }\n    }\n    default: {\n      throw new ObjectInputError('invalid-json')\n    }\n  }\n}\n\n/** Bounded, immutable JSON copy. This is not a replacement canonicalization algorithm. */\nexport function snapshotJson(candidate: unknown, limits: VerificationLimits): JsonValue {\n  return snapshotValue(candidate, {\n    limits, ancestors: new WeakSet<object>(), bytes: 0, nodes: 0,\n  }, 0)\n}\n", "import type {\n  FleetControl, FleetMember, FleetPayload, FleetPublicationScope,\n} from '@xyo-network/service-kit-schemas'\nimport {\n  AddressZod, ChainIdZod, FleetControlSchema, FleetControlZod, FleetMemberZod, FleetPublicationScopeZod, FleetZod, HashZod, parseFleetPayload,\n} from '@xyo-network/service-kit-schemas'\n\nimport { captureFleetSignal, fleetSignalAborted } from './fleetSignal.js'\nimport { snapshotJson } from './jsonSnapshot.js'\nimport { verificationLimits } from './limits.js'\nimport type { VerificationLimits } from './types.js'\n\nexport interface FleetFoldLimits extends VerificationLimits {\n  readonly maxControls: number\n  readonly maxDeclarations: number\n  readonly maxGrants: number\n  readonly maxMembers: number\n}\nexport interface FleetDeclarationFact {\n  readonly payload: Readonly<FleetPayload>\n  readonly root: string\n}\n/** Caller-validated native occurrence facts. This interface itself proves no signatures or completeness. */\nexport interface FleetControlFact extends FleetDeclarationFact {\n  readonly authorizer: string\n  readonly block: number\n  readonly chainId: string\n  readonly payload: Readonly<FleetControl>\n  readonly payloadIndex: number\n  readonly transactionIndex: number\n}\nexport interface FoldFleetControlsOptions {\n  readonly chainId: string\n  readonly controls: readonly FleetControlFact[]\n  readonly declarations: readonly FleetDeclarationFact[]\n  readonly fleetRoot: string\n  readonly genesisRoot: string\n  readonly limits: FleetFoldLimits\n  readonly owner: string\n  readonly publicationBlock: number\n  readonly signal?: AbortSignal\n}\nexport interface FleetMemberState {\n  readonly active: boolean\n  readonly roleId: string\n  readonly root: string\n}\nexport interface FleetGrantState {\n  readonly controlRoot: string\n  readonly expiresAtBlock?: number\n  readonly memberRoot: string\n  readonly publisherAddress: string\n  readonly scopeRoot: string\n}\nexport interface FoldedFleetView {\n  readonly assurance: 'validated-input-only'\n  readonly chainId: string\n  readonly fleetActive: boolean\n  readonly fleetRoot: string\n  readonly genesisRoot: string\n  readonly grants: readonly FleetGrantState[]\n  readonly headRoot?: string\n  readonly members: readonly FleetMemberState[]\n  readonly owner: string\n  readonly publicationBlock: number\n  readonly status: 'folded'\n}\nexport interface FleetFoldFailure {\n  readonly assurance: 'validated-input-only'\n  readonly reason: 'resource-limit' | 'missing-declaration' | 'invalid-input' | 'invalid-transition' | 'missing-predecessor' | 'bootstrap' | 'successor' | 'definition' | 'cancelled'\n  readonly status: 'incomplete' | 'conflict' | 'unsupported' | 'aborted'\n}\nexport type FleetFoldResult = FoldedFleetView | FleetFoldFailure\n\ninterface State {\n  active: boolean\n  readonly declarations: Map<string, FleetPayload>\n  readonly grants: Map<string, FleetGrantState>\n  head?: string\n  readonly members: Map<string, boolean>\n  readonly seen: Set<string>\n}\n\nfunction failure(status: FleetFoldFailure['status'], reason: FleetFoldFailure['reason']): FleetFoldFailure {\n  return Object.freeze({\n    status, reason, assurance: 'validated-input-only',\n  })\n}\nfunction safeBlock(value: number) {\n  return Number.isSafeInteger(value) && value >= 0\n}\nfunction selectedLimits(limits: FleetFoldLimits) {\n  const pinned = snapshotJson(limits, {\n    maxBodyBytes: 1024, maxDepth: 2, maxNodes: 16,\n  }) as unknown as FleetFoldLimits\n  const keys = ['maxBodyBytes', 'maxControls', 'maxDeclarations', 'maxDepth', 'maxGrants', 'maxMembers', 'maxNodes']\n  if (Object.keys(pinned).toSorted().join(',') !== keys.join(',')) throw new TypeError('Select a strict complete fleet fold profile')\n  verificationLimits(pinned)\n  for (const value of [pinned.maxControls, pinned.maxDeclarations, pinned.maxGrants, pinned.maxMembers]) {\n    if (!Number.isSafeInteger(value) || value <= 0) throw new RangeError('Select finite positive fold limits')\n  }\n  return Object.freeze({ ...pinned })\n}\nfunction boundedSlots<T>(values: readonly T[], maximum: number): readonly T[] {\n  if (!Array.isArray(values) || values.length > maximum) throw new RangeError('Fleet input exceeds selected limit')\n  return Object.freeze(Array.from({ length: values.length }, (_, index): T => {\n    const descriptor = Object.getOwnPropertyDescriptor(values, String(index))\n    if (descriptor?.enumerable !== true || !('value' in descriptor)) throw new TypeError('Fleet inputs require dense own data slots')\n    return descriptor.value as T\n  }))\n}\nfunction declarationMap(facts: readonly FleetDeclarationFact[], limits: FleetFoldLimits) {\n  const declarations = new Map<string, FleetPayload>()\n  for (const input of facts) {\n    const fact = snapshotJson(input, limits) as unknown as FleetDeclarationFact\n    HashZod.parse(fact.root)\n    const payload = parseFleetPayload(fact.payload)\n    if (payload === undefined || payload.schema === FleetControlSchema || declarations.has(fact.root)) throw new TypeError('Invalid fleet declaration fact')\n    declarations.set(fact.root, payload)\n  }\n  return declarations\n}\nfunction positionAfter(left: FleetControlFact, right: FleetControlFact) {\n  return left.block > right.block || (left.block === right.block && (left.transactionIndex > right.transactionIndex\n    || (left.transactionIndex === right.transactionIndex && left.payloadIndex > right.payloadIndex)))\n}\nfunction controlFact(fact: FleetControlFact, limits: FleetFoldLimits): FleetControlFact | undefined {\n  const pinned = snapshotJson(fact, limits) as unknown as FleetControlFact\n  const isValidPosition = safeBlock(pinned.block) && safeBlock(pinned.transactionIndex) && safeBlock(pinned.payloadIndex)\n  const hasCanonicalLabels = AddressZod.safeParse(pinned.authorizer).success && ChainIdZod.safeParse(pinned.chainId).success && HashZod.safeParse(pinned.root).success\n  if (!isValidPosition || !hasCanonicalLabels) return\n  const parsed = FleetControlZod.safeParse(pinned.payload)\n  return parsed.success ? { ...pinned, payload: parsed.data } : undefined\n}\nfunction member(state: State, root: string, fleetRoot: string): FleetMember | undefined {\n  const parsed = FleetMemberZod.safeParse(state.declarations.get(root))\n  return parsed.success && parsed.data.fleetRoot === fleetRoot ? parsed.data : undefined\n}\nfunction scope(state: State, root: string, fleetRoot: string): FleetPublicationScope | undefined {\n  const parsed = FleetPublicationScopeZod.safeParse(state.declarations.get(root))\n  return parsed.success && parsed.data.fleetRoot === fleetRoot ? parsed.data : undefined\n}\nfunction clearMemberGrants(state: State, memberRoot: string) {\n  for (const [key, grant] of state.grants) {\n    if (grant.memberRoot === memberRoot) state.grants.delete(key)\n  }\n}\nfunction grantKey(payload: { readonly memberRoot: string; readonly publisherAddress: string; readonly scopeRoot: string }) {\n  return `${payload.memberRoot}:${payload.scopeRoot}:${payload.publisherAddress}`\n}\nfunction changeMember(state: State, payload: Extract<FleetControl, { operation: 'activate-member' | 'remove-member' }>, limits: FleetFoldLimits) {\n  if (member(state, payload.memberRoot, payload.fleetRoot) === undefined) return failure('incomplete', 'missing-declaration')\n  if (payload.operation === 'activate-member' && !state.active) return failure('incomplete', 'invalid-transition')\n  state.members.set(payload.memberRoot, payload.operation === 'activate-member')\n  if (state.members.size > limits.maxMembers) return failure('incomplete', 'resource-limit')\n  if (payload.operation === 'remove-member') clearMemberGrants(state, payload.memberRoot)\n}\nfunction changeGrant(state: State, fact: FleetControlFact, payload: Extract<FleetControl, { operation: 'grant-publisher' | 'remove-publisher' }>, limits: FleetFoldLimits) {\n  const selectedMember = member(state, payload.memberRoot, payload.fleetRoot)\n  const selectedScope = scope(state, payload.scopeRoot, payload.fleetRoot)\n  if (selectedMember === undefined || selectedScope === undefined) return failure('incomplete', 'missing-declaration')\n  if (selectedMember.roleId !== selectedScope.roleId) return failure('incomplete', 'invalid-transition')\n  const key = grantKey(payload)\n  if (payload.operation === 'remove-publisher') {\n    state.grants.delete(key)\n    return\n  }\n  if (!state.active || state.members.get(payload.memberRoot) !== true) return failure('incomplete', 'invalid-transition')\n  const activation = fact.block + 1\n  if (!Number.isSafeInteger(activation) || (payload.expiresAtBlock !== undefined && payload.expiresAtBlock <= activation)) {\n    return failure('incomplete', 'invalid-transition')\n  }\n  state.grants.set(key, Object.freeze({\n    memberRoot: payload.memberRoot,\n    scopeRoot: payload.scopeRoot,\n    publisherAddress: payload.publisherAddress,\n    controlRoot: fact.root,\n    ...(payload.expiresAtBlock !== undefined && { expiresAtBlock: payload.expiresAtBlock }),\n  }))\n  if (state.grants.size > limits.maxGrants) return failure('incomplete', 'resource-limit')\n}\nfunction applyControl(state: State, fact: FleetControlFact, limits: FleetFoldLimits) {\n  const payload = fact.payload\n  switch (payload.operation) {\n    case 'activate-fleet': {\n      state.active = true\n      return\n    }\n    case 'remove-fleet': {\n      state.active = false\n      state.grants.clear()\n      return\n    }\n    case 'activate-member':\n    case 'remove-member': {\n      return changeMember(state, payload, limits)\n    }\n    case 'grant-publisher':\n    case 'remove-publisher': {\n      return changeGrant(state, fact, payload, limits)\n    }\n  }\n}\nfunction advance(state: State, fact: FleetControlFact, limits: FleetFoldLimits) {\n  if (state.seen.has(fact.root)) return\n  const previous = fact.payload.previousControlRoot\n  if (state.head === undefined && (previous !== undefined || fact.payload.operation !== 'activate-fleet')) return failure('incomplete', 'missing-predecessor')\n  if (previous === undefined && state.head !== undefined) return failure('conflict', 'bootstrap')\n  if (state.head !== undefined && previous !== state.head) {\n    return state.seen.has(previous ?? '') ? failure('conflict', 'successor') : failure('incomplete', 'missing-predecessor')\n  }\n  const error = applyControl(state, fact, limits)\n  if (error !== undefined) return error\n  state.head = fact.root\n  state.seen.add(fact.root)\n}\nfunction foldedView(state: State, options: FoldFleetControlsOptions): FoldedFleetView {\n  const members = [...state.members].map(([root, active]): FleetMemberState => {\n    const declaration = member(state, root, options.fleetRoot)\n    if (declaration === undefined) throw new TypeError('Missing applied member')\n    return Object.freeze({\n      root, active, roleId: declaration.roleId,\n    })\n  })\n  const grants = state.grants.values().filter(grant => grant.expiresAtBlock === undefined || options.publicationBlock < grant.expiresAtBlock).toArray()\n  return Object.freeze({\n    status: 'folded',\n    assurance: 'validated-input-only',\n    owner: options.owner,\n    fleetRoot: options.fleetRoot,\n    chainId: options.chainId,\n    genesisRoot: options.genesisRoot,\n    publicationBlock: options.publicationBlock,\n    fleetActive: state.active,\n    ...(state.head !== undefined && { headRoot: state.head }),\n    members: Object.freeze(members),\n    grants: Object.freeze(grants),\n  })\n}\nfunction foldFacts(state: State, facts: readonly FleetControlFact[], options: FoldFleetControlsOptions, limits: FleetFoldLimits): FleetFoldResult {\n  let previous: FleetControlFact | undefined\n  for (const input of facts) {\n    if (options.signal !== undefined && fleetSignalAborted(options.signal)) return failure('aborted', 'cancelled')\n    const fact = controlFact(input, limits)\n    if (fact === undefined) return failure('unsupported', 'definition')\n    if (fact.block > options.publicationBlock || (previous !== undefined && !positionAfter(fact, previous))) return failure('incomplete', 'invalid-input')\n    previous = fact\n    if (fact.chainId !== options.chainId || fact.authorizer !== options.owner || fact.payload.fleetRoot !== options.fleetRoot\n      // Controls carried in the publication block do not affect that block's authority.\n      || fact.block === options.publicationBlock) continue\n    const error = advance(state, fact, limits)\n    if (error !== undefined) return error\n  }\n  return foldedView(state, options)\n}\n\n/**\n * Pure B4 lifecycle fold of caller-validated facts. It never claims authenticated or complete history.\n * A native finalized-evidence composition must prove original root/signature/carrying correspondence,\n * every height's fork identity, the exact anchor and complete enumeration before using it as authority.\n */\nexport function foldFleetControls(options: FoldFleetControlsOptions): FleetFoldResult {\n  const limits = selectedLimits(options.limits)\n  const signal = captureFleetSignal(options.signal)\n  AddressZod.parse(options.owner)\n  HashZod.parse(options.fleetRoot)\n  HashZod.parse(options.genesisRoot)\n  ChainIdZod.parse(options.chainId)\n  if (!safeBlock(options.publicationBlock)) throw new RangeError('Publication block must be a nonnegative safe integer')\n  if (options.signal !== undefined && fleetSignalAborted(options.signal)) return failure('aborted', 'cancelled')\n  try {\n    const declarations = declarationMap(boundedSlots(options.declarations, limits.maxDeclarations), limits)\n    const fleet = FleetZod.safeParse(declarations.get(options.fleetRoot))\n    if (!fleet.success) return failure('incomplete', 'missing-declaration')\n    if (fleet.data.owner !== options.owner) return failure('incomplete', 'invalid-input')\n    const state: State = {\n      active: false, declarations, grants: new Map(), members: new Map(), seen: new Set(),\n    }\n    return foldFacts(state, boundedSlots(options.controls, limits.maxControls), { ...options, signal }, limits)\n  } catch (error) {\n    return failure('incomplete', error instanceof RangeError ? 'resource-limit' : 'invalid-input')\n  }\n}\n\nexport interface FleetPublisherMatch {\n  readonly assurance: 'validated-input-only'\n  readonly grant?: FleetGrantState\n  readonly status: 'matched' | 'absent' | 'conflict'\n}\n/** Match only within the supplied fold; this supplies no public authorization or completeness claim. */\nexport function matchFleetPublisher(view: FoldedFleetView, scopeRoot: string, publisherAddress: string): FleetPublisherMatch {\n  HashZod.parse(scopeRoot)\n  AddressZod.parse(publisherAddress)\n  const matching = view.fleetActive ? view.grants.filter(grant => grant.scopeRoot === scopeRoot && grant.publisherAddress === publisherAddress) : []\n  if (matching.length > 1) return Object.freeze({ status: 'conflict', assurance: 'validated-input-only' })\n  return matching.length === 0\n    ? Object.freeze({ status: 'absent', assurance: 'validated-input-only' })\n    : Object.freeze({\n        status: 'matched', assurance: 'validated-input-only', grant: matching[0],\n      })\n}\n", "const abortedDescriptor = Object.getOwnPropertyDescriptor(AbortSignal.prototype, 'aborted')\nconst abortedGetter: unknown = Reflect.get(abortedDescriptor ?? {}, 'get')\nconst nativeEvents = EventTarget.prototype as unknown as { addEventListener: (this: void, ...args: unknown[]) => void; removeEventListener: (this: void, ...args: unknown[]) => void }\nconst addListener = nativeEvents.addEventListener\nconst removeListener = nativeEvents.removeEventListener\nconst apply = Reflect.apply\n\n/** Native-brand admission without consulting shadowable caller instance properties. */\nexport function captureFleetSignal(value: unknown): AbortSignal | undefined {\n  if (value === undefined) return\n  if (typeof abortedGetter !== 'function') throw new TypeError('Native AbortSignal is required')\n  apply(abortedGetter, value, [])\n  return value as AbortSignal\n}\nexport function fleetSignalAborted(signal: AbortSignal): boolean {\n  if (typeof abortedGetter !== 'function') throw new TypeError('Native AbortSignal is required')\n  return apply(abortedGetter, signal, []) as boolean\n}\nexport function listenFleetAbort(signal: AbortSignal | undefined, listener: () => void): () => void {\n  if (signal === undefined) return () => { /* No caller cancellation. */ }\n  apply(addListener, signal, ['abort', listener, { once: true }])\n  return () => {\n    apply(removeListener, signal, ['abort', listener])\n  }\n}\n", "import type { ResolutionLimits, VerificationLimits } from './types.js'\n\nexport const MAX_TIMER_DELAY_MS = 2_147_483_647\n\nexport const DEFAULT_VERIFICATION_LIMITS: VerificationLimits = Object.freeze({\n  maxBodyBytes: 65_536,\n  maxDepth: 32,\n  maxNodes: 10_000,\n})\n\nexport const DEFAULT_RESOLUTION_LIMITS: ResolutionLimits = Object.freeze({\n  ...DEFAULT_VERIFICATION_LIMITS,\n  maxSeeds: 16,\n  maxCandidatesPerSeed: 16,\n  attemptTimeoutMs: 2000,\n  totalTimeoutMs: 10_000,\n})\n\nfunction positiveInteger(value: number, name: string) {\n  if (!Number.isSafeInteger(value) || value <= 0) {\n    throw new RangeError(name + ' must be a positive safe integer')\n  }\n}\n\nexport function verificationLimits(options: Partial<VerificationLimits> = {}): VerificationLimits {\n  const limits = { ...DEFAULT_VERIFICATION_LIMITS, ...options }\n  positiveInteger(limits.maxBodyBytes, 'maxBodyBytes')\n  positiveInteger(limits.maxDepth, 'maxDepth')\n  positiveInteger(limits.maxNodes, 'maxNodes')\n  return Object.freeze(limits)\n}\n\nexport function resolutionLimits(options: Partial<ResolutionLimits> = {}): ResolutionLimits {\n  const limits = { ...DEFAULT_RESOLUTION_LIMITS, ...options }\n  verificationLimits(limits)\n  positiveInteger(limits.maxSeeds, 'maxSeeds')\n  positiveInteger(limits.maxCandidatesPerSeed, 'maxCandidatesPerSeed')\n  positiveInteger(limits.attemptTimeoutMs, 'attemptTimeoutMs')\n  positiveInteger(limits.totalTimeoutMs, 'totalTimeoutMs')\n  if (limits.attemptTimeoutMs > MAX_TIMER_DELAY_MS || limits.totalTimeoutMs > MAX_TIMER_DELAY_MS) {\n    throw new RangeError('Timeouts must fit a signed 32-bit millisecond timer')\n  }\n  return Object.freeze(limits)\n}\n", "import type { FleetPayloadFamily } from '@xyo-network/service-kit-schemas'\nimport { HashZod } from '@xyo-network/service-kit-schemas'\n\nimport { monotonicClock, scheduleDeadline } from './clock.js'\nimport {\n  captureFleetSignal, fleetSignalAborted, listenFleetAbort,\n} from './fleetSignal.js'\nimport { resolutionLimits } from './limits.js'\nimport type {\n  ConfiguredSeed, ResolutionLimits, ResolveObjectOptions,\n} from './types.js'\nimport type { VerifiedFleetPayload } from './verifyFleetPayload.js'\nimport { verifyFleetPayload } from './verifyFleetPayload.js'\n\nexport interface FleetResolutionAttempt {\n  readonly seedId: string\n  readonly status: 'resolved' | 'missing' | 'invalid' | 'unsupported' | 'reader-error' | 'resource-limit' | 'timeout'\n}\nexport type FleetPayloadResolution\n  = | (VerifiedFleetPayload & { readonly attempts: readonly FleetResolutionAttempt[] })\n    | { readonly attempts: readonly FleetResolutionAttempt[]; readonly reason: 'unavailable' | 'deadline' | 'resource-limit'; readonly status: 'incomplete' }\n    | { readonly attempts: readonly FleetResolutionAttempt[]; readonly status: 'aborted' }\n\ninterface PinnedSeed {\n  readonly get: ConfiguredSeed['reader']['get']\n  readonly id: string\n}\ninterface SeedResult {\n  readonly payload?: VerifiedFleetPayload\n  readonly status: FleetResolutionAttempt['status']\n}\n\nfunction pinSeeds(value: readonly ConfiguredSeed[], maxSeeds: number) {\n  if (!Array.isArray(value) || value.length === 0 || value.length > maxSeeds) throw new RangeError('Explicit bounded readers required')\n  const ids = new Set<string>()\n  return Object.freeze(Array.from({ length: value.length }, (_, index): PinnedSeed => {\n    const slot = Object.getOwnPropertyDescriptor(value, String(index))\n    if (slot?.enumerable !== true || !('value' in slot)) throw new TypeError('Reader slots must be dense own data')\n    const seed = slot.value as ConfiguredSeed\n    const idSlot = Object.getOwnPropertyDescriptor(seed, 'id')\n    const readerSlot = Object.getOwnPropertyDescriptor(seed, 'reader')\n    if (idSlot === undefined || readerSlot === undefined || !('value' in idSlot) || !('value' in readerSlot)) {\n      throw new TypeError('Reader configuration must use own data properties')\n    }\n    const id: unknown = idSlot.value\n    if (typeof id !== 'string' || id.length === 0 || id.length > 128 || id.trim() !== id || ids.has(id)) {\n      throw new TypeError('Each reader requires a unique bounded ID')\n    }\n    const reader: unknown = readerSlot.value\n    if (typeof reader !== 'object' || reader === null) throw new TypeError('Each reader requires get')\n    const methodSlot = Object.getOwnPropertyDescriptor(reader, 'get')\n    if (methodSlot === undefined || !('value' in methodSlot) || typeof methodSlot.value !== 'function') {\n      throw new TypeError('Each reader requires an own data get method')\n    }\n    const get = methodSlot.value as ConfiguredSeed['reader']['get']\n    ids.add(id)\n    return Object.freeze({ id, get: get.bind(reader) })\n  }))\n}\n\nasync function readSeed(seed: PinnedSeed, root: string, family: FleetPayloadFamily, limits: ResolutionLimits, signal: AbortSignal, expired: () => boolean): Promise<SeedResult> {\n  if (fleetSignalAborted(signal) || expired()) return { status: 'timeout' }\n  const response: unknown = await seed.get([root], { signal, maxBodyBytes: limits.maxBodyBytes })\n  if (fleetSignalAborted(signal) || expired()) return { status: 'timeout' }\n  if (!Array.isArray(response) || response.length > limits.maxCandidatesPerSeed) return { status: 'resource-limit' }\n  const candidates = Array.from({ length: response.length }, (_, index) => Object.getOwnPropertyDescriptor(response, String(index)))\n  let status: SeedResult['status'] = candidates.length === 0 ? 'missing' : 'invalid'\n  for (const slot of candidates) {\n    if (fleetSignalAborted(signal) || expired()) return { status: 'timeout' }\n    if (slot?.enumerable !== true || !('value' in slot)) continue\n    const result = await verifyFleetPayload(root, family, slot.value, limits)\n    if (fleetSignalAborted(signal) || expired()) return { status: 'timeout' }\n    if (result.status === 'verified') return { status: 'resolved', payload: result }\n    if (result.status === 'unsupported') status = 'unsupported'\n  }\n  return { status }\n}\n\nfunction attemptSeed(seed: PinnedSeed, root: string, family: FleetPayloadFamily, limits: ResolutionLimits, signal: AbortSignal, now: () => number, totalDeadline: number): Promise<SeedResult> {\n  const deadline = Math.min(totalDeadline, now() + limits.attemptTimeoutMs)\n  const expired = () => now() >= deadline\n  return new Promise((resolve) => {\n    const controller = new AbortController()\n    let isSettled = false\n    const finish = (result: SeedResult) => {\n      if (isSettled) return\n      isSettled = true\n      cancelTimer()\n      unlisten()\n      controller.abort()\n      resolve(expired() ? { status: 'timeout' } : result)\n    }\n    const onAbort = () => finish({ status: 'timeout' })\n    const cancelTimer = scheduleDeadline(now, deadline, () => finish({ status: 'timeout' }))\n    const unlisten = listenFleetAbort(signal, onAbort)\n    if (fleetSignalAborted(signal)) {\n      onAbort()\n      return\n    }\n    queueMicrotask(() => {\n      void (async () => {\n        let result: SeedResult\n        try {\n          result = await readSeed(seed, root, family, limits, controller.signal, expired)\n        } catch {\n          result = { status: 'reader-error' }\n        }\n        finish(result)\n      })()\n    })\n  })\n}\n\n/** Configured exact-root resolution only; no signer, history completeness or authority assertion. */\nexport async function resolveFleetPayload(root: string, family: FleetPayloadFamily, options: ResolveObjectOptions): Promise<FleetPayloadResolution> {\n  HashZod.parse(root)\n  const limits = resolutionLimits(options.limits)\n  const seeds = pinSeeds(options.seeds, limits.maxSeeds)\n  const signal = captureFleetSignal(options.signal)\n  const now = monotonicClock()\n  const deadline = now() + limits.totalTimeoutMs\n  const attempts: FleetResolutionAttempt[] = []\n  const controller = new AbortController()\n  const state: { terminal?: 'aborted' | 'deadline' } = {}\n  const terminate = (reason: 'aborted' | 'deadline') => {\n    state.terminal ??= reason\n    controller.abort()\n  }\n  const onAbort = () => terminate('aborted')\n  const unlisten = listenFleetAbort(signal, onAbort)\n  if (signal !== undefined && fleetSignalAborted(signal)) onAbort()\n  const cancelTotal = scheduleDeadline(now, deadline, () => terminate('deadline'))\n  try {\n    for (const seed of seeds) {\n      if (now() >= deadline) terminate('deadline')\n      if (state.terminal !== undefined) break\n      const result = await attemptSeed(seed, root, family, limits, controller.signal, now, deadline)\n      attempts.push(Object.freeze({ seedId: seed.id, status: result.status }))\n      if (now() >= deadline) terminate('deadline')\n      if (state.terminal !== undefined) break\n      if (result.payload !== undefined) return Object.freeze({ ...result.payload, attempts: Object.freeze(attempts) })\n      if (result.status === 'resource-limit') return Object.freeze({\n        status: 'incomplete', reason: 'resource-limit', attempts: Object.freeze(attempts),\n      })\n    }\n    const frozen = Object.freeze(attempts)\n    return state.terminal === 'aborted'\n      ? Object.freeze({ status: 'aborted', attempts: frozen })\n      : Object.freeze({\n          status: 'incomplete', reason: state.terminal === 'deadline' ? 'deadline' : 'unavailable', attempts: frozen,\n        })\n  } finally {\n    cancelTotal()\n    controller.abort()\n    unlisten()\n  }\n}\n", "/** Use the common runtime clock without introducing Node- or DOM-only ambient types. */\nexport function monotonicClock(): () => number {\n  const clock: unknown = 'performance' in globalThis ? globalThis.performance : undefined\n  if (typeof clock !== 'object' || clock === null || !('now' in clock) || typeof clock.now !== 'function') {\n    throw new TypeError('Object resolution requires performance.now()')\n  }\n  const read = clock.now.bind(clock) as () => unknown\n  return () => {\n    const now = read()\n    if (typeof now !== 'number' || !Number.isFinite(now)) throw new TypeError('Invalid monotonic clock')\n    return now\n  }\n}\n\n/** Native timers are wake-ups to check a deadline, not proof that its monotonic time has arrived. */\nexport function scheduleDeadline(now: () => number, deadline: number, expired: () => void): () => void {\n  let cancelled = false\n  let timer: ReturnType<typeof setTimeout> | undefined\n  const tick = () => {\n    if (cancelled) return\n    if (now() >= deadline) {\n      cancelled = true\n      expired()\n    } else {\n      arm()\n    }\n  }\n  const arm = () => {\n    // Round up and recheck: timer implementations may truncate delays or wake before the deadline.\n    const delay = Math.min(MAX_TIMER_DELAY_MS, Math.max(1, Math.ceil(deadline - now())))\n    timer = setTimeout(tick, delay)\n  }\n  arm()\n  return () => {\n    cancelled = true\n    clearTimeout(timer)\n  }\n}\nimport { MAX_TIMER_DELAY_MS } from './limits.js'\n", "import { isAnyPayload, PayloadBuilder } from '@xyo-network/sdk-protocol'\nimport type { FleetPayload, FleetPayloadFamily } from '@xyo-network/service-kit-schemas'\nimport {\n  FLEET_PAYLOAD_VERSION, HashZod, parseFleetPayload,\n} from '@xyo-network/service-kit-schemas'\n\nimport { ObjectInputError, snapshotJson } from './jsonSnapshot.js'\nimport { verificationLimits } from './limits.js'\nimport type { ContentPayload, VerificationLimits } from './types.js'\n\nexport interface VerifiedFleetPayload {\n  readonly assurance: 'sdk-root-verified'\n  /** Original bounded snapshot, including client and storage metadata. */\n  readonly nativePayload: ContentPayload\n  /** Strict body/version view; never the input to root hashing. */\n  readonly payload: Readonly<FleetPayload>\n  readonly root: string\n  readonly status: 'verified'\n}\n\nexport type FleetPayloadVerification\n  = | VerifiedFleetPayload\n    | { readonly reason: 'family' | 'version'; readonly status: 'unsupported' }\n    | { readonly reason: 'invalid-json' | 'body-too-large' | 'structure-limit' | 'hash-mismatch' | 'invalid-envelope'; readonly status: 'invalid' }\n\n/** B4 original-root verification establishes content identity, never signer or public authority. */\nexport async function verifyFleetPayload(\n  root: string,\n  family: FleetPayloadFamily,\n  candidate: unknown,\n  options: Partial<VerificationLimits> = {},\n): Promise<FleetPayloadVerification> {\n  HashZod.parse(root)\n  const limits = verificationLimits(options)\n  try {\n    const snapshot = snapshotJson(candidate, limits)\n    if (snapshot === null || typeof snapshot !== 'object' || Array.isArray(snapshot) || !isAnyPayload(snapshot)) {\n      return Object.freeze({ status: 'invalid', reason: 'invalid-envelope' })\n    }\n    if (await PayloadBuilder.hash(snapshot) !== root) return Object.freeze({ status: 'invalid', reason: 'hash-mismatch' })\n    if (snapshot.schema !== family) return Object.freeze({ status: 'unsupported', reason: 'family' })\n    if (snapshot.$version !== FLEET_PAYLOAD_VERSION) return Object.freeze({ status: 'unsupported', reason: 'version' })\n    // Retain client metadata for closed-envelope dispatch as well as original-root hashing.\n    const body = PayloadBuilder.omitStorageMeta(snapshot)\n    if (parseFleetPayload(body) === undefined) return Object.freeze({ status: 'invalid', reason: 'invalid-envelope' })\n    return Object.freeze({\n      status: 'verified',\n      assurance: 'sdk-root-verified',\n      root,\n      nativePayload: snapshot as ContentPayload,\n      payload: snapshotJson(body, limits) as unknown as Readonly<FleetPayload>,\n    })\n  } catch (error) {\n    const reason = error instanceof ObjectInputError && (error.reason === 'body-too-large' || error.reason === 'structure-limit')\n      ? error.reason\n      : 'invalid-json'\n    return Object.freeze({ status: 'invalid', reason })\n  }\n}\n", "import type { ObjectReference } from '@xyo-network/service-kit-schemas'\nimport { ObjectReferenceZod } from '@xyo-network/service-kit-schemas'\n\nimport { monotonicClock, scheduleDeadline } from './clock.js'\nimport { resolutionLimits } from './limits.js'\nimport type {\n  AttemptStatus,\n  ConfiguredSeed,\n  ObjectResolutionResult,\n  ObjectVerificationFailureReason,\n  ResolutionAttempt,\n  ResolutionLimits,\n  ResolveObjectOptions,\n  VerifiedObject,\n} from './types.js'\nimport { verifyObject } from './verifyObject.js'\n\ninterface SeedResult {\n  readonly candidateFailures?: readonly ObjectVerificationFailureReason[]\n  readonly object?: VerifiedObject\n  readonly status: AttemptStatus\n}\n\nfunction configuredSeeds(seeds: readonly ConfiguredSeed[], limits: ResolutionLimits) {\n  if (!Array.isArray(seeds) || seeds.length === 0 || seeds.length > limits.maxSeeds) {\n    throw new RangeError('Configure between one and maxSeeds explicit readers')\n  }\n  const ids = new Set<string>()\n  const configured = seeds.map((seed: ConfiguredSeed): ConfiguredSeed => {\n    if (typeof seed.id !== 'string' || seed.id.length === 0 || seed.id.length > 128 || seed.id.trim() !== seed.id) {\n      throw new TypeError('Seed IDs must be nonempty, trimmed strings of at most 128 characters')\n    }\n    if (ids.has(seed.id)) throw new TypeError('Seed IDs must be unique')\n    if (typeof seed.reader?.get !== 'function') throw new TypeError('Each seed requires a reader.get method')\n    ids.add(seed.id)\n    // Pin the reader and label before the first await; do not consult mutable seed configuration later.\n    return Object.freeze({\n      id: seed.id,\n      reader: Object.freeze({ get: seed.reader.get.bind(seed.reader) }),\n    })\n  })\n  for (let index = 0; index < configured.length; index++) {\n    if (!Object.hasOwn(configured, index)) throw new TypeError('Seed configuration must not contain sparse slots')\n  }\n  return configured\n}\n\nasync function readCandidates(\n  seed: ConfiguredSeed,\n  reference: ObjectReference,\n  limits: ResolutionLimits,\n  signal: AbortSignal,\n  expired: () => boolean,\n): Promise<SeedResult> {\n  if (signal.aborted) return { status: 'aborted' }\n  if (expired()) return { status: 'timeout' }\n  const response: unknown = await seed.reader.get([reference.dataHash], { signal, maxBodyBytes: limits.maxBodyBytes })\n  if (signal.aborted) return { status: 'aborted' }\n  if (expired()) return { status: 'timeout' }\n  if (!Array.isArray(response)) return { status: 'malformed-response' }\n  const candidateCount = response.length\n  if (!Number.isSafeInteger(candidateCount) || candidateCount < 0) return { status: 'malformed-response' }\n  if (candidateCount > limits.maxCandidatesPerSeed) return { status: 'too-many-candidates' }\n  if (candidateCount === 0) return { status: 'missing' }\n  // Pin the bounded slots before verification yields; a reader must not enlarge the work budget.\n  const candidates = Array.from({ length: candidateCount }, (_, index) => Object.getOwnPropertyDescriptor(response, String(index)))\n  const candidateFailures: ObjectVerificationFailureReason[] = []\n  for (const descriptor of candidates) {\n    if (signal.aborted) return { status: 'aborted' }\n    if (expired()) return { status: 'timeout' }\n    if (descriptor === undefined || !('value' in descriptor)) {\n      candidateFailures.push('invalid-json')\n      continue\n    }\n    const candidate: unknown = descriptor.value\n    const result = await verifyObject(reference, candidate, limits)\n    if (signal.aborted) return { status: 'aborted' }\n    if (expired()) return { status: 'timeout' }\n    if (result.status === 'verified') return {\n      status: 'resolved', object: result, candidateFailures,\n    }\n    candidateFailures.push(result.reason)\n  }\n  return { status: 'invalid-object', candidateFailures }\n}\n\nfunction attemptSeed(\n  seed: ConfiguredSeed,\n  reference: ObjectReference,\n  limits: ResolutionLimits,\n  outerSignal: AbortSignal,\n  now: () => number,\n  totalDeadline: number,\n): Promise<SeedResult> {\n  const deadline = Math.min(now() + limits.attemptTimeoutMs, totalDeadline)\n  const expired = () => now() >= deadline\n  return new Promise((resolve) => {\n    const controller = new AbortController()\n    let isSettled = false\n    const finish = (result: SeedResult) => {\n      if (isSettled) return\n      // Timer callbacks may be delayed by synchronous work or a busy microtask queue.\n      // Reject late completions even when the timer has not had a chance to run.\n      const outcome: SeedResult = result.status !== 'aborted' && expired() ? { status: 'timeout' } : result\n      isSettled = true\n      cancelTimer()\n      outerSignal.removeEventListener('abort', onAbort)\n      if (outcome.status === 'timeout') controller.abort()\n      resolve(outcome)\n    }\n    const onAbort = () => {\n      controller.abort()\n      finish({ status: 'aborted' })\n    }\n    const cancelTimer = scheduleDeadline(now, deadline, () => {\n      controller.abort()\n      finish({ status: 'timeout' })\n    })\n    outerSignal.addEventListener('abort', onAbort, { once: true })\n    if (outerSignal.aborted) {\n      onAbort()\n      return\n    }\n    // Defer the read one microtask so abort and deadline checks win, then settle either outcome.\n    // Keep finish outside the rejection path so a failure inside finish is not reported as a reader error.\n    queueMicrotask(() => {\n      void (async () => {\n        let result: SeedResult\n        try {\n          result = await readCandidates(seed, reference, limits, controller.signal, expired)\n        } catch {\n          finish({ status: 'reader-error' })\n          return\n        }\n        finish(result)\n      })()\n    })\n  })\n}\n\nfunction diagnostic(seedId: string, result: SeedResult): ResolutionAttempt {\n  return Object.freeze({\n    seedId,\n    status: result.status,\n    ...(result.candidateFailures !== undefined && { candidateFailures: Object.freeze([...result.candidateFailures]) }),\n  })\n}\n\n/** Resolve exact content through configured readers only; never infer service absence or authority. */\nexport async function resolveObject(\n  reference: ObjectReference,\n  options: ResolveObjectOptions,\n): Promise<ObjectResolutionResult> {\n  const expected = Object.freeze(ObjectReferenceZod.parse(reference))\n  const limits = resolutionLimits(options.limits)\n  const seeds = configuredSeeds(options.seeds, limits)\n  const signal = options.signal\n  const attempts: ResolutionAttempt[] = []\n  if (signal?.aborted === true) return { status: 'aborted', attempts: Object.freeze(attempts) }\n\n  const now = monotonicClock()\n  const deadline = now() + limits.totalTimeoutMs\n  const controller = new AbortController()\n  const state: { terminal?: 'aborted' | 'deadline-exceeded' } = {}\n  const terminate = (reason: 'aborted' | 'deadline-exceeded') => {\n    if (state.terminal !== undefined) return\n    state.terminal = reason\n    controller.abort()\n  }\n  const onAbort = () => terminate('aborted')\n  signal?.addEventListener('abort', onAbort, { once: true })\n  const cancelTimer = scheduleDeadline(now, deadline, () => terminate('deadline-exceeded'))\n  try {\n    for (const seed of seeds) {\n      if (now() >= deadline) terminate('deadline-exceeded')\n      if (state.terminal !== undefined) break\n      const result = await attemptSeed(seed, expected, limits, controller.signal, now, deadline)\n      attempts.push(diagnostic(seed.id, result))\n      if (now() >= deadline) terminate('deadline-exceeded')\n      if (state.terminal !== undefined) break\n      if (result.object !== undefined) {\n        return Object.freeze({\n          status: 'resolved',\n          assurance: 'content-hash-verified',\n          reference: result.object.reference,\n          payload: result.object.payload,\n          seedId: seed.id,\n          attempts: Object.freeze([...attempts]),\n        })\n      }\n    }\n    if (state.terminal === 'aborted') return { status: 'aborted', attempts: Object.freeze([...attempts]) }\n    return {\n      status: 'unavailable',\n      reason: state.terminal === 'deadline-exceeded' ? 'deadline-exceeded' : 'seeds-exhausted',\n      attempts: Object.freeze([...attempts]),\n    }\n  } finally {\n    cancelTimer()\n    signal?.removeEventListener('abort', onAbort)\n  }\n}\n", "import { isAnyPayload, PayloadBuilder } from '@xyo-network/sdk-protocol'\nimport type { ObjectReference } from '@xyo-network/service-kit-schemas'\nimport {\n  DataLakeLocatorSchema, DataLakeLocatorZod,\n  ObjectReferenceZod,\n  ServiceAdvertisementSchema, ServiceAdvertisementZod,\n} from '@xyo-network/service-kit-schemas'\n\nimport { ObjectInputError, snapshotJson } from './jsonSnapshot.js'\nimport { verificationLimits } from './limits.js'\nimport type {\n  ContentPayload, ObjectVerificationResult, VerificationLimits,\n} from './types.js'\n\n/** Verify content only. No Claim, lifecycle, publisher authority, or freshness is established. */\nexport async function verifyObject(\n  reference: ObjectReference,\n  candidate: unknown,\n  options: Partial<VerificationLimits> = {},\n): Promise<ObjectVerificationResult> {\n  const expected = Object.freeze(ObjectReferenceZod.parse(reference))\n  const limits = verificationLimits(options)\n  try {\n    const snapshot = snapshotJson(candidate, limits)\n    if (snapshot === null || typeof snapshot !== 'object' || Array.isArray(snapshot)) {\n      return { status: 'invalid', reason: 'not-payload' }\n    }\n    // Metadata is bounded JSON input, but cannot decide the committed Payload representation.\n    const data = PayloadBuilder.omitMeta(snapshot)\n    // Use a guard, never a parser that strips unknown fields before hashing.\n    if (!isAnyPayload(data)) return { status: 'invalid', reason: 'not-payload' }\n    const actualHash = await PayloadBuilder.dataHash(data)\n    if (actualHash !== expected.dataHash) return { status: 'invalid', reason: 'hash-mismatch' }\n    if (data.schema !== expected.schema) return { status: 'invalid', reason: 'schema-mismatch' }\n\n    // These are strict validators without coercion, defaults, or transformations.\n    // Hash the complete data first, and return the data rather than a parser projection.\n    if (data.schema === ServiceAdvertisementSchema && !ServiceAdvertisementZod.safeParse(data).success) {\n      return { status: 'invalid', reason: 'invalid-descriptor' }\n    }\n    if (data.schema === DataLakeLocatorSchema && !DataLakeLocatorZod.safeParse(data).success) {\n      return { status: 'invalid', reason: 'invalid-descriptor' }\n    }\n    const payload = snapshotJson(data, limits) as ContentPayload\n    return Object.freeze({\n      status: 'verified', assurance: 'content-hash-verified', reference: expected, payload,\n    })\n  } catch (error) {\n    return {\n      status: 'invalid',\n      reason: error instanceof ObjectInputError ? error.reason : 'invalid-json',\n    }\n  }\n}\n"],
+  "mappings": ";AAAA,SAAS,YAAY,eAAe;;;ACI7B,IAAM,mBAAN,cAA+B,MAAM;AAAA,EACjC;AAAA,EAET,YAAY,QAAyC;AACnD,UAAM,MAAM;AACZ,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAChB;AACF;AASA,IAAM,UAAU,IAAI,YAAY;AAEhC,SAAS,MAAM,QAAgB,OAAe;AAC5C,SAAO,SAAS;AAChB,MAAI,OAAO,QAAQ,OAAO,OAAO,aAAc,OAAM,IAAI,iBAAiB,gBAAgB;AAC5F;AAEA,SAAS,SAAS,QAAgB,MAAc;AAE9C,MAAI,KAAK,SAAS,OAAO,OAAO,eAAe,OAAO,MAAO,OAAM,IAAI,iBAAiB,gBAAgB;AACxG,QAAM,QAAQ,QAAQ,OAAO,KAAK,UAAU,IAAI,CAAC,EAAE,UAAU;AAC/D;AAEA,SAAS,cAAc,QAAgB,KAAsB;AAC3D,QAAM,aAAa,OAAO,yBAAyB,QAAQ,GAAG;AAC9D,MAAI,YAAY,eAAe,QAAQ,EAAE,WAAW,aAAa;AAC/D,UAAM,IAAI,iBAAiB,cAAc;AAAA,EAC3C;AACA,SAAO,WAAW;AACpB;AAEA,SAAS,cAAc,OAAkB,QAAgB,OAAqC;AAC5F,MAAI,OAAO,eAAe,KAAK,MAAM,MAAM,UAAW,OAAM,IAAI,iBAAiB,cAAc;AAC/F,MAAI,MAAM,SAAS,OAAO,OAAO,WAAW,OAAO,MAAO,OAAM,IAAI,iBAAiB,iBAAiB;AAEtG,MAAI,QAAQ,QAAQ,KAAK,EAAE,WAAW,MAAM,SAAS,EAAG,OAAM,IAAI,iBAAiB,cAAc;AACjG,QAAM,QAAQ,CAAC;AACf,QAAM,SAAsB,CAAC;AAC7B,WAAS,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS;AACjD,QAAI,QAAQ,EAAG,OAAM,QAAQ,CAAC;AAC9B,WAAO,KAAK,cAAc,cAAc,OAAO,OAAO,KAAK,CAAC,GAAG,QAAQ,QAAQ,CAAC,CAAC;AAAA,EACnF;AACA,SAAO,OAAO,OAAO,MAAM;AAC7B;AAEA,SAAS,eAAe,OAAe,QAAgB,OAA0B;AAC/E,QAAM,YAAqB,OAAO,eAAe,KAAK;AACtD,MAAI,cAAc,QAAQ,cAAc,OAAO,UAAW,OAAM,IAAI,iBAAiB,cAAc;AACnG,QAAM,OAAO,QAAQ,QAAQ,KAAK;AAClC,MAAI,KAAK,SAAS,OAAO,OAAO,WAAW,OAAO,MAAO,OAAM,IAAI,iBAAiB,iBAAiB;AACrG,QAAM,QAAQ,CAAC;AACf,QAAM,UAAiC,CAAC;AACxC,aAAW,OAAO,MAAM;AAEtB,QAAI,OAAO,QAAQ,YAAY,QAAQ,YAAa,OAAM,IAAI,iBAAiB,cAAc;AAC7F,QAAI,QAAQ,SAAS,EAAG,OAAM,QAAQ,CAAC;AACvC,aAAS,QAAQ,GAAG;AACpB,UAAM,QAAQ,CAAC;AACf,YAAQ,KAAK,CAAC,KAAK,cAAc,cAAc,OAAO,GAAG,GAAG,QAAQ,QAAQ,CAAC,CAAC,CAAC;AAAA,EACjF;AAEA,SAAO,OAAO,OAAO,OAAO,YAAY,OAAO,CAAC;AAClD;AAEA,SAAS,cAAc,OAAgB,QAAgB,OAA0B;AAC/E,SAAO;AACP,MAAI,QAAQ,OAAO,OAAO,YAAY,OAAO,QAAQ,OAAO,OAAO,UAAU;AAC3E,UAAM,IAAI,iBAAiB,iBAAiB;AAAA,EAC9C;AACA,MAAI,UAAU,MAAM;AAClB,UAAM,QAAQ,CAAC;AACf,WAAO;AAAA,EACT;AACA,UAAQ,OAAO,OAAO;AAAA,IACpB,KAAK,UAAU;AACb,eAAS,QAAQ,KAAK;AACtB,aAAO;AAAA,IACT;AAAA,IACA,KAAK,WAAW;AACd,YAAM,QAAQ,QAAQ,IAAI,CAAC;AAC3B,aAAO;AAAA,IACT;AAAA,IACA,KAAK,UAAU;AACb,UAAI,CAAC,OAAO,SAAS,KAAK,EAAG,OAAM,IAAI,iBAAiB,cAAc;AACtE,YAAM,QAAQ,KAAK,UAAU,KAAK,EAAE,MAAM;AAC1C,aAAO;AAAA,IACT;AAAA,IACA,KAAK,UAAU;AACb,UAAI,OAAO,UAAU,IAAI,KAAK,EAAG,OAAM,IAAI,iBAAiB,cAAc;AAC1E,aAAO,UAAU,IAAI,KAAK;AAC1B,UAAI;AACF,eAAO,MAAM,QAAQ,KAAK,IACtB,cAAc,OAAO,QAAQ,KAAK,IAClC,eAAe,OAAO,QAAQ,KAAK;AAAA,MACzC,UAAE;AACA,eAAO,UAAU,OAAO,KAAK;AAAA,MAC/B;AAAA,IACF;AAAA,IACA,SAAS;AACP,YAAM,IAAI,iBAAiB,cAAc;AAAA,IAC3C;AAAA,EACF;AACF;AAGO,SAAS,aAAa,WAAoB,QAAuC;AACtF,SAAO,cAAc,WAAW;AAAA,IAC9B;AAAA,IAAQ,WAAW,oBAAI,QAAgB;AAAA,IAAG,OAAO;AAAA,IAAG,OAAO;AAAA,EAC7D,GAAG,CAAC;AACN;;;ADrFA,SAAS,gBAAgB,eAA+C;AACtE,QAAM,UAAU,aAAa,eAAe;AAAA,IAC1C,cAAc;AAAA,IAAM,UAAU;AAAA,IAAG,UAAU;AAAA,EAC7C,CAAC;AACD,QAAM,OAAO,CAAC,aAAa,yBAAyB,cAAc,oBAAoB,iBAAiB,OAAO;AAC9G,MAAI,OAAO,KAAK,OAAO,EAAE,SAAS,EAAE,KAAK,GAAG,MAAM,KAAK,KAAK,GAAG,EAAG,OAAM,IAAI,UAAU,wDAAwD;AAC9I,aAAW,MAAM,QAAQ,KAAK;AAC9B,UAAQ,MAAM,QAAQ,SAAS;AAC/B,aAAW,SAAS,CAAC,QAAQ,uBAAuB,QAAQ,YAAY,QAAQ,kBAAkB,QAAQ,aAAa,GAAG;AACxH,QAAI,CAAC,OAAO,cAAc,KAAK,KAAK,SAAS,EAAG,OAAM,IAAI,WAAW,qDAAqD;AAAA,EAC5H;AACA,MAAI,QAAQ,wBAAwB,QAAQ,cAAe,OAAM,IAAI,WAAW,8CAA8C;AAC9H,SAAO,OAAO,OAAO,EAAE,GAAG,QAAQ,CAAC;AACrC;AACA,SAAS,iBAAiB,eAAyC;AACjE,QAAM,OAAO,CAAC,SAAS,cAAc,UAAU;AAC/C,MAAI,QAAQ,QAAQ,aAAa,EAAE,WAAW,KAAK,OAAQ,OAAM,IAAI,UAAU,gDAAgD;AAC/H,QAAM,SAAkC,CAAC;AACzC,aAAW,OAAO,MAAM;AACtB,UAAM,WAAW,OAAO,yBAAyB,eAAe,GAAG;AACnE,QAAI,UAAU,eAAe,QAAQ,EAAE,WAAW,UAAW,OAAM,IAAI,UAAU,+CAA+C;AAChI,WAAO,GAAG,IAAI,SAAS;AAAA,EACzB;AACA,SAAO,OAAO,OAAO,MAAM;AAC7B;AACA,SAAS,UAAU,OAAmB,UAAkB;AACtD,MAAI,EAAE,iBAAiB,eAAe,OAAO,eAAe,KAAK,MAAM,WAAW,UAAW,OAAM,IAAI,UAAU,+CAA+C;AAChK,MAAI,MAAM,aAAa,SAAU,OAAM,IAAI,WAAW,2CAA2C;AACjG,SAAO,WAAW,KAAK,KAAK;AAC9B;AACA,IAAMA,WAAU,IAAI,YAAY;AAEhC,SAAS,cAAc,UAAkB,SAAiB;AACxD,MAAI,OAAO,aAAa,YAAY,SAAS,WAAW,KAAK,SAAS,SAAS,WAAWA,SAAQ,OAAO,QAAQ,EAAE,aAAa,SAAS;AACvI,UAAM,IAAI,WAAW,gDAAgD;AAAA,EACvE;AACF;AACA,SAAS,UAAU,MAAkB,OAAmB;AACtD,SAAO,KAAK,WAAW,MAAM,UAAU,KAAK,MAAM,CAAC,OAAO,UAAU,UAAU,MAAM,KAAK,CAAC;AAC5F;AAMO,SAAS,mCAAmC,sBAAoF;AACrI,QAAM,UAAU,gBAAgB,oBAAoB;AACpD,QAAM,UAAU,oBAAI,IAAiC;AACrD,QAAM,WAAW,oBAAI,IAA8C;AACnE,MAAI,aAAa;AACjB,QAAM,UAAU,CAAC,eAA6D;AAC5E,YAAQ,MAAM,UAAU;AACxB,UAAM,UAAU,QAAQ,IAAI,UAAU;AACtC,WAAO,YAAY,SACf,SACA,OAAO,OAAO;AAAA,MACZ;AAAA,MAAY,UAAU,QAAQ;AAAA,MAAU,OAAO,WAAW,KAAK,QAAQ,KAAK;AAAA,IAC9E,CAAC;AAAA,EACP;AACA,QAAM,YAAY,CAAC,UAAoC;AACrD,UAAM,gBAAgB,iBAAiB,KAAK;AAC5C,YAAQ,MAAM,cAAc,UAAU;AACtC,kBAAc,cAAc,UAAU,QAAQ,gBAAgB;AAC9D,UAAM,QAAQ,UAAU,cAAc,OAAO,QAAQ,qBAAqB;AAC1E,UAAM,QAAQ,QAAQ,IAAI,cAAc,UAAU;AAClD,QAAI,OAAO,aAAa,cAAc,YAAY,CAAC,UAAU,MAAM,OAAO,KAAK,EAAG,OAAM,IAAI,UAAU,gDAAgD;AACtJ,QAAI,UAAU,UAAa,QAAQ,QAAQ,QAAQ,WAAY,OAAM,IAAI,WAAW,kCAAkC;AACtH,UAAM,YAAY,cAAc,OAAO,MAAM,cAAc,KAAK,MAAM;AACtE,QAAI,YAAY,QAAQ,cAAe,OAAM,IAAI,WAAW,mCAAmC;AAC/F,QAAI,OAAO,aAAa,cAAc,SAAU,UAAS,OAAO,cAAc,UAAU;AACxF,YAAQ,IAAI,cAAc,YAAY,EAAE,UAAU,cAAc,UAAU,MAAM,CAAC;AACjF,iBAAa;AAAA,EACf;AACA,QAAM,cAAc,CAAC,YAAoB,aAAuD;AAC9F,YAAQ,MAAM,UAAU;AACxB,kBAAc,UAAU,QAAQ,gBAAgB;AAChD,UAAM,UAAU,QAAQ,IAAI,UAAU;AACtC,UAAM,SAAS,YAAY,SAAY,YAAa,QAAQ,aAAa,WAAW,iBAAiB;AACrG,UAAM,SAAS,OAAO,OAAO;AAAA,MAC3B;AAAA,MAAQ,WAAW;AAAA,MAAmC;AAAA,MAAY;AAAA,IACpE,CAAC;AACD,QAAI,WAAW,eAAgB,UAAS,IAAI,YAAY,MAAM;AAC9D,WAAO;AAAA,EACT;AACA,QAAM,iBAAiB,CAAC,eAAqE;AAC3F,YAAQ,MAAM,UAAU;AACxB,WAAO,SAAS,IAAI,UAAU;AAAA,EAChC;AACA,SAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IAAS;AAAA,IAAW;AAAA,IAAa;AAAA,EACnC,CAAC;AACH;;;AE3HA;AAAA,EACE,cAAAC;AAAA,EAAY;AAAA,EAAY;AAAA,EAAoB;AAAA,EAAiB;AAAA,EAAgB;AAAA,EAA0B;AAAA,EAAU,WAAAC;AAAA,EAAS;AAAA,OACrH;;;ACLP,IAAM,oBAAoB,OAAO,yBAAyB,YAAY,WAAW,SAAS;AAC1F,IAAM,gBAAyB,QAAQ,IAAI,qBAAqB,CAAC,GAAG,KAAK;AACzE,IAAM,eAAe,YAAY;AACjC,IAAM,cAAc,aAAa;AACjC,IAAM,iBAAiB,aAAa;AACpC,IAAM,QAAQ,QAAQ;AAGf,SAAS,mBAAmB,OAAyC;AAC1E,MAAI,UAAU,OAAW;AACzB,MAAI,OAAO,kBAAkB,WAAY,OAAM,IAAI,UAAU,gCAAgC;AAC7F,QAAM,eAAe,OAAO,CAAC,CAAC;AAC9B,SAAO;AACT;AACO,SAAS,mBAAmB,QAA8B;AAC/D,MAAI,OAAO,kBAAkB,WAAY,OAAM,IAAI,UAAU,gCAAgC;AAC7F,SAAO,MAAM,eAAe,QAAQ,CAAC,CAAC;AACxC;AACO,SAAS,iBAAiB,QAAiC,UAAkC;AAClG,MAAI,WAAW,OAAW,QAAO,MAAM;AAAA,EAAgC;AACvE,QAAM,aAAa,QAAQ,CAAC,SAAS,UAAU,EAAE,MAAM,KAAK,CAAC,CAAC;AAC9D,SAAO,MAAM;AACX,UAAM,gBAAgB,QAAQ,CAAC,SAAS,QAAQ,CAAC;AAAA,EACnD;AACF;;;ACtBO,IAAM,qBAAqB;AAE3B,IAAM,8BAAkD,OAAO,OAAO;AAAA,EAC3E,cAAc;AAAA,EACd,UAAU;AAAA,EACV,UAAU;AACZ,CAAC;AAEM,IAAM,4BAA8C,OAAO,OAAO;AAAA,EACvE,GAAG;AAAA,EACH,UAAU;AAAA,EACV,sBAAsB;AAAA,EACtB,kBAAkB;AAAA,EAClB,gBAAgB;AAClB,CAAC;AAED,SAAS,gBAAgB,OAAe,MAAc;AACpD,MAAI,CAAC,OAAO,cAAc,KAAK,KAAK,SAAS,GAAG;AAC9C,UAAM,IAAI,WAAW,OAAO,kCAAkC;AAAA,EAChE;AACF;AAEO,SAAS,mBAAmB,UAAuC,CAAC,GAAuB;AAChG,QAAM,SAAS,EAAE,GAAG,6BAA6B,GAAG,QAAQ;AAC5D,kBAAgB,OAAO,cAAc,cAAc;AACnD,kBAAgB,OAAO,UAAU,UAAU;AAC3C,kBAAgB,OAAO,UAAU,UAAU;AAC3C,SAAO,OAAO,OAAO,MAAM;AAC7B;AAEO,SAAS,iBAAiB,UAAqC,CAAC,GAAqB;AAC1F,QAAM,SAAS,EAAE,GAAG,2BAA2B,GAAG,QAAQ;AAC1D,qBAAmB,MAAM;AACzB,kBAAgB,OAAO,UAAU,UAAU;AAC3C,kBAAgB,OAAO,sBAAsB,sBAAsB;AACnE,kBAAgB,OAAO,kBAAkB,kBAAkB;AAC3D,kBAAgB,OAAO,gBAAgB,gBAAgB;AACvD,MAAI,OAAO,mBAAmB,sBAAsB,OAAO,iBAAiB,oBAAoB;AAC9F,UAAM,IAAI,WAAW,qDAAqD;AAAA,EAC5E;AACA,SAAO,OAAO,OAAO,MAAM;AAC7B;;;AFwCA,SAAS,QAAQ,QAAoC,QAAsD;AACzG,SAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IAAQ;AAAA,IAAQ,WAAW;AAAA,EAC7B,CAAC;AACH;AACA,SAAS,UAAU,OAAe;AAChC,SAAO,OAAO,cAAc,KAAK,KAAK,SAAS;AACjD;AACA,SAAS,eAAe,QAAyB;AAC/C,QAAM,SAAS,aAAa,QAAQ;AAAA,IAClC,cAAc;AAAA,IAAM,UAAU;AAAA,IAAG,UAAU;AAAA,EAC7C,CAAC;AACD,QAAM,OAAO,CAAC,gBAAgB,eAAe,mBAAmB,YAAY,aAAa,cAAc,UAAU;AACjH,MAAI,OAAO,KAAK,MAAM,EAAE,SAAS,EAAE,KAAK,GAAG,MAAM,KAAK,KAAK,GAAG,EAAG,OAAM,IAAI,UAAU,6CAA6C;AAClI,qBAAmB,MAAM;AACzB,aAAW,SAAS,CAAC,OAAO,aAAa,OAAO,iBAAiB,OAAO,WAAW,OAAO,UAAU,GAAG;AACrG,QAAI,CAAC,OAAO,cAAc,KAAK,KAAK,SAAS,EAAG,OAAM,IAAI,WAAW,oCAAoC;AAAA,EAC3G;AACA,SAAO,OAAO,OAAO,EAAE,GAAG,OAAO,CAAC;AACpC;AACA,SAAS,aAAgB,QAAsB,SAA+B;AAC5E,MAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,OAAO,SAAS,QAAS,OAAM,IAAI,WAAW,oCAAoC;AAChH,SAAO,OAAO,OAAO,MAAM,KAAK,EAAE,QAAQ,OAAO,OAAO,GAAG,CAAC,GAAG,UAAa;AAC1E,UAAM,aAAa,OAAO,yBAAyB,QAAQ,OAAO,KAAK,CAAC;AACxE,QAAI,YAAY,eAAe,QAAQ,EAAE,WAAW,YAAa,OAAM,IAAI,UAAU,2CAA2C;AAChI,WAAO,WAAW;AAAA,EACpB,CAAC,CAAC;AACJ;AACA,SAAS,eAAe,OAAwC,QAAyB;AACvF,QAAM,eAAe,oBAAI,IAA0B;AACnD,aAAW,SAAS,OAAO;AACzB,UAAM,OAAO,aAAa,OAAO,MAAM;AACvC,IAAAC,SAAQ,MAAM,KAAK,IAAI;AACvB,UAAM,UAAU,kBAAkB,KAAK,OAAO;AAC9C,QAAI,YAAY,UAAa,QAAQ,WAAW,sBAAsB,aAAa,IAAI,KAAK,IAAI,EAAG,OAAM,IAAI,UAAU,gCAAgC;AACvJ,iBAAa,IAAI,KAAK,MAAM,OAAO;AAAA,EACrC;AACA,SAAO;AACT;AACA,SAAS,cAAc,MAAwB,OAAyB;AACtE,SAAO,KAAK,QAAQ,MAAM,SAAU,KAAK,UAAU,MAAM,UAAU,KAAK,mBAAmB,MAAM,oBAC3F,KAAK,qBAAqB,MAAM,oBAAoB,KAAK,eAAe,MAAM;AACtF;AACA,SAAS,YAAY,MAAwB,QAAuD;AAClG,QAAM,SAAS,aAAa,MAAM,MAAM;AACxC,QAAM,kBAAkB,UAAU,OAAO,KAAK,KAAK,UAAU,OAAO,gBAAgB,KAAK,UAAU,OAAO,YAAY;AACtH,QAAM,qBAAqBC,YAAW,UAAU,OAAO,UAAU,EAAE,WAAW,WAAW,UAAU,OAAO,OAAO,EAAE,WAAWD,SAAQ,UAAU,OAAO,IAAI,EAAE;AAC7J,MAAI,CAAC,mBAAmB,CAAC,mBAAoB;AAC7C,QAAM,SAAS,gBAAgB,UAAU,OAAO,OAAO;AACvD,SAAO,OAAO,UAAU,EAAE,GAAG,QAAQ,SAAS,OAAO,KAAK,IAAI;AAChE;AACA,SAAS,OAAO,OAAc,MAAc,WAA4C;AACtF,QAAM,SAAS,eAAe,UAAU,MAAM,aAAa,IAAI,IAAI,CAAC;AACpE,SAAO,OAAO,WAAW,OAAO,KAAK,cAAc,YAAY,OAAO,OAAO;AAC/E;AACA,SAAS,MAAM,OAAc,MAAc,WAAsD;AAC/F,QAAM,SAAS,yBAAyB,UAAU,MAAM,aAAa,IAAI,IAAI,CAAC;AAC9E,SAAO,OAAO,WAAW,OAAO,KAAK,cAAc,YAAY,OAAO,OAAO;AAC/E;AACA,SAAS,kBAAkB,OAAc,YAAoB;AAC3D,aAAW,CAAC,KAAK,KAAK,KAAK,MAAM,QAAQ;AACvC,QAAI,MAAM,eAAe,WAAY,OAAM,OAAO,OAAO,GAAG;AAAA,EAC9D;AACF;AACA,SAAS,SAAS,SAAyG;AACzH,SAAO,GAAG,QAAQ,UAAU,IAAI,QAAQ,SAAS,IAAI,QAAQ,gBAAgB;AAC/E;AACA,SAAS,aAAa,OAAc,SAAoF,QAAyB;AAC/I,MAAI,OAAO,OAAO,QAAQ,YAAY,QAAQ,SAAS,MAAM,OAAW,QAAO,QAAQ,cAAc,qBAAqB;AAC1H,MAAI,QAAQ,cAAc,qBAAqB,CAAC,MAAM,OAAQ,QAAO,QAAQ,cAAc,oBAAoB;AAC/G,QAAM,QAAQ,IAAI,QAAQ,YAAY,QAAQ,cAAc,iBAAiB;AAC7E,MAAI,MAAM,QAAQ,OAAO,OAAO,WAAY,QAAO,QAAQ,cAAc,gBAAgB;AACzF,MAAI,QAAQ,cAAc,gBAAiB,mBAAkB,OAAO,QAAQ,UAAU;AACxF;AACA,SAAS,YAAY,OAAc,MAAwB,SAAuF,QAAyB;AACzK,QAAM,iBAAiB,OAAO,OAAO,QAAQ,YAAY,QAAQ,SAAS;AAC1E,QAAM,gBAAgB,MAAM,OAAO,QAAQ,WAAW,QAAQ,SAAS;AACvE,MAAI,mBAAmB,UAAa,kBAAkB,OAAW,QAAO,QAAQ,cAAc,qBAAqB;AACnH,MAAI,eAAe,WAAW,cAAc,OAAQ,QAAO,QAAQ,cAAc,oBAAoB;AACrG,QAAM,MAAM,SAAS,OAAO;AAC5B,MAAI,QAAQ,cAAc,oBAAoB;AAC5C,UAAM,OAAO,OAAO,GAAG;AACvB;AAAA,EACF;AACA,MAAI,CAAC,MAAM,UAAU,MAAM,QAAQ,IAAI,QAAQ,UAAU,MAAM,KAAM,QAAO,QAAQ,cAAc,oBAAoB;AACtH,QAAM,aAAa,KAAK,QAAQ;AAChC,MAAI,CAAC,OAAO,cAAc,UAAU,KAAM,QAAQ,mBAAmB,UAAa,QAAQ,kBAAkB,YAAa;AACvH,WAAO,QAAQ,cAAc,oBAAoB;AAAA,EACnD;AACA,QAAM,OAAO,IAAI,KAAK,OAAO,OAAO;AAAA,IAClC,YAAY,QAAQ;AAAA,IACpB,WAAW,QAAQ;AAAA,IACnB,kBAAkB,QAAQ;AAAA,IAC1B,aAAa,KAAK;AAAA,IAClB,GAAI,QAAQ,mBAAmB,UAAa,EAAE,gBAAgB,QAAQ,eAAe;AAAA,EACvF,CAAC,CAAC;AACF,MAAI,MAAM,OAAO,OAAO,OAAO,UAAW,QAAO,QAAQ,cAAc,gBAAgB;AACzF;AACA,SAAS,aAAa,OAAc,MAAwB,QAAyB;AACnF,QAAM,UAAU,KAAK;AACrB,UAAQ,QAAQ,WAAW;AAAA,IACzB,KAAK,kBAAkB;AACrB,YAAM,SAAS;AACf;AAAA,IACF;AAAA,IACA,KAAK,gBAAgB;AACnB,YAAM,SAAS;AACf,YAAM,OAAO,MAAM;AACnB;AAAA,IACF;AAAA,IACA,KAAK;AAAA,IACL,KAAK,iBAAiB;AACpB,aAAO,aAAa,OAAO,SAAS,MAAM;AAAA,IAC5C;AAAA,IACA,KAAK;AAAA,IACL,KAAK,oBAAoB;AACvB,aAAO,YAAY,OAAO,MAAM,SAAS,MAAM;AAAA,IACjD;AAAA,EACF;AACF;AACA,SAAS,QAAQ,OAAc,MAAwB,QAAyB;AAC9E,MAAI,MAAM,KAAK,IAAI,KAAK,IAAI,EAAG;AAC/B,QAAM,WAAW,KAAK,QAAQ;AAC9B,MAAI,MAAM,SAAS,WAAc,aAAa,UAAa,KAAK,QAAQ,cAAc,kBAAmB,QAAO,QAAQ,cAAc,qBAAqB;AAC3J,MAAI,aAAa,UAAa,MAAM,SAAS,OAAW,QAAO,QAAQ,YAAY,WAAW;AAC9F,MAAI,MAAM,SAAS,UAAa,aAAa,MAAM,MAAM;AACvD,WAAO,MAAM,KAAK,IAAI,YAAY,EAAE,IAAI,QAAQ,YAAY,WAAW,IAAI,QAAQ,cAAc,qBAAqB;AAAA,EACxH;AACA,QAAM,QAAQ,aAAa,OAAO,MAAM,MAAM;AAC9C,MAAI,UAAU,OAAW,QAAO;AAChC,QAAM,OAAO,KAAK;AAClB,QAAM,KAAK,IAAI,KAAK,IAAI;AAC1B;AACA,SAAS,WAAW,OAAc,SAAoD;AACpF,QAAM,UAAU,CAAC,GAAG,MAAM,OAAO,EAAE,IAAI,CAAC,CAAC,MAAM,MAAM,MAAwB;AAC3E,UAAM,cAAc,OAAO,OAAO,MAAM,QAAQ,SAAS;AACzD,QAAI,gBAAgB,OAAW,OAAM,IAAI,UAAU,wBAAwB;AAC3E,WAAO,OAAO,OAAO;AAAA,MACnB;AAAA,MAAM;AAAA,MAAQ,QAAQ,YAAY;AAAA,IACpC,CAAC;AAAA,EACH,CAAC;AACD,QAAM,SAAS,MAAM,OAAO,OAAO,EAAE,OAAO,WAAS,MAAM,mBAAmB,UAAa,QAAQ,mBAAmB,MAAM,cAAc,EAAE,QAAQ;AACpJ,SAAO,OAAO,OAAO;AAAA,IACnB,QAAQ;AAAA,IACR,WAAW;AAAA,IACX,OAAO,QAAQ;AAAA,IACf,WAAW,QAAQ;AAAA,IACnB,SAAS,QAAQ;AAAA,IACjB,aAAa,QAAQ;AAAA,IACrB,kBAAkB,QAAQ;AAAA,IAC1B,aAAa,MAAM;AAAA,IACnB,GAAI,MAAM,SAAS,UAAa,EAAE,UAAU,MAAM,KAAK;AAAA,IACvD,SAAS,OAAO,OAAO,OAAO;AAAA,IAC9B,QAAQ,OAAO,OAAO,MAAM;AAAA,EAC9B,CAAC;AACH;AACA,SAAS,UAAU,OAAc,OAAoC,SAAmC,QAA0C;AAChJ,MAAI;AACJ,aAAW,SAAS,OAAO;AACzB,QAAI,QAAQ,WAAW,UAAa,mBAAmB,QAAQ,MAAM,EAAG,QAAO,QAAQ,WAAW,WAAW;AAC7G,UAAM,OAAO,YAAY,OAAO,MAAM;AACtC,QAAI,SAAS,OAAW,QAAO,QAAQ,eAAe,YAAY;AAClE,QAAI,KAAK,QAAQ,QAAQ,oBAAqB,aAAa,UAAa,CAAC,cAAc,MAAM,QAAQ,EAAI,QAAO,QAAQ,cAAc,eAAe;AACrJ,eAAW;AACX,QAAI,KAAK,YAAY,QAAQ,WAAW,KAAK,eAAe,QAAQ,SAAS,KAAK,QAAQ,cAAc,QAAQ,aAE3G,KAAK,UAAU,QAAQ,iBAAkB;AAC9C,UAAM,QAAQ,QAAQ,OAAO,MAAM,MAAM;AACzC,QAAI,UAAU,OAAW,QAAO;AAAA,EAClC;AACA,SAAO,WAAW,OAAO,OAAO;AAClC;AAOO,SAAS,kBAAkB,SAAoD;AACpF,QAAM,SAAS,eAAe,QAAQ,MAAM;AAC5C,QAAM,SAAS,mBAAmB,QAAQ,MAAM;AAChD,EAAAC,YAAW,MAAM,QAAQ,KAAK;AAC9B,EAAAD,SAAQ,MAAM,QAAQ,SAAS;AAC/B,EAAAA,SAAQ,MAAM,QAAQ,WAAW;AACjC,aAAW,MAAM,QAAQ,OAAO;AAChC,MAAI,CAAC,UAAU,QAAQ,gBAAgB,EAAG,OAAM,IAAI,WAAW,sDAAsD;AACrH,MAAI,QAAQ,WAAW,UAAa,mBAAmB,QAAQ,MAAM,EAAG,QAAO,QAAQ,WAAW,WAAW;AAC7G,MAAI;AACF,UAAM,eAAe,eAAe,aAAa,QAAQ,cAAc,OAAO,eAAe,GAAG,MAAM;AACtG,UAAM,QAAQ,SAAS,UAAU,aAAa,IAAI,QAAQ,SAAS,CAAC;AACpE,QAAI,CAAC,MAAM,QAAS,QAAO,QAAQ,cAAc,qBAAqB;AACtE,QAAI,MAAM,KAAK,UAAU,QAAQ,MAAO,QAAO,QAAQ,cAAc,eAAe;AACpF,UAAM,QAAe;AAAA,MACnB,QAAQ;AAAA,MAAO;AAAA,MAAc,QAAQ,oBAAI,IAAI;AAAA,MAAG,SAAS,oBAAI,IAAI;AAAA,MAAG,MAAM,oBAAI,IAAI;AAAA,IACpF;AACA,WAAO,UAAU,OAAO,aAAa,QAAQ,UAAU,OAAO,WAAW,GAAG,EAAE,GAAG,SAAS,OAAO,GAAG,MAAM;AAAA,EAC5G,SAAS,OAAO;AACd,WAAO,QAAQ,cAAc,iBAAiB,aAAa,mBAAmB,eAAe;AAAA,EAC/F;AACF;AAQO,SAAS,oBAAoB,MAAuB,WAAmB,kBAA+C;AAC3H,EAAAA,SAAQ,MAAM,SAAS;AACvB,EAAAC,YAAW,MAAM,gBAAgB;AACjC,QAAM,WAAW,KAAK,cAAc,KAAK,OAAO,OAAO,WAAS,MAAM,cAAc,aAAa,MAAM,qBAAqB,gBAAgB,IAAI,CAAC;AACjJ,MAAI,SAAS,SAAS,EAAG,QAAO,OAAO,OAAO,EAAE,QAAQ,YAAY,WAAW,uBAAuB,CAAC;AACvG,SAAO,SAAS,WAAW,IACvB,OAAO,OAAO,EAAE,QAAQ,UAAU,WAAW,uBAAuB,CAAC,IACrE,OAAO,OAAO;AAAA,IACZ,QAAQ;AAAA,IAAW,WAAW;AAAA,IAAwB,OAAO,SAAS,CAAC;AAAA,EACzE,CAAC;AACP;;;AG3SA,SAAS,WAAAC,gBAAe;;;ACAjB,SAAS,iBAA+B;AAC7C,QAAM,QAAiB,iBAAiB,aAAa,WAAW,cAAc;AAC9E,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,EAAE,SAAS,UAAU,OAAO,MAAM,QAAQ,YAAY;AACvG,UAAM,IAAI,UAAU,8CAA8C;AAAA,EACpE;AACA,QAAM,OAAO,MAAM,IAAI,KAAK,KAAK;AACjC,SAAO,MAAM;AACX,UAAM,MAAM,KAAK;AACjB,QAAI,OAAO,QAAQ,YAAY,CAAC,OAAO,SAAS,GAAG,EAAG,OAAM,IAAI,UAAU,yBAAyB;AACnG,WAAO;AAAA,EACT;AACF;AAGO,SAAS,iBAAiB,KAAmB,UAAkB,SAAiC;AACrG,MAAI,YAAY;AAChB,MAAI;AACJ,QAAM,OAAO,MAAM;AACjB,QAAI,UAAW;AACf,QAAI,IAAI,KAAK,UAAU;AACrB,kBAAY;AACZ,cAAQ;AAAA,IACV,OAAO;AACL,UAAI;AAAA,IACN;AAAA,EACF;AACA,QAAM,MAAM,MAAM;AAEhB,UAAM,QAAQ,KAAK,IAAI,oBAAoB,KAAK,IAAI,GAAG,KAAK,KAAK,WAAW,IAAI,CAAC,CAAC,CAAC;AACnF,YAAQ,WAAW,MAAM,KAAK;AAAA,EAChC;AACA,MAAI;AACJ,SAAO,MAAM;AACX,gBAAY;AACZ,iBAAa,KAAK;AAAA,EACpB;AACF;;;ACrCA,SAAS,cAAc,sBAAsB;AAE7C;AAAA,EACE;AAAA,EAAuB,WAAAC;AAAA,EAAS,qBAAAC;AAAA,OAC3B;AAsBP,eAAsB,mBACpB,MACA,QACA,WACA,UAAuC,CAAC,GACL;AACnC,EAAAC,SAAQ,MAAM,IAAI;AAClB,QAAM,SAAS,mBAAmB,OAAO;AACzC,MAAI;AACF,UAAM,WAAW,aAAa,WAAW,MAAM;AAC/C,QAAI,aAAa,QAAQ,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,KAAK,CAAC,aAAa,QAAQ,GAAG;AAC3G,aAAO,OAAO,OAAO,EAAE,QAAQ,WAAW,QAAQ,mBAAmB,CAAC;AAAA,IACxE;AACA,QAAI,MAAM,eAAe,KAAK,QAAQ,MAAM,KAAM,QAAO,OAAO,OAAO,EAAE,QAAQ,WAAW,QAAQ,gBAAgB,CAAC;AACrH,QAAI,SAAS,WAAW,OAAQ,QAAO,OAAO,OAAO,EAAE,QAAQ,eAAe,QAAQ,SAAS,CAAC;AAChG,QAAI,SAAS,aAAa,sBAAuB,QAAO,OAAO,OAAO,EAAE,QAAQ,eAAe,QAAQ,UAAU,CAAC;AAElH,UAAM,OAAO,eAAe,gBAAgB,QAAQ;AACpD,QAAIC,mBAAkB,IAAI,MAAM,OAAW,QAAO,OAAO,OAAO,EAAE,QAAQ,WAAW,QAAQ,mBAAmB,CAAC;AACjH,WAAO,OAAO,OAAO;AAAA,MACnB,QAAQ;AAAA,MACR,WAAW;AAAA,MACX;AAAA,MACA,eAAe;AAAA,MACf,SAAS,aAAa,MAAM,MAAM;AAAA,IACpC,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,SAAS,iBAAiB,qBAAqB,MAAM,WAAW,oBAAoB,MAAM,WAAW,qBACvG,MAAM,SACN;AACJ,WAAO,OAAO,OAAO,EAAE,QAAQ,WAAW,OAAO,CAAC;AAAA,EACpD;AACF;;;AF1BA,SAAS,SAAS,OAAkC,UAAkB;AACpE,MAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,KAAK,MAAM,SAAS,SAAU,OAAM,IAAI,WAAW,mCAAmC;AACpI,QAAM,MAAM,oBAAI,IAAY;AAC5B,SAAO,OAAO,OAAO,MAAM,KAAK,EAAE,QAAQ,MAAM,OAAO,GAAG,CAAC,GAAG,UAAsB;AAClF,UAAM,OAAO,OAAO,yBAAyB,OAAO,OAAO,KAAK,CAAC;AACjE,QAAI,MAAM,eAAe,QAAQ,EAAE,WAAW,MAAO,OAAM,IAAI,UAAU,qCAAqC;AAC9G,UAAM,OAAO,KAAK;AAClB,UAAM,SAAS,OAAO,yBAAyB,MAAM,IAAI;AACzD,UAAM,aAAa,OAAO,yBAAyB,MAAM,QAAQ;AACjE,QAAI,WAAW,UAAa,eAAe,UAAa,EAAE,WAAW,WAAW,EAAE,WAAW,aAAa;AACxG,YAAM,IAAI,UAAU,mDAAmD;AAAA,IACzE;AACA,UAAM,KAAc,OAAO;AAC3B,QAAI,OAAO,OAAO,YAAY,GAAG,WAAW,KAAK,GAAG,SAAS,OAAO,GAAG,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,GAAG;AACnG,YAAM,IAAI,UAAU,0CAA0C;AAAA,IAChE;AACA,UAAM,SAAkB,WAAW;AACnC,QAAI,OAAO,WAAW,YAAY,WAAW,KAAM,OAAM,IAAI,UAAU,0BAA0B;AACjG,UAAM,aAAa,OAAO,yBAAyB,QAAQ,KAAK;AAChE,QAAI,eAAe,UAAa,EAAE,WAAW,eAAe,OAAO,WAAW,UAAU,YAAY;AAClG,YAAM,IAAI,UAAU,6CAA6C;AAAA,IACnE;AACA,UAAM,MAAM,WAAW;AACvB,QAAI,IAAI,EAAE;AACV,WAAO,OAAO,OAAO,EAAE,IAAI,KAAK,IAAI,KAAK,MAAM,EAAE,CAAC;AAAA,EACpD,CAAC,CAAC;AACJ;AAEA,eAAe,SAAS,MAAkB,MAAc,QAA4B,QAA0B,QAAqB,SAA6C;AAC9K,MAAI,mBAAmB,MAAM,KAAK,QAAQ,EAAG,QAAO,EAAE,QAAQ,UAAU;AACxE,QAAM,WAAoB,MAAM,KAAK,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,cAAc,OAAO,aAAa,CAAC;AAC9F,MAAI,mBAAmB,MAAM,KAAK,QAAQ,EAAG,QAAO,EAAE,QAAQ,UAAU;AACxE,MAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,SAAS,OAAO,qBAAsB,QAAO,EAAE,QAAQ,iBAAiB;AACjH,QAAM,aAAa,MAAM,KAAK,EAAE,QAAQ,SAAS,OAAO,GAAG,CAAC,GAAG,UAAU,OAAO,yBAAyB,UAAU,OAAO,KAAK,CAAC,CAAC;AACjI,MAAI,SAA+B,WAAW,WAAW,IAAI,YAAY;AACzE,aAAW,QAAQ,YAAY;AAC7B,QAAI,mBAAmB,MAAM,KAAK,QAAQ,EAAG,QAAO,EAAE,QAAQ,UAAU;AACxE,QAAI,MAAM,eAAe,QAAQ,EAAE,WAAW,MAAO;AACrD,UAAM,SAAS,MAAM,mBAAmB,MAAM,QAAQ,KAAK,OAAO,MAAM;AACxE,QAAI,mBAAmB,MAAM,KAAK,QAAQ,EAAG,QAAO,EAAE,QAAQ,UAAU;AACxE,QAAI,OAAO,WAAW,WAAY,QAAO,EAAE,QAAQ,YAAY,SAAS,OAAO;AAC/E,QAAI,OAAO,WAAW,cAAe,UAAS;AAAA,EAChD;AACA,SAAO,EAAE,OAAO;AAClB;AAEA,SAAS,YAAY,MAAkB,MAAc,QAA4B,QAA0B,QAAqB,KAAmB,eAA4C;AAC7L,QAAM,WAAW,KAAK,IAAI,eAAe,IAAI,IAAI,OAAO,gBAAgB;AACxE,QAAM,UAAU,MAAM,IAAI,KAAK;AAC/B,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,UAAM,aAAa,IAAI,gBAAgB;AACvC,QAAI,YAAY;AAChB,UAAM,SAAS,CAAC,WAAuB;AACrC,UAAI,UAAW;AACf,kBAAY;AACZ,kBAAY;AACZ,eAAS;AACT,iBAAW,MAAM;AACjB,cAAQ,QAAQ,IAAI,EAAE,QAAQ,UAAU,IAAI,MAAM;AAAA,IACpD;AACA,UAAM,UAAU,MAAM,OAAO,EAAE,QAAQ,UAAU,CAAC;AAClD,UAAM,cAAc,iBAAiB,KAAK,UAAU,MAAM,OAAO,EAAE,QAAQ,UAAU,CAAC,CAAC;AACvF,UAAM,WAAW,iBAAiB,QAAQ,OAAO;AACjD,QAAI,mBAAmB,MAAM,GAAG;AAC9B,cAAQ;AACR;AAAA,IACF;AACA,mBAAe,MAAM;AACnB,YAAM,YAAY;AAChB,YAAI;AACJ,YAAI;AACF,mBAAS,MAAM,SAAS,MAAM,MAAM,QAAQ,QAAQ,WAAW,QAAQ,OAAO;AAAA,QAChF,QAAQ;AACN,mBAAS,EAAE,QAAQ,eAAe;AAAA,QACpC;AACA,eAAO,MAAM;AAAA,MACf,GAAG;AAAA,IACL,CAAC;AAAA,EACH,CAAC;AACH;AAGA,eAAsB,oBAAoB,MAAc,QAA4B,SAAgE;AAClJ,EAAAC,SAAQ,MAAM,IAAI;AAClB,QAAM,SAAS,iBAAiB,QAAQ,MAAM;AAC9C,QAAM,QAAQ,SAAS,QAAQ,OAAO,OAAO,QAAQ;AACrD,QAAM,SAAS,mBAAmB,QAAQ,MAAM;AAChD,QAAM,MAAM,eAAe;AAC3B,QAAM,WAAW,IAAI,IAAI,OAAO;AAChC,QAAM,WAAqC,CAAC;AAC5C,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAA+C,CAAC;AACtD,QAAM,YAAY,CAAC,WAAmC;AACpD,UAAM,aAAa;AACnB,eAAW,MAAM;AAAA,EACnB;AACA,QAAM,UAAU,MAAM,UAAU,SAAS;AACzC,QAAM,WAAW,iBAAiB,QAAQ,OAAO;AACjD,MAAI,WAAW,UAAa,mBAAmB,MAAM,EAAG,SAAQ;AAChE,QAAM,cAAc,iBAAiB,KAAK,UAAU,MAAM,UAAU,UAAU,CAAC;AAC/E,MAAI;AACF,eAAW,QAAQ,OAAO;AACxB,UAAI,IAAI,KAAK,SAAU,WAAU,UAAU;AAC3C,UAAI,MAAM,aAAa,OAAW;AAClC,YAAM,SAAS,MAAM,YAAY,MAAM,MAAM,QAAQ,QAAQ,WAAW,QAAQ,KAAK,QAAQ;AAC7F,eAAS,KAAK,OAAO,OAAO,EAAE,QAAQ,KAAK,IAAI,QAAQ,OAAO,OAAO,CAAC,CAAC;AACvE,UAAI,IAAI,KAAK,SAAU,WAAU,UAAU;AAC3C,UAAI,MAAM,aAAa,OAAW;AAClC,UAAI,OAAO,YAAY,OAAW,QAAO,OAAO,OAAO,EAAE,GAAG,OAAO,SAAS,UAAU,OAAO,OAAO,QAAQ,EAAE,CAAC;AAC/G,UAAI,OAAO,WAAW,iBAAkB,QAAO,OAAO,OAAO;AAAA,QAC3D,QAAQ;AAAA,QAAc,QAAQ;AAAA,QAAkB,UAAU,OAAO,OAAO,QAAQ;AAAA,MAClF,CAAC;AAAA,IACH;AACA,UAAM,SAAS,OAAO,OAAO,QAAQ;AACrC,WAAO,MAAM,aAAa,YACtB,OAAO,OAAO,EAAE,QAAQ,WAAW,UAAU,OAAO,CAAC,IACrD,OAAO,OAAO;AAAA,MACZ,QAAQ;AAAA,MAAc,QAAQ,MAAM,aAAa,aAAa,aAAa;AAAA,MAAe,UAAU;AAAA,IACtG,CAAC;AAAA,EACP,UAAE;AACA,gBAAY;AACZ,eAAW,MAAM;AACjB,aAAS;AAAA,EACX;AACF;;;AG3JA,SAAS,sBAAAC,2BAA0B;;;ACDnC,SAAS,gBAAAC,eAAc,kBAAAC,uBAAsB;AAE7C;AAAA,EACE;AAAA,EAAuB;AAAA,EACvB;AAAA,EACA;AAAA,EAA4B;AAAA,OACvB;AASP,eAAsB,aACpB,WACA,WACA,UAAuC,CAAC,GACL;AACnC,QAAM,WAAW,OAAO,OAAO,mBAAmB,MAAM,SAAS,CAAC;AAClE,QAAM,SAAS,mBAAmB,OAAO;AACzC,MAAI;AACF,UAAM,WAAW,aAAa,WAAW,MAAM;AAC/C,QAAI,aAAa,QAAQ,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,GAAG;AAChF,aAAO,EAAE,QAAQ,WAAW,QAAQ,cAAc;AAAA,IACpD;AAEA,UAAM,OAAOC,gBAAe,SAAS,QAAQ;AAE7C,QAAI,CAACC,cAAa,IAAI,EAAG,QAAO,EAAE,QAAQ,WAAW,QAAQ,cAAc;AAC3E,UAAM,aAAa,MAAMD,gBAAe,SAAS,IAAI;AACrD,QAAI,eAAe,SAAS,SAAU,QAAO,EAAE,QAAQ,WAAW,QAAQ,gBAAgB;AAC1F,QAAI,KAAK,WAAW,SAAS,OAAQ,QAAO,EAAE,QAAQ,WAAW,QAAQ,kBAAkB;AAI3F,QAAI,KAAK,WAAW,8BAA8B,CAAC,wBAAwB,UAAU,IAAI,EAAE,SAAS;AAClG,aAAO,EAAE,QAAQ,WAAW,QAAQ,qBAAqB;AAAA,IAC3D;AACA,QAAI,KAAK,WAAW,yBAAyB,CAAC,mBAAmB,UAAU,IAAI,EAAE,SAAS;AACxF,aAAO,EAAE,QAAQ,WAAW,QAAQ,qBAAqB;AAAA,IAC3D;AACA,UAAM,UAAU,aAAa,MAAM,MAAM;AACzC,WAAO,OAAO,OAAO;AAAA,MACnB,QAAQ;AAAA,MAAY,WAAW;AAAA,MAAyB,WAAW;AAAA,MAAU;AAAA,IAC/E,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ,iBAAiB,mBAAmB,MAAM,SAAS;AAAA,IAC7D;AAAA,EACF;AACF;;;AD9BA,SAAS,gBAAgB,OAAkC,QAA0B;AACnF,MAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,KAAK,MAAM,SAAS,OAAO,UAAU;AACjF,UAAM,IAAI,WAAW,qDAAqD;AAAA,EAC5E;AACA,QAAM,MAAM,oBAAI,IAAY;AAC5B,QAAM,aAAa,MAAM,IAAI,CAAC,SAAyC;AACrE,QAAI,OAAO,KAAK,OAAO,YAAY,KAAK,GAAG,WAAW,KAAK,KAAK,GAAG,SAAS,OAAO,KAAK,GAAG,KAAK,MAAM,KAAK,IAAI;AAC7G,YAAM,IAAI,UAAU,sEAAsE;AAAA,IAC5F;AACA,QAAI,IAAI,IAAI,KAAK,EAAE,EAAG,OAAM,IAAI,UAAU,yBAAyB;AACnE,QAAI,OAAO,KAAK,QAAQ,QAAQ,WAAY,OAAM,IAAI,UAAU,wCAAwC;AACxG,QAAI,IAAI,KAAK,EAAE;AAEf,WAAO,OAAO,OAAO;AAAA,MACnB,IAAI,KAAK;AAAA,MACT,QAAQ,OAAO,OAAO,EAAE,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;AAAA,IAClE,CAAC;AAAA,EACH,CAAC;AACD,WAAS,QAAQ,GAAG,QAAQ,WAAW,QAAQ,SAAS;AACtD,QAAI,CAAC,OAAO,OAAO,YAAY,KAAK,EAAG,OAAM,IAAI,UAAU,kDAAkD;AAAA,EAC/G;AACA,SAAO;AACT;AAEA,eAAe,eACb,MACA,WACA,QACA,QACA,SACqB;AACrB,MAAI,OAAO,QAAS,QAAO,EAAE,QAAQ,UAAU;AAC/C,MAAI,QAAQ,EAAG,QAAO,EAAE,QAAQ,UAAU;AAC1C,QAAM,WAAoB,MAAM,KAAK,OAAO,IAAI,CAAC,UAAU,QAAQ,GAAG,EAAE,QAAQ,cAAc,OAAO,aAAa,CAAC;AACnH,MAAI,OAAO,QAAS,QAAO,EAAE,QAAQ,UAAU;AAC/C,MAAI,QAAQ,EAAG,QAAO,EAAE,QAAQ,UAAU;AAC1C,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,EAAE,QAAQ,qBAAqB;AACpE,QAAM,iBAAiB,SAAS;AAChC,MAAI,CAAC,OAAO,cAAc,cAAc,KAAK,iBAAiB,EAAG,QAAO,EAAE,QAAQ,qBAAqB;AACvG,MAAI,iBAAiB,OAAO,qBAAsB,QAAO,EAAE,QAAQ,sBAAsB;AACzF,MAAI,mBAAmB,EAAG,QAAO,EAAE,QAAQ,UAAU;AAErD,QAAM,aAAa,MAAM,KAAK,EAAE,QAAQ,eAAe,GAAG,CAAC,GAAG,UAAU,OAAO,yBAAyB,UAAU,OAAO,KAAK,CAAC,CAAC;AAChI,QAAM,oBAAuD,CAAC;AAC9D,aAAW,cAAc,YAAY;AACnC,QAAI,OAAO,QAAS,QAAO,EAAE,QAAQ,UAAU;AAC/C,QAAI,QAAQ,EAAG,QAAO,EAAE,QAAQ,UAAU;AAC1C,QAAI,eAAe,UAAa,EAAE,WAAW,aAAa;AACxD,wBAAkB,KAAK,cAAc;AACrC;AAAA,IACF;AACA,UAAM,YAAqB,WAAW;AACtC,UAAM,SAAS,MAAM,aAAa,WAAW,WAAW,MAAM;AAC9D,QAAI,OAAO,QAAS,QAAO,EAAE,QAAQ,UAAU;AAC/C,QAAI,QAAQ,EAAG,QAAO,EAAE,QAAQ,UAAU;AAC1C,QAAI,OAAO,WAAW,WAAY,QAAO;AAAA,MACvC,QAAQ;AAAA,MAAY,QAAQ;AAAA,MAAQ;AAAA,IACtC;AACA,sBAAkB,KAAK,OAAO,MAAM;AAAA,EACtC;AACA,SAAO,EAAE,QAAQ,kBAAkB,kBAAkB;AACvD;AAEA,SAASE,aACP,MACA,WACA,QACA,aACA,KACA,eACqB;AACrB,QAAM,WAAW,KAAK,IAAI,IAAI,IAAI,OAAO,kBAAkB,aAAa;AACxE,QAAM,UAAU,MAAM,IAAI,KAAK;AAC/B,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,UAAM,aAAa,IAAI,gBAAgB;AACvC,QAAI,YAAY;AAChB,UAAM,SAAS,CAAC,WAAuB;AACrC,UAAI,UAAW;AAGf,YAAM,UAAsB,OAAO,WAAW,aAAa,QAAQ,IAAI,EAAE,QAAQ,UAAU,IAAI;AAC/F,kBAAY;AACZ,kBAAY;AACZ,kBAAY,oBAAoB,SAAS,OAAO;AAChD,UAAI,QAAQ,WAAW,UAAW,YAAW,MAAM;AACnD,cAAQ,OAAO;AAAA,IACjB;AACA,UAAM,UAAU,MAAM;AACpB,iBAAW,MAAM;AACjB,aAAO,EAAE,QAAQ,UAAU,CAAC;AAAA,IAC9B;AACA,UAAM,cAAc,iBAAiB,KAAK,UAAU,MAAM;AACxD,iBAAW,MAAM;AACjB,aAAO,EAAE,QAAQ,UAAU,CAAC;AAAA,IAC9B,CAAC;AACD,gBAAY,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAC7D,QAAI,YAAY,SAAS;AACvB,cAAQ;AACR;AAAA,IACF;AAGA,mBAAe,MAAM;AACnB,YAAM,YAAY;AAChB,YAAI;AACJ,YAAI;AACF,mBAAS,MAAM,eAAe,MAAM,WAAW,QAAQ,WAAW,QAAQ,OAAO;AAAA,QACnF,QAAQ;AACN,iBAAO,EAAE,QAAQ,eAAe,CAAC;AACjC;AAAA,QACF;AACA,eAAO,MAAM;AAAA,MACf,GAAG;AAAA,IACL,CAAC;AAAA,EACH,CAAC;AACH;AAEA,SAAS,WAAW,QAAgB,QAAuC;AACzE,SAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,QAAQ,OAAO;AAAA,IACf,GAAI,OAAO,sBAAsB,UAAa,EAAE,mBAAmB,OAAO,OAAO,CAAC,GAAG,OAAO,iBAAiB,CAAC,EAAE;AAAA,EAClH,CAAC;AACH;AAGA,eAAsB,cACpB,WACA,SACiC;AACjC,QAAM,WAAW,OAAO,OAAOC,oBAAmB,MAAM,SAAS,CAAC;AAClE,QAAM,SAAS,iBAAiB,QAAQ,MAAM;AAC9C,QAAM,QAAQ,gBAAgB,QAAQ,OAAO,MAAM;AACnD,QAAM,SAAS,QAAQ;AACvB,QAAM,WAAgC,CAAC;AACvC,MAAI,QAAQ,YAAY,KAAM,QAAO,EAAE,QAAQ,WAAW,UAAU,OAAO,OAAO,QAAQ,EAAE;AAE5F,QAAM,MAAM,eAAe;AAC3B,QAAM,WAAW,IAAI,IAAI,OAAO;AAChC,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAwD,CAAC;AAC/D,QAAM,YAAY,CAAC,WAA4C;AAC7D,QAAI,MAAM,aAAa,OAAW;AAClC,UAAM,WAAW;AACjB,eAAW,MAAM;AAAA,EACnB;AACA,QAAM,UAAU,MAAM,UAAU,SAAS;AACzC,UAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AACzD,QAAM,cAAc,iBAAiB,KAAK,UAAU,MAAM,UAAU,mBAAmB,CAAC;AACxF,MAAI;AACF,eAAW,QAAQ,OAAO;AACxB,UAAI,IAAI,KAAK,SAAU,WAAU,mBAAmB;AACpD,UAAI,MAAM,aAAa,OAAW;AAClC,YAAM,SAAS,MAAMD,aAAY,MAAM,UAAU,QAAQ,WAAW,QAAQ,KAAK,QAAQ;AACzF,eAAS,KAAK,WAAW,KAAK,IAAI,MAAM,CAAC;AACzC,UAAI,IAAI,KAAK,SAAU,WAAU,mBAAmB;AACpD,UAAI,MAAM,aAAa,OAAW;AAClC,UAAI,OAAO,WAAW,QAAW;AAC/B,eAAO,OAAO,OAAO;AAAA,UACnB,QAAQ;AAAA,UACR,WAAW;AAAA,UACX,WAAW,OAAO,OAAO;AAAA,UACzB,SAAS,OAAO,OAAO;AAAA,UACvB,QAAQ,KAAK;AAAA,UACb,UAAU,OAAO,OAAO,CAAC,GAAG,QAAQ,CAAC;AAAA,QACvC,CAAC;AAAA,MACH;AAAA,IACF;AACA,QAAI,MAAM,aAAa,UAAW,QAAO,EAAE,QAAQ,WAAW,UAAU,OAAO,OAAO,CAAC,GAAG,QAAQ,CAAC,EAAE;AACrG,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ,MAAM,aAAa,sBAAsB,sBAAsB;AAAA,MACvE,UAAU,OAAO,OAAO,CAAC,GAAG,QAAQ,CAAC;AAAA,IACvC;AAAA,EACF,UAAE;AACA,gBAAY;AACZ,YAAQ,oBAAoB,SAAS,OAAO;AAAA,EAC9C;AACF;",
+  "names": ["encoder", "AddressZod", "HashZod", "HashZod", "AddressZod", "HashZod", "HashZod", "parseFleetPayload", "HashZod", "parseFleetPayload", "HashZod", "ObjectReferenceZod", "isAnyPayload", "PayloadBuilder", "PayloadBuilder", "isAnyPayload", "attemptSeed", "ObjectReferenceZod"]
 }

package/dist/neutral/resolveFleetPayload.d.ts

@@ -0,0 +1,20 @@
+import type { FleetPayloadFamily } from '@xyo-network/service-kit-schemas';
+import type { ResolveObjectOptions } from './types.js';
+import type { VerifiedFleetPayload } from './verifyFleetPayload.js';
+export interface FleetResolutionAttempt {
+    readonly seedId: string;
+    readonly status: 'resolved' | 'missing' | 'invalid' | 'unsupported' | 'reader-error' | 'resource-limit' | 'timeout';
+}
+export type FleetPayloadResolution = (VerifiedFleetPayload & {
+    readonly attempts: readonly FleetResolutionAttempt[];
+}) | {
+    readonly attempts: readonly FleetResolutionAttempt[];
+    readonly reason: 'unavailable' | 'deadline' | 'resource-limit';
+    readonly status: 'incomplete';
+} | {
+    readonly attempts: readonly FleetResolutionAttempt[];
+    readonly status: 'aborted';
+};
+/** Configured exact-root resolution only; no signer, history completeness or authority assertion. */
+export declare function resolveFleetPayload(root: string, family: FleetPayloadFamily, options: ResolveObjectOptions): Promise<FleetPayloadResolution>;
+//# sourceMappingURL=resolveFleetPayload.d.ts.map

package/dist/neutral/resolveFleetPayload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveFleetPayload.d.ts","sourceRoot":"","sources":["../../src/resolveFleetPayload.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAQ1E,OAAO,KAAK,EACwB,oBAAoB,EACvD,MAAM,YAAY,CAAA;AACnB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAGnE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,GAAG,cAAc,GAAG,gBAAgB,GAAG,SAAS,CAAA;CACpH;AACD,MAAM,MAAM,sBAAsB,GAC5B,CAAC,oBAAoB,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,sBAAsB,EAAE,CAAA;CAAE,CAAC,GACjF;IAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,UAAU,GAAG,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GACvJ;IAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;CAAE,CAAA;AA4F1F,qGAAqG;AACrG,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA0ClJ"}

package/dist/neutral/verifyFleetPayload.d.ts

@@ -0,0 +1,21 @@
+import type { FleetPayload, FleetPayloadFamily } from '@xyo-network/service-kit-schemas';
+import type { ContentPayload, VerificationLimits } from './types.js';
+export interface VerifiedFleetPayload {
+    readonly assurance: 'sdk-root-verified';
+    /** Original bounded snapshot, including client and storage metadata. */
+    readonly nativePayload: ContentPayload;
+    /** Strict body/version view; never the input to root hashing. */
+    readonly payload: Readonly<FleetPayload>;
+    readonly root: string;
+    readonly status: 'verified';
+}
+export type FleetPayloadVerification = VerifiedFleetPayload | {
+    readonly reason: 'family' | 'version';
+    readonly status: 'unsupported';
+} | {
+    readonly reason: 'invalid-json' | 'body-too-large' | 'structure-limit' | 'hash-mismatch' | 'invalid-envelope';
+    readonly status: 'invalid';
+};
+/** B4 original-root verification establishes content identity, never signer or public authority. */
+export declare function verifyFleetPayload(root: string, family: FleetPayloadFamily, candidate: unknown, options?: Partial<VerificationLimits>): Promise<FleetPayloadVerification>;
+//# sourceMappingURL=verifyFleetPayload.d.ts.map

package/dist/neutral/verifyFleetPayload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyFleetPayload.d.ts","sourceRoot":"","sources":["../../src/verifyFleetPayload.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAOxF,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAEpE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;IACvC,wEAAwE;IACxE,QAAQ,CAAC,aAAa,EAAE,cAAc,CAAA;IACtC,iEAAiE;IACjE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAA;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;CAC5B;AAED,MAAM,MAAM,wBAAwB,GAC9B,oBAAoB,GACpB;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;CAAE,GACzE;IAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,eAAe,GAAG,kBAAkB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;CAAE,CAAA;AAEnJ,oGAAoG;AACpG,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,kBAAkB,EAC1B,SAAS,EAAE,OAAO,EAClB,OAAO,GAAE,OAAO,CAAC,kBAAkB,CAAM,GACxC,OAAO,CAAC,wBAAwB,CAAC,CA2BnC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xyo-network/service-kit-protocol",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "Hash-verified public-object resolution through explicit seed readers",
   "license": "LGPL-3.0-only",
   "sideEffects": false,
@@ -18,19 +18,19 @@
     "README.md"
   ],
   "dependencies": {
-    "@xyo-network/service-kit-schemas": "~0.2.0"
+    "@xyo-network/service-kit-schemas": "~0.2.2"
   },
   "devDependencies": {
-    "@ariestools/lib-neutral": "~10.1.0",
-    "@ariestools/toolchain": "~10.1.0",
-    "@ariestools/tsconfig": "~10.1.0",
-    "@xyo-network/sdk-protocol": "~8.0.1",
-    "eslint": "~10.12.0",
+    "@ariestools/lib-neutral": "~10.2.1",
+    "@ariestools/toolchain": "~10.2.1",
+    "@ariestools/tsconfig": "~10.2.1",
+    "@xyo-network/sdk-protocol": "~8.0.3",
+    "eslint": "~10.13.0",
     "eslint-import-resolver-typescript": "~4.4.5",
     "typescript": "~6.0.3",
-    "vite": "~8.3.2",
-    "vitest": "~5.0.3",
-    "zod": "~4.6.5"
+    "vite": "~8.3.5",
+    "vitest": "~5.0.5",
+    "zod": "~4.6.7"
   },
   "peerDependencies": {
     "@xyo-network/sdk-protocol": "^8.0",