@agent-network-protocol/anp-identity 0.2.2 → 0.2.3

package/README.md

@@ -1,6 +1,6 @@
 # @agent-network-protocol/anp-identity
 
-Node.js bindings for ANP Identity, an E1 DID identity manager that keeps managed
+Node.js bindings for ANP Identity, an E1 and Web DID identity manager that keeps managed
 keys behind a native Rust boundary. A single Store can own multiple DIDs. All
 filesystem, keyring, and cryptographic operations are asynchronous so they do
 not block the JavaScript main thread.
@@ -48,6 +48,13 @@ lease instead of importing this Host entry.
 
 ## Root key sources
 
+Choose `profile: 'web'` to create a Web identity without a DID `root_control`
+key. Managed device signing/agreement keys and the encrypted Store are reused.
+Host status and enrollment proposals expose `rootKeyFingerprint: null` and
+`rootCapability: 'absent'`. WBA retains its existing fingerprint and root flows.
+Web HTTP authentication uses RFC 9421; legacy DID-WBA, Root Transfer and Root
+Import are unavailable. The default entry still exposes no private keys.
+
 The bindings support OS keyring, local private file, named environment variable,
 and an injected 32-byte key. An injected key `Buffer` is consumed and
 overwritten, including validation-error paths. Pass a disposable buffer

package/SOURCE.md

@@ -1,5 +1,5 @@
 # Corresponding Source
 
 Repository: https://github.com/agent-network-protocol/anp-identity
-Commit: 27b511bb5a4adb0d7fb675ad67d9be31ffb7e51a
+Commit: c12fecefb39389e2800dc363e5538de80448850b
 Target: platform-independent-wrapper

package/checksums.json

@@ -3,11 +3,11 @@
   "files": [
     {
       "path": "index.d.ts",
-      "sha256": "bffd69f3a556d24ffc393f7f86bfd2383a3e731af598d5c63e6fbc32ddd135b8"
+      "sha256": "d745a3550f2d12ccd0ab972ca16688812f842fc41270cb9ff983cce45b07f1ce"
     },
     {
       "path": "index.js",
-      "sha256": "4918b3104ecac28d2b73fac27a65f2d4b810372d517e9839907f30a961267a48"
+      "sha256": "52134f08f47be2a90cb86328f5a1ba58017ef3512155d4cd3d83c493231d4058"
     },
     {
       "path": "LICENSE",
@@ -23,31 +23,31 @@
     },
     {
       "path": "package.json",
-      "sha256": "1b2554ff5309106233a718c758675925686aff963440adaea9c4f669ecdd210e"
+      "sha256": "220bf7be5346434d3f485d81fe6341f99a081dc08ea8bafc55692aaade072ceb"
     },
     {
       "path": "provenance.json",
-      "sha256": "e95ab4acb116fe20251c017141c8f438a14d57df95a9bb2a091400e0d4df0b75"
+      "sha256": "395d085d41bc0716e24e792eb93d4bc8366b7231cfb5fae46babcb791256a663"
     },
     {
       "path": "provider.d.ts",
-      "sha256": "0176141db7a2452849907a41a182b6237aa9525ec400aeee2953edc62ad0f2ed"
+      "sha256": "3843006e81bbbf7673ce74f66b4dce20a63382fc2b371bbf54844f8e9f5b5efe"
     },
     {
       "path": "provider.js",
-      "sha256": "bef08a56c8c8d74e94414d6741c12429da6a3254e974924c23acc7336288fce9"
+      "sha256": "29b79d349c60b01d5b2a2df165457967feab4dd3f0160ac0694ad0c77e9ecb99"
     },
     {
       "path": "README.md",
-      "sha256": "6462d812b51c8432ff6ab5baad27c17f4445f3427a42a7607edf9e810c972b8b"
+      "sha256": "f791508f9a18010c1921091d18331097c2232220073e2b687d526d875045ae27"
     },
     {
       "path": "sbom.cdx.json",
-      "sha256": "b12b88aae291b9103d5e593032038f7054521ad6adfac37770b3d0217744f3d2"
+      "sha256": "2d573f093b576f436fd73c9f10507d17e9dec784eb4260266da190ca44bcb4b8"
     },
     {
       "path": "SOURCE.md",
-      "sha256": "90a798e1d0a4f97cc0206a484545899bfd0920666168dd54e903799868fa6204"
+      "sha256": "49dfa3d738bb89f03ae327670340baa4183ed6806850ef4f6299810cc793dcc3"
     }
   ]
 }

package/index.d.ts

@@ -103,7 +103,7 @@ export interface DeviceManifestEntry {
 }
 
 export interface CreateIdentityRequest {
-  profile: 'e1'
+  profile: 'e1' | 'web'
   domain: string
   port?: number
   pathSegments: string[]
@@ -326,6 +326,7 @@ export class DocumentChangeSession {
   beginPublication(): Promise<PublicationAttempt>
   complete(attempt: PublicationAttempt, result: PublicationResult): Promise<DocumentChangeOutcome>
   reconcile(observation: VerifiedRemoteDocument): Promise<DocumentChangeOutcome>
+  reconcileRejected(observation: VerifiedRemoteDocument): Promise<DocumentChangeOutcome>
 }
 
 export class IdentityTransitionSession {

package/index.js

@@ -138,6 +138,12 @@ class DocumentChangeSession {
       await call(this.#inner.reconcile(verifiedRemoteDocument(observation))),
     )
   }
+
+  async reconcileRejected(observation) {
+    return documentChangeOutcome(
+      await call(this.#inner.reconcileRejected(verifiedRemoteDocument(observation))),
+    )
+  }
 }
 
 class IdentityTransitionSession {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-network-protocol/anp-identity",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "Secure E1 DID identity custody and lifecycle management for ANP",
   "license": "Apache-2.0",
   "publishConfig": {
@@ -53,11 +53,11 @@
     ]
   },
   "optionalDependencies": {
-    "@agent-network-protocol/anp-identity-darwin-arm64": "0.2.2",
-    "@agent-network-protocol/anp-identity-darwin-x64": "0.2.2",
-    "@agent-network-protocol/anp-identity-linux-arm64-gnu": "0.2.2",
-    "@agent-network-protocol/anp-identity-linux-x64-gnu": "0.2.2",
-    "@agent-network-protocol/anp-identity-win32-x64-msvc": "0.2.2"
+    "@agent-network-protocol/anp-identity-darwin-arm64": "0.2.3",
+    "@agent-network-protocol/anp-identity-darwin-x64": "0.2.3",
+    "@agent-network-protocol/anp-identity-linux-arm64-gnu": "0.2.3",
+    "@agent-network-protocol/anp-identity-linux-x64-gnu": "0.2.3",
+    "@agent-network-protocol/anp-identity-win32-x64-msvc": "0.2.3"
   },
   "devDependencies": {
     "@napi-rs/cli": "3.8.6",

package/provenance.json

@@ -2,15 +2,22 @@
   "schemaVersion": 1,
   "package": {
     "name": "@agent-network-protocol/anp-identity",
-    "version": "0.2.2"
+    "version": "0.2.3"
   },
   "target": "platform-independent-wrapper",
   "source": {
     "repository": "https://github.com/agent-network-protocol/anp-identity",
-    "commit": "27b511bb5a4adb0d7fb675ad67d9be31ffb7e51a",
-    "committedAt": "2026-09-11T21:27:15+08:00",
+    "commit": "c12fecefb39389e2800dc363e5538de80448850b",
+    "committedAt": "2026-09-24T21:01:29+08:00",
     "dirty": false
   },
+  "dependencyResolution": {
+    "mode": "registry",
+    "anp": {
+      "version": "1.0.5",
+      "source": "registry+https://github.com/rust-lang/crates.io-index"
+    }
+  },
   "toolchain": {
     "rustc": "rustc 1.88.0 (6b00bc388 2025-06-23)",
     "node": "v22.19.0"

package/provider.d.ts

@@ -71,7 +71,7 @@ export interface PreparedHttpSignatureAttempt {
 
 export interface IdentityHostStatus {
   rootCapability: 'absent' | 'pending' | 'active'
-  rootKeyFingerprint: string
+  rootKeyFingerprint: string | null
   checkpoint?: HostDocumentCheckpoint
 }
 
@@ -238,7 +238,7 @@ export interface EnrollmentProposal {
   enrollmentId: string
   identity: IdentityReference
   kind: EnrollmentProposalKind
-  rootKeyFingerprint: string
+  rootKeyFingerprint: string | null
   checkpoint: HostDocumentCheckpoint
 }
 
@@ -318,6 +318,10 @@ export interface ProviderLease {
     reference: IdentityReference,
     remote: VerifiedRemoteDocument,
   ): Promise<'activated' | 'updated' | 'unchanged' | 'revoked'>
+  adoptVerifiedSiblingDocument(
+    reference: IdentityReference,
+    remote: VerifiedRemoteDocument,
+  ): Promise<'activated' | 'updated' | 'unchanged' | 'revoked'>
   beginDeviceEnrollment(request: DeviceEnrollmentRequest): Promise<ProviderEnrollmentSession>
   beginRequestSigningEnrollment(
     request: RequestSigningEnrollmentRequest,
@@ -349,6 +353,7 @@ export interface ProviderDocumentChangeSession {
     result: PublicationResult,
   ): Promise<DocumentChangeOutcome>
   reconcile(observation: VerifiedRemoteDocument): Promise<DocumentChangeOutcome>
+  reconcileRejected(observation: VerifiedRemoteDocument): Promise<DocumentChangeOutcome>
 }
 
 export interface ProviderIdentityTransitionSession {

package/provider.js

@@ -165,6 +165,9 @@ class ProviderLease {
   adoptVerifiedDocument(reference, remote) {
     return call(this.#inner.adoptVerifiedDocument(reference, verifiedRemoteDocument(remote)))
   }
+  adoptVerifiedSiblingDocument(reference, remote) {
+    return call(this.#inner.adoptVerifiedSiblingDocument(reference, verifiedRemoteDocument(remote)))
+  }
 
   async beginDeviceEnrollment(request) {
     return new ProviderEnrollmentSession(
@@ -267,6 +270,12 @@ class ProviderDocumentChangeSession {
       await call(this.#inner.reconcile(verifiedRemoteDocument(observation))),
     )
   }
+
+  async reconcileRejected(observation) {
+    return documentChangeOutcome(
+      await call(this.#inner.reconcileRejected(verifiedRemoteDocument(observation))),
+    )
+  }
 }
 
 class ProviderIdentityTransitionSession {

package/sbom.cdx.json

@@ -6,43 +6,43 @@
     "component": {
       "type": "library",
       "name": "@agent-network-protocol/anp-identity",
-      "version": "0.2.2"
+      "version": "0.2.3"
     }
   },
   "components": [
     {
       "type": "library",
       "name": "@agent-network-protocol/anp-identity-darwin-arm64",
-      "version": "0.2.2",
-      "purl": "pkg:npm/%40agent-network-protocol%2Fanp-identity-darwin-arm64@0.2.2",
+      "version": "0.2.3",
+      "purl": "pkg:npm/%40agent-network-protocol%2Fanp-identity-darwin-arm64@0.2.3",
       "scope": "optional"
     },
     {
       "type": "library",
       "name": "@agent-network-protocol/anp-identity-darwin-x64",
-      "version": "0.2.2",
-      "purl": "pkg:npm/%40agent-network-protocol%2Fanp-identity-darwin-x64@0.2.2",
+      "version": "0.2.3",
+      "purl": "pkg:npm/%40agent-network-protocol%2Fanp-identity-darwin-x64@0.2.3",
       "scope": "optional"
     },
     {
       "type": "library",
       "name": "@agent-network-protocol/anp-identity-linux-arm64-gnu",
-      "version": "0.2.2",
-      "purl": "pkg:npm/%40agent-network-protocol%2Fanp-identity-linux-arm64-gnu@0.2.2",
+      "version": "0.2.3",
+      "purl": "pkg:npm/%40agent-network-protocol%2Fanp-identity-linux-arm64-gnu@0.2.3",
       "scope": "optional"
     },
     {
       "type": "library",
       "name": "@agent-network-protocol/anp-identity-linux-x64-gnu",
-      "version": "0.2.2",
-      "purl": "pkg:npm/%40agent-network-protocol%2Fanp-identity-linux-x64-gnu@0.2.2",
+      "version": "0.2.3",
+      "purl": "pkg:npm/%40agent-network-protocol%2Fanp-identity-linux-x64-gnu@0.2.3",
       "scope": "optional"
     },
     {
       "type": "library",
       "name": "@agent-network-protocol/anp-identity-win32-x64-msvc",
-      "version": "0.2.2",
-      "purl": "pkg:npm/%40agent-network-protocol%2Fanp-identity-win32-x64-msvc@0.2.2",
+      "version": "0.2.3",
+      "purl": "pkg:npm/%40agent-network-protocol%2Fanp-identity-win32-x64-msvc@0.2.3",
       "scope": "optional"
     },
     {
@@ -114,7 +114,7 @@
     {
       "type": "library",
       "name": "anp-identity-node",
-      "version": "0.2.2",
+      "version": "0.2.3",
       "licenses": [
         {
           "expression": "Apache-2.0"
@@ -124,7 +124,7 @@
     {
       "type": "library",
       "name": "anp-identity",
-      "version": "0.2.3",
+      "version": "0.2.4",
       "licenses": [
         {
           "expression": "Apache-2.0"
@@ -134,13 +134,13 @@
     {
       "type": "library",
       "name": "anp",
-      "version": "1.0.3",
+      "version": "1.0.5",
       "licenses": [
         {
-          "expression": "MIT"
+          "expression": "Apache-2.0"
         }
       ],
-      "purl": "pkg:cargo/anp@1.0.3"
+      "purl": "pkg:cargo/anp@1.0.5"
     },
     {
       "type": "library",