@agent-network-protocol/dsh-anp-identity 0.1.6 → 0.1.8

package/lib/client.js

@@ -19704,6 +19704,52 @@ function date4(params) {
   return _coercedDate(ZodDate, params);
 }
 
+// src/publication-types.ts
+var LegacyPublicJwkSchema = external_exports.object({
+  kty: external_exports.literal("OKP"),
+  crv: external_exports.literal("Ed25519"),
+  x: external_exports.string().regex(/^[A-Za-z0-9_-]{43}$/u),
+  kid: external_exports.string().min(1).max(1024),
+  alg: external_exports.literal("EdDSA"),
+  use: external_exports.literal("sig")
+}).strict();
+var EcPublicJwkSchema = external_exports.object({
+  kty: external_exports.literal("EC"),
+  crv: external_exports.literal("P-256"),
+  x: external_exports.string().regex(/^[A-Za-z0-9_-]{43}$/u),
+  y: external_exports.string().regex(/^[A-Za-z0-9_-]{43}$/u),
+  kid: external_exports.string().min(1).max(1024),
+  alg: external_exports.literal("ES256"),
+  use: external_exports.literal("sig")
+}).strict();
+var PublicJwkSchema = external_exports.union([LegacyPublicJwkSchema, EcPublicJwkSchema]);
+var PublicationCapabilitiesSchema = external_exports.object({
+  mcpMachine: external_exports.boolean(),
+  papSession: external_exports.boolean(),
+  papAccount: external_exports.boolean()
+}).strict().refine((v) => (v.mcpMachine || v.papSession) && (!v.papAccount || v.papSession), "Invalid capability combination");
+var PublicationConfigSchema = external_exports.object({
+  backend: external_exports.string().min(1).max(128),
+  documentId: external_exports.string().regex(/^[A-Za-z0-9_-]{1,128}$/u),
+  clientName: external_exports.string().trim().min(1).max(128),
+  redirectUris: external_exports.array(external_exports.string().max(2048)).max(8),
+  capabilities: PublicationCapabilitiesSchema.optional(),
+  activeKid: external_exports.string().min(1).max(1024).optional()
+}).strict();
+var PublicationRecordSchema = external_exports.object({
+  config: PublicationConfigSchema,
+  operationId: external_exports.string().regex(/^[A-Za-z0-9_-]{1,128}$/u),
+  expectedVersion: external_exports.number().int().nonnegative(),
+  state: external_exports.enum(["awaiting_configuration", "publishing", "published", "failed"]),
+  clientId: external_exports.string().max(2048),
+  version: external_exports.number().int().nonnegative(),
+  key: PublicJwkSchema,
+  metadata: external_exports.string().max(16384).optional(),
+  jwks: external_exports.string().max(16384).optional(),
+  metadataSha256: external_exports.string().regex(/^[a-f0-9]{64}$/u).optional(),
+  failure: external_exports.enum(["unavailable", "publication_failed", "material_mismatch"]).optional()
+}).strict().refine((value) => value.state !== "published" || !!value.metadata && !!value.jwks && !!value.metadataSha256 && value.version > 0, "Incomplete published materials");
+
 // src/remote.ts
 var reference = external_exports.object({
   storeId: external_exports.string().min(1),
@@ -19724,10 +19770,15 @@ var decision = version2.extend({
       external_exports.enum(["identity:read", "identity:sign", "identity:http-auth"])
     ),
     signingPurposes: external_exports.array(external_exports.string()),
-    httpOrigins: external_exports.array(external_exports.string())
+    httpOrigins: external_exports.array(external_exports.string()),
+    oauthAudiences: external_exports.array(external_exports.string()).optional()
   }).strict().optional()
 }).strict();
 var methods = [
+  ["registrationBootstrapStatus", void 0],
+  ["registrationServiceSettings", void 0],
+  ["configureRegistrationService", external_exports.object({ origin: external_exports.string().min(1).max(2048), expectedVersion: external_exports.number().int().nonnegative() }).strict()],
+  ["submitRegistrationOtp", external_exports.object({ code: external_exports.string().regex(/^[0-9]{6}$/u) }).strict()],
   ["listIdentities", void 0],
   ["listRequests", external_exports.boolean().optional()],
   ["getRequest", external_exports.string().min(1)],
@@ -19741,6 +19792,9 @@ var methods = [
     }).strict()
   ],
   ["publicDocument", reference],
+  ["publicationStatus", reference],
+  ["retryPublication", reference],
+  ["publishIdentity", external_exports.object({ reference, config: PublicationConfigSchema }).strict()],
   [
     "deleteIdentity",
     external_exports.object({ reference, confirmationName: external_exports.string().min(1) }).strict()
@@ -19765,14 +19819,14 @@ var contribution = {
         codec: {
           mode: "strict",
           typeSymbol: `anp-identity/manager#${method}Input`,
-          schema
+          create: () => schema
         }
       }
     ],
     result: {
       mode: "strict",
       typeSymbol: `anp-identity/manager#${method}Result`,
-      schema: external_exports.json().nullable()
+      create: () => external_exports.json().nullable()
     }
   }))
 };
@@ -19785,12 +19839,24 @@ var IdentityController = class {
   constructor(remote) {
     this.remote = remote;
   }
+  /** Submit the code only to the authenticated manager; never retain it in view state. */
+  async submitRegistrationOtp(code) {
+    await this.action(async () => {
+      if (!this.remote.submitRegistrationOtp) throw new Error("SMS registration is unavailable");
+      const result = await this.remote.submitRegistrationOtp({ code });
+      if (!result.ok) throw new Error("SMS verification could not be submitted");
+      await this.refresh();
+    });
+  }
   view = {
+    registrationService: null,
     loading: true,
+    bootstraps: [],
     identities: [],
     requests: [],
     history: [],
     selectedKey: null,
+    publication: null,
     grants: [],
     document: null,
     documentOpen: false,
@@ -19838,21 +19904,31 @@ var IdentityController = class {
     if (this.refreshing || this.disposed) return;
     this.refreshing = true;
     try {
-      const [identities, requests] = await Promise.all([
+      const [identities, requests, bootstrapResult, settingsResult] = await Promise.all([
         this.call("listIdentities"),
-        this.call("listRequests", false)
+        this.call("listRequests", false),
+        this.remote.registrationBootstrapStatus?.(),
+        this.remote.registrationServiceSettings?.()
       ]);
+      if (settingsResult && !settingsResult.ok) throw new Error("Unable to read registration service settings");
+      if (bootstrapResult && !bootstrapResult.ok) throw new Error("Unable to read protocol registration status");
       const selectedKey = identities.some(
         (i) => identityKey(identityReference(i)) === this.view.selectedKey
       ) ? this.view.selectedKey : identities[0] ? identityKey(identityReference(identities[0])) : null;
       const changed = selectedKey !== this.view.selectedKey;
       this.patch({
         loading: false,
+        registrationService: settingsResult?.ok ? settingsResult.value : null,
+        bootstraps: bootstrapResult?.ok ? bootstrapResult.value ?? [] : [],
         identities,
         requests: requests.filter((r) => r.status === "pending").sort((a, b) => b.createdAt - a.createdAt),
         selectedKey,
-        ...changed ? { grants: [], document: null, documentOpen: false } : {}
+        ...changed ? { publication: null, grants: [], document: null, documentOpen: false } : {}
       });
+      const modal = this.view.modal;
+      if (modal?.kind === "request" && !this.view.pending && !requests.some((r) => r.id === modal.review.request.id && r.status === "pending" && r.version === modal.review.request.version)) {
+        this.closeStaleRequest();
+      }
       await this.loadGrants();
       if (!this.pauseQueue && this.view.modal === null) {
         const next = this.view.requests.find((r) => !r.prompted);
@@ -19867,10 +19943,28 @@ var IdentityController = class {
       this.refreshing = false;
     }
   }
+  async configureRegistrationService(origin, expectedVersion) {
+    if (this.view.pending || !this.remote.configureRegistrationService) return false;
+    this.patch({ pending: true, error: null });
+    try {
+      const result = await this.remote.configureRegistrationService({ origin, expectedVersion });
+      if (!result.ok) throw new Error(result.error.message);
+      this.patch({ registrationService: result.value, notice: "\u8EAB\u4EFD\u670D\u52A1\u5730\u5740\u5DF2\u4FDD\u5B58\uFF0C\u4EC5\u7528\u4E8E\u540E\u7EED\u65B0\u6CE8\u518C\uFF1B\u5DF2\u6709\u8EAB\u4EFD\u548C\u6B63\u5728\u8FDB\u884C\u7684\u6D41\u7A0B\u4E0D\u4F1A\u8FC1\u79FB\u3002" });
+      return true;
+    } catch (error62) {
+      const conflict = error62 instanceof Error && error62.message === "registration_service_conflict";
+      if (conflict) await this.refresh();
+      this.patch({ error: conflict ? "\u914D\u7F6E\u5DF2\u5728\u5176\u4ED6\u9875\u9762\u66F4\u65B0\uFF0C\u8BF7\u5237\u65B0\u540E\u91CD\u65B0\u786E\u8BA4\u3002" : "\u4FDD\u5B58\u5931\u8D25\uFF0C\u8BF7\u586B\u5199\u4E0D\u542B\u8DEF\u5F84\u3001\u53C2\u6570\u6216\u8D26\u6237\u4FE1\u606F\u7684 HTTPS \u670D\u52A1\u6839\u5730\u5740\u3002" });
+      return false;
+    } finally {
+      this.patch({ pending: false });
+    }
+  }
   async selectIdentity(key) {
     this.selectionVersion++;
     this.patch({
       selectedKey: key,
+      publication: null,
       grants: [],
       document: null,
       documentOpen: false,
@@ -19891,9 +19985,12 @@ var IdentityController = class {
     const selected = this.selected();
     if (!selected) return;
     const key = this.view.selectedKey;
-    const grants = await this.call("grants", identityReference(selected));
+    const [grants, publication] = await Promise.all([
+      this.call("grants", identityReference(selected)),
+      selected.catalogState === "active" ? this.call("publicationStatus", identityReference(selected)).catch(() => ({ state: "failed", did: selected.reference.did })) : Promise.resolve(null)
+    ]);
     if (this.view.selectedKey === key) {
-      this.patch({ grants: grants.filter((g) => g.status === "active") });
+      this.patch({ publication, grants: grants.filter((g) => g.status === "active") });
       const modal = this.view.modal;
       if ((modal?.kind === "permissions" || modal?.kind === "revoke") && !grants.some(
         (g) => g.id === modal.grant.id && g.status === "active" && g.version === modal.grant.version
@@ -19943,6 +20040,11 @@ var IdentityController = class {
       if (focus?.isConnected) focus.focus();
     });
   }
+  closeStaleRequest() {
+    this.patch({ pending: false });
+    this.closeModal();
+    this.patch({ notice: "\u6B64\u6388\u6743\u8BF7\u6C42\u5DF2\u5904\u7406\u3001\u5DF2\u8FC7\u671F\u6216\u5DF2\u53D8\u66F4\uFF0C\u65E7\u5F39\u7A97\u5DF2\u5173\u95ED\u3002\u8BF7\u67E5\u770B\u6388\u6743\u8BF7\u6C42\u7684\u6700\u65B0\u72B6\u6001\uFF1B\u4E0D\u4F1A\u81EA\u52A8\u91CD\u590D\u6388\u6743\u3002" });
+  }
   async decide(decision2) {
     const modal = this.view.modal;
     if (modal?.kind !== "request" || this.view.pending) return;
@@ -19960,7 +20062,12 @@ var IdentityController = class {
       this.closeModal(false);
       await this.refresh();
     } catch (error62) {
-      this.fail(error62);
+      if (error62 instanceof Error && ["request_conflict", "request_not_pending", "request_not_found"].includes(error62.message)) {
+        this.closeStaleRequest();
+        await this.refresh();
+      } else {
+        this.fail(error62);
+      }
     } finally {
       this.patch({ pending: false });
     }
@@ -20022,6 +20129,19 @@ var IdentityController = class {
       await this.refresh();
     });
   }
+  async retryPublication() {
+    const selected = this.selected();
+    if (!selected || this.view.pending) return;
+    this.patch({ pending: true, error: null });
+    try {
+      await this.call("retryPublication", identityReference(selected));
+      await this.refresh();
+    } catch {
+      this.patch({ error: "\u8EAB\u4EFD\u53D1\u5E03\u5C1A\u672A\u5B8C\u6210\uFF0C\u8BF7\u68C0\u67E5\u8EAB\u4EFD\u6258\u7BA1\u914D\u7F6E\u540E\u91CD\u8BD5\u3002" });
+    } finally {
+      this.patch({ pending: false });
+    }
+  }
   async toggleDocument() {
     if (this.view.documentOpen) {
       this.patch({ documentOpen: false, document: null });
@@ -20146,13 +20266,64 @@ function Scope({
         "\u7B7E\u540D\u7528\u9014\uFF1A",
         snapshot.signingPurposes.join("\u3001") || "\u65E0"
       ] }),
+      !!snapshot.oauthAudiences?.length && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { children: [
+        "OAuth \u76EE\u6807\uFF1A",
+        snapshot.oauthAudiences.join("\u3001")
+      ] }),
       /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { className: "anpi-break", children: [
         "\u7F51\u7AD9\uFF1A",
-        snapshot.httpOrigins.join("\u3001") || "\u65E0"
+        snapshot.httpOrigins.includes("*") ? "\u5168\u90E8 HTTPS \u57DF\u540D\uFF08\u901A\u914D\u6743\u9650\uFF09" : snapshot.httpOrigins.join("\u3001") || "\u65E0"
       ] })
     ] }) : /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { children: "\u65E0\u6CD5\u8BFB\u53D6\u6743\u9650\u8303\u56F4\uFF0C\u6682\u4E0D\u80FD\u6388\u6743\u3002" }),
     /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: "anpi-small", children: FULL_PERMISSION_NOTICE }),
-    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: "anpi-small", children: "\u7B7E\u540D\u53EF\u5728\u5916\u90E8\u4F7F\u7528\uFF0C\u4E0D\u53D7\u7F51\u7AD9\u5217\u8868\u9650\u5236\u3002" })
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: "anpi-small", children: snapshot?.capabilities.includes("identity:sign") ? "\u7B7E\u540D\u53EF\u5728\u5916\u90E8\u4F7F\u7528\uFF0C\u4E0D\u53D7\u7F51\u7AD9\u5217\u8868\u9650\u5236\u3002" : "\u4EC5\u5141\u8BB8\u516C\u5F00\u8EAB\u4EFD\u8BFB\u53D6\u4E0E\u7CBE\u786E HTTP \u8BF7\u6C42\u8BA4\u8BC1\uFF0C\u4E0D\u63D0\u4F9B\u8BBE\u5907\u65AD\u8A00\u6216\u901A\u7528\u7B7E\u540D\u6743\u9650\u3002" })
+  ] });
+}
+function RegistrationServiceForm({ controller, settings, pending }) {
+  const [draft, setDraft] = (0, import_react.useState)(settings.origin);
+  const [version3, setVersion] = (0, import_react.useState)(settings.version);
+  const [dirty, setDirty] = (0, import_react.useState)(false);
+  (0, import_react.useEffect)(() => {
+    if (!dirty) {
+      setDraft(settings.origin);
+      setVersion(settings.version);
+    }
+  }, [settings.origin, settings.version, dirty]);
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "anpi-section", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h3", { children: "\u8EAB\u4EFD\u670D\u52A1" }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("form", { onSubmit: (event) => {
+      event.preventDefault();
+      void controller.configureRegistrationService(draft, version3).then((saved) => {
+        if (saved) setDirty(false);
+      });
+    }, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("label", { children: [
+        "\u8EAB\u4EFD\u670D\u52A1\u5730\u5740 ",
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+          "input",
+          {
+            "aria-label": "\u8EAB\u4EFD\u670D\u52A1\u5730\u5740",
+            type: "url",
+            required: true,
+            value: draft,
+            placeholder: "https://awiki.me",
+            disabled: pending,
+            onChange: (event) => {
+              setDraft(event.target.value);
+              setDirty(true);
+            }
+          }
+        )
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_dsh_client_ui_primitives.Button, { disabled: pending || !dirty || !draft.trim(), type: "submit", children: "\u4FDD\u5B58\u670D\u52A1\u5730\u5740" }),
+      dirty && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_dsh_client_ui_primitives.Button, { disabled: pending, type: "button", onClick: () => {
+        setDraft(settings.origin);
+        setVersion(settings.version);
+        setDirty(false);
+      }, children: "\u91CD\u65B0\u8F7D\u5165\u5DF2\u4FDD\u5B58\u5730\u5740" })
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: "anpi-small", children: "\u9ED8\u8BA4 https://awiki.me\u3002\u8FD9\u91CC\u53EA\u4FDD\u5B58\u65B0\u6CE8\u518C\u4F7F\u7528\u7684 HTTPS \u6839\u5730\u5740\uFF0C\u4E0D\u53D1\u9001\u9A8C\u8BC1\u7801\u3001\u4E0D\u521B\u5EFA\u8EAB\u4EFD\u3002" }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: "anpi-small", children: "\u5DF2\u6709\u8EAB\u4EFD\u548C\u6B63\u5728\u8FDB\u884C\u7684\u6CE8\u518C\u7EE7\u7EED\u4F7F\u7528\u539F\u670D\u52A1\u3002\u8DE8\u670D\u52A1\u6CE8\u518C\u5FC5\u987B\u521B\u5EFA\u65B0\u7684\u8EAB\u4EFD\u53CA\u6CE8\u518C\u6D41\u7A0B\uFF0C\u4E0D\u80FD\u53EA\u4FEE\u6539\u5DF2\u6709 DID \u7684\u57DF\u540D\u3002" })
   ] });
 }
 function IdentitySettings({
@@ -20164,11 +20335,65 @@ function IdentitySettings({
   );
   const [tab, setTab] = (0, import_react.useState)("identities");
   const [history, setHistory] = (0, import_react.useState)(false);
+  const [otp, setOtp] = (0, import_react.useState)("");
   const identity = controller.selected();
   const blocked = identity?.deleteBlockedReason || (view.grants.length || identity?.integrations.length ? "\u8BF7\u5148\u89E3\u9664\u63D2\u4EF6\u548C\u96C6\u6210\u5173\u8054" : "");
   return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("section", { className: "anpi", children: [
     /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h2", { children: "\u8EAB\u4EFD" }),
     /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: "anpi-muted", children: "\u7BA1\u7406\u6B64 DSH \u4E2D\u4FDD\u5B58\u7684\u8EAB\u4EFD" }),
+    view.registrationService && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(RegistrationServiceForm, { controller, settings: view.registrationService, pending: view.pending }),
+    view.bootstraps.map((bootstrap) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "anpi-section", role: "status", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h3", { children: "\u534F\u8BAE\u8EAB\u4EFD\u6CE8\u518C" }),
+      bootstrap.origin && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { className: "anpi-small", children: [
+        "\u6CE8\u518C\u670D\u52A1\uFF1A",
+        bootstrap.origin
+      ] }),
+      bootstrap.clientVersion && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { className: "anpi-small", children: [
+        "\u5BA2\u6237\u7AEF\u7248\u672C\u5934\uFF1A",
+        bootstrap.clientVersion
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { children: {
+        awaiting_approval: "\u7B49\u5F85\u521B\u5EFA\u5BA1\u6279",
+        awaiting_email_verification: "\u7B49\u5F85\u90AE\u7BB1\u6FC0\u6D3B\u786E\u8BA4",
+        awaiting_phone_verification: "\u7B49\u5F85\u77ED\u4FE1\u9A8C\u8BC1\u7801",
+        registering: "\u6CE8\u518C\u4E2D",
+        publishing: "\u53D1\u5E03\u4E2D",
+        published: "\u5DF2\u53D1\u5E03",
+        registration_uncertain: "\u6CE8\u518C\u7ED3\u679C\u4E0D\u786E\u5B9A\uFF0C\u9700\u8981\u7BA1\u7406\u5904\u7406",
+        blocked: "\u6CE8\u518C\u6682\u4E0D\u53EF\u7528",
+        disposed: "\u5DF2\u505C\u6B62"
+      }[bootstrap.phase] }),
+      bootstrap.phase === "published" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: "anpi-small", children: "\u6CE8\u518C\u4E0E\u53D1\u5E03\u5DF2\u5B8C\u6210\uFF1B\u8FD8\u9700\u7531 Host \u914D\u7F6E\u534F\u8BAE\u7528\u9014\u8BB8\u53EF\u548C\u6D88\u8D39\u8005\u8FDE\u63A5\u3002" }),
+      bootstrap.reason === "client_upgrade_required" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: "anpi-small", children: "\u670D\u52A1\u7AEF\u8FD4\u56DE client.upgrade_required\uFF0C\u4E0D\u80FD\u5C06 HTTP 200 \u89C6\u4E3A\u6210\u529F\u3002\u8BF7\u6838\u5BF9\u4E0A\u65B9\u6CE8\u518C\u670D\u52A1\u548C\u5BA2\u6237\u7AEF\u7248\u672C\uFF0C\u5B8C\u6210\u51C6\u5165\u914D\u7F6E\u6216\u5347\u7EA7\u3002" }),
+      bootstrap.reason === "phone_unavailable" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: "anpi-small", children: "\u77ED\u4FE1\u9A8C\u8BC1\u7801\u8BF7\u6C42\u672A\u786E\u8BA4\u6210\u529F\uFF0C\u8BF7\u68C0\u67E5\u670D\u52A1\u7AEF\u624B\u673A\u53F7\u6CE8\u518C\u914D\u7F6E\u3002\u4E0D\u4F1A\u81EA\u52A8\u91CD\u53D1\u6216\u7ED5\u8FC7\u9A8C\u8BC1\u3002" }),
+      bootstrap.phase === "awaiting_phone_verification" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("form", { onSubmit: (event) => {
+        event.preventDefault();
+        const code = otp;
+        setOtp("");
+        void controller.submitRegistrationOtp(code);
+      }, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: "anpi-small", children: "\u53D1\u9001\u8BF7\u6C42\u5DF2\u53D7\u7406\u4E0D\u7B49\u4E8E\u77ED\u4FE1\u5DF2\u9001\u8FBE\u3002\u8BF7\u4F7F\u7528\u6B64\u6CE8\u518C\u670D\u52A1\u4E3A\u5F53\u524D Handle \u7B7E\u53D1\u7684\u9A8C\u8BC1\u7801\uFF0C\u4E0D\u80FD\u590D\u7528\u5176\u4ED6\u73AF\u5883\u6216\u767B\u5F55\u6D41\u7A0B\u7684\u9A8C\u8BC1\u7801\u3002" }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("label", { children: [
+          "\u77ED\u4FE1\u9A8C\u8BC1\u7801 ",
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+            "input",
+            {
+              "aria-label": "\u77ED\u4FE1\u9A8C\u8BC1\u7801",
+              type: "password",
+              inputMode: "numeric",
+              autoComplete: "one-time-code",
+              maxLength: 6,
+              value: otp,
+              onChange: (event) => setOtp(event.target.value)
+            }
+          )
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "submit", disabled: view.pending || !/^[0-9]{6}$/u.test(otp), children: "\u9A8C\u8BC1\u5E76\u6CE8\u518C" })
+      ] }),
+      bootstrap.reference && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CopyRow, { label: "DID", value: bootstrap.reference.did, controller }),
+      bootstrap.reference && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CopyRow, { label: "\u672C\u5730\u8EAB\u4EFD\u5F15\u7528", value: JSON.stringify(bootstrap.reference), controller }),
+      bootstrap.clientId && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CopyRow, { label: "CIMD", value: bootstrap.clientId, controller })
+    ] }, bootstrap.id)),
     /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "anpi-tabs", role: "tablist", "aria-label": "\u8EAB\u4EFD\u7BA1\u7406", children: [
       /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
         "button",
@@ -20269,6 +20494,19 @@ function IdentitySettings({
             }
           )
         ] }),
+        view.publication && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "anpi-section", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h3", { children: "\u5BF9\u5916\u8EAB\u4EFD" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { children: { local: "\u5C1A\u672A\u53D1\u5E03", awaiting_configuration: "\u7B49\u5F85\u8EAB\u4EFD\u6258\u7BA1\u914D\u7F6E", publishing: "\u53D1\u5E03\u4E2D", published: "\u5DF2\u53D1\u5E03", failed: "\u53D1\u5E03\u672A\u5B8C\u6210" }[view.publication.state] }),
+          view.publication.capabilities && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { children: [
+            view.publication.capabilities.mcpMachine ? "MCP \u673A\u5668\u8BBF\u95EE\uFF08\u65E0\u9700\u56DE\u8C03\u5730\u5740\uFF09" : "",
+            view.publication.capabilities.papSession ? "PAP \u4F1A\u8BDD" : "",
+            view.publication.capabilities.papAccount ? "PAP \u8D26\u6237\u6388\u6743" : ""
+          ].filter(Boolean).join(" \xB7 ") }),
+          view.publication.clientId && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CopyRow, { label: "CIMD", value: view.publication.clientId, controller }),
+          view.publication.state === "failed" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_dsh_client_ui_primitives.Button, { disabled: view.pending, onClick: () => {
+            void controller.retryPublication();
+          }, children: "\u91CD\u8BD5\u53D1\u5E03" })
+        ] }),
         /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "anpi-section", children: [
           /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h3", { children: "\u4F60\u6388\u6743\u7684\u63D2\u4EF6" }),
           view.grants.length === 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: "anpi-muted", children: "\u6682\u65E0\u6388\u6743\u7684\u63D2\u4EF6" }),
@@ -20580,7 +20818,15 @@ function IdentityModal({
           /* @__PURE__ */ (0, import_jsx_runtime.jsx)("dt", { children: "DID \u57DF\u540D" }),
           /* @__PURE__ */ (0, import_jsx_runtime.jsx)("dd", { children: request.parameters.domain }),
           /* @__PURE__ */ (0, import_jsx_runtime.jsx)("dt", { children: "\u8EAB\u4EFD\u8DEF\u5F84" }),
-          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("dd", { children: request.parameters.path })
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("dd", { children: request.parameters.path }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("dt", { children: "\u7528\u9014" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("dd", { children: request.parameters.usage === "protocol" ? "MCP / PAP \u534F\u8BAE\u8EAB\u4EFD\uFF08\u72EC\u7ACB\u8BBE\u5907\u6743\u9650\uFF09" : "\u666E\u901A\u63D2\u4EF6\u8EAB\u4EFD" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("dt", { children: "\u8EAB\u4EFD\u65B9\u6CD5" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("dd", { children: request.parameters.profile ?? "e1" }),
+          request.parameters.usage === "protocol" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("dt", { children: "\u8BBE\u5907\u80FD\u529B" }),
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("dd", { children: request.parameters.identityOnly ? "\u4EC5\u516C\u5171\u8EAB\u4EFD\uFF08\u4E0D\u542B\u6D88\u606F\u80FD\u529B\uFF09" : "\u8EAB\u4EFD\u4E0E\u6D88\u606F\u80FD\u529B" })
+          ] })
         ] }),
         /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { children: "\u53C2\u6570\u7531\u63D2\u4EF6\u63D0\u4F9B\uFF0C\u8BF7\u786E\u8BA4\u540E\u7EE7\u7EED\u3002" }),
         /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: "anpi-small", children: "Handle \u7531\u7533\u8BF7\u63D2\u4EF6\u63D0\u4F9B\uFF0C\u4FDD\u5B58\u4E0D\u4EE3\u8868\u5DF2\u5728\u670D\u52A1\u7AEF\u6CE8\u518C\u6216\u9A8C\u8BC1\u3002" }),
@@ -20811,7 +21057,7 @@ function AccessForm({
     review.unavailableReason && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { role: "alert", children: review.unavailableReason }),
     /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "anpi-access-scope", children: [
       /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: "anpi-small", children: FULL_PERMISSION_NOTICE }),
-      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: "anpi-small", children: "\u7B7E\u540D\u53EF\u5728\u5916\u90E8\u4F7F\u7528\uFF0C\u4E0D\u53D7\u7F51\u7AD9\u5217\u8868\u9650\u5236\u3002" }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { className: "anpi-small", children: snapshot?.capabilities.includes("identity:sign") ? "\u7B7E\u540D\u53EF\u5728\u5916\u90E8\u4F7F\u7528\uFF0C\u4E0D\u53D7\u7F51\u7AD9\u5217\u8868\u9650\u5236\u3002" : "\u4EC5\u5141\u8BB8\u516C\u5F00\u8EAB\u4EFD\u8BFB\u53D6\u4E0E\u7CBE\u786E HTTP \u8BF7\u6C42\u8BA4\u8BC1\uFF0C\u4E0D\u63D0\u4F9B\u8BBE\u5907\u65AD\u8A00\u6216\u901A\u7528\u7B7E\u540D\u6743\u9650\u3002" }),
       /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("details", { children: [
         /* @__PURE__ */ (0, import_jsx_runtime.jsx)("summary", { children: "\u5168\u90E8\u4F7F\u7528\u6743\u9650 \xB7 \u67E5\u770B\u8303\u56F4" }),
         snapshot ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
@@ -20826,7 +21072,7 @@ function AccessForm({
       ] }),
       /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", { className: "anpi-small anpi-break", children: [
         "\u7F51\u7AD9\uFF1A",
-        snapshot?.httpOrigins.join("\u3001") || "\u65E0"
+        snapshot?.httpOrigins.includes("*") ? "\u5168\u90E8 HTTPS \u57DF\u540D\uFF08\u901A\u914D\u6743\u9650\uFF09" : snapshot?.httpOrigins.join("\u3001") || "\u65E0"
       ] })
     ] }),
     /* @__PURE__ */ (0, import_jsx_runtime.jsx)(