@aikdna/kdna-core 0.37.1-rc.browser.1 → 0.37.2

package/src/public-contract/key-grant-issuer-node.d.ts

@@ -10,7 +10,7 @@ export type IssuerIssuedObservation = { readonly "status": "issued"; readonly "g
 export type IssuerCoreRejectedObservation = { readonly "status": "core_rejected"; readonly "core": { readonly "status": "rejected"; readonly "reason": ReadDiagnosticCode; }; readonly "stage": "asset"; };
 export type IssuerFailedObservation = ({ readonly "status": "issuer_failed"; readonly "code": "ISSUER_INPUT_INVALID"; readonly "stage": "input"; } | { readonly "status": "issuer_failed"; readonly "code": "ISSUER_ASSET_PROFILE_UNSUPPORTED"; readonly "stage": "asset"; } | { readonly "status": "issuer_failed"; readonly "code": "ISSUER_ASSET_AUTHENTICATION_FAILED"; readonly "stage": "asset" | "integrity"; } | { readonly "status": "issuer_failed"; readonly "code": "ISSUER_KEY_INVALID"; readonly "stage": "issuer_key"; } | { readonly "status": "issuer_failed"; readonly "code": "ISSUER_GRANT_OPTIONS_INVALID"; readonly "stage": "input" | "grant"; } | { readonly "status": "issuer_failed"; readonly "code": "ISSUER_OUTPUT_INVALID"; readonly "stage": "input" | "asset" | "integrity" | "issuer_key" | "grant"; });
 export type IssuerResultObservation = (IssuerIssuedObservation | IssuerCoreRejectedObservation | IssuerFailedObservation);
-export type IssuerDescriptor = { readonly "id": "kdna.external-grant-issuer/1"; readonly "version": "1.0.0"; readonly "definition_digest": Digest; readonly "implementation": { readonly "package": "@aikdna/kdna-core"; readonly "version": "0.37.1-rc.browser.1"; }; readonly "exports": readonly ["getExternalGrantIssuerContract", "issueExternalKeyGrantForAsset"]; readonly "limits": { readonly "container_bytes": 26214400; readonly "grant_bytes": 1048576; readonly "timeout_ms_max": 60000; readonly "max_concurrent": 4; }; };
+export type IssuerDescriptor = { readonly "id": "kdna.external-grant-issuer/1"; readonly "version": "1.0.0"; readonly "definition_digest": Digest; readonly "implementation": { readonly "package": "@aikdna/kdna-core"; readonly "version": "0.37.2"; }; readonly "exports": readonly ["getExternalGrantIssuerContract", "issueExternalKeyGrantForAsset"]; readonly "limits": { readonly "container_bytes": 26214400; readonly "grant_bytes": 1048576; readonly "timeout_ms_max": 60000; readonly "max_concurrent": 4; }; };
 export type IssuerSecrets = { readonly issuerRootKey: Uint8Array; readonly issuerSigningPrivateKeyPkcs8: Uint8Array; readonly signaturePolicy: IssuerSignaturePolicy };
 export type IssuanceResult = (IssuerIssuedObservation & { readonly grantBytes: Uint8Array }) | IssuerCoreRejectedObservation | IssuerFailedObservation;
 export declare function getExternalGrantIssuerContract(): IssuerDescriptor;

package/src/public-contract/package-set-contract.generated.json

@@ -11,8 +11,8 @@
       "inspectAdmittedPackageSet",
       "verifyPackageSetHandoff"
     ],
-    "core_version": "0.37.1-rc.browser.1",
-    "definition_digest": "sha256:4bef99c6e0a3fd36d954fb8e6f249b2dcfe45a3823417228a095502e0559a48e",
+    "core_version": "0.37.2",
+    "definition_digest": "sha256:8182aa523a7d6f03d1b1142db66aafe2d048236bd7ee5e3719175680c3bafe1a",
     "limits": {
       "maxMembers": 10000,
       "maxTotalSourceBytes": 104857600
@@ -39,7 +39,7 @@
       "sealPackageSetHandoff",
       "admitPackageSetHandoff"
     ],
-    "read_version": "0.11.2-rc.browser.1"
+    "read_version": "0.11.3"
   },
   "key_sets": {
     "HandoffMember": {
@@ -739,7 +739,7 @@
           "type": "array"
         },
         "core_version": {
-          "const": "0.37.1-rc.browser.1",
+          "const": "0.37.2",
           "type": "string"
         },
         "definition_digest": {
@@ -769,7 +769,7 @@
           "type": "array"
         },
         "read_version": {
-          "const": "0.11.2-rc.browser.1",
+          "const": "0.11.3",
           "type": "string"
         }
       },

package/src/public-contract/package-set-node.d.ts

@@ -6,7 +6,7 @@ export type PackageSetMemberObservationRequest = { readonly "set_id": Identifier
 export type PackageSetMemberObservationRow = { readonly "member_id": Identifier; readonly "asset_id": Identifier; readonly "asset_version": VersionLabel; readonly "A": Digest; readonly "decision": "allow" | "deny"; readonly "decision_id": Identifier; readonly "host_id": Identifier; readonly "host_epoch": Identifier; readonly "issued_at": UInt; readonly "expires_at": UInt; readonly "current_ms": UInt; };
 export type PackageSetMemberObservation = { readonly "decisions": ReadonlyArray<PackageSetMemberObservationRow>; };
 export type PackageSetReadObservation = { readonly "context": HostReadContextData; readonly "current_ms": UInt; };
-export type PackageSetNodeDescriptor = { readonly "contract": "kdna.package-set-node/0.2.1"; readonly "module_version": "0.2.0"; readonly "core_version": "0.37.1-rc.browser.1"; readonly "read_version": "0.11.2-rc.browser.1"; readonly "limits": PackageSetLimits; readonly "local_failures": ReadonlyArray<PackageSetLocalFailure>; readonly "core_callables": ReadonlyArray<Identifier>; readonly "read_callables": ReadonlyArray<Identifier>; readonly "claims": "claims_not_authenticated"; readonly "definition_digest": Digest; };
+export type PackageSetNodeDescriptor = { readonly "contract": "kdna.package-set-node/0.2.1"; readonly "module_version": "0.2.0"; readonly "core_version": "0.37.2"; readonly "read_version": "0.11.3"; readonly "limits": PackageSetLimits; readonly "local_failures": ReadonlyArray<PackageSetLocalFailure>; readonly "core_callables": ReadonlyArray<Identifier>; readonly "read_callables": ReadonlyArray<Identifier>; readonly "claims": "claims_not_authenticated"; readonly "definition_digest": Digest; };
 export type PackageSetNodeSurface = (PackageSet | PackageSetHandoff | PackageSetMemberObservationRequest | PackageSetMemberObservation | PackageSetReadObservation | PackageSetNodeDescriptor);
 export type PackageSetOperation = "isolated_read" | "semantic_merge" | "cross_asset_reference";
 export type PackageSetMemberSource = { readonly "member_id": string; readonly "bytes": Uint8Array };

package/src/public-contract/package-set-validators.generated.js

@@ -2324,7 +2324,7 @@ return errors === 0;
 }
 validate41.evaluated = {"props":true,"dynamicProps":false,"dynamicItems":false};
 
-const schema87 = {"additionalProperties":false,"properties":{"claims":{"const":"claims_not_authenticated","type":"string"},"contract":{"const":"kdna.package-set-node/0.2.1","type":"string"},"core_callables":{"items":{"$ref":"#/$defs/Identifier"},"maxItems":7,"minItems":7,"type":"array"},"core_version":{"const":"0.37.1-rc.browser.1","type":"string"},"definition_digest":{"$ref":"#/$defs/Digest"},"limits":{"$ref":"#/$defs/PackageSetLimits"},"local_failures":{"items":{"$ref":"#/$defs/PackageSetLocalFailure"},"maxItems":12,"minItems":12,"type":"array"},"module_version":{"const":"0.2.0","type":"string"},"read_callables":{"items":{"$ref":"#/$defs/Identifier"},"maxItems":5,"minItems":5,"type":"array"},"read_version":{"const":"0.11.2-rc.browser.1","type":"string"}},"required":["contract","module_version","core_version","read_version","limits","local_failures","core_callables","read_callables","claims","definition_digest"],"type":"object"};
+const schema87 = {"additionalProperties":false,"properties":{"claims":{"const":"claims_not_authenticated","type":"string"},"contract":{"const":"kdna.package-set-node/0.2.1","type":"string"},"core_callables":{"items":{"$ref":"#/$defs/Identifier"},"maxItems":7,"minItems":7,"type":"array"},"core_version":{"const":"0.37.2","type":"string"},"definition_digest":{"$ref":"#/$defs/Digest"},"limits":{"$ref":"#/$defs/PackageSetLimits"},"local_failures":{"items":{"$ref":"#/$defs/PackageSetLocalFailure"},"maxItems":12,"minItems":12,"type":"array"},"module_version":{"const":"0.2.0","type":"string"},"read_callables":{"items":{"$ref":"#/$defs/Identifier"},"maxItems":5,"minItems":5,"type":"array"},"read_version":{"const":"0.11.3","type":"string"}},"required":["contract","module_version","core_version","read_version","limits","local_failures","core_callables","read_callables","claims","definition_digest"],"type":"object"};
 const schema90 = {"additionalProperties":false,"properties":{"maxMembers":{"const":10000,"type":"integer"},"maxTotalSourceBytes":{"const":104857600,"type":"integer"}},"required":["maxMembers","maxTotalSourceBytes"],"type":"object"};
 const schema91 = {"enum":["invalid_limits","member_limit_exceeded","source_bytes_limit_exceeded","invalid_member_source","invalid_read_request","provider_invalid","provider_failed","provider_observation_invalid","cancelled","core_unavailable","delivery_unconfirmed","handoff_invalid"],"type":"string"};
 
@@ -2460,8 +2460,8 @@ if(typeof data4 !== "string"){
 validate45.errors = [{instancePath:instancePath+"/core_version",schemaPath:"#/properties/core_version/type",keyword:"type",params:{type: "string"},message:"must be string"}];
 return false;
 }
-if("0.37.1-rc.browser.1" !== data4){
-validate45.errors = [{instancePath:instancePath+"/core_version",schemaPath:"#/properties/core_version/const",keyword:"const",params:{allowedValue: "0.37.1-rc.browser.1"},message:"must be equal to constant"}];
+if("0.37.2" !== data4){
+validate45.errors = [{instancePath:instancePath+"/core_version",schemaPath:"#/properties/core_version/const",keyword:"const",params:{allowedValue: "0.37.2"},message:"must be equal to constant"}];
 return false;
 }
 var valid0 = _errs11 === errors;
@@ -2696,8 +2696,8 @@ if(typeof data14 !== "string"){
 validate45.errors = [{instancePath:instancePath+"/read_version",schemaPath:"#/properties/read_version/type",keyword:"type",params:{type: "string"},message:"must be string"}];
 return false;
 }
-if("0.11.2-rc.browser.1" !== data14){
-validate45.errors = [{instancePath:instancePath+"/read_version",schemaPath:"#/properties/read_version/const",keyword:"const",params:{allowedValue: "0.11.2-rc.browser.1"},message:"must be equal to constant"}];
+if("0.11.3" !== data14){
+validate45.errors = [{instancePath:instancePath+"/read_version",schemaPath:"#/properties/read_version/const",keyword:"const",params:{allowedValue: "0.11.3"},message:"must be equal to constant"}];
 return false;
 }
 var valid0 = _errs36 === errors;
@@ -2973,8 +2973,8 @@ if(typeof data4 !== "string"){
 validate55.errors = [{instancePath:instancePath+"/core_version",schemaPath:"#/properties/core_version/type",keyword:"type",params:{type: "string"},message:"must be string"}];
 return false;
 }
-if("0.37.1-rc.browser.1" !== data4){
-validate55.errors = [{instancePath:instancePath+"/core_version",schemaPath:"#/properties/core_version/const",keyword:"const",params:{allowedValue: "0.37.1-rc.browser.1"},message:"must be equal to constant"}];
+if("0.37.2" !== data4){
+validate55.errors = [{instancePath:instancePath+"/core_version",schemaPath:"#/properties/core_version/const",keyword:"const",params:{allowedValue: "0.37.2"},message:"must be equal to constant"}];
 return false;
 }
 var valid0 = _errs11 === errors;
@@ -3209,8 +3209,8 @@ if(typeof data14 !== "string"){
 validate55.errors = [{instancePath:instancePath+"/read_version",schemaPath:"#/properties/read_version/type",keyword:"type",params:{type: "string"},message:"must be string"}];
 return false;
 }
-if("0.11.2-rc.browser.1" !== data14){
-validate55.errors = [{instancePath:instancePath+"/read_version",schemaPath:"#/properties/read_version/const",keyword:"const",params:{allowedValue: "0.11.2-rc.browser.1"},message:"must be equal to constant"}];
+if("0.11.3" !== data14){
+validate55.errors = [{instancePath:instancePath+"/read_version",schemaPath:"#/properties/read_version/const",keyword:"const",params:{allowedValue: "0.11.3"},message:"must be equal to constant"}];
 return false;
 }
 var valid0 = _errs36 === errors;

package/src/public-contract/packageset06/contract.json

@@ -2,8 +2,8 @@
   "candidate_only": true,
   "source": {
     "path": "specs/public-semantic-source.json",
-    "bytes": 1506884,
-    "sha256": "a05af27e97be03a8909375217ab353017b72a10532ad7d700b6ae278e30d1d5f"
+    "bytes": 1506715,
+    "sha256": "e1fa081ca757d8ceb2e73910024778e31debe83b16d8b4824a4c66466ec57928"
   },
   "historical_original_source": {
     "scope": "historical_original_contract_source_identity_not_current_generator_input",

package/src/public-contract/packageset06/generation-manifest.json

@@ -3,14 +3,14 @@
   "candidate_only": true,
   "source": {
     "path": "specs/public-semantic-source.json",
-    "bytes": 1506884,
-    "sha256": "a05af27e97be03a8909375217ab353017b72a10532ad7d700b6ae278e30d1d5f"
+    "bytes": 1506715,
+    "sha256": "e1fa081ca757d8ceb2e73910024778e31debe83b16d8b4824a4c66466ec57928"
   },
   "producer": {
     "recipe": {
       "path": "scripts/public-contract/native-output-recipe.json",
       "bytes": 164001,
-      "sha256": "076b8d75b26d3c675fb8f89768e7d3cdddc448f2f29b19adb28b768a0c4dfbfb"
+      "sha256": "f5258627e45d396f9b088e76bdabe699d9ab845678ce1fa6a855b3fdaec21f22"
     },
     "scripts": [
       {
@@ -20,8 +20,8 @@
       },
       {
         "path": "scripts/public-contract/native-renderer.mjs",
-        "bytes": 20169,
-        "sha256": "44806a5a6dc43b141791b62b3683acd3145ac14b67ee5e6077923c5c62ca0187"
+        "bytes": 21439,
+        "sha256": "750e968d0d88908f7c6b6b3d017039919049e22060203a7c721c3204522c211e"
       },
       {
         "path": "scripts/public-contract/generation-writer.mjs",
@@ -586,7 +586,7 @@
     {
       "path": "packages/kdna-core/src/public-contract/packageset06/contract.json",
       "bytes": 307339,
-      "sha256": "c52dee52bd79cde73d6e6efdb5a6a20495fe422b1de000cc9e32b43036751899"
+      "sha256": "f888a3fc9177d7d7ff45c46f34fbb66247c9a2aa805b049008ed7b58bbbd8d0d"
     },
     {
       "path": "packages/kdna-core/src/public-contract/packageset06/api.d.ts",

package/src/public-contract/protected-browser-contract/contract.json

@@ -2,8 +2,8 @@
   "candidate_only": true,
   "source": {
     "path": "specs/public-semantic-source.json",
-    "bytes": 1506884,
-    "sha256": "a05af27e97be03a8909375217ab353017b72a10532ad7d700b6ae278e30d1d5f"
+    "bytes": 1506715,
+    "sha256": "e1fa081ca757d8ceb2e73910024778e31debe83b16d8b4824a4c66466ec57928"
   },
   "historical_original_source": {
     "scope": "new_browser_adapter_has_no_historical_original_contract",
@@ -81,8 +81,8 @@
       "truth": "Integrity fields record original browser admission checksums/signature and A/C/E; retained projection does not claim AEAD/password authentication, new digest/domain/signature validation or physical IO. Read contract is independently kdna.protected-browser-read/0.1.0-candidate with ordinary projected content fields plus explicit browser verification."
     },
     "package_versions": {
-      "core": "0.37.1-rc.browser.1",
-      "read": "0.11.2-rc.browser.1"
+      "core": "0.37.2",
+      "read": "0.11.3"
     }
   },
   "types": {

package/src/public-contract/protected-browser-contract/descriptor.json

@@ -1,5 +1,5 @@
 {
   "id": "kdna.protected-sections-browser",
   "version": "0.1.0-candidate",
-  "definition_digest": "sha256:1478288cbca451771dacedd61fd3b35871fc7a9945ee71e0c322e383b36efdb1"
+  "definition_digest": "sha256:d73eae0aec99b96543a6ce2cdf22c6c99f57498a119015c3d67e394fd8143db5"
 }

package/src/public-contract/protected-source-contract.generated.json

@@ -1,6 +1,6 @@
 {
   "api_typescript": "export type ProtectedSourceContractIdentity = { readonly id: 'kdna.protected-source/1'; readonly version: '1.0.0'; readonly definition_digest: import('./types.js').Digest };\nexport type ProtectedSourceRuntimeDescriptor = { readonly contract: ProtectedSourceContractIdentity; readonly implementation: { readonly package: '@aikdna/kdna-core'; readonly version: string }; readonly profiles: ReadonlyArray<'kdna.envelope.aead/0.1.0' | 'kdna.envelope.external-grant/0.1.0'>; readonly callables: ReadonlyArray<'getProtectedSourceContract' | 'createTrustedProtectedSourceHost' | 'withProtectedSourceNode' | 'commitProtectedSourceTransport' | 'previewProtectedSourceRevision' | 'produceProtectedSourceRevision'>; readonly limits: { readonly container_bytes: 26214400; readonly entries: 128; readonly entry_bytes: 8388608; readonly total_uncompressed_bytes: 12582912; readonly delivered_plaintext_bytes: 8388608; readonly documented_raw_byte_bound: 20971520; readonly timeout_ms_max: 60000 }; readonly proof_limits: ReadonlyArray<string> };\nexport type SourceHostObservationContext = { readonly context_id: string | null; readonly epoch: string | null; readonly asset_digest: string; readonly scope: 'complete_source'; readonly purpose: string; readonly requested_at_ms: number };\nexport type ProtectedSourceMember = { readonly name: string; readonly type: 'file'; readonly mode: number; readonly bytes: Uint8Array };\nexport type ProtectedSourceInventoryEntry = { readonly name: string; readonly type: 'file'; readonly mode: number; readonly size: number; readonly sha256: string };\nexport type ProtectedSourceBundle = { readonly identity: { readonly A: string; readonly C: string; readonly E: string }; readonly manifest: unknown; readonly payload: unknown; readonly original_members: ReadonlyArray<ProtectedSourceMember>; readonly original_inventory: ReadonlyArray<ProtectedSourceInventoryEntry>; readonly plaintext_payload: { readonly entry: 'payload.kdnab'; readonly bytes: Uint8Array; readonly sha256: string }; readonly prior_snapshot: unknown; readonly host_observation: unknown; readonly proof_limits: ReadonlyArray<string> };\nexport type ProtectedSourceRevisionContext = { readonly [brand: symbol]: true };\nexport type ProtectedSourcePreparedDelivery = { readonly [brand: symbol]: true };\nexport type ProtectedSourceHostCallbacks = { readonly observe: (context: SourceHostObservationContext) => SourceHostObservation | Promise<SourceHostObservation>; readonly deliver: (bundle: ProtectedSourceBundle, prepared: ProtectedSourcePreparedDelivery, context: ProtectedSourceRevisionContext) => boolean | Promise<boolean> };\nexport type TrustedProtectedSourceHost = { readonly [brand: symbol]: true };\nexport type ProtectedSourceRevisionOptions = { readonly admission: import('./protection-node.js').ProtectedAdmissionOptions; readonly expected_A: string; readonly timeout_ms: number };\nexport type TrustedProtectedSourceTransport = { readonly observeScope: () => SourceHostObservation | Promise<SourceHostObservation>; readonly commit: (bundle: ProtectedSourceBundle | null) => boolean };\nexport type ProtectedSourceCommitResult = { readonly status: 'source_committed'; readonly disclosure: import('./protection-node.js').ProtectionDisclosure; readonly body: null; readonly body_bytes: 0 } | SourceFailed;\nexport type ProtectedSourcePolicy = ({ readonly kind: 'password'; readonly asset_uid: string; readonly entitlement: { readonly profile: 'password'; readonly offline?: boolean; readonly revocable?: boolean }; readonly slots: ReadonlyArray<{ readonly slot: string; readonly kdf_profile: 'scrypt-sha256' | 'argon2id' }> } | { readonly kind: 'external-grant'; readonly asset_uid: string; readonly entitlement: { readonly profile: 'account' | 'org'; readonly offline?: boolean; readonly revocable?: boolean }; readonly key_ref: string; readonly issuer_key_id: string }) & { readonly checksums: boolean; readonly signature: 'none' | 'ed25519' };\nexport type ProtectedSourceEdits = { readonly manifest?: unknown; readonly payload?: unknown };\nexport type ProtectedSourceProviderRequest = { readonly source_A: string; readonly edits_digest: string; readonly policy_digest: string; readonly kind: 'password' | 'external-grant'; readonly signature: 'none' | 'ed25519' };\nexport type ProtectedSourceOutputSecrets = { readonly passwords?: ReadonlyArray<{ readonly slot: string; readonly password: Uint8Array }>; readonly signingSeed?: Uint8Array; readonly issuerRootKey?: Uint8Array };\nexport type SourceRevisionEvidence = { readonly contract: ProtectedSourceContractIdentity; readonly implementation: { readonly package: '@aikdna/kdna-core'; readonly version: string }; readonly source_A: string; readonly output: { readonly A: string; readonly C: string; readonly E: string }; readonly profile: { readonly id: string; readonly version: string }; readonly entry: 'payload.kdnab'; readonly member_actions: { readonly [name: string]: 'added' | 'replaced' | 'removed' }; readonly integrity: unknown; readonly payload_source: 'explicit_edit' | 'original_decrypted_cbor'; readonly proof: 'producer_observation_not_consumer_admission'; readonly output_delivery: 'not_published' | 'trusted_host'; readonly output_A: string | null };\nexport type ProtectedSourceRevisionResult = { readonly status: 'revision_produced'; readonly bytes: Uint8Array; readonly evidence: SourceRevisionEvidence; readonly body_bytes: number } | { readonly status: 'revision_rejected'; readonly diagnostic: SourceDiagnostic; readonly body: null; readonly body_bytes: 0 };\nexport declare function getProtectedSourceContract(): ProtectedSourceRuntimeDescriptor;\nexport declare function createTrustedProtectedSourceHost(callbacks: ProtectedSourceHostCallbacks): TrustedProtectedSourceHost;\nexport declare function withProtectedSourceNode(input: string | Uint8Array, options: ProtectedSourceRevisionOptions, protectionProvider: import('./protection-node.js').TrustedProtectionProvider, sourceHost: TrustedProtectedSourceHost): Promise<ProtectedSourceObservation>;\nexport declare function commitProtectedSourceTransport(prepared: ProtectedSourcePreparedDelivery, transport: TrustedProtectedSourceTransport): Promise<ProtectedSourceCommitResult>;\nexport declare function previewProtectedSourceRevision(context: ProtectedSourceRevisionContext, edits: ProtectedSourceEdits, policy: ProtectedSourcePolicy): Promise<ProtectedSourceRevisionPreviewResult>;\nexport declare function produceProtectedSourceRevision(context: ProtectedSourceRevisionContext, edits: ProtectedSourceEdits, policy: ProtectedSourcePolicy, outputSecretProvider: (request: ProtectedSourceProviderRequest) => ProtectedSourceOutputSecrets | Promise<ProtectedSourceOutputSecrets>): Promise<ProtectedSourceRevisionResult>;\n",
-  "definition_digest": "sha256:6a0c62e9908100fcd03b9f9b735bb0d928fa340fbe57fb894f501968aac188a8",
+  "definition_digest": "sha256:3666cfde0c1141e7d7fd45bbb7ecfb125c778e8cb280f7f915b249d9d6c796fb",
   "id": "kdna.protected-source/1",
   "limits": {
     "container_bytes": 26214400,
@@ -29,8 +29,8 @@
   ],
   "schema_binding": {
     "package_versions": {
-      "@aikdna/kdna-core": "0.37.1-rc.browser.1",
-      "@aikdna/kdna-read": "0.11.2-rc.browser.1"
+      "@aikdna/kdna-core": "0.37.2",
+      "@aikdna/kdna-read": "0.11.3"
     },
     "version_tuple": {
       "container": "0.5.0",
@@ -9260,7 +9260,7 @@
               "type": "string"
             },
             "version": {
-              "const": "0.37.1-rc.browser.1",
+              "const": "0.37.2",
               "type": "string"
             }
           },
@@ -10632,7 +10632,7 @@
               "type": "string"
             },
             "version": {
-              "const": "0.37.1-rc.browser.1",
+              "const": "0.37.2",
               "type": "string"
             }
           },
@@ -13783,7 +13783,7 @@
               "type": "string"
             },
             "version": {
-              "const": "0.37.1-rc.browser.1",
+              "const": "0.37.2",
               "type": "string"
             }
           },

package/src/public-contract/protected-source-node.d.ts

@@ -10,7 +10,7 @@ export type ProtectedSourceCatalog = { readonly "status": "catalog_only"; readon
 export type SourceCoreRejected = { readonly "status": "core_rejected"; readonly "stage": "admission"; readonly "core": CoreAdmissionRejected; readonly "disclosure": ProtectionDisclosure; readonly "body": null; readonly "body_bytes": 0; };
 export type ProtectedSourceObservation = (ProtectedSourceDelivered | ProtectedSourceCatalog | SourceCoreRejected | SourceFailed);
 export type SourceHostObservation = { readonly "context_id": Identifier; readonly "epoch": Identifier; readonly "asset_digest": Digest; readonly "permission": "allowed" | "denied"; readonly "scope": "complete_source"; readonly "current_ms": UInt; readonly "expires_at_ms": UInt; readonly "revoked": boolean; };
-export type SourcePreviewValidation = { readonly "contract": ProtectionContractIdentity; readonly "implementation": { readonly "name": "@aikdna/kdna-core"; readonly "version": "0.37.1-rc.browser.1"; }; readonly "source_A": Digest; readonly "original_payload_digest": Digest; readonly "edits_digest": Digest; readonly "policy_digest": Digest; readonly "semantic_status": "valid"; readonly "proof": "semantic_validation_not_ciphertext_admission"; };
+export type SourcePreviewValidation = { readonly "contract": ProtectionContractIdentity; readonly "implementation": { readonly "name": "@aikdna/kdna-core"; readonly "version": "0.37.2"; }; readonly "source_A": Digest; readonly "original_payload_digest": Digest; readonly "edits_digest": Digest; readonly "policy_digest": Digest; readonly "semantic_status": "valid"; readonly "proof": "semantic_validation_not_ciphertext_admission"; };
 export type SourcePreviewValid = { readonly "status": "preview_valid"; readonly "validation": SourcePreviewValidation; readonly "body": null; readonly "body_bytes": 0; };
 export type SourcePreviewRejected = { readonly "status": "preview_rejected"; readonly "diagnostic": SourceDiagnostic; readonly "body": null; readonly "body_bytes": 0; };
 export type ProtectedSourceRevisionPreviewResult = (SourcePreviewValid | SourcePreviewRejected);

package/src/public-contract/protection-contract.generated.json

@@ -14,7 +14,7 @@
     "schema_path": "specs/checksums-document-1.schema.json",
     "version": "1.0.0"
   },
-  "definition_digest": "sha256:7257adf964aadbce546b1403a059852b72f5df269503d6b58445d1f549e2252d",
+  "definition_digest": "sha256:39d315c19d0a537562ac6db2b58c93c57a09a9011929429f2e60a7a72fa0143b",
   "delivery_history": {
     "acknowledgement": "Only literal synchronous true confirms the configured trusted transport handoff. False/throw/thenable/invalid return leaves outcome_unknown. Never await or execute an untrusted then method to improve the result. Callback itself may already have sent data.",
     "disposal": "Disposal closes authority and clears secrets best effort but retains the redacted per-token delivery history while its token/owning Read remains reachable, so a later failure cannot erase past attempts.",
@@ -802,8 +802,8 @@
   "runtime_not_implemented": [],
   "schema_binding": {
     "package_versions": {
-      "@aikdna/kdna-core": "0.37.1-rc.browser.1",
-      "@aikdna/kdna-read": "0.11.2-rc.browser.1"
+      "@aikdna/kdna-core": "0.37.2",
+      "@aikdna/kdna-read": "0.11.3"
     },
     "version_tuple": {
       "container": "0.5.0",
@@ -821,9 +821,9 @@
   "schema_id": "urn:kdna:schema:protection-admission:1.0.0:binding:r2:8",
   "schema_path": "specs/protection-admission-r2-binding-8.schema.json",
   "specification": {
-    "bytes": 38180,
+    "bytes": 38233,
     "path": "specs/protection-admission.md",
-    "sha256": "35180f6583ac97302096a8e2ff786f1c7a9a0c10caabc3a4fa627affd1640bef"
+    "sha256": "5b4e784aa18c3c5c42bbbdee052235096af85f354b2fb6108788024fac9051b1"
   },
   "types": {
     "ChecksumsDocument1": {
@@ -1060,7 +1060,7 @@
               "type": "string"
             },
             "version": {
-              "const": "0.37.1-rc.browser.1",
+              "const": "0.37.2",
               "type": "string"
             }
           },
@@ -2295,7 +2295,7 @@
               "type": "string"
             },
             "version": {
-              "const": "0.37.1-rc.browser.1",
+              "const": "0.37.2",
               "type": "string"
             }
           },

package/src/public-contract/protection-node.d.ts

@@ -39,8 +39,8 @@ declare const ProtectionCheckpointBrand: unique symbol;
 export type ProtectionCheckpoint = { readonly [ProtectionCheckpointBrand]: true };
 declare const ProtectedHostReadProviderBrand: unique symbol;
 export type ProtectedHostReadProvider = { readonly [ProtectedHostReadProviderBrand]: true };
-export type ProtectionRuntimeDescriptor = { readonly "contract": ProtectionContractIdentity; readonly "implementation": { readonly "package": "@aikdna/kdna-core"; readonly "version": "0.37.1-rc.browser.1"; }; readonly "profiles": ReadonlyArray<"kdna.envelope.aead/0.1.0" | "kdna.envelope.external-grant/0.1.0" | "kdna.checksums.document/1@1.0.0" | "kdsig.ed25519/0.1.0">; readonly "kdfs": ReadonlyArray<"scrypt-sha256" | "argon2id">; readonly "capabilities": ReadonlyArray<"protected_admission" | "protected_operation" | "protected_production">; };
-export type ProtectedExportEvidence = { readonly "contract": ProtectionContractIdentity; readonly "implementation": { readonly "package": "@aikdna/kdna-core"; readonly "version": "0.37.1-rc.browser.1"; }; readonly "source_A": Digest; readonly "output": { readonly "A": Digest; readonly "C": Digest; readonly "E": Digest; }; readonly "profile": (ProtectionProfile | null); readonly "entry": "payload.kdnab"; readonly "integrity": ProtectionIntegrity; readonly "proof": "producer_observation_not_consumer_admission"; };
+export type ProtectionRuntimeDescriptor = { readonly "contract": ProtectionContractIdentity; readonly "implementation": { readonly "package": "@aikdna/kdna-core"; readonly "version": "0.37.2"; }; readonly "profiles": ReadonlyArray<"kdna.envelope.aead/0.1.0" | "kdna.envelope.external-grant/0.1.0" | "kdna.checksums.document/1@1.0.0" | "kdsig.ed25519/0.1.0">; readonly "kdfs": ReadonlyArray<"scrypt-sha256" | "argon2id">; readonly "capabilities": ReadonlyArray<"protected_admission" | "protected_operation" | "protected_production">; };
+export type ProtectedExportEvidence = { readonly "contract": ProtectionContractIdentity; readonly "implementation": { readonly "package": "@aikdna/kdna-core"; readonly "version": "0.37.2"; }; readonly "source_A": Digest; readonly "output": { readonly "A": Digest; readonly "C": Digest; readonly "E": Digest; }; readonly "profile": (ProtectionProfile | null); readonly "entry": "payload.kdnab"; readonly "integrity": ProtectionIntegrity; readonly "proof": "producer_observation_not_consumer_admission"; };
 export type ProtectedRequestVersionRejected = { readonly "channel": "read_envelope"; readonly "envelope": ReadEnvelopeRejected; readonly "admission_rejection": null; readonly "control": null; readonly "transport_failure": null; };
 export type ProtectionCurrentFailure = { readonly "status": "protection_failed"; readonly "diagnostic": ProtectionDiagnostic; readonly "checked_at_ms": (UInt | null); };
 export type ProtectedSignaturePolicy = { readonly requireSignature: boolean; readonly expectedPublicKeyHex: string | null };