@bkazemi/verily 0.2.0 → 0.4.0

package/dist/verily.js

@@ -9575,6 +9575,7 @@ var Verily = (() => {
   __export(browser_exports, {
     Refused: () => Refused,
     attestationLabel: () => attestationLabel,
+    externalId: () => externalId,
     externalLink: () => externalLink,
     externalName: () => externalName,
     fresh: () => fresh,
@@ -9583,6 +9584,7 @@ var Verily = (() => {
     isArtifactProvider: () => isArtifactProvider,
     isCodeProvider: () => isCodeProvider,
     isRedirectProvider: () => isRedirectProvider,
+    lastProved: () => lastProved,
     localSide: () => localSide,
     presentConnections: () => presentConnections,
     proofTitle: () => proofTitle,
@@ -9651,7 +9653,7 @@ var Verily = (() => {
         });
         await signatures2[0].verified;
         const document2 = JSON.parse(data);
-        return document2?.type === "verily-evidence" && document2.version === 1 && typeof document2.issuedAt === "number" ? document2 : void 0;
+        return document2?.type === "verily-evidence" && typeof document2.issuedAt === "number" && (document2.version === 1 || document2.version === 2 && document2.status === "retired" && typeof document2.retiredAt === "number") ? document2 : void 0;
       } catch {
         continue;
       }
@@ -9677,6 +9679,7 @@ var Verily = (() => {
   var freshnessMs = 7 * 864e5;
   function status(connection, now, freshness = freshnessMs) {
     if (connection.revokedAt !== void 0) return "revoked";
+    if (connection.retiredAt !== void 0) return "retired";
     if (now >= connection.expiresAt) return "expired";
     const main = connection.attestations?.external[0];
     if (main && !fresh(main, now, freshness)) return "unconfirmed";
@@ -9685,8 +9688,13 @@ var Verily = (() => {
   function fresh(attestation, now, freshness = freshnessMs) {
     return !attestation.artifactUrl || attestation.hosted === true || freshness === Infinity || now < attestation.confirmedAt + freshness;
   }
+  function lastProved(evidence) {
+    const main = evidence.attestations.external[0];
+    return main.artifactUrl ? main.confirmedAt : evidence.authenticatedAt;
+  }
   function statusLabel(evidence, now) {
     if (evidence.status === "revoked") return "Revoked";
+    if (evidence.status === "retired") return "Retired";
     if (evidence.status === "expired" || evidence.expiresAt <= now) return "Expired";
     return evidence.status === "unconfirmed" ? "Unconfirmed" : "Verified";
   }
@@ -9708,10 +9716,15 @@ var Verily = (() => {
       oauth: `Signed in with ${names.provider}`,
       gist: `Published a proof on ${names.provider}`,
       backlink: `Linked back to ${names.site}`,
+      dns: `Named ${names.site} in a DNS record`,
+      wellknown: `Named ${names.site} in a file it serves`,
       signature: "Proved with a signature",
       code: "Entered a code sent to this address"
     }[method];
   }
+  function externalId(external) {
+    return external.kind === "mailbox" || external.kind === "domain" ? void 0 : external.id;
+  }
   function externalLink(external) {
     return external.kind === "mailbox" ? void 0 : external.profileUrl;
   }
@@ -9782,6 +9795,11 @@ var Verily = (() => {
     ["circle", { cx: "8", cy: "8", r: "6.2" }],
     ["path", { d: "M8 4.6V8h2.6" }]
   ]);
+  var boxMark = () => statusMark("box", [
+    ["path", { d: "M2.6 3.8h10.8v2.6H2.6z" }],
+    ["path", { d: "M3.7 6.4v5.8h8.6V6.4" }],
+    ["path", { d: "M6.6 9h2.8" }]
+  ]);
   var dashMark = () => statusMark("dash", [["path", { d: "M4.4 8h7.2" }]]);
 
   // src/browser/provider-mark.ts
@@ -9870,7 +9888,7 @@ var Verily = (() => {
       openpgp: key,
       email: envelope
     };
-    return marks2[provider]?.() ?? (method === "backlink" ? globe() : void 0);
+    return marks2[provider]?.() ?? (["backlink", "dns", "wellknown"].includes(method ?? "") ? globe() : void 0);
   }
 
   // src/browser/badge.ts
@@ -9926,7 +9944,9 @@ var Verily = (() => {
   .peek .via { display: block; margin-top: 6px; font-size: 11px; color: var(--verily-muted, #65726c); }
   .provider { display: block; flex-shrink: 0; width: 14px; height: 14px; }
   .expired .icon { color: #815a12; background: #fbefce; }
-  .revoked .icon, .message .icon { color: #626d69; background: #edf0ee; }
+  .revoked .icon, .retired .icon, .message .icon { color: #626d69; background: #edf0ee; }
+  /* Nothing ran out and nothing wants attention: the holder chose this, so it is only quiet. */
+  .retired .name { color: var(--verily-muted, #65726c); }
   .message { color: var(--verily-muted, #65726c); }
   .add { font-weight: 600; }
   @media (prefers-reduced-motion: no-preference) {
@@ -10055,7 +10075,8 @@ var Verily = (() => {
   } = {}) {
     const provider = evidence.providerName;
     const current = evidence.status === "verified" && evidence.expiresAt > Date.now();
-    const state = current ? "verified" : evidence.status === "revoked" ? "revoked" : "expired";
+    const retired = evidence.status === "retired";
+    const state = current ? "verified" : retired ? "retired" : evidence.status === "revoked" ? "revoked" : "expired";
     const label = statusLabel(evidence, Date.now());
     const key2 = renderKey(evidence, current, label, more, linked, rows, peek);
     if (intact(element) && shown.get(element) === key2) return null;
@@ -10064,7 +10085,7 @@ var Verily = (() => {
     const unnamed = Math.max(more - rows.length, 0);
     const named = rows.map((row) => `, ${row.providerName} ${externalName(row.external)}`).join("");
     const others = `${named}${unnamed ? ` and ${unnamed} more` : ""}`;
-    paintMark(mark2, current ? "current" : "inactive");
+    paintMark(mark2, current ? "current" : retired ? "pending" : "inactive");
     if (linked) {
       badge.href = evidence.evidenceUrl;
       badge.rel = "noreferrer";
@@ -10101,7 +10122,7 @@ var Verily = (() => {
     }
     if (!current) {
       const icon = span("icon", "");
-      icon.append(state === "expired" ? clockMark() : dashMark());
+      icon.append(retired ? boxMark() : state === "expired" ? clockMark() : dashMark());
       icon.setAttribute("aria-hidden", "true");
       badge.append(span("label", label), icon);
     }
@@ -10232,6 +10253,7 @@ var Verily = (() => {
       status: _status,
       revokedAt: _revokedAt,
       signedUrl: _signedUrl,
+      mark: _mark,
       links: _links,
       type: _type,
       version: _version,
@@ -10298,11 +10320,23 @@ ${claims(evidence)}`;
       const document2 = await verifySigned(signed, keys);
       if (!document2 || document2.id !== evidence.id || document2.verifierName !== evidence.verifierName || document2.evidenceUrl !== evidence.evidenceUrl || document2.siteName !== evidence.siteName || document2.local.reference !== evidence.local.reference || document2.provider !== evidence.provider || document2.external.id !== evidence.external.id)
         return { state: "invalid" };
-      const { type: _type, version: _version, issuedAt: _issuedAt, ...said } = document2;
+      if (document2.version === 2 !== (evidence.status === "retired"))
+        return { state: "unchecked", why: "unreadable" };
+      const {
+        type: _type,
+        version: _version,
+        issuedAt: _issuedAt,
+        status: _status,
+        retiredAt: _retiredAt,
+        mark: _mark,
+        ...said
+      } = document2;
       const record2 = {
         ...said,
         status: evidence.status,
         ...evidence.revokedAt === void 0 ? {} : { revokedAt: evidence.revokedAt },
+        ...document2.version === 2 ? { retiredAt: document2.retiredAt } : {},
+        ...evidence.mark === void 0 ? {} : { mark: evidence.mark },
         signedUrl: evidence.signedUrl
       };
       return drawable(record2) ? { state: "valid", keyId: by2, record: record2 } : { state: "unchecked", why: "unreadable" };
@@ -10336,12 +10370,15 @@ ${claims(evidence)}`;
     if (evidence.signedUrl === void 0) return evidence;
     const key2 = shown2(evidence);
     const signed = signedAs.get(key2);
-    if (signed)
+    if (signed) {
+      const { mark: _mark, ...said } = signed;
       return {
-        ...signed,
+        ...said,
         status: evidence.status,
-        ...evidence.revokedAt === void 0 ? {} : { revokedAt: evidence.revokedAt }
+        ...evidence.revokedAt === void 0 ? {} : { revokedAt: evidence.revokedAt },
+        ...evidence.mark === void 0 ? {} : { mark: evidence.mark }
       };
+    }
     return evidence.status === "verified" && failures.has(key2) ? { ...evidence, status: "unconfirmed" } : evidence;
   }
   function watchSigned(records, changed) {
@@ -10379,6 +10416,7 @@ ${claims(evidence)}`;
   var logo = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="${-pad} ${-26 - pad} ${2637 + 2 * pad} ${916 + 2 * pad}" class="logo" role="img" aria-label="Verily"><rect x="${-pad}" y="${-26 - pad}" width="${2637 + 2 * pad}" height="${916 + 2 * pad}" rx="166" fill="#0d1117"/>` + logoPaths.map(({ d: d2, fill }) => `<path d="${d2}" fill="${fill === "currentColor" ? "#ffffff" : fill}"/>`).join("") + "</svg>";
 
   // src/browser/logo.ts
+  var projectUrl = "https://github.com/bkazemi/verily";
   function verilyLogo() {
     const namespace2 = "http://www.w3.org/2000/svg";
     const svg = document.createElementNS(namespace2, "svg");
@@ -10396,9 +10434,14 @@ ${claims(evidence)}`;
   }
 
   // src/version.ts
-  var version = "v0.2.0";
+  var version = "v0.4.0";
 
   // src/browser/evidence-dialog.ts
+  function stampLink() {
+    const link = outward(node("a"), projectUrl);
+    link.append(verilyLogo());
+    return link;
+  }
   var openDialogs = /* @__PURE__ */ new WeakMap();
   var styles2 = `
   * { box-sizing: border-box; }
@@ -10431,6 +10474,14 @@ ${claims(evidence)}`;
   .summary a, .method a, .additional a { font: inherit; }
   .reference { margin-top: 2px; }
   .method { margin-top: 8px; }
+  /* In the corner the heading leaves empty, apart from everything that was checked. */
+  .listing { position: absolute; top: 12px; right: 14px; padding: 1px 8px; border: 1px solid #e0e6df; border-radius: 999px; color: #6b786f; font-size: 11px; font-weight: 550; }
+  .listing.preferred { border-color: #245f43; color: #245f43; }
+  /* Quiet, as its pill is: the surface and the name step back, and the controls do not. */
+  .account.retired { background: #f6f8f5; }
+  .account.retired > a, .account.retired > strong { color: #6b786f; }
+  .account.retired .mark { opacity: .45; }
+  .group { margin: 20px 0 0; color: #6b786f; font-size: 11px; font-weight: 550; }
   .additional { margin-top: 2px; padding-left: 12px; }
   .joiner { display: block; width: 20px; height: 20px; margin: 8px auto -4px; color: #90a096; }
   dl { margin: 16px 0 0; padding-top: 12px; border-top: 1px solid #e5e9e3; display: grid; grid-template-columns: auto 1fr; gap: 5px 16px; font-size: 11px; }
@@ -10443,9 +10494,10 @@ ${claims(evidence)}`;
   .action:disabled { opacity: .6; cursor: progress; }
   .action.danger:hover { border-color: #b3261e; background: #fdecea; color: #b3261e; }
   .row { display: flex; justify-content: end; gap: 8px; margin-top: 16px; }
-  .account .row { align-items: center; justify-content: start; margin-top: 12px; }
+  .account .row { align-items: center; justify-content: start; flex-wrap: wrap; margin-top: 12px; }
   .account .action { padding: 5px 10px; font-size: 12px; }
-  footer { display: flex; align-items: center; justify-content: start; gap: 6px; margin-top: 14px; color: #9aa9a0; font-size: 11px; }
+  footer { display: flex; align-items: center; justify-content: start; gap: 6px; margin: 20px 0 -8px; color: #9aa9a0; font-size: 11px; }
+  footer a { display: flex; color: inherit; }
   .logo { display: block; height: 13px; }
   ${markStyles}
 `;
@@ -10510,6 +10562,7 @@ ${claims(evidence)}`;
     card.append(...extra);
     return card;
   }
+  var retiringNote = "Retiring keeps this record as history. It will no longer read as verified, and who can read it cannot be changed afterwards.";
   var removable = (evidence) => evidence.links ?? (evidence.status === "revoked" ? [] : [evidence.id]);
   function manageRow(evidence, manage) {
     const row = node("div", "", "row");
@@ -10518,12 +10571,49 @@ ${claims(evidence)}`;
       control.type = "button";
       return control;
     };
+    const [named] = removable(evidence);
+    const { mark: mark2 } = manage;
+    const listable = mark2 !== void 0 && named !== void 0 && !["revoked", "retired"].includes(evidence.status);
+    const list = (label, as2) => {
+      const control = act(label);
+      control.onclick = async () => {
+        for (const other of row.children) other.disabled = true;
+        try {
+          await mark2(named, as2);
+        } catch {
+          offer("That did not go through.");
+        }
+      };
+      return control;
+    };
     const offer = (note = "") => {
       const renew = act("Renew");
       const remove = act("Remove", true);
-      renew.onclick = () => manage.connect(evidence.provider);
+      renew.onclick = () => manage.renew && evidence.status !== "revoked" ? manage.renew(
+        evidence.id,
+        evidence.provider,
+        evidence.status === "retired" ? evidence.attestations.external[0].method : void 0
+      ) : manage.connect(evidence.provider);
       remove.onclick = confirm;
-      row.replaceChildren(renew, remove, ...note ? [node("span", note, "muted")] : []);
+      const listing = [];
+      if (listable) {
+        const retire = act("Retire");
+        retire.onclick = retiring;
+        listing.push(
+          ...evidence.mark === "preferred" ? [] : [list("Mark as preferred", "preferred")],
+          ...evidence.mark === "unused" ? [] : [list("Mark as unused", "unused")],
+          ...evidence.mark === void 0 ? [] : [list("Mark as current", "current")],
+          retire
+        );
+      }
+      row.replaceChildren(renew, ...listing, remove, ...note ? [node("span", note, "muted")] : []);
+    };
+    const retiring = () => {
+      const cancel = act("Cancel");
+      const sure = list("Retire", "retired");
+      cancel.onclick = () => offer();
+      row.replaceChildren(node("span", retiringNote, "muted"), cancel, sure);
+      cancel.focus();
     };
     const confirm = () => {
       const cancel = act("Cancel");
@@ -10626,11 +10716,15 @@ ${claims(evidence)}`;
     } else attribution.append(document.createTextNode(evidence.verifierName));
     if (evidence.signedUrl) attribution.append(signedMark(evidence, later));
     copy.append(node("div", status2, "state"), attribution);
-    summary.append(verificationMark(current ? "current" : "inactive"), copy);
+    const retired = evidence.status === "retired";
+    summary.append(verificationMark(current ? "current" : retired ? "pending" : "inactive"), copy);
     const dates = node("dl");
     const dateRows = [["Approved", evidence.approvedAt]];
     if (evidence.status === "revoked") {
       if (evidence.revokedAt !== void 0) dateRows.push(["Revoked on", evidence.revokedAt]);
+    } else if (retired) {
+      dateRows.push(["Last verified", lastProved(evidence)]);
+      if (evidence.retiredAt !== void 0) dateRows.push(["Retired", evidence.retiredAt]);
     } else {
       dateRows.push([
         evidence.expiresAt > Date.now() ? "Valid until" : "Expired on",
@@ -10638,7 +10732,7 @@ ${claims(evidence)}`;
       ]);
     }
     const main = evidence.attestations.external[0];
-    if (main.artifactUrl) dateRows.push(["Last checked", main.confirmedAt]);
+    if (main.artifactUrl && !retired) dateRows.push(["Last checked", main.confirmedAt]);
     for (const [label, time] of dateRows) {
       dates.append(node("dt", label), node("dd", moment(time)));
     }
@@ -10649,27 +10743,30 @@ ${claims(evidence)}`;
       // would print it twice here, since this heading writes it either way.
       logo2 ? [logo2, document.createTextNode(provider)] : [document.createTextNode(provider)],
       externalName(evidence.external),
-      // A mailbox's address is its name already, so there is no second identifier.
-      evidence.external.kind === "mailbox" ? void 0 : evidence.external.id,
+      // A mailbox's address or a domain is its name already, so there is no second identifier.
+      externalId(evidence.external),
       externalLink(evidence.external),
       // Status first, then how it was shown, then when. The proof explains the state
       // above it, so it cannot sit before that state has been given.
       summary,
       ...attestationNote(main, names),
       ...evidence.attestations.external.slice(1).flatMap((a2) => attestationNote(a2, names, true)),
+      ...evidence.status === "revoked" || retired ? [] : evidence.mark === "preferred" ? [node("div", "Preferred", "listing preferred")] : evidence.mark === "unused" ? [node("div", "No longer used", "listing")] : [],
       dates,
       ...manage && removable(evidence).length ? [manageRow(evidence, manage)] : []
     );
+    const surface = retired ? "account retired" : "account";
+    card.className = surface;
     if (evidence.signedUrl) {
       const veiled = [...card.children];
       const checking = node("div", "", "checking");
       checking.setAttribute("role", "status");
       checking.append(node("span", "", "spinner"), document.createTextNode("Checking signature\u2026"));
-      card.className = "account veiled";
+      card.className = `${surface} veiled`;
       for (const part of veiled) part.inert = true;
       card.append(checking);
       void signatures(evidence).then(() => {
-        card.className = "account";
+        card.className = surface;
         for (const part of veiled) part.inert = false;
         checking.remove();
       });
@@ -10700,11 +10797,16 @@ ${claims(evidence)}`;
         provider: first.providerName
       })
     );
+    const retired = records.filter((record2) => record2.status === "retired");
     content.replaceChildren(
       localCard,
       linkMark(),
-      ...records.map((record2) => externalCard(record2, manage, later)),
+      ...records.filter((record2) => record2.status !== "retired").map((record2) => externalCard(record2, manage, later)),
       ...manage ? [addRow(manage)] : [],
+      ...retired.length ? [
+        node("h3", "Retired accounts", "group"),
+        ...retired.map((record2) => externalCard(record2, manage, later))
+      ] : [],
       // Nothing below the cards may name a provider. Approval, method and dates belong to
       // the card they came from, and a second provider on this subject gets its own card.
       node(
@@ -10736,11 +10838,30 @@ ${claims(evidence)}`;
     close.type = "button";
     close.setAttribute("aria-label", "Close verification details");
     content.setAttribute("aria-live", "polite");
-    stamp.append(verilyLogo(), node("span", version));
+    stamp.append(stampLink(), node("span", version));
     header.append(heading, close);
     dialog.append(header, content, stamp);
     const removed = /* @__PURE__ */ new Map();
+    const listed = [];
+    const listing = (record2) => JSON.stringify([record2.status, record2.mark, record2.retiredAt, record2.approvedAt]);
+    const listings = (given) => new Map([given].flat().map((record2) => [record2.id, listing(record2)]));
     let held;
+    const relisted = (evidence) => {
+      let record2 = evidence;
+      for (const { ids, as: as2, at: at2 } of listed) {
+        if (["revoked", "retired"].includes(record2.status)) break;
+        if (!ids.includes(record2.id)) {
+          if (as2 === "preferred" && record2.mark === "preferred")
+            record2 = { ...record2, mark: void 0 };
+          continue;
+        }
+        record2 = as2 === "retired" ? (
+          // Its signed form is another document now, to be read with the records to come.
+          { ...record2, status: "retired", retiredAt: at2, mark: void 0, signedUrl: void 0 }
+        ) : { ...record2, mark: as2 === "current" ? void 0 : as2 };
+      }
+      return record2;
+    };
     const actions = manage && {
       // The other dialog opens over this one before this one goes, so the page behind is
       // never uncovered between the two.
@@ -10748,11 +10869,32 @@ ${claims(evidence)}`;
         manage.connect(provider);
         dialog.close();
       },
+      ...manage.renew ? {
+        renew(id, provider, method) {
+          manage.renew(id, provider, method);
+          dialog.close();
+        }
+      } : {},
       async remove(ids) {
         await manage.remove(ids);
         for (const id of ids) removed.set(id, Date.now());
         if (held && dialog.open) draw(held);
-      }
+      },
+      ...manage.mark ? {
+        async mark(id, as2) {
+          await manage.mark(id, as2);
+          const account = arrange2([held ?? []].flat()).find(
+            (card) => removable(card).includes(id)
+          );
+          listed.push({
+            ids: account ? removable(account) : [id],
+            as: as2,
+            at: Date.now(),
+            before: listings(held ?? [])
+          });
+          if (held && dialog.open) draw(held);
+        }
+      } : {}
     };
     root.append(dialog);
     document.body.append(host);
@@ -10763,9 +10905,13 @@ ${claims(evidence)}`;
     const retries = /* @__PURE__ */ new Set();
     const draw = (given) => {
       held = given;
+      const now = listings(given);
+      for (const change of [...listed])
+        if (change.ids.some((id) => now.get(id) !== change.before.get(id)))
+          listed.splice(listed.indexOf(change), 1);
       const records = arrange2(
         [given].flat().map(
-          (e2) => removed.has(e2.id) && e2.status !== "revoked" ? { ...e2, status: "revoked", revokedAt: removed.get(e2.id) } : standing(e2)
+          (e2) => removed.has(e2.id) && e2.status !== "revoked" ? { ...e2, status: "revoked", revokedAt: removed.get(e2.id) } : relisted(standing(e2))
         )
       );
       const key2 = JSON.stringify(records.map((e2) => [e2, statusLabel(e2, Date.now())]));
@@ -10906,7 +11052,7 @@ ${claims(evidence)}`;
     return element;
   }
   var openDialogs2 = /* @__PURE__ */ new WeakMap();
-  function openConnectDialog(opener, api, back, provider) {
+  function openConnectDialog(opener, api, back, provider, renew) {
     const existing = openDialogs2.get(opener);
     if (existing?.open) {
       existing.focus();
@@ -10928,7 +11074,7 @@ ${claims(evidence)}`;
     close.type = "button";
     close.setAttribute("aria-label", "Close");
     content.setAttribute("aria-live", "polite");
-    stamp.append(verilyLogo(), node("span", version));
+    stamp.append(stampLink(), node("span", version));
     header.append(heading, close);
     dialog.append(header, content, stamp);
     root.append(dialog);
@@ -11006,7 +11152,11 @@ ${claims(evidence)}`;
         return;
       }
       if (!current(asked)) return;
-      const all = methods.methods;
+      const renewing = methods.methods.filter(
+        (m2) => m2.provider === provider && (renew?.method === void 0 || m2.method === renew.method)
+      );
+      if (renew && !renewing.length) renew = void 0;
+      const all = renew ? renewing : methods.methods;
       if (group !== void 0 && !all.some((m2) => m2.provider === group)) group = void 0;
       const count = (provider2) => all.filter((m2) => m2.provider === provider2).length;
       const list = node("div", "", "choices");
@@ -11035,7 +11185,7 @@ ${claims(evidence)}`;
               return;
             }
           }
-          void busy(control, () => api.start(choice.provider, choice.method), show);
+          void busy(control, () => api.start(choice.provider, choice.method, renew?.id), show);
         };
         list.append(control);
       }
@@ -11049,7 +11199,7 @@ ${claims(evidence)}`;
         ),
         list
       ];
-      if (group !== void 0) {
+      if (group !== void 0 && !renew) {
         const back2 = button("\u2039 All options");
         back2.onclick = () => {
           group = void 0;
@@ -11209,7 +11359,7 @@ ${claims(evidence)}`;
       const external = accountCard(
         logo2 ? [logo2, document.createTextNode(flow.provider.name)] : [document.createTextNode(flow.provider.name)],
         externalName(flow.external),
-        flow.external.kind === "mailbox" ? void 0 : flow.external.id,
+        externalId(flow.external),
         externalLink(flow.external)
       );
       const parts = [subjectCard(flow.local), linkMark(), external];
@@ -11399,7 +11549,11 @@ ${claims(evidence)}`;
         // Every record the card speaks for, so its signature mark answers for all of them.
         sources: verified.length ? verified : [base]
       };
-    }).sort((a2, b2) => a2.connectedAt - b2.connectedAt);
+    }).sort((a2, b2) => place2(a2) - place2(b2) || a2.connectedAt - b2.connectedAt);
+  }
+  function place2(account) {
+    if (account.status === "retired") return 3;
+    return account.mark === "preferred" ? 0 : account.mark === "unused" ? 2 : 1;
   }
   function presentGroup(element, records, load2) {
     const ordered = accounts(records.map(standing));
@@ -11506,7 +11660,12 @@ ${claims(evidence)}`;
         if (typeof data.local.profileUrl === "string") safeUrl(data.local.profileUrl);
         return data;
       },
-      start: async (provider, method) => flowView(await ask("/sessions", { kind: "connect", provider, method })),
+      start: async (provider, method, renew) => flowView(
+        await ask(
+          "/sessions",
+          renew ? { kind: "renew", connectionId: renew, provider, method } : { kind: "connect", provider, method }
+        )
+      ),
       read: async (id) => flowView(await ask(`/flows/${encodeURIComponent(id)}?format=json`, void 0, id)),
       submit: async (id, artifact) => flowView(await ask(`/flows/${encodeURIComponent(id)}/submit`, { artifact }, id)),
       async approve(id, visibility, cancel) {
@@ -11550,11 +11709,11 @@ ${claims(evidence)}`;
        * Opens the connect dialog over the current page. Resolves when it closes, with how
        * the last attempt in it ended. Call from a click: a sign-in method opens a window.
        */
-      openConnect(opener = document.body, back, provider) {
+      openConnect(opener = document.body, back, provider, renew) {
         if (remote && !handoffUrl)
           throw new Error("A backend on another origin requires a handoff URL");
         session = void 0;
-        return openConnectDialog(opener, flows, back, provider);
+        return openConnectDialog(opener, flows, back, provider, renew);
       },
       /**
        * Draws the pill that opens the connect dialog. The host receives a `verily-result`
@@ -11682,6 +11841,14 @@ ${claims(evidence)}`;
         if (remote) session = void 0;
         return ask(`/connections/${encodeURIComponent(id)}/disconnect`, {});
       },
+      /**
+       * Says how the holder would have an account listed, or retires it. Names one record
+       * and acts on the account: every record of it the holder has.
+       */
+      mark(id, as2) {
+        if (remote) session = void 0;
+        return ask(`/connections/${encodeURIComponent(id)}/mark`, { as: as2 });
+      },
       issueShare: (id) => request(`/connections/${encodeURIComponent(id)}/share`, {}),
       revokeShare: (id) => request(`/connections/${encodeURIComponent(id)}/share-revoke`, {})
     };
@@ -11753,7 +11920,8 @@ ${claims(evidence)}`;
       (k2) => typeof value.external[k2] === "string"
     ) && (value.local.profileUrl === void 0 || typeof value.local.profileUrl === "string") && // A signed record lives beside the record it was made from and nowhere else, since the
     // keys it is checked against are read from where the record lives.
-    (value.signedUrl === void 0 || value.signedUrl === `${value.evidenceUrl}?format=signed`) && validAttestations(value.attestations) && (value.local.kind === void 0 || typeof value.local.kind === "string") && (value.external.kind === void 0 || ["account", "key", "page", "mailbox"].includes(String(value.external.kind))) && (value.revokedAt === void 0 || typeof value.revokedAt === "number" && Number.isFinite(value.revokedAt)) && ["verified", "unconfirmed", "expired", "revoked"].includes(String(value.status)) && ["public", "unlisted"].includes(String(value.visibility)) && (value.connectedAt === void 0 || typeof value.connectedAt === "number" && Number.isFinite(value.connectedAt)) && ["authenticatedAt", "approvedAt", "expiresAt"].every(
+    (value.signedUrl === void 0 || value.signedUrl === `${value.evidenceUrl}?format=signed`) && validAttestations(value.attestations) && (value.local.kind === void 0 || typeof value.local.kind === "string") && (value.external.kind === void 0 || ["account", "key", "page", "mailbox", "domain"].includes(String(value.external.kind))) && (value.revokedAt === void 0 || typeof value.revokedAt === "number" && Number.isFinite(value.revokedAt)) && ["verified", "unconfirmed", "expired", "retired", "revoked"].includes(String(value.status)) && // A retired record stands on its dates, so one that does not say when is not one.
+    (value.status === "retired" ? typeof value.retiredAt === "number" && Number.isFinite(value.retiredAt) : value.retiredAt === void 0) && (value.mark === void 0 || ["preferred", "unused"].includes(String(value.mark))) && ["public", "unlisted"].includes(String(value.visibility)) && (value.connectedAt === void 0 || typeof value.connectedAt === "number" && Number.isFinite(value.connectedAt)) && ["authenticatedAt", "approvedAt", "expiresAt"].every(
       (k2) => typeof value[k2] === "number" && Number.isFinite(value[k2])
     );
   }
@@ -11862,6 +12030,11 @@ ${claims(evidence)}`;
                   if (result.outcome === "complete") changed(result);
                 });
               },
+              renew: (id, provider, method) => {
+                void client.openConnect(this, () => details(this), provider, { id, method }).then((result) => {
+                  if (result.outcome === "complete") changed(result);
+                });
+              },
               // One at a time, each told as it goes: if a later one fails, the host still
               // hears of those that went and reads its records again.
               remove: async (ids2) => {
@@ -11869,6 +12042,10 @@ ${claims(evidence)}`;
                   await client.disconnect(id);
                   changed({ outcome: "removed", connectionId: id });
                 }
+              },
+              mark: async (id, as2) => {
+                await client.mark(id, as2);
+                changed({ outcome: "marked", connectionId: id, as: as2 });
               }
             });
           } else managers.delete(this);

package/dist/version.d.ts

@@ -7,4 +7,4 @@
  * output stays what tsc emitted and nothing has to be substituted into it. A version bump
  * changes this line with package.json.
  */
-export declare const version = "v0.2.0";
+export declare const version = "v0.4.0";

package/dist/version.js

@@ -7,4 +7,4 @@
  * output stays what tsc emitted and nothing has to be substituted into it. A version bump
  * changes this line with package.json.
  */
-export const version = 'v0.2.0';
+export const version = 'v0.4.0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bkazemi/verily",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "description": "Self-hosted account-to-account verification for Node.js",
   "type": "module",
   "license": "MIT",