@bkazemi/verily 0.6.0 → 0.7.0

package/dist/verily.js

@@ -9573,15 +9573,18 @@ var Verily = (() => {
   // src/browser.ts
   var browser_exports = {};
   __export(browser_exports, {
+    Absent: () => Absent,
     Refused: () => Refused,
     accountsOf: () => accountsOf,
     attestationLabel: () => attestationLabel,
     dialogPath: () => dialogPath,
     dialogRoute: () => dialogRoute,
+    expired: () => expired,
     externalId: () => externalId,
     externalIdGroups: () => externalIdGroups,
     externalLink: () => externalLink,
     externalName: () => externalName,
+    externalSince: () => externalSince,
     fresh: () => fresh,
     freshnessMs: () => freshnessMs,
     init: () => init,
@@ -9716,6 +9719,8 @@ var Verily = (() => {
   // src/core/index.ts
   var Refused = class extends Error {
   };
+  var Absent = class extends Refused {
+  };
   function isArtifactProvider(provider) {
     return "verify" in provider;
   }
@@ -9729,15 +9734,19 @@ var Verily = (() => {
     return provider.method ?? "oauth";
   }
   var freshnessMs = 7 * 864e5;
+  function expired(record2, now) {
+    return record2.expiresAt <= now;
+  }
   function status(connection, now, freshness = freshnessMs) {
     if (connection.revokedAt !== void 0) return "revoked";
     if (connection.retiredAt !== void 0) return "retired";
-    if (now >= connection.expiresAt) return "expired";
+    if (expired(connection, now)) return "expired";
     const main = connection.attestations?.external[0];
     if (main && !fresh(main, now, freshness)) return "unconfirmed";
     return "verified";
   }
   function fresh(attestation, now, freshness = freshnessMs) {
+    if (attestation.absentAt !== void 0) return false;
     return !attestation.artifactUrl || attestation.hosted === true || freshness === Infinity || now < attestation.confirmedAt + freshness;
   }
   function lastProved(evidence) {
@@ -9747,7 +9756,7 @@ var Verily = (() => {
   function statusLabel(evidence, now) {
     if (evidence.status === "revoked") return "Revoked";
     if (evidence.status === "retired") return "Retired";
-    if (evidence.status === "expired" || evidence.expiresAt <= now) return "Expired";
+    if (evidence.status === "expired" || expired(evidence, now)) return "Expired";
     return evidence.status === "unconfirmed" ? "Unconfirmed" : "Verified";
   }
   function place(account) {
@@ -9805,6 +9814,9 @@ var Verily = (() => {
   function externalIdGroups(external) {
     return external.kind === "key" ? external.id.match(/.{1,4}/g) ?? void 0 : void 0;
   }
+  function externalSince(external, day) {
+    return typeof external.createdAt === "number" && Number.isFinite(external.createdAt) ? `Joined ${day(external.createdAt)}` : void 0;
+  }
   function externalLink(external) {
     return external.kind === "mailbox" ? void 0 : external.profileUrl;
   }
@@ -10516,7 +10528,7 @@ ${claims(evidence)}`;
   }
 
   // src/version.ts
-  var version = "v0.6.0";
+  var version = "v0.7.0";
 
   // src/browser/evidence-dialog.ts
   function stampLink() {
@@ -10554,9 +10566,12 @@ ${claims(evidence)}`;
   .spinner { width: 14px; height: 14px; border: 2px solid currentColor; border-right-color: transparent; border-radius: 50%; animation: spin .7s linear infinite; }
   @keyframes spin { to { transform: rotate(360deg); } }
   @media (prefers-reduced-motion: reduce) { .spinner { animation: none; } }
-  .caution { display: inline-block; margin-left: 4px; color: #a15c00; cursor: help; vertical-align: -1.5px; }
-  .caution svg { display: block; width: 12px; height: 12px; }
-  .bad { color: #b3261e; font-weight: 650; text-decoration: underline dotted; text-underline-offset: 3px; cursor: help; }
+  /* The "signed" pill after the verifier's name, one size smaller than the line it sits on. */
+  .summary .signed { display: inline-block; margin-left: 5px; padding: 0 6px; border: 1px solid #cfdcd3; border-radius: 999px; font-size: 10px; font-weight: 550; line-height: 1.3; text-decoration: none; vertical-align: 1px; }
+  .summary a.signed:hover { background: #f2f5f1; }
+  .summary .signed.bad { border-color: #b3261e; color: #b3261e; font-weight: 650; cursor: help; }
+  .caution { display: inline-block; margin-left: 3px; color: #a15c00; vertical-align: -1.5px; }
+  .caution svg { display: block; width: 10px; height: 10px; }
   .account { padding: 14px 16px; border: 1px solid #e0e6df; border-radius: 10px; margin-top: 12px; }
   .account h3 { display: flex; align-items: center; gap: 6px; margin: 0 0 3px; color: #6b786f; font-size: 11px; font-weight: 550; }
   .account a, .account strong { font-weight: 650; font-size: 14px; }
@@ -10572,7 +10587,13 @@ ${claims(evidence)}`;
   .listing.preferred { border-color: #245f43; color: #245f43; }
   /* Quiet, as its pill is: the surface and the name step back, and the controls do not. */
   .account.retired { background: #f6f8f5; }
-  .account.retired > a, .account.retired > strong { color: #6b786f; }
+  .account.retired > a, .account.retired > strong, .account.retired > .named > a, .account.retired > .named > strong { color: #6b786f; }
+  /* The name, then a dot and the account's creation date. The date wraps under a long name. */
+  /* Clipped 4px left of the text, which hides the dot when the date wraps to a new line. */
+  .named { display: flex; flex-wrap: wrap; align-items: baseline; gap: 0 14px; margin-left: -4px; padding-left: 4px; overflow-x: clip; }
+  .since { position: relative; white-space: nowrap; }
+  /* The dot sits in the gap before the date. */
+  .since::before { content: "\xB7"; position: absolute; left: -7px; transform: translateX(-50%); }
   .account.retired .mark { opacity: .45; }
   .group { margin: 20px 0 0; color: #6b786f; font-size: 11px; font-weight: 550; }
   summary.group { display: flex; align-items: center; gap: 4px; width: fit-content; border-radius: 4px; list-style: none; cursor: pointer; }
@@ -10714,12 +10735,34 @@ ${claims(evidence)}`;
     return new Date(time).toLocaleString(void 0, { dateStyle: "medium", timeStyle: "short" });
   }
   function accountCard(heading, name, reference, url, ...extra) {
+    return side(heading, name, reference, url, void 0, extra);
+  }
+  function namedCard(heading, external, ...extra) {
+    return side(
+      heading,
+      externalName(external),
+      // A mailbox's address or a domain is its name already, so there is no second identifier.
+      externalIdGroups(external) ?? externalId(external),
+      externalLink(external),
+      // In UTC, so the day matches the one the verifier's own pages print.
+      externalSince(
+        external,
+        (time) => new Date(time).toLocaleDateString(void 0, { dateStyle: "medium", timeZone: "UTC" })
+      ),
+      extra
+    );
+  }
+  function side(heading, name, reference, url, since, extra) {
     const card = node("section", "", "account");
     const title = node("h3");
     const value = node(url ? "a" : "strong", name);
     title.append(...heading);
     if (value instanceof HTMLAnchorElement) outward(value, url);
-    card.append(title, value);
+    if (since) {
+      const named = node("div", "", "named");
+      named.append(value, node("span", since, "muted since"));
+      card.append(title, named);
+    } else card.append(title, value);
     if (typeof reference === "string") card.append(node("div", reference, "muted reference"));
     else if (reference) {
       const groups = node("div", "", "muted reference fingerprint");
@@ -10868,22 +10911,22 @@ ${claims(evidence)}`;
   }
   function signedMark(evidence, later, warned) {
     const mark2 = node("span");
-    const link = outward(node("a", "signed"), `${evidence.evidenceUrl}#signed`);
+    const link = outward(node("a", "signed", "signed"), `${evidence.evidenceUrl}#signed`);
     const see = "See the signature (opens in a new tab)";
     const settle = (results) => {
       const first = results[0];
       if (results.some((result) => result.state === "invalid")) {
-        const warning = node("span", "invalid signature", "bad");
+        const warning = node("span", "bad signature", "signed bad");
         warning.setAttribute("role", "alert");
         warning.title = `This record does not match the signature ${evidence.verifierName} put on it, so it may have been altered. Do not rely on it.`;
-        mark2.replaceChildren(document.createTextNode(" \xB7 "), warning);
+        mark2.replaceChildren(warning);
         warned();
         return;
       }
       if (first?.state === "valid" && results.every((result) => result.state === "valid")) {
-        link.textContent = "signed \u2713";
+        link.textContent = "signed";
         link.title = `Signature checked in this browser against the keys ${new URL(evidence.evidenceUrl).host} publishes (key ${first.keyId}). ${see}`;
-        mark2.replaceChildren(document.createTextNode(" \xB7 "), link);
+        mark2.replaceChildren(link);
         return;
       }
       const why = results.find((result) => result.state === "unchecked");
@@ -10894,8 +10937,9 @@ ${claims(evidence)}`;
       caution.setAttribute("aria-label", reason);
       caution.append(cautionMark());
       link.textContent = "signed";
+      link.append(caution);
       link.title = `${reason} ${see}`;
-      mark2.replaceChildren(document.createTextNode(" \xB7 "), link, caution);
+      mark2.replaceChildren(link);
       if (why) later(() => void signatures(evidence).then(settle));
     };
     void signatures(evidence).then(settle);
@@ -10981,14 +11025,11 @@ ${claims(evidence)}`;
     ];
     if (fold) bar.append(foldToggle([...methods, dates], fold), ...row);
     const logo2 = providerMark(evidence.provider, evidence.attestations.external[0].method);
-    const card = accountCard(
+    const card = namedCard(
       // The mark and the name, or just the name. A mark that falls back to writing the name
       // would print it twice here, since this heading writes it either way.
       logo2 ? [logo2, document.createTextNode(provider)] : [document.createTextNode(provider)],
-      externalName(evidence.external),
-      // A mailbox's address or a domain is its name already, so there is no second identifier.
-      externalIdGroups(evidence.external) ?? externalId(evidence.external),
-      externalLink(evidence.external),
+      evidence.external,
       // Status first, then how it was shown, then when. The proof explains the state
       // above it, so it cannot sit before that state has been given.
       summary,
@@ -11641,11 +11682,9 @@ ${record2.external.id}`;
     }
     function approve(flow) {
       const logo2 = providerMark(flow.provider.id, flow.provider.method);
-      const external = accountCard(
+      const external = namedCard(
         logo2 ? [logo2, document.createTextNode(flow.provider.name)] : [document.createTextNode(flow.provider.name)],
-        externalName(flow.external),
-        externalIdGroups(flow.external) ?? externalId(flow.external),
-        externalLink(flow.external)
+        flow.external
       );
       const parts = [subjectCard(flow.local), linkMark(), external];
       const choice = node("fieldset");
@@ -12192,7 +12231,7 @@ ${record2.external.id}`;
       (k2) => typeof value.local[k2] === "string"
     ) && ["id", "handle", "profileUrl"].every(
       (k2) => typeof value.external[k2] === "string"
-    ) && (value.local.profileUrl === void 0 || typeof value.local.profileUrl === "string") && // A signed record lives beside the record it was made from and nowhere else, since the
+    ) && (value.local.profileUrl === void 0 || typeof value.local.profileUrl === "string") && (value.external.createdAt === void 0 || typeof value.external.createdAt === "number" && Number.isFinite(value.external.createdAt)) && // A signed record lives beside the record it was made from and nowhere else, since the
     // keys it is checked against are read from where the record lives.
     (value.signedUrl === void 0 || value.signedUrl === `${value.evidenceUrl}?format=signed`) && validAttestations(value.attestations) && (value.local.kind === void 0 || typeof value.local.kind === "string") && (value.external.kind === void 0 || ["account", "key", "page", "mailbox", "domain"].includes(String(value.external.kind))) && (value.revokedAt === void 0 || typeof value.revokedAt === "number" && Number.isFinite(value.revokedAt)) && ["verified", "unconfirmed", "expired", "retired", "revoked"].includes(String(value.status)) && // A retired record stands on its dates, so one that does not say when is not one.
     (value.status === "retired" ? typeof value.retiredAt === "number" && Number.isFinite(value.retiredAt) : value.retiredAt === void 0) && (value.mark === void 0 || ["preferred", "unused"].includes(String(value.mark))) && ["public", "unlisted"].includes(String(value.visibility)) && (value.connectedAt === void 0 || typeof value.connectedAt === "number" && Number.isFinite(value.connectedAt)) && ["authenticatedAt", "approvedAt", "expiresAt"].every(

package/dist/version.d.ts

@@ -7,4 +7,4 @@
  * output stays what tsc emitted and nothing has to be substituted into it. A version bump
  * changes this line with package.json.
  */
-export declare const version = "v0.6.0";
+export declare const version = "v0.7.0";

package/dist/version.js

@@ -7,4 +7,4 @@
  * output stays what tsc emitted and nothing has to be substituted into it. A version bump
  * changes this line with package.json.
  */
-export const version = 'v0.6.0';
+export const version = 'v0.7.0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bkazemi/verily",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Self-hosted account-to-account verification for Node.js",
   "type": "module",
   "license": "MIT",