@book.dev/sdk 3.7.0 → 3.9.0

package/dist/orderKeys.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Fractional order keys — pure, dependency-free (TBL-1).
+ *
+ * A key is a non-empty string over the base-62 alphabet `0-9A-Za-z` whose
+ * plain lexicographic order IS its numeric order: read it as a fraction in
+ * (0, 1) written in base 62 (`'V'` ≈ 0.5, `'0V'` ≈ 0.008…). The ASCII order
+ * of the alphabet matches its digit order, so `a < b` on the raw strings is
+ * the whole comparator — no parsing, ever.
+ *
+ * Invariant: a key never ends with the zero digit `'0'`. That guarantees any
+ * two distinct keys (and either open end) always have a midpoint, so a move
+ * only ever writes ONE small string — the mover's new key — and never has to
+ * renumber neighbours. Keys grow ~1 character per ~5 inserts into the same
+ * gap (worst case); callers that see a key longer than
+ * {@link ORDER_KEY_REBALANCE_LENGTH} should rewrite the whole axis with
+ * {@link keysBetween} (see `model.ts` table ops for the pattern).
+ */
+/** Keys longer than this ask the owning axis for a rebalance (rare). */
+export declare const ORDER_KEY_REBALANCE_LENGTH = 48;
+/** True for a well-formed order key (base-62, non-empty, no trailing zero). */
+export declare function isOrderKey(value: unknown): value is string;
+/** Lexicographic comparator (identical to `<` on the raw strings). */
+export declare function compareOrderKeys(a: string, b: string): number;
+/**
+ * A key strictly between `a` and `b` (`null` = the open end of the axis).
+ * Throws on malformed keys or `a >= b` — callers own their bounds (the table
+ * ops fall back to a full-axis rebalance instead of passing bad bounds).
+ */
+export declare function keyBetween(a: string | null, b: string | null): string;
+/**
+ * `n` fresh keys strictly between `a` and `b`, in ascending order — balanced
+ * binary subdivision, so lengths stay ~log₆₂(n). Deterministic: the same
+ * bounds and count always produce the same keys (two peers migrating the same
+ * legacy table concurrently write identical values and converge trivially).
+ */
+export declare function keysBetween(a: string | null, b: string | null, n: number): string[];

package/dist/orderKeys.js

@@ -0,0 +1,88 @@
+/**
+ * Fractional order keys — pure, dependency-free (TBL-1).
+ *
+ * A key is a non-empty string over the base-62 alphabet `0-9A-Za-z` whose
+ * plain lexicographic order IS its numeric order: read it as a fraction in
+ * (0, 1) written in base 62 (`'V'` ≈ 0.5, `'0V'` ≈ 0.008…). The ASCII order
+ * of the alphabet matches its digit order, so `a < b` on the raw strings is
+ * the whole comparator — no parsing, ever.
+ *
+ * Invariant: a key never ends with the zero digit `'0'`. That guarantees any
+ * two distinct keys (and either open end) always have a midpoint, so a move
+ * only ever writes ONE small string — the mover's new key — and never has to
+ * renumber neighbours. Keys grow ~1 character per ~5 inserts into the same
+ * gap (worst case); callers that see a key longer than
+ * {@link ORDER_KEY_REBALANCE_LENGTH} should rewrite the whole axis with
+ * {@link keysBetween} (see `model.ts` table ops for the pattern).
+ */
+const DIGITS = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz';
+const ZERO = DIGITS[0];
+const BASE = DIGITS.length;
+/** Keys longer than this ask the owning axis for a rebalance (rare). */
+export const ORDER_KEY_REBALANCE_LENGTH = 48;
+/** True for a well-formed order key (base-62, non-empty, no trailing zero). */
+export function isOrderKey(value) {
+    return (typeof value === 'string' &&
+        value.length > 0 &&
+        !value.endsWith(ZERO) &&
+        [...value].every((ch) => DIGITS.includes(ch)));
+}
+/** Lexicographic comparator (identical to `<` on the raw strings). */
+export function compareOrderKeys(a, b) {
+    return a < b ? -1 : a > b ? 1 : 0;
+}
+/**
+ * The midpoint of two fraction strings, `a < result < b`.
+ * `a === ''` means the lower bound 0; `b === null` means the upper bound 1.
+ * Neither input may have a trailing zero digit; the result never does.
+ */
+function midpoint(a, b) {
+    if (b !== null) {
+        // Shared prefix passes through untouched; recurse on the differing tail.
+        let n = 0;
+        while ((a[n] ?? ZERO) === b[n])
+            n += 1;
+        if (n > 0)
+            return b.slice(0, n) + midpoint(a.slice(n), b.slice(n));
+    }
+    const digitA = a ? DIGITS.indexOf(a[0]) : 0;
+    const digitB = b !== null && b.length > 0 ? DIGITS.indexOf(b[0]) : BASE;
+    if (digitB - digitA > 1) {
+        return DIGITS[Math.round((digitA + digitB) / 2)];
+    }
+    // Consecutive leading digits: either borrow b's head (when it has a tail to
+    // stay below), or extend a's head with a midpoint above a's tail.
+    if (b !== null && b.length > 1)
+        return b[0];
+    return DIGITS[digitA] + midpoint(a.slice(1), null);
+}
+/**
+ * A key strictly between `a` and `b` (`null` = the open end of the axis).
+ * Throws on malformed keys or `a >= b` — callers own their bounds (the table
+ * ops fall back to a full-axis rebalance instead of passing bad bounds).
+ */
+export function keyBetween(a, b) {
+    if (a !== null && !isOrderKey(a))
+        throw new RangeError(`invalid order key: ${JSON.stringify(a)}`);
+    if (b !== null && !isOrderKey(b))
+        throw new RangeError(`invalid order key: ${JSON.stringify(b)}`);
+    if (a !== null && b !== null && a >= b)
+        throw new RangeError(`order keys out of order: ${a} >= ${b}`);
+    return midpoint(a ?? '', b);
+}
+/**
+ * `n` fresh keys strictly between `a` and `b`, in ascending order — balanced
+ * binary subdivision, so lengths stay ~log₆₂(n). Deterministic: the same
+ * bounds and count always produce the same keys (two peers migrating the same
+ * legacy table concurrently write identical values and converge trivially).
+ */
+export function keysBetween(a, b, n) {
+    if (n <= 0)
+        return [];
+    const mid = keyBetween(a, b);
+    if (n === 1)
+        return [mid];
+    const left = (n - 1) >> 1;
+    return [...keysBetween(a, mid, left), mid, ...keysBetween(mid, b, n - 1 - left)];
+}
+//# sourceMappingURL=orderKeys.js.map

package/dist/orderKeys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orderKeys.js","sourceRoot":"","sources":["../src/orderKeys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,MAAM,GAAG,gEAAgE,CAAC;AAChF,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;AACvB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;AAE3B,wEAAwE;AACxE,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C,+EAA+E;AAC/E,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrB,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,gBAAgB,CAAC,CAAS,EAAE,CAAS;IACnD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAgB;IAC3C,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACf,yEAAyE;QACzE,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,IAAI,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,4EAA4E;IAC5E,kEAAkE;IAClE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,CAAgB,EAAE,CAAgB;IAC3D,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,4BAA4B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtG,OAAO,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,CAAgB,EAAE,CAAgB,EAAE,CAAS;IACvE,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AACnF,CAAC"}

package/dist/plugins.d.ts

@@ -66,6 +66,24 @@ export interface PluginManifest {
     apiVersion?: number;
     /** Agent tools this plugin contributes (read server-side from the manifest). */
     agentTools?: PluginAgentTool[];
+    /**
+     * The block types this plugin registers at activation (WITHOUT the
+     * `<pluginId>/` prefix the host adds). Declared in the manifest so servers —
+     * which never run plugin code — can list a plugin's blocks (the agent/MCP
+     * `list_block_types` tool) straight from the stored manifest JSON. Optional:
+     * a plugin that declares none still works, its block types are simply not
+     * enumerable server-side. For bundled first-party plugins the declaration is
+     * verified against the source's `blocks.register` calls at bundle time
+     * (packages/ui/scripts/bundlePlugins.ts), so it cannot drift.
+     */
+    blocks?: PluginBlockDeclaration[];
+}
+/** One manifest-declared plugin block (see {@link PluginManifest.blocks}). */
+export interface PluginBlockDeclaration {
+    /** The unprefixed block type, e.g. `journal-entry`. */
+    type: string;
+    /** One-line description surfaced by `list_block_types`. */
+    description?: string;
 }
 /**
  * The host-side activation gate for {@link PluginManifest.apiVersion}:
@@ -97,6 +115,21 @@ export interface StoredPlugin extends PluginPackage {
     /** Set by the client after verification — never trusted from the wire. */
     verified?: boolean;
 }
+/**
+ * Canonical JSON for signing: objects emit ALL keys, sorted, at EVERY depth;
+ * arrays are positional; primitives follow JSON.stringify semantics.
+ * `undefined`, functions, and symbols are rejected outright (never silently
+ * dropped) — anything the signer skips is something an attacker can vary for
+ * free.
+ *
+ * Deliberately NOT `JSON.stringify(value, sortedKeysArray)`: a replacer ARRAY
+ * allowlists those keys at every depth, so nested keys absent from the top
+ * level (e.g. `agentTools[0].action`) silently vanish from the signed bytes.
+ *
+ * Mirrored byte-for-byte by the store's server-side port
+ * (open-book-pub `packages/store/lib/canonical.ts`) — change both together.
+ */
+export declare function canonicalJson(value: unknown): string;
 /** SHA-256 of the canonical bytes (hex) — the thing a registry signs. */
 export declare function canonicalDigest(manifest: PluginManifest, files: Record<string, string>): Promise<string>;
 /** Generate a registry keypair (raw public / pkcs8 private, base64). */
@@ -109,6 +142,14 @@ export declare function signPlugin(pkg: {
     manifest: PluginManifest;
     files: Record<string, string>;
 }, privateKeyBase64: string, registry: string, publicKeyBase64: string): Promise<PluginSignature>;
+/**
+ * Verify an Ed25519 signature (base64, raw 64 bytes) over a UTF-8 message
+ * with a base64 RAW 32-byte public key. Returns false — never throws — on
+ * malformed inputs. The registry protocol signs the UTF-8 bytes of the
+ * lowercase hex canonical digest with exactly this scheme, for the publisher
+ * signature, the notary countersignature, and revocation entries alike.
+ */
+export declare function verifyEd25519Message(publicKeyBase64: string, message: string, signatureBase64: string): Promise<boolean>;
 /**
  * Verify a package against a set of trusted registry keys. Returns the
  * matching trusted registry name, or null when unsigned, signed by an
@@ -121,10 +162,41 @@ export declare function verifyPlugin(pkg: PluginPackage, trustedKeys: Array<{
     registry: string;
 } | null>;
 /**
- * The pinned first-party registry key. Every OpenBook build trusts this;
- * additional registries are user-added keys on top (Settings → Extensions).
- * NOTE: a placeholder development key until the real registry launches —
- * regenerate and replace before publishing plugins for real.
+ * The pinned first-party registry keys. Every OpenBook build trusts ALL of
+ * these; additional registries are user-added keys on top (Settings →
+ * Extensions).
+ *
+ * THIS LIST IS THE ONE PLACE THE PRODUCTION KEY(S) LIVE. The key ceremony
+ * (docs/plugin-signing.md) is: run `node scripts/gen-registry-key.mjs`, commit
+ * the printed PUBLIC key here, and store the private half as the
+ * `OPENBOOK_REGISTRY_PRIVATE_KEY` GitHub Actions secret — the release build
+ * signs the bundled first-party plugins with it (packages/ui/scripts/
+ * bundlePlugins.ts).
+ *
+ * A LIST so rotation can overlap (add-then-remove): append the NEW key as a
+ * second entry and ship — clients of that build verify signatures from either
+ * key. Once the overlap build is broadly installed, cut signing over to the
+ * new key (swap the CI secret), and a later release removes the old entry.
+ * The signing key SHOULD be entry [0]; extra entries exist only during
+ * rotation windows. Full runbook: docs/plugin-signing.md.
+ *
+ * NOTE: currently a single PLACEHOLDER key whose private half was generated
+ * in memory and destroyed — nothing can ever sign for it, so first-party
+ * bundles show Unverified until the owner performs the key ceremony. No
+ * entry may EVER match scripts/test-registry-key.json (its private half is
+ * public); CI guards enforce that for every entry
+ * (.github/workflows/release.yml).
+ */
+export declare const OPENBOOK_REGISTRY_KEYS: Array<{
+    name: string;
+    publicKey: string;
+}>;
+/**
+ * The primary pinned first-party key — entry [0] of
+ * {@link OPENBOOK_REGISTRY_KEYS}.
+ * @deprecated trust decisions must consume the whole list
+ * ({@link OPENBOOK_REGISTRY_KEYS}); this alias exists for display and
+ * back-compat only.
  */
 export declare const OPENBOOK_REGISTRY: {
     name: string;

package/dist/plugins.js

@@ -36,9 +36,43 @@ export function pluginApiVersionError(manifest) {
 }
 const te = new TextEncoder();
 /**
- * Deterministic bytes for signing: the manifest (sorted-key JSON), then each
- * file in sorted path order, every part length-prefixed so boundaries can't
- * be confused (`a + bc` ≠ `ab + c`).
+ * Canonical JSON for signing: objects emit ALL keys, sorted, at EVERY depth;
+ * arrays are positional; primitives follow JSON.stringify semantics.
+ * `undefined`, functions, and symbols are rejected outright (never silently
+ * dropped) — anything the signer skips is something an attacker can vary for
+ * free.
+ *
+ * Deliberately NOT `JSON.stringify(value, sortedKeysArray)`: a replacer ARRAY
+ * allowlists those keys at every depth, so nested keys absent from the top
+ * level (e.g. `agentTools[0].action`) silently vanish from the signed bytes.
+ *
+ * Mirrored byte-for-byte by the store's server-side port
+ * (open-book-pub `packages/store/lib/canonical.ts`) — change both together.
+ */
+export function canonicalJson(value) {
+    if (value === undefined || typeof value === 'function' || typeof value === 'symbol') {
+        throw new TypeError(`canonical JSON cannot contain ${typeof value}`);
+    }
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map((v) => canonicalJson(v)).join(',')}]`;
+    const obj = value;
+    const members = Object.keys(obj)
+        .sort()
+        .map((k) => {
+        if (obj[k] === undefined || typeof obj[k] === 'function' || typeof obj[k] === 'symbol') {
+            throw new TypeError(`canonical JSON cannot contain ${typeof obj[k]} (at key "${k}")`);
+        }
+        return `${JSON.stringify(k)}:${canonicalJson(obj[k])}`;
+    });
+    return `{${members.join(',')}}`;
+}
+/**
+ * Deterministic bytes for signing: the manifest (canonical JSON — keys sorted
+ * recursively, see {@link canonicalJson}), then each file in sorted path
+ * order, every part length-prefixed so boundaries can't be confused
+ * (`a + bc` ≠ `ab + c`).
  */
 function canonicalBytes(manifest, files) {
     const parts = [];
@@ -48,7 +82,7 @@ function canonicalBytes(manifest, files) {
         new DataView(len.buffer).setUint32(0, bytes.length);
         parts.push(len, bytes);
     };
-    push(JSON.stringify(manifest, Object.keys(manifest).sort()));
+    push(canonicalJson(manifest));
     for (const path of Object.keys(files).sort()) {
         push(path);
         push(files[path]);
@@ -83,6 +117,25 @@ export async function signPlugin(pkg, privateKeyBase64, registry, publicKeyBase6
     const sig = new Uint8Array(await crypto.subtle.sign('Ed25519', key, te.encode(digest)));
     return { registry, publicKey: publicKeyBase64, signature: toBase64(sig), algorithm: 'ed25519' };
 }
+/**
+ * Verify an Ed25519 signature (base64, raw 64 bytes) over a UTF-8 message
+ * with a base64 RAW 32-byte public key. Returns false — never throws — on
+ * malformed inputs. The registry protocol signs the UTF-8 bytes of the
+ * lowercase hex canonical digest with exactly this scheme, for the publisher
+ * signature, the notary countersignature, and revocation entries alike.
+ */
+export async function verifyEd25519Message(publicKeyBase64, message, signatureBase64) {
+    try {
+        const raw = fromBase64(publicKeyBase64);
+        if (raw.length !== 32)
+            return false;
+        const key = await crypto.subtle.importKey('raw', raw, 'Ed25519', false, ['verify']);
+        return await crypto.subtle.verify('Ed25519', key, fromBase64(signatureBase64), te.encode(message));
+    }
+    catch {
+        return false;
+    }
+}
 /**
  * Verify a package against a set of trusted registry keys. Returns the
  * matching trusted registry name, or null when unsigned, signed by an
@@ -106,15 +159,45 @@ export async function verifyPlugin(pkg, trustedKeys) {
     }
 }
 /**
- * The pinned first-party registry key. Every OpenBook build trusts this;
- * additional registries are user-added keys on top (Settings → Extensions).
- * NOTE: a placeholder development key until the real registry launches —
- * regenerate and replace before publishing plugins for real.
+ * The pinned first-party registry keys. Every OpenBook build trusts ALL of
+ * these; additional registries are user-added keys on top (Settings →
+ * Extensions).
+ *
+ * THIS LIST IS THE ONE PLACE THE PRODUCTION KEY(S) LIVE. The key ceremony
+ * (docs/plugin-signing.md) is: run `node scripts/gen-registry-key.mjs`, commit
+ * the printed PUBLIC key here, and store the private half as the
+ * `OPENBOOK_REGISTRY_PRIVATE_KEY` GitHub Actions secret — the release build
+ * signs the bundled first-party plugins with it (packages/ui/scripts/
+ * bundlePlugins.ts).
+ *
+ * A LIST so rotation can overlap (add-then-remove): append the NEW key as a
+ * second entry and ship — clients of that build verify signatures from either
+ * key. Once the overlap build is broadly installed, cut signing over to the
+ * new key (swap the CI secret), and a later release removes the old entry.
+ * The signing key SHOULD be entry [0]; extra entries exist only during
+ * rotation windows. Full runbook: docs/plugin-signing.md.
+ *
+ * NOTE: currently a single PLACEHOLDER key whose private half was generated
+ * in memory and destroyed — nothing can ever sign for it, so first-party
+ * bundles show Unverified until the owner performs the key ceremony. No
+ * entry may EVER match scripts/test-registry-key.json (its private half is
+ * public); CI guards enforce that for every entry
+ * (.github/workflows/release.yml).
+ */
+export const OPENBOOK_REGISTRY_KEYS = [
+    {
+        name: 'OpenBook Registry',
+        publicKey: 'auvZjhjbcZgepWphhILsmuQNl82djsb6dkao+/S+7zU=',
+    },
+];
+/**
+ * The primary pinned first-party key — entry [0] of
+ * {@link OPENBOOK_REGISTRY_KEYS}.
+ * @deprecated trust decisions must consume the whole list
+ * ({@link OPENBOOK_REGISTRY_KEYS}); this alias exists for display and
+ * back-compat only.
  */
-export const OPENBOOK_REGISTRY = {
-    name: 'OpenBook Registry',
-    publicKey: 'nI4eBQzqrIyVPEmJSEzGtqC9B0+kfWTXKyN5t8Yki/E=',
-};
+export const OPENBOOK_REGISTRY = OPENBOOK_REGISTRY_KEYS[0];
 const PLUGIN_ID_RE = /^[a-z0-9][a-z0-9-]*(\.[a-z0-9][a-z0-9-]*)+$/;
 /** Validate a manifest's shape; returns a human-readable problem or null. */
 export function validateManifest(m) {

package/dist/plugins.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugins.js","sourceRoot":"","sources":["../src/plugins.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA2BH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAwBpC;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAwB;IAC5D,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC;IACnC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,WAAW,QAAQ,CAAC,EAAE,0BAA0B,MAAM,4BAA4B,kBAAkB,8BAA8B,CAAC;AAC5I,CAAC;AA4BD,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;AAE7B;;;;GAIG;AACH,SAAS,cAAc,CAAC,QAAwB,EAAE,KAA6B;IAC7E,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,CAAS,EAAQ,EAAE;QAC/B,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,CAAC;QACX,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACf,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAwB,EAAE,KAA6B;IAC3F,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAiB,CAAC,CAAC;IACpG,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAS,EAAc,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/F,MAAM,QAAQ,GAAG,CAAC,CAAa,EAAU,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAE5E,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAkB,CAAC;IACrG,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACrF,OAAO,EAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAC,CAAC;AAChE,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAA8D,EAC9D,gBAAwB,EACxB,QAAgB,EAChB,eAAuB;IAEvB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,gBAAgB,CAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7H,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAiB,CAAC,CAAC,CAAC;IACxG,OAAO,EAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,SAAS,EAAC,CAAC;AAChG,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAkB,EAClB,WAAqD;IAErD,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC;IAC1B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC;IACvE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1H,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAiB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAiB,CAAC,CAAC;QACpI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,mBAAmB;IACzB,SAAS,EAAE,8CAA8C;CAC1D,CAAC;AAEF,MAAM,YAAY,GAAG,6CAA6C,CAAC;AAEnE,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,CAAU;IACzC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,2CAA2C,CAAC;IACpF,MAAM,GAAG,GAAG,CAA4B,CAAC;IACzC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QACxE,OAAO,wEAAwE,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAC;IACzE,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,qBAAqB,CAAC;IAClF,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,mCAAmC,CAAC;IAC1F,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC;QACpI,OAAO,sDAAsD,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"plugins.js","sourceRoot":"","sources":["../src/plugins.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA2BH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AA2CpC;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAwB;IAC5D,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC;IACnC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,WAAW,QAAQ,CAAC,EAAE,0BAA0B,MAAM,4BAA4B,kBAAkB,8BAA8B,CAAC;AAC5I,CAAC;AA4BD,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;AAE7B;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACpF,MAAM,IAAI,SAAS,CAAC,iCAAiC,OAAO,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACrF,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SAC7B,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACvF,MAAM,IAAI,SAAS,CAAC,iCAAiC,OAAO,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IACL,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,QAAwB,EAAE,KAA6B;IAC7E,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,CAAS,EAAQ,EAAE;QAC/B,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC,CAAC;IACF,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,CAAC;QACX,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACf,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAwB,EAAE,KAA6B;IAC3F,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAiB,CAAC,CAAC;IACpG,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAS,EAAc,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/F,MAAM,QAAQ,GAAG,CAAC,CAAa,EAAU,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAE5E,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAkB,CAAC;IACrG,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACrF,OAAO,EAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAC,CAAC;AAChE,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAA8D,EAC9D,gBAAwB,EACxB,QAAgB,EAChB,eAAuB;IAEvB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,gBAAgB,CAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7H,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAiB,CAAC,CAAC,CAAC;IACxG,OAAO,EAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,SAAS,EAAC,CAAC;AAChG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,eAAuB,EAAE,OAAe,EAAE,eAAuB;IAC1G,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;QACxC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAmB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpG,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,eAAe,CAAiB,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAiB,CAAC,CAAC;IACrI,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAkB,EAClB,WAAqD;IAErD,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC;IAC1B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC;IACvE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1H,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAiB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAiB,CAAC,CAAC;QACpI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA6C;IAC9E;QACE,IAAI,EAAE,mBAAmB;QACzB,SAAS,EAAE,8CAA8C;KAC1D;CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAC;AAE3D,MAAM,YAAY,GAAG,6CAA6C,CAAC;AAEnE,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,CAAU;IACzC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,2CAA2C,CAAC;IACpF,MAAM,GAAG,GAAG,CAA4B,CAAC;IACzC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QACxE,OAAO,wEAAwE,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAC;IACzE,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,qBAAqB,CAAC;IAClF,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,mCAAmC,CAAC;IAC1F,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC;QACpI,OAAO,sDAAsD,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/provenance.d.ts

@@ -173,6 +173,19 @@ export interface InstanceInfo {
      * identity and falls back to a reachability-only probe. */
     instanceId?: string | null;
     ownerSubject: string | null;
+    /**
+     * Whether this instance has an owner at all — WITHOUT saying who (PUB-1 / Sasha
+     * M-1). {@link ownerSubject} cannot answer this: GATE-7 nulls it for an anonymous
+     * caller on a claimed instance, so `ownerSubject === null` means either "unclaimed"
+     * or "claimed, but you may not know the owner". A client that needs the CLAIM
+     * STATE — e.g. to warn that an unclaimed library ignores `defaultVisibility`
+     * entirely (authorize rule 0 short-circuits on the guest gate alone) — must read
+     * this instead. Deliberately non-sensitive: a boolean "someone owns this" leaks no
+     * identity and no recon surface beyond what the guest gate's own behaviour already
+     * reveals. Optional: absent on a pre-PUB-1 server / a test fixture — a client then
+     * knows nothing and should stay silent rather than guess a claim state.
+     */
+    claimed?: boolean;
     trustedIssuers: string[];
     /** This server's audience identifier, so a client can request an `aud`-scoped
      *  identity token (OB-177). `null` for the single-server (unscoped) model. */

package/dist/registryClient.d.ts

@@ -0,0 +1,227 @@
+/**
+ * Client for the OpenBook registry protocol (`openbook-registry/1`) — the
+ * read side a store-browsing app needs: the registry identity document, the
+ * paginated install index, per-plugin metadata, verified downloads, and the
+ * signed revocation feed.
+ *
+ * Trust model (PROTOCOL.md §6): a registry is identified by its pinned
+ * `(baseUrl, keys)`, never by anything a fetch returned. The caller supplies
+ * the pin; this client verifies everything it downloads against it —
+ * digest recomputed from the bytes, publisher signature against the index's
+ * `pinnedKeys`, notary countersignature and revocation entries against the
+ * pinned notary key. Any failed step throws: there is no partial trust.
+ */
+import { type PluginManifest, type PluginPackage } from './plugins';
+import type { FetchLike } from './client';
+export type { FetchLike };
+export declare function isSemver(v: string): boolean;
+/**
+ * Semver precedence compare (spec §11): numeric MAJOR.MINOR.PATCH, then
+ * prerelease (absent > present; numeric identifiers numerically, and lower
+ * than alphanumeric ones). Build metadata is ignored. Returns <0, 0, >0.
+ * Inputs must already satisfy {@link isSemver}. Byte-for-byte port of the
+ * store's `compareSemver` (open-book-pub `packages/store/lib/canonical.ts`).
+ */
+export declare function compareSemver(a: string, b: string): number;
+/** `GET /api/v1/registry` — the identity document a client pins. */
+export interface RegistryDocument {
+    protocol: string;
+    name: string;
+    baseUrl: string;
+    apiVersion: number;
+    algorithms: string[];
+    notaryPublicKey: string | null;
+    registryPublicKey: string | null;
+    fingerprints: {
+        notary: string | null;
+        registry: string | null;
+    };
+    endpoints: Record<string, string>;
+}
+/** One row of `GET /api/v1/index` — a plugin at its latest approved version. */
+export interface RegistryIndexEntry {
+    id: string;
+    name: string;
+    description: string;
+    icon: string | null;
+    category: string | null;
+    publisher: string | null;
+    /** Publisher keys this plugin id is pinned to (TOFU), first-seen first. */
+    pinnedKeys?: string[];
+    /** @deprecated Use `pinnedKeys`; retained as the pre-rotation fallback. */
+    pinnedKey: string;
+    latestVersion: string;
+    /** Canonical digest of the latest approved version — what both signatures cover. */
+    digest: string;
+    /** Content address of the publisher's uploaded document (pre-splice). */
+    artifactSha256: string;
+}
+export interface RegistryIndexPage {
+    plugins: RegistryIndexEntry[];
+    limit: number;
+    nextCursor: string | null;
+    hasMore: boolean;
+}
+/** The notary countersignature spliced into approved downloads (§5.4.1). */
+export interface RegistryNotarization {
+    registry: string;
+    publicKey: string;
+    signature: string;
+    algorithm: string;
+    timestamp: string;
+}
+export interface RegistryPluginVersion {
+    version: string;
+    digest: string;
+    artifactSha256: string;
+    status: string;
+    createdAt: string;
+    manifest: PluginManifest;
+    notarization: RegistryNotarization | null;
+}
+/** `GET /api/v1/plugins/{id}` — a plugin's version history. */
+export interface RegistryPluginMeta {
+    id: string;
+    pinnedKeys?: string[];
+    /** @deprecated Use `pinnedKeys`; retained as the pre-rotation fallback. */
+    pinnedKey: string;
+    createdAt: string;
+    versions: RegistryPluginVersion[];
+}
+/** One signed entry of the revocation feed (§5.5). */
+export interface RegistryRevocation {
+    id: string;
+    seq: number;
+    pluginId: string;
+    /** The revoked version, or null = every version, including future ones. */
+    version: string | null;
+    reason: string;
+    signerPublicKey: string | null;
+    signature: string | null;
+    createdAt: string;
+}
+/** The signed freshness/rollback anchor accompanying a revocation feed. */
+export interface RegistryRevocationHead {
+    maxSeq: number;
+    generatedAt: string;
+    publicKey: string;
+    signature: string;
+}
+/** The trust states a verified download can earn (§6.5). */
+export interface RegistryTrust {
+    /** Package signature verifies with the pinned `registryPublicKey`. */
+    firstParty: boolean;
+    /** Notary countersignature verifies with the pinned `notaryPublicKey`. */
+    notarised: boolean;
+}
+/** A fully verified download: the package plus what the verification proved. */
+export interface VerifiedDownload {
+    pkg: PluginPackage;
+    /** The recomputed canonical digest the signatures were checked over. */
+    digest: string;
+    trust: RegistryTrust;
+    notarization: RegistryNotarization | null;
+}
+/** The pin a client persists for a registry: base URL + keys, per §6.2. */
+export interface RegistryPin {
+    baseUrl: string;
+    name?: string;
+    notaryPublicKey?: string | null;
+    registryPublicKey?: string | null;
+}
+/** A typed failure from the registry client; `code` is stable for branching. */
+export declare class RegistryError extends Error {
+    readonly code: 'unsupported_protocol' | 'insecure_base_url' | 'http_error' | 'revoked' | 'not_found' | 'digest_mismatch' | 'etag_mismatch' | 'signature_invalid' | 'notarization_invalid' | 'revocation_unavailable' | 'bad_response';
+    constructor(code: 'unsupported_protocol' | 'insecure_base_url' | 'http_error' | 'revoked' | 'not_found' | 'digest_mismatch' | 'etag_mismatch' | 'signature_invalid' | 'notarization_invalid' | 'revocation_unavailable' | 'bad_response', message: string);
+}
+/** Must exceed the endpoint's 60s max-age + 300s SWR cache floor (§6.6). */
+export declare const REVOCATION_STALENESS_MS: number;
+/** HTTPS only, except an explicit developer-local http://localhost (§3). */
+export declare function registryBaseUrlProblem(baseUrl: string): string | null;
+/**
+ * Human-comparable fingerprint of a raw Ed25519 key (§6.2): SHA-256 of the
+ * raw 32 bytes, truncated to 128 bits, as eight dash-separated hex quads.
+ */
+export declare function registryKeyFingerprint(publicKeyBase64: string): Promise<string>;
+/** Does a revocation entry cover this `(pluginId, version)`? `version: null` covers all. */
+export declare function revocationMatches(entry: Pick<RegistryRevocation, 'pluginId' | 'version'>, pluginId: string, version: string): boolean;
+/**
+ * Fetch + validate a registry's identity document WITHOUT a pin — the
+ * add-a-registry flow (§6.2): the caller must display the fingerprints for
+ * out-of-band confirmation before pinning anything from this response.
+ */
+export declare function fetchRegistryDocument(baseUrl: string, fetchImpl?: FetchLike): Promise<RegistryDocument>;
+/**
+ * The read client for one pinned registry. All verification happens against
+ * the PIN handed to the constructor — never against keys learned from the
+ * network afterwards.
+ */
+export declare class RegistryClient {
+    readonly pin: RegistryPin;
+    private readonly fetchImpl;
+    private doc;
+    constructor(pin: RegistryPin, opts?: {
+        fetch?: FetchLike;
+    });
+    private get base();
+    private endpoint;
+    private json;
+    /**
+     * The registry's identity document (fetched once, cached). Checked against
+     * the pin: a protocol this client does not speak is refused, and a document
+     * whose keys disagree with pinned keys is refused as a possible attack
+     * (§6.2 — a pin change is a NEW trust decision, never a silent update).
+     */
+    document(): Promise<RegistryDocument>;
+    /** One page of the install index (§5.2). */
+    indexPage(opts?: {
+        limit?: number;
+        cursor?: string;
+        q?: string;
+        category?: string;
+    }): Promise<RegistryIndexPage>;
+    /**
+     * Walk the whole (filtered) index, one page at a time — cursors are walked
+     * sequentially per §9, capped defensively against a cursor loop.
+     */
+    indexAll(opts?: {
+        q?: string;
+        category?: string;
+        limit?: number;
+    }): Promise<RegistryIndexEntry[]>;
+    /** Find one plugin's index row by exact id (via the substring search filter). */
+    findIndexEntry(pluginId: string): Promise<RegistryIndexEntry | null>;
+    /** A plugin's version history (§5.3). Null when the registry doesn't know the id. */
+    pluginMeta(pluginId: string): Promise<RegistryPluginMeta | null>;
+    /**
+     * Download one version and verify it offline (§6.3). Every step must pass:
+     *
+     * 1. sha256(served bytes) equals the strong `ETag` (transport integrity).
+     * 2. The canonical digest RECOMPUTED from manifest+files equals `expect.digest`
+     *    (the value the index/metadata promised) and the `X-Canonical-Digest` hint.
+     * 3. The publisher signature verifies over that digest with ANY member of
+     *    `expect.pinnedKeys` — never with the key that travelled inside the package.
+     * 4. A present notary countersignature verifies with the PINNED notary key —
+     *    present-but-invalid is a hard failure, not a downgrade to "unnotarised".
+     *
+     * Revocations are the caller's step (§6.6): check {@link revocations} before
+     * installing what this returns.
+     */
+    download(pluginId: string, version: string, expect: {
+        digest: string;
+        pinnedKeys: string[];
+    }): Promise<VerifiedDownload>;
+    /**
+     * The revocation feed (§5.5, §6.6), from `since` (exclusive). Entries are
+     * verified against the pinned notary key; on a registry that advertises a
+     * notary key, unsigned or badly-signed entries are IGNORED (an injection is
+     * not a kill switch). Only a registry with no notary key at all has its
+     * unsigned entries honoured — failing open on the kill switch is the
+     * dangerous direction.
+     */
+    revocations(since?: number): Promise<{
+        maxSeq: number;
+        entries: RegistryRevocation[];
+        generatedAt: string | null;
+    }>;
+}