@book.dev/sdk 3.8.0 → 3.10.0

package/dist/orderKeys.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Fractional order keys — pure, dependency-free (TBL-1).
+ *
+ * A key is a non-empty string over the base-62 alphabet `0-9A-Za-z` whose
+ * plain lexicographic order IS its numeric order: read it as a fraction in
+ * (0, 1) written in base 62 (`'V'` ≈ 0.5, `'0V'` ≈ 0.008…). The ASCII order
+ * of the alphabet matches its digit order, so `a < b` on the raw strings is
+ * the whole comparator — no parsing, ever.
+ *
+ * Invariant: a key never ends with the zero digit `'0'`. That guarantees any
+ * two distinct keys (and either open end) always have a midpoint, so a move
+ * only ever writes ONE small string — the mover's new key — and never has to
+ * renumber neighbours. Keys grow ~1 character per ~5 inserts into the same
+ * gap (worst case); callers that see a key longer than
+ * {@link ORDER_KEY_REBALANCE_LENGTH} should rewrite the whole axis with
+ * {@link keysBetween} (see `model.ts` table ops for the pattern).
+ */
+/** Keys longer than this ask the owning axis for a rebalance (rare). */
+export declare const ORDER_KEY_REBALANCE_LENGTH = 48;
+/** True for a well-formed order key (base-62, non-empty, no trailing zero). */
+export declare function isOrderKey(value: unknown): value is string;
+/** Lexicographic comparator (identical to `<` on the raw strings). */
+export declare function compareOrderKeys(a: string, b: string): number;
+/**
+ * A key strictly between `a` and `b` (`null` = the open end of the axis).
+ * Throws on malformed keys or `a >= b` — callers own their bounds (the table
+ * ops fall back to a full-axis rebalance instead of passing bad bounds).
+ */
+export declare function keyBetween(a: string | null, b: string | null): string;
+/**
+ * `n` fresh keys strictly between `a` and `b`, in ascending order — balanced
+ * binary subdivision, so lengths stay ~log₆₂(n). Deterministic: the same
+ * bounds and count always produce the same keys (two peers migrating the same
+ * legacy table concurrently write identical values and converge trivially).
+ */
+export declare function keysBetween(a: string | null, b: string | null, n: number): string[];

package/dist/orderKeys.js

@@ -0,0 +1,88 @@
+/**
+ * Fractional order keys — pure, dependency-free (TBL-1).
+ *
+ * A key is a non-empty string over the base-62 alphabet `0-9A-Za-z` whose
+ * plain lexicographic order IS its numeric order: read it as a fraction in
+ * (0, 1) written in base 62 (`'V'` ≈ 0.5, `'0V'` ≈ 0.008…). The ASCII order
+ * of the alphabet matches its digit order, so `a < b` on the raw strings is
+ * the whole comparator — no parsing, ever.
+ *
+ * Invariant: a key never ends with the zero digit `'0'`. That guarantees any
+ * two distinct keys (and either open end) always have a midpoint, so a move
+ * only ever writes ONE small string — the mover's new key — and never has to
+ * renumber neighbours. Keys grow ~1 character per ~5 inserts into the same
+ * gap (worst case); callers that see a key longer than
+ * {@link ORDER_KEY_REBALANCE_LENGTH} should rewrite the whole axis with
+ * {@link keysBetween} (see `model.ts` table ops for the pattern).
+ */
+const DIGITS = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz';
+const ZERO = DIGITS[0];
+const BASE = DIGITS.length;
+/** Keys longer than this ask the owning axis for a rebalance (rare). */
+export const ORDER_KEY_REBALANCE_LENGTH = 48;
+/** True for a well-formed order key (base-62, non-empty, no trailing zero). */
+export function isOrderKey(value) {
+    return (typeof value === 'string' &&
+        value.length > 0 &&
+        !value.endsWith(ZERO) &&
+        [...value].every((ch) => DIGITS.includes(ch)));
+}
+/** Lexicographic comparator (identical to `<` on the raw strings). */
+export function compareOrderKeys(a, b) {
+    return a < b ? -1 : a > b ? 1 : 0;
+}
+/**
+ * The midpoint of two fraction strings, `a < result < b`.
+ * `a === ''` means the lower bound 0; `b === null` means the upper bound 1.
+ * Neither input may have a trailing zero digit; the result never does.
+ */
+function midpoint(a, b) {
+    if (b !== null) {
+        // Shared prefix passes through untouched; recurse on the differing tail.
+        let n = 0;
+        while ((a[n] ?? ZERO) === b[n])
+            n += 1;
+        if (n > 0)
+            return b.slice(0, n) + midpoint(a.slice(n), b.slice(n));
+    }
+    const digitA = a ? DIGITS.indexOf(a[0]) : 0;
+    const digitB = b !== null && b.length > 0 ? DIGITS.indexOf(b[0]) : BASE;
+    if (digitB - digitA > 1) {
+        return DIGITS[Math.round((digitA + digitB) / 2)];
+    }
+    // Consecutive leading digits: either borrow b's head (when it has a tail to
+    // stay below), or extend a's head with a midpoint above a's tail.
+    if (b !== null && b.length > 1)
+        return b[0];
+    return DIGITS[digitA] + midpoint(a.slice(1), null);
+}
+/**
+ * A key strictly between `a` and `b` (`null` = the open end of the axis).
+ * Throws on malformed keys or `a >= b` — callers own their bounds (the table
+ * ops fall back to a full-axis rebalance instead of passing bad bounds).
+ */
+export function keyBetween(a, b) {
+    if (a !== null && !isOrderKey(a))
+        throw new RangeError(`invalid order key: ${JSON.stringify(a)}`);
+    if (b !== null && !isOrderKey(b))
+        throw new RangeError(`invalid order key: ${JSON.stringify(b)}`);
+    if (a !== null && b !== null && a >= b)
+        throw new RangeError(`order keys out of order: ${a} >= ${b}`);
+    return midpoint(a ?? '', b);
+}
+/**
+ * `n` fresh keys strictly between `a` and `b`, in ascending order — balanced
+ * binary subdivision, so lengths stay ~log₆₂(n). Deterministic: the same
+ * bounds and count always produce the same keys (two peers migrating the same
+ * legacy table concurrently write identical values and converge trivially).
+ */
+export function keysBetween(a, b, n) {
+    if (n <= 0)
+        return [];
+    const mid = keyBetween(a, b);
+    if (n === 1)
+        return [mid];
+    const left = (n - 1) >> 1;
+    return [...keysBetween(a, mid, left), mid, ...keysBetween(mid, b, n - 1 - left)];
+}
+//# sourceMappingURL=orderKeys.js.map

package/dist/orderKeys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orderKeys.js","sourceRoot":"","sources":["../src/orderKeys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,MAAM,GAAG,gEAAgE,CAAC;AAChF,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;AACvB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;AAE3B,wEAAwE;AACxE,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C,+EAA+E;AAC/E,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrB,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,gBAAgB,CAAC,CAAS,EAAE,CAAS;IACnD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAgB;IAC3C,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACf,yEAAyE;QACzE,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,IAAI,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,4EAA4E;IAC5E,kEAAkE;IAClE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,CAAgB,EAAE,CAAgB;IAC3D,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,4BAA4B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtG,OAAO,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,CAAgB,EAAE,CAAgB,EAAE,CAAS;IACvE,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AACnF,CAAC"}

package/dist/plugins.d.ts

@@ -2,10 +2,10 @@
  * The plugin contract: what a plugin package IS (a manifest + TypeScript
  * source files), and the signing scheme that lets a registry vouch for one.
  *
- * Trust model, stated plainly: plugins run with the same privileges as the
- * document's own live code — signing provides **provenance** (this exact
- * content was published by a registry you trust), not sandboxing. Unsigned
- * plugins install fine and are labelled unverified.
+ * Extensions run with the same access as your documents’ live code. A
+ * “Verified” badge means a registry you trust signed this exact content —
+ * provenance, not a sandbox. Unsigned plugins install fine and are labelled
+ * unverified.
  *
  * Signing: Ed25519 over a canonical SHA-256 digest of the manifest + every
  * file (sorted paths, length-prefixed — byte-stable across platforms). The
@@ -66,6 +66,24 @@ export interface PluginManifest {
     apiVersion?: number;
     /** Agent tools this plugin contributes (read server-side from the manifest). */
     agentTools?: PluginAgentTool[];
+    /**
+     * The block types this plugin registers at activation (WITHOUT the
+     * `<pluginId>/` prefix the host adds). Declared in the manifest so servers —
+     * which never run plugin code — can list a plugin's blocks (the agent/MCP
+     * `list_block_types` tool) straight from the stored manifest JSON. Optional:
+     * a plugin that declares none still works, its block types are simply not
+     * enumerable server-side. For bundled first-party plugins the declaration is
+     * verified against the source's `blocks.register` calls at bundle time
+     * (packages/ui/scripts/bundlePlugins.ts), so it cannot drift.
+     */
+    blocks?: PluginBlockDeclaration[];
+}
+/** One manifest-declared plugin block (see {@link PluginManifest.blocks}). */
+export interface PluginBlockDeclaration {
+    /** The unprefixed block type, e.g. `journal-entry`. */
+    type: string;
+    /** One-line description surfaced by `list_block_types`. */
+    description?: string;
 }
 /**
  * The host-side activation gate for {@link PluginManifest.apiVersion}:
@@ -97,6 +115,21 @@ export interface StoredPlugin extends PluginPackage {
     /** Set by the client after verification — never trusted from the wire. */
     verified?: boolean;
 }
+/**
+ * Canonical JSON for signing: objects emit ALL keys, sorted, at EVERY depth;
+ * arrays are positional; primitives follow JSON.stringify semantics.
+ * `undefined`, functions, and symbols are rejected outright (never silently
+ * dropped) — anything the signer skips is something an attacker can vary for
+ * free.
+ *
+ * Deliberately NOT `JSON.stringify(value, sortedKeysArray)`: a replacer ARRAY
+ * allowlists those keys at every depth, so nested keys absent from the top
+ * level (e.g. `agentTools[0].action`) silently vanish from the signed bytes.
+ *
+ * Mirrored byte-for-byte by the store's server-side port
+ * (open-book-pub `packages/store/lib/canonical.ts`) — change both together.
+ */
+export declare function canonicalJson(value: unknown): string;
 /** SHA-256 of the canonical bytes (hex) — the thing a registry signs. */
 export declare function canonicalDigest(manifest: PluginManifest, files: Record<string, string>): Promise<string>;
 /** Generate a registry keypair (raw public / pkcs8 private, base64). */
@@ -109,6 +142,14 @@ export declare function signPlugin(pkg: {
     manifest: PluginManifest;
     files: Record<string, string>;
 }, privateKeyBase64: string, registry: string, publicKeyBase64: string): Promise<PluginSignature>;
+/**
+ * Verify an Ed25519 signature (base64, raw 64 bytes) over a UTF-8 message
+ * with a base64 RAW 32-byte public key. Returns false — never throws — on
+ * malformed inputs. The registry protocol signs the UTF-8 bytes of the
+ * lowercase hex canonical digest with exactly this scheme, for the publisher
+ * signature, the notary countersignature, and revocation entries alike.
+ */
+export declare function verifyEd25519Message(publicKeyBase64: string, message: string, signatureBase64: string): Promise<boolean>;
 /**
  * Verify a package against a set of trusted registry keys. Returns the
  * matching trusted registry name, or null when unsigned, signed by an
@@ -121,10 +162,40 @@ export declare function verifyPlugin(pkg: PluginPackage, trustedKeys: Array<{
     registry: string;
 } | null>;
 /**
- * The pinned first-party registry key. Every OpenBook build trusts this;
- * additional registries are user-added keys on top (Settings → Extensions).
- * NOTE: a placeholder development key until the real registry launches —
- * regenerate and replace before publishing plugins for real.
+ * The pinned first-party registry keys. Every OpenBook build trusts ALL of
+ * these; additional registries are user-added keys on top (Settings →
+ * Extensions).
+ *
+ * THIS LIST IS THE ONE PLACE THE PRODUCTION KEY(S) LIVE. The key ceremony
+ * (docs/plugin-signing.md) is: run `node scripts/gen-registry-key.mjs`, commit
+ * the printed PUBLIC key here, and store the private half as the
+ * `OPENBOOK_REGISTRY_PRIVATE_KEY` GitHub Actions secret — the release build
+ * signs the bundled first-party plugins with it (packages/ui/scripts/
+ * bundlePlugins.ts).
+ *
+ * A LIST so rotation can overlap (add-then-remove): append the NEW key as a
+ * second entry and ship — clients of that build verify signatures from either
+ * key. Once the overlap build is broadly installed, cut signing over to the
+ * new key (swap the CI secret), and a later release removes the old entry.
+ * The signing key SHOULD be entry [0]; extra entries exist only during
+ * rotation windows. Full runbook: docs/plugin-signing.md.
+ *
+ * NOTE: currently a single production key, minted 2026-08-09. Its private
+ * half is held only in the GitHub Actions `publish` environment secret
+ * `OPENBOOK_REGISTRY_PRIVATE_KEY`. No entry may EVER match
+ * scripts/test-registry-key.json (its private half is public); CI guards
+ * enforce that for every entry (.github/workflows/release.yml).
+ */
+export declare const OPENBOOK_REGISTRY_KEYS: Array<{
+    name: string;
+    publicKey: string;
+}>;
+/**
+ * The primary pinned first-party key — entry [0] of
+ * {@link OPENBOOK_REGISTRY_KEYS}.
+ * @deprecated trust decisions must consume the whole list
+ * ({@link OPENBOOK_REGISTRY_KEYS}); this alias exists for display and
+ * back-compat only.
  */
 export declare const OPENBOOK_REGISTRY: {
     name: string;

package/dist/plugins.js

@@ -2,10 +2,10 @@
  * The plugin contract: what a plugin package IS (a manifest + TypeScript
  * source files), and the signing scheme that lets a registry vouch for one.
  *
- * Trust model, stated plainly: plugins run with the same privileges as the
- * document's own live code — signing provides **provenance** (this exact
- * content was published by a registry you trust), not sandboxing. Unsigned
- * plugins install fine and are labelled unverified.
+ * Extensions run with the same access as your documents’ live code. A
+ * “Verified” badge means a registry you trust signed this exact content —
+ * provenance, not a sandbox. Unsigned plugins install fine and are labelled
+ * unverified.
  *
  * Signing: Ed25519 over a canonical SHA-256 digest of the manifest + every
  * file (sorted paths, length-prefixed — byte-stable across platforms). The
@@ -36,9 +36,43 @@ export function pluginApiVersionError(manifest) {
 }
 const te = new TextEncoder();
 /**
- * Deterministic bytes for signing: the manifest (sorted-key JSON), then each
- * file in sorted path order, every part length-prefixed so boundaries can't
- * be confused (`a + bc` ≠ `ab + c`).
+ * Canonical JSON for signing: objects emit ALL keys, sorted, at EVERY depth;
+ * arrays are positional; primitives follow JSON.stringify semantics.
+ * `undefined`, functions, and symbols are rejected outright (never silently
+ * dropped) — anything the signer skips is something an attacker can vary for
+ * free.
+ *
+ * Deliberately NOT `JSON.stringify(value, sortedKeysArray)`: a replacer ARRAY
+ * allowlists those keys at every depth, so nested keys absent from the top
+ * level (e.g. `agentTools[0].action`) silently vanish from the signed bytes.
+ *
+ * Mirrored byte-for-byte by the store's server-side port
+ * (open-book-pub `packages/store/lib/canonical.ts`) — change both together.
+ */
+export function canonicalJson(value) {
+    if (value === undefined || typeof value === 'function' || typeof value === 'symbol') {
+        throw new TypeError(`canonical JSON cannot contain ${typeof value}`);
+    }
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map((v) => canonicalJson(v)).join(',')}]`;
+    const obj = value;
+    const members = Object.keys(obj)
+        .sort()
+        .map((k) => {
+        if (obj[k] === undefined || typeof obj[k] === 'function' || typeof obj[k] === 'symbol') {
+            throw new TypeError(`canonical JSON cannot contain ${typeof obj[k]} (at key "${k}")`);
+        }
+        return `${JSON.stringify(k)}:${canonicalJson(obj[k])}`;
+    });
+    return `{${members.join(',')}}`;
+}
+/**
+ * Deterministic bytes for signing: the manifest (canonical JSON — keys sorted
+ * recursively, see {@link canonicalJson}), then each file in sorted path
+ * order, every part length-prefixed so boundaries can't be confused
+ * (`a + bc` ≠ `ab + c`).
  */
 function canonicalBytes(manifest, files) {
     const parts = [];
@@ -48,7 +82,7 @@ function canonicalBytes(manifest, files) {
         new DataView(len.buffer).setUint32(0, bytes.length);
         parts.push(len, bytes);
     };
-    push(JSON.stringify(manifest, Object.keys(manifest).sort()));
+    push(canonicalJson(manifest));
     for (const path of Object.keys(files).sort()) {
         push(path);
         push(files[path]);
@@ -83,6 +117,25 @@ export async function signPlugin(pkg, privateKeyBase64, registry, publicKeyBase6
     const sig = new Uint8Array(await crypto.subtle.sign('Ed25519', key, te.encode(digest)));
     return { registry, publicKey: publicKeyBase64, signature: toBase64(sig), algorithm: 'ed25519' };
 }
+/**
+ * Verify an Ed25519 signature (base64, raw 64 bytes) over a UTF-8 message
+ * with a base64 RAW 32-byte public key. Returns false — never throws — on
+ * malformed inputs. The registry protocol signs the UTF-8 bytes of the
+ * lowercase hex canonical digest with exactly this scheme, for the publisher
+ * signature, the notary countersignature, and revocation entries alike.
+ */
+export async function verifyEd25519Message(publicKeyBase64, message, signatureBase64) {
+    try {
+        const raw = fromBase64(publicKeyBase64);
+        if (raw.length !== 32)
+            return false;
+        const key = await crypto.subtle.importKey('raw', raw, 'Ed25519', false, ['verify']);
+        return await crypto.subtle.verify('Ed25519', key, fromBase64(signatureBase64), te.encode(message));
+    }
+    catch {
+        return false;
+    }
+}
 /**
  * Verify a package against a set of trusted registry keys. Returns the
  * matching trusted registry name, or null when unsigned, signed by an
@@ -106,15 +159,44 @@ export async function verifyPlugin(pkg, trustedKeys) {
     }
 }
 /**
- * The pinned first-party registry key. Every OpenBook build trusts this;
- * additional registries are user-added keys on top (Settings → Extensions).
- * NOTE: a placeholder development key until the real registry launches —
- * regenerate and replace before publishing plugins for real.
+ * The pinned first-party registry keys. Every OpenBook build trusts ALL of
+ * these; additional registries are user-added keys on top (Settings →
+ * Extensions).
+ *
+ * THIS LIST IS THE ONE PLACE THE PRODUCTION KEY(S) LIVE. The key ceremony
+ * (docs/plugin-signing.md) is: run `node scripts/gen-registry-key.mjs`, commit
+ * the printed PUBLIC key here, and store the private half as the
+ * `OPENBOOK_REGISTRY_PRIVATE_KEY` GitHub Actions secret — the release build
+ * signs the bundled first-party plugins with it (packages/ui/scripts/
+ * bundlePlugins.ts).
+ *
+ * A LIST so rotation can overlap (add-then-remove): append the NEW key as a
+ * second entry and ship — clients of that build verify signatures from either
+ * key. Once the overlap build is broadly installed, cut signing over to the
+ * new key (swap the CI secret), and a later release removes the old entry.
+ * The signing key SHOULD be entry [0]; extra entries exist only during
+ * rotation windows. Full runbook: docs/plugin-signing.md.
+ *
+ * NOTE: currently a single production key, minted 2026-08-09. Its private
+ * half is held only in the GitHub Actions `publish` environment secret
+ * `OPENBOOK_REGISTRY_PRIVATE_KEY`. No entry may EVER match
+ * scripts/test-registry-key.json (its private half is public); CI guards
+ * enforce that for every entry (.github/workflows/release.yml).
+ */
+export const OPENBOOK_REGISTRY_KEYS = [
+    {
+        name: 'OpenBook Registry',
+        publicKey: '62Gry7q0cRFZFgZNFXwuB4XyVHQhGxTXuR5oqZG4eVU=',
+    },
+];
+/**
+ * The primary pinned first-party key — entry [0] of
+ * {@link OPENBOOK_REGISTRY_KEYS}.
+ * @deprecated trust decisions must consume the whole list
+ * ({@link OPENBOOK_REGISTRY_KEYS}); this alias exists for display and
+ * back-compat only.
  */
-export const OPENBOOK_REGISTRY = {
-    name: 'OpenBook Registry',
-    publicKey: 'nI4eBQzqrIyVPEmJSEzGtqC9B0+kfWTXKyN5t8Yki/E=',
-};
+export const OPENBOOK_REGISTRY = OPENBOOK_REGISTRY_KEYS[0];
 const PLUGIN_ID_RE = /^[a-z0-9][a-z0-9-]*(\.[a-z0-9][a-z0-9-]*)+$/;
 /** Validate a manifest's shape; returns a human-readable problem or null. */
 export function validateManifest(m) {

package/dist/plugins.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugins.js","sourceRoot":"","sources":["../src/plugins.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA2BH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAwBpC;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAwB;IAC5D,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC;IACnC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,WAAW,QAAQ,CAAC,EAAE,0BAA0B,MAAM,4BAA4B,kBAAkB,8BAA8B,CAAC;AAC5I,CAAC;AA4BD,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;AAE7B;;;;GAIG;AACH,SAAS,cAAc,CAAC,QAAwB,EAAE,KAA6B;IAC7E,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,CAAS,EAAQ,EAAE;QAC/B,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,CAAC;QACX,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACf,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAwB,EAAE,KAA6B;IAC3F,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAiB,CAAC,CAAC;IACpG,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAS,EAAc,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/F,MAAM,QAAQ,GAAG,CAAC,CAAa,EAAU,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAE5E,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAkB,CAAC;IACrG,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACrF,OAAO,EAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAC,CAAC;AAChE,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAA8D,EAC9D,gBAAwB,EACxB,QAAgB,EAChB,eAAuB;IAEvB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,gBAAgB,CAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7H,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAiB,CAAC,CAAC,CAAC;IACxG,OAAO,EAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,SAAS,EAAC,CAAC;AAChG,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAkB,EAClB,WAAqD;IAErD,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC;IAC1B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC;IACvE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1H,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAiB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAiB,CAAC,CAAC;QACpI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,mBAAmB;IACzB,SAAS,EAAE,8CAA8C;CAC1D,CAAC;AAEF,MAAM,YAAY,GAAG,6CAA6C,CAAC;AAEnE,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,CAAU;IACzC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,2CAA2C,CAAC;IACpF,MAAM,GAAG,GAAG,CAA4B,CAAC;IACzC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QACxE,OAAO,wEAAwE,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAC;IACzE,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,qBAAqB,CAAC;IAClF,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,mCAAmC,CAAC;IAC1F,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC;QACpI,OAAO,sDAAsD,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"plugins.js","sourceRoot":"","sources":["../src/plugins.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA2BH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AA2CpC;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAwB;IAC5D,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC;IACnC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,WAAW,QAAQ,CAAC,EAAE,0BAA0B,MAAM,4BAA4B,kBAAkB,8BAA8B,CAAC;AAC5I,CAAC;AA4BD,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;AAE7B;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACpF,MAAM,IAAI,SAAS,CAAC,iCAAiC,OAAO,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACrF,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SAC7B,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACvF,MAAM,IAAI,SAAS,CAAC,iCAAiC,OAAO,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IACL,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,QAAwB,EAAE,KAA6B;IAC7E,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,CAAS,EAAQ,EAAE;QAC/B,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC,CAAC;IACF,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,CAAC;QACX,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACf,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAwB,EAAE,KAA6B;IAC3F,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAiB,CAAC,CAAC;IACpG,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAS,EAAc,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/F,MAAM,QAAQ,GAAG,CAAC,CAAa,EAAU,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAE5E,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAkB,CAAC;IACrG,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACrF,OAAO,EAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAC,CAAC;AAChE,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAA8D,EAC9D,gBAAwB,EACxB,QAAgB,EAChB,eAAuB;IAEvB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,gBAAgB,CAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7H,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAiB,CAAC,CAAC,CAAC;IACxG,OAAO,EAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,SAAS,EAAC,CAAC;AAChG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,eAAuB,EAAE,OAAe,EAAE,eAAuB;IAC1G,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;QACxC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAmB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpG,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,eAAe,CAAiB,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAiB,CAAC,CAAC;IACrI,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAkB,EAClB,WAAqD;IAErD,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC;IAC1B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC;IACvE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1H,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAiB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAiB,CAAC,CAAC;QACpI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA6C;IAC9E;QACE,IAAI,EAAE,mBAAmB;QACzB,SAAS,EAAE,8CAA8C;KAC1D;CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAC;AAE3D,MAAM,YAAY,GAAG,6CAA6C,CAAC;AAEnE,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,CAAU;IACzC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,2CAA2C,CAAC;IACpF,MAAM,GAAG,GAAG,CAA4B,CAAC;IACzC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QACxE,OAAO,wEAAwE,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAC;IACzE,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,qBAAqB,CAAC;IAClF,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,mCAAmC,CAAC;IAC1F,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC;QACpI,OAAO,sDAAsD,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/provenance.d.ts

@@ -173,6 +173,19 @@ export interface InstanceInfo {
      * identity and falls back to a reachability-only probe. */
     instanceId?: string | null;
     ownerSubject: string | null;
+    /**
+     * Whether this instance has an owner at all — WITHOUT saying who (PUB-1 / Sasha
+     * M-1). {@link ownerSubject} cannot answer this: GATE-7 nulls it for an anonymous
+     * caller on a claimed instance, so `ownerSubject === null` means either "unclaimed"
+     * or "claimed, but you may not know the owner". A client that needs the CLAIM
+     * STATE — e.g. to warn that an unclaimed library ignores `defaultVisibility`
+     * entirely (authorize rule 0 short-circuits on the guest gate alone) — must read
+     * this instead. Deliberately non-sensitive: a boolean "someone owns this" leaks no
+     * identity and no recon surface beyond what the guest gate's own behaviour already
+     * reveals. Optional: absent on a pre-PUB-1 server / a test fixture — a client then
+     * knows nothing and should stay silent rather than guess a claim state.
+     */
+    claimed?: boolean;
     trustedIssuers: string[];
     /** This server's audience identifier, so a client can request an `aud`-scoped
      *  identity token (OB-177). `null` for the single-server (unscoped) model. */