@econ-v1/domain 6.7.0 → 6.11.0

package/dist/services/conversation-service.d.ts

@@ -1,42 +1,130 @@
-import type { Conversation, ConversationListParams, ConversationLogDelta, ConversationMessage, ConversationRepository, Notification, NotificationListParams, NotificationRepository, OutboxRepository, RepositoryEvent } from "@econ-v1/ports";
-export interface SendMessageInput {
-    readonly body: string;
-    readonly conversationId: string;
-    readonly idempotencyKey: string;
-    readonly messageId?: string;
-    readonly senderId: string;
-}
-export interface ConversationServiceOptions {
-    /** The platform adapter owns UUID/ID generation; the domain stays runtime-neutral. */
-    readonly id: () => string;
-    readonly now?: () => string;
-}
-export declare class ConversationService {
-    #private;
+/**
+ * @typedef {import("@econ-v1/ports").Conversation} Conversation
+ */
+/**
+ * @typedef {import("@econ-v1/ports").ConversationListParams} ConversationListParams
+ */
+/**
+ * @typedef {import("@econ-v1/ports").ConversationLogDelta} ConversationLogDelta
+ */
+/**
+ * @typedef {import("@econ-v1/ports").ConversationMessage} ConversationMessage
+ */
+/**
+ * @typedef {import("@econ-v1/ports").ConversationRepository} ConversationRepository
+ */
+/**
+ * @typedef {import("@econ-v1/ports").Notification} Notification
+ */
+/**
+ * @typedef {import("@econ-v1/ports").NotificationListParams} NotificationListParams
+ */
+/**
+ * @typedef {import("@econ-v1/ports").NotificationRepository} NotificationRepository
+ */
+/**
+ * @typedef {import("@econ-v1/ports").OutboxRecord} OutboxRecord
+ */
+/**
+ * @typedef {import("@econ-v1/ports").OutboxRepository} OutboxRepository
+ */
+/**
+ * @typedef {import("@econ-v1/ports").RepositoryEvent} RepositoryEvent
+ */
+/**
+ * @typedef {{ readonly body: string; readonly conversationId: string; readonly idempotencyKey: string; readonly messageId?: string; readonly senderId: string; }} SendMessageInput
+ */
+/**
+ * @typedef {{ readonly id: () => string; readonly now?: () => string; }} ConversationServiceOptions
+ */
+/**
+ * @typedef {RepositoryEvent} ConversationRepositoryWrite
+ */
+export class ConversationService {
+    /**
+   * @param {{ readonly conversations: ConversationRepository; readonly notifications: NotificationRepository; readonly outbox: OutboxRepository; }} dependencies
+   * @param {ConversationServiceOptions} options
+   */
     constructor(dependencies: {
         readonly conversations: ConversationRepository;
         readonly notifications: NotificationRepository;
         readonly outbox: OutboxRepository;
     }, options: ConversationServiceOptions);
+    /**
+   * @param {SendMessageInput} input
+   * @returns {Promise<ConversationMessage>}
+   */
     sendMessage(input: SendMessageInput): Promise<ConversationMessage>;
+    /**
+   * @param {ConversationLogDelta} delta
+   * @returns {Promise<void>}
+   */
     applyDelta(delta: ConversationLogDelta): Promise<void>;
+    /**
+   * @param {{ readonly acknowledgedAt?: string; readonly messageId: string; readonly serverMessageId?: string; }} input
+   * @returns {Promise<void>}
+   */
     acknowledgeMessage(input: {
         readonly acknowledgedAt?: string;
         readonly messageId: string;
         readonly serverMessageId?: string;
     }): Promise<void>;
+    /**
+   * @param {{ readonly messageId: string; readonly reason: string; readonly failedAt?: string }} input
+   * @returns {Promise<void>}
+   */
     failMessage(input: {
         readonly messageId: string;
         readonly reason: string;
         readonly failedAt?: string;
     }): Promise<void>;
+    /**
+   * @param {ConversationListParams} [params]
+   * @returns {Promise<readonly Conversation[]>}
+   */
     listConversations(params?: ConversationListParams): Promise<readonly Conversation[]>;
+    /**
+   * @param {string} conversationId
+   * @param {{ readonly before?: string; readonly limit?: number }} [params]
+   * @returns {Promise<readonly ConversationMessage[]>}
+   */
     listMessages(conversationId: string, params?: {
         readonly before?: string;
         readonly limit?: number;
     }): Promise<readonly ConversationMessage[]>;
+    /**
+   * @param {NotificationListParams} [params]
+   * @returns {Promise<readonly Notification[]>}
+   */
     listNotifications(params?: NotificationListParams): Promise<readonly Notification[]>;
+    /**
+   * @param {string} notificationId
+   * @returns {Promise<void>}
+   */
     markNotificationRead(notificationId: string, readAt?: string): Promise<void>;
+    #private;
 }
+export type Conversation = import("@econ-v1/ports").Conversation;
+export type ConversationListParams = import("@econ-v1/ports").ConversationListParams;
+export type ConversationLogDelta = import("@econ-v1/ports").ConversationLogDelta;
+export type ConversationMessage = import("@econ-v1/ports").ConversationMessage;
+export type ConversationRepository = import("@econ-v1/ports").ConversationRepository;
+export type Notification = import("@econ-v1/ports").Notification;
+export type NotificationListParams = import("@econ-v1/ports").NotificationListParams;
+export type NotificationRepository = import("@econ-v1/ports").NotificationRepository;
+export type OutboxRecord = import("@econ-v1/ports").OutboxRecord;
+export type OutboxRepository = import("@econ-v1/ports").OutboxRepository;
+export type RepositoryEvent = import("@econ-v1/ports").RepositoryEvent;
+export type SendMessageInput = {
+    readonly body: string;
+    readonly conversationId: string;
+    readonly idempotencyKey: string;
+    readonly messageId?: string;
+    readonly senderId: string;
+};
+export type ConversationServiceOptions = {
+    readonly id: () => string;
+    readonly now?: () => string;
+};
 export type ConversationRepositoryWrite = RepositoryEvent;
 //# sourceMappingURL=conversation-service.d.ts.map

package/dist/services/conversation-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"conversation-service.d.ts","sourceRoot":"","sources":["../../src/services/conversation-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,EAEtB,gBAAgB,EAChB,eAAe,EAChB,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,0BAA0B;IACzC,sFAAsF;IACtF,QAAQ,CAAC,EAAE,EAAE,MAAM,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED,qBAAa,mBAAmB;;gBAQ5B,YAAY,EAAE;QACZ,QAAQ,CAAC,aAAa,EAAE,sBAAsB,CAAC;QAC/C,QAAQ,CAAC,aAAa,EAAE,sBAAsB,CAAC;QAC/C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;KACnC,EACD,OAAO,EAAE,0BAA0B;IAS/B,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAmClE,UAAU,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAetD,kBAAkB,CAAC,KAAK,EAAE;QAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;KACnC,GAAG,OAAO,CAAC,IAAI,CAAC;IAQX,WAAW,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAStH,iBAAiB,CAAC,MAAM,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IAIpF,YAAY,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC;IAI7I,iBAAiB,CAAC,MAAM,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IAIpF,oBAAoB,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,SAAc,GAAG,OAAO,CAAC,IAAI,CAAC;CAIxF;AAMD,MAAM,MAAM,2BAA2B,GAAG,eAAe,CAAC"}
+{"version":3,"file":"conversation-service.d.ts","sourceRoot":"","sources":["../../src/services/conversation-service.js"],"names":[],"mappings":"AAEA;;GAEG;AACH;;GAEG;AACH;;GAEG;AACH;;GAEG;AACH;;GAEG;AACH;;GAEG;AACH;;GAEG;AACH;;GAEG;AACH;;GAEG;AACH;;GAEG;AACH;;GAEG;AACH;;GAEG;AACH;;GAEG;AACH;;GAEG;AACH;IA0BI;;;KAGC;IACD,0BAHS;QAAE,QAAQ,CAAC,aAAa,EAAE,sBAAsB,CAAC;QAAC,QAAQ,CAAC,aAAa,EAAE,sBAAsB,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;KAAE,WACtI,0BAA0B,EAQlC;IACD;;;KAGC;IACD,mBAHS,gBAAgB,GACd,OAAO,CAAC,mBAAmB,CAAC,CAqCtC;IACD;;;KAGC;IACD,kBAHS,oBAAoB,GAClB,OAAO,CAAC,IAAI,CAAC,CAevB;IACD;;;KAGC;IACD,0BAHS;QAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;KAAE,GAClG,OAAO,CAAC,IAAI,CAAC,CAQvB;IACD;;;KAGC;IACD,mBAHS;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GACjF,OAAO,CAAC,IAAI,CAAC,CASvB;IACD;;;KAGC;IACD,2BAHS,sBAAsB,GACpB,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC,CAI1C;IACD;;;;KAIC;IACD,6BAJS,MAAM,WACN;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACnD,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAIjD;IACD;;;KAGC;IACD,2BAHS,sBAAsB,GACpB,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC,CAI1C;IACD;;;KAGC;IACD,qCAHS,MAAM,oBACJ,OAAO,CAAC,IAAI,CAAC,CAKvB;;CACJ;2BA7LY,OAAO,gBAAgB,EAAE,YAAY;qCAGrC,OAAO,gBAAgB,EAAE,sBAAsB;mCAG/C,OAAO,gBAAgB,EAAE,oBAAoB;kCAG7C,OAAO,gBAAgB,EAAE,mBAAmB;qCAG5C,OAAO,gBAAgB,EAAE,sBAAsB;2BAG/C,OAAO,gBAAgB,EAAE,YAAY;qCAGrC,OAAO,gBAAgB,EAAE,sBAAsB;qCAG/C,OAAO,gBAAgB,EAAE,sBAAsB;2BAG/C,OAAO,gBAAgB,EAAE,YAAY;+BAGrC,OAAO,gBAAgB,EAAE,gBAAgB;8BAGzC,OAAO,gBAAgB,EAAE,eAAe;+BAGxC;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAAE;yCAGpJ;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAAE;0CAG3D,eAAe"}

package/dist/services/conversation-sync.d.ts

@@ -1,7 +1,11 @@
-import type { ConversationLogDelta } from "../models/conversation.js";
-import type { SyncDeltaContext } from "../models/sync.js";
-import { LogSync } from "./sync/log-sync.js";
-import type { ConversationService } from "./conversation-service.js";
-export declare function createConversationLogSync(service: Pick<ConversationService, "applyDelta">): LogSync<ConversationLogDelta>;
+/**
+ * @param {Pick<ConversationService, "applyDelta">} service
+ * @returns {LogSync<ConversationLogDelta>}
+ */
+export function createConversationLogSync(service: Pick<ConversationService, "applyDelta">): LogSync<ConversationLogDelta>;
+export type ConversationLogDelta = import("../models/conversation.js").ConversationLogDelta;
+export type SyncDeltaContext = import("../models/sync.js").SyncDeltaContext;
+export type ConversationService = import("./conversation-service.js").ConversationService;
 export type ConversationSyncContext = SyncDeltaContext;
+import { LogSync } from "./sync/log-sync.js";
 //# sourceMappingURL=conversation-sync.d.ts.map

package/dist/services/conversation-sync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"conversation-sync.d.ts","sourceRoot":"","sources":["../../src/services/conversation-sync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAErE,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,EAAE,YAAY,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAMzH;AAED,MAAM,MAAM,uBAAuB,GAAG,gBAAgB,CAAC"}
+{"version":3,"file":"conversation-sync.d.ts","sourceRoot":"","sources":["../../src/services/conversation-sync.js"],"names":[],"mappings":"AAeA;;;GAGG;AACH,mDAHW,IAAI,CAAC,mBAAmB,EAAE,YAAY,CAAC,GACrC,OAAO,CAAC,oBAAoB,CAAC,CAUzC;mCAxBY,OAAO,2BAA2B,EAAE,oBAAoB;+BAGxD,OAAO,mBAAmB,EAAE,gBAAgB;kCAG5C,OAAO,2BAA2B,EAAE,mBAAmB;sCAGvD,gBAAgB;wBAEL,oBAAoB"}

package/dist/services/device-boot-state-service.d.ts

@@ -0,0 +1,17 @@
+/** @import { IdentityPort } from "@econ-v1/ports" */
+/** @import { DeviceBootState } from "../models/device-boot-state.js" */
+/**  @typedef {{ readonly identity: Pick<IdentityPort, "loadDelegation" | "loadLifecycle">; readonly now: () => string; }} DeviceBootStateServiceOptions */
+export class DeviceBootStateService {
+    /** @param {DeviceBootStateServiceOptions} options */
+    constructor(options: DeviceBootStateServiceOptions);
+    /** @returns {Promise<DeviceBootState>} */
+    state(): Promise<DeviceBootState>;
+    #private;
+}
+export type DeviceBootStateServiceOptions = {
+    readonly identity: Pick<IdentityPort, "loadDelegation" | "loadLifecycle">;
+    readonly now: () => string;
+};
+import type { DeviceBootState } from "../models/device-boot-state.js";
+import type { IdentityPort } from "@econ-v1/ports";
+//# sourceMappingURL=device-boot-state-service.d.ts.map

package/dist/services/device-boot-state-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-boot-state-service.d.ts","sourceRoot":"","sources":["../../src/services/device-boot-state-service.js"],"names":[],"mappings":"AACA,qDAAqD;AACrD,wEAAwE;AACxE,2JAA2J;AAC3J;IAKI,qDAAqD;IACrD,qBADY,6BAA6B,EAIxC;IACD,0CAA0C;IAC1C,SADc,OAAO,CAAC,eAAe,CAAC,CA6BrC;;CACJ;4CAzCc;IAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,GAAG,eAAe,CAAC,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;CAAE;qCADpF,gCAAgC;kCADnC,gBAAgB"}

package/dist/services/device-cleanup-service.d.ts

@@ -0,0 +1,47 @@
+export class DeviceCleanupService {
+    /** @param {DeviceCleanupServiceOptions} options */
+    constructor(options: DeviceCleanupServiceOptions);
+    /** The live-query-facing read: `undefined` while no ceremony has ever run for the current
+     * generation (nothing requested yet, or `cancel()` cleared it). */
+    state(): DeviceCleanupState | undefined;
+    /**
+     * Opens/resumes the node's one live cleanup session (`client-device.cleanup-request.v1`)
+     * and, if it comes back `pending`, starts the bounded-backoff poll loop. Safe to call again
+     * — each call invalidates whatever poll was previously in flight, matching the ceremony's
+     * original "Ask the owner" re-request behaviour.
+     *
+     * A `requestCleanup()` failure is deliberately NOT caught here: it propagates to the caller
+     * exactly as it did when `pairing-gate.ts` awaited the command directly, so the shell's own
+     * catch (which renders `cleanupState: "failed"` onto the still-locally-held device-limit
+     * card) keeps working unchanged — this service has no base error state to merge it onto.
+     */
+    start(): Promise<{
+        readonly sessionId: string;
+        readonly state: DeviceCleanupState;
+    }>;
+    /**
+     * Cancels any in-flight poll and clears the ceremony state. Called from every point that
+     * used to invalidate the shell's own poll loop: a client change, suspension, `showRevoked()`,
+     * and disconnect (`pairing-gate.ts`'s `client-device.cleanup-cancel.v1` command, fired at
+     * exactly those four points).
+     */
+    cancel(): void;
+    #private;
+}
+export type DelayPort = import("@econ-v1/ports").DelayPort;
+export type DeviceCleanupState = "pending" | "approved" | "declined" | "expired" | "no_candidate" | "not_needed" | "failed";
+export type DeviceCleanupPort = {
+    cleanupStatus: (sessionId: string) => Promise<{
+        readonly state: DeviceCleanupState;
+    }>;
+    requestCleanup: () => Promise<{
+        readonly sessionId: string;
+        readonly state: DeviceCleanupState;
+    }>;
+};
+export type DeviceCleanupServiceOptions = {
+    cleanup: DeviceCleanupPort;
+    delay: Pick<DelayPort, "wait">;
+    publish: (state: DeviceCleanupState | undefined) => void;
+};
+//# sourceMappingURL=device-cleanup-service.d.ts.map

package/dist/services/device-cleanup-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-cleanup-service.d.ts","sourceRoot":"","sources":["../../src/services/device-cleanup-service.js"],"names":[],"mappings":"AAeA;IAaI,mDAAmD;IACnD,qBADY,2BAA2B,EAKtC;IACD;uEACmE;IACnE,wCAEC;IACD;;;;;;;;;;OAUG;IACH;4BA/CuJ,MAAM;wBAAkB,kBAAkB;OA6DhM;IACD;;;;;OAKG;IACH,eAMC;;CAkCJ;wBA9Ga,OAAO,gBAAgB,EAAE,SAAS;iCAClC,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,cAAc,GAAG,YAAY,GAAG,QAAQ;gCAC1F;IAAE,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAA;KAAE,CAAC,CAAC;IAAC,cAAc,EAAE,MAAM,OAAO,CAAC;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAA;KAAE,CAAC,CAAA;CAAE;0CAC5L;IAAE,OAAO,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,CAAC,KAAK,EAAE,kBAAkB,GAAG,SAAS,KAAK,IAAI,CAAA;CAAE"}

package/dist/services/discovery-probe-service.d.ts

@@ -1,60 +1,51 @@
-import type { HomeNodeDialer } from "@econ-v1/ports";
-import type { LanCandidateRefreshService } from "./lan-candidate-refresh-service.js";
 /**
- * The #1815 interim "search the node on the LAN" probe/verify logic — platform-free (no
- * `fetch`, no adapters-web import). Given explicit candidate addresses (manually entered
- * today; a signed bootstrap descriptor's `lan_candidates` in the Phase-2 follow-on), it
- * dials each one through the injected `HomeNodeDialer` (the same port
- * `TransportManager`/`probeLanCandidate` implement) and proves the responder's stable node
- * identity before ever calling it "found" — reachability alone never promotes a candidate
- * (fail-closed, per the umbrella spec's §7/§3).
+ * @param {string} address
+ * @returns {string | undefined}
  */
+export function secureLanOrigin(address: string): string | undefined;
+/** @typedef {"probing" | "reachable" | "verified" | "unreachable"} DiscoveryCandidateStatus */
+/** @typedef {{ readonly displayName: string, readonly maskedNodeId: string }} DiscoveryFoundNode */
+/** @typedef {{ readonly address: string, readonly node?: DiscoveryFoundNode, readonly status: DiscoveryCandidateStatus }} DiscoveryCandidateRow */
+/** @typedef {{ readonly friendly_name?: unknown, readonly node_id?: unknown }} DiscoveryNodeIdentityWire */
+/** @typedef {{ readonly dialer: HomeNodeDialer, readonly onChange?: (rows: readonly DiscoveryCandidateRow[]) => void, readonly refresh: Pick<LanCandidateRefreshService, "refresh"> }} DiscoveryProbeServiceOptions */
+export class DiscoveryProbeService {
+    /** @param {DiscoveryProbeServiceOptions} options */
+    constructor(options: DiscoveryProbeServiceOptions);
+    /** @returns {readonly DiscoveryCandidateRow[]} */
+    snapshot(): readonly DiscoveryCandidateRow[];
+    /**
+     * @param {readonly string[]} addresses
+     * @returns {Promise<readonly DiscoveryCandidateRow[]>}
+     */
+    probe(addresses: readonly string[]): Promise<readonly DiscoveryCandidateRow[]>;
+    /**
+     * @param {string} address
+     * @returns {Promise<void>}
+     */
+    promote(address: string): Promise<void>;
+    #private;
+}
+export type HomeNodeCandidate = import("@econ-v1/ports").HomeNodeCandidate;
+export type HomeNodeClient = import("@econ-v1/ports").HomeNodeClient;
+export type HomeNodeDialer = import("@econ-v1/ports").HomeNodeDialer;
+export type LanCandidateRefreshService = import("./lan-candidate-refresh-service.js").LanCandidateRefreshService;
 export type DiscoveryCandidateStatus = "probing" | "reachable" | "verified" | "unreachable";
-export interface DiscoveryFoundNode {
+export type DiscoveryFoundNode = {
     readonly displayName: string;
     readonly maskedNodeId: string;
-}
-export interface DiscoveryCandidateRow {
+};
+export type DiscoveryCandidateRow = {
     readonly address: string;
     readonly node?: DiscoveryFoundNode;
     readonly status: DiscoveryCandidateStatus;
-}
-/** The subset of `GET /api/v2/node/metadata`'s wire shape identity-proof reads. */
-export interface DiscoveryNodeIdentityWire {
+};
+export type DiscoveryNodeIdentityWire = {
     readonly friendly_name?: unknown;
     readonly node_id?: unknown;
-}
-export interface DiscoveryProbeServiceOptions {
+};
+export type DiscoveryProbeServiceOptions = {
     readonly dialer: HomeNodeDialer;
-    /** Notified with the full current snapshot after every candidate status transition. */
     readonly onChange?: (rows: readonly DiscoveryCandidateRow[]) => void;
-    /**
-     * Persists a promoted candidate as the device's remembered home-node connection
-     * metadata. Reused rather than reimplemented — its `refresh()` already performs the
-     * same identity-proof read (`nodeMetadataCandidates` throws on a missing node id) this
-     * service uses for `probe()`, so promotion re-proves identity fail-closed too.
-     */
     readonly refresh: Pick<LanCandidateRefreshService, "refresh">;
-}
-export declare class DiscoveryProbeService {
-    #private;
-    constructor(options: DiscoveryProbeServiceOptions);
-    snapshot(): readonly DiscoveryCandidateRow[];
-    /** Probes every address in parallel, replacing the previous candidate set. */
-    probe(addresses: readonly string[]): Promise<readonly DiscoveryCandidateRow[]>;
-    /**
-     * Promotes a previously verified candidate as the device's home-node route. Fail-closed:
-     * throws (never silently accepts) unless `probe()` most recently reported this exact
-     * address as `"verified"` — "continue anyway" on an unverified or stale candidate is not
-     * offered.
-     */
-    promote(address: string): Promise<void>;
-}
-/**
- * Normalizes a user-typed (or metadata-sourced) LAN address into a strict HTTPS origin —
- * the shape `probeLanCandidate`/`secureOrigin` (`@econ-v1/adapters-web`) require — or
- * `undefined` if it is not a well-formed host[:port]. Mirrors
- * `peer-directory-service.ts`'s `toSecureAddress`.
- */
-export declare function secureLanOrigin(address: string): string | undefined;
+};
 //# sourceMappingURL=discovery-probe-service.d.ts.map

package/dist/services/discovery-probe-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"discovery-probe-service.d.ts","sourceRoot":"","sources":["../../src/services/discovery-probe-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAqC,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGxF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAErF;;;;;;;;GAQG;AAEH,MAAM,MAAM,wBAAwB,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa,CAAC;AAE5F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C;AAED,mFAAmF;AACnF,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,uFAAuF;IACvF,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,qBAAqB,EAAE,KAAK,IAAI,CAAC;IACrE;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,0BAA0B,EAAE,SAAS,CAAC,CAAC;CAC/D;AAED,qBAAa,qBAAqB;;gBAOpB,OAAO,EAAE,4BAA4B;IAMjD,QAAQ,IAAI,SAAS,qBAAqB,EAAE;IAI5C,8EAA8E;IACxE,KAAK,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC;IAUpF;;;;;OAKG;IACG,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAkE9C;AAiBD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAUnE"}
+{"version":3,"file":"discovery-probe-service.d.ts","sourceRoot":"","sources":["../../src/services/discovery-probe-service.js"],"names":[],"mappings":"AAqLA;;;GAGG;AACH,yCAHW,MAAM,GACJ,MAAM,GAAG,SAAS,CAY9B;AAzLD,+FAA+F;AAC/F,oGAAoG;AACpG,mJAAmJ;AACnJ,4GAA4G;AAC5G,uNAAuN;AAEvN;IAWE,oDAAoD;IACpD,qBADY,4BAA4B,EAKvC;IAED,kDAAkD;IAClD,YADc,SAAS,qBAAqB,EAAE,CAG7C;IAED;;;OAGG;IACH,iBAHW,SAAS,MAAM,EAAE,GACf,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAUrD;IAED;;;OAGG;IACH,iBAHW,MAAM,GACJ,OAAO,CAAC,IAAI,CAAC,CAYzB;;CA6EF;gCA9Ia,OAAO,gBAAgB,EAAE,iBAAiB;6BAC1C,OAAO,gBAAgB,EAAE,cAAc;6BACvC,OAAO,gBAAgB,EAAE,cAAc;yCACvC,OAAO,oCAAoC,EAAE,0BAA0B;uCAKvE,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa;iCACpD;IAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE;oCAC/D;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAA;CAAE;wCAC3G;IAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE;2CAChE;IAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,qBAAqB,EAAE,KAAK,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,0BAA0B,EAAE,SAAS,CAAC,CAAA;CAAE"}

package/dist/services/gossip-service.d.ts

@@ -1,18 +1,33 @@
-import type { PeerTransportPort } from "@econ-v1/ports";
-import { PeerDirectoryService, type PeerAdvertisement } from "./peer-directory-service.js";
-declare const GOSSIP_VERSION = 1;
-export interface GossipAdvertisement extends PeerAdvertisement {
-    readonly version: typeof GOSSIP_VERSION;
-}
-export interface GossipServiceOptions {
-    readonly directory: PeerDirectoryService;
-    readonly transport: PeerTransportPort;
-}
-export declare class GossipService {
-    #private;
+export class GossipService {
+    /**
+   * @param {GossipServiceOptions} options
+   */
     constructor(options: GossipServiceOptions);
+    /**
+   * @param {string} topic
+   * @param {PeerAdvertisement} advertisement
+   * @returns {Promise<void>}
+   */
     publishAdvertisement(topic: string, advertisement: PeerAdvertisement): Promise<void>;
-    advertisements(topic: string, signal?: AbortSignal): AsyncIterable<GossipAdvertisement>;
+    /**
+   * @param {string} topic
+   * @param {AbortSignalPort} [signal]
+   * @returns {AsyncIterable<GossipAdvertisement>}
+   */
+    advertisements(topic: string, signal?: AbortSignalPort): AsyncIterable<GossipAdvertisement>;
+    #private;
 }
+export type PeerTransportPort = import("@econ-v1/ports").PeerTransportPort;
+export type AbortSignalPort = import("./abort-signal.js").AbortSignalPort;
+export type PeerAdvertisement = import("./peer-directory-service.js").PeerAdvertisement;
+export type GossipAdvertisement = PeerAdvertisement & {
+    readonly version: typeof GOSSIP_VERSION;
+};
+export type GossipServiceOptions = {
+    readonly directory: PeerDirectoryService;
+    readonly transport: PeerTransportPort;
+};
+declare const GOSSIP_VERSION: 1;
+import { PeerDirectoryService } from "./peer-directory-service.js";
 export {};
 //# sourceMappingURL=gossip-service.d.ts.map

package/dist/services/gossip-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gossip-service.d.ts","sourceRoot":"","sources":["../../src/services/gossip-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,OAAO,EAEL,oBAAoB,EACpB,KAAK,iBAAiB,EACvB,MAAM,6BAA6B,CAAC;AAErC,QAAA,MAAM,cAAc,IAAI,CAAC;AAEzB,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D,QAAQ,CAAC,OAAO,EAAE,OAAO,cAAc,CAAC;CACzC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;CACvC;AAED,qBAAa,aAAa;;gBAIZ,OAAO,EAAE,oBAAoB;IAKnC,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnF,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC,mBAAmB,CAAC;CAW/F"}
+{"version":3,"file":"gossip-service.d.ts","sourceRoot":"","sources":["../../src/services/gossip-service.js"],"names":[],"mappings":"AAoBA;IAWI;;KAEC;IACD,qBAFS,oBAAoB,EAK5B;IACD;;;;KAIC;IACD,4BAJS,MAAM,iBACN,iBAAiB,GACf,OAAO,CAAC,IAAI,CAAC,CAOvB;IACD;;;;KAIC;IACD,sBAJS,MAAM,WACN,eAAe,GACb,aAAa,CAAC,mBAAmB,CAAC,CAc5C;;CACJ;gCAhEY,OAAO,gBAAgB,EAAE,iBAAiB;8BAG1C,OAAO,mBAAmB,EAAE,eAAe;gCAG3C,OAAO,6BAA6B,EAAE,iBAAiB;kCAGvD,iBAAiB,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,cAAc,CAAC;CAAE;mCAGhE;IAAE,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;CAAE;AAIjG,8BAAuB,CAAC,CAAC;qCAFqC,6BAA6B"}

package/dist/services/invite-redemption-service.d.ts

@@ -0,0 +1,43 @@
+/** @typedef {import('@econ-v1/ports').HomeNodeClient} HomeNodeClient */
+export class InviteRedemptionService {
+    /**
+     * @param {InviteRedemptionServiceOptions} options
+     */
+    constructor(options: InviteRedemptionServiceOptions);
+    /**
+     * @param {string} code
+     * @returns {Promise<InviteRedemptionOutcome>}
+     */
+    redeem(code: string): Promise<InviteRedemptionOutcome>;
+    #private;
+}
+export type HomeNodeClient = import("@econ-v1/ports").HomeNodeClient;
+/**
+ * Step 11's real action: redeem an invitation code against the node's PUBLIC
+ * `POST /api/v2/invite/redeem` (`core/adapters-network/src/http/server/invite.rs`), which
+ * takes `{ code }` or `{ token }` and needs no authentication — deliberately, because at step
+ * 11 the browser has no session at all.
+ *
+ * The response's `receiver_name` is the name the INVITER registered for this person. Prefilling
+ * step 12's display name with it (and locking it, see `OnboardingFlowService`) is what makes
+ * the invitation meaningful rather than decorative: the person who was invited as "Ada
+ * Lovelace" shows up on the inviter's node as Ada Lovelace. It is null for legacy
+ * token-shaped invites, which is a normal, non-error case.
+ *
+ * Outcomes are closed and text-free. `"rejected"` covers expired, already-used, unknown and
+ * malformed codes alike — the node's own message would tell an attacker which of those it was.
+ */
+export type InviteRedemptionOutcome = {
+    readonly kind: "redeemed";
+    readonly receiverName: string | undefined;
+} | {
+    readonly kind: "rejected";
+};
+export type InviteRedemptionServiceOptions = {
+    node: Pick<HomeNodeClient, "invoke">;
+};
+export type InviteRedeemWire = {
+    ok?: unknown;
+    receiver_name?: unknown;
+};
+//# sourceMappingURL=invite-redemption-service.d.ts.map

package/dist/services/invite-redemption-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite-redemption-service.d.ts","sourceRoot":"","sources":["../../src/services/invite-redemption-service.js"],"names":[],"mappings":"AACA,wEAAwE;AACxE;IAKE;;OAEG;IACH,qBAFW,8BAA8B,EAIxC;IACD;;;OAGG;IACH,aAHW,MAAM,GACJ,OAAO,CAAC,uBAAuB,CAAC,CAoB5C;;CACF;6BAnCa,OAAO,gBAAgB,EAAE,cAAc;;;;;;;;;;;;;;;;sCAkDtC;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAChF;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE;;UAItB,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC;;;SAI9B,OAAO;oBACP,OAAO"}

package/dist/services/lan-candidate-refresh-service.d.ts

@@ -1,11 +1,26 @@
-import type { HomeNodeCandidate, HomeNodeClient, IdentityPort } from "@econ-v1/ports";
-export interface LanCandidateRefreshServiceOptions {
-    readonly identity: IdentityPort;
-    readonly now?: () => string;
-}
-export declare class LanCandidateRefreshService {
-    #private;
+export class LanCandidateRefreshService {
+    /** @param {LanCandidateRefreshServiceOptions} options */
     constructor(options: LanCandidateRefreshServiceOptions);
+    /**
+     * @param {HomeNodeClient} home
+     * @returns {Promise<readonly HomeNodeCandidate[]>}
+     */
     refresh(home: HomeNodeClient): Promise<readonly HomeNodeCandidate[]>;
+    #private;
 }
+export type DeviceConnectionMetadata = import("@econ-v1/ports").DeviceConnectionMetadata;
+export type HomeNodeCandidate = import("@econ-v1/ports").HomeNodeCandidate;
+export type HomeNodeClient = import("@econ-v1/ports").HomeNodeClient;
+export type HttpHomeNodeCandidate = import("@econ-v1/ports").HttpHomeNodeCandidate;
+export type IdentityPort = import("@econ-v1/ports").IdentityPort;
+export type ClientTransportCandidateWire = {
+    readonly version: 1;
+    readonly node_id: string;
+    readonly wan_origin: string;
+    readonly lan_origins: readonly string[];
+};
+export type LanCandidateRefreshServiceOptions = {
+    readonly identity: IdentityPort;
+    readonly now?: () => string;
+};
 //# sourceMappingURL=lan-candidate-refresh-service.d.ts.map

package/dist/services/lan-candidate-refresh-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lan-candidate-refresh-service.d.ts","sourceRoot":"","sources":["../../src/services/lan-candidate-refresh-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,iBAAiB,EACjB,cAAc,EACd,YAAY,EACb,MAAM,gBAAgB,CAAC;AAWxB,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED,qBAAa,0BAA0B;;gBAIzB,OAAO,EAAE,iCAAiC;IAKhD,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC;CAmB3E"}
+{"version":3,"file":"lan-candidate-refresh-service.d.ts","sourceRoot":"","sources":["../../src/services/lan-candidate-refresh-service.js"],"names":[],"mappings":"AAgBA;IAME,yDAAyD;IACzD,qBADY,iCAAiC,EAI5C;IAED;;;OAGG;IACH,cAHW,cAAc,GACZ,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CA0BjD;;CACF;uCAvDa,OAAO,gBAAgB,EAAE,wBAAwB;gCACjD,OAAO,gBAAgB,EAAE,iBAAiB;6BAC1C,OAAO,gBAAgB,EAAE,cAAc;oCACvC,OAAO,gBAAgB,EAAE,qBAAqB;2BAC9C,OAAO,gBAAgB,EAAE,YAAY;2CAErC;IAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE;gDACvH;IAAE,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAAE"}

package/dist/services/lcd-decision-service.d.ts

@@ -0,0 +1,58 @@
+/** @typedef {import('@econ-v1/ports').HomeNodeClient} HomeNodeClient */
+export class LcdDecisionService {
+    /**
+     * @param {LcdDecisionServiceOptions} options
+     */
+    constructor(options: LcdDecisionServiceOptions);
+    /**
+     * @param {string} operationHash
+     * @returns {Promise<LcdDecisionOutcome>}
+     */
+    confirm(operationHash: string): Promise<LcdDecisionOutcome>;
+    /**
+     * @param {string} operationHash
+     * @returns {Promise<LcdDecisionOutcome>}
+     */
+    reject(operationHash: string): Promise<LcdDecisionOutcome>;
+    #private;
+}
+export type HomeNodeClient = import("@econ-v1/ports").HomeNodeClient;
+/**
+ * Forwards an LCD-pane tap to the NODE's own public decision routes — the same
+ * `onboarding.device.confirm` / `…reject` capability a physical tap on the hardware drives
+ * (`core/adapters-network/src/http/server/device_management/proxy.rs:888-975`). Both routes
+ * are in `public_routes()` and need no JWT, which is exactly right: at step 10 the browser has
+ * no session at all, so this must be constructed over `prePairingNode`.
+ *
+ * WHAT THIS CLASS IS NOT. It is not an approval. `LcdDecisionOutcome` has two values and
+ * neither of them is "approved": `"forwarded"` means the node accepted the *request*, not
+ * that the claim is confirmed. Confirmation reaches the flow through exactly one path —
+ * `OwnerClaimService.awaitConfirmation`'s poll of `GET /node/operation-status/{hash}` — and
+ * nothing here shortcuts it. That is the property design §8.3 exists to protect: the node is
+ * the authority, and a browser tap can at most ask.
+ *
+ * WHY THE FAILURE SIDE IS ONE VALUE. `enforce_physical_presence` answers 403 when a hardware
+ * LCD is present and the pending operation is an `onboard` (the physical tap is then the only
+ * path), and 503 when it cannot determine presence. Both would ideally be distinguishable
+ * here — but `AppError::Forbidden` and `AppError::ServiceUnavailable` do NOT emit the node's
+ * `{ success: false, error: { code } }` envelope (`core/foundation/src/error.rs:145-148`,
+ * `:252-254`), so `PrePairingHomeNodeClient` collapses both — and a genuine network failure —
+ * into `TransportError{ code: "unavailable" }`. Inventing a distinction the wire does not
+ * carry would be a lie, and the pane's behaviour is identical for all three anyway: render
+ * the press, say "waiting for the node", keep waiting. The pane learns whether a hardware
+ * display exists from `OwnerClaimPrepareOutcome.lcdHardware`, which the node states outright
+ * at prepare time — see `OnboardingFlowService.lcdScreen()`'s `physicalTapOnly`.
+ *
+ * The optional `setup_token` field on both requests is deliberately never sent: it is read
+ * from a file on the node's own filesystem, which a browser cannot do. A headless node with
+ * the code-match gate armed therefore answers `"not-accepted"` here, and the operator confirms
+ * through a surface that can read the token. Recorded as a named gap, not papered over.
+ */
+export type LcdDecisionOutcome = "forwarded" | "not-accepted";
+export type LcdDecisionServiceOptions = {
+    /**
+     * MUST be the pre-pairing client: step 10 runs on an unclaimed node with no session.
+     */
+    node: Pick<HomeNodeClient, "invoke">;
+};
+//# sourceMappingURL=lcd-decision-service.d.ts.map

package/dist/services/lcd-decision-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lcd-decision-service.d.ts","sourceRoot":"","sources":["../../src/services/lcd-decision-service.js"],"names":[],"mappings":"AACA,wEAAwE;AACxE;IAKE;;OAEG;IACH,qBAFW,yBAAyB,EAInC;IACD;;;OAGG;IACH,uBAHW,MAAM,GACJ,OAAO,CAAC,kBAAkB,CAAC,CAOvC;IACD;;;OAGG;IACH,sBAHW,MAAM,GACJ,OAAO,CAAC,kBAAkB,CAAC,CAOvC;;CAuBF;6BAtDa,OAAO,gBAAgB,EAAE,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAqFxC,WAAW,GAAG,cAAc;;;;;UAI3B,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC"}

package/dist/services/onboarding-checkpoint-store.d.ts

@@ -0,0 +1,54 @@
+/** The default for compositions with no browser storage (tests, and the pre-existing
+ * `composition-root.test.ts` wiring): a real port whose slot simply dies with the process.
+ * @returns {OnboardingCheckpointStoragePort}
+ */
+export function createInMemoryOnboardingCheckpointStorage(): OnboardingCheckpointStoragePort;
+/** @typedef {import('@econ-v1/ports').OnboardingCheckpointStoragePort} OnboardingCheckpointStoragePort */
+export class OnboardingCheckpointStore {
+    /**
+     * @param {OnboardingCheckpointStoreOptions} options
+     */
+    constructor(options: OnboardingCheckpointStoreOptions);
+    /**
+     * @returns {void}
+     */
+    clear(): void;
+    /**
+     * @returns {OnboardingCheckpoint | undefined}
+     */
+    read(): OnboardingCheckpoint | undefined;
+    /**
+     * @param {OnboardingCheckpoint} checkpoint
+     * @returns {void}
+     */
+    write(checkpoint: OnboardingCheckpoint): void;
+    #private;
+}
+export type OnboardingCheckpointStoragePort = import("@econ-v1/ports").OnboardingCheckpointStoragePort;
+/**
+ * The onboarding flow's resume point (design §6.3).
+ *
+ * SECURITY — this type is the whole reason the store exists rather than a bare
+ * `JSON.stringify(state)`: it names EXACTLY the fields the step table's `resume` column
+ * allows, and `write()` copies field-by-field from this allow-list. A caller cannot smuggle a
+ * Wi-Fi password (or an invitation code, or the match-code digits) into durable storage by
+ * spreading extra properties into the argument — the extras are dropped before serialisation.
+ * If a Wi-Fi operation must be retried after a reload the owner re-enters the password; the
+ * step is re-shown, never replayed.
+ */
+export type OnboardingCheckpoint = {
+    /**
+     * ISO instant after which the in-flight operation is dead. A checkpoint past its own
+     * deadline is discarded on read so a stale run cannot strand a later one mid-flow.
+     */
+    deadline?: string;
+    operationHash?: string;
+    stepId: string;
+    targetSsid?: string;
+    wifiOperationId?: string;
+};
+export type OnboardingCheckpointStoreOptions = {
+    now: () => string;
+    storage: OnboardingCheckpointStoragePort;
+};
+//# sourceMappingURL=onboarding-checkpoint-store.d.ts.map