@econ-v1/domain 7.5.19 → 7.5.21

package/dist/models/device-boot-state.d.ts

@@ -8,5 +8,9 @@ export type DeviceBootState = {
     readonly delegationExpiresAt: string;
 } | {
     readonly kind: "revoked";
+} | {
+    readonly detectedAt?: string;
+    readonly kind: "key-unusable";
+    readonly reason?: string;
 };
 //# sourceMappingURL=device-boot-state.d.ts.map

package/dist/models/device-boot-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"device-boot-state.d.ts","sourceRoot":"","sources":["../../src/models/device-boot-state.js"],"names":[],"mappings":"8BACiB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE"}
+{"version":3,"file":"device-boot-state.d.ts","sourceRoot":"","sources":["../../src/models/device-boot-state.js"],"names":[],"mappings":"8BACiB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE"}

package/dist/services/device-boot-state-service.d.ts

@@ -1,6 +1,6 @@
-/** @import { IdentityPort } from "@econ-v1/ports" */
+/** @import { IdentityLifecycle, IdentityPort } from "@econ-v1/ports" */
 /** @import { DeviceBootState } from "../models/device-boot-state.js" */
-/**  @typedef {{ readonly identity: Pick<IdentityPort, "loadDelegation" | "loadLifecycle">; readonly now: () => string; }} DeviceBootStateServiceOptions */
+/**  @typedef {{ readonly identity: Pick<IdentityPort, "loadDelegation" | "loadLifecycle" | "loadKeyInspectionFailure">; readonly now: () => string; }} DeviceBootStateServiceOptions */
 export class DeviceBootStateService {
     /** @param {DeviceBootStateServiceOptions} options */
     constructor(options: DeviceBootStateServiceOptions);
@@ -9,7 +9,7 @@ export class DeviceBootStateService {
     #private;
 }
 export type DeviceBootStateServiceOptions = {
-    readonly identity: Pick<IdentityPort, "loadDelegation" | "loadLifecycle">;
+    readonly identity: Pick<IdentityPort, "loadDelegation" | "loadLifecycle" | "loadKeyInspectionFailure">;
     readonly now: () => string;
 };
 import type { DeviceBootState } from "../models/device-boot-state.js";

package/dist/services/device-boot-state-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"device-boot-state-service.d.ts","sourceRoot":"","sources":["../../src/services/device-boot-state-service.js"],"names":[],"mappings":"AACA,qDAAqD;AACrD,wEAAwE;AACxE,2JAA2J;AAC3J;IAKI,qDAAqD;IACrD,qBADY,6BAA6B,EAIxC;IACD,0CAA0C;IAC1C,SADc,OAAO,CAAC,eAAe,CAAC,CA6BrC;;CACJ;4CAzCc;IAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,GAAG,eAAe,CAAC,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;CAAE;qCADpF,gCAAgC;kCADnC,gBAAgB"}
+{"version":3,"file":"device-boot-state-service.d.ts","sourceRoot":"","sources":["../../src/services/device-boot-state-service.js"],"names":[],"mappings":"AACA,wEAAwE;AACxE,wEAAwE;AACxE,wLAAwL;AACxL;IAKI,qDAAqD;IACrD,qBADY,6BAA6B,EAIxC;IACD,0CAA0C;IAC1C,SADc,OAAO,CAAC,eAAe,CAAC,CAiDrC;;CACJ;4CA7Dc;IAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,GAAG,eAAe,GAAG,0BAA0B,CAAC,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;CAAE;qCADjH,gCAAgC;kCADhB,gBAAgB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@econ-v1/domain",
-  "version": "7.5.19",
+  "version": "7.5.21",
   "description": "Platform-neutral domain contracts and errors for Node clients",
   "license": "MIT OR Apache-2.0",
   "author": "Node contributors",
@@ -57,6 +57,6 @@
     "access": "public"
   },
   "dependencies": {
-    "@econ-v1/ports": "7.5.19"
+    "@econ-v1/ports": "7.5.21"
   }
 }

package/src/models/device-boot-state.js

@@ -1,3 +1,3 @@
 // @ts-check
-/**  @typedef {| { readonly kind: "unpaired" } | { readonly kind: "paired"; readonly delegationExpiresAt: string } | { readonly kind: "paired-expired"; readonly delegationExpiresAt: string } | { readonly kind: "revoked" }} DeviceBootState */
+/**  @typedef {| { readonly kind: "unpaired" } | { readonly kind: "paired"; readonly delegationExpiresAt: string } | { readonly kind: "paired-expired"; readonly delegationExpiresAt: string } | { readonly kind: "revoked" } | { readonly detectedAt?: string; readonly kind: "key-unusable"; readonly reason?: string }} DeviceBootState */
 export {};

package/src/services/device-boot-state-service.js

@@ -1,7 +1,7 @@
 // @ts-check
-/** @import { IdentityPort } from "@econ-v1/ports" */
+/** @import { IdentityLifecycle, IdentityPort } from "@econ-v1/ports" */
 /** @import { DeviceBootState } from "../models/device-boot-state.js" */
-/**  @typedef {{ readonly identity: Pick<IdentityPort, "loadDelegation" | "loadLifecycle">; readonly now: () => string; }} DeviceBootStateServiceOptions */
+/**  @typedef {{ readonly identity: Pick<IdentityPort, "loadDelegation" | "loadLifecycle" | "loadKeyInspectionFailure">; readonly now: () => string; }} DeviceBootStateServiceOptions */
 export class DeviceBootStateService {
     /** @type {DeviceBootStateServiceOptions["identity"]} */
     #identity;
@@ -14,7 +14,7 @@ export class DeviceBootStateService {
     }
     /** @returns {Promise<DeviceBootState>} */
     async state() {
-        /** @type {"active" | "revoked" | undefined} */
+        /** @type {IdentityLifecycle | undefined} */
         let lifecycle;
         try {
             lifecycle = await this.#identity.loadLifecycle?.();
@@ -26,6 +26,26 @@ export class DeviceBootStateService {
         }
         if (lifecycle === "revoked")
             return { kind: "revoked" };
+        if (lifecycle === "unusable") {
+            // The key was quarantined (kept, never purged) on a failed inspection — see
+            // docs/superpowers/plans/2026-10-08-no-silent-device-key-purge.md. Best-effort read
+            // of WHY, mirroring the fail-toward-unpaired discipline above: a diagnostic read
+            // failure must never escalate past "no reason/time to show", since the lifecycle
+            // verdict itself already came back clean.
+            /** @type {Awaited<ReturnType<NonNullable<DeviceBootStateServiceOptions["identity"]["loadKeyInspectionFailure"]>>>} */
+            let diagnostic;
+            try {
+                diagnostic = await this.#identity.loadKeyInspectionFailure?.();
+            }
+            catch {
+                diagnostic = undefined;
+            }
+            return {
+                kind: "key-unusable",
+                ...(diagnostic?.reason === undefined ? {} : { reason: diagnostic.reason }),
+                ...(diagnostic?.detectedAt === undefined ? {} : { detectedAt: diagnostic.detectedAt }),
+            };
+        }
         /** @type {Awaited<ReturnType<IdentityPort["loadDelegation"]>>} */
         let delegation;
         try {