@econ-v1/ports 6.7.0 → 6.10.0

package/dist/network/webrtc-signaling.d.ts

@@ -1,101 +1,85 @@
-import type { CancellationSignal } from "../network.js";
-/**
- * Authenticated WebRTC signaling over HTTPS/WSS (ticket #1824, "N3").
- *
- * iroh-router signaling is explicitly deferred; this is the browser-side
- * contract for the HTTPS/WSS signaling adapter instead. It carries only
- * setup, offer, answer, candidate, restart, and close — never a peer
- * connection or DataChannel. Field names mirror the Rust wire types in
- * `core/adapters-network/src/webrtc_signal/messages.rs` exactly (including
- * snake_case) since both sides serialize the same JSON envelope.
- *
- * `WebRtcHomeNodeClient` (the WebRTC carrier, ticket "N4") depends on this
- * narrow port rather than on any concrete transport, so the signaling
- * transport can change without touching WebRTC connection logic.
- */
-export declare const WEBRTC_SIGNAL_VERSION = 1;
+/** @typedef {import("../network.js").CancellationSignal} CancellationSignal */
+export const WEBRTC_SIGNAL_VERSION: 1;
 /** Maximum serialized size of one signaling WebSocket text frame. */
-export declare const MAX_WEBRTC_SIGNAL_MESSAGE_BYTES: number;
+export const MAX_WEBRTC_SIGNAL_MESSAGE_BYTES: number;
 /** Maximum SDP body size (offer, answer, or restart). */
-export declare const MAX_SDP_BYTES: number;
-export declare const MIN_OFFER_NONCE_BYTES = 16;
-export declare const MAX_OFFER_NONCE_BYTES = 128;
+export const MAX_SDP_BYTES: number;
+export const MIN_OFFER_NONCE_BYTES: 16;
+export const MAX_OFFER_NONCE_BYTES: 128;
 /** Maximum DTLS fingerprint size: `<algorithm> <hex-pairs>`. */
-export declare const MAX_DTLS_FINGERPRINT_BYTES = 200;
+export const MAX_DTLS_FINGERPRINT_BYTES: 200;
 /** Maximum size of one trickle-ICE candidate line. */
-export declare const MAX_ICE_CANDIDATE_BYTES = 1024;
-export declare const MAX_SDP_MID_BYTES = 64;
+export const MAX_ICE_CANDIDATE_BYTES: 1024;
+export const MAX_SDP_MID_BYTES: 64;
 /** Maximum number of trickle-ICE candidates accepted for one bound offer. */
-export declare const MAX_ICE_CANDIDATES_PER_OFFER = 32;
-export declare const MAX_CLOSE_REASON_BYTES = 256;
-export interface WebRtcSignalSetup {
+export const MAX_ICE_CANDIDATES_PER_OFFER: 32;
+export const MAX_CLOSE_REASON_BYTES: 256;
+export type CancellationSignal = import("../network.js").CancellationSignal;
+export type WebRtcSignalSetup = {
     readonly headers: Readonly<Record<string, string>>;
     readonly type: "setup";
     readonly version: number;
-}
-export interface WebRtcOffer {
+};
+export type WebRtcOffer = {
     readonly dtls_fingerprint: string;
     readonly offer_nonce: string;
     readonly sdp: string;
     readonly type: "offer";
     readonly version: number;
-}
-export interface WebRtcAnswer {
+};
+export type WebRtcAnswer = {
     readonly dtls_fingerprint: string;
     readonly offer_nonce: string;
     readonly sdp: string;
     readonly type: "answer";
-}
-export interface WebRtcIceCandidate {
+};
+export type WebRtcIceCandidate = {
     readonly candidate: string;
     readonly offer_nonce: string;
     readonly sdp_mid?: string;
     readonly sdp_mline_index?: number;
     readonly type: "candidate";
-}
-export interface WebRtcRestart {
+};
+export type WebRtcRestart = {
     readonly dtls_fingerprint: string;
     readonly offer_nonce: string;
     readonly previous_offer_nonce: string;
     readonly sdp: string;
     readonly type: "restart";
     readonly version: number;
-}
-export interface WebRtcClose {
+};
+export type WebRtcClose = {
     readonly offer_nonce?: string;
     readonly reason?: string;
     readonly type: "close";
-}
+};
 export type WebRtcSignalMessage = WebRtcAnswer | WebRtcClose | WebRtcIceCandidate | WebRtcOffer | WebRtcRestart | WebRtcSignalSetup;
 /**
- * Browser-side signaling contract. A production implementation opens one
- * authenticated WSS connection, sends the setup frame with the caller's
- * bearer + delegation headers, and maps offer/restart replies to their
- * answers. This is signaling transport only — no peer connection or
+ * Browser-side signaling transport contract. No peer connection or
  * DataChannel is created here.
  */
-export interface WebRtcSignalingPort {
-    close(close?: {
+export type WebRtcSignalingPort = {
+    close: (close?: {
         readonly offer_nonce?: string;
         readonly reason?: string;
-    }): Promise<void>;
-    connect(setupHeaders: Readonly<Record<string, string>>, signal?: CancellationSignal): Promise<void>;
-    sendCandidate(candidate: {
+    }) => Promise<void>;
+    connect: (setupHeaders: Readonly<Record<string, string>>, signal?: CancellationSignal) => Promise<void>;
+    sendCandidate: (candidate: {
         readonly candidate: string;
         readonly offer_nonce: string;
         readonly sdp_mid?: string;
         readonly sdp_mline_index?: number;
-    }): Promise<void>;
-    sendOffer(offer: {
+    }) => Promise<void>;
+    sendOffer: (offer: {
         readonly dtls_fingerprint: string;
         readonly offer_nonce: string;
         readonly sdp: string;
-    }): Promise<WebRtcAnswer>;
-    sendRestart(restart: {
+    }) => Promise<WebRtcAnswer>;
+    sendRestart: (restart: {
         readonly dtls_fingerprint: string;
         readonly offer_nonce: string;
         readonly previous_offer_nonce: string;
         readonly sdp: string;
-    }): Promise<WebRtcAnswer>;
-}
+    }) => Promise<WebRtcAnswer>;
+};
 //# sourceMappingURL=webrtc-signaling.d.ts.map

package/dist/network/webrtc-signaling.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webrtc-signaling.d.ts","sourceRoot":"","sources":["../../src/network/webrtc-signaling.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD;;;;;;;;;;;;;GAaG;AAEH,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,qEAAqE;AACrE,eAAO,MAAM,+BAA+B,QAAY,CAAC;AACzD,yDAAyD;AACzD,eAAO,MAAM,aAAa,QAAY,CAAC;AACvC,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,qBAAqB,MAAM,CAAC;AACzC,gEAAgE;AAChE,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAC9C,sDAAsD;AACtD,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,6EAA6E;AAC7E,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAC/C,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,mBAAmB,GAC3B,YAAY,GACZ,WAAW,GACX,kBAAkB,GAClB,WAAW,GACX,aAAa,GACb,iBAAiB,CAAC;AAEtB;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1F,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpG,aAAa,CAAC,SAAS,EAAE;QACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;KACnC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,SAAS,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1B,WAAW,CAAC,OAAO,EAAE;QACnB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;QACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC3B"}
+{"version":3,"file":"webrtc-signaling.d.ts","sourceRoot":"","sources":["../../src/network/webrtc-signaling.js"],"names":[],"mappings":"AAEA,+EAA+E;AAE/E,oCAAqC,CAAC,CAAC;AAEvC,qEAAqE;AACrE,qDAAyD;AACzD,yDAAyD;AACzD,mCAAuC;AACvC,oCAAqC,EAAE,CAAC;AACxC,oCAAqC,GAAG,CAAC;AACzC,gEAAgE;AAChE,yCAA0C,GAAG,CAAC;AAC9C,sDAAsD;AACtD,sCAAuC,IAAI,CAAC;AAC5C,gCAAiC,EAAE,CAAC;AACpC,6EAA6E;AAC7E,2CAA4C,EAAE,CAAC;AAC/C,qCAAsC,GAAG,CAAC;iCAjB5B,OAAO,eAAe,EAAE,kBAAkB;gCAmB1C;IAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE;0BACxG;IAAE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE;2BAC3I;IAAE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE;iCAClH;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE;4BACtJ;IAAE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE;0BACpL;IAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE;kCACnF,YAAY,GAAG,WAAW,GAAG,kBAAkB,GAAG,WAAW,GAAG,aAAa,GAAG,iBAAiB;;;;;;WAOjG,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC;aACtF,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC;mBAC9F,CAAC,SAAS,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC;eACxJ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,YAAY,CAAC;iBAC3H,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,YAAY,CAAC"}

package/dist/network.d.ts

@@ -1,66 +1,91 @@
-import type { HomeNodeCandidate } from "./network/home-node-candidate.js";
+/** @typedef {import("./network/home-node-candidate.js").HomeNodeCandidate} HomeNodeCandidate */
+/** @typedef {import("./repositories/repository-mutation.js").RepositoryJsonValue} RepositoryJsonValue */
+/** @typedef {"iroh-relay" | "lan-direct" | "lan-webtransport" | "offline" | "wan-direct" | "webrtc-direct"} TransportPath */
+/** @typedef {"lan-direct" | "wan-direct"} HttpTransportPath */
+/** @typedef {"lan-direct" | "lan-webtransport" | "wan-direct"} DirectTransportPath */
+/** @typedef {HomeNodeCandidate & { readonly identityBinding?: "bootstrap", readonly path: HttpTransportPath }} HttpHomeNodeCandidate */
+/** @typedef {{ readonly algorithm: "sha-256", readonly current: string, readonly next: string }} WebTransportCertificateHashes */
+/** @typedef {HomeNodeCandidate & { readonly certificateHashes?: WebTransportCertificateHashes, readonly path: "lan-webtransport" }} WebTransportHomeNodeCandidate */
+/** @typedef {HttpHomeNodeCandidate | WebTransportHomeNodeCandidate} DirectHomeNodeCandidate */
+/** @typedef {"no-network" | "node-unreachable" | "session-required"} TransportOfflineReason */
+/** @typedef {{ readonly changedAt: string, readonly path: "lan-direct" | "lan-webtransport" | "wan-direct" | "iroh-relay" | "webrtc-direct", readonly status: "connected" } | { readonly attempt: number, readonly changedAt: string, readonly path: "offline", readonly status: "connecting" } | { readonly attempt: number, readonly changedAt: string, readonly nextRetryAt: string, readonly path: "offline", readonly status: "reconnecting" } | { readonly changedAt: string, readonly path: "offline", readonly reason?: TransportOfflineReason, readonly status: "offline" }} TransportState */
+/** @typedef {{ readonly headers?: Readonly<Record<string, string>>, readonly operation: string, readonly payload: unknown, readonly responseType?: "blob" | "json" }} HomeNodeRequest */
+/** @typedef {{ readonly cursor?: string, readonly domain: string }} DeltaRequest */
+/** @typedef {{ readonly aborted: boolean }} CancellationSignal */
+export const CAPABILITY_INVOKE_OPERATION: "POST /api/v2/system/capabilities/invoke";
+export type HomeNodeCandidate = import("./network/home-node-candidate.js").HomeNodeCandidate;
+export type RepositoryJsonValue = import("./repositories/repository-mutation.js").RepositoryJsonValue;
 export type TransportPath = "iroh-relay" | "lan-direct" | "lan-webtransport" | "offline" | "wan-direct" | "webrtc-direct";
 export type HttpTransportPath = "lan-direct" | "wan-direct";
-/**
- * The three tiers `TransportManager` (client/domain) selects and dials
- * directly, in priority order: browser-trusted LAN HTTPS, then hash-pinned
- * LAN WebTransport, then WAN HTTPS/WSS (ticket #1823). Distinct from
- * `HttpTransportPath` because a WebTransport candidate is not an HTTP
- * candidate — it carries certificate hashes, not a bearer-auth HTTPS origin.
- */
 export type DirectTransportPath = "lan-direct" | "lan-webtransport" | "wan-direct";
-export interface HttpHomeNodeCandidate extends HomeNodeCandidate {
-    /** Marks the authenticated installation origin used before a home-node trust anchor is known. */
+export type HttpHomeNodeCandidate = HomeNodeCandidate & {
     readonly identityBinding?: "bootstrap";
     readonly path: HttpTransportPath;
-}
-/** SHA-256 certificate hashes bound to one hash-pinned WebTransport candidate. */
-export interface WebTransportCertificateHashes {
+};
+export type WebTransportCertificateHashes = {
     readonly algorithm: "sha-256";
     readonly current: string;
     readonly next: string;
-}
-/**
- * One hash-pinned LAN WebTransport candidate (ticket #1823). `address` is
- * the bare HTTPS origin (e.g. `https://192.0.2.10:4433`); the client-RPC path
- * is appended internally when dialing, matching how the Rust WebTransport
- * adapter is deployed (`core/adapters-network::webtransport`).
- */
-export interface WebTransportHomeNodeCandidate extends HomeNodeCandidate {
-    readonly certificateHashes: WebTransportCertificateHashes;
+};
+export type WebTransportHomeNodeCandidate = HomeNodeCandidate & {
+    readonly certificateHashes?: WebTransportCertificateHashes;
     readonly path: "lan-webtransport";
-}
-/** The union `TransportManager` dials — every candidate on the direct ladder. */
+};
 export type DirectHomeNodeCandidate = HttpHomeNodeCandidate | WebTransportHomeNodeCandidate;
+export type TransportOfflineReason = "no-network" | "node-unreachable" | "session-required";
 export type TransportState = {
     readonly changedAt: string;
     readonly path: "lan-direct" | "lan-webtransport" | "wan-direct" | "iroh-relay" | "webrtc-direct";
     readonly status: "connected";
+} | {
+    readonly attempt: number;
+    readonly changedAt: string;
+    readonly path: "offline";
+    readonly status: "connecting";
+} | {
+    readonly attempt: number;
+    readonly changedAt: string;
+    readonly nextRetryAt: string;
+    readonly path: "offline";
+    readonly status: "reconnecting";
 } | {
     readonly changedAt: string;
     readonly path: "offline";
+    readonly reason?: TransportOfflineReason;
     readonly status: "offline";
 };
-export interface HomeNodeRequest {
+export type HomeNodeRequest = {
     readonly headers?: Readonly<Record<string, string>>;
     readonly operation: string;
     readonly payload: unknown;
-}
-export interface DeltaRequest {
+    readonly responseType?: "blob" | "json";
+};
+export type DeltaRequest = {
     readonly cursor?: string;
     readonly domain: string;
-}
-export interface HomeNodeClient {
-    deltas<T>(request: DeltaRequest): AsyncIterable<T>;
-    invoke<T>(request: HomeNodeRequest): Promise<T>;
-    readonly state: TransportState;
-}
-export interface CancellationSignal {
+};
+export type CancellationSignal = {
     readonly aborted: boolean;
-}
-export interface PeerTransportPort {
-    send(peer: string, payload: Uint8Array, signal?: CancellationSignal): Promise<void>;
-    publish(topic: string, payload: Uint8Array): Promise<void>;
-    subscribe(topic: string, signal?: CancellationSignal): AsyncIterable<Uint8Array>;
-}
+};
+export type AppEventEnvelope = {
+    readonly data: Readonly<Record<string, RepositoryJsonValue>>;
+    readonly instance?: string;
+    readonly resource: string;
+    readonly type: string;
+};
+export type AppEventSubscribeOptions = {
+    readonly resourceId?: string;
+};
+export type AppEventSubscription = () => void;
+export type HomeNodeClient = {
+    deltas: <T>(request: DeltaRequest) => AsyncIterable<T>;
+    invoke: <T>(request: HomeNodeRequest) => Promise<T>;
+    subscribeAppEvents?: (resource: string, listener: (event: AppEventEnvelope) => void, options?: AppEventSubscribeOptions) => AppEventSubscription;
+    readonly state: TransportState;
+};
+export type PeerTransportPort = {
+    send: (peer: string, payload: Uint8Array, signal?: CancellationSignal) => Promise<void>;
+    publish: (topic: string, payload: Uint8Array) => Promise<void>;
+    subscribe: (topic: string, signal?: CancellationSignal) => AsyncIterable<Uint8Array>;
+};
 //# sourceMappingURL=network.d.ts.map

package/dist/network.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../src/network.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAE1E,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,YAAY,GAAG,kBAAkB,GAAG,SAAS,GAAG,YAAY,GAAG,eAAe,CAAC;AAE1H,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,YAAY,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,YAAY,GAAG,kBAAkB,GAAG,YAAY,CAAC;AAEnF,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D,iGAAiG;IACjG,QAAQ,CAAC,eAAe,CAAC,EAAE,WAAW,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;CAClC;AAED,kFAAkF;AAClF,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,6BAA8B,SAAQ,iBAAiB;IACtE,QAAQ,CAAC,iBAAiB,EAAE,6BAA6B,CAAC;IAC1D,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;CACnC;AAED,iFAAiF;AACjF,MAAM,MAAM,uBAAuB,GAAG,qBAAqB,GAAG,6BAA6B,CAAC;AAE5F,MAAM,MAAM,cAAc,GACtB;IACE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,kBAAkB,GAAG,YAAY,GAAG,YAAY,GAAG,eAAe,CAAC;IACjG,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B,GACD;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC;AAEzF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpF,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;CAClF"}
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../src/network.js"],"names":[],"mappings":"AAEA,gGAAgG;AAChG,yGAAyG;AAEzG,6HAA6H;AAC7H,+DAA+D;AAC/D,sFAAsF;AACtF,wIAAwI;AACxI,kIAAkI;AAClI,qKAAqK;AACrK,+FAA+F;AAC/F,+FAA+F;AAC/F,wkBAAwkB;AACxkB,yLAAyL;AACzL,oFAAoF;AACpF,kEAAkE;AAElE,0CAA2C,yCAAyC,CAAC;gCAhBvE,OAAO,kCAAkC,EAAE,iBAAiB;kCAC5D,OAAO,uCAAuC,EAAE,mBAAmB;4BAEnE,YAAY,GAAG,YAAY,GAAG,kBAAkB,GAAG,SAAS,GAAG,YAAY,GAAG,eAAe;gCAC7F,YAAY,GAAG,YAAY;kCAC3B,YAAY,GAAG,kBAAkB,GAAG,YAAY;oCAChD,iBAAiB,GAAG;IAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE;4CAChG;IAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;4CAClF,iBAAiB,GAAG;IAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,6BAA6B,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;CAAE;sCACrH,qBAAqB,GAAG,6BAA6B;qCACrD,YAAY,GAAG,kBAAkB,GAAG,kBAAkB;6BACtD;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,kBAAkB,GAAG,YAAY,GAAG,YAAY,GAAG,eAAe,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;CAAE;8BACviB;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE;2BACvJ;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE;iCACrD;IAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE;+BAI7B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;uCAC9I;IAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE;mCAChC,MAAM,IAAI;6BACV;IAAE,MAAM,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC;IAAC,MAAM,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,kBAAkB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,EAAE,OAAO,CAAC,EAAE,wBAAwB,KAAK,oBAAoB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;CAAE;;UAIjS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC;aACjF,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC;eACrD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,KAAK,aAAa,CAAC,UAAU,CAAC"}

package/dist/offline-readiness.d.ts

@@ -0,0 +1,122 @@
+export type StageCatalogEntry = import("./repositories.js").StageCatalogEntry;
+export type StageManifest = import("./repositories.js").StageManifest;
+export type StageRegistrySnapshot = import("./repositories.js").StageRegistrySnapshot;
+export type RepositoryJsonValue = import("./repositories/repository-mutation.js").RepositoryJsonValue;
+export type OfflineIdentityScope = {
+    readonly deviceDid: string;
+    readonly homeNodeId: string;
+};
+export type OfflineStageState = "caching-assets" | "needs-first-sync" | "offline-ready" | "update-available" | "failed" | "removing";
+export type OfflineReadinessFailureCode = "asset-fetch-failed" | "asset-integrity-failed" | "projection-seed-failed" | "schema-incompatible" | "quota-exceeded" | "identity-mismatch" | "active-resource-corrupt";
+export type OfflineStageReadiness = {
+    readonly appName: string;
+    readonly activeManifestSha256?: string;
+    readonly candidateManifestSha256?: string;
+    readonly failureCode?: OfflineReadinessFailureCode;
+    readonly state: OfflineStageState;
+    readonly updatedAt: string;
+};
+export type StageAssetCandidate = {
+    readonly assetRevision: string;
+    readonly appName: string;
+    readonly entryUrl: string;
+    readonly manifestSha256: string;
+    readonly version: string;
+};
+export type VerifiedStageAssetPort = {
+    prepareCandidate(entry: StageCatalogEntry, catalogRevision: string): Promise<StageAssetCandidate>;
+    validateCandidate(candidate: StageAssetCandidate, manifest: StageManifest): Promise<void>;
+    discardCandidate(candidate: StageAssetCandidate): Promise<void>;
+    deleteUnreferenced(keepAssetRevisions: readonly string[]): Promise<void>;
+};
+export type OfflineStorageEstimatePort = {
+    estimate(): Promise<{
+        readonly quota?: number;
+        readonly usage?: number;
+    }>;
+};
+export type OfflineStagePreparationRecord = {
+    readonly appName: string;
+    readonly candidateManifestSha256: string;
+    readonly sourceRevision: string;
+    readonly state: "caching-assets" | "update-available";
+    readonly updatedAt: string;
+};
+export type OfflineStageCommit = {
+    readonly assetRevision: string;
+    readonly entry: StageCatalogEntry;
+    readonly projectionRevision?: string;
+    readonly sourceRevision: string;
+};
+export type OfflineStageCommitRecord = {
+    readonly active: OfflineStageCommit;
+    readonly rollback?: OfflineStageCommit;
+};
+export type OfflineStageBundleCommitInput = {
+    readonly candidate: StageAssetCandidate;
+    readonly entry: StageCatalogEntry;
+    readonly sourceRevision: string;
+};
+export type OfflineStagePromotionInput = {
+    readonly candidate: StageAssetCandidate;
+    readonly entry: StageCatalogEntry;
+    readonly projectionRevision: string;
+    readonly requiredProjectionKeys: readonly string[];
+    readonly sourceRevision: string;
+};
+export type OfflineStageFailureInput = {
+    readonly appName: string;
+    readonly candidateManifestSha256?: string;
+    readonly failureCode: OfflineReadinessFailureCode;
+    readonly updatedAt: string;
+};
+export type OfflineProjectionRecord = {
+    readonly cursor?: string;
+    readonly updatedAt: string;
+    readonly value: RepositoryJsonValue;
+};
+export type OfflineProjectionBatchRecord = {
+    readonly key: string;
+    readonly record: OfflineProjectionRecord;
+};
+export type OfflineProjectionBatchCommit = {
+    readonly cursor?: string;
+    readonly records: readonly OfflineProjectionBatchRecord[];
+    readonly updatedAt: string;
+};
+/**
+ * Durable installed-stage entries, preparation journals, active/rollback
+ * references, and readiness state. Every operation requires an explicit
+ * identity scope.
+ *
+ * Catalog mutations are confined to bundle commit/promotion, rollback
+ * activation, and removal state-machine operations.
+ */
+export type OfflineStageRepository = {
+    readCatalog(scope: OfflineIdentityScope): Promise<StageRegistrySnapshot | undefined>;
+    readCommit(scope: OfflineIdentityScope, appName: string): Promise<OfflineStageCommitRecord | undefined>;
+    listReadiness(scope: OfflineIdentityScope): Promise<readonly OfflineStageReadiness[]>;
+    recordPreparation(scope: OfflineIdentityScope, record: OfflineStagePreparationRecord): Promise<void>;
+    commitNewBundle(scope: OfflineIdentityScope, input: OfflineStageBundleCommitInput): Promise<void>;
+    confirmBootHealth(scope: OfflineIdentityScope, appName: string, manifestSha256: string): Promise<OfflineStageCommit | undefined>;
+    activateRollback(scope: OfflineIdentityScope, appName: string, activeManifestSha256: string, rollbackManifestSha256: string): Promise<OfflineStageCommit | undefined>;
+    promoteOfflineReady(scope: OfflineIdentityScope, input: OfflineStagePromotionInput): Promise<void>;
+    markFailed(scope: OfflineIdentityScope, input: OfflineStageFailureInput): Promise<void>;
+    removeStage(scope: OfflineIdentityScope, appName: string, sourceRevision: string): Promise<void>;
+    finalizeRemoval(scope: OfflineIdentityScope, appName: string): Promise<void>;
+    invalidateScope(scope: OfflineIdentityScope): Promise<void>;
+    clearScope(scope: OfflineIdentityScope): Promise<void>;
+};
+/**
+ * Identity-scoped versioned projection records and revision heads. Every
+ * operation requires an explicit identity scope.
+ */
+export type OfflineProjectionRepository = {
+    read(scope: OfflineIdentityScope, namespace: string, projectionRevision: string, key: string): Promise<OfflineProjectionRecord | undefined>;
+    write(scope: OfflineIdentityScope, namespace: string, projectionRevision: string, key: string, record: OfflineProjectionRecord): Promise<void>;
+    writeBatch(scope: OfflineIdentityScope, namespace: string, projectionRevision: string, commit: OfflineProjectionBatchCommit): Promise<void>;
+    hasKeys(scope: OfflineIdentityScope, namespace: string, projectionRevision: string, keys: readonly string[]): Promise<boolean>;
+    deleteRevision(scope: OfflineIdentityScope, namespace: string, projectionRevision: string): Promise<void>;
+    clearScope(scope: OfflineIdentityScope): Promise<void>;
+};
+//# sourceMappingURL=offline-readiness.d.ts.map

package/dist/offline-readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"offline-readiness.d.ts","sourceRoot":"","sources":["../src/offline-readiness.js"],"names":[],"mappings":"gCAEc,OAAO,mBAAmB,EAAE,iBAAiB;4BAC7C,OAAO,mBAAmB,EAAE,aAAa;oCACzC,OAAO,mBAAmB,EAAE,qBAAqB;kCACjD,OAAO,uCAAuC,EAAE,mBAAmB;mCAEnE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE;gCAC3D,gBAAgB,GAAG,kBAAkB,GAAG,eAAe,GAAG,kBAAkB,GAAG,QAAQ,GAAG,UAAU;0CACpG,oBAAoB,GAAG,wBAAwB,GAAG,wBAAwB,GAAG,qBAAqB,GAAG,gBAAgB,GAAG,mBAAmB,GAAG,yBAAyB;oCACvK;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,2BAA2B,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE;kCAClO;IAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE;qCAClJ;IAAE,gBAAgB,CAAC,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAAC,iBAAiB,CAAC,SAAS,EAAE,mBAAmB,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,gBAAgB,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,kBAAkB,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE;yCAC3U;IAAE,QAAQ,IAAI,OAAO,CAAC;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE;4CAE7E;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,GAAG,kBAAkB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE;iCAC1L;IAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAAE;uCAC5I;IAAE,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAA;CAAE;4CAC/E;IAAE,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAAE;yCAC/G;IAAE,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAAE;uCACxM;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,2BAA2B,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE;sCACtJ;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE;2CAC7F;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE;2CAClE;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,4BAA4B,EAAE,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE;;;;;;;;;qCAUpH;IACR,WAAW,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IACrF,UAAU,CAAC,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAC;IACxG,aAAa,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAAC;IACtF,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrG,eAAe,CAAC,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClG,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;IACjI,gBAAgB,CAAC,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;IACtK,mBAAmB,CAAC,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnG,UAAU,CAAC,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,WAAW,CAAC,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjG,eAAe,CAAC,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,UAAU,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACvD;;;;;0CAOS;IACR,IAAI,CAAC,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;IAC5I,KAAK,CAAC,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/I,UAAU,CAAC,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,4BAA4B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5I,OAAO,CAAC,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/H,cAAc,CAAC,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1G,UAAU,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACvD"}

package/dist/onboarding-access-code.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The access code a person types (or scans via the step-9 QR) to claim this node — the
+ * shared secret `OwnerClaimService.prepareClaim(accessCode)` sends as `access_code` on
+ * `POST /api/v2/node/onboarding-prepare`.
+ *
+ * Deliberately `localStorage`-shaped, exactly like `OnboardingCheckpointStoragePort`: step 7
+ * destroys the tab the owner was working in, and a code re-typed by hand before that
+ * navigation must still be there afterwards rather than forcing a second entry. Not
+ * `sessionStorage` for the same reason — the owner may land in a brand-new tab.
+ *
+ * Every method degrades silently. Reading or writing `localStorage` — and even *touching*
+ * the property — can throw in locked-down embedders, and losing this code must never abort
+ * onboarding; the person simply gets asked to type it again.
+ */
+export type OnboardingAccessCodeStore = {
+    /**
+     * Returns the stored code, or `null` for "never saved" AND for "the read itself failed"
+     * alike — the caller must not (and cannot) tell those two cases apart.
+     */
+    read: () => string | null;
+    /**
+     * Stores `code`. A failed write is swallowed; the flow continues without persistence.
+     */
+    save: (code: string) => void;
+    /**
+     * Empties the slot. Never throws.
+     */
+    clear: () => void;
+};
+//# sourceMappingURL=onboarding-access-code.d.ts.map

package/dist/onboarding-access-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-access-code.d.ts","sourceRoot":"","sources":["../src/onboarding-access-code.js"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;UAgBc,MAAM,MAAM,GAAG,IAAI;;;;UAEnB,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI;;;;WACtB,MAAM,IAAI"}

package/dist/onboarding-checkpoint.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The one string slot the onboarding flow needs to survive a full navigation.
+ *
+ * Step 7 deliberately destroys the tab the owner was working in (the node's AP closes and the
+ * browser must be pointed at the home-LAN address), and the kernel is an elected leader tab —
+ * not a SharedWorker — so its in-memory service state dies with that tab. Without a slot that
+ * outlives the navigation the flow restarts at step 3.
+ *
+ * Deliberately `localStorage`-shaped rather than OPFS-backed: OPFS is gated pre-claim
+ * (`requiresDurableStorage`), which is exactly the window this must work in. Deliberately
+ * NOT `sessionStorage` (`SessionFlagPort`): the owner may be handed a brand-new tab.
+ *
+ * Deliberately synchronous and string-typed: `OnboardingCheckpointStore` owns the schema, the
+ * allow-list and the staleness rule, so this port cannot be handed a structured object that
+ * happens to carry a Wi-Fi password.
+ *
+ * Every method degrades silently, exactly like `SessionFlagPort`: reading or writing
+ * `localStorage` — and even *touching* the property — can throw in locked-down embedders, and
+ * losing a resume point must never abort onboarding.
+ */
+export type OnboardingCheckpointStoragePort = {
+    clear: () => void;
+    read: () => string | undefined;
+    write: (value: string) => void;
+};
+//# sourceMappingURL=onboarding-checkpoint.d.ts.map

package/dist/onboarding-checkpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-checkpoint.d.ts","sourceRoot":"","sources":["../src/onboarding-checkpoint.js"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;WAsBc,MAAM,IAAI;UACV,MAAM,MAAM,GAAG,SAAS;WACxB,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI"}

package/dist/onboarding-presence.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @returns {OnboardingPresencePort}
+ */
+export function createNullOnboardingPresence(): OnboardingPresencePort;
+/**
+ * Phases the node's onboarding FSM understands. Fire-and-forget hints (spec §3.2).
+ */
+export type OnboardingPresencePhase = "portal" | "wifi_setup" | "register" | "install";
+export type OnboardingPresencePort = {
+    announce: (phase: OnboardingPresencePhase) => Promise<void>;
+};
+//# sourceMappingURL=onboarding-presence.d.ts.map

package/dist/onboarding-presence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-presence.d.ts","sourceRoot":"","sources":["../src/onboarding-presence.js"],"names":[],"mappings":"AACA;;GAEG;AACH,gDAFa,sBAAsB,CAIlC;;;;sCAGY,QAAQ,GAAG,YAAY,GAAG,UAAU,GAAG,SAAS;;cAI/C,CAAC,KAAK,EAAE,uBAAuB,KAAK,OAAO,CAAC,IAAI,CAAC"}

package/dist/owner-claim-session.d.ts

@@ -0,0 +1,60 @@
+/** For compositions with no browser session client (tests, headless kernels): every claim is
+ * reported as unpaired, which is the safe direction — the shell runs its pairing flow.
+ * @returns {OwnerClaimSessionPort}
+ */
+export function createNullOwnerClaimSession(): OwnerClaimSessionPort;
+/**
+ * The seam through which a successful first-owner claim becomes a REAL browser session
+ * (design §7.1).
+ *
+ * `POST /api/auth/complete-onboarding` answers with `token` / `refresh_token` /
+ * `token_expires_at` (`core/adapters-network/src/transport/auth/handlers.rs`), but
+ * `client/domain` cannot do anything with them: turning an owner JWT into a client-device
+ * session means talking to `/api/v2/client-devices/*` with browser-held key material, which is
+ * `client/adapters-web`'s job. Hence a port.
+ *
+ * `adopt` returns a BOOLEAN rather than throwing or returning void, and that is the whole
+ * design: a `false` means "the claim succeeded but this browser is not paired", and the flow
+ * then falls back to the shell's ordinary pairing screen. Nothing here may assert a trust
+ * relationship the browser does not hold — whether the node auto-approves the owner's first
+ * device is the node's decision, not this client's assumption.
+ *
+ * SECURITY: only the access token and its expiry cross this boundary. The refresh token is
+ * deliberately NOT part of `OwnerClaimSessionTokens` — no client code today can spend it, and a
+ * long-lived credential held with no consumer is pure downside.
+ */
+export type OwnerClaimSessionTokens = {
+    accessToken: string;
+    /**
+     * ISO instant. An already-expired value must be refused rather than adopted.
+     */
+    expiresAt: string;
+};
+/**
+ * Wire-shaped, snake_case: `genesis_device` crosses to the node verbatim as a field of
+ * `POST /api/auth/complete-onboarding`'s payload (`core/domain/src/services/
+ * onboarding_completion_service.rs`'s `GenesisDeviceDescriptor`), so this typedef mirrors the
+ * Rust struct field-for-field rather than the camelCase this package otherwise prefers — the
+ * same precedent as `OwnerClaimSessionTokens` staying JS-shaped for values that stay client-side
+ * while wire payloads built for direct forwarding stay wire-shaped.
+ */
+export type OwnerClaimGenesisDevice = {
+    public_key_multibase: string;
+    device_name: string;
+    device_type: string;
+    signature: string;
+};
+export type OwnerClaimSessionPort = {
+    adopt: (tokens: OwnerClaimSessionTokens) => Promise<boolean>;
+    /**
+     * OPTIONAL: builds the signed
+     * `genesis_device` proof-of-possession descriptor for the given onboarding-challenge string, so
+     * the node can mint the genesis DID device with this browser's real pairing identity instead of
+     * a synthetic fallback. `undefined` — from an implementation that omits the member entirely, or
+     * from any failure to build the descriptor — means the claim proceeds without one; `adopt` must
+     * never depend on this having been called. `createNullOwnerClaimSession()` deliberately leaves
+     * this unimplemented (adopt-only) since it is optional.
+     */
+    describeGenesisDevice?: (challenge: string) => Promise<OwnerClaimGenesisDevice | undefined>;
+};
+//# sourceMappingURL=owner-claim-session.d.ts.map

package/dist/owner-claim-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-claim-session.d.ts","sourceRoot":"","sources":["../src/owner-claim-session.js"],"names":[],"mappings":"AACA;;;GAGG;AACH,+CAFa,qBAAqB,CAIjC;;;;;;;;;;;;;;;;;;;;;;iBAqBa,MAAM;;;;eACN,MAAM;;;;;;;;;;;0BAUN,MAAM;iBACN,MAAM;iBACN,MAAM;eACN,MAAM;;;WAIN,CAAC,MAAM,EAAE,uBAAuB,KAAK,OAAO,CAAC,OAAO,CAAC;;;;;;;;;;4BACrD,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC"}

package/dist/owner-claim.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Ephemeral secp256k1 identity used ONLY for the legacy BIP39-shaped first-owner
+ * onboarding contract (`POST /api/v2/node/onboarding-prepare` /
+ * `POST /api/auth/{onboarding-challenge,complete-onboarding}` —
+ * verified server-side by `core/auth/src/crypto.rs`'s `CryptoService`).
+ *
+ * Deliberately separate from `IdentityPort` (Ed25519, used for client-device
+ * pairing/session, `./identity.ts`): the host's owner-onboarding endpoints verify
+ * secp256k1 ECDSA signatures over a hex-encoded uncompressed public key — a different
+ * scheme from the device identity this browser establishes afterwards to pair as a
+ * client device. One browser session generates and holds exactly one such key per
+ * onboarding attempt (mirrors the legacy `system/ui` flow's "ONE device keypair for
+ * the whole onboarding attempt" invariant — the node's physical-confirmation gate binds
+ * approval to the exact public key sent to `onboarding-prepare`).
+ */
+export type OwnerClaimCryptoPort = {
+    publicKey: () => Promise<string>;
+    sign: (challenge: string) => Promise<string>;
+    deviceInfo: () => string;
+    reset: () => void;
+};
+//# sourceMappingURL=owner-claim.d.ts.map

package/dist/owner-claim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-claim.d.ts","sourceRoot":"","sources":["../src/owner-claim.js"],"names":[],"mappings":";;;;;;;;;;;;;;;;eAiBc,MAAM,OAAO,CAAC,MAAM,CAAC;UACrB,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC;gBACtC,MAAM,MAAM;WACZ,MAAM,IAAI"}