@econ-v1/ports 7.1.9 → 7.1.11

package/dist/network/certificate-trust.d.ts

@@ -1,20 +1,16 @@
 export type CertificateTrustPlatform = "android" | "apple-mobile" | "apple-mac" | "firefox" | "windows" | "linux" | "unknown";
 /**
- * `untrusted` and `unreachable` are deliberately separate outcomes, not one
- * failure bucket. They look identical to the probe's caller — neither unlocks
- * the shell — but they have opposite remedies, and telling a person to install
- * a certificate authority when the real problem is that their node stopped
- * answering sends them somewhere they cannot succeed. `untrusted` means the
- * node answered and the browser refused the chain; `unreachable` means the
- * request never produced a response at all (DNS failure, connection refused,
- * a certificate the browser rejects before any HTTP exchange, or a timeout).
+ * `trusted` means an HTTPS response was received from the probed origin without
+ * following redirects. HTTP error statuses still demonstrate TLS connectivity;
+ * they do not establish application readiness or verify the node's identity.
+ * An unavailable identity provider must not become a certificate-trust failure.
  *
- * NOTE: a browser rejecting the node's certificate chain lands in `unreachable`,
- * NOT `untrusted` — the rejection happens before any HTTP exchange, so `fetch`
- * rejects and the probe has no response to inspect. `untrusted` therefore means
- * "TLS succeeded, the response was not ok". Callers that need to tell an
- * untrusted CA from a dead node must supply an independent liveness signal; see
- * `CertificateTrustService`'s `liveness` option.
+ * `unreachable` means no usable HTTPS response was received (including invalid
+ * or plaintext origins). Browser fetch cannot distinguish certificate rejection
+ * from DNS, connection, CORS, redirect or timeout failures. Existing callers use
+ * independent liveness evidence to infer `untrusted`; see
+ * `CertificateTrustService`'s `liveness` option. An HTTP error alone is never
+ * evidence of an untrusted certificate.
  */
 export type CertificateTrustProbeResult = {
     readonly status: "trusted";

package/dist/network/certificate-trust.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"certificate-trust.d.ts","sourceRoot":"","sources":["../../src/network/certificate-trust.js"],"names":[],"mappings":"uCAEc,SAAS,GAAG,cAAc,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS;;;;;;;;;;;;;;;;;;0CAiBrF;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9F;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GACxF;IAAE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE;;WAIpD,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,KAAK,OAAO,CAAC,2BAA2B,CAAC;;;YAIrF,MAAM,wBAAwB;;wCAEJ,eAAe"}
+{"version":3,"file":"certificate-trust.d.ts","sourceRoot":"","sources":["../../src/network/certificate-trust.js"],"names":[],"mappings":"uCAEc,SAAS,GAAG,cAAc,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS;;;;;;;;;;;;;;0CAarF;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9F;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GACxF;IAAE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE;;WAIpD,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,KAAK,OAAO,CAAC,2BAA2B,CAAC;;;YAIrF,MAAM,wBAAwB;;wCAEJ,eAAe"}

package/dist/repositories/node-app-memory-repository.d.ts

@@ -150,6 +150,12 @@ export type NodeAppDeviceMemory = {
 };
 export type NodeAppMemoryOverviewApp = {
     activity?: NodeAppMemoryActivityRollup;
+    /**
+     * What the app is, from its registry row, in the host's own
+     * vocabulary (`native`, `bun`, `standalone`, `managed-v1`, `burger`, `ui-only`). Absent on
+     * hosts that predate the field.
+     */
+    appType?: string;
     budget: NodeAppBudgetVerdict;
     governor?: NodeAppGovernorRow;
     id: string;

package/dist/repositories/node-app-memory-repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-app-memory-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/node-app-memory-repository.js"],"names":[],"mappings":"mCAEc,OAAO,GAAG,UAAU,GAAG,QAAQ;uCAE9B,uBAAuB,GAC/B,cAAc,GACd,eAAe,GACf,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,aAAa;wCAEN,UAAU,GAAG,OAAO,GAAG,aAAa;kCAEnC,sBAAsB,GAC9B,WAAW,GACX,uBAAuB,GACvB,wBAAwB,GACxB,qBAAqB,GACrB,mBAAmB,GACnB,sBAAsB;6CAGd,oBAAoB,GAC5B,WAAW,GACX,kBAAkB,GAClB,aAAa,GACb,mBAAmB,GACnB,kBAAkB,GAClB,qBAAqB,GACrB,qBAAqB;iCAEd,WAAW,GAAG,QAAQ,GAAG,QAAQ;4BAEhC,QAAQ,GAChB,kBAAkB,GAClB,UAAU,GACV,OAAO,GACP,WAAW,GACX,MAAM,GACN,YAAY,GACZ,SAAS;0BAEF,KAAK,GAAG,QAAQ,GAAG,QAAQ;;iBAG3B,wBAAwB;kBACxB,yBAAyB;gBACzB,MAAM;aACN,8BAA8B;YAC9B,mBAAmB;aACnB,MAAM,GAAG,IAAI;;;eAIb,oBAAoB;cACpB,oBAAoB;cACpB,oBAAoB;kBACpB,oBAAoB;SACpB,oBAAoB;SACpB,oBAAoB;;;aAIpB,WAAW;YACX,MAAM;iBACN,MAAM;QACN,MAAM;mBACN,oBAAoB;aACpB,qBAAqB;UACrB,MAAM;kBACN,kBAAkB;YAClB,aAAa;aACb,MAAM;;;cAIN,MAAM,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC;aAC1C,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;kBACrD,MAAM,OAAO,CAAC,qBAAqB,CAAC;2BACpC,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC;8BAC5C,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;4BACnD,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC;cAClE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC;aAC7B,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC;;oCAG7B;IAAE,WAAW,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;uCAEzF,WAAW,GAAG,UAAU,GAAG,QAAQ;;WAGnC,MAAM;gBACN,MAAM;eACN,MAAM;;;iBAIN,MAAM;iBACN,SAAS,0BAA0B,EAAE;;;WAIrC,MAAM;iBACN,MAAM,GAAG,IAAI;eACb,MAAM;WACN,MAAM,GAAG,IAAI;QACb,MAAM;eACN,MAAM,GAAG,IAAI;WACb,wBAAwB;aACxB,0BAA0B,GAAG,IAAI;;;WAIjC,MAAM;gBACN,MAAM;gBACN,MAAM;;uCAGN,WAAW,GAAG,kBAAkB,GAAG,KAAK,GAAG,KAAK;wCAChD,MAAM,GAAG,SAAS,GAAG,YAAY,GAAG,UAAU,GAAG,SAAS;;;;;;;;;eAQ1D,OAAO;WACP,wBAAwB;gBACxB,MAAM;iBACN,MAAM;8BACN,MAAM;oBACN,MAAM;mBACN,MAAM;iBACN,MAAM;qBACN,MAAM;aACN,yBAAyB;iBACzB,MAAM;;;gBAIN,MAAM;iBACN,MAAM;;;;;;oBAKN,MAAM;gBACN,MAAM;YACN,MAAM;iBACN,MAAM;qBACN,SAAS,gCAAgC,EAAE;iBAC3C,MAAM;;iCAEN,kBAAkB,GAAG,IAAI,GAAG,MAAM;8BAClC,SAAS,GAAG,gBAAgB,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM;uCAC9D,MAAM,GAAG,UAAU;mCACnB,UAAU,GAAG,IAAI,GAAG,SAAS;;eAG7B,OAAO;WACP,wBAAwB;cACxB,MAAM,GAAG,IAAI;cACb,MAAM,GAAG,IAAI;WACb,kBAAkB;aAClB,MAAM,GAAG,IAAI;;;WAIb,MAAM;aACN,MAAM;iBACN,MAAM;cACN,MAAM;cACN,MAAM;UACN,eAAe;iBACf,MAAM;qBACN,wBAAwB;iBACxB,MAAM;kBACN,MAAM;oBACN,MAAM;wBACN,wBAAwB;;;iBAIxB,MAAM;gBACN,MAAM;oBACN,MAAM,GAAG,IAAI;gBACb,MAAM,GAAG,IAAI;kBACb,MAAM,GAAG,IAAI;mBACb,MAAM,GAAG,IAAI;mBACb,oBAAoB;gBACpB,MAAM,GAAG,IAAI;iBACb,MAAM,GAAG,IAAI;;;eAWb,2BAA2B;YAC3B,oBAAoB;eACpB,kBAAkB;QAClB,MAAM;aACN,OAAO,CAAC,qBAAqB,CAAC;cAC9B,mBAAmB,GAAG,IAAI;2BAC1B,iCAAiC,GAAG,IAAI;UACxC,MAAM;kBACN,kBAAkB;YAClB,aAAa;YACb,kBAAkB;aAClB,MAAM;;;UAIN,SAAS,wBAAwB,EAAE;YACnC,mBAAmB,GAAG,IAAI;yBAC1B,oBAAoB"}
+{"version":3,"file":"node-app-memory-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/node-app-memory-repository.js"],"names":[],"mappings":"mCAEc,OAAO,GAAG,UAAU,GAAG,QAAQ;uCAE9B,uBAAuB,GAC/B,cAAc,GACd,eAAe,GACf,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,aAAa;wCAEN,UAAU,GAAG,OAAO,GAAG,aAAa;kCAEnC,sBAAsB,GAC9B,WAAW,GACX,uBAAuB,GACvB,wBAAwB,GACxB,qBAAqB,GACrB,mBAAmB,GACnB,sBAAsB;6CAGd,oBAAoB,GAC5B,WAAW,GACX,kBAAkB,GAClB,aAAa,GACb,mBAAmB,GACnB,kBAAkB,GAClB,qBAAqB,GACrB,qBAAqB;iCAEd,WAAW,GAAG,QAAQ,GAAG,QAAQ;4BAEhC,QAAQ,GAChB,kBAAkB,GAClB,UAAU,GACV,OAAO,GACP,WAAW,GACX,MAAM,GACN,YAAY,GACZ,SAAS;0BAEF,KAAK,GAAG,QAAQ,GAAG,QAAQ;;iBAG3B,wBAAwB;kBACxB,yBAAyB;gBACzB,MAAM;aACN,8BAA8B;YAC9B,mBAAmB;aACnB,MAAM,GAAG,IAAI;;;eAIb,oBAAoB;cACpB,oBAAoB;cACpB,oBAAoB;kBACpB,oBAAoB;SACpB,oBAAoB;SACpB,oBAAoB;;;aAIpB,WAAW;YACX,MAAM;iBACN,MAAM;QACN,MAAM;mBACN,oBAAoB;aACpB,qBAAqB;UACrB,MAAM;kBACN,kBAAkB;YAClB,aAAa;aACb,MAAM;;;cAIN,MAAM,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC;aAC1C,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;kBACrD,MAAM,OAAO,CAAC,qBAAqB,CAAC;2BACpC,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC;8BAC5C,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;4BACnD,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC;cAClE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC;aAC7B,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC;;oCAG7B;IAAE,WAAW,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;uCAEzF,WAAW,GAAG,UAAU,GAAG,QAAQ;;WAGnC,MAAM;gBACN,MAAM;eACN,MAAM;;;iBAIN,MAAM;iBACN,SAAS,0BAA0B,EAAE;;;WAIrC,MAAM;iBACN,MAAM,GAAG,IAAI;eACb,MAAM;WACN,MAAM,GAAG,IAAI;QACb,MAAM;eACN,MAAM,GAAG,IAAI;WACb,wBAAwB;aACxB,0BAA0B,GAAG,IAAI;;;WAIjC,MAAM;gBACN,MAAM;gBACN,MAAM;;uCAGN,WAAW,GAAG,kBAAkB,GAAG,KAAK,GAAG,KAAK;wCAChD,MAAM,GAAG,SAAS,GAAG,YAAY,GAAG,UAAU,GAAG,SAAS;;;;;;;;;eAQ1D,OAAO;WACP,wBAAwB;gBACxB,MAAM;iBACN,MAAM;8BACN,MAAM;oBACN,MAAM;mBACN,MAAM;iBACN,MAAM;qBACN,MAAM;aACN,yBAAyB;iBACzB,MAAM;;;gBAIN,MAAM;iBACN,MAAM;;;;;;oBAKN,MAAM;gBACN,MAAM;YACN,MAAM;iBACN,MAAM;qBACN,SAAS,gCAAgC,EAAE;iBAC3C,MAAM;;iCAEN,kBAAkB,GAAG,IAAI,GAAG,MAAM;8BAClC,SAAS,GAAG,gBAAgB,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM;uCAC9D,MAAM,GAAG,UAAU;mCACnB,UAAU,GAAG,IAAI,GAAG,SAAS;;eAG7B,OAAO;WACP,wBAAwB;cACxB,MAAM,GAAG,IAAI;cACb,MAAM,GAAG,IAAI;WACb,kBAAkB;aAClB,MAAM,GAAG,IAAI;;;WAIb,MAAM;aACN,MAAM;iBACN,MAAM;cACN,MAAM;cACN,MAAM;UACN,eAAe;iBACf,MAAM;qBACN,wBAAwB;iBACxB,MAAM;kBACN,MAAM;oBACN,MAAM;wBACN,wBAAwB;;;iBAIxB,MAAM;gBACN,MAAM;oBACN,MAAM,GAAG,IAAI;gBACb,MAAM,GAAG,IAAI;kBACb,MAAM,GAAG,IAAI;mBACb,MAAM,GAAG,IAAI;mBACb,oBAAoB;gBACpB,MAAM,GAAG,IAAI;iBACb,MAAM,GAAG,IAAI;;;eAWb,2BAA2B;;;;;;cAC3B,MAAM;YAGN,oBAAoB;eACpB,kBAAkB;QAClB,MAAM;aACN,OAAO,CAAC,qBAAqB,CAAC;cAC9B,mBAAmB,GAAG,IAAI;2BAC1B,iCAAiC,GAAG,IAAI;UACxC,MAAM;kBACN,kBAAkB;YAClB,aAAa;YACb,kBAAkB;aAClB,MAAM;;;UAIN,SAAS,wBAAwB,EAAE;YACnC,mBAAmB,GAAG,IAAI;yBAC1B,oBAAoB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@econ-v1/ports",
-  "version": "7.1.9",
+  "version": "7.1.11",
   "description": "Platform-neutral ports for Node client applications",
   "license": "MIT OR Apache-2.0",
   "author": "Node contributors",

package/src/network/certificate-trust.js

@@ -2,21 +2,17 @@
 export {};
 /** @typedef {"android" | "apple-mobile" | "apple-mac" | "firefox" | "windows" | "linux" | "unknown"} CertificateTrustPlatform */
 /**
- * `untrusted` and `unreachable` are deliberately separate outcomes, not one
- * failure bucket. They look identical to the probe's caller — neither unlocks
- * the shell — but they have opposite remedies, and telling a person to install
- * a certificate authority when the real problem is that their node stopped
- * answering sends them somewhere they cannot succeed. `untrusted` means the
- * node answered and the browser refused the chain; `unreachable` means the
- * request never produced a response at all (DNS failure, connection refused,
- * a certificate the browser rejects before any HTTP exchange, or a timeout).
+ * `trusted` means an HTTPS response was received from the probed origin without
+ * following redirects. HTTP error statuses still demonstrate TLS connectivity;
+ * they do not establish application readiness or verify the node's identity.
+ * An unavailable identity provider must not become a certificate-trust failure.
  *
- * NOTE: a browser rejecting the node's certificate chain lands in `unreachable`,
- * NOT `untrusted` — the rejection happens before any HTTP exchange, so `fetch`
- * rejects and the probe has no response to inspect. `untrusted` therefore means
- * "TLS succeeded, the response was not ok". Callers that need to tell an
- * untrusted CA from a dead node must supply an independent liveness signal; see
- * `CertificateTrustService`'s `liveness` option.
+ * `unreachable` means no usable HTTPS response was received (including invalid
+ * or plaintext origins). Browser fetch cannot distinguish certificate rejection
+ * from DNS, connection, CORS, redirect or timeout failures. Existing callers use
+ * independent liveness evidence to infer `untrusted`; see
+ * `CertificateTrustService`'s `liveness` option. An HTTP error alone is never
+ * evidence of an untrusted certificate.
  * @typedef {| { readonly status: "trusted"; readonly origin: string; readonly fingerprint?: string }
  *   | { readonly status: "untrusted"; readonly origin: string; readonly fingerprint?: string }
  *   | { readonly status: "unreachable"; readonly origin: string }} CertificateTrustProbeResult

package/src/repositories/node-app-memory-repository.js

@@ -203,6 +203,9 @@ export {};
 /**
  * @typedef {object} NodeAppMemoryOverviewApp
  * @property {NodeAppMemoryActivityRollup} [activity]
+ * @property {string} [appType] What the app is, from its registry row, in the host's own
+ *   vocabulary (`native`, `bun`, `standalone`, `managed-v1`, `burger`, `ui-only`). Absent on
+ *   hosts that predate the field.
  * @property {NodeAppBudgetVerdict} budget
  * @property {NodeAppGovernorRow} [governor]
  * @property {string} id