@econ-v1/rpc 6.7.0 → 6.11.0

package/dist/onboarding/discovery-contract.d.ts

@@ -1,61 +1,91 @@
+/** @typedef {"probing" | "reachable" | "verified" | "unreachable"} DiscoveryCandidateStatus */
+/**
+ * The verified node's non-secret projection: nothing here is (or derives) a routable
+ * address, macaroon, or key — only what the found-node card renders.
+ *
+ * @typedef {{
+ *   readonly displayName: string,
+ *   readonly maskedNodeId: string
+ * }} DiscoveryFoundNode
+ */
+/**
+ * @typedef {{
+ *   readonly address: string,
+ *   readonly node?: DiscoveryFoundNode,
+ *   readonly status: DiscoveryCandidateStatus
+ * }} DiscoveryCandidateView
+ */
+/** @typedef {{ readonly addresses: readonly string[] }} ProbeCandidatesPayload */
+/** @typedef {{ readonly address: string }} PromoteCandidatePayload */
+/** @typedef {{ readonly address: string }} DiscoverNodePayload */
+/** @typedef {{ readonly address: string, readonly id: string, readonly path: "lan-direct" }} NodeDiscoveryCandidate */
+/**
+ * @typedef {
+ *   | { readonly status: "verified", readonly candidate: NodeDiscoveryCandidate }
+ *   | { readonly status: "reached-but-invalid", readonly reason: string }
+ *   | { readonly status: "unreachable-or-untrusted" }
+ * } NodeDiscoveryResult
+ */
+/**
+ * @param {unknown} value
+ * @returns {value is ProbeCandidatesPayload}
+ */
+export function isProbeCandidatesPayload(value: unknown): value is ProbeCandidatesPayload;
+/**
+ * @param {unknown} value
+ * @returns {value is PromoteCandidatePayload}
+ */
+export function isPromoteCandidatePayload(value: unknown): value is PromoteCandidatePayload;
+/**
+ * @param {unknown} value
+ * @returns {value is DiscoverNodePayload}
+ */
+export function isDiscoverNodePayload(value: unknown): value is DiscoverNodePayload;
 /**
  * The #1815 interim "search the node on the LAN" seam. Client-only vertical slice: the
  * discovery screen probes explicit candidate addresses (manually entered today, a signed
  * bootstrap descriptor's `lan_candidates` in the Phase-2 follow-on — see
  * `docs/superpowers/plans/2026-07-25-client-node-lan-discovery.md`) and the kernel reports
- * live per-candidate progress. Mirrors `./onboarding-contract.ts`'s idiom: locked wire-name
+ * live per-candidate progress. Mirrors `./onboarding-contract.js`'s idiom: locked wire-name
  * constants + JSON-safe view/payload types + a runtime validator per command payload.
  *
  * `DISCOVERY_QUERY` is both a one-shot `query()` and a `liveQuery()` name (the kernel's
  * `LiveQueryDefinition` row type is `DiscoveryCandidateView`, keyed by `address`) — the same
  * dual usage every other query in `@econ-v1/kernel`'s `LiveQueryEngine` supports.
  */
-export declare const DISCOVERY_QUERY: "onboarding.discovery.v1";
-export declare const DISCOVERY_PROBE_COMMAND: "onboarding.discovery.probe.v1";
-export declare const DISCOVERY_PROMOTE_COMMAND: "onboarding.discovery.promote.v1";
-/**
- * The pre-pairing "is this address really a node" check (lan-direct-pairing plan). Unlike
- * `DISCOVERY_PROBE_COMMAND` (which re-proves a candidate against an *already-known* home-node
- * id), this takes one address the person just typed in and asks it to prove itself via its
- * public origin proof alone — no session, no expected node id, no auth headers.
- */
-export declare const DISCOVER_NODE_COMMAND: "onboarding.discovery.discover-node.v1";
+export const DISCOVERY_QUERY: "onboarding.discovery.v1";
+export const DISCOVERY_PROBE_COMMAND: "onboarding.discovery.probe.v1";
+export const DISCOVERY_PROMOTE_COMMAND: "onboarding.discovery.promote.v1";
+export const DISCOVER_NODE_COMMAND: "onboarding.discovery.discover-node.v1";
 export type DiscoveryCandidateStatus = "probing" | "reachable" | "verified" | "unreachable";
 /**
  * The verified node's non-secret projection: nothing here is (or derives) a routable
  * address, macaroon, or key — only what the found-node card renders.
  */
-export interface DiscoveryFoundNode {
+export type DiscoveryFoundNode = {
     readonly displayName: string;
     readonly maskedNodeId: string;
-}
-export interface DiscoveryCandidateView {
+};
+export type DiscoveryCandidateView = {
     readonly address: string;
     readonly node?: DiscoveryFoundNode;
     readonly status: DiscoveryCandidateStatus;
-}
-export interface ProbeCandidatesPayload {
+};
+export type ProbeCandidatesPayload = {
     readonly addresses: readonly string[];
-}
-export interface PromoteCandidatePayload {
+};
+export type PromoteCandidatePayload = {
     readonly address: string;
-}
-export interface DiscoverNodePayload {
+};
+export type DiscoverNodePayload = {
     readonly address: string;
-}
-/** The non-secret candidate a verified `discover-node` result reports. */
-export interface NodeDiscoveryCandidate {
+};
+export type NodeDiscoveryCandidate = {
     readonly address: string;
     readonly id: string;
     readonly path: "lan-direct";
-}
-/**
- * The JSON-safe wire result of `DISCOVER_NODE_COMMAND`. Deliberately opaque about *why* an
- * address is unreachable — a self-signed-certificate rejection and a plain network failure
- * are indistinguishable to browser `fetch`, so both collapse into `"unreachable-or-untrusted"`
- * rather than the UI guessing which one happened.
- */
-export type NodeDiscoveryResult = {
+};
+export type NodeDiscoveryResult = any | {
     readonly status: "verified";
     readonly candidate: NodeDiscoveryCandidate;
 } | {
@@ -64,7 +94,4 @@ export type NodeDiscoveryResult = {
 } | {
     readonly status: "unreachable-or-untrusted";
 };
-export declare function isProbeCandidatesPayload(value: unknown): value is ProbeCandidatesPayload;
-export declare function isPromoteCandidatePayload(value: unknown): value is PromoteCandidatePayload;
-export declare function isDiscoverNodePayload(value: unknown): value is DiscoverNodePayload;
 //# sourceMappingURL=discovery-contract.d.ts.map

package/dist/onboarding/discovery-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"discovery-contract.d.ts","sourceRoot":"","sources":["../../src/onboarding/discovery-contract.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,eAAe,EAAG,yBAAkC,CAAC;AAClE,eAAO,MAAM,uBAAuB,EAAG,+BAAwC,CAAC;AAChF,eAAO,MAAM,yBAAyB,EAAG,iCAA0C,CAAC;AACpF;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAG,uCAAgD,CAAC;AAEtF,MAAM,MAAM,wBAAwB,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa,CAAC;AAE5F;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,0EAA0E;AAC1E,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;CAC7B;AAED;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAA;CAAE,GAC3E;IAAE,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnE;IAAE,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAA;CAAE,CAAC;AAEpD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,sBAAsB,CAMxF;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,uBAAuB,CAG1F;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAGlF"}
+{"version":3,"file":"discovery-contract.d.ts","sourceRoot":"","sources":["../../src/onboarding/discovery-contract.js"],"names":[],"mappings":"AAsBA,+FAA+F;AAE/F;;;;;;;;GAQG;AAEH;;;;;;GAMG;AAEH,kFAAkF;AAClF,sEAAsE;AACtE,kEAAkE;AAClE,uHAAuH;AACvH;;;;;;GAMG;AAEH;;;GAGG;AACH,gDAHW,OAAO,GACL,KAAK,IAAI,sBAAsB,CAQ3C;AAED;;;GAGG;AACH,iDAHW,OAAO,GACL,KAAK,IAAI,uBAAuB,CAK5C;AAED;;;GAGG;AACH,6CAHW,OAAO,GACL,KAAK,IAAI,mBAAmB,CAKxC;AA9ED;;;;;;;;;;;GAWG;AAEH,8BAA+B,yBAAyB,CAAC;AACzD,sCAAuC,+BAA+B,CAAC;AACvE,wCAAyC,iCAAiC,CAAC;AAC3E,oCAAqC,uCAAuC,CAAC;uCAE/D,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa;;;;;iCAMrD;IACZ,QAAY,CAAC,WAAW,EAAE,MAAM,CAAC;IACjC,QAAY,CAAC,YAAY,EAAE,MAAM,CAAA;CAC9B;qCAIS;IACZ,QAAY,CAAC,OAAO,EAAE,MAAM,CAAC;IAC7B,QAAY,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC;IACvC,QAAY,CAAC,MAAM,EAAE,wBAAwB,CAAA;CAC1C;qCAGU;IAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE;sCACzC;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE;kCAC5B;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE;qCAC5B;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;CAAE;kCAG3F,GAAC,GAAK;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAA;CAAE,GAC3E;IAAE,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnE;IAAE,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAA;CAAE"}

package/dist/onboarding/onboarding-contract.d.ts

@@ -1,33 +1,38 @@
-export declare const ONBOARDING_STATUS_QUERY: "onboarding.status.v1";
-export declare const ONBOARDING_COMMAND: "onboarding.command.v1";
-export declare const ONBOARDING_EVENTS: "onboarding.events.v1";
-export type OnboardingScenario = "new" | "pair" | "wifi" | "expired" | "lost";
-export type OnboardingScreen = "scan" | "invite" | "identity" | "matchcode" | "handoff" | "done";
-export type OnboardingPhase = "connect" | "identify" | "secure" | "ready";
+/** @param {unknown} value @returns {value is OnboardingCommand} */
+export function isOnboardingCommand(value: unknown): value is OnboardingCommand;
+export const ONBOARDING_STATUS_QUERY: "onboarding.status.v1";
+export const ONBOARDING_COMMAND: "onboarding.command.v1";
+export const ONBOARDING_EVENTS: "onboarding.events.v1";
+export const ONBOARDING_FLOW_QUERY: "onboarding.flow.v1";
+export const ONBOARDING_LCD_SCREEN_QUERY: "onboarding.lcd-screen.v1";
 /**
- * The #1815 onboarding-status coordinator's lifecycle projection (Tasks B+C) — a distinct,
- * smaller shape from `OnboardingView` below on purpose: `OnboardingView` describes WHERE the
- * onboarding wizard itself currently is (`screen`/`phase`/matchcode digits/...), whereas this
- * describes WHICH top-level shell surface should be shown before that wizard even starts
- * (onboard a fresh node vs. pair an already-claimed one vs. show the shell directly vs. wait
- * for discovery). Served as the `onboarding.status.v1` live query — see
- * `client/domain/src/services/onboarding-status-service.ts` for the derivation.
+ * The pager's declarative order. `stepIndex`/`totalSteps` are DERIVED from this list with
+ * gated rows removed (`invitation` today), so invitations-off yields ten steps and shifts
+ * every later index with no second table and no hole — the total can never be a constant.
+ *
+ * `begin-setup` ("Connect") is absent by design: its discovery scan ran only after the shell
+ * had ALREADY reached the node over HTTP, so on the shipped path it discovered nothing and was
+ * auto-advanced. Its screen still exists off-rail for the unreachable-node bootstrap case —
+ * see `OnboardingFlowService`'s `STEP_TABLE` comment.
  */
+export const ONBOARDING_STEP_IDS: readonly ["join-qr", "open-browser", "choose-network", "network-password", "handoff", "way-back", "install", "match-code", "invitation", "identity", "trusted"];
+export type OnboardingScenario = "new" | "pair" | "wifi" | "expired" | "lost";
+export type OnboardingScreen = "scan" | "invite" | "identity" | "matchcode" | "handoff" | "done";
+export type OnboardingPhase = "connect" | "install" | "secure" | "identify" | "ready";
 export type OnboardingLifecycleState = "bootstrap-required" | "needs-onboarding" | "needs-pairing" | "ready";
-export interface OnboardingLifecycleStatus {
-    /** Present only when `state === "needs-onboarding"` — the scenario the onboarding gate
-     * should start on (always `"new"` today; first-owner setup). */
+export type OnboardingLifecycleStatus = {
+    readonly invitationsEnabled?: boolean;
     readonly scenario?: OnboardingScenario;
     readonly state: OnboardingLifecycleState;
-}
-export interface OnboardingDiscoveryCandidate {
+};
+export type OnboardingDiscoveryCandidate = {
     readonly id: string;
     readonly maskedNodeId: string;
     readonly name: string;
     readonly ownership: "checking" | "owned" | "unowned";
-}
+};
 export type OnboardingApprovalState = "waiting" | "approved" | "rejected" | "expired" | "cancelled";
-export interface OnboardingView {
+export type OnboardingView = {
     readonly approvalExpiresAt?: string;
     readonly approvalState?: OnboardingApprovalState;
     readonly candidates?: readonly OnboardingDiscoveryCandidate[];
@@ -36,22 +41,110 @@ export interface OnboardingView {
     readonly reasonCode?: string;
     readonly scenario: OnboardingScenario;
     readonly screen: OnboardingScreen;
-}
+};
 export type OnboardingEvent = OnboardingView;
+export type OnboardingStepId = (typeof ONBOARDING_STEP_IDS)[number];
+export type OnboardingLcdScreenId = "onboard_qr" | "onboard_open_browser" | "onboard_wifi_setup" | "wifi_setup_connecting" | "onboard_home_qr" | "onboard_wifi_joined" | "onboard_working" | "onboard_code" | "onboard_trusted" | "onboard_rejected";
+export type OnboardingWifiSecurity = "open" | "wep" | "wpa2" | "wpa3";
+/**
+ * Onboarding access-code rail (2026-08-10 design): a code-active node refused this device's
+ * claim outright — either the code is already bound to a different device
+ * (`code-already-bound`) or the supplied/missing code did not match (`access-code-invalid`,
+ * covering both `ACCESS_CODE_INVALID` and `ACCESS_CODE_REQUIRED`).
+ */
+export type OnboardingReasonCode = "approval-expired" | "approval-rejected" | "wifi-credentials-rejected" | "wifi-scan-failed" | "wifi-unreachable" | "invitation-invalid" | "claim-failed" | "code-already-bound" | "access-code-invalid";
+export type OnboardingNetwork = {
+    readonly security: OnboardingWifiSecurity;
+    readonly signal: number;
+    readonly ssid: string;
+};
+export type OnboardingFlowBase = {
+    readonly lcdScreenId: OnboardingLcdScreenId;
+    readonly phase: OnboardingPhase;
+    readonly reasonCode?: OnboardingReasonCode;
+    readonly stepIndex: number;
+    readonly totalSteps: number;
+};
+export type OnboardingFlowView = (OnboardingFlowBase & {
+    readonly networks: readonly OnboardingNetwork[];
+    readonly scanning: boolean;
+    readonly stepId: "choose-network";
+}) | (OnboardingFlowBase & {
+    readonly security: OnboardingWifiSecurity;
+    readonly ssid: string;
+    readonly stepId: "network-password";
+}) | (OnboardingFlowBase & {
+    readonly approvalState: OnboardingApprovalState;
+    readonly digits: readonly string[];
+    readonly remainingSeconds: number;
+    readonly stepId: "match-code";
+}) | (OnboardingFlowBase & {
+    readonly stepId: "invitation";
+}) | (OnboardingFlowBase & {
+    readonly displayName: string;
+    readonly displayNameLocked: boolean;
+    readonly stepId: "identity";
+    readonly submitting: boolean;
+}) | (OnboardingFlowBase & {
+    readonly sessionEstablished: boolean;
+    readonly stepId: "trusted";
+}) | (OnboardingFlowBase & {
+    readonly ssid: string;
+    readonly stepId: "handoff";
+}) | (OnboardingFlowBase & {
+    readonly stepId: Exclude<OnboardingStepId, "choose-network" | "handoff" | "identity" | "invitation" | "match-code" | "network-password" | "trusted">;
+});
+export type OnboardingLcdScreenTree = {
+    readonly children?: readonly OnboardingLcdScreenTree[];
+    readonly id: string;
+    readonly type: string;
+    readonly [extra: string]: unknown;
+};
+export type OnboardingLcdScreenState = Readonly<Record<string, number | string>>;
+export type OnboardingLcdUnavailableReason = "not-registered" | "unreachable";
+export type OnboardingLcdScreenBase = {
+    readonly awaitingNode: boolean;
+    readonly physicalTapOnly: boolean;
+    readonly screenId: OnboardingLcdScreenId;
+    readonly state: OnboardingLcdScreenState;
+};
+export type OnboardingLcdScreenView = (OnboardingLcdScreenBase & {
+    readonly kind: "authored";
+}) | (OnboardingLcdScreenBase & {
+    readonly kind: "tree";
+    readonly tree: OnboardingLcdScreenTree;
+}) | (OnboardingLcdScreenBase & {
+    readonly kind: "unavailable";
+    readonly reason: OnboardingLcdUnavailableReason;
+});
 export type OnboardingCommand = {
+    readonly kind: "advance";
+} | {
+    readonly kind: "select-network";
+    readonly security: OnboardingWifiSecurity;
+    readonly ssid: string;
+} | {
+    readonly kind: "rescan-networks";
+} | {
+    readonly kind: "reselect-network";
+} | {
+    readonly kind: "submit-network-password";
+    readonly secret: string;
+} | {
+    readonly decision: "continue-in-browser" | "installed";
+    readonly kind: "install-decision";
+} | {
+    readonly componentId: string;
+    readonly kind: "lcd-tap";
+} | {
     readonly kind: "advance-discovery";
 } | {
     readonly code: string;
     readonly kind: "redeem-invitation";
-} | {
-    readonly kind: "skip-invitation";
 } | {
     readonly displayName: string;
     readonly kind: "submit-identity";
-    readonly nodeName: string;
     readonly username: string;
-} | {
-    readonly kind: "confirm-matchcode";
 } | {
     readonly kind: "submit-wifi";
     readonly secret: string;
@@ -66,5 +159,4 @@ export type OnboardingCommand = {
 } | {
     readonly kind: "cancel";
 };
-export declare function isOnboardingCommand(value: unknown): value is OnboardingCommand;
 //# sourceMappingURL=onboarding-contract.d.ts.map

package/dist/onboarding/onboarding-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"onboarding-contract.d.ts","sourceRoot":"","sources":["../../src/onboarding/onboarding-contract.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,uBAAuB,EAAG,sBAA+B,CAAC;AACvE,eAAO,MAAM,kBAAkB,EAAG,uBAAgC,CAAC;AACnE,eAAO,MAAM,iBAAiB,EAAG,sBAA+B,CAAC;AAEjE,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AAC9E,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,GAAG,SAAS,GAAG,MAAM,CAAC;AACjG,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE1E;;;;;;;;GAQG;AACH,MAAM,MAAM,wBAAwB,GAChC,oBAAoB,GACpB,kBAAkB,GAClB,eAAe,GACf,OAAO,CAAC;AAEZ,MAAM,WAAW,yBAAyB;IACxC;oEACgE;IAChE,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;CAC1C;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,GAAG,SAAS,CAAC;CACtD;AAED,MAAM,MAAM,uBAAuB,GAC/B,SAAS,GACT,UAAU,GACV,UAAU,GACV,SAAS,GACT,WAAW,CAAC;AAEhB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,aAAa,CAAC,EAAE,uBAAuB,CAAC;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,4BAA4B,EAAE,CAAC;IAC9D,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC;AAED,MAAM,MAAM,eAAe,GAAG,cAAc,CAAC;AAE7C,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GACtC;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GAC7D;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACpC;IACA,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B,GACC;IAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GACtC;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChF;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GACnC;IAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAA;CAAE,GACzC;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAA;CAAE,GACvE;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEhC,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAwB9E"}
+{"version":3,"file":"onboarding-contract.d.ts","sourceRoot":"","sources":["../../src/onboarding/onboarding-contract.js"],"names":[],"mappings":"AA0DA,mEAAmE;AACnE,2CADY,OAAO,GAAkB,KAAK,IAAI,iBAAiB,CAmC9D;AA/DD,sCAA6D,sBAAsB,CAAE;AACrF,iCAAwD,uBAAuB,CAAE;AACjF,gCAAuD,sBAAsB,CAAE;AAC/E,oCAA2D,oBAAoB,CAAE;AACjF,0CAAiE,0BAA0B,CAAE;AAC7F;;;;;;;;;GASG;AACH,kMAYG;iCAxDY,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM;+BAC5C,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,GAAG,SAAS,GAAG,MAAM;8BACjE,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO;uCACrD,oBAAoB,GAAG,kBAAkB,GAAG,eAAe,GAAG,OAAO;wCACvE;IAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;CAAE;2CAC5H;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,GAAG,SAAS,CAAC;CAAE;sCAClI,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW;6BAC/D;IAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,uBAAuB,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,4BAA4B,EAAE,CAAC;IAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CAAE;8BAChV,cAAc;+BACd,CAAC,OAAO,mBAAmB,EAAE,MAAM,CAAC;oCAClC,YAAY,GAAG,sBAAsB,GAAG,oBAAoB,GAAG,uBAAuB,GAAG,iBAAiB,GAAG,qBAAqB,GAAG,iBAAiB,GAAG,cAAc,GAAG,iBAAiB,GAAG,kBAAkB;qCAClN,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM;;;;;;;mCAMhC,kBAAkB,GAAG,mBAAmB,GAAG,2BAA2B,GAAG,kBAAkB,GAAG,kBAAkB,GAAG,oBAAoB,GAAG,cAAc,GAAG,oBAAoB,GAAG,qBAAqB;gCAEvM;IAAE,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CAAE;iCAC9F;IAAE,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAAE;iCACpL,CAAC,kBAAkB,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CAAE,CAAC,GAAG,CAAC,kBAAkB,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CAAE,CAAC,GAAG,CAAC,kBAAkB,GAAG;IAAE,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAAE,CAAC,GAAG,CAAC,kBAAkB,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;CAAE,CAAC,GAAG,CAAC,kBAAkB,GAAG;IAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAAE,CAAC,GAAG,CAAC,kBAAkB,GAAG;IAAE,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;CAAE,CAAC,GAAG,CAAC,kBAAkB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;CAAE,CAAC,GAAG,CAAC,kBAAkB,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAE,gBAAgB,EAAI,gBAAgB,GAAG,SAAS,GAAG,UAAU,GAAG,YAAY,GAAG,YAAY,GAAG,kBAAkB,GAAG,SAAS,CAAE,CAAC;CAAE,CAAC;sCAChgC;IAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAAE;uCAC1I,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;6CACzC,gBAAgB,GAAG,aAAa;sCAChC;IAAE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;CAAE;sCACxJ,CAAC,uBAAuB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,GAAG,CAAC,uBAAuB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAA;CAAE,CAAC,GAAG,CAAC,uBAAuB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;CAAE,CAAC;gCAC1Q;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,GAAG,WAAW,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE"}

package/dist/onboarding/owner-claim-contract.d.ts

@@ -0,0 +1,50 @@
+/**
+ * @param {unknown} value
+ * @returns {value is OwnerClaimCompletePayload}
+ */
+export function isOwnerClaimCompletePayload(value: unknown): value is OwnerClaimCompletePayload;
+/**
+ * First-owner "claim this unclaimed node" seam (#1815 DID-blocker fix,
+ * `.superpowers/sdd/did-blocker-report.md`). Deliberately separate from the generic
+ * (unwired) `ONBOARDING_COMMAND` in `./onboarding-contract.ts` — the same precedent as
+ * `DISCOVER_NODE_COMMAND` in `./discovery-contract.ts`, which is also "wired separately"
+ * rather than folded into a bigger, not-yet-built generic seam. `prepare` and `complete`
+ * are two commands (not one) because a person may spend anywhere from seconds to
+ * minutes physically walking to the node between them; `client/domain`'s
+ * `OwnerClaimService` holds the pending claim between the two calls and only unlocks it
+ * once the node itself has reported the physical confirmation.
+ * @type {"onboarding.owner-claim.prepare.v1"}
+ */
+export const OWNER_CLAIM_PREPARE_COMMAND: "onboarding.owner-claim.prepare.v1";
+export const OWNER_CLAIM_COMPLETE_COMMAND: "onboarding.owner-claim.complete.v1";
+/**
+ * `claimed-unpaired` is a SUCCESS: the owner + DID exist on the node, but the completion
+ * response carried no usable session tokens (or adopting them did not produce a session), so
+ * the shell must fall back to its ordinary device-pairing flow. Collapsing it into `claimed`
+ * would make the UI assert a trust relationship the browser does not actually hold.
+ */
+export type OwnerClaimCompleteOutcome = "claimed" | "claimed-unpaired" | "not-prepared" | "rejected" | "timed-out";
+/**
+ * `prepare` carries NO payload (design §6.1): the node's `onboarding-prepare` route only ever
+ * received `{ public_key_multibase }`, and the identity that used to ride along was stashed
+ * purely client-side. Moving it to `complete` is what lets the match code appear at step 10
+ * while identity is not collected until step 12 — nothing is written until physical access
+ * has been proven.
+ */
+export type OwnerClaimPrepareResult = {
+    lcdHardware: boolean;
+    matchCode: string;
+    /**
+     * Empty string when the node's confirmation gate is disabled.
+     */
+    operationHash: string;
+    requiresConfirmation: boolean;
+};
+export type OwnerClaimCompletePayload = {
+    displayName: string;
+    username: string;
+};
+export type OwnerClaimCompleteResult = {
+    outcome: OwnerClaimCompleteOutcome;
+};
+//# sourceMappingURL=owner-claim-contract.d.ts.map

package/dist/onboarding/owner-claim-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-claim-contract.d.ts","sourceRoot":"","sources":["../../src/onboarding/owner-claim-contract.js"],"names":[],"mappings":"AAiBA;;;GAGG;AACH,mDAHW,OAAO,GACL,KAAK,IAAI,yBAAyB,CAO9C;AAvBD;;;;;;;;;;;GAWG;AACH,0CAFU,mCAAmC,CAEkC;AAC/E,2CAA4C,oCAAoC,CAAC;;;;;;;wCAgBlE,SAAS,GACjB,kBAAkB,GAClB,cAAc,GACd,UAAU,GACV,WAAW;;;;;;;;;iBASJ,OAAO;eACP,MAAM;;;;mBACN,MAAM;0BACN,OAAO;;;iBAIP,MAAM;cACN,MAAM;;;aAIN,yBAAyB"}

package/dist/pairing-status-contract.d.ts

@@ -0,0 +1,40 @@
+export const CLIENT_DEVICE_PAIRING_STATUS_QUERY: "client-device.pairing-status.v1";
+/**
+ * Device-pairing wire-error codes shared verbatim across the Rust host and this TS client
+ * boundary (review recommendation, PR #2274). Canonical contract table:
+ * `docs/development/CAPABILITY_REGISTRY.md` § "Device-pairing wire-error contract" (mirrored
+ * on the Rust side by `core/domain/src/services/client_device_pairing_service.rs`'s
+ * `CLIENT_DEVICE_WIRE_ERROR_*` constants). These are the exact strings that travel over the
+ * wire — changing any value here is a cross-repo wire-contract change, not a local rename;
+ * every producer/consumer in that table must move together.
+ */
+export const CLIENT_DEVICE_WIRE_ERROR_NAME_TAKEN: "name_taken";
+/** @see CLIENT_DEVICE_WIRE_ERROR_NAME_TAKEN */
+export const CLIENT_DEVICE_WIRE_ERROR_LAST_DEVICE: "last_device";
+/** @see CLIENT_DEVICE_WIRE_ERROR_NAME_TAKEN */
+export const CLIENT_DEVICE_WIRE_ERROR_LAST_DEVICE_PROTECTED: "last_device_protected";
+/** @see CLIENT_DEVICE_WIRE_ERROR_NAME_TAKEN */
+export const CLIENT_DEVICE_WIRE_ERROR_DEVICE_NOT_REGISTERED: "device_not_registered";
+/**
+ * Kernel-owned view of the CURRENT pairing attempt this browser has in flight (design M4,
+ * `docs/superpowers/plans/2026-08-11-pwa-trusted-devices.md`). Single-slot — there is never
+ * more than one attempt live at a time — so the row's `id` is always the literal
+ * `"pairing-status"`, mirroring `client-device.cleanup.v1`'s single fixed-id row
+ * (`client/kernel/src/queries/device-cleanup.js`).
+ *
+ * `status` is a superset of what `<node-pairing-gate>` renders directly: `"idle"` (no attempt
+ * has begun, or the last one was reset), `"pairing"` (an attempt is in flight, matches the
+ * gate's own `"pairing"` display status), `"ready"` (the owner approved — or session
+ * establishment simply succeeded on its own), `"declined"`, `"revoked"`, `"expired"`, and
+ * `"name_conflict"` (the requested device name collided with another active/pending device —
+ * `pairing-status-service.js`'s `isNameTaken`). `"error"` is reserved for a future
+ * non-transient failure this service does not yet classify — `PairingStatusService` never
+ * emits it today; every unclassified failure keeps the row at `"pairing"` and lets the next
+ * poll attempt retry (see that file's doc comment).
+ */
+export type ClientDevicePairingStatusRow = {
+    readonly id: "pairing-status";
+    readonly status: "idle" | "pairing" | "ready" | "declined" | "revoked" | "expired" | "name_conflict" | "error";
+    readonly message?: string;
+};
+//# sourceMappingURL=pairing-status-contract.d.ts.map

package/dist/pairing-status-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing-status-contract.d.ts","sourceRoot":"","sources":["../src/pairing-status-contract.js"],"names":[],"mappings":"AACA,iDAAkD,iCAAiC,CAAC;AACpF;;;;;;;;GAQG;AACH,kDAAmD,YAAY,CAAC;AAChE,+CAA+C;AAC/C,mDAAoD,aAAa,CAAC;AAClE,+CAA+C;AAC/C,6DAA8D,uBAAuB,CAAC;AACtF,+CAA+C;AAC/C,6DAA8D,uBAAuB,CAAC;;;;;;;;;;;;;;;;;;2CAiBzE;IAAE,QAAQ,CAAC,EAAE,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAC,SAAS,GAAC,OAAO,GAAC,UAAU,GAAC,SAAS,GAAC,SAAS,GAAC,eAAe,GAAC,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE"}

package/dist/protocol.d.ts

@@ -1,4 +1,42 @@
-import { type ClientError, type DomainEvent, type JsonValue, type QueryDiff, type QueryName } from "@econ-v1/domain";
+/**
+ * @param {RpcRequest} request
+ * @returns {string}
+ */
+export function serializeRpcRequest(request: RpcRequest): string;
+/**
+ * @param {string} serialized
+ * @returns {RpcRequest}
+ */
+export function deserializeRpcRequest(serialized: string): RpcRequest;
+/**
+ * @param {RpcResponse} response
+ * @returns {string}
+ */
+export function serializeRpcResponse(response: RpcResponse): string;
+/**
+ * @param {string} serialized
+ * @returns {RpcResponse}
+ */
+export function deserializeRpcResponse(serialized: string): RpcResponse;
+/**
+ * @param {RpcEvent} event
+ * @returns {string}
+ */
+export function serializeRpcEvent(event: RpcEvent): string;
+/**
+ * @param {string} serialized
+ * @returns {RpcEvent}
+ */
+export function deserializeRpcEvent(serialized: string): RpcEvent;
+export type DeviceCleanupDomainEvent = {
+    readonly occurredAt: string;
+    readonly payload: {
+        readonly state?: string;
+    };
+    readonly type: "device-cleanup.changed";
+};
+export type ProtocolDomainEvent = DomainEvent | DeviceCleanupDomainEvent;
+export type ProtocolCoreKernelEventType = CoreKernelEventType | "device-cleanup.changed";
 export type RpcRequest = {
     readonly id: string;
     readonly name: string;
@@ -20,7 +58,7 @@ export type RpcRequest = {
     readonly subscriptionId: string;
     readonly type: "live-query.unsubscribe";
 } | {
-    readonly eventType: DomainEvent["type"];
+    readonly eventType: ProtocolDomainEvent["type"];
     readonly id: string;
     readonly subscriptionId: string;
     readonly type: "event.subscribe";
@@ -29,7 +67,7 @@ export type RpcRequest = {
     readonly subscriptionId: string;
     readonly type: "event.unsubscribe";
 } | {
-    readonly event: DomainEvent;
+    readonly event: ProtocolDomainEvent;
     readonly id: string;
     readonly type: "event.publish";
 } | {
@@ -60,7 +98,7 @@ export type RpcRequest = {
     readonly subscriptionId: string;
     readonly type: "stage.live-query.unsubscribe";
 } | {
-    readonly eventType: DomainEvent["type"];
+    readonly eventType: ProtocolDomainEvent["type"];
     readonly id: string;
     readonly sessionId: string;
     readonly subscriptionId: string;
@@ -71,7 +109,7 @@ export type RpcRequest = {
     readonly subscriptionId: string;
     readonly type: "stage.event.unsubscribe";
 } | {
-    readonly event: DomainEvent;
+    readonly event: ProtocolDomainEvent;
     readonly id: string;
     readonly sessionId: string;
     readonly type: "stage.event.publish";
@@ -100,14 +138,14 @@ export type RpcEvent = {
     readonly subscriptionId: string;
     readonly type: "live-query.changed";
 } | {
-    readonly event: DomainEvent;
+    readonly event: ProtocolDomainEvent;
     readonly subscriptionId: string;
     readonly type: "kernel.event";
 };
-export declare function serializeRpcRequest(request: RpcRequest): string;
-export declare function deserializeRpcRequest(serialized: string): RpcRequest;
-export declare function serializeRpcResponse(response: RpcResponse): string;
-export declare function deserializeRpcResponse(serialized: string): RpcResponse;
-export declare function serializeRpcEvent(event: RpcEvent): string;
-export declare function deserializeRpcEvent(serialized: string): RpcEvent;
+import type { DomainEvent } from '@econ-v1/domain';
+import type { CoreKernelEventType } from '@econ-v1/domain';
+import type { JsonValue } from '@econ-v1/domain';
+import type { QueryName } from '@econ-v1/domain';
+import type { ClientError } from '@econ-v1/domain';
+import type { QueryDiff } from '@econ-v1/domain';
 //# sourceMappingURL=protocol.d.ts.map

package/dist/protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,WAAW,EAEhB,KAAK,SAAS,EAId,KAAK,SAAS,EACd,KAAK,SAAS,EACf,MAAM,iBAAiB,CAAC;AASzB,MAAM,MAAM,UAAU,GAClB;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GACrG;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GACrG;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAA;CAAE,GACrJ;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAA;CAAE,GACjG;IAAE,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACnI;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GAC5F;IAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;CAAE,GACpF;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;CAAE,GACjF;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;CAAE,GACvH;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GACvI;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAA;CAAE,GACvL;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,8BAA8B,CAAA;CAAE,GACnI;IAAE,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAA;CAAE,GACrK;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAA;CAAE,GAC9H;IAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAA;CAAE,GACtH;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAA;CAAE,GACvJ;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAE9F,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GACrE;IAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAA;CAAE,CAAC;AAE7E,MAAM,MAAM,QAAQ,GAChB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;CAAE,GAC7G;IAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC;AAEpG,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAmC/D;AAED,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,CAyBpE;AAQD,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,CAIlE;AAED,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,WAAW,CAMtE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAIzD;AAED,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,CAMhE"}
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.js"],"names":[],"mappings":"AAQA;;;GAGG;AACH,6CAHW,UAAU,GACR,MAAM,CAqClB;AACD;;;GAGG;AACH,kDAHW,MAAM,GACJ,UAAU,CA0BtB;AAYD;;;GAGG;AACH,+CAHW,WAAW,GACT,MAAM,CAMlB;AACD;;;GAGG;AACH,mDAHW,MAAM,GACJ,WAAW,CAUvB;AACD;;;GAGG;AACH,yCAHW,QAAQ,GACN,MAAM,CAMlB;AACD;;;GAGG;AACH,gDAHW,MAAM,GACJ,QAAQ,CAUpB;uCAhIa;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAA;CAAE;kCACvH,WAAW,GAAG,wBAAwB;0CACtC,mBAAmB,GAAG,wBAAwB;yBAutB7C;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC7G;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GACrG;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAA;CAAE,GACrJ;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAA;CAAE,GACjG;IAAE,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GAC3I;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GAC5F;IAAE,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;CAAE,GAC5F;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;CAAE,GACjF;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;CAAE,GACvH;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GACvI;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAA;CAAE,GACvL;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,8BAA8B,CAAA;CAAE,GACnI;IAAE,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAA;CAAE,GAC7K;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAA;CAAE,GAC9H;IAAE,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAA;CAAE,GAC9H;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAA;CAAE,GACvJ;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAA;CAAE;0BAGjF;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAC7E;IAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAA;CAAE;uBAGhE;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,SAAS,CAAC,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;CAAE,GACrH;IAAE,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE;iCAlvBqD,iBAAiB;yCAAjB,iBAAiB;+BAAjB,iBAAiB;+BAAjB,iBAAiB;iCAAjB,iBAAiB;+BAAjB,iBAAiB"}

package/dist/stage-context.d.ts

@@ -1,32 +1,47 @@
-import type { KernelEventByType, KernelEventPayload, KernelEventType, QueryDiff, QueryName } from "@econ-v1/domain";
-import type { Unsubscribe } from "./client.js";
-export interface MountedStage {
+export type KernelEventType = import("@econ-v1/domain").KernelEventType;
+export type QueryName = import("@econ-v1/domain").QueryName;
+export type Unsubscribe = import("./client.js").Unsubscribe;
+export type DialogCenter = import("./dialog-contract.js").DialogCenter;
+export type SystemNoticeCenter = import("./system-notice-contract.js").SystemNoticeCenter;
+export type MountedStage = {
     unmount(): Promise<void>;
-}
+};
 export type StageLoadHandler = (appName: string, slot: Element) => Promise<MountedStage>;
-export interface StageContext {
+export type StageContextShared = {
     readonly app: {
         readonly name: string;
         readonly version: string;
     };
     readonly events: {
-        publish<T extends KernelEventType>(type: T, payload: KernelEventPayload<T>): Promise<void>;
-        subscribe<T extends KernelEventType>(type: T, listener: (event: KernelEventByType<T>) => void): Unsubscribe;
-    };
-    readonly host: {
-        navigate(path: string): void;
-        readonly root: Element;
-        readonly uiApi: 1;
+        publish<T extends KernelEventType>(type: T, payload: import("@econ-v1/domain").KernelEventPayload<T>): Promise<void>;
+        subscribe<T extends KernelEventType>(type: T, listener: (event: import("@econ-v1/domain").KernelEventByType<T>) => void): Unsubscribe;
     };
     invokeCapability<T>(capability: string, payload: unknown): Promise<T>;
-    liveQuery<T>(name: QueryName, params: unknown, listener: (diff: QueryDiff<T>) => void): Unsubscribe;
+    liveQuery<T>(name: QueryName, params: unknown, listener: (diff: import("@econ-v1/domain").QueryDiff<T>) => void): Unsubscribe;
     query<T>(name: QueryName, params: unknown): Promise<T>;
     readonly stage: {
         load: StageLoadHandler;
     };
-}
-export interface StageModule {
+};
+export type StageHostShared = {
+    navigate(path: string): void;
+    readonly root: Element;
+};
+export type StageContextV1 = StageContextShared & {
+    readonly host: StageHostShared & {
+        readonly uiApi: 1;
+    };
+};
+export type StageContextV2 = StageContextShared & {
+    readonly host: StageHostShared & {
+        readonly dialogs: DialogCenter;
+        readonly systemNotices: SystemNoticeCenter;
+        readonly uiApi: 2;
+    };
+};
+export type StageContext = StageContextV1 | StageContextV2;
+export type StageModule = {
     mount(ctx: StageContext): void | Promise<void>;
     unmount(): void | Promise<void>;
-}
+};
 //# sourceMappingURL=stage-context.d.ts.map