@ibgib/web-gib 0.0.42 → 0.0.44

package/dist/AUTO-GENERATED-version.d.mts

@@ -10,5 +10,5 @@
 /**
  * this is the version of this package, auto-updated in the build process
  */
-export declare const AUTO_GENERATED_VERSION = "0.0.42";
+export declare const AUTO_GENERATED_VERSION = "0.0.44";
 //# sourceMappingURL=AUTO-GENERATED-version.d.mts.map

package/dist/AUTO-GENERATED-version.mjs

@@ -10,5 +10,5 @@
 /**
  * this is the version of this package, auto-updated in the build process
  */
-export const AUTO_GENERATED_VERSION = '0.0.42';
+export const AUTO_GENERATED_VERSION = '0.0.44';
 //# sourceMappingURL=AUTO-GENERATED-version.mjs.map

package/dist/api/commands/ui/ui-index.mjs

@@ -1,5 +1,5 @@
-import { updateCSSVariablesFunctionInfo } from './update-css-variables.mjs';
+// import { updateCSSVariablesFunctionInfo } from './update-css-variables.mjs';
 export const UIAgentFunctionInfos = [
-    updateCSSVariablesFunctionInfo,
+// updateCSSVariablesFunctionInfo,
 ];
 //# sourceMappingURL=ui-index.mjs.map

package/dist/api/commands/ui/ui-index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"ui-index.mjs","sourceRoot":"","sources":["../../../../src/api/commands/ui/ui-index.mts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAE5E,MAAM,CAAC,MAAM,oBAAoB,GAA2B;IACxD,8BAA8B;CACjC,CAAC"}
+{"version":3,"file":"ui-index.mjs","sourceRoot":"","sources":["../../../../src/api/commands/ui/ui-index.mts"],"names":[],"mappings":"AACA,+EAA+E;AAE/E,MAAM,CAAC,MAAM,oBAAoB,GAA2B;AACxD,kCAAkC;CACrC,CAAC"}

package/dist/api/commands/ui/update-css-variables.d.mts

@@ -41,8 +41,20 @@ export interface UpdateCSSVariablesCommandData extends CommandDataBase<typeof CM
  */
 declare function updateCSSVariablesViaCmd(opts: UpdateCSSVariablesOpts): Promise<void>;
 /**
- * API function info for the updateCSSVariables command.
+ * Factory function to get an API function info for the updateCSSVariables
+ * command. This enables an agent to update the {@link cssVariables} to create
+ * dynamic themes, which in turn enables users to use natural language to change
+ * the theme.
+ *
+ * initially this was just {@link VALID_CSS_VARIABLES}, but we have changed
+ * this to be a dynamic factory function driven by this {@link cssVariables}.
  */
+export declare function getFunctionInfo_updateCSSVariablesFunctionInfo({ cssVariables, }: {
+    /**
+     * list of variables that the agent has access to change.
+     */
+    cssVariables: string[];
+}): APIFunctionInfo<typeof updateCSSVariablesViaCmd>;
 export declare const updateCSSVariablesFunctionInfo: APIFunctionInfo<typeof updateCSSVariablesViaCmd>;
 export {};
 //# sourceMappingURL=update-css-variables.d.mts.map

package/dist/api/commands/ui/update-css-variables.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"update-css-variables.d.mts","sourceRoot":"","sources":["../../../../src/api/commands/ui/update-css-variables.mts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAgBvD;;GAEG;AACH,QAAA,MAAM,YAAY,OAAO,CAAC;AAE1B;;GAEG;AACH,QAAA,MAAM,aAAa,EAAE,MAAM,EAAoB,CAAC;AAiChD;;;GAGG;AACH,MAAM,WAAW,sBACb,SAAQ,eAAe,CAAC,OAAO,YAAY,EAAE,OAAO,aAAa,CAAC;IAClE;;;OAGG;IACH,YAAY,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CAC3C;AAGD;;;;GAIG;AACH,MAAM,WAAW,6BAA8B,SAAQ,eAAe,CAAC,OAAO,YAAY,EAAE,OAAO,aAAa,CAAC;IAC7G;;OAEG;IACH,YAAY,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CAC3C;AAED;;;;GAIG;AACH,iBAAS,wBAAwB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAa7E;AA8CD;;GAEG;AACH,eAAO,MAAM,8BAA8B,EAAE,eAAe,CAAC,OAAO,wBAAwB,CA8B3F,CAAC"}
+{"version":3,"file":"update-css-variables.d.mts","sourceRoot":"","sources":["../../../../src/api/commands/ui/update-css-variables.mts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAgBvD;;GAEG;AACH,QAAA,MAAM,YAAY,OAAO,CAAC;AAE1B;;GAEG;AACH,QAAA,MAAM,aAAa,EAAE,MAAM,EAAoB,CAAC;AAiChD;;;GAGG;AACH,MAAM,WAAW,sBACb,SAAQ,eAAe,CAAC,OAAO,YAAY,EAAE,OAAO,aAAa,CAAC;IAClE;;;OAGG;IACH,YAAY,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CAC3C;AAGD;;;;GAIG;AACH,MAAM,WAAW,6BAA8B,SAAQ,eAAe,CAAC,OAAO,YAAY,EAAE,OAAO,aAAa,CAAC;IAC7G;;OAEG;IACH,YAAY,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CAC3C;AAED;;;;GAIG;AACH,iBAAS,wBAAwB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAa7E;AA6CD;;;;;;;;GAQG;AACH,wBAAgB,8CAA8C,CAAC,EAC3D,YAAY,GACf,EAAE;IACC;;OAEG;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;CAC1B,GAAG,eAAe,CAAC,OAAO,wBAAwB,CAAC,CAgCnD;AAED,eAAO,MAAM,8BAA8B,kDAEzC,CAAC"}

package/dist/api/commands/ui/update-css-variables.mjs

@@ -3,9 +3,8 @@ import { GLOBAL_LOG_A_LOT } from "../../../constants.mjs";
 import { COMMAND_BASE_SCHEMA_PROPERTIES } from "../command-constants.mjs";
 import { getCommandService } from "../command-service-v1.mjs";
 import { FUNCTION_CALL_EXAMPLES_HEADER } from "../../api-constants.mjs";
-import { UI_THEME_INFO_KEY, VALID_CSS_VARIABLES } from "../../../ui/ui-constants.mjs";
-import { storagePut } from "../../../storage/storage-helpers.web.mjs";
-import { getExistingUIInfo } from "../../../ui/ui-helpers.mjs";
+import { VALID_CSS_VARIABLES } from "../../../ui/ui-constants.mjs";
+import { getExistingUIInfo, putUIInfoInStore } from "../../../ui/ui-helpers.mjs";
 import { getGlobalDbName, getGlobalStoreName } from "../../../helpers.web.mjs";
 const logalot = GLOBAL_LOG_A_LOT;
 // #region constants
@@ -84,7 +83,7 @@ async function updateCSSVariablesImpl(opts) {
         }
         // update the theme in the options
         const dbName = getGlobalDbName();
-        const storeName = await getGlobalStoreName();
+        const storeName = getGlobalStoreName();
         const existingUIInfo = await getExistingUIInfo({ dbName, storeName }) ?? { cssVariableOverrides: {}, };
         const newUIInfo = {
             ...existingUIInfo,
@@ -93,11 +92,10 @@ async function updateCSSVariablesImpl(opts) {
                 ...opts.cssVariables,
             },
         };
-        await storagePut({
+        await putUIInfoInStore({
             dbName,
-            storeName: await getGlobalStoreName(),
-            key: UI_THEME_INFO_KEY,
-            value: JSON.stringify(newUIInfo),
+            storeName,
+            newUIInfo,
         });
     }
     catch (error) {
@@ -111,35 +109,47 @@ async function updateCSSVariablesImpl(opts) {
     }
 }
 /**
- * API function info for the updateCSSVariables command.
+ * Factory function to get an API function info for the updateCSSVariables
+ * command. This enables an agent to update the {@link cssVariables} to create
+ * dynamic themes, which in turn enables users to use natural language to change
+ * the theme.
+ *
+ * initially this was just {@link VALID_CSS_VARIABLES}, but we have changed
+ * this to be a dynamic factory function driven by this {@link cssVariables}.
  */
-export const updateCSSVariablesFunctionInfo = {
-    nameOrId: FUNCTION_NAME,
-    fnViaCmd: updateCSSVariablesViaCmd,
-    functionImpl: updateCSSVariablesImpl,
-    cmd: CMD_CATEGORY,
-    cmdModifiers: CMD_MODIFIERS,
-    schema: {
-        name: FUNCTION_NAME,
-        description: FUNCTION_DESCRIPTION,
-        parameters: {
-            type: 'object',
-            properties: {
-                ...COMMAND_BASE_SCHEMA_PROPERTIES,
-                cssVariables: {
-                    type: 'object',
-                    description: 'CSS variables to update when theming or otherwise changing these visual aspects of the web app per user preferences or the user directly asking for it. (atow there are no preferences saved or anything, so this is just user-driven if they ask for it.)',
-                    properties: Object.fromEntries(VALID_CSS_VARIABLES.map(varName => [
-                        varName,
-                        {
-                            type: 'string',
-                            description: `configurable css variable`,
-                        },
-                    ])),
-                }
+export function getFunctionInfo_updateCSSVariablesFunctionInfo({ cssVariables, }) {
+    return {
+        nameOrId: FUNCTION_NAME,
+        fnViaCmd: updateCSSVariablesViaCmd,
+        functionImpl: updateCSSVariablesImpl,
+        cmd: CMD_CATEGORY,
+        cmdModifiers: CMD_MODIFIERS,
+        schema: {
+            name: FUNCTION_NAME,
+            description: FUNCTION_DESCRIPTION,
+            parameters: {
+                type: 'object',
+                properties: {
+                    ...COMMAND_BASE_SCHEMA_PROPERTIES,
+                    cssVariables: {
+                        type: 'object',
+                        description: 'CSS variables to update when theming or otherwise changing these visual aspects of the web app per user preferences or the user directly asking for it. (atow there are no preferences saved or anything, so this is just user-driven if they ask for it.)',
+                        properties: Object.fromEntries(cssVariables.map(varName => [
+                            varName,
+                            {
+                                type: 'string',
+                                description: `configurable css variable`,
+                            },
+                        ])),
+                    }
+                },
+                required: ['cssVariables'],
             },
-            required: ['cssVariables'],
         },
-    },
-};
+    };
+}
+;
+export const updateCSSVariablesFunctionInfo = getFunctionInfo_updateCSSVariablesFunctionInfo({
+    cssVariables: VALID_CSS_VARIABLES,
+});
 //# sourceMappingURL=update-css-variables.mjs.map

package/dist/api/commands/ui/update-css-variables.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"update-css-variables.mjs","sourceRoot":"","sources":["../../../../src/api/commands/ui/update-css-variables.mts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,iDAAiD,CAAC;AAE1F,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,MAAM,0CAA0C,CAAC;AAEtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE/E,MAAM,OAAO,GAAG,gBAAgB,CAAC;AAEjC,oBAAoB;AACpB;;GAEG;AACH,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAE3C;;GAEG;AACH,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B;;GAEG;AACH,MAAM,aAAa,GAAa,CAAC,aAAa,CAAC,CAAC;AAEhD,MAAM,uBAAuB,GAAoC;IAC7D,YAAY,EAAE;QACV,gCAAgC,EAAE,SAAS;QAC3C,0BAA0B,EAAE,OAAO;QACnC,4BAA4B,EAAE,SAAS;QACvC,4BAA4B,EAAE,KAAK;QACnC,4BAA4B,EAAE,OAAO;QACrC,6BAA6B,EAAE,KAAK;QACpC,uBAAuB,EAAE,WAAW;QACpC,iCAAiC,EAAE,SAAS;QAC5C,2BAA2B,EAAE,OAAO;QACpC,6BAA6B,EAAE,SAAS;KAC3C;IACD,WAAW,EAAE,sJAAsJ;IACnK,kBAAkB,EAAE,IAAI;CAC3B,CAAC;AAEF,MAAM,QAAQ,GAAG;IACb,6BAA6B;IAC7B,MAAM,CAAC,uBAAuB,CAAC;CAClC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,oBAAoB,GAAG;IACzB,u7BAAu7B;IACv7B,EAAE;IACF,QAAQ;CACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AA+Bb;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,IAA4B;IAC1D,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAkC;QAC3C,GAAG,IAAI,EAAE,uDAAuD;QAChE,GAAG,EAAE,YAAY;QACjB,YAAY,EAAE,CAAC,aAAa,CAAC;QAC7B,mCAAmC;QACnC,gDAAgD;QAChD,kCAAkC;KACrC,CAAC;IACF,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzC,cAAc,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,sBAAsB,CAAC,IAA4B;IAC9D,MAAM,EAAE,GAAG,IAAI,sBAAsB,CAAC,IAAI,GAAG,CAAC;IAC9C,IAAI,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,oDAAoD,CAAC,CAAC;QAAC,CAAC;QAExF,8EAA8E;QAC9E,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,4BAA4B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAClF,0CAA0C;QAC1C,KAAK,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACpE,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACpE,CAAC;QAED,kCAAkC;QAClC,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,MAAM,kBAAkB,EAAE,CAAC;QAC7C,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC;QACvG,MAAM,SAAS,GAAgB;YAC3B,GAAG,cAAc;YACjB,oBAAoB,EAAE;gBAClB,GAAG,cAAc,CAAC,oBAAoB;gBACtC,GAAG,IAAI,CAAC,YAAY;aACvB;SACJ,CAAC;QAEF,MAAM,UAAU,CAAC;YACb,MAAM;YACN,SAAS,EAAE,MAAM,kBAAkB,EAAE;YACrC,GAAG,EAAE,iBAAiB;YACtB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;SACnC,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC;IAChB,CAAC;YAAS,CAAC;QACP,IAAI,OAAO,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAAC,CAAC;IACpD,CAAC;AACL,CAAC;AAGD;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAqD;IAC5F,QAAQ,EAAE,aAAa;IACvB,QAAQ,EAAE,wBAAwB;IAClC,YAAY,EAAE,sBAAsB;IACpC,GAAG,EAAE,YAAY;IACjB,YAAY,EAAE,aAAa;IAC3B,MAAM,EAAE;QACJ,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,oBAAoB;QACjC,UAAU,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACR,GAAG,8BAA8B;gBACjC,YAAY,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,4PAA4P;oBACzQ,UAAU,EAAE,MAAM,CAAC,WAAW,CAC1B,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC/B,OAAO;wBACP;4BACI,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,2BAA2B;yBAC3C;qBACJ,CAAC,CACL;iBACJ;aACJ;YACD,QAAQ,EAAE,CAAC,cAAc,CAAC;SAC7B;KACJ;CACJ,CAAC"}
+{"version":3,"file":"update-css-variables.mjs","sourceRoot":"","sources":["../../../../src/api/commands/ui/update-css-variables.mts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,iDAAiD,CAAC;AAE1F,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAqB,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAGtF,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE/E,MAAM,OAAO,GAAG,gBAAgB,CAAC;AAEjC,oBAAoB;AACpB;;GAEG;AACH,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAE3C;;GAEG;AACH,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B;;GAEG;AACH,MAAM,aAAa,GAAa,CAAC,aAAa,CAAC,CAAC;AAEhD,MAAM,uBAAuB,GAAoC;IAC7D,YAAY,EAAE;QACV,gCAAgC,EAAE,SAAS;QAC3C,0BAA0B,EAAE,OAAO;QACnC,4BAA4B,EAAE,SAAS;QACvC,4BAA4B,EAAE,KAAK;QACnC,4BAA4B,EAAE,OAAO;QACrC,6BAA6B,EAAE,KAAK;QACpC,uBAAuB,EAAE,WAAW;QACpC,iCAAiC,EAAE,SAAS;QAC5C,2BAA2B,EAAE,OAAO;QACpC,6BAA6B,EAAE,SAAS;KAC3C;IACD,WAAW,EAAE,sJAAsJ;IACnK,kBAAkB,EAAE,IAAI;CAC3B,CAAC;AAEF,MAAM,QAAQ,GAAG;IACb,6BAA6B;IAC7B,MAAM,CAAC,uBAAuB,CAAC;CAClC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,oBAAoB,GAAG;IACzB,u7BAAu7B;IACv7B,EAAE;IACF,QAAQ;CACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AA+Bb;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,IAA4B;IAC1D,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAkC;QAC3C,GAAG,IAAI,EAAE,uDAAuD;QAChE,GAAG,EAAE,YAAY;QACjB,YAAY,EAAE,CAAC,aAAa,CAAC;QAC7B,mCAAmC;QACnC,gDAAgD;QAChD,kCAAkC;KACrC,CAAC;IACF,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzC,cAAc,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,sBAAsB,CAAC,IAA4B;IAC9D,MAAM,EAAE,GAAG,IAAI,sBAAsB,CAAC,IAAI,GAAG,CAAC;IAC9C,IAAI,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,oDAAoD,CAAC,CAAC;QAAC,CAAC;QAExF,8EAA8E;QAC9E,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,4BAA4B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAClF,0CAA0C;QAC1C,KAAK,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACpE,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACpE,CAAC;QAED,kCAAkC;QAClC,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;QACvC,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC;QACvG,MAAM,SAAS,GAAgB;YAC3B,GAAG,cAAc;YACjB,oBAAoB,EAAE;gBAClB,GAAG,cAAc,CAAC,oBAAoB;gBACtC,GAAG,IAAI,CAAC,YAAY;aACvB;SACJ,CAAC;QAEF,MAAM,gBAAgB,CAAC;YACnB,MAAM;YACN,SAAS;YACT,SAAS;SACZ,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC;IAChB,CAAC;YAAS,CAAC;QACP,IAAI,OAAO,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAAC,CAAC;IACpD,CAAC;AACL,CAAC;AAGD;;;;;;;;GAQG;AACH,MAAM,UAAU,8CAA8C,CAAC,EAC3D,YAAY,GAMf;IACG,OAAO;QACH,QAAQ,EAAE,aAAa;QACvB,QAAQ,EAAE,wBAAwB;QAClC,YAAY,EAAE,sBAAsB;QACpC,GAAG,EAAE,YAAY;QACjB,YAAY,EAAE,aAAa;QAC3B,MAAM,EAAE;YACJ,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,oBAAoB;YACjC,UAAU,EAAE;gBACR,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACR,GAAG,8BAA8B;oBACjC,YAAY,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,4PAA4P;wBACzQ,UAAU,EAAE,MAAM,CAAC,WAAW,CAC1B,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;4BACxB,OAAO;4BACP;gCACI,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,2BAA2B;6BAC3C;yBACJ,CAAC,CACL;qBACJ;iBACJ;gBACD,QAAQ,EAAE,CAAC,cAAc,CAAC;aAC7B;SACJ;KACJ,CAAC;AACN,CAAC;AAAA,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG,8CAA8C,CAAC;IACzF,YAAY,EAAE,mBAAmB;CACpC,CAAC,CAAC"}

package/dist/identity/identity-constants.d.mts

@@ -0,0 +1,72 @@
+/**
+ * @file identity-constants.mts
+ * @description Constants for the ibgib identity layer: pool IDs, verbs, KDF salts,
+ * IndexedDB store names, and default pool configuration presets.
+ *
+ * @see docs/identity/KEYSTONES.md
+ * @see docs/identity/TODO.md#02-identity-constants--verbs
+ */
+/** Evolve META: add a LOCAL keystone to the trusted list. */
+export declare const IDENTITY_VERB_ADD_DEVICE = "identity-add-device";
+/** Evolve META: remove a LOCAL keystone from the trusted list. */
+export declare const IDENTITY_VERB_REMOVE_DEVICE = "identity-remove-device";
+/** Evolve META: transfer custodianship (custodial → sovereign). */
+export declare const IDENTITY_VERB_CUSTODY_TRANSFER = "identity-custody-transfer";
+/** Evolve LOCAL: register a new APP-LOCAL keystone. */
+export declare const IDENTITY_VERB_ADD_APP = "identity-add-app";
+/** Evolve LOCAL: deregister an APP-LOCAL keystone. */
+export declare const IDENTITY_VERB_REMOVE_APP = "identity-remove-app";
+/** Evolve APP-LOCAL: establish a SESSION keystone genesis. */
+export declare const IDENTITY_VERB_ESTABLISH_SESSION = "identity-establish-session";
+/** Evolve APP-LOCAL: authorize an app-level action. */
+export declare const IDENTITY_VERB_AUTHORIZE = "identity-authorize";
+/**
+ * Evolve APP-LOCAL (final frame of old epoch): transition to a new epoch keystone.
+ * Uses `consume` replenish strategy — self-contained, no parent evolution needed.
+ * @see docs/identity/PARADIGM.md#epoch-rotation-handling-keystone-growth
+ */
+export declare const IDENTITY_VERB_EPOCH_TRANSITION = "identity-epoch-transition";
+/** META keystone: structural changes (add/remove device). */
+export declare const IDENTITY_POOL_ID_ADD_DEVICE = "identity-add-device";
+/** META keystone: structural changes (remove device). Separate pool allows tighter policy. */
+export declare const IDENTITY_POOL_ID_REMOVE_DEVICE = "identity-remove-device";
+/** META keystone: custody transfer (consume strategy — limited uses). */
+export declare const IDENTITY_POOL_ID_CUSTODY_TRANSFER = "identity-custody-transfer";
+/** LOCAL keystone: register/deregister app-local keystones. */
+export declare const IDENTITY_POOL_ID_ADD_APP = "identity-add-app";
+/** LOCAL keystone: deregister app-local keystones. */
+export declare const IDENTITY_POOL_ID_REMOVE_APP = "identity-remove-app";
+/** APP-LOCAL keystone: establish session keystones. */
+export declare const IDENTITY_POOL_ID_APP_SESSION = "identity-app-session";
+/** APP-LOCAL keystone: general app-level authorization. */
+export declare const IDENTITY_POOL_ID_APP_AUTHORIZE = "identity-app-authorize";
+/**
+ * APP-LOCAL keystone: epoch transition pool.
+ * Strategy: consume — self-authenticates epoch rotation without parent evolution.
+ */
+export declare const IDENTITY_POOL_ID_APP_EPOCH = "identity-app-epoch";
+export declare const IDENTITY_KDF_SALT_META = "ibgib-identity-meta-v1";
+export declare const IDENTITY_KDF_SALT_LOCAL = "ibgib-identity-local-v1";
+/**
+ * APP-LOCAL salt base. Full derivation:
+ * `KDF(MasterSecret_local, IDENTITY_KDF_SALT_APP_LOCAL + appId + deviceSalt)`
+ */
+export declare const IDENTITY_KDF_SALT_APP_LOCAL = "ibgib-identity-app-local-v1";
+export declare const IDENTITY_KDF_SALT_SESSION = "ibgib-identity-session-v1";
+/** Stores `LocalIdentityContext` — one record per browser profile. */
+export declare const IDENTITY_IDB_STORE_LOCAL_CONTEXT = "identity-local-context";
+/** Stores `AppLocalIdentityContext` — one record per appId per browser profile. */
+export declare const IDENTITY_IDB_STORE_APP_LOCAL_CONTEXT = "identity-app-local-context";
+/** Cached META keystone chain — periodically refreshed from identity service. */
+export declare const IDENTITY_IDB_STORE_META_CACHE = "identity-meta-cache";
+/** LOCAL keystone frames — genesis through current tip. */
+export declare const IDENTITY_IDB_STORE_LOCAL_CHAIN = "identity-local-chain";
+/** APP-LOCAL keystone frames — current epoch genesis through tip. */
+export declare const IDENTITY_IDB_STORE_APP_LOCAL_CHAIN = "identity-app-local-chain";
+/** Default max age for cached META chain for routine verification. */
+export declare const IDENTITY_META_CACHE_TTL_NORMAL_MS: number;
+/** For session establishment: always fetch fresh. */
+export declare const IDENTITY_META_CACHE_TTL_SESSION_MS = 0;
+/** For offline operation: no TTL (accept whatever is cached). */
+export declare const IDENTITY_META_CACHE_TTL_OFFLINE_MS: number;
+//# sourceMappingURL=identity-constants.d.mts.map

package/dist/identity/identity-constants.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-constants.d.mts","sourceRoot":"","sources":["../../src/identity/identity-constants.mts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAQH,6DAA6D;AAC7D,eAAO,MAAM,wBAAwB,wBAAwB,CAAC;AAC9D,kEAAkE;AAClE,eAAO,MAAM,2BAA2B,2BAA2B,CAAC;AACpE,mEAAmE;AACnE,eAAO,MAAM,8BAA8B,8BAA8B,CAAC;AAE1E,uDAAuD;AACvD,eAAO,MAAM,qBAAqB,qBAAqB,CAAC;AACxD,sDAAsD;AACtD,eAAO,MAAM,wBAAwB,wBAAwB,CAAC;AAE9D,8DAA8D;AAC9D,eAAO,MAAM,+BAA+B,+BAA+B,CAAC;AAC5E,uDAAuD;AACvD,eAAO,MAAM,uBAAuB,uBAAuB,CAAC;AAC5D;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,8BAA8B,CAAC;AAO1E,6DAA6D;AAC7D,eAAO,MAAM,2BAA2B,wBAAwB,CAAC;AACjE,8FAA8F;AAC9F,eAAO,MAAM,8BAA8B,2BAA2B,CAAC;AACvE,yEAAyE;AACzE,eAAO,MAAM,iCAAiC,8BAA8B,CAAC;AAE7E,+DAA+D;AAC/D,eAAO,MAAM,wBAAwB,qBAAqB,CAAC;AAC3D,sDAAsD;AACtD,eAAO,MAAM,2BAA2B,wBAAwB,CAAC;AAEjE,uDAAuD;AACvD,eAAO,MAAM,4BAA4B,yBAAyB,CAAC;AACnE,2DAA2D;AAC3D,eAAO,MAAM,8BAA8B,2BAA2B,CAAC;AACvE;;;GAGG;AACH,eAAO,MAAM,0BAA0B,uBAAuB,CAAC;AAQ/D,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAC/D,eAAO,MAAM,uBAAuB,4BAA4B,CAAC;AACjE;;;GAGG;AACH,eAAO,MAAM,2BAA2B,gCAAgC,CAAC;AACzE,eAAO,MAAM,yBAAyB,8BAA8B,CAAC;AAMrE,sEAAsE;AACtE,eAAO,MAAM,gCAAgC,2BAA2B,CAAC;AACzE,mFAAmF;AACnF,eAAO,MAAM,oCAAoC,+BAA+B,CAAC;AACjF,iFAAiF;AACjF,eAAO,MAAM,6BAA6B,wBAAwB,CAAC;AACnE,2DAA2D;AAC3D,eAAO,MAAM,8BAA8B,yBAAyB,CAAC;AACrE,qEAAqE;AACrE,eAAO,MAAM,kCAAkC,6BAA6B,CAAC;AAQ7E,sEAAsE;AACtE,eAAO,MAAM,iCAAiC,QAAiB,CAAC;AAChE,qDAAqD;AACrD,eAAO,MAAM,kCAAkC,IAAI,CAAC;AACpD,iEAAiE;AACjE,eAAO,MAAM,kCAAkC,QAAW,CAAC"}

package/dist/identity/identity-constants.mjs

@@ -0,0 +1,94 @@
+/**
+ * @file identity-constants.mts
+ * @description Constants for the ibgib identity layer: pool IDs, verbs, KDF salts,
+ * IndexedDB store names, and default pool configuration presets.
+ *
+ * @see docs/identity/KEYSTONES.md
+ * @see docs/identity/TODO.md#02-identity-constants--verbs
+ */
+// ===========================================================================
+// IDENTITY VERBS
+// These extend the base KeystoneVerb set with identity-tier-specific actions.
+// Used as values in KeystoneClaim.verb and KeystonePoolConfig.allowedVerbs.
+// ===========================================================================
+/** Evolve META: add a LOCAL keystone to the trusted list. */
+export const IDENTITY_VERB_ADD_DEVICE = 'identity-add-device';
+/** Evolve META: remove a LOCAL keystone from the trusted list. */
+export const IDENTITY_VERB_REMOVE_DEVICE = 'identity-remove-device';
+/** Evolve META: transfer custodianship (custodial → sovereign). */
+export const IDENTITY_VERB_CUSTODY_TRANSFER = 'identity-custody-transfer';
+/** Evolve LOCAL: register a new APP-LOCAL keystone. */
+export const IDENTITY_VERB_ADD_APP = 'identity-add-app';
+/** Evolve LOCAL: deregister an APP-LOCAL keystone. */
+export const IDENTITY_VERB_REMOVE_APP = 'identity-remove-app';
+/** Evolve APP-LOCAL: establish a SESSION keystone genesis. */
+export const IDENTITY_VERB_ESTABLISH_SESSION = 'identity-establish-session';
+/** Evolve APP-LOCAL: authorize an app-level action. */
+export const IDENTITY_VERB_AUTHORIZE = 'identity-authorize';
+/**
+ * Evolve APP-LOCAL (final frame of old epoch): transition to a new epoch keystone.
+ * Uses `consume` replenish strategy — self-contained, no parent evolution needed.
+ * @see docs/identity/PARADIGM.md#epoch-rotation-handling-keystone-growth
+ */
+export const IDENTITY_VERB_EPOCH_TRANSITION = 'identity-epoch-transition';
+// ===========================================================================
+// POOL IDs
+// Conventional pool identifiers for each identity tier's pools.
+// ===========================================================================
+/** META keystone: structural changes (add/remove device). */
+export const IDENTITY_POOL_ID_ADD_DEVICE = 'identity-add-device';
+/** META keystone: structural changes (remove device). Separate pool allows tighter policy. */
+export const IDENTITY_POOL_ID_REMOVE_DEVICE = 'identity-remove-device';
+/** META keystone: custody transfer (consume strategy — limited uses). */
+export const IDENTITY_POOL_ID_CUSTODY_TRANSFER = 'identity-custody-transfer';
+/** LOCAL keystone: register/deregister app-local keystones. */
+export const IDENTITY_POOL_ID_ADD_APP = 'identity-add-app';
+/** LOCAL keystone: deregister app-local keystones. */
+export const IDENTITY_POOL_ID_REMOVE_APP = 'identity-remove-app';
+/** APP-LOCAL keystone: establish session keystones. */
+export const IDENTITY_POOL_ID_APP_SESSION = 'identity-app-session';
+/** APP-LOCAL keystone: general app-level authorization. */
+export const IDENTITY_POOL_ID_APP_AUTHORIZE = 'identity-app-authorize';
+/**
+ * APP-LOCAL keystone: epoch transition pool.
+ * Strategy: consume — self-authenticates epoch rotation without parent evolution.
+ */
+export const IDENTITY_POOL_ID_APP_EPOCH = 'identity-app-epoch';
+// ===========================================================================
+// KDF SALTS
+// Used to derive tier-specific MasterSecrets from a root passphrase.
+// Different salt per tier ensures independent secrets even with same passphrase.
+// ===========================================================================
+export const IDENTITY_KDF_SALT_META = 'ibgib-identity-meta-v1';
+export const IDENTITY_KDF_SALT_LOCAL = 'ibgib-identity-local-v1';
+/**
+ * APP-LOCAL salt base. Full derivation:
+ * `KDF(MasterSecret_local, IDENTITY_KDF_SALT_APP_LOCAL + appId + deviceSalt)`
+ */
+export const IDENTITY_KDF_SALT_APP_LOCAL = 'ibgib-identity-app-local-v1';
+export const IDENTITY_KDF_SALT_SESSION = 'ibgib-identity-session-v1';
+// ===========================================================================
+// INDEXEDDB STORE NAMES
+// ===========================================================================
+/** Stores `LocalIdentityContext` — one record per browser profile. */
+export const IDENTITY_IDB_STORE_LOCAL_CONTEXT = 'identity-local-context';
+/** Stores `AppLocalIdentityContext` — one record per appId per browser profile. */
+export const IDENTITY_IDB_STORE_APP_LOCAL_CONTEXT = 'identity-app-local-context';
+/** Cached META keystone chain — periodically refreshed from identity service. */
+export const IDENTITY_IDB_STORE_META_CACHE = 'identity-meta-cache';
+/** LOCAL keystone frames — genesis through current tip. */
+export const IDENTITY_IDB_STORE_LOCAL_CHAIN = 'identity-local-chain';
+/** APP-LOCAL keystone frames — current epoch genesis through tip. */
+export const IDENTITY_IDB_STORE_APP_LOCAL_CHAIN = 'identity-app-local-chain';
+// ===========================================================================
+// STALENESS POLICY DEFAULTS (milliseconds)
+// App-level policy: how old can a cached META chain be before re-fetch?
+// @see docs/identity/PARADIGM.md#staleness-policy
+// ===========================================================================
+/** Default max age for cached META chain for routine verification. */
+export const IDENTITY_META_CACHE_TTL_NORMAL_MS = 60 * 60 * 1000; // 1 hour
+/** For session establishment: always fetch fresh. */
+export const IDENTITY_META_CACHE_TTL_SESSION_MS = 0;
+/** For offline operation: no TTL (accept whatever is cached). */
+export const IDENTITY_META_CACHE_TTL_OFFLINE_MS = Infinity;
+//# sourceMappingURL=identity-constants.mjs.map

package/dist/identity/identity-constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-constants.mjs","sourceRoot":"","sources":["../../src/identity/identity-constants.mts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAE9E,6DAA6D;AAC7D,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAC9D,kEAAkE;AAClE,MAAM,CAAC,MAAM,2BAA2B,GAAG,wBAAwB,CAAC;AACpE,mEAAmE;AACnE,MAAM,CAAC,MAAM,8BAA8B,GAAG,2BAA2B,CAAC;AAE1E,uDAAuD;AACvD,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AACxD,sDAAsD;AACtD,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAE9D,8DAA8D;AAC9D,MAAM,CAAC,MAAM,+BAA+B,GAAG,4BAA4B,CAAC;AAC5E,uDAAuD;AACvD,MAAM,CAAC,MAAM,uBAAuB,GAAG,oBAAoB,CAAC;AAC5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,2BAA2B,CAAC;AAE1E,8EAA8E;AAC9E,WAAW;AACX,gEAAgE;AAChE,8EAA8E;AAE9E,6DAA6D;AAC7D,MAAM,CAAC,MAAM,2BAA2B,GAAG,qBAAqB,CAAC;AACjE,8FAA8F;AAC9F,MAAM,CAAC,MAAM,8BAA8B,GAAG,wBAAwB,CAAC;AACvE,yEAAyE;AACzE,MAAM,CAAC,MAAM,iCAAiC,GAAG,2BAA2B,CAAC;AAE7E,+DAA+D;AAC/D,MAAM,CAAC,MAAM,wBAAwB,GAAG,kBAAkB,CAAC;AAC3D,sDAAsD;AACtD,MAAM,CAAC,MAAM,2BAA2B,GAAG,qBAAqB,CAAC;AAEjE,uDAAuD;AACvD,MAAM,CAAC,MAAM,4BAA4B,GAAG,sBAAsB,CAAC;AACnE,2DAA2D;AAC3D,MAAM,CAAC,MAAM,8BAA8B,GAAG,wBAAwB,CAAC;AACvE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,oBAAoB,CAAC;AAE/D,8EAA8E;AAC9E,YAAY;AACZ,qEAAqE;AACrE,iFAAiF;AACjF,8EAA8E;AAE9E,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAC/D,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AACjE;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,6BAA6B,CAAC;AACzE,MAAM,CAAC,MAAM,yBAAyB,GAAG,2BAA2B,CAAC;AAErE,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,sEAAsE;AACtE,MAAM,CAAC,MAAM,gCAAgC,GAAG,wBAAwB,CAAC;AACzE,mFAAmF;AACnF,MAAM,CAAC,MAAM,oCAAoC,GAAG,4BAA4B,CAAC;AACjF,iFAAiF;AACjF,MAAM,CAAC,MAAM,6BAA6B,GAAG,qBAAqB,CAAC;AACnE,2DAA2D;AAC3D,MAAM,CAAC,MAAM,8BAA8B,GAAG,sBAAsB,CAAC;AACrE,qEAAqE;AACrE,MAAM,CAAC,MAAM,kCAAkC,GAAG,0BAA0B,CAAC;AAE7E,8EAA8E;AAC9E,2CAA2C;AAC3C,wEAAwE;AACxE,kDAAkD;AAClD,8EAA8E;AAE9E,sEAAsE;AACtE,MAAM,CAAC,MAAM,iCAAiC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAC1E,qDAAqD;AACrD,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC;AACpD,iEAAiE;AACjE,MAAM,CAAC,MAAM,kCAAkC,GAAG,QAAQ,CAAC"}

package/dist/identity/identity-types.d.mts

@@ -0,0 +1,214 @@
+/**
+ * @file identity-types.mts
+ * @description Type definitions for the four-tier ibgib identity hierarchy.
+ *
+ * ## Tier Overview
+ * ```
+ * META keystone           → universal identity handle (cross-app, cross-device)
+ * └─ LOCAL keystone       → device/browser-profile-scoped identity
+ *    └─ APP-LOCAL keystone → app-scoped identity (one per app per browser profile)
+ *       └─ SESSION keystone → session-scoped (existing sync protocol)
+ * ```
+ *
+ * @see docs/identity/PARADIGM.md
+ * @see docs/identity/KEYSTONES.md
+ */
+import { IbGibAddr } from "@ibgib/ts-gib/dist/types.mjs";
+import { KeystoneData_V1, KeystoneIbGib_V1 } from "@ibgib/core-gib/dist/keystone/keystone-types.mjs";
+/**
+ * Data shape for the META keystone tier.
+ *
+ * The META keystone is the user's universal identity — stable across all apps,
+ * devices, and time. Its `tjpGib` is the user's permanent identity handle.
+ *
+ * @see docs/identity/KEYSTONES.md#meta-keystone
+ * @see docs/identity/PARADIGM.md#meta-keystone
+ */
+export interface MetaKeystoneData extends KeystoneData_V1 {
+    /**
+     * List of LOCAL keystone `tjpGib` values currently trusted by this identity.
+     *
+     * This is the **trust register** — an app verifies a user by finding the
+     * LOCAL keystone's tjpGib in this list from the current META frame.
+     *
+     * Mutated by: add-device evolution (append), remove-device evolution (remove).
+     *
+     * @see docs/identity/PARADIGM.md#cross-app-identity
+     */
+    trustedLocalTjpGibs: IbGibAddr[];
+    /**
+     * For custodial keystones: the publicly-visible nonce used by the custodian
+     * to re-derive `MasterSecret_user = KDF(server_secret, custodialNonce)`.
+     *
+     * No secrecy requirement — security comes from `server_secret` alone.
+     * Stored here so the custodian needs no separate mapping table.
+     *
+     * Undefined for sovereign (user-held) keystones.
+     *
+     * @see docs/identity/PARADIGM.md#custodianship--the-oauth2-path
+     * @see docs/identity/FLOWS.md#flow-2-first-login--custodial-path-oauth2
+     */
+    custodialNonce?: string;
+}
+/**
+ * Data shape for the LOCAL keystone tier.
+ *
+ * Device/browser-profile-scoped identity. Evolves offline. Lives in IndexedDB.
+ * One per browser profile per user.
+ *
+ * @see docs/identity/KEYSTONES.md#local-keystone
+ */
+export interface LocalKeystoneData extends KeystoneData_V1 {
+    /**
+     * Map of registered APP-LOCAL keystones on this browser profile.
+     *
+     * Key: `appId`
+     * Value: the **first epoch** APP-LOCAL keystone `tjpGib` for that app.
+     *
+     * Subsequent epochs are authenticated transitively through the APP-LOCAL
+     * epoch chain — the LOCAL keystone does NOT need to evolve for epoch rotation.
+     *
+     * Mutated by: add-app evolution (set), remove-app evolution (delete).
+     *
+     * @see docs/identity/PARADIGM.md#epoch-rotation-handling-keystone-growth
+     */
+    registeredAppLocals: Record<string, IbGibAddr>;
+}
+/**
+ * Data shape for the APP-LOCAL keystone tier.
+ *
+ * App-scoped identity for a specific browser profile + app combination.
+ * Evolves offline. Lives in IndexedDB (client) and app server (synced).
+ * One per app per browser profile per user.
+ *
+ * @see docs/identity/KEYSTONES.md#app-local-keystone
+ */
+export interface AppLocalKeystoneData extends KeystoneData_V1 {
+    /** The app identifier this APP-LOCAL belongs to. */
+    appId: string;
+    /**
+     * The LOCAL keystone `tjpGib` this APP-LOCAL is derived from.
+     * Used by verifiers to link APP-LOCAL trust back to LOCAL → META.
+     */
+    localTjpGib: IbGibAddr;
+    /**
+     * The META keystone `tjpGib` for this identity.
+     * Stored for reference/display. The authoritative trust chain is
+     * always verified by replaying META → LOCAL → APP-LOCAL.
+     */
+    metaTjpGib: IbGibAddr;
+    /**
+     * For epoch-chained APP-LOCAL keystones: the ibgib address of the
+     * **final frame** of the previous epoch. Establishes the transitive
+     * trust chain from the first epoch.
+     *
+     * Undefined for the first epoch (no prior epoch).
+     *
+     * @see docs/identity/PARADIGM.md#epoch-rotation-handling-keystone-growth
+     */
+    prevEpochFinalFrameAddr?: IbGibAddr;
+}
+/**
+ * The browser-local identity context for a user on this browser profile.
+ * Stored in IndexedDB. Reconstructed from keystone chains if lost.
+ *
+ * @see docs/identity/FLOWS.md#flow-3-return-login--same-browser-profile
+ * @see docs/identity/PARTIES.md#party-app-client
+ */
+export interface LocalIdentityContext {
+    /** The user's universal identity handle. Used for cross-app identity. */
+    metaTjpGib: IbGibAddr;
+    /** URL of the identity service hosting the user's META keystone. */
+    identityServiceUrl: string;
+    /** This browser profile's LOCAL keystone `tjpGib`. */
+    localTjpGib: IbGibAddr;
+}
+/**
+ * Per-app identity context for a specific browser profile + app.
+ * Stored in IndexedDB by the app client.
+ *
+ * @see docs/identity/KEYSTONES.md#app-local-keystone
+ */
+export interface AppLocalIdentityContext {
+    /** The user's universal identity handle. */
+    metaTjpGib: IbGibAddr;
+    /** This browser profile's LOCAL keystone `tjpGib`. */
+    localTjpGib: IbGibAddr;
+    /**
+     * The **current** (possibly epoch-N) APP-LOCAL keystone `tjpGib`.
+     * Updated in-place after each epoch rotation.
+     */
+    appLocalTjpGib: IbGibAddr;
+    /** The app identifier. */
+    appId: string;
+}
+/**
+ * The shared identity space — a write-verifying history store.
+ *
+ * NOT an authority. Verifies chain continuity on writes. Serves raw chain
+ * data on reads. Any party can independently verify the chain it returns.
+ *
+ * Initial deployment: hosted on the app's server. Federated by design.
+ *
+ * @see docs/identity/PARADIGM.md#the-shared-identity-space
+ * @see docs/identity/PARTIES.md#party-identity-service
+ */
+export interface IIdentityService {
+    /**
+     * POST a genesis frame — accepted unconditionally if internally valid.
+     * Genesis is self-legitimizing: Alice's identity IS her genesis frame.
+     *
+     * @returns the `tjpGib` (ibgib address of the genesis frame)
+     * @throws if the frame is internally invalid (malformed structure)
+     */
+    postGenesis(frame: KeystoneIbGib_V1): Promise<{
+        tjpGib: IbGibAddr;
+    }>;
+    /**
+     * POST an evolution frame.
+     * Verifies chain continuity: revealed solutions must hash-match prior
+     * frame's commitments. Implements CAS: rejects if prior frame is stale.
+     *
+     * @throws `IdentityServiceStaleTipError` if prior frame is no longer tip
+     * @throws `IdentityServiceChainError` if hash pre-images are invalid
+     */
+    postEvolution(frame: KeystoneIbGib_V1): Promise<void>;
+    /**
+     * GET the full keystone chain from genesis to current tip.
+     *
+     * Does NOT change state. Safe to call without coordination.
+     */
+    getChain(tjpGib: IbGibAddr): Promise<KeystoneIbGib_V1[]>;
+    /**
+     * GET the current tip frame for a keystone.
+     *
+     * Does NOT change state.
+     */
+    getTip(tjpGib: IbGibAddr): Promise<KeystoneIbGib_V1>;
+}
+/**
+ * Inputs for deriving a tier-specific MasterSecret from a root passphrase.
+ *
+ * Each tier uses a different salt to ensure independent MasterSecrets
+ * even when the same passphrase is used for all tiers.
+ *
+ * @see docs/identity/KEYSTONES.md for per-tier salt conventions
+ * @see identity-helpers.mts for derivation functions
+ */
+export interface MasterSecretDerivationContext {
+    /** The root passphrase (sovereign path) or server secret (custodial path). */
+    passphrase: string;
+    /**
+     * Tier-specific salt (e.g., `IDENTITY_KDF_SALT_META`, `IDENTITY_KDF_SALT_LOCAL`).
+     * @see identity-constants.mts
+     */
+    salt: string;
+    /**
+     * Additional device-specific entropy for LOCAL and APP-LOCAL tiers.
+     * Generated once per browser profile and stored in IndexedDB.
+     */
+    deviceSalt?: string;
+    /** For APP-LOCAL tier: the app identifier, mixed into derivation. */
+    appId?: string;
+}
+//# sourceMappingURL=identity-types.d.mts.map

package/dist/identity/identity-types.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-types.d.mts","sourceRoot":"","sources":["../../src/identity/identity-types.mts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,kDAAkD,CAAC;AAMrG;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAiB,SAAQ,eAAe;IACrD;;;;;;;;;OASG;IACH,mBAAmB,EAAE,SAAS,EAAE,CAAC;IAEjC;;;;;;;;;;;OAWG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAkB,SAAQ,eAAe;IACtD;;;;;;;;;;;;OAYG;IACH,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CAClD;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAqB,SAAQ,eAAe;IACzD,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IAEd;;;OAGG;IACH,WAAW,EAAE,SAAS,CAAC;IAEvB;;;;OAIG;IACH,UAAU,EAAE,SAAS,CAAC;IAEtB;;;;;;;;OAQG;IACH,uBAAuB,CAAC,EAAE,SAAS,CAAC;CACvC;AAMD;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACjC,yEAAyE;IACzE,UAAU,EAAE,SAAS,CAAC;IAEtB,oEAAoE;IACpE,kBAAkB,EAAE,MAAM,CAAC;IAE3B,sDAAsD;IACtD,WAAW,EAAE,SAAS,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACpC,4CAA4C;IAC5C,UAAU,EAAE,SAAS,CAAC;IAEtB,sDAAsD;IACtD,WAAW,EAAE,SAAS,CAAC;IAEvB;;;OAGG;IACH,cAAc,EAAE,SAAS,CAAC;IAE1B,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAC;CACjB;AAMD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gBAAgB;IAC7B;;;;;;OAMG;IACH,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,SAAS,CAAA;KAAE,CAAC,CAAC;IAErE;;;;;;;OAOG;IACH,aAAa,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtD;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAEzD;;;;OAIG;IACH,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACxD;AAMD;;;;;;;;GAQG;AACH,MAAM,WAAW,6BAA6B;IAC1C,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/dist/identity/identity-types.mjs

@@ -0,0 +1,17 @@
+/**
+ * @file identity-types.mts
+ * @description Type definitions for the four-tier ibgib identity hierarchy.
+ *
+ * ## Tier Overview
+ * ```
+ * META keystone           → universal identity handle (cross-app, cross-device)
+ * └─ LOCAL keystone       → device/browser-profile-scoped identity
+ *    └─ APP-LOCAL keystone → app-scoped identity (one per app per browser profile)
+ *       └─ SESSION keystone → session-scoped (existing sync protocol)
+ * ```
+ *
+ * @see docs/identity/PARADIGM.md
+ * @see docs/identity/KEYSTONES.md
+ */
+export {};
+//# sourceMappingURL=identity-types.mjs.map

package/dist/identity/identity-types.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-types.mjs","sourceRoot":"","sources":["../../src/identity/identity-types.mts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}