@intentic/sandbox-contract 1.267.0 → 1.269.0

package/src/state/workspace-state.test.ts

@@ -259,6 +259,7 @@ describe(`isReviewableLockedPath`, () => {
         // None of the rest is versioned, so none is diff-reachable; the carve-out can't widen without that flag.
         expect(isReviewableLockedPath(`.intentic/identity/owner.json`)).toBe(false);
         expect(isReviewableLockedPath(`.intentic/identity/members.json`)).toBe(false);
+        expect(isReviewableLockedPath(`.intentic/identity/passkeys.json`)).toBe(false);
         expect(isReviewableLockedPath(`.intentic/secrets/ci.json`)).toBe(false);
         expect(isReviewableLockedPath(`.intentic/secrets/auth/codex/auth.json`)).toBe(false);
         expect(isReviewableLockedPath(`.intentic/records/sessions/claude/x.jsonl`)).toBe(false);
@@ -518,7 +519,7 @@ describe(`BACKED_UP_STATE_PATHS`, () => {
 
     // identity means never restoring into another sandbox; that doesn't stop the owner keeping their own copy.
     it(`copies the ownership records that may never travel`, () => {
-        for (const path of [`.intentic/identity/owner.json`, `.intentic/identity/members.json`, `.intentic/identity/workspace.json`]) {
+        for (const path of [`.intentic/identity/owner.json`, `.intentic/identity/members.json`, `.intentic/identity/workspace.json`, `.intentic/identity/passkeys.json`]) {
             expect([path, BACKED_UP_STATE_PATHS.includes(path)]).toEqual([path, true]);
         }
     });

package/src/state/workspace-state.ts

@@ -406,6 +406,16 @@ const STATE_FILES = [
         why: "The workspace identity, read from the /events hello frame rather than as a file.",
         portability: "identity",
     },
+    // Public keys and the owner's require-a-passkey switch; the one credential-shaped thing in it, the recovery codes,
+    // is stored hashed. `identity` because a passkey admits its holder to THIS sandbox: a copy that traveled would let
+    // a source sandbox's passkeys open the target.
+    {
+        path: ".intentic/identity/passkeys.json",
+        invalidates: [],
+        why: "The passkeys registered with this sandbox, whether one is required to open it, and the hashes of the owner's recovery codes; the Access tab reads them through /system/passkeys, never off disk.",
+        portability: "identity",
+        note: "Passkeys are bound to the sandbox they were registered with: add them again on the new one from its Access tab.",
+    },
     {
         path: ".intentic/config/templates.json",
         invalidates: [],
@@ -563,6 +573,7 @@ export const LOCKED_STATE_ENTRIES: ReadonlySet<string> = new Set([
     "identity/owner.json",
     "identity/members.json",
     "identity/control-tokens.json",
+    "identity/passkeys.json",
     "config/capabilities.json",
     "secrets/ci.json",
     "secrets/doors.json",