@interop/wallet-core 0.71.0 → 0.72.0

package/dist/keyring/unlockSpace.js

@@ -6,9 +6,15 @@
  * and separate from the wallet data Space, holding the one keyring record.
  * These are standalone functions rather than methods on a wallet's remote-store
  * class (that store is bound to the data identity): each builds its own
- * `WasClient` over the unlock agent's `zcapClient`, whose invocation signer is
- * the unlock root key (root invocation, no capability attached -- the same
- * invocation shape the data Space uses).
+ * `WasClient` over the caller's `zcapClient`. By default that is the unlock
+ * agent's, whose invocation signer is the unlock root key (root invocation,
+ * no capability attached -- the same invocation shape the data Space uses).
+ * Each read/write/delete also takes an optional `capability`: an enrolled
+ * client's `zcapClient` then invokes the management zcap the unlock identity
+ * delegated at bind time, which is how a ceremony reaches an unlock Space
+ * without holding its secret (the revocation cascade's re-mint reading and
+ * re-PUTting a recovery code's standing record, or a lost unlock method's
+ * Space being retired).
  *
  * The one resource is a plaintext JSON document (its keyring payload is
  * already ciphertext), so no encryption provider is wired in and every
@@ -16,7 +22,6 @@
  * here for the absent Space a fresh unlock secret's keyring lookup meets.
  */
 import { WasClient } from '@interop/was-client';
-import { resourcePath } from '@interop/was-client/paths';
 import { KEYRING_COLLECTION, KEYRING_RESOURCE } from '../space/collections.js';
 import { plaintextCollection } from '../space/plaintextCollection.js';
 /**
@@ -74,11 +79,18 @@ async function ensurePlaintextCollection({ storageServerUrl, zcapClient, spaceId
  * @param options.spaceId {string}
  * @param options.collectionId {string}
  * @param options.resourceId {string}
+ * @param [options.capability] {IZcap}   an invocation capability the GET
+ *   rides; absent, the request invokes the root capability
  * @returns {Promise<unknown | null>}
  */
-async function getPlaintextRecord({ storageServerUrl, zcapClient, spaceId, collectionId, resourceId }) {
+async function getPlaintextRecord({ storageServerUrl, zcapClient, spaceId, collectionId, resourceId, capability }) {
     const was = unlockSpaceClient({ storageServerUrl, zcapClient });
-    const result = await plaintextCollection({ was, spaceId, collectionId })
+    const result = await plaintextCollection({
+        was,
+        spaceId,
+        collectionId,
+        capability
+    })
         .resource(resourceId)
         .get();
     return result === null ? null : result;
@@ -94,12 +106,14 @@ async function getPlaintextRecord({ storageServerUrl, zcapClient, spaceId, colle
  * @param options.collectionId {string}
  * @param options.resourceId {string}
  * @param options.record {object}
+ * @param [options.capability] {IZcap}   an invocation capability the PUT
+ *   rides; absent, the request invokes the root capability
  * @returns {Promise<void>}
  */
-async function putPlaintextRecord({ storageServerUrl, zcapClient, spaceId, collectionId, resourceId, record }) {
+async function putPlaintextRecord({ storageServerUrl, zcapClient, spaceId, collectionId, resourceId, record, capability }) {
     const was = unlockSpaceClient({ storageServerUrl, zcapClient });
     const body = new TextEncoder().encode(JSON.stringify(record));
-    await plaintextCollection({ was, spaceId, collectionId })
+    await plaintextCollection({ was, spaceId, collectionId, capability })
         .resource(resourceId)
         .put(body, { contentType: 'application/json' });
 }
@@ -133,126 +147,90 @@ export async function ensureUnlockSpace({ storageServerUrl, zcapClient, spaceId,
  * does not exist yet. A network / unreachable error propagates, so callers can
  * distinguish "no keyring" from "could not check".
  *
+ * With a `capability`, the `zcapClient` is an enrolled client's rather than
+ * the unlock identity's, and the attached management zcap (delegated by the
+ * unlock identity at bind time; it must allow GET) authorizes the read. This
+ * is what lets the revocation cascade's re-mint read a recovery code's
+ * standing record without holding the code: the record's code-authenticated
+ * binding rides the frame in the clear, so carrying it forward verbatim needs
+ * no decryption.
+ *
  * @param options {object}
  * @param options.storageServerUrl {string}
  * @param options.zcapClient {ZcapClient}
  * @param options.spaceId {string}   the unlock Space id
+ * @param [options.capability] {IZcap}   the delegated management zcap;
+ *   absent, the read is a root invocation
  * @returns {Promise<unknown | null>}
  */
-export async function getUnlockKeyring({ storageServerUrl, zcapClient, spaceId }) {
+export async function getUnlockKeyring({ storageServerUrl, zcapClient, spaceId, capability }) {
     return getPlaintextRecord({
         storageServerUrl,
         zcapClient,
         spaceId,
         collectionId: KEYRING_COLLECTION.id,
-        resourceId: KEYRING_RESOURCE
+        resourceId: KEYRING_RESOURCE,
+        capability
     });
 }
 /**
  * Writes (upserts) the keyring record into the unlock Space as a JSON document.
  *
+ * With a `capability`, the `zcapClient` is an enrolled client's rather than
+ * the unlock identity's, and the attached management zcap (delegated by the
+ * unlock identity at bind time; it must allow PUT) authorizes the write. This
+ * is what lets the revocation cascade re-PUT a recovery code's unlock record
+ * (a fresh `did.jsonl` delegation inside a re-wrapped record) without holding
+ * the code: the record's JWE recipient is the code's unlock KAK, whose PUBLIC
+ * half the issuing client recorded, so re-encryption needs no secret.
+ *
  * @param options {object}
  * @param options.storageServerUrl {string}
  * @param options.zcapClient {ZcapClient}
  * @param options.spaceId {string}   the unlock Space id
  * @param options.record {object}   the keyring record
+ * @param [options.capability] {IZcap}   the delegated management zcap;
+ *   absent, the write is a root invocation
  * @returns {Promise<void>}
  */
-export async function putUnlockKeyring({ storageServerUrl, zcapClient, spaceId, record }) {
+export async function putUnlockKeyring({ storageServerUrl, zcapClient, spaceId, record, capability }) {
     await putPlaintextRecord({
         storageServerUrl,
         zcapClient,
         spaceId,
         collectionId: KEYRING_COLLECTION.id,
         resourceId: KEYRING_RESOURCE,
-        record
-    });
-}
-/**
- * Reads the keyring record with an explicitly attached management capability,
- * rather than by root invocation, or returns `null` when it does not exist.
- * The `zcapClient` here is an enrolled client's (not the unlock identity's);
- * the attached `capability` -- the management zcap the unlock identity
- * delegated at bind time, provided it allows GET -- authorizes the read
- * against the unlock Space. This is what lets the revocation cascade's
- * re-mint read a recovery code's standing record without holding the code:
- * the record's code-authenticated binding rides the frame in the clear, so
- * carrying it forward verbatim needs no decryption.
- *
- * @param options {object}
- * @param options.storageServerUrl {string}
- * @param options.zcapClient {ZcapClient}   an enrolled client's zcap client
- * @param options.spaceId {string}   the unlock Space id
- * @param options.capability {IZcap}   the delegated management zcap (must
- *   allow GET)
- * @returns {Promise<unknown | null>}
- */
-export async function getUnlockKeyringWithCapability({ storageServerUrl, zcapClient, spaceId, capability }) {
-    const was = unlockSpaceClient({ storageServerUrl, zcapClient });
-    const result = await plaintextCollection({
-        was,
-        spaceId,
-        collectionId: KEYRING_COLLECTION.id,
+        record,
         capability
-    })
-        .resource(KEYRING_RESOURCE)
-        .get();
-    return result === null ? null : result;
-}
-/**
- * Writes (upserts) the keyring record with an explicitly attached management
- * capability, rather than by root invocation. The `zcapClient` here is an
- * enrolled client's (not the unlock identity's); the attached `capability` --
- * the management zcap the unlock identity delegated at bind time, provided it
- * allows PUT -- authorizes the write against the unlock Space. This is what
- * lets the revocation cascade re-PUT a recovery code's unlock record (a fresh
- * `did.jsonl` delegation inside a re-wrapped record) without holding the
- * code: the record's JWE recipient is the code's unlock KAK, whose PUBLIC
- * half the issuing client recorded, so re-encryption needs no secret.
- *
- * @param options {object}
- * @param options.storageServerUrl {string}
- * @param options.zcapClient {ZcapClient}   an enrolled client's zcap client
- * @param options.spaceId {string}   the unlock Space id
- * @param options.record {object}   the keyring record
- * @param options.capability {IZcap}   the delegated management zcap (must
- *   allow PUT)
- * @returns {Promise<void>}
- */
-export async function putUnlockKeyringWithCapability({ storageServerUrl, zcapClient, spaceId, record, capability }) {
-    const was = unlockSpaceClient({ storageServerUrl, zcapClient });
-    const body = new TextEncoder().encode(JSON.stringify(record));
-    await was.request({
-        capability,
-        path: resourcePath(spaceId, KEYRING_COLLECTION.id, KEYRING_RESOURCE),
-        method: 'PUT',
-        headers: { 'content-type': 'application/json' },
-        body
     });
 }
 /**
  * Deletes the whole unlock Space (what retires an old passphrase on a
- * passphrase change). `space.delete()` is idempotent, so an already-absent
- * Space is a success.
+ * passphrase change, or a lost unlock method). The server's answer is
+ * reported rather than decided here: an already-absent Space comes back as
+ * `not-found`, and only a non-404 error propagates, so a caller that treats
+ * the delete as idempotent ignores the outcome.
+ *
+ * With a `capability`, the `zcapClient` is an enrolled client's rather than
+ * the unlock identity's, and the attached management zcap (delegated by the
+ * unlock identity to the data identity at bind time; it must allow DELETE on
+ * the Space's own URL) authorizes the delete -- retiring a lost unlock method
+ * without re-deriving its identity from the (possibly lost) secret. The
+ * server answers 404 both for an absent Space and for a refused capability,
+ * so `not-found` is not a statement of absence on its own.
  *
  * @param options {object}
  * @param options.storageServerUrl {string}
  * @param options.zcapClient {ZcapClient}
  * @param options.spaceId {string}   the unlock Space id
- * @returns {Promise<void>}
+ * @param [options.capability] {IZcap}   the delegated management zcap;
+ *   absent, the delete is a root invocation
+ * @returns {Promise<{ outcome: 'deleted' | 'not-found' }>}   `not-found`
+ *   when the server answered 404 (absent, or unauthorized under a
+ *   capability); every other error propagates unchanged
  */
-export async function deleteUnlockSpace({ storageServerUrl, zcapClient, spaceId }) {
+export async function deleteUnlockSpace({ storageServerUrl, zcapClient, spaceId, capability }) {
     const was = unlockSpaceClient({ storageServerUrl, zcapClient });
-    await was.space(spaceId).delete();
+    return was.space(spaceId, { capability }).deleteWithOutcome();
 }
-/**
- * The unlock Space's name for the one capability-authorized Space DELETE
- * ({@link deleteSpaceWithCapability}). The alias stands because an unlock
- * Space's deletion is the one this module's callers reach for -- retiring a
- * lost unlock method with the management zcap the unlock identity delegated
- * to the data identity at bind time, rather than by re-deriving the unlock
- * identity from the (possibly lost) secret -- while the request itself is
- * the shared one, 404 outcome and all.
- */
-export { deleteSpaceWithCapability as deleteUnlockSpaceWithCapability } from '../space/deleteSpace.js';
 //# sourceMappingURL=unlockSpace.js.map

package/dist/keyring/unlockSpace.js.map

@@ -1 +1 @@
-{"version":3,"file":"unlockSpace.js","sourceRoot":"","sources":["../../src/keyring/unlockSpace.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAGxD,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAA;AAErE;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAA;AAErD;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,EACzB,gBAAgB,EAChB,UAAU,EAIX;IACC,OAAO,IAAI,SAAS,CAAC;QACnB,SAAS,EAAE,gBAAgB;QAC3B,UAAU;KACX,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,yBAAyB,CAAC,EACvC,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,YAAY,EACZ,IAAI,EAOL;IACC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAA;IAC/D,MAAM,GAAG;SACN,KAAK,CAAC,OAAO,CAAC;SACd,UAAU,CAAC,YAAY,CAAC;SACxB,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AACrC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,kBAAkB,CAAC,EAChC,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,YAAY,EACZ,UAAU,EAOX;IACC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAA;IAC/D,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;SACrE,QAAQ,CAAC,UAAU,CAAC;SACpB,GAAG,EAAE,CAAA;IACR,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAA;AACxC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,kBAAkB,CAAC,EAChC,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,YAAY,EACZ,UAAU,EACV,MAAM,EAQP;IACC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAA;IAC/D,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7D,MAAM,mBAAmB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;SACtD,QAAQ,CAAC,UAAU,CAAC;SACpB,GAAG,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAA;AACnD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,UAAU,EACV,IAAI,GAAG,iBAAiB,EAOzB;IACC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAA;IAC/D,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAA;IACxD,MAAM,yBAAyB,CAAC;QAC9B,gBAAgB;QAChB,UAAU;QACV,OAAO;QACP,YAAY,EAAE,kBAAkB,CAAC,EAAE;QACnC,IAAI,EAAE,kBAAkB,CAAC,IAAI;KAC9B,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,gBAAgB,EAChB,UAAU,EACV,OAAO,EAKR;IACC,OAAO,kBAAkB,CAAC;QACxB,gBAAgB;QAChB,UAAU;QACV,OAAO;QACP,YAAY,EAAE,kBAAkB,CAAC,EAAE;QACnC,UAAU,EAAE,gBAAgB;KAC7B,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,MAAM,EAMP;IACC,MAAM,kBAAkB,CAAC;QACvB,gBAAgB;QAChB,UAAU;QACV,OAAO;QACP,YAAY,EAAE,kBAAkB,CAAC,EAAE;QACnC,UAAU,EAAE,gBAAgB;QAC5B,MAAM;KACP,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,EACnD,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,UAAU,EAMX;IACC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAA;IAC/D,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;QACvC,GAAG;QACH,OAAO;QACP,YAAY,EAAE,kBAAkB,CAAC,EAAE;QACnC,UAAU;KACX,CAAC;SACC,QAAQ,CAAC,gBAAgB,CAAC;SAC1B,GAAG,EAAE,CAAA;IACR,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAA;AACxC,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,EACnD,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,MAAM,EACN,UAAU,EAOX;IACC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAA;IAC/D,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7D,MAAM,GAAG,CAAC,OAAO,CAAC;QAChB,UAAU;QACV,IAAI,EAAE,YAAY,CAAC,OAAO,EAAE,kBAAkB,CAAC,EAAE,EAAE,gBAAgB,CAAC;QACpE,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI;KACL,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,gBAAgB,EAChB,UAAU,EACV,OAAO,EAKR;IACC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAA;IAC/D,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAA;AACnC,CAAC;AAED;;;;;;;;GAQG;AACH,OAAO,EAAE,yBAAyB,IAAI,+BAA+B,EAAE,MAAM,yBAAyB,CAAA"}
+{"version":3,"file":"unlockSpace.js","sourceRoot":"","sources":["../../src/keyring/unlockSpace.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAG/C,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAA;AAErE;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAA;AAErD;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,EACzB,gBAAgB,EAChB,UAAU,EAIX;IACC,OAAO,IAAI,SAAS,CAAC;QACnB,SAAS,EAAE,gBAAgB;QAC3B,UAAU;KACX,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,yBAAyB,CAAC,EACvC,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,YAAY,EACZ,IAAI,EAOL;IACC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAA;IAC/D,MAAM,GAAG;SACN,KAAK,CAAC,OAAO,CAAC;SACd,UAAU,CAAC,YAAY,CAAC;SACxB,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AACrC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,KAAK,UAAU,kBAAkB,CAAC,EAChC,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,YAAY,EACZ,UAAU,EACV,UAAU,EAQX;IACC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAA;IAC/D,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;QACvC,GAAG;QACH,OAAO;QACP,YAAY;QACZ,UAAU;KACX,CAAC;SACC,QAAQ,CAAC,UAAU,CAAC;SACpB,GAAG,EAAE,CAAA;IACR,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAA;AACxC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,kBAAkB,CAAC,EAChC,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,YAAY,EACZ,UAAU,EACV,MAAM,EACN,UAAU,EASX;IACC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAA;IAC/D,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7D,MAAM,mBAAmB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;SAClE,QAAQ,CAAC,UAAU,CAAC;SACpB,GAAG,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAA;AACnD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,UAAU,EACV,IAAI,GAAG,iBAAiB,EAOzB;IACC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAA;IAC/D,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAA;IACxD,MAAM,yBAAyB,CAAC;QAC9B,gBAAgB;QAChB,UAAU;QACV,OAAO;QACP,YAAY,EAAE,kBAAkB,CAAC,EAAE;QACnC,IAAI,EAAE,kBAAkB,CAAC,IAAI;KAC9B,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,UAAU,EAMX;IACC,OAAO,kBAAkB,CAAC;QACxB,gBAAgB;QAChB,UAAU;QACV,OAAO;QACP,YAAY,EAAE,kBAAkB,CAAC,EAAE;QACnC,UAAU,EAAE,gBAAgB;QAC5B,UAAU;KACX,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,MAAM,EACN,UAAU,EAOX;IACC,MAAM,kBAAkB,CAAC;QACvB,gBAAgB;QAChB,UAAU;QACV,OAAO;QACP,YAAY,EAAE,kBAAkB,CAAC,EAAE;QACnC,UAAU,EAAE,gBAAgB;QAC5B,MAAM;QACN,UAAU;KACX,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,UAAU,EAMX;IACC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAA;IAC/D,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAA;AAC/D,CAAC"}

package/dist/menders/derive.d.ts

@@ -0,0 +1,85 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The derived sets a wallet's audit tests assert: the invariants a transient
+ * visit reaches, the gaps the registration index implies, and census
+ * completeness. Each is computed from the table and the sites alone, so a
+ * converger that quietly loses a trigger a transient visit fires, or an
+ * invariant no registration reports any more, moves a derived set and fails
+ * the wallet's pin.
+ */
+import { type InvariantId } from './ids.js';
+import type { MenderRegistry } from './registry.js';
+import type { InvariantGap, RegistrationSite } from './types.js';
+/**
+ * One derived gap: the declared row's key and kind, without its prose.
+ */
+type DerivedGap = Pick<InvariantGap, 'invariant' | 'kind'>;
+/**
+ * The invariants a transient visit on a standing credential reaches. The
+ * two chain triggers are read through `dueAt` over the ladder held set; a
+ * `login-routing` site counts unless the client-key-record probe guards it;
+ * a `ceremony-tail` entry counts, every such ceremony running on any
+ * session type; and a detector no site reports (a declaration carrying
+ * `holdsWhen`) counts when it is checked at a trigger a transient visit
+ * fires and, on the chain, under an authority the ladder held set carries.
+ * An unreported declaration with no detector is reached by nothing.
+ *
+ * @param options {object}
+ * @param options.registry {MenderRegistry}
+ * @returns {ReadonlyArray<InvariantId>}   in table order
+ */
+export declare function transientReachableInvariants({ registry }: {
+    registry: MenderRegistry<RegistrationSite, never>;
+}): ReadonlyArray<InvariantId>;
+/**
+ * The gaps the index implies. An invariant no site reports derives `none`,
+ * unless it is checked at ceremony tails alone (converged by the ceremony's
+ * own sequenced code, which is never registered). A detector is not a
+ * mender: a declaration carrying `holdsWhen` and no registration derives
+ * `none` like any other unreported one, so adding a detector never retires
+ * a gap. A declaration naming a chain or routing trigger no site backs
+ * derives `none` whatever else it names. An invariant reported only at sites
+ * a transient visit cannot reach, on an account shape the violation can
+ * stand on, derives `unreachable`. Nothing else derives a gap.
+ *
+ * @param options {object}
+ * @param options.registry {MenderRegistry}
+ * @returns {ReadonlyArray<DerivedGap>}
+ */
+export declare function deriveGaps({ registry }: {
+    registry: MenderRegistry<RegistrationSite, never>;
+}): ReadonlyArray<DerivedGap>;
+/**
+ * Compares the derived gaps with a wallet's declared allowlist. The
+ * derivation admits gaps and retires none: a declared row the derivation no
+ * longer produces passes, and a derived gap with no declaration fails. A
+ * derived `none` needs a declared `none` row for its invariant; a derived
+ * `unreachable` needs any declared row for it, since a declared `none` may
+ * be scoped to a different torn state of the same predicate.
+ *
+ * @param options {object}
+ * @param options.derived {ReadonlyArray<DerivedGap>}
+ * @param options.declared {ReadonlyArray<InvariantGap>}
+ * @returns {ReadonlyArray<DerivedGap>}   the
+ *   derived gaps no declaration covers; empty when the allowlist is complete
+ */
+export declare function undeclaredGaps({ derived, declared }: {
+    derived: ReadonlyArray<DerivedGap>;
+    declared: ReadonlyArray<InvariantGap>;
+}): ReadonlyArray<DerivedGap>;
+/**
+ * Census completeness: the ids in {@link INVARIANT_IDS} the table does not
+ * declare. Duplicated ids and undeclared reports are refused by
+ * `menderRegistry` at construction, so a registry in hand has neither.
+ *
+ * @param options {object}
+ * @param options.registry {MenderRegistry}
+ * @returns {ReadonlyArray<InvariantId>}   empty when the census is complete
+ */
+export declare function undeclaredInvariants({ registry }: {
+    registry: MenderRegistry<RegistrationSite, never>;
+}): ReadonlyArray<InvariantId>;
+export {};
+//# sourceMappingURL=derive.d.ts.map

package/dist/menders/derive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive.d.ts","sourceRoot":"","sources":["../../src/menders/derive.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;GAOG;AACH,OAAO,EAAiB,KAAK,WAAW,EAAE,MAAM,UAAU,CAAA;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAEnD,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAEhE;;GAEG;AACH,KAAK,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,WAAW,GAAG,MAAM,CAAC,CAAA;AAW1D;;;;;;;;;;;;;GAaG;AACH,wBAAgB,4BAA4B,CAAC,EAC3C,QAAQ,EACT,EAAE;IACD,QAAQ,EAAE,cAAc,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAA;CAClD,GAAG,aAAa,CAAC,WAAW,CAAC,CAuC7B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,UAAU,CAAC,EACzB,QAAQ,EACT,EAAE;IACD,QAAQ,EAAE,cAAc,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAA;CAClD,GAAG,aAAa,CAAC,UAAU,CAAC,CAoB5B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,EAC7B,OAAO,EACP,QAAQ,EACT,EAAE;IACD,OAAO,EAAE,aAAa,CAAC,UAAU,CAAC,CAAA;IAClC,QAAQ,EAAE,aAAa,CAAC,YAAY,CAAC,CAAA;CACtC,GAAG,aAAa,CAAC,UAAU,CAAC,CAS5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,QAAQ,EACT,EAAE;IACD,QAAQ,EAAE,cAAc,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAA;CAClD,GAAG,aAAa,CAAC,WAAW,CAAC,CAG7B"}

package/dist/menders/derive.js

@@ -0,0 +1,138 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The derived sets a wallet's audit tests assert: the invariants a transient
+ * visit reaches, the gaps the registration index implies, and census
+ * completeness. Each is computed from the table and the sites alone, so a
+ * converger that quietly loses a trigger a transient visit fires, or an
+ * invariant no registration reports any more, moves a derived set and fails
+ * the wallet's pin.
+ */
+import { INVARIANT_IDS } from './ids.js';
+import { heldAuthorities } from './registry.js';
+/**
+ * The ids some site reports, whatever its trigger.
+ */
+function reportedIds(registry) {
+    return new Set(registry.sites().flatMap(site => site.reports));
+}
+/**
+ * The invariants a transient visit on a standing credential reaches. The
+ * two chain triggers are read through `dueAt` over the ladder held set; a
+ * `login-routing` site counts unless the client-key-record probe guards it;
+ * a `ceremony-tail` entry counts, every such ceremony running on any
+ * session type; and a detector no site reports (a declaration carrying
+ * `holdsWhen`) counts when it is checked at a trigger a transient visit
+ * fires and, on the chain, under an authority the ladder held set carries.
+ * An unreported declaration with no detector is reached by nothing.
+ *
+ * @param options {object}
+ * @param options.registry {MenderRegistry}
+ * @returns {ReadonlyArray<InvariantId>}   in table order
+ */
+export function transientReachableInvariants({ registry }) {
+    const reached = new Set();
+    const held = heldAuthorities({ kind: 'ladder' });
+    for (const site of registry.dueAt({
+        held,
+        trigger: 'transient-login-chain'
+    })) {
+        for (const id of site.reports) {
+            reached.add(id);
+        }
+    }
+    for (const site of registry.sites()) {
+        if (site.trigger === 'login-routing' && !site.guardedBy) {
+            for (const id of site.reports) {
+                reached.add(id);
+            }
+        }
+    }
+    const reported = reportedIds(registry);
+    for (const decl of registry.all()) {
+        if (decl.triggers.includes('ceremony-tail')) {
+            reached.add(decl.id);
+            continue;
+        }
+        if (reported.has(decl.id) || !decl.holdsWhen) {
+            continue;
+        }
+        const checkedOnVisit = decl.triggers.includes('login-routing') ||
+            (decl.triggers.includes('transient-login-chain') &&
+                held.includes(decl.authority));
+        if (checkedOnVisit) {
+            reached.add(decl.id);
+        }
+    }
+    return registry
+        .all()
+        .filter(decl => reached.has(decl.id))
+        .map(decl => decl.id);
+}
+/**
+ * The gaps the index implies. An invariant no site reports derives `none`,
+ * unless it is checked at ceremony tails alone (converged by the ceremony's
+ * own sequenced code, which is never registered). A detector is not a
+ * mender: a declaration carrying `holdsWhen` and no registration derives
+ * `none` like any other unreported one, so adding a detector never retires
+ * a gap. A declaration naming a chain or routing trigger no site backs
+ * derives `none` whatever else it names. An invariant reported only at sites
+ * a transient visit cannot reach, on an account shape the violation can
+ * stand on, derives `unreachable`. Nothing else derives a gap.
+ *
+ * @param options {object}
+ * @param options.registry {MenderRegistry}
+ * @returns {ReadonlyArray<DerivedGap>}
+ */
+export function deriveGaps({ registry }) {
+    const reported = reportedIds(registry);
+    const reachable = new Set(transientReachableInvariants({ registry }));
+    const gaps = [];
+    for (const decl of registry.all()) {
+        if (!reported.has(decl.id)) {
+            const tailOnly = decl.triggers.length > 0 &&
+                decl.triggers.every(trigger => trigger === 'ceremony-tail');
+            if (!tailOnly) {
+                gaps.push({ invariant: decl.id, kind: 'none' });
+            }
+        }
+        else if (!reachable.has(decl.id) &&
+            decl.standsOn.includes('client-less')) {
+            gaps.push({ invariant: decl.id, kind: 'unreachable' });
+        }
+    }
+    return gaps;
+}
+/**
+ * Compares the derived gaps with a wallet's declared allowlist. The
+ * derivation admits gaps and retires none: a declared row the derivation no
+ * longer produces passes, and a derived gap with no declaration fails. A
+ * derived `none` needs a declared `none` row for its invariant; a derived
+ * `unreachable` needs any declared row for it, since a declared `none` may
+ * be scoped to a different torn state of the same predicate.
+ *
+ * @param options {object}
+ * @param options.derived {ReadonlyArray<DerivedGap>}
+ * @param options.declared {ReadonlyArray<InvariantGap>}
+ * @returns {ReadonlyArray<DerivedGap>}   the
+ *   derived gaps no declaration covers; empty when the allowlist is complete
+ */
+export function undeclaredGaps({ derived, declared }) {
+    return derived.filter(({ invariant, kind }) => !declared.some(gap => gap.invariant === invariant &&
+        (kind === 'unreachable' || gap.kind === 'none')));
+}
+/**
+ * Census completeness: the ids in {@link INVARIANT_IDS} the table does not
+ * declare. Duplicated ids and undeclared reports are refused by
+ * `menderRegistry` at construction, so a registry in hand has neither.
+ *
+ * @param options {object}
+ * @param options.registry {MenderRegistry}
+ * @returns {ReadonlyArray<InvariantId>}   empty when the census is complete
+ */
+export function undeclaredInvariants({ registry }) {
+    const declared = new Set(registry.all().map(decl => decl.id));
+    return INVARIANT_IDS.filter(id => !declared.has(id));
+}
+//# sourceMappingURL=derive.js.map

package/dist/menders/derive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive.js","sourceRoot":"","sources":["../../src/menders/derive.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;GAOG;AACH,OAAO,EAAE,aAAa,EAAoB,MAAM,UAAU,CAAA;AAE1D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAQ/C;;GAEG;AACH,SAAS,WAAW,CAClB,QAAiD;IAEjD,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AAChE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,4BAA4B,CAAC,EAC3C,QAAQ,EAGT;IACC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAe,CAAA;IACtC,MAAM,IAAI,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IAChD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC;QAChC,IAAI;QACJ,OAAO,EAAE,uBAAuB;KACjC,CAAC,EAAE,CAAC;QACH,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACjB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,OAAO,KAAK,eAAe,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACxD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;IACtC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACpB,SAAQ;QACV,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7C,SAAQ;QACV,CAAC;QACD,MAAM,cAAc,GAClB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC;YACvC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,CAAC;gBAC9C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;QAClC,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACtB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ;SACZ,GAAG,EAAE;SACL,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SACpC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACzB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,UAAU,CAAC,EACzB,QAAQ,EAGT;IACC,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;IACtC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,4BAA4B,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAA;IACrE,MAAM,IAAI,GAAsB,EAAE,CAAA;IAClC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3B,MAAM,QAAQ,GACZ,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACxB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,eAAe,CAAC,CAAA;YAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;YACjD,CAAC;QACH,CAAC;aAAM,IACL,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,EACrC,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAA;QACxD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAAC,EAC7B,OAAO,EACP,QAAQ,EAIT;IACC,OAAO,OAAO,CAAC,MAAM,CACnB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,CACtB,CAAC,QAAQ,CAAC,IAAI,CACZ,GAAG,CAAC,EAAE,CACJ,GAAG,CAAC,SAAS,KAAK,SAAS;QAC3B,CAAC,IAAI,KAAK,aAAa,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAClD,CACJ,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACnC,QAAQ,EAGT;IACC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7D,OAAO,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;AACtD,CAAC"}

package/dist/menders/ids.d.ts

@@ -0,0 +1,20 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The invariant ids: the closed census both wallets declare against and the
+ * mender event channel keys on. Each names the predicate an entry makes
+ * true rather than the code that converges it, so moving a converger between
+ * modules renames nothing. The ids are code-only; nothing persists them.
+ * Numbered in the order the design table assigned them, and a new one takes
+ * the next free number rather than renumbering.
+ */
+/**
+ * Every invariant id, in design-table order.
+ */
+export declare const INVARIANT_IDS: readonly ["roster-wraps-exactly-the-document-key-set", "governed-log-heads-anchor-past-the-membership-change", "collection-epochs-name-the-current-user-key", "unlock-registry-opens-under-the-current-user-key", "registry-passphrase-entry-names-the-standing-credential", "passkey-entry-carries-its-standing-configuration", "registry-lists-the-passphrase-method", "standing-delegations-verify-under-the-current-document", "registry-records-the-committed-ladder-rung", "unlock-record-points-at-the-account-did", "account-pointer-names-the-account-did", "space-controller-is-the-account-did", "roster-and-collection-epochs-exist", "registry-records-the-establishing-credential", "annex-generation-is-reachable", "generation-delegation-is-current", "acting-credential-manage-zcap-is-current", "did-web-projection-matches-the-log", "no-annex-generation-outlives-its-pointer", "app-keys-live-only-in-app-connections", "client-key-record-matches-the-pointed-account", "this-browser-is-still-an-enrolled-client", "no-client-key-record-stays-pending", "recovery-spend-is-completed", "retired-credential-leaves-no-annex-inventory", "document-lists-the-acting-credential", "keystore-controller-is-the-account-did", "account-document-publishes-an-authentication-key", "every-document-key-agreement-entry-has-a-locatable-credential", "no-unlock-space-outlives-its-credential", "no-keystore-outlives-its-account", "saved-recovery-codes-locate-their-account", "standard-collections-are-provisioned", "no-auxiliary-space-stands-unnamed"];
+/**
+ * One id from {@link INVARIANT_IDS}.
+ */
+export type InvariantId = (typeof INVARIANT_IDS)[number];
+//# sourceMappingURL=ids.d.ts.map

package/dist/menders/ids.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ids.d.ts","sourceRoot":"","sources":["../../src/menders/ids.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;GAOG;AAEH;;GAEG;AACH,eAAO,MAAM,aAAa,i/CAqEhB,CAAA;AAEV;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAA"}

package/dist/menders/ids.js

@@ -0,0 +1,85 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The invariant ids: the closed census both wallets declare against and the
+ * mender event channel keys on. Each names the predicate an entry makes
+ * true rather than the code that converges it, so moving a converger between
+ * modules renames nothing. The ids are code-only; nothing persists them.
+ * Numbered in the order the design table assigned them, and a new one takes
+ * the next free number rather than renumbering.
+ */
+/**
+ * Every invariant id, in design-table order.
+ */
+export const INVARIANT_IDS = [
+    // 1
+    'roster-wraps-exactly-the-document-key-set',
+    // 2
+    'governed-log-heads-anchor-past-the-membership-change',
+    // 3
+    'collection-epochs-name-the-current-user-key',
+    // 4
+    'unlock-registry-opens-under-the-current-user-key',
+    // 5
+    'registry-passphrase-entry-names-the-standing-credential',
+    // 6
+    'passkey-entry-carries-its-standing-configuration',
+    // 7
+    'registry-lists-the-passphrase-method',
+    // 8
+    'standing-delegations-verify-under-the-current-document',
+    // 9
+    'registry-records-the-committed-ladder-rung',
+    // 10
+    'unlock-record-points-at-the-account-did',
+    // 11
+    'account-pointer-names-the-account-did',
+    // 12
+    'space-controller-is-the-account-did',
+    // 13
+    'roster-and-collection-epochs-exist',
+    // 14
+    'registry-records-the-establishing-credential',
+    // 15
+    'annex-generation-is-reachable',
+    // 16
+    'generation-delegation-is-current',
+    // 17
+    'acting-credential-manage-zcap-is-current',
+    // 18
+    'did-web-projection-matches-the-log',
+    // 19
+    'no-annex-generation-outlives-its-pointer',
+    // 20
+    'app-keys-live-only-in-app-connections',
+    // 21
+    'client-key-record-matches-the-pointed-account',
+    // 22
+    'this-browser-is-still-an-enrolled-client',
+    // 23
+    'no-client-key-record-stays-pending',
+    // 24
+    'recovery-spend-is-completed',
+    // 25
+    'retired-credential-leaves-no-annex-inventory',
+    // 26
+    'document-lists-the-acting-credential',
+    // 27
+    'keystore-controller-is-the-account-did',
+    // 28
+    'account-document-publishes-an-authentication-key',
+    // 29
+    'every-document-key-agreement-entry-has-a-locatable-credential',
+    // 30
+    'no-unlock-space-outlives-its-credential',
+    // 31
+    'no-keystore-outlives-its-account',
+    // 32
+    'saved-recovery-codes-locate-their-account',
+    // 33
+    'standard-collections-are-provisioned',
+    // 34
+    'no-auxiliary-space-stands-unnamed'
+];
+//# sourceMappingURL=ids.js.map

package/dist/menders/ids.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ids.js","sourceRoot":"","sources":["../../src/menders/ids.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;GAOG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,IAAI;IACJ,2CAA2C;IAC3C,IAAI;IACJ,sDAAsD;IACtD,IAAI;IACJ,6CAA6C;IAC7C,IAAI;IACJ,kDAAkD;IAClD,IAAI;IACJ,yDAAyD;IACzD,IAAI;IACJ,kDAAkD;IAClD,IAAI;IACJ,sCAAsC;IACtC,IAAI;IACJ,wDAAwD;IACxD,IAAI;IACJ,4CAA4C;IAC5C,KAAK;IACL,yCAAyC;IACzC,KAAK;IACL,uCAAuC;IACvC,KAAK;IACL,qCAAqC;IACrC,KAAK;IACL,oCAAoC;IACpC,KAAK;IACL,8CAA8C;IAC9C,KAAK;IACL,+BAA+B;IAC/B,KAAK;IACL,kCAAkC;IAClC,KAAK;IACL,0CAA0C;IAC1C,KAAK;IACL,oCAAoC;IACpC,KAAK;IACL,0CAA0C;IAC1C,KAAK;IACL,uCAAuC;IACvC,KAAK;IACL,+CAA+C;IAC/C,KAAK;IACL,0CAA0C;IAC1C,KAAK;IACL,oCAAoC;IACpC,KAAK;IACL,6BAA6B;IAC7B,KAAK;IACL,8CAA8C;IAC9C,KAAK;IACL,sCAAsC;IACtC,KAAK;IACL,wCAAwC;IACxC,KAAK;IACL,kDAAkD;IAClD,KAAK;IACL,+DAA+D;IAC/D,KAAK;IACL,yCAAyC;IACzC,KAAK;IACL,kCAAkC;IAClC,KAAK;IACL,2CAA2C;IAC3C,KAAK;IACL,sCAAsC;IACtC,KAAK;IACL,mCAAmC;CAC3B,CAAA"}

package/dist/menders/index.d.ts

@@ -0,0 +1,42 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The `@interop/wallet-core/menders` subpath: the mender registry keyed by
+ * invariant. A wallet declares its own table of invariants (data: what must
+ * hold between ceremonies) and its own registrations (code: what converges a
+ * violated one); this module carries the structure both wallets share.
+ *
+ * - the vocabularies: `AUTHORITIES`, `TRIGGERS`, `CHAIN_TRIGGERS`,
+ *   `ACCOUNT_SHAPES`, `EVIDENCE`, `MEND_OUTCOMES`, `GAP_KINDS`, and
+ *   `INVARIANT_IDS`, each an `as const` array with its union
+ * - the types: `InvariantDeclaration`, `RegistrationSite`, `Registration`,
+ *   `MendOutcome`, `MendReportEntry`, `MendReport`, `InvariantGap`,
+ *   `LoginRoute`
+ * - the readers: `menderRegistry` (`all`, `byId`, `sites`, `admits`,
+ *   `dueAt`), which refuses a duplicated id, an undeclared report, or a
+ *   guard on a non-routing site at construction, and `heldAuthorities`, the
+ *   held set a session's account-ceremony context derives
+ * - the runner: `runMenderBlock`, one try, warn, and skip discipline over
+ *   one chain trigger's registrations, `mendReportAccumulator`, the
+ *   pre-session report collector its `onOutcome` feeds, and `errorNameOf`,
+ *   the name a report carries for a thrown value of any shape
+ * - the derived sets a wallet's audit tests pin:
+ *   `transientReachableInvariants`, `deriveGaps`, `undeclaredGaps`, and
+ *   `undeclaredInvariants`
+ *
+ * Nothing here executes a ceremony. The runner calls the convergers a
+ * wallet registers and nothing else; the ceremonies stay explicit sequenced
+ * code, and the registry describes the menders from the outside.
+ */
+export { deriveGaps, transientReachableInvariants, undeclaredGaps, undeclaredInvariants } from './derive.js';
+export { INVARIANT_IDS } from './ids.js';
+export type { InvariantId } from './ids.js';
+export { heldAuthorities, menderRegistry } from './registry.js';
+export type { MenderRegistry, ResolvedAuthority } from './registry.js';
+export { errorNameOf, MEND_REPORT_SHAPE_ERROR, mendReportAccumulator, runMenderBlock } from './runner.js';
+export type { MendReportAccumulator } from './runner.js';
+export type { InvariantDeclaration, InvariantGap, LoginRoute, MendOutcome, MendReport, MendReportEntry, Registration, RegistrationSite } from './types.js';
+export { ACCOUNT_SHAPES, AUTHORITIES, CHAIN_TRIGGERS, EVIDENCE, GAP_KINDS, MEND_OUTCOMES, TRIGGERS } from './vocabulary.js';
+export type { AccountShape, Authority, ChainTrigger, Evidence, GapKind, MendOutcomeKind, Trigger } from './vocabulary.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/menders/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/menders/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EACL,UAAU,EACV,4BAA4B,EAC5B,cAAc,EACd,oBAAoB,EACrB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,YAAY,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAC3C,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC/D,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACtE,OAAO,EACL,WAAW,EACX,uBAAuB,EACvB,qBAAqB,EACrB,cAAc,EACf,MAAM,aAAa,CAAA;AACpB,YAAY,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AACxD,YAAY,EACV,oBAAoB,EACpB,YAAY,EACZ,UAAU,EACV,WAAW,EACX,UAAU,EACV,eAAe,EACf,YAAY,EACZ,gBAAgB,EACjB,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,cAAc,EACd,WAAW,EACX,cAAc,EACd,QAAQ,EACR,SAAS,EACT,aAAa,EACb,QAAQ,EACT,MAAM,iBAAiB,CAAA;AACxB,YAAY,EACV,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,eAAe,EACf,OAAO,EACR,MAAM,iBAAiB,CAAA"}