@mcsherrylabs/evolver-client 0.13.0 → 0.14.0

package/dist/crypto/auth.d.ts

@@ -17,8 +17,23 @@ export declare function edSign(msg: Uint8Array, priv: Uint8Array): Uint8Array;
  *  AddKey PoP before the outer tx is signed (never sign blind). */
 export declare function edVerify(msg: Uint8Array, sig: Uint8Array, pub32: Uint8Array): boolean;
 export declare function edPubToSpki(raw32: Uint8Array): Uint8Array;
-/** Raw 32-byte Ed25519 pubkey from either a raw key or an X.509 SPKI-wrapped one
- *  (the on-chain `node_keys` form). The key is always the last 32 bytes. */
+/**
+ * Raw 32-byte Ed25519 pubkey from either a raw key or an X.509 SPKI-wrapped one
+ * (the on-chain `node_keys` form).
+ *
+ * ⚠️ THIS REFUSES WHAT IT DOES NOT RECOGNISE, and that is the whole point. It used to read
+ * "the key is always the last 32 bytes" and take them from an input of ANY length — which is
+ * fine for the two shapes it was written for and silently wrong for every other. An identity
+ * holds more than one key: the default `("BLS12-381-G1","")` public key is 48 bytes, and its
+ * last 32 bytes are a perfectly well-formed Ed25519 point as far as anything downstream can
+ * tell. Rendered as an SSH key it produces a line with the correct algorithm and the correct
+ * constant prefix for a private key NOBODY HOLDS — authentication then fails with no
+ * diagnosis available anywhere, and any reconciliation loop comparing derived keys churns
+ * forever instead of converging.
+ *
+ * A parser that reshapes input it does not recognise is a parser that lies about its output.
+ * The caller passing the wrong key entry is the bug; this refusing is how they find out.
+ */
 export declare function edSpkiToRaw(spkiOrRaw: Uint8Array): Uint8Array;
 /** X25519 public key from an Ed25519 public key (raw 32 or SPKI). */
 export declare function edToX25519Pub(edPub: Uint8Array): Uint8Array;

package/dist/crypto/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/crypto/auth.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,OAAO,gDAAgD,CAAC;AAErE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,UAAU,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,UAAU,CAAC;CACjB;AAID,wBAAgB,MAAM,IAAI,UAAU,CAGnC;AAED,mFAAmF;AACnF,wBAAgB,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,CAIrE;AAID,wBAAgB,KAAK,IAAI,SAAS,CAGjC;AAED,wBAAgB,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,CAEpE;AAED;;mEAEmE;AACnE,wBAAgB,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAMrF;AAQD,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAGzD;AAED;4EAC4E;AAC5E,wBAAgB,WAAW,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,CAE7D;AAcD,qEAAqE;AACrE,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAE3D"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/crypto/auth.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,OAAO,gDAAgD,CAAC;AAErE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,UAAU,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,UAAU,CAAC;CACjB;AAID,wBAAgB,MAAM,IAAI,UAAU,CAGnC;AAED,mFAAmF;AACnF,wBAAgB,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,CAIrE;AAID,wBAAgB,KAAK,IAAI,SAAS,CAGjC;AAED,wBAAgB,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,CAEpE;AAED;;mEAEmE;AACnE,wBAAgB,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAMrF;AAQD,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAGzD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,CAY7D;AAcD,qEAAqE;AACrE,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAE3D"}

package/dist/crypto/auth.js

@@ -48,10 +48,32 @@ export function edPubToSpki(raw32) {
         throw new Error("expected 32-byte ed25519 public key");
     return concatBytes(ED_SPKI_PREFIX, raw32);
 }
-/** Raw 32-byte Ed25519 pubkey from either a raw key or an X.509 SPKI-wrapped one
- *  (the on-chain `node_keys` form). The key is always the last 32 bytes. */
+/**
+ * Raw 32-byte Ed25519 pubkey from either a raw key or an X.509 SPKI-wrapped one
+ * (the on-chain `node_keys` form).
+ *
+ * ⚠️ THIS REFUSES WHAT IT DOES NOT RECOGNISE, and that is the whole point. It used to read
+ * "the key is always the last 32 bytes" and take them from an input of ANY length — which is
+ * fine for the two shapes it was written for and silently wrong for every other. An identity
+ * holds more than one key: the default `("BLS12-381-G1","")` public key is 48 bytes, and its
+ * last 32 bytes are a perfectly well-formed Ed25519 point as far as anything downstream can
+ * tell. Rendered as an SSH key it produces a line with the correct algorithm and the correct
+ * constant prefix for a private key NOBODY HOLDS — authentication then fails with no
+ * diagnosis available anywhere, and any reconciliation loop comparing derived keys churns
+ * forever instead of converging.
+ *
+ * A parser that reshapes input it does not recognise is a parser that lies about its output.
+ * The caller passing the wrong key entry is the bug; this refusing is how they find out.
+ */
 export function edSpkiToRaw(spkiOrRaw) {
-    return spkiOrRaw.length === 32 ? spkiOrRaw : spkiOrRaw.subarray(spkiOrRaw.length - 32);
+    if (spkiOrRaw.length === 32)
+        return spkiOrRaw;
+    if (spkiOrRaw.length === ED_SPKI_PREFIX.length + 32 &&
+        ED_SPKI_PREFIX.every((b, i) => spkiOrRaw[i] === b)) {
+        return spkiOrRaw.subarray(ED_SPKI_PREFIX.length);
+    }
+    throw new Error(`not an ed25519 public key: expected 32 raw bytes or ${ED_SPKI_PREFIX.length + 32} ` +
+        `X.509 SPKI bytes with the ed25519 prefix, got ${spkiOrRaw.length}`);
 }
 // ── Ed25519 → X25519 (derive the key-agreement key from the identity key) ──────
 // Lets a member's existing on-chain Ed25519 identity key double as the ECDH key for

package/dist/crypto/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/crypto/auth.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,gFAAgF;AAChF,wDAAwD;AACxD,EAAE;AACF,+EAA+E;AAC/E,0EAA0E;AAE1E,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,MAAM,CAAC,MAAM,OAAO,GAAG,6CAA6C,CAAC;AAYrE,8EAA8E;AAE9E,MAAM,UAAU,MAAM;IACpB,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;IAChD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,OAAO,CAAC,GAAe,EAAE,IAAgB;IACvD,MAAM,KAAK,GAAG,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvD,OAAO,SAAS,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,8EAA8E;AAE9E,MAAM,UAAU,KAAK;IACnB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;IAC9C,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAe,EAAE,IAAgB;IACtD,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC;AAED;;mEAEmE;AACnE,MAAM,UAAU,QAAQ,CAAC,GAAe,EAAE,GAAe,EAAE,KAAiB;IAC1E,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,2DAA2D;AAC3D,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;IACrC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;CACvE,CAAC,CAAC;AAEH,MAAM,UAAU,WAAW,CAAC,KAAiB;IAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAChF,OAAO,WAAW,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED;4EAC4E;AAC5E,MAAM,UAAU,WAAW,CAAC,SAAqB;IAC/C,OAAO,SAAS,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,kFAAkF;AAClF,oFAAoF;AACpF,8EAA8E;AAC9E,EAAE;AACF,qFAAqF;AACrF,qFAAqF;AACrF,yFAAyF;AACzF,wFAAwF;AACxF,oFAAoF;AACpF,kFAAkF;AAClF,6DAA6D;AAE7D,qEAAqE;AACrE,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,OAAO,sBAAsB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;AACpD,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/crypto/auth.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,gFAAgF;AAChF,wDAAwD;AACxD,EAAE;AACF,+EAA+E;AAC/E,0EAA0E;AAE1E,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,MAAM,CAAC,MAAM,OAAO,GAAG,6CAA6C,CAAC;AAYrE,8EAA8E;AAE9E,MAAM,UAAU,MAAM;IACpB,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;IAChD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,OAAO,CAAC,GAAe,EAAE,IAAgB;IACvD,MAAM,KAAK,GAAG,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvD,OAAO,SAAS,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,8EAA8E;AAE9E,MAAM,UAAU,KAAK;IACnB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;IAC9C,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAe,EAAE,IAAgB;IACtD,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC;AAED;;mEAEmE;AACnE,MAAM,UAAU,QAAQ,CAAC,GAAe,EAAE,GAAe,EAAE,KAAiB;IAC1E,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,2DAA2D;AAC3D,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;IACrC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;CACvE,CAAC,CAAC;AAEH,MAAM,UAAU,WAAW,CAAC,KAAiB;IAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAChF,OAAO,WAAW,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,WAAW,CAAC,SAAqB;IAC/C,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC9C,IACE,SAAS,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,GAAG,EAAE;QAC/C,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAClD,CAAC;QACD,OAAO,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,IAAI,KAAK,CACb,uDAAuD,cAAc,CAAC,MAAM,GAAG,EAAE,GAAG;QAClF,iDAAiD,SAAS,CAAC,MAAM,EAAE,CACtE,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,oFAAoF;AACpF,8EAA8E;AAC9E,EAAE;AACF,qFAAqF;AACrF,qFAAqF;AACrF,yFAAyF;AACzF,wFAAwF;AACxF,oFAAoF;AACpF,kFAAkF;AAClF,6DAA6D;AAE7D,qEAAqE;AACrE,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,OAAO,sBAAsB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;AACpD,CAAC"}

package/dist/types.d.ts

@@ -51,6 +51,35 @@ export type FailureReason = (typeof FAILURE_REASONS)[number];
  * (see `SIDEQUEST-transaction-outcomes.md`), this becomes a union and `Fined.reason` narrows.
  */
 export declare const KNOWN_FINE_REASONS: readonly ["CHANNEL_UNAUTHORIZED", "CHANNEL_CHARGE_FAILED", "CHANNEL_TOLL_CEILING", "CHANNEL_TOLL_RECIPIENT_GONE", "CHANNEL_TOLL_UNAFFORDABLE", "CHANNEL_TOLL_OVERFLOW", "DEPENDENCY_MISSING", "OTHER"];
+/**
+ * The ledger ids the node DISPATCHES to a core handler, which parses the body and applies what
+ * it finds. Everything else is a channel, whose body the core never interprets.
+ *
+ * ⚠️ THIS IS A SAFETY LIST, NOT A CATALOGUE. Anything that lets a caller name a ledger AND supply
+ * an opaque body has handed the caller the choice of interpreter: `ce.evolver.ledger.identity`
+ * with a crafted body is a transfer — or, worse, an `AddKey`, whose proof of possession is signed
+ * by the NEW key, so the attacker composes a complete body and the victim's signature is the only
+ * thing missing. The channel-id rule cannot tell the difference: a core id is alphanumeric
+ * segments separated by dots exactly like a channel.
+ *
+ * ⚠️ NOT THE SAME SET AS `LEDGER`, and do not merge them. `LEDGER` means "ledgers this SDK builds
+ * bodies for" — three of them — which is a different question with a different reason to change.
+ *
+ * ⚠️ IT CANNOT BE COMPLETE, AND THE INCOMPLETENESS IS NAMED RATHER THAN HIDDEN. The node decides
+ * "core" from its LIVE handler map, and its bootstrap merges application handlers and then
+ * asserts only that these six are a SUBSET of it — so a deployment may dispatch a seventh ledger
+ * under any name at all. Two things follow for a caller refusing on this list: also refuse the
+ * reserved `ce.evolver.` namespace, so a seventh CORE ledger fails closed with no edit here; and
+ * record that an application ledger under a foreign name is not covered by either.
+ *
+ * Pinned against the node's own declaration by `npm-libs/pi-evolver/test/coreledger-checks.ts`,
+ * which scrapes `BlockPayloadValidator.DefaultCoreLedgerIds` and fails when the two differ.
+ */
+export declare const CORE_LEDGER_IDS: readonly ["ce.evolver.ledger.identity", "ce.evolver.ledger.quorum", "ce.evolver.ledger.owners", "ce.evolver.ledger.list", "ce.evolver.ledger.groups", "ce.evolver.ledger.tickets"];
+/** The namespace the node reserves for its own ledger ids. Refusing the whole of it is what makes
+ *  a seventh core ledger fail CLOSED — no estate channel lives here (`chat.demo`, `ui.apps`,
+ *  `p2p.demo`, `ce.meerkat.*` are what real channels look like). */
+export declare const RESERVED_LEDGER_PREFIX = "ce.evolver.";
 export interface Committed {
     kind: "committed";
     txIdHex: string;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,4EAA4E;AAC5E,MAAM,WAAW,MAAM;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU,CAAC;CACtC;AAED,4FAA4F;AAC5F,MAAM,WAAW,IAAI;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,UAAU,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,2DAA2D;AAC3D,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,UAAU,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAID;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,eAAe,waAyBlB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,kBAAkB,wMAYrB,CAAC;AAEX,MAAM,WAAW,SAAS;IAAG,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAEjE;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,KAAK;IAAG,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAE1F;;;;GAIG;AACH,MAAM,WAAW,MAAM;IAAG,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE;AACpG,MAAM,WAAW,OAAO;IAAG,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC7D,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;AAIhE;;;;;;;;;;GAUG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,gDAAgD;IAChD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oFAAoF;IACpF,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qEAAqE;IACrE,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB;AAID,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,UAAU,CAAC;CAClB;AAID,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,UAAU,CAAC;CAClB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,iBAAiB;IAChC,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAC5C"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,4EAA4E;AAC5E,MAAM,WAAW,MAAM;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU,CAAC;CACtC;AAED,4FAA4F;AAC5F,MAAM,WAAW,IAAI;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,UAAU,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,2DAA2D;AAC3D,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,UAAU,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAID;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,eAAe,waAyBlB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,kBAAkB,wMAYrB,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,eAAe,oLAOlB,CAAC;AAEX;;oEAEoE;AACpE,eAAO,MAAM,sBAAsB,gBAAgB,CAAC;AAEpD,MAAM,WAAW,SAAS;IAAG,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAEjE;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,KAAK;IAAG,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAE1F;;;;GAIG;AACH,MAAM,WAAW,MAAM;IAAG,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE;AACpG,MAAM,WAAW,OAAO;IAAG,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC7D,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;AAIhE;;;;;;;;;;GAUG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,gDAAgD;IAChD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oFAAoF;IACpF,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qEAAqE;IACrE,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB;AAID,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,UAAU,CAAC;CAClB;AAID,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,UAAU,CAAC;CAClB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,iBAAiB;IAChC,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAC5C"}

package/dist/types.js

@@ -67,4 +67,40 @@ export const KNOWN_FINE_REASONS = [
     // The default. Every un-tagged `skipWithFine` call site arrives as this.
     "OTHER",
 ];
+/**
+ * The ledger ids the node DISPATCHES to a core handler, which parses the body and applies what
+ * it finds. Everything else is a channel, whose body the core never interprets.
+ *
+ * ⚠️ THIS IS A SAFETY LIST, NOT A CATALOGUE. Anything that lets a caller name a ledger AND supply
+ * an opaque body has handed the caller the choice of interpreter: `ce.evolver.ledger.identity`
+ * with a crafted body is a transfer — or, worse, an `AddKey`, whose proof of possession is signed
+ * by the NEW key, so the attacker composes a complete body and the victim's signature is the only
+ * thing missing. The channel-id rule cannot tell the difference: a core id is alphanumeric
+ * segments separated by dots exactly like a channel.
+ *
+ * ⚠️ NOT THE SAME SET AS `LEDGER`, and do not merge them. `LEDGER` means "ledgers this SDK builds
+ * bodies for" — three of them — which is a different question with a different reason to change.
+ *
+ * ⚠️ IT CANNOT BE COMPLETE, AND THE INCOMPLETENESS IS NAMED RATHER THAN HIDDEN. The node decides
+ * "core" from its LIVE handler map, and its bootstrap merges application handlers and then
+ * asserts only that these six are a SUBSET of it — so a deployment may dispatch a seventh ledger
+ * under any name at all. Two things follow for a caller refusing on this list: also refuse the
+ * reserved `ce.evolver.` namespace, so a seventh CORE ledger fails closed with no edit here; and
+ * record that an application ledger under a foreign name is not covered by either.
+ *
+ * Pinned against the node's own declaration by `npm-libs/pi-evolver/test/coreledger-checks.ts`,
+ * which scrapes `BlockPayloadValidator.DefaultCoreLedgerIds` and fails when the two differ.
+ */
+export const CORE_LEDGER_IDS = [
+    "ce.evolver.ledger.identity",
+    "ce.evolver.ledger.quorum",
+    "ce.evolver.ledger.owners",
+    "ce.evolver.ledger.list",
+    "ce.evolver.ledger.groups",
+    "ce.evolver.ledger.tickets",
+];
+/** The namespace the node reserves for its own ledger ids. Refusing the whole of it is what makes
+ *  a seventh core ledger fail CLOSED — no estate channel lives here (`chat.demo`, `ui.apps`,
+ *  `p2p.demo`, `ce.meerkat.*` are what real channels look like). */
+export const RESERVED_LEDGER_PREFIX = "ce.evolver.";
 //# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,2CAA2C;AA2B3C,gFAAgF;AAEhF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,qBAAqB;IACrB,mBAAmB;IACnB,gBAAgB;IAChB,YAAY;IACZ,WAAW;IACX,mBAAmB;IACnB,sBAAsB;IACtB,uBAAuB;IACvB,oBAAoB;IACpB,qBAAqB;IACrB,mBAAmB;IACnB,UAAU;IACV,sBAAsB;IACtB,aAAa;IACb,aAAa;IACb,aAAa;IACb,cAAc;IACd,sBAAsB,EAAG,0EAA0E;IACnG,iBAAiB;IACjB,gBAAgB;IAChB,gBAAgB;IAChB,kFAAkF;IAClF,yEAAyE;IACzE,UAAU;CACF,CAAC;AAIX;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,8EAA8E;IAC9E,sBAAsB;IACtB,uBAAuB;IACvB,sBAAsB;IACtB,6BAA6B;IAC7B,2BAA2B;IAC3B,uBAAuB;IACvB,uFAAuF;IACvF,oBAAoB;IACpB,yEAAyE;IACzE,OAAO;CACC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,2CAA2C;AA2B3C,gFAAgF;AAEhF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,qBAAqB;IACrB,mBAAmB;IACnB,gBAAgB;IAChB,YAAY;IACZ,WAAW;IACX,mBAAmB;IACnB,sBAAsB;IACtB,uBAAuB;IACvB,oBAAoB;IACpB,qBAAqB;IACrB,mBAAmB;IACnB,UAAU;IACV,sBAAsB;IACtB,aAAa;IACb,aAAa;IACb,aAAa;IACb,cAAc;IACd,sBAAsB,EAAG,0EAA0E;IACnG,iBAAiB;IACjB,gBAAgB;IAChB,gBAAgB;IAChB,kFAAkF;IAClF,yEAAyE;IACzE,UAAU;CACF,CAAC;AAIX;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,8EAA8E;IAC9E,sBAAsB;IACtB,uBAAuB;IACvB,sBAAsB;IACtB,6BAA6B;IAC7B,2BAA2B;IAC3B,uBAAuB;IACvB,uFAAuF;IACvF,oBAAoB;IACpB,yEAAyE;IACzE,OAAO;CACC,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,4BAA4B;IAC5B,0BAA0B;IAC1B,0BAA0B;IAC1B,wBAAwB;IACxB,0BAA0B;IAC1B,2BAA2B;CACnB,CAAC;AAEX;;oEAEoE;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,aAAa,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcsherrylabs/evolver-client",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "Client SDK for an Evolver node: proto3 wire codec, transaction signing (AuthBodySignable), on-chain + group crypto, and the node HTTP API.",
   "type": "module",
   "exports": {