@metalabel/dfos-protocol 0.43.0 → 0.45.0

package/dist/chain/index.d.ts

@@ -1,5 +1,5 @@
-import { I as IdentityOperation, s as Signer, u as VerifiedIdentity, S as ServiceEntry, c as ContentOperation, R as RevocationChecker, d as CountersignPayload, a as ArtifactPayload } from '../dfos-credential-X6uvPIth.js';
-export { A as ARTIFACT_CID_ANCHOR_RE, C as CONTENT_ID_ANCHOR_RE, f as CreditClaimPayload, g as Iso8601, M as MAX_ARTIFACT_PAYLOAD_SIZE, i as MAX_CREDIT_CLAIM_SIZE, j as MAX_OPERATION_SIZE, k as MAX_SERVICES_ENTRIES, l as MAX_SERVICES_PAYLOAD_SIZE, m as MAX_SIGN_REQUEST_PAYLOAD_SIZE, n as MAX_SIGN_REQUEST_SIZE, o as MultikeyPublicKey, p as RevocationPayload, q as ServicesArray, r as SignRequestPayload, z as parseProtocolTimestampUnix } from '../dfos-credential-X6uvPIth.js';
+import { I as IdentityOperation, u as Signer, w as VerifiedIdentity, S as ServiceEntry, c as ContentOperation, R as RevocationChecker, d as CountersignPayload, a as ArtifactPayload } from '../dfos-credential-BtiYPqBT.js';
+export { A as ARTIFACT_CID_ANCHOR_RE, C as CONTENT_ID_ANCHOR_RE, f as CreditClaimPayload, g as DeclaredKeyState, h as Iso8601, M as MAX_ARTIFACT_PAYLOAD_SIZE, j as MAX_CREDIT_CLAIM_SIZE, k as MAX_KEY_PROOFS, l as MAX_OPERATION_SIZE, m as MAX_SERVICES_ENTRIES, n as MAX_SERVICES_PAYLOAD_SIZE, o as MAX_SIGN_REQUEST_PAYLOAD_SIZE, p as MAX_SIGN_REQUEST_SIZE, q as MultikeyPublicKey, r as RevocationPayload, s as ServicesArray, t as SignRequestPayload, x as VoidKeyMembership, F as parseProtocolTimestampUnix } from '../dfos-credential-BtiYPqBT.js';
 import 'zod';
 
 /** Ed25519 public key multicodec value */
@@ -53,8 +53,10 @@ declare const signIdentityOperation: (input: {
 /**
  * Verify a log of JWS identity operations and derive the identity
  *
- * Walks the chain from genesis, verifying signatures and chain integrity.
- * Returns the final verified identity state.
+ * Walks the chain from genesis, verifying signatures and chain integrity, and
+ * folds the possession proofs alongside. Returns the final verified identity
+ * state: EFFECTIVE key arrays, with the declared arrays and the void memberships
+ * beside them.
  */
 declare const verifyIdentityChain: (input: {
     didPrefix: string;
@@ -72,6 +74,14 @@ declare const verifyIdentityChain: (input: {
  * That invariant is established during genesis verification and maintained by
  * the protocol's key consistency rules. Periodic full re-verification can
  * audit this property.
+ *
+ * THE POSSESSION FOLD RUNS HERE TOO, and it needs both halves of the trusted
+ * state: the EFFECTIVE arrays (to know what an introduction is a transition out
+ * of) and the DECLARED arrays (to admit the signer). `currentState.declared`
+ * carries the second. When it is absent — a hand-built state, or one produced
+ * before this member existed — the effective arrays stand in for it, which is
+ * exactly correct for any chain with no void memberships and is the only reading
+ * available for a state that never recorded the difference.
  */
 declare const verifyIdentityExtensionFromTrustedState: (input: {
     /** Previously verified identity state */

package/dist/chain/index.js

@@ -6,10 +6,12 @@ import {
   CountersignPayload,
   CreditClaimPayload,
   CreditClaimVerifyError,
+  DeclaredKeyState,
   IdentityOperation,
   Iso8601,
   MAX_ARTIFACT_PAYLOAD_SIZE,
   MAX_CREDIT_CLAIM_SIZE,
+  MAX_KEY_PROOFS,
   MAX_OPERATION_SIZE,
   MAX_SERVICES_ENTRIES,
   MAX_SERVICES_PAYLOAD_SIZE,
@@ -23,6 +25,7 @@ import {
   SignRequestPayload,
   SignRequestVerifyError,
   VerifiedIdentity,
+  VoidKeyMembership,
   anchorsByLabel,
   assertCanonicalSignRequestPayload,
   assertServicesWithinCap,
@@ -49,8 +52,9 @@ import {
   verifyIdentityExtensionFromTrustedState,
   verifyRevocation,
   verifySignRequest
-} from "../chunk-4YBXPYEU.js";
+} from "../chunk-ZRA7FRBE.js";
 import "../chunk-D4IZXFPM.js";
+import "../chunk-JVSC67DC.js";
 import {
   ED25519_PRIV_MULTICODEC,
   ED25519_PUB_MULTICODEC,
@@ -66,12 +70,14 @@ export {
   CountersignPayload,
   CreditClaimPayload,
   CreditClaimVerifyError,
+  DeclaredKeyState,
   ED25519_PRIV_MULTICODEC,
   ED25519_PUB_MULTICODEC,
   IdentityOperation,
   Iso8601,
   MAX_ARTIFACT_PAYLOAD_SIZE,
   MAX_CREDIT_CLAIM_SIZE,
+  MAX_KEY_PROOFS,
   MAX_OPERATION_SIZE,
   MAX_SERVICES_ENTRIES,
   MAX_SERVICES_PAYLOAD_SIZE,
@@ -85,6 +91,7 @@ export {
   SignRequestPayload,
   SignRequestVerifyError,
   VerifiedIdentity,
+  VoidKeyMembership,
   anchorsByLabel,
   assertCanonicalSignRequestPayload,
   assertServicesWithinCap,