@percayso-community/cayso-contracts 2.0.0 → 2.1.0

package/dist/assertion.d.ts

@@ -394,8 +394,12 @@
  * is already bound to (CMTY-0018 §4, CAY-0095). Its own operation, because it decides
  * where a Node's earnings land and binds no key: a credential minted to delegate
  * spending must not thereby direct earnings, nor the reverse.
+ *
+ * `'bind-enrolled-node'` is the Citizen binding a Node the Registry enrolled under them
+ * to their own wallet (CMTY-0018 §4, CAY-0095 Amendment 1): the Citizen's own tap, no
+ * Instance key. Its own operation for the same reason as `'bind-node'`.
  */
-export type ContractOperation = 'read-own-wallet' | 'read-purchase-result' | 'authorise-purchase' | 'cancel-purchase' | 'provision-citizenship' | 'read-own-citizenship' | 'provision-organisation' | 'claim-founder-wallet' | 'make-commercial-payment' | 'make-citizen-transfer' | 'change-handle' | 'read-handle-change-receipt' | 'place-quote' | 'withdraw-quote' | 'request-buy-back' | 'read-citizen-market' | 'read-marketplace-receipt' | 'settle-marketplace-order' | 'settle-marketplace-refund' | 'present-standing-authorisation' | 'revoke-standing-authorisation' | 'bind-node';
+export type ContractOperation = 'read-own-wallet' | 'read-purchase-result' | 'authorise-purchase' | 'cancel-purchase' | 'provision-citizenship' | 'read-own-citizenship' | 'provision-organisation' | 'claim-founder-wallet' | 'make-commercial-payment' | 'make-citizen-transfer' | 'change-handle' | 'read-handle-change-receipt' | 'place-quote' | 'withdraw-quote' | 'request-buy-back' | 'read-citizen-market' | 'read-marketplace-receipt' | 'settle-marketplace-order' | 'settle-marketplace-refund' | 'present-standing-authorisation' | 'revoke-standing-authorisation' | 'bind-node' | 'bind-enrolled-node';
 /**
  * An operation key belonging to a deployment's OWN surfaces rather than to this
  * contract — operator work, above all. Deliberately not enumerated: this package

package/dist/assurance.js

@@ -553,6 +553,22 @@ export const ASSURANCE_POLICY = {
             'held to the bar of presenting a standing authorisation: anything but the development ' +
             'bypass.',
     },
+    // The Citizen binding a Node the Registry enrolled under them (CAY-0095 Amendment 1).
+    // The same bar as 'bind-node', for the same reason: where a Node's earnings land.
+    'bind-enrolled-node': {
+        operation: 'bind-enrolled-node',
+        assurance: 'required',
+        decisions: {
+            // Asserts nothing; permanently refused wherever "identity-verified" is meant.
+            'dev-bypass': 'refused',
+            document: 'accepted',
+            'document-and-biometric': 'accepted',
+        },
+        rationale: "Binding an enrolled Node decides which wallet the Node's earnings are paid into at " +
+            'every later settlement, without the holder present, and a binding is never ' +
+            're-pointed, so it is held to the bar of presenting a standing authorisation: ' +
+            'anything but the development bypass.',
+    },
 };
 /**
  * Every operation, as a value. Derived from {@link ASSURANCE_POLICY} for the same
@@ -596,6 +612,7 @@ export const OPERATION_FOR_ROUTE = {
     standingAuthorisation: 'present-standing-authorisation',
     revokeStandingAuthorisation: 'revoke-standing-authorisation',
     bindNode: 'bind-node',
+    bindEnrolledNode: 'bind-enrolled-node',
     version: null,
 };
 /**

package/dist/client.d.ts

@@ -86,7 +86,7 @@
  */
 import type { BuyBackMade, BuyBackRequest, CitizenMarketViewed, QuotePlaced, QuoteRequest, QuoteWithdrawalRequest, QuoteWithdrawn } from './citizen-market.js';
 import type { CitizenshipFounderClaimed, CitizenshipView } from './citizenship.js';
-import type { StandingAuthorisationAcknowledged, StandingAuthorisationRequest, StandingAuthorisationRevocationRequest, StandingAuthorisationRevoked, NodeBindingRequest, NodeBound } from './cloud-settlement.js';
+import type { StandingAuthorisationAcknowledged, StandingAuthorisationRequest, StandingAuthorisationRevocationRequest, StandingAuthorisationRevoked, NodeBindingRequest, NodeBound, NodeEnrolmentBindingRequest } from './cloud-settlement.js';
 import type { CitizenTransferMade, CitizenTransferRequest } from './citizen-transfer.js';
 import type { CommercialPaymentMade, CommercialPaymentRequest } from './commercial-payment.js';
 import type { HandleChangeCharged, HandleChangeReceiptReadResponse } from './handle-change.js';
@@ -368,6 +368,14 @@ export interface CaysoClient {
      * nothing was bound.
      */
     bindNode(req: NodeBindingRequest): Promise<NodeBound>;
+    /**
+     * Bind a Node the Registry enrolled under the caller to the caller's own wallet, under
+     * the caller's money-grade assertion (`bind-enrolled-node`, CAY-0095 Amendment 1).
+     * Safe to repeat: the same Node bound to the same wallet answers `bound` again and
+     * writes nothing. A refusal arrives as a thrown {@link CaysoApiError} whose `code` is a
+     * `NodeEnrolmentBindingRefusal` member, one of the gate's codes, or a seam code.
+     */
+    bindEnrolledNode(req: NodeEnrolmentBindingRequest): Promise<NodeBound>;
     getVersion(): Promise<CaysoVersion>;
 }
 /**

package/dist/client.js

@@ -340,6 +340,15 @@ function buildClient(options, internals) {
                 body: req,
             });
         },
+        async bindEnrolledNode(req) {
+            return requestJson({
+                method: ROUTES.bindEnrolledNode.method,
+                path: ROUTES.bindEnrolledNode.path,
+                // Safe to repeat: the same Node bound to the same wallet answers the same.
+                idempotent: true,
+                body: req,
+            });
+        },
         async getPurchase(purchaseId) {
             return requestJson({
                 method: ROUTES.purchaseResult.method,

package/dist/cloud-settlement.d.ts

@@ -469,6 +469,61 @@ export type NodeBindingRefusal =
  | 'core_node_not_bound'
 /** The Node is already bound to a different wallet. A binding is never re-pointed. */
  | 'node_bound_to_another_wallet';
+/**
+ * The Registry's statement that a Node is enrolled under a Citizen (CMTY-0018 §4, CMTY-0019,
+ * CAY-0095 Amendment 1): a CAY-0072 compact signed by a Registry key, whose header `kid`
+ * names that key. `iss` is the Registry's issuer, one fixed string per environment. `sub` is the Citizen's Percayso ID subject, which must be
+ * the verified assertion's.
+ */
+export interface NodeEnrolmentClaims {
+    /** The Registry's issuer for this environment, e.g. `percayso-cloud-registry:dev`. Not the `kid`. */
+    readonly iss: string;
+    /** Exactly `'cayso'`, and checked, not merely present. */
+    readonly aud: 'cayso';
+    /** The Citizen the Node is enrolled under: their Percayso ID subject. */
+    readonly sub: string;
+    /** The Node enrolled. */
+    readonly node_id: NodeId;
+    /** Issued-at, in **seconds** since the Unix epoch. */
+    readonly iat: number;
+    /** Expiry, in **seconds** since the Unix epoch. */
+    readonly exp: number;
+}
+/**
+ * The Citizen binding an enrolled Node to their own wallet (`bind-enrolled-node`): the
+ * Registry-signed {@link NodeEnrolmentClaims} compact, and nothing else. No Instance key,
+ * no standing authorisation, no wallet.
+ */
+export interface NodeEnrolmentBindingRequest {
+    readonly nodeEnrolment: string;
+}
+/** The enrolled-Node binding was refused, with one member of the closed union. Nothing was bound. */
+export interface NodeEnrolmentBindingRefused {
+    readonly outcome: 'refused';
+    readonly error: NodeEnrolmentBindingRefusal;
+}
+/**
+ * Why binding an enrolled Node was refused. Closed. Every member means nothing was bound.
+ */
+export type NodeEnrolmentBindingRefusal = 
+/** The verification method is outside the money-grade profile (`ASSURANCE_POLICY['bind-enrolled-node']`). */
+'assurance_not_money_grade'
+/** Not a compact in CAY-0072's format, or its claims are not exactly {@link NodeEnrolmentClaims} with `aud` `'cayso'`. */
+ | 'node_enrolment_malformed'
+/** `iss` is not this environment's Registry issuer, or the header's `kid` is no key of it. One member for both. */
+ | 'node_enrolment_issuer_not_recognised'
+/** The signature does not verify over the bytes presented, or `alg` is not the key's. */
+ | 'node_enrolment_signature_invalid'
+/** `exp` is at or before now, or `iat` is further ahead of now than the clock-skew tolerance. */
+ | 'node_enrolment_not_current'
+/** `sub` is not the verified holder's subject: the Node is enrolled under somebody else. */
+ | 'node_enrolment_not_for_holder'
+/** The verified holder has no Citizen Wallet bound now. */
+ | 'holder_has_no_wallet'
+/** The Node is a Core Node. Its owner is the Operator, so it is bound to no Citizen Wallet. */
+ | 'core_node_not_bound'
+/** The Node is already bound to a different wallet. A binding is never re-pointed. */
+ | 'node_bound_to_another_wallet';
 /**
  * The Contribution Store's question about one Node (CAY-0095): signed by a key of
  * the registered Store issuer, in CAY-0072's format, whose header `kid` names that

package/dist/contract-schema.generated.js

@@ -14,7 +14,7 @@
  * limitations under the License.
  */
 export const CONTRACT_SCHEMA = {
-    "contractVersion": "2.0.0",
+    "contractVersion": "2.1.0",
     "packageName": "@percayso-community/cayso-contracts",
     "capabilities": {
         "wallet": "cayso.wallet",
@@ -101,6 +101,10 @@ export const CONTRACT_SCHEMA = {
             "method": "POST",
             "path": "/api/cloud/node-bindings"
         },
+        "bindEnrolledNode": {
+            "method": "POST",
+            "path": "/api/cloud/node-enrolment-bindings"
+        },
         "version": {
             "method": "GET",
             "path": "/api/version"
@@ -930,6 +934,9 @@ export const CONTRACT_SCHEMA = {
                     {
                         "literal": "core_node_ids_not_configured"
                     },
+                    {
+                        "literal": "node_registry_not_configured"
+                    },
                     {
                         "literal": "contribution_store_issuer_not_configured"
                     },
@@ -1005,6 +1012,9 @@ export const CONTRACT_SCHEMA = {
                     {
                         "ref": "NodeBindingRefusal"
                     },
+                    {
+                        "ref": "NodeEnrolmentBindingRefusal"
+                    },
                     {
                         "ref": "NodeBindingQueryRefusal"
                     },
@@ -1824,6 +1834,9 @@ export const CONTRACT_SCHEMA = {
                     },
                     {
                         "literal": "bind-node"
+                    },
+                    {
+                        "literal": "bind-enrolled-node"
                     }
                 ]
             }
@@ -3239,6 +3252,118 @@ export const CONTRACT_SCHEMA = {
                 }
             }
         },
+        "NodeEnrolmentBindingRefusal": {
+            "kind": "alias",
+            "of": {
+                "union": [
+                    {
+                        "literal": "assurance_not_money_grade"
+                    },
+                    {
+                        "literal": "node_enrolment_malformed"
+                    },
+                    {
+                        "literal": "node_enrolment_issuer_not_recognised"
+                    },
+                    {
+                        "literal": "node_enrolment_signature_invalid"
+                    },
+                    {
+                        "literal": "node_enrolment_not_current"
+                    },
+                    {
+                        "literal": "node_enrolment_not_for_holder"
+                    },
+                    {
+                        "literal": "holder_has_no_wallet"
+                    },
+                    {
+                        "literal": "core_node_not_bound"
+                    },
+                    {
+                        "literal": "node_bound_to_another_wallet"
+                    }
+                ]
+            }
+        },
+        "NodeEnrolmentBindingRefused": {
+            "kind": "object",
+            "properties": {
+                "outcome": {
+                    "type": {
+                        "literal": "refused"
+                    },
+                    "readonly": true,
+                    "optional": false
+                },
+                "error": {
+                    "type": {
+                        "ref": "NodeEnrolmentBindingRefusal"
+                    },
+                    "readonly": true,
+                    "optional": false
+                }
+            }
+        },
+        "NodeEnrolmentBindingRequest": {
+            "kind": "object",
+            "properties": {
+                "nodeEnrolment": {
+                    "type": {
+                        "scalar": "string"
+                    },
+                    "readonly": true,
+                    "optional": false
+                }
+            }
+        },
+        "NodeEnrolmentClaims": {
+            "kind": "object",
+            "properties": {
+                "iss": {
+                    "type": {
+                        "scalar": "string"
+                    },
+                    "readonly": true,
+                    "optional": false
+                },
+                "aud": {
+                    "type": {
+                        "literal": "cayso"
+                    },
+                    "readonly": true,
+                    "optional": false
+                },
+                "sub": {
+                    "type": {
+                        "scalar": "string"
+                    },
+                    "readonly": true,
+                    "optional": false
+                },
+                "node_id": {
+                    "type": {
+                        "ref": "NodeId"
+                    },
+                    "readonly": true,
+                    "optional": false
+                },
+                "iat": {
+                    "type": {
+                        "scalar": "number"
+                    },
+                    "readonly": true,
+                    "optional": false
+                },
+                "exp": {
+                    "type": {
+                        "scalar": "number"
+                    },
+                    "readonly": true,
+                    "optional": false
+                }
+            }
+        },
         "NodeId": {
             "kind": "alias",
             "of": {

package/dist/errors.d.ts

@@ -45,7 +45,7 @@
 import type { AuthorityBindingRefusal } from './authority.js';
 import type { FounderClaimRefusal } from './citizenship.js';
 import type { BuyBackRefusal, QuotePlacementRefusal, QuoteWithdrawalRefusal } from './citizen-market.js';
-import type { SettlementAssertionRefusal, StandingAuthorisationRefusal, StandingAuthorisationRevocationRefusal, NodeBindingQueryRefusal, NodeBindingRefusal } from './cloud-settlement.js';
+import type { SettlementAssertionRefusal, StandingAuthorisationRefusal, StandingAuthorisationRevocationRefusal, NodeBindingQueryRefusal, NodeBindingRefusal, NodeEnrolmentBindingRefusal } from './cloud-settlement.js';
 import type { CitizenTransferRefusal } from './citizen-transfer.js';
 import type { HandleChangeReceiptReadRefusal, HandleChangeRefusal } from './handle-change.js';
 import type { CommercialPaymentRefusal } from './commercial-payment.js';
@@ -216,6 +216,8 @@ export type CaysoApiErrorCode =
  * Citizen Wallet. Told "none" is a configuration; untold is a closed door.
  */
  | 'core_node_ids_not_configured'
+/** No Registry key is configured to verify a Node enrolment (CAY-0095, its first amendment). */
+ | 'node_registry_not_configured'
 /**
  * No Contribution Store issuer is registered on this deployment, so no statement
  * from the Store is verified and the Store's read of a Node's binding is not
@@ -265,7 +267,7 @@ export type CaysoApiErrorCode =
 /** There is no such purchase under this caller's wallet. */
  | 'not_found'
 /** Something failed on the way and the refusal discloses nothing further. */
- | 'internal_error' | PurchaseFailureReason | PurchaseCancelRefusalReason | FounderClaimRefusal | CommercialPaymentRefusal | CitizenTransferRefusal | HandleChangeRefusal | HandleChangeReceiptReadRefusal | QuotePlacementRefusal | QuoteWithdrawalRefusal | BuyBackRefusal | MarketplaceReceiptReadRefusal | MarketplaceOrderRefusal | MarketplaceRefundRefusal | StandingAuthorisationRefusal | StandingAuthorisationRevocationRefusal | NodeBindingRefusal | NodeBindingQueryRefusal | SettlementAssertionRefusal | AuthorityBindingRefusal;
+ | 'internal_error' | PurchaseFailureReason | PurchaseCancelRefusalReason | FounderClaimRefusal | CommercialPaymentRefusal | CitizenTransferRefusal | HandleChangeRefusal | HandleChangeReceiptReadRefusal | QuotePlacementRefusal | QuoteWithdrawalRefusal | BuyBackRefusal | MarketplaceReceiptReadRefusal | MarketplaceOrderRefusal | MarketplaceRefundRefusal | StandingAuthorisationRefusal | StandingAuthorisationRevocationRefusal | NodeBindingRefusal | NodeEnrolmentBindingRefusal | NodeBindingQueryRefusal | SettlementAssertionRefusal | AuthorityBindingRefusal;
 /**
  * The body of every refusal on this surface: one code, and nothing beside it.
  *

package/dist/index.d.ts

@@ -675,7 +675,7 @@
  * have needed a breaking bump on their own. Under semver below `1.0.0` the minor
  * is where a breaking change goes, so the minor moves and the patch does not.
  */
-export declare const CONTRACT_VERSION: "2.0.0";
+export declare const CONTRACT_VERSION: "2.1.0";
 /** The package's own name, so a consumer can name what it depends on. */
 export declare const packageName = "@percayso-community/cayso-contracts";
 /**
@@ -848,7 +848,7 @@ export type { HandleChangeReceiptStatement, HandleChangeReceipt, HandleChangeCha
 export type { QuoteSide, QuoteRequest, Quote, QuotePlaced, QuoteRefused, QuoteResponse, QuoteEntryRefusal, QuotePlacementRefusal, QuoteWithdrawalRequest, QuoteWithdrawal, QuoteWithdrawn, QuoteWithdrawalRefused, QuoteWithdrawalResponse, QuoteWithdrawalRefusal, BuyBackRequest, BuyBack, BuyBackMade, BuyBackRefused, BuyBackResponse, BuyBackRefusal, BookLevel, QuoteStatus, QuoteWithdrawalReason, OwnQuote, OwnQuoteNotWithdrawn, OwnQuoteWithdrawn, CitizenMarketView, CitizenMarketViewed, CitizenMarketViewRefusal, CitizenMarketViewRefused, CitizenMarketResponse, } from './citizen-market.js';
 export type { MarketplaceReceiptSignatureAlgorithm, MarketplaceReceiptKeyId, MarketplaceSaleKind, MarketplaceReceiptLeg, MarketplaceSettlementReceiptStatement, HousePublisherChargeReceiptStatement, ThirdPartyRefundReceiptStatement, HousePublisherRefundReceiptStatement, MarketplaceReceiptStatement, MarketplaceReceipt, MarketplaceReceiptReadRequest, MarketplaceReceiptFound, MarketplaceNoMovement, MarketplaceReceiptReadRefusal, MarketplaceReceiptReadRefused, MarketplaceReceiptReadResponse, } from './marketplace-receipt.js';
 export type { StoreSignedStatement, MarketplaceOrderRequest, MarketplaceRefundRequest, MarketplaceOrderReceipt, MarketplaceRefundReceipt, MarketplaceOrderSettled, MarketplaceOrderRefused, MarketplaceOrderResponse, MarketplaceOrderRefusal, MarketplaceRefundSettled, MarketplaceRefundRefused, MarketplaceRefundResponse, MarketplaceRefundRefusal, } from './marketplace-settlement.js';
-export type { InstanceKeyId, SettlementPeriodRule, SettlementPeriodId, NodeId, ContributionStoreIssuer, PercaysoCloudAudience, StandingAuthorisationClaims, StandingAuthorisationRequest, AuthorisationAcknowledgementClaims, AcknowledgementKeyId, AcknowledgementPublicKey, AcknowledgementKeySet, StandingAuthorisationAcknowledged, StandingAuthorisationRefused, StandingAuthorisationResponse, StandingAuthorisationRefusal, StandingAuthorisationRevocationRequest, StandingAuthorisationRevoked, StandingAuthorisationRevocationRefused, StandingAuthorisationRevocationResponse, StandingAuthorisationRevocationRefusal, NodePresentationClaims, NodeBindingRequest, NodeBound, NodeBindingRefused, NodeBindingResponse, NodeBindingRefusal, NodeBindingQueryClaims, NodeBindingQueryRequest, NodeBindingStatus, NodeBindingQueryRefused, NodeBindingQueryRefusal, ContributionType, SettlementPeriod, ContributionWithheldReason, ContributionQualified, ContributionWithheld, ContributionQualification, ContributionRow, ConsumptionRow, SettlementTotals, SettlementAssertionClaims, SettlementAssertionRequest, SettlementAssertionSettled, SettlementAssertionRefused, ContributionRowRefused, ConsumptionRowRefused, SettlementAssertionResponse, SettlementAssertionLevelRefusal, ContributionRowRefusal, ConsumptionRowRefusal, SettlementAssertionRefusal, } from './cloud-settlement.js';
+export type { InstanceKeyId, SettlementPeriodRule, SettlementPeriodId, NodeId, ContributionStoreIssuer, PercaysoCloudAudience, StandingAuthorisationClaims, StandingAuthorisationRequest, AuthorisationAcknowledgementClaims, AcknowledgementKeyId, AcknowledgementPublicKey, AcknowledgementKeySet, StandingAuthorisationAcknowledged, StandingAuthorisationRefused, StandingAuthorisationResponse, StandingAuthorisationRefusal, StandingAuthorisationRevocationRequest, StandingAuthorisationRevoked, StandingAuthorisationRevocationRefused, StandingAuthorisationRevocationResponse, StandingAuthorisationRevocationRefusal, NodePresentationClaims, NodeBindingRequest, NodeBound, NodeBindingRefused, NodeBindingResponse, NodeBindingRefusal, NodeEnrolmentClaims, NodeEnrolmentBindingRequest, NodeEnrolmentBindingRefused, NodeEnrolmentBindingRefusal, NodeBindingQueryClaims, NodeBindingQueryRequest, NodeBindingStatus, NodeBindingQueryRefused, NodeBindingQueryRefusal, ContributionType, SettlementPeriod, ContributionWithheldReason, ContributionQualified, ContributionWithheld, ContributionQualification, ContributionRow, ConsumptionRow, SettlementTotals, SettlementAssertionClaims, SettlementAssertionRequest, SettlementAssertionSettled, SettlementAssertionRefused, ContributionRowRefused, ConsumptionRowRefused, SettlementAssertionResponse, SettlementAssertionLevelRefusal, ContributionRowRefusal, ConsumptionRowRefusal, SettlementAssertionRefusal, } from './cloud-settlement.js';
 export type { PurchaseRequest, PurchaseAuthorised, PurchaseTerminal, PurchaseUnresolved, PurchaseRefused, PurchaseAuthorisationResponse, PurchaseFailureReason, PurchaseStatus, LivePurchaseStatus, TerminalPurchaseStatus, PurchaseCancelRefusalReason, PurchaseCancelled, PurchaseCancelRefused, PurchaseCancelResponse, PurchaseResult, } from './purchase.js';
 export type { VerificationMethod, VerificationStatus, SubjectPersonhood, AssertionClaims, AssertionHeader, AssertionEnvelope, ContractOperation, InternalOperation, ScopeKey, } from './assertion.js';
 export type { AuthorityClaims, AuthorityEnvelope, AuthorityBindingRefusal } from './authority.js';

package/dist/index.js

@@ -691,7 +691,7 @@
  * have needed a breaking bump on their own. Under semver below `1.0.0` the minor
  * is where a breaking change goes, so the minor moves and the patch does not.
  */
-export const CONTRACT_VERSION = '2.0.0';
+export const CONTRACT_VERSION = '2.1.0';
 /** The package's own name, so a consumer can name what it depends on. */
 export const packageName = '@percayso-community/cayso-contracts';
 /**

package/dist/routes.d.ts

@@ -127,6 +127,11 @@
  * the wallet; the revocation is a row of its own beside them. The body names the
  * authorisation's `jti` and no wallet.
  *
+ * `bindEnrolledNode` binds a Node the Registry enrolled under the verified Citizen to that
+ * Citizen's own wallet (`bind-enrolled-node`, CAY-0095 Amendment 1). The body carries the
+ * Registry-signed enrolment and nothing else: no Instance key and no wallet. A `POST` to a
+ * collection of its own, for `bindNode`'s reasons.
+ *
  * `bindNode` binds a Node to the wallet its presenting Instance key is already bound
  * to (`bind-node`, CAY-0095), under the owner's assertion. A person is behind it, so
  * it is classified by a person's assurance. The body carries the Node ID signed by the
@@ -229,6 +234,10 @@ export declare const ROUTES: {
         readonly method: "POST";
         readonly path: "/api/cloud/node-bindings";
     };
+    readonly bindEnrolledNode: {
+        readonly method: "POST";
+        readonly path: "/api/cloud/node-enrolment-bindings";
+    };
     readonly version: {
         readonly method: "GET";
         readonly path: "/api/version";

package/dist/routes.js

@@ -142,6 +142,11 @@
  * the wallet; the revocation is a row of its own beside them. The body names the
  * authorisation's `jti` and no wallet.
  *
+ * `bindEnrolledNode` binds a Node the Registry enrolled under the verified Citizen to that
+ * Citizen's own wallet (`bind-enrolled-node`, CAY-0095 Amendment 1). The body carries the
+ * Registry-signed enrolment and nothing else: no Instance key and no wallet. A `POST` to a
+ * collection of its own, for `bindNode`'s reasons.
+ *
  * `bindNode` binds a Node to the wallet its presenting Instance key is already bound
  * to (`bind-node`, CAY-0095), under the owner's assertion. A person is behind it, so
  * it is classified by a person's assurance. The body carries the Node ID signed by the
@@ -187,6 +192,7 @@ export const ROUTES = {
         path: '/api/cloud/standing-authorisation-revocations',
     },
     bindNode: { method: 'POST', path: '/api/cloud/node-bindings' },
+    bindEnrolledNode: { method: 'POST', path: '/api/cloud/node-enrolment-bindings' },
     version: { method: 'GET', path: '/api/version' },
 };
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@percayso-community/cayso-contracts",
-  "version": "2.0.0",
+  "version": "2.1.0",
   "description": "The versioned capability contract surface through which anything outside this repository reads a wallet. Published; keep it the surface of every consumer outside this tree, Piper and the Percayso Cloud, and nothing internal.",
   "license": "Apache-2.0",
   "repository": {