@real-life/trust-protocol 0.1.0 → 0.1.1

package/README.md

@@ -32,6 +32,9 @@ look in the code:
 | `identity` | Identity Layer | One root seed, every context derived — community anchor, pair anchor per relationship, member anchor per group. Contexts never link without their holder's deliberate act. |
 | `encounter` | Encounter Layer | The ceremony under fresh-always pair anchors: challenges, contact cards, the enactment binding both sides compute independently, encounter credentials. |
 | `delivery` | Delivery Contract | The sealed envelope, and the receive chain in its declared order — size bound *before* decryption, envelope form, decryption, parse and digest over the canonical form, completed-effect cache. |
+| `carrier-identity` | Identity §7a | The carrier-relationship principal: one Ed25519 control key per (relationship × carrier), derived so that no computable relation to the relationship's other principals or its `rkid` exists — which is why registration must *prove* the binding instead of computing it. |
+| `carrier` | Delivery §4.4 + §5a | The carrier side of the port as one transport-agnostic state machine: the five guarantees, the proof rule, the total binding lifecycle (unbound → live → closing → released), the verdict sets in their normative evaluation orders, wind-up and binding tombstones. The clock is injected. |
+| `holder` | Delivery §5a + Identity §9.3 | The holder's half: proof construction for all four purposes, the closed verdict set, and the two-exchange recovery flow for a lost carrier entry. |
 
 Everything is re-exported from the package root; the table is a map, not an
 import instruction.
@@ -74,7 +77,9 @@ it deliberately does not:
 
 | Module (0.1.x) | Casting | Implemented | Not in this package |
 |---|---|---|---|
-| `identity` | Identity 0.50 | context derivation under the closed label registry (§6.1, unchanged since 0.13) with the ordered persona pipeline (§6.2, Unicode 15.0 pinned) | recovery derivation (§5.3), service identities (§7), carrier relationship (§7a), the label register and its state |
+| `identity` | Identity 0.50 | context derivation under the closed label registry (§6.1, unchanged since 0.13) with the ordered persona pipeline (§6.2, Unicode 15.0 pinned) | recovery derivation (§5.3), service identities (§7), the label register and its state |
+| `carrier-identity` | Identity 0.51 (§7a) | the carrier-relationship principal derivation, identifier validation | the register's generation state (held by the holder's store) |
+| `carrier` + `holder` | Delivery 0.69 (§4.4, §5a) + Identity 0.51 (§9.3) | the port state machine, proofs for all four purposes, verdicts, recovery | transport adapters and their policies (a carrier's budgets enter through hooks) |
 | `encounter` | Encounter 0.29 — wire `0.25` (`rltp-card/0.25`, `encounter-scan@0.25`) | challenges, both card profiles, the enactment binding, encounter credentials | the ceremony state machine, acceptance rules, ack deadlines |
 | `delivery` | Delivery 0.64 | the sealed envelope (§5) and the generic receive stages 1–4 | the type-specific stages, residual bookkeeping, transport adapters |
 | `core`, `crypto` | cross-layer | canonical form, digest equality, timestamps, validator; primitives + `eddsa-jcs-2022` proof | — |

package/dist/carrier-identity.d.ts

@@ -0,0 +1,11 @@
+import type { KeyPair } from './crypto.js';
+export declare const CARRIER_INFO_PREFIX = "rltp/v1/carrier-relationship/ed25519/v1/";
+export declare function validCarrierIdentifier(c: unknown): c is string;
+export interface CarrierPrincipal {
+    principal: string;
+    key: KeyPair;
+    info: string;
+    keyAgreement: null;
+}
+export declare function carrierPrincipal(rootIkm: Uint8Array, carrier: string, nonce: Uint8Array): Promise<CarrierPrincipal>;
+//# sourceMappingURL=carrier-identity.d.ts.map

package/dist/carrier-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"carrier-identity.d.ts","sourceRoot":"","sources":["../src/carrier-identity.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAK1C,eAAO,MAAM,mBAAmB,6CAA6C,CAAA;AA4B7E,wBAAgB,sBAAsB,CAAE,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAmB/D;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,OAAO,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,IAAI,CAAA;CACnB;AAKD,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GACtD,OAAO,CAAC,gBAAgB,CAAC,CAO3B"}

package/dist/carrier-identity.js

@@ -0,0 +1,85 @@
+// carrier-identity — Identity §7a: the carrier-relationship identity class.
+//
+// One control principal per (relationship × carrier), Ed25519-only. The
+// derivation shares no computable relation with the relationship's other
+// principals or with its `rkid` — that absence is the privacy property
+// the whole class exists for (§7a.5), and it is why registration must
+// PROVE the binding instead of computing it (Delivery §5a.3).
+//
+// info = "rltp/v1/carrier-relationship/ed25519/v1/" || Dc || Dn
+// where Dc = multihash(sha2-256, UTF-8 of the configured carrier
+// identifier C) and Dn = multihash(sha2-256, 32-byte carrier nonce N),
+// each rendered as 'u' + base64url — exactly 47 characters, so the two
+// parts are length-fixed and no concatenation ambiguity exists (§7a.4).
+//
+// NO key-agreement key is derived for this class: sealing stays at the
+// `rkid` (§7a.1), and a carrier that never holds a decryption key can
+// never be asked to use one.
+import { b64uOf, cat } from './crypto.js';
+import { sha, hkdf, edFromSeed, anchorOfEd } from './crypto.js';
+import { WHITE_SPACE_15 } from './unicode15.js';
+const te = new TextEncoder();
+export const CARRIER_INFO_PREFIX = 'rltp/v1/carrier-relationship/ed25519/v1/';
+// multihash(sha2-256) in base64url — the digest form Identity §7a.4 fixes
+const mh = async (bytes) => 'u' + b64uOf(cat(Uint8Array.from([0x12, 0x20]), await sha(bytes)));
+// Identity §7a.2 — the ordered validation pipeline for C, fail closed
+// and NO normalization (the deliberate difference to §6.2): valid
+// Unicode scalar values only (unpaired surrogates never repaired),
+// 1..1024 UTF-8 BYTES, and no Cc, Cf or White_Space code point anywhere.
+//
+// The category tables are PINNED to Unicode 15.0 (port-review-2 M-6):
+// evaluating against the platform's \p{...} data would let the same
+// identifier derive a principal on one runtime and be rejected on
+// another the moment a Unicode revision moves a code point — the exact
+// defect the persona repertoire (unicode15.ts) already closed for §6.2.
+// Cc is the stable C0/C1 block; Cf is the 170-code-point Unicode-15.0
+// set, enumerated below; White_Space is unicode15.ts's pinned set.
+const CC_15 = (cp) => cp <= 0x1f || (cp >= 0x7f && cp <= 0x9f);
+const CF_15_RANGES = [
+    [0x00ad, 0x00ad], [0x0600, 0x0605], [0x061c, 0x061c], [0x06dd, 0x06dd],
+    [0x070f, 0x070f], [0x0890, 0x0891], [0x08e2, 0x08e2], [0x180e, 0x180e],
+    [0x200b, 0x200f], [0x202a, 0x202e], [0x2060, 0x2064], [0x2066, 0x206f],
+    [0xfeff, 0xfeff], [0xfff9, 0xfffb], [0x110bd, 0x110bd], [0x110cd, 0x110cd],
+    [0x13430, 0x1343f], [0x1bca0, 0x1bca3], [0x1d173, 0x1d17a],
+    [0xe0001, 0xe0001], [0xe0020, 0xe007f],
+];
+const CF_15 = (cp) => CF_15_RANGES.some(([a, b]) => cp >= a && cp <= b);
+export function validCarrierIdentifier(c) {
+    if (typeof c !== 'string' || c.length === 0)
+        return false;
+    // scalar values: an unpaired surrogate is not a Unicode string
+    for (let i = 0; i < c.length; i++) {
+        const u = c.charCodeAt(i);
+        if (u >= 0xdc00 && u <= 0xdfff)
+            return false; // lone low
+        if (u >= 0xd800 && u <= 0xdbff) {
+            const nxt = c.charCodeAt(i + 1);
+            if (!(nxt >= 0xdc00 && nxt <= 0xdfff))
+                return false; // lone high
+            i++;
+        }
+    }
+    const bytes = new TextEncoder().encode(c);
+    if (bytes.length < 1 || bytes.length > 1024)
+        return false;
+    for (const ch of c) {
+        const cp = ch.codePointAt(0);
+        if (CC_15(cp) || CF_15(cp) || WHITE_SPACE_15.has(cp))
+            return false;
+    }
+    return true;
+}
+// Identity §7a.4 — derive the control principal for one relationship at
+// one carrier. `carrier` is C exactly as configured (byte-exact), `nonce`
+// is the relationship's 32-byte carrier nonce N from the register (§7a.3).
+export async function carrierPrincipal(rootIkm, carrier, nonce) {
+    if (!validCarrierIdentifier(carrier))
+        throw new Error('invalid carrier identifier (7a.2)');
+    if (nonce.length !== 32)
+        throw new Error('carrier nonce must be 32 bytes (7a.3)');
+    const info = CARRIER_INFO_PREFIX + await mh(te.encode(carrier)) + await mh(nonce);
+    const seed = await hkdf(rootIkm, info);
+    const key = await edFromSeed(seed);
+    return { principal: anchorOfEd(key.pubRaw), key, info, keyAgreement: null };
+}
+//# sourceMappingURL=carrier-identity.js.map

package/dist/carrier-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"carrier-identity.js","sourceRoot":"","sources":["../src/carrier-identity.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,EAAE;AACF,wEAAwE;AACxE,yEAAyE;AACzE,uEAAuE;AACvE,sEAAsE;AACtE,8DAA8D;AAC9D,EAAE;AACF,gEAAgE;AAChE,iEAAiE;AACjE,uEAAuE;AACvE,uEAAuE;AACvE,wEAAwE;AACxE,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,6BAA6B;AAC7B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE/D,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAE/C,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAA;AAE5B,MAAM,CAAC,MAAM,mBAAmB,GAAG,0CAA0C,CAAA;AAE7E,0EAA0E;AAC1E,MAAM,EAAE,GAAG,KAAK,EAAE,KAAiB,EAAmB,EAAE,CACtD,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAEpE,sEAAsE;AACtE,kEAAkE;AAClE,mEAAmE;AACnE,yEAAyE;AACzE,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,kEAAkE;AAClE,uEAAuE;AACvE,wEAAwE;AACxE,sEAAsE;AACtE,mEAAmE;AACnE,MAAM,KAAK,GAAG,CAAC,EAAU,EAAW,EAAE,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,CAAA;AAC/E,MAAM,YAAY,GAA4B;IAC5C,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;IACtE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;IACtE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;IACtE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1E,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1D,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;CACvC,CAAA;AACD,MAAM,KAAK,GAAG,CAAC,EAAU,EAAW,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AACxF,MAAM,UAAU,sBAAsB,CAAE,CAAU;IAChD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACzD,+DAA+D;IAC/D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACzB,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM;YAAE,OAAO,KAAK,CAAA,CAAuB,WAAW;QAC9E,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YAC/B,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAA,CAAc,YAAY;YAC7E,CAAC,EAAE,CAAA;QACL,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IACzC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,KAAK,CAAA;IACzD,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAE,CAAA;QAC7B,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAA;IACpE,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AASD,wEAAwE;AACxE,0EAA0E;AAC1E,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAmB,EAAE,OAAe,EAAE,KAAiB;IAEvD,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IAC1F,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IACjF,MAAM,IAAI,GAAG,mBAAmB,GAAG,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAA;IACjF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IACtC,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAA;IAClC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;AAC7E,CAAC","sourcesContent":["// carrier-identity — Identity §7a: the carrier-relationship identity class.\n//\n// One control principal per (relationship × carrier), Ed25519-only. The\n// derivation shares no computable relation with the relationship's other\n// principals or with its `rkid` — that absence is the privacy property\n// the whole class exists for (§7a.5), and it is why registration must\n// PROVE the binding instead of computing it (Delivery §5a.3).\n//\n// info = \"rltp/v1/carrier-relationship/ed25519/v1/\" || Dc || Dn\n// where Dc = multihash(sha2-256, UTF-8 of the configured carrier\n// identifier C) and Dn = multihash(sha2-256, 32-byte carrier nonce N),\n// each rendered as 'u' + base64url — exactly 47 characters, so the two\n// parts are length-fixed and no concatenation ambiguity exists (§7a.4).\n//\n// NO key-agreement key is derived for this class: sealing stays at the\n// `rkid` (§7a.1), and a carrier that never holds a decryption key can\n// never be asked to use one.\nimport { b64uOf, cat } from './crypto.js'\nimport { sha, hkdf, edFromSeed, anchorOfEd } from './crypto.js'\nimport type { KeyPair } from './crypto.js'\nimport { WHITE_SPACE_15 } from './unicode15.js'\n\nconst te = new TextEncoder()\n\nexport const CARRIER_INFO_PREFIX = 'rltp/v1/carrier-relationship/ed25519/v1/'\n\n// multihash(sha2-256) in base64url — the digest form Identity §7a.4 fixes\nconst mh = async (bytes: Uint8Array): Promise<string> =>\n  'u' + b64uOf(cat(Uint8Array.from([0x12, 0x20]), await sha(bytes)))\n\n// Identity §7a.2 — the ordered validation pipeline for C, fail closed\n// and NO normalization (the deliberate difference to §6.2): valid\n// Unicode scalar values only (unpaired surrogates never repaired),\n// 1..1024 UTF-8 BYTES, and no Cc, Cf or White_Space code point anywhere.\n//\n// The category tables are PINNED to Unicode 15.0 (port-review-2 M-6):\n// evaluating against the platform's \\p{...} data would let the same\n// identifier derive a principal on one runtime and be rejected on\n// another the moment a Unicode revision moves a code point — the exact\n// defect the persona repertoire (unicode15.ts) already closed for §6.2.\n// Cc is the stable C0/C1 block; Cf is the 170-code-point Unicode-15.0\n// set, enumerated below; White_Space is unicode15.ts's pinned set.\nconst CC_15 = (cp: number): boolean => cp <= 0x1f || (cp >= 0x7f && cp <= 0x9f)\nconst CF_15_RANGES: Array<[number, number]> = [\n  [0x00ad, 0x00ad], [0x0600, 0x0605], [0x061c, 0x061c], [0x06dd, 0x06dd],\n  [0x070f, 0x070f], [0x0890, 0x0891], [0x08e2, 0x08e2], [0x180e, 0x180e],\n  [0x200b, 0x200f], [0x202a, 0x202e], [0x2060, 0x2064], [0x2066, 0x206f],\n  [0xfeff, 0xfeff], [0xfff9, 0xfffb], [0x110bd, 0x110bd], [0x110cd, 0x110cd],\n  [0x13430, 0x1343f], [0x1bca0, 0x1bca3], [0x1d173, 0x1d17a],\n  [0xe0001, 0xe0001], [0xe0020, 0xe007f],\n]\nconst CF_15 = (cp: number): boolean => CF_15_RANGES.some(([a, b]) => cp >= a && cp <= b)\nexport function validCarrierIdentifier (c: unknown): c is string {\n  if (typeof c !== 'string' || c.length === 0) return false\n  // scalar values: an unpaired surrogate is not a Unicode string\n  for (let i = 0; i < c.length; i++) {\n    const u = c.charCodeAt(i)\n    if (u >= 0xdc00 && u <= 0xdfff) return false                       // lone low\n    if (u >= 0xd800 && u <= 0xdbff) {\n      const nxt = c.charCodeAt(i + 1)\n      if (!(nxt >= 0xdc00 && nxt <= 0xdfff)) return false              // lone high\n      i++\n    }\n  }\n  const bytes = new TextEncoder().encode(c)\n  if (bytes.length < 1 || bytes.length > 1024) return false\n  for (const ch of c) {\n    const cp = ch.codePointAt(0)!\n    if (CC_15(cp) || CF_15(cp) || WHITE_SPACE_15.has(cp)) return false\n  }\n  return true\n}\n\nexport interface CarrierPrincipal {\n  principal: string          // did:key:z6Mk…, the control principal\n  key: KeyPair               // its Ed25519 pair (for the proofs of §5a.3)\n  info: string               // the derivation info, for auditability\n  keyAgreement: null         // declared, not omitted: Ed25519-only (§7a.1)\n}\n\n// Identity §7a.4 — derive the control principal for one relationship at\n// one carrier. `carrier` is C exactly as configured (byte-exact), `nonce`\n// is the relationship's 32-byte carrier nonce N from the register (§7a.3).\nexport async function carrierPrincipal (\n  rootIkm: Uint8Array, carrier: string, nonce: Uint8Array,\n): Promise<CarrierPrincipal> {\n  if (!validCarrierIdentifier(carrier)) throw new Error('invalid carrier identifier (7a.2)')\n  if (nonce.length !== 32) throw new Error('carrier nonce must be 32 bytes (7a.3)')\n  const info = CARRIER_INFO_PREFIX + await mh(te.encode(carrier)) + await mh(nonce)\n  const seed = await hkdf(rootIkm, info)\n  const key = await edFromSeed(seed)\n  return { principal: anchorOfEd(key.pubRaw), key, info, keyAgreement: null }\n}\n"]}

package/dist/carrier.d.ts

@@ -0,0 +1,157 @@
+export interface CarrierDeclaration {
+    carrier: string;
+    orphanHorizonMs: number;
+    giveUpHorizonMs: number;
+    challengeLifetimeMs: number;
+    queueFloorBytes: number;
+    maxQueueBytes: number;
+    maxBindingTombstones: number;
+    statusHorizonMs: number;
+}
+/** §11: an out-of-domain declaration REJECTS — it never half-applies. */
+export declare function validateDeclaration(d: CarrierDeclaration): string[];
+export declare const CARRIER_ROLE_URI = "https://real-life.org/trust-tasks/delivery-carrier/0.1";
+export declare const PROOF_V = "rltp-carrier-proof/0.3";
+export interface CarrierPolicy {
+    /** shared admission gate — the one unknown-address traffic competes
+     * for. NEVER invoked for a request naming a held binding. */
+    admitNew?: () => boolean;
+    /** per-binding gate for requests naming a HELD rkid (guarantee 4). */
+    admitHeld?: (rkid: string) => boolean;
+    /** per-queue submission meter — the only resource hook reachable below
+     * the floor (guarantee 5); DO-6 lives here. A duplicate charges it
+     * like an admitted submission (§5a.5) and stores nothing. */
+    meterQueue?: (rkid: string, bytes: number) => boolean;
+    /** global occupancy — s6, unreachable below the floor. */
+    hasCapacity?: (bytes: number) => boolean;
+    /** room for one more binding — r4, never consulted for a held one. */
+    hasBindingRoom?: () => boolean;
+}
+export type RegistrationVerdict = {
+    verdict: 'registered' | 'registered(idempotent)' | 'rebound';
+} | {
+    verdict: 'refused(malformed)' | 'refused(possession-failed)';
+} | {
+    verdict: 'refused(stale-generation)';
+    heldGeneration: number;
+} | {
+    verdict: 'registration-refused(capacity)' | 'refused(admission-resource)';
+    retriable: true;
+};
+export type SessionVerdict = {
+    verdict: 'served';
+} | {
+    verdict: 'refused(no-such-queue)' | 'refused(malformed)' | 'refused(possession-failed)';
+} | {
+    verdict: 'refused(admission-resource)';
+    retriable: true;
+};
+export type SubmissionVerdict = {
+    verdict: 'admitted' | 'duplicate';
+} | {
+    verdict: 'refused(no-such-queue)' | 'refused(bounds)';
+} | {
+    verdict: 'refused(admission-resource)' | 'refused(queue-saturated)' | 'refused(capacity)';
+    retriable: true;
+};
+export interface CarrierProof {
+    v: string;
+    type: string;
+    purpose: 'register' | 'rebind' | 'collect' | 'conclude';
+    carrier: string;
+    principal: string;
+    rkid: string;
+    generation?: number;
+    principalChallenge: string;
+    addressChallenge?: string;
+    sig: string;
+}
+export declare const canonicalGenerationSpelling: (raw: string) => boolean;
+/** r1, the SYNTACTIC half only — no cryptography happens here, so a
+ * request refused at r1 or r2 has cost the carrier no key operation
+ * (guarantee 3). `rawGeneration` is REQUIRED for register/rebind: a
+ * parsed number cannot carry its own spelling, and an adapter that
+ * cannot supply the received bytes cannot claim the check (round-44
+ * M-4 of the port review: optional was fail-open). */
+export declare function checkProofShape(p: CarrierProof, expectedCarrier: string, rawGeneration?: string): 'refused(malformed)' | null;
+/** compatibility shim for the shape+signature question alone (tests,
+ * tooling): stateless, no challenge semantics. */
+export declare function verifyProofShape(p: CarrierProof, expectedCarrier: string, rawGeneration?: string): Promise<'refused(malformed)' | 'refused(possession-failed)' | null>;
+export declare function checkEnvelopeBytes(bytes: Uint8Array, rkid: string): boolean;
+export interface CarrierEvents {
+    onRelease?: (rkid: string, tombstoneGeneration: number) => void;
+    onGiveUp?: (rkid: string, digest: string) => void;
+    onEvict?: (rkid: string) => void;
+}
+export declare class Carrier {
+    #private;
+    /** the declaration as published — a copy; mutating it changes nothing
+     * (port-review-2 M-3: the validated state must not be reachable from
+     * outside the validated paths). */
+    get decl(): CarrierDeclaration;
+    private policy;
+    private events;
+    private bindings;
+    private tombstones;
+    private releaseSeq;
+    private challenges;
+    private clock;
+    constructor(decl: CarrierDeclaration, policy?: CarrierPolicy, events?: CarrierEvents);
+    private advance;
+    tick(now: number): void;
+    /** The gated challenge entry — guarantee 3 BY CONSTRUCTION
+     * (port-review-3 M-3): the admission gate runs INSIDE, before any
+     * entropy is drawn, so a refused request costs neither randomness nor
+     * sealing. `draw` is invoked only past the gate; its `addressValue`
+     * (for registration challenges) is the value the adapter will seal to
+     * the rkid — the carrier remembers it and a proof must return exactly
+     * it. Every challenge is BOUND to its rkid (port-review-3 B-1: a
+     * null-rkid challenge disabled the address proof).
+     * Returns null when the gate refuses — retriable, guarantee 2. */
+    issueChallenge(now: number, rkid: string, draw: () => {
+        entropy: Uint8Array;
+        addressValue?: string;
+    }): string | null;
+    /** consume-first (§5a.3): the first attempt takes the challenge before
+     * anything is verified; expiry and rkid binding are checked HERE, so a
+     * stale or transplanted challenge dies without buying a verification. */
+    private consume;
+    register(proof: CarrierProof, opts: {
+        now: number;
+        rawGeneration: string;
+    }): Promise<RegistrationVerdict>;
+    private freshBinding;
+    private reopen;
+    collect(proof: CarrierProof, opts: {
+        now: number;
+    }): Promise<SessionVerdict & {
+        deposits?: Array<{
+            bytes: Uint8Array;
+            digest: string;
+        }>;
+    }>;
+    conclude(proof: CarrierProof, digest: string, opts: {
+        now: number;
+    }): Promise<SessionVerdict>;
+    private session;
+    submit(rkid: string, callerBytes: Uint8Array, opts: {
+        now: number;
+    }): Promise<SubmissionVerdict>;
+    private pendingSeqInstant;
+    private installTombstone;
+    private trimTombstones;
+    /** guarantee 1: the declaration binds, and a revision is itself
+     * validated; a lowered tombstone bound trims in the same step
+     * (round-45 B-3 — standing state is not a running act). */
+    reviseDeclaration(next: Partial<CarrierDeclaration>): void;
+    stateOf(rkid: string): 'unbound' | 'live' | 'closing' | 'released';
+    tombstoneOf(rkid: string): number | null;
+    bindingOf(rkid: string): {
+        generation: number;
+        principal: string;
+        deposits: number;
+        deadline?: number;
+    } | null;
+    tombstoneLabels(): string[];
+}
+//# sourceMappingURL=carrier.d.ts.map

package/dist/carrier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"carrier.d.ts","sourceRoot":"","sources":["../src/carrier.ts"],"names":[],"mappings":"AAmCA,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAA;IACf,eAAe,EAAE,MAAM,CAAA;IACvB,eAAe,EAAE,MAAM,CAAA;IACvB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,eAAe,EAAE,MAAM,CAAA;CACxB;AAYD,yEAAyE;AACzE,wBAAgB,mBAAmB,CAAE,CAAC,EAAE,kBAAkB,GAAG,MAAM,EAAE,CAapE;AAID,eAAO,MAAM,gBAAgB,2DAA2D,CAAA;AACxF,eAAO,MAAM,OAAO,2BAA2B,CAAA;AAG/C,MAAM,WAAW,aAAa;IAC5B;iEAC6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAA;IACxB,sEAAsE;IACtE,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;IACrC;;iEAE6D;IAC7D,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAA;IACrD,0DAA0D;IAC1D,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAA;IACxC,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,OAAO,CAAA;CAC/B;AAGD,MAAM,MAAM,mBAAmB,GAC3B;IAAE,OAAO,EAAE,YAAY,GAAG,wBAAwB,GAAG,SAAS,CAAA;CAAE,GAChE;IAAE,OAAO,EAAE,oBAAoB,GAAG,4BAA4B,CAAA;CAAE,GAChE;IAAE,OAAO,EAAE,2BAA2B,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,OAAO,EAAE,gCAAgC,GAAG,6BAA6B,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAAE,CAAA;AAElG,MAAM,MAAM,cAAc,GACtB;IAAE,OAAO,EAAE,QAAQ,CAAA;CAAE,GACrB;IAAE,OAAO,EAAE,wBAAwB,GAAG,oBAAoB,GAAG,4BAA4B,CAAA;CAAE,GAC3F;IAAE,OAAO,EAAE,6BAA6B,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAAE,CAAA;AAE/D,MAAM,MAAM,iBAAiB,GACzB;IAAE,OAAO,EAAE,UAAU,GAAG,WAAW,CAAA;CAAE,GACrC;IAAE,OAAO,EAAE,wBAAwB,GAAG,iBAAiB,CAAA;CAAE,GACzD;IAAE,OAAO,EAAE,6BAA6B,GAAG,0BAA0B,GAAG,mBAAmB,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAAE,CAAA;AAGlH,MAAM,WAAW,YAAY;IAC3B,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;IACvB,OAAO,EAAE,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAA;IACvD,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;IAChD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,GAAG,EAAE,MAAM,CAAA;CACZ;AASD,eAAO,MAAM,2BAA2B,GAAI,KAAK,MAAM,KAAG,OACM,CAAA;AA+BhE;;;;;sDAKsD;AACtD,wBAAgB,eAAe,CAC7B,CAAC,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAC/D,oBAAoB,GAAG,IAAI,CAoB7B;AAWD;kDACkD;AAClD,wBAAsB,gBAAgB,CACpC,CAAC,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAC/D,OAAO,CAAC,oBAAoB,GAAG,4BAA4B,GAAG,IAAI,CAAC,CAMrE;AASD,wBAAgB,kBAAkB,CAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAW5E;AAcD,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,KAAK,IAAI,CAAA;IAC/D,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAA;IACjD,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CACjC;AAID,qBAAa,OAAO;;IAElB;;uCAEmC;IACnC,IAAI,IAAI,IAAK,kBAAkB,CAA6B;IAC5D,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,QAAQ,CAA6B;IAC7C,OAAO,CAAC,UAAU,CAA+B;IACjD,OAAO,CAAC,UAAU,CAAI;IACtB,OAAO,CAAC,UAAU,CAA+B;IAIjD,OAAO,CAAC,KAAK,CAAI;gBAEJ,IAAI,EAAE,kBAAkB,EAAE,MAAM,GAAE,aAAkB,EAAE,MAAM,GAAE,aAAkB;IAY7F,OAAO,CAAC,OAAO;IAuCf,IAAI,CAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAGxB;;;;;;;;sEAQkE;IAClE,cAAc,CACZ,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EACzB,IAAI,EAAE,MAAM;QAAE,OAAO,EAAE,UAAU,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GACzD,MAAM,GAAG,IAAI;IAmBhB;;6EAEyE;IACzE,OAAO,CAAC,OAAO;IAST,QAAQ,CAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAuEhH,OAAO,CAAC,YAAY;IAGpB,OAAO,CAAC,MAAM;IAaR,OAAO,CAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,GAAG;QAAE,QAAQ,CAAC,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,UAAU,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IAU3I,QAAQ,CAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC;YAatF,OAAO;IAmBf,MAAM,CAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAyDvG,OAAO,CAAC,iBAAiB,CAAgD;IACzE,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,cAAc;IAQtB;;+DAE2D;IAC3D,iBAAiB,CAAE,IAAI,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,IAAI;IAgB3D,OAAO,CAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU;IAKnE,WAAW,CAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IACzC,SAAS,CAAE,IAAI,EAAE,MAAM,GAAG;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAI/G,eAAe,IAAK,MAAM,EAAE;CAC7B"}