@real-life/trust-protocol 0.3.1 → 0.4.0

package/dist/events.d.ts

@@ -0,0 +1,177 @@
+import type { JsonObject } from './core.js';
+import type { Dec, OutboxStatus, PromptChoice, PromptKind } from './state.js';
+/** Fields every event carries. */
+export interface EventBase {
+    /** unique per event */
+    eventId: string;
+    /** the human act that caused it, if any (note §4.2) */
+    actId?: string;
+    /** commitSeq of the commit that caused it (state.ts), never the store token */
+    commitSeq: Dec;
+}
+export type HolderEvent = EventBase & ({
+    type: 'contact.added';
+    contactId: string;
+}
+/** a mapping verified on a relationship (6.3) */
+ | {
+    type: 'contact.verified';
+    contactId: string;
+    relationshipId: string;
+}
+/** a fresh tuple appended to a chain (6a.4, 6220): the fresh
+ *  relationship `from` went into the chain `into`; contactId is the entry
+ *  the chain's verifications go to after it */
+ | {
+    type: 'contact.chained';
+    contactId: string;
+    from: string;
+    into: string;
+}
+/** entries merged into one (2140): the survivor and the merged ids, now its aliases */
+ | {
+    type: 'contact.merged';
+    contactId: string;
+    merged: string[];
+}
+/** a relationship left a merged entry (2080): the remaining entry's id
+ *  (renamed where 2100 says), the leaver's new entry id, the relationship */
+ | {
+    type: 'contact.split';
+    contactId: string;
+    leaver: string;
+    relationshipId: string;
+}
+/** relationships departed (2260): removed says the entry went with them */
+ | {
+    type: 'contact.departed';
+    contactId: string;
+    relationshipIds: string[];
+    removed: boolean;
+}
+/** the Trust act: anchor-mapping class on (2770) */
+ | {
+    type: 'trust.given';
+    contactId: string;
+} | {
+    type: 'trust.received';
+    contactId: string;
+}
+/** the pause of 5.4: star and blinded group star off, or back */
+ | {
+    type: 'trust.paused';
+    contactId: string;
+    paused: boolean;
+} | {
+    type: 'group.joined';
+    groupId: string;
+} | {
+    type: 'prompt.opened';
+    promptId: string;
+    kind: PromptKind;
+}
+/** the human decided a prompt; it is closed (prompts.ts) */
+ | {
+    type: 'prompt.decided';
+    promptId: string;
+    kind: PromptKind;
+    choice: PromptChoice;
+}
+/** sender status trias (Delivery §6.1) */
+ | {
+    type: 'delivery.status';
+    digest: string;
+    threadId: string;
+    status: OutboxStatus;
+    late?: boolean;
+}
+/** contactId null: the holder's own profile */
+ | {
+    type: 'profile.updated';
+    contactId: string | null;
+}
+/** the community anchor's rotation completed: the head is this generation (Identity §5.4) */
+ | {
+    type: 'anchor.rotated';
+    generation: Dec;
+}
+/** a device name entered the register (Identity §5.5) */
+ | {
+    type: 'device.added';
+    name: string;
+}
+/** a device name was marked revoked (Identity §5.5) */
+ | {
+    type: 'device.revoked';
+    name: string;
+}
+/** resume found a duty of a registered kind at a version no handler
+ *  knows: kept untouched, announced once per resume (engine.ts) */
+ | {
+    type: 'duty.unsupported';
+    dutyId: string;
+    kind: string;
+    v: number;
+}
+/** a star (5.2a) completed on a relationship: its accepted snapshot changed */
+ | {
+    type: 'star.accepted';
+    contactId: string;
+    relationshipId: string;
+    salt: Dec;
+}
+/** a group star (5.2b) completed on a relationship; sharedGroups may have changed */
+ | {
+    type: 'groupStar.accepted';
+    contactId: string;
+    relationshipId: string;
+    salt: Dec;
+}
+/** a card displayed with a fresh own challenge (Encounter 5.3): `card`
+ *  is the optical payload to show (Encounter 6) */
+ | {
+    type: 'encounter.shown';
+    challenge: string;
+    card: JsonObject;
+}
+/** the scanner's step (5.8 trunk 2–3): `card` is its sent card, the
+ *  optical leg's payload where no network carries the bundle */
+ | {
+    type: 'encounter.scanned';
+    contactId: string;
+    card: JsonObject;
+}
+/** an enactment record created (5.5), on either side */
+ | {
+    type: 'encounter.recorded';
+    contactId: string;
+    relationshipId: string;
+    role: 'scanner' | 'displayer';
+}
+/** the counterparty's step credential accepted (5.6): the edge now
+ *  holds it; mutual when the own one is issued too (4.2) */
+ | {
+    type: 'encounter.accepted';
+    contactId: string;
+    relationshipId: string;
+    mutual: boolean;
+}
+/** a group founded by this holder (Access 3.4.1) */
+ | {
+    type: 'group.founded';
+    groupId: string;
+}
+/** a member admitted by this holder, by its member anchor */
+ | {
+    type: 'group.admitted';
+    groupId: string;
+    member: string;
+}
+/** a vouch@2 issued by this holder for a member anchor (Access 5.3) */
+ | {
+    type: 'group.vouched';
+    groupId: string;
+    member: string;
+});
+export type HolderEventType = HolderEvent['type'];
+//# sourceMappingURL=events.d.ts.map

package/dist/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAQ,UAAU,EAAE,MAAM,WAAW,CAAA;AACjD,OAAO,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE7E,kCAAkC;AAClC,MAAM,WAAW,SAAS;IACxB,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,+EAA+E;IAC/E,SAAS,EAAE,GAAG,CAAA;CACf;AAED,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,CAClC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAC9C,iDAAiD;GAC/C;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE;AACzE;;+CAE+C;GAC7C;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAC5E,uFAAuF;GACrF;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE;AACjE;6EAC6E;GAC3E;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE;AACtF,2EAA2E;GACzE;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE;AAC9F,oDAAoD;GAClD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAC/C,iEAAiE;GAC/D;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE;AAC/D,4DAA4D;GAC1D;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE;AACtF,0CAA0C;GACxC;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE;AACrG,+CAA+C;GAC7C;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AACvD,6FAA6F;GAC3F;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,UAAU,EAAE,GAAG,CAAA;CAAE;AAC7C,yDAAyD;GACvD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACxC,uDAAuD;GACrD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAC1C;mEACmE;GACjE;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE;AACvE,+EAA+E;GAC7E;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,GAAG,CAAA;CAAE;AACjF,qFAAqF;GACnF;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,GAAG,CAAA;CAAE;AACtF;mDACmD;GACjD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE;AAClE;gEACgE;GAC9D;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE;AACpE,wDAAwD;GACtD;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,GAAG,WAAW,CAAA;CAAE;AAC1G;4DAC4D;GAC1D;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE;AAC5F,oDAAoD;GAClD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC5C,6DAA6D;GAC3D;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC7D,uEAAuE;GACrE;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAC7D,CAAA;AAED,MAAM,MAAM,eAAe,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA"}

package/dist/events.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=events.js.map

package/dist/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"","sourcesContent":["// events — what a holder announces after a commit (lib Stage 2, note §4.4).\n//\n// A closed union, released only after the commit that caused it, never\n// before. Events carry ids, not text: the app renders words from the\n// type, and re-reads its views on any event. Events do not survive a\n// restart; the act journal keeps them only to answer a repeated actId.\n// Pure JSON, like the state that journals them.\nimport type { Json, JsonObject } from './core.js'\nimport type { Dec, OutboxStatus, PromptChoice, PromptKind } from './state.js'\n\n/** Fields every event carries. */\nexport interface EventBase {\n  /** unique per event */\n  eventId: string\n  /** the human act that caused it, if any (note §4.2) */\n  actId?: string\n  /** commitSeq of the commit that caused it (state.ts), never the store token */\n  commitSeq: Dec\n}\n\nexport type HolderEvent = EventBase & (\n  | { type: 'contact.added', contactId: string }\n  /** a mapping verified on a relationship (6.3) */\n  | { type: 'contact.verified', contactId: string, relationshipId: string }\n  /** a fresh tuple appended to a chain (6a.4, 6220): the fresh\n   *  relationship `from` went into the chain `into`; contactId is the entry\n   *  the chain's verifications go to after it */\n  | { type: 'contact.chained', contactId: string, from: string, into: string }\n  /** entries merged into one (2140): the survivor and the merged ids, now its aliases */\n  | { type: 'contact.merged', contactId: string, merged: string[] }\n  /** a relationship left a merged entry (2080): the remaining entry's id\n   *  (renamed where 2100 says), the leaver's new entry id, the relationship */\n  | { type: 'contact.split', contactId: string, leaver: string, relationshipId: string }\n  /** relationships departed (2260): removed says the entry went with them */\n  | { type: 'contact.departed', contactId: string, relationshipIds: string[], removed: boolean }\n  /** the Trust act: anchor-mapping class on (2770) */\n  | { type: 'trust.given', contactId: string }\n  | { type: 'trust.received', contactId: string }\n  /** the pause of 5.4: star and blinded group star off, or back */\n  | { type: 'trust.paused', contactId: string, paused: boolean }\n  | { type: 'group.joined', groupId: string }\n  | { type: 'prompt.opened', promptId: string, kind: PromptKind }\n  /** the human decided a prompt; it is closed (prompts.ts) */\n  | { type: 'prompt.decided', promptId: string, kind: PromptKind, choice: PromptChoice }\n  /** sender status trias (Delivery §6.1) */\n  | { type: 'delivery.status', digest: string, threadId: string, status: OutboxStatus, late?: boolean }\n  /** contactId null: the holder's own profile */\n  | { type: 'profile.updated', contactId: string | null }\n  /** the community anchor's rotation completed: the head is this generation (Identity §5.4) */\n  | { type: 'anchor.rotated', generation: Dec }\n  /** a device name entered the register (Identity §5.5) */\n  | { type: 'device.added', name: string }\n  /** a device name was marked revoked (Identity §5.5) */\n  | { type: 'device.revoked', name: string }\n  /** resume found a duty of a registered kind at a version no handler\n   *  knows: kept untouched, announced once per resume (engine.ts) */\n  | { type: 'duty.unsupported', dutyId: string, kind: string, v: number }\n  /** a star (5.2a) completed on a relationship: its accepted snapshot changed */\n  | { type: 'star.accepted', contactId: string, relationshipId: string, salt: Dec }\n  /** a group star (5.2b) completed on a relationship; sharedGroups may have changed */\n  | { type: 'groupStar.accepted', contactId: string, relationshipId: string, salt: Dec }\n  /** a card displayed with a fresh own challenge (Encounter 5.3): `card`\n   *  is the optical payload to show (Encounter 6) */\n  | { type: 'encounter.shown', challenge: string, card: JsonObject }\n  /** the scanner's step (5.8 trunk 2–3): `card` is its sent card, the\n   *  optical leg's payload where no network carries the bundle */\n  | { type: 'encounter.scanned', contactId: string, card: JsonObject }\n  /** an enactment record created (5.5), on either side */\n  | { type: 'encounter.recorded', contactId: string, relationshipId: string, role: 'scanner' | 'displayer' }\n  /** the counterparty's step credential accepted (5.6): the edge now\n   *  holds it; mutual when the own one is issued too (4.2) */\n  | { type: 'encounter.accepted', contactId: string, relationshipId: string, mutual: boolean }\n  /** a group founded by this holder (Access 3.4.1) */\n  | { type: 'group.founded', groupId: string }\n  /** a member admitted by this holder, by its member anchor */\n  | { type: 'group.admitted', groupId: string, member: string }\n  /** a vouch@2 issued by this holder for a member anchor (Access 5.3) */\n  | { type: 'group.vouched', groupId: string, member: string }\n)\n\nexport type HolderEventType = HolderEvent['type']\n"]}

package/dist/fixtures.d.ts

@@ -0,0 +1,30 @@
+import type { HolderModule } from './engine.js';
+import type { HolderState, PromptKind } from './state.js';
+/**
+ * A populated, valid HolderState, fresh on every call:
+ *   - c-alice: met in a ceremony, trusted (anchor mapping on), mappings
+ *     both ways, a verified profile
+ *   - c-bob: introduced via c-alice, an alias e-bob-old, two relationships
+ *     of which r-bob-2 lags (its anchor head is a superseded prev on
+ *     r-bob-1), trusted and paused (star and group star off)
+ *   - one group g-garden, the own profile (revision 3), one accepted
+ *     outbox item to c-alice, one group-invite prompt
+ */
+export declare function sampleState(): HolderState;
+/** The command of openPromptModule. */
+export declare const OPEN_PROMPT = "test.prompt.open";
+/** Input of OPEN_PROMPT: the prompt without openedAt, which is `when`. */
+export interface OpenPromptInput {
+    id: string;
+    kind: PromptKind;
+    contactId?: string;
+    groupId?: string;
+    expiresAt?: number;
+}
+/**
+ * A module for tests: its non-human command OPEN_PROMPT opens a prompt
+ * the way a domain module will, and announces prompt.opened. An id that
+ * is already open is a programming error and throws.
+ */
+export declare const openPromptModule: HolderModule;
+//# sourceMappingURL=fixtures.d.ts.map

package/dist/fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.d.ts","sourceRoot":"","sources":["../src/fixtures.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE/C,OAAO,KAAK,EAAE,WAAW,EAAU,UAAU,EAAS,MAAM,YAAY,CAAA;AA6DxE;;;;;;;;;GASG;AACH,wBAAgB,WAAW,IAAK,WAAW,CA8D1C;AAED,uCAAuC;AACvC,eAAO,MAAM,WAAW,qBAAqB,CAAA;AAE7C,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE;AAE3H;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE,YAoB7B,CAAA"}

package/dist/fixtures.js

@@ -0,0 +1,155 @@
+// fixtures — test states and helper modules for ./testing (lib Stage 2, PR 2).
+//
+// sampleState() is a populated, valid HolderState for view tests: it
+// passes the codec, but it is assembled by hand, not by acts, and its
+// keys and anchors are placeholders, not derivations. The real test-state
+// builder (stateBuilder) arrives in PR 4. openPromptModule stands in for
+// the domain modules that open prompts in later PRs.
+import { CODEC } from './codec.js';
+import { emptyState } from './state.js';
+const T = Date.parse('2026-10-14T09:00:00Z');
+// placeholder key material: strings of the right family, no keys behind them
+const KA_ALICE = 'z6LSaliceAliceAliceAliceAliceAliceAliceAliceAlic';
+const KA_BOB = 'z6LSbobBobBobBobBobBobBobBobBobBobBobBobBobBobBob';
+const OWN_ALICE = 'z6LSownAliceOwnAliceOwnAliceOwnAliceOwnAliceOwnA';
+const OWN_BOB_1 = 'z6LSownBobOneOwnBobOneOwnBobOneOwnBobOneOwnBobOn';
+const OWN_BOB_2 = 'z6LSownBobTwoOwnBobTwoOwnBobTwoOwnBobTwoOwnBobTw';
+const ALICE_PAIR = 'did:key:z6MkalicePairAlicePairAlicePairAlicePairAli';
+const BOB_PAIR_1 = 'did:key:z6MkbobPairOneBobPairOneBobPairOneBobPairOn';
+const BOB_PAIR_2 = 'did:key:z6MkbobPairTwoBobPairTwoBobPairTwoBobPairTw';
+const ALICE_ANCHOR = 'did:key:z6MkaliceAnchorAliceAnchorAliceAnchorAliceA';
+const BOB_ANCHOR_0 = 'did:key:z6MkbobAnchorZeroBobAnchorZeroBobAnchorZero';
+const BOB_ANCHOR_1 = 'did:key:z6MkbobAnchorOneBobAnchorOneBobAnchorOneBo';
+const OWN_ANCHOR = 'did:key:z6MkownAnchorOwnAnchorOwnAnchorOwnAnchorOw';
+const seqOut = () => ({ lastSalt: '0', exhausted: false, hwm: '0', snapshot: null, snapshotDigest: null, inflight: {} });
+const seqIn = () => ({ hwm: '0', lowerBound: '0', assembly: null, accepted: null });
+const tuple = (t) => ({
+    ownPairLabel: t.label,
+    counterpartAnchor: t.counterpartAnchor,
+    counterpartKeyAgreement: t.counterpartKeyAgreement,
+    rkid: t.rkid,
+    entryId: t.entryId,
+    priorCandidates: [],
+    starOut: seqOut(),
+    starIn: seqIn(),
+    groupStarOut: seqOut(),
+    groupStarIn: seqIn(),
+    probeOut: { seq: '0', inflight: {}, done: false },
+    probeIn: { hwm: '0', lowerBound: '0', assembly: null },
+    continuityOut: { rev: '0', body: null, proof: null, sent: [], align: false, chosen: null, reported: null, aligned: false, due: null },
+    continuityIn: { rev: '0', body: null, recordPrior: null },
+    mappingOut: t.issued
+        ? { rev: '1', body: { type: 'anchor-mapping@4', placeholder: true }, underAnchor: OWN_ANCHOR }
+        : { rev: '0', body: null, underAnchor: null },
+    mappingIn: t.self
+        ? { rev: '1', body: { type: 'anchor-mapping@4', placeholder: true }, self: t.self, card: { type: 'self-card@2', anchor: t.self } }
+        : { rev: '0', body: null, self: null, card: null },
+    profileOut: { rev: '0' },
+    profileIn: t.profile
+        ? { rev: t.profile.rev, body: { type: 'profile@1', revision: t.profile.rev, name: t.profile.name, ...(t.profile.text ? { text: t.profile.text } : {}) }, verifiedSeq: '4' }
+        : { rev: '0', body: null, verifiedSeq: '0' },
+    deactivated: false,
+});
+/**
+ * A populated, valid HolderState, fresh on every call:
+ *   - c-alice: met in a ceremony, trusted (anchor mapping on), mappings
+ *     both ways, a verified profile
+ *   - c-bob: introduced via c-alice, an alias e-bob-old, two relationships
+ *     of which r-bob-2 lags (its anchor head is a superseded prev on
+ *     r-bob-1), trusted and paused (star and group star off)
+ *   - one group g-garden, the own profile (revision 3), one accepted
+ *     outbox item to c-alice, one group-invite prompt
+ */
+export function sampleState() {
+    const s = emptyState(CODEC);
+    s.commitSeq = '12';
+    s.lastWhen = T + 60_000;
+    s.register.labels = ['pair/alice', 'pair/bob-1', 'pair/bob-2'];
+    s.register.pairNonces = { 'pair/alice': 'AAAA', 'pair/bob-1': 'BBBB', 'pair/bob-2': 'CCCC' };
+    s.register.community = { genesis: 'uCommunityGenesis', head: '1' };
+    s.addresses.keys = {
+        [OWN_ALICE]: { label: 'pair/alice', lastShown: T },
+        [OWN_BOB_1]: { label: 'pair/bob-1', lastShown: T },
+        [OWN_BOB_2]: { label: 'pair/bob-2', lastShown: T },
+    };
+    const settings = { star: 'default', groupStar: 'default', anchorMapping: 'on', sealedGroupStar: 'default', profile: 'default' };
+    s.contacts = {
+        'c-alice': { id: 'c-alice', pos: '0', status: 'admitted', aliases: [], relIds: ['r-alice'], anchorHead: ALICE_ANCHOR, settings: { ...settings }, groupSettings: {} },
+        'c-bob': {
+            id: 'c-bob', pos: '1', status: 'admitted', aliases: ['e-bob-old'], relIds: ['r-bob-1', 'r-bob-2'], anchorHead: BOB_ANCHOR_1,
+            settings: { ...settings, star: 'off', groupStar: 'off' }, groupSettings: { 'g-garden': 'off' },
+        },
+    };
+    const rel = (id, contactId, tuples, extra = {}) => ({
+        id, contactId, tuples, activeHead: tuples[tuples.length - 1].ownPairLabel, earliestAnchor: OWN_ANCHOR,
+        links: [], bindings: {}, heldCounterpartHead: null, memory: {}, provenance: { kind: 'ceremony', at: T }, chainedInto: null, firstVerified: null,
+        ...extra,
+    });
+    s.relationships = {
+        'r-alice': rel('r-alice', 'c-alice', [tuple({
+                label: 'pair/alice', counterpartAnchor: ALICE_PAIR, counterpartKeyAgreement: KA_ALICE, rkid: OWN_ALICE, entryId: 'c-alice',
+                self: ALICE_ANCHOR, issued: true, profile: { rev: '2', name: 'Alice', text: 'hello' },
+            })], { heldCounterpartHead: ALICE_ANCHOR }),
+        'r-bob-1': rel('r-bob-1', 'c-bob', [tuple({
+                label: 'pair/bob-1', counterpartAnchor: BOB_PAIR_1, counterpartKeyAgreement: KA_BOB, rkid: OWN_BOB_1, entryId: 'c-bob',
+                self: BOB_ANCHOR_1, issued: true,
+            })], {
+            heldCounterpartHead: BOB_ANCHOR_1,
+            links: [{ prev: BOB_ANCHOR_0, next: BOB_ANCHOR_1 }],
+            provenance: { kind: 'introduced', via: 'c-alice', at: T + 1000 },
+        }),
+        'r-bob-2': rel('r-bob-2', 'c-bob', [tuple({
+                label: 'pair/bob-2', counterpartAnchor: BOB_PAIR_2, counterpartKeyAgreement: KA_BOB, rkid: OWN_BOB_2, entryId: 'c-bob',
+                self: BOB_ANCHOR_0, issued: true,
+            })], { heldCounterpartHead: BOB_ANCHOR_0, provenance: { kind: 'ceremony', at: T + 2000 } }),
+    };
+    s.entryOrder = { nextPos: '2', heads: ['r-alice', 'r-bob-1', 'r-bob-2'] };
+    s.groups = {
+        'g-garden': { id: 'g-garden', memberLabel: 'group/g-garden', rules: { vouchThreshold: '2' }, listed: true, name: 'Garden', roster: {}, invitations: {}, evidence: {}, preludes: {}, memberAnchor: 'did:key:z6MkGardenMemberSampleOnly', memberOp: 'oid:garden-admission-sample' },
+    };
+    s.profile = { body: { name: 'Me', text: 'about me' }, revision: '3' };
+    s.outbox = {
+        uDocAlice1: {
+            type: 'https://real-life.org/trust-tasks/profile/0.1',
+            threadId: 'thread-alice-1',
+            recipient: { contactId: 'c-alice', rkid: OWN_ALICE, keyAgreement: KA_ALICE },
+            envelope: { rkid: KA_ALICE, epk: 'epk', nonce: 'nonce', ciphertext: 'ciphertext' },
+            attempt: 1,
+            history: [{ status: 'submitted', at: T + 10_000, attempt: 1 }, { status: 'accepted', at: T + 11_000 }],
+        },
+    };
+    s.prompts = {
+        'p-invite': { id: 'p-invite', kind: 'group-invite', contactId: 'c-alice', groupId: 'g-garden', openedAt: T + 20_000, expiresAt: T + 86_400_000 },
+    };
+    return s;
+}
+/** The command of openPromptModule. */
+export const OPEN_PROMPT = 'test.prompt.open';
+/**
+ * A module for tests: its non-human command OPEN_PROMPT opens a prompt
+ * the way a domain module will, and announces prompt.opened. An id that
+ * is already open is a programming error and throws.
+ */
+export const openPromptModule = Object.freeze({
+    name: 'test-prompts',
+    commands: Object.freeze({
+        [OPEN_PROMPT]: {
+            human: false,
+            apply(state, _p, input, when) {
+                if (Object.hasOwn(state.prompts, input.id))
+                    throw new Error(`${OPEN_PROMPT}: prompt ${input.id} is already open`);
+                const p = {
+                    id: input.id, kind: input.kind, openedAt: when,
+                    ...(input.contactId !== undefined ? { contactId: input.contactId } : {}),
+                    ...(input.groupId !== undefined ? { groupId: input.groupId } : {}),
+                    ...(input.expiresAt !== undefined ? { expiresAt: input.expiresAt } : {}),
+                };
+                return {
+                    state: { ...state, prompts: { ...state.prompts, [p.id]: p } },
+                    events: [{ type: 'prompt.opened', promptId: p.id, kind: p.kind }],
+                };
+            },
+        },
+    }),
+});
+//# sourceMappingURL=fixtures.js.map

package/dist/fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.js","sourceRoot":"","sources":["../src/fixtures.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,EAAE;AACF,qEAAqE;AACrE,sEAAsE;AACtE,0EAA0E;AAC1E,yEAAyE;AACzE,qDAAqD;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAElC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAGvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAA;AAE5C,6EAA6E;AAC7E,MAAM,QAAQ,GAAG,kDAAkD,CAAA;AACnE,MAAM,MAAM,GAAG,mDAAmD,CAAA;AAClE,MAAM,SAAS,GAAG,kDAAkD,CAAA;AACpE,MAAM,SAAS,GAAG,kDAAkD,CAAA;AACpE,MAAM,SAAS,GAAG,kDAAkD,CAAA;AACpE,MAAM,UAAU,GAAG,qDAAqD,CAAA;AACxE,MAAM,UAAU,GAAG,qDAAqD,CAAA;AACxE,MAAM,UAAU,GAAG,qDAAqD,CAAA;AACxE,MAAM,YAAY,GAAG,qDAAqD,CAAA;AAC1E,MAAM,YAAY,GAAG,qDAAqD,CAAA;AAC1E,MAAM,YAAY,GAAG,oDAAoD,CAAA;AACzE,MAAM,UAAU,GAAG,oDAAoD,CAAA;AAEvE,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAA;AACxH,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;AAcnF,MAAM,KAAK,GAAG,CAAC,CAAY,EAAS,EAAE,CAAC,CAAC;IACtC,YAAY,EAAE,CAAC,CAAC,KAAK;IACrB,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;IACtC,uBAAuB,EAAE,CAAC,CAAC,uBAAuB;IAClD,IAAI,EAAE,CAAC,CAAC,IAAI;IACZ,OAAO,EAAE,CAAC,CAAC,OAAO;IAClB,eAAe,EAAE,EAAE;IACnB,OAAO,EAAE,MAAM,EAAE;IACjB,MAAM,EAAE,KAAK,EAAE;IACf,YAAY,EAAE,MAAM,EAAE;IACtB,WAAW,EAAE,KAAK,EAAE;IACpB,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;IACjD,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;IACtD,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE;IACrI,YAAY,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;IACzD,UAAU,EAAE,CAAC,CAAC,MAAM;QAClB,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE;QAC9F,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;IAC/C,SAAS,EAAE,CAAC,CAAC,IAAI;QACf,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE;QAClI,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;IACpD,UAAU,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;IACxB,SAAS,EAAE,CAAC,CAAC,OAAO;QAClB,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE;QAC3K,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;IAC9C,WAAW,EAAE,KAAK;CACnB,CAAC,CAAA;AAEF;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;IAC3B,CAAC,CAAC,SAAS,GAAG,IAAI,CAAA;IAClB,CAAC,CAAC,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAA;IACvB,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC,CAAA;IAC9D,CAAC,CAAC,QAAQ,CAAC,UAAU,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,CAAA;IAC5F,CAAC,CAAC,QAAQ,CAAC,SAAS,GAAG,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;IAClE,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG;QACjB,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,EAAE;QAClD,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,EAAE;QAClD,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,EAAE;KACnD,CAAA;IACD,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAW,CAAA;IACxI,CAAC,CAAC,QAAQ,GAAG;QACX,SAAS,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;QACpK,OAAO,EAAE;YACP,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,UAAU,EAAE,YAAY;YAC3H,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE;SAC/F;KACF,CAAA;IACD,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,SAAiB,EAAE,MAAe,EAAE,QAAuD,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1H,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,YAAY,EAAE,cAAc,EAAE,UAAU;QACrG,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,UAAmB,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI;QACxJ,GAAG,KAAK;KACT,CAAC,CAAA;IACF,CAAC,CAAC,aAAa,GAAG;QAChB,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC;gBAC1C,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,uBAAuB,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS;gBAC1H,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;aACtF,CAAC,CAAC,EAAE,EAAE,mBAAmB,EAAE,YAAY,EAAE,CAAC;QAC3C,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC;gBACxC,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO;gBACtH,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI;aACjC,CAAC,CAAC,EAAE;YACH,mBAAmB,EAAE,YAAY;YACjC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YACnD,UAAU,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE;SACjE,CAAC;QACF,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC;gBACxC,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO;gBACtH,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI;aACjC,CAAC,CAAC,EAAE,EAAE,mBAAmB,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC;KAC5F,CAAA;IACD,CAAC,CAAC,UAAU,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,CAAA;IACzE,CAAC,CAAC,MAAM,GAAG;QACT,UAAU,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,oCAAoC,EAAE,QAAQ,EAAE,6BAA6B,EAAE;KAClR,CAAA;IACD,CAAC,CAAC,OAAO,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAA;IACrE,CAAC,CAAC,MAAM,GAAG;QACT,UAAU,EAAE;YACV,IAAI,EAAE,+CAA+C;YACrD,QAAQ,EAAE,gBAAgB;YAC1B,SAAS,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE;YAC5E,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE;YAClF,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC;SACvG;KACF,CAAA;IACD,CAAC,CAAC,OAAO,GAAG;QACV,UAAU,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC,GAAG,UAAU,EAAE;KACjJ,CAAA;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,uCAAuC;AACvC,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,CAAA;AAK7C;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAiB,MAAM,CAAC,MAAM,CAAC;IAC1D,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;QACtB,CAAC,WAAW,CAAC,EAAE;YACb,KAAK,EAAE,KAAK;YACZ,KAAK,CAAE,KAA4B,EAAE,EAAW,EAAE,KAAsB,EAAE,IAAY;gBACpF,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,YAAY,KAAK,CAAC,EAAE,kBAAkB,CAAC,CAAA;gBACjH,MAAM,CAAC,GAAW;oBAChB,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI;oBAC9C,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxE,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACzE,CAAA;gBACD,OAAO;oBACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE;oBAC7D,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,eAAwB,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;iBAC3E,CAAA;YACH,CAAC;SACF;KACF,CAAC;CACH,CAAC,CAAA","sourcesContent":["// fixtures — test states and helper modules for ./testing (lib Stage 2, PR 2).\n//\n// sampleState() is a populated, valid HolderState for view tests: it\n// passes the codec, but it is assembled by hand, not by acts, and its\n// keys and anchors are placeholders, not derivations. The real test-state\n// builder (stateBuilder) arrives in PR 4. openPromptModule stands in for\n// the domain modules that open prompts in later PRs.\nimport { CODEC } from './codec.js'\nimport type { HolderModule } from './engine.js'\nimport { emptyState } from './state.js'\nimport type { HolderState, Prompt, PromptKind, Tuple } from './state.js'\n\nconst T = Date.parse('2026-10-14T09:00:00Z')\n\n// placeholder key material: strings of the right family, no keys behind them\nconst KA_ALICE = 'z6LSaliceAliceAliceAliceAliceAliceAliceAliceAlic'\nconst KA_BOB = 'z6LSbobBobBobBobBobBobBobBobBobBobBobBobBobBobBob'\nconst OWN_ALICE = 'z6LSownAliceOwnAliceOwnAliceOwnAliceOwnAliceOwnA'\nconst OWN_BOB_1 = 'z6LSownBobOneOwnBobOneOwnBobOneOwnBobOneOwnBobOn'\nconst OWN_BOB_2 = 'z6LSownBobTwoOwnBobTwoOwnBobTwoOwnBobTwoOwnBobTw'\nconst ALICE_PAIR = 'did:key:z6MkalicePairAlicePairAlicePairAlicePairAli'\nconst BOB_PAIR_1 = 'did:key:z6MkbobPairOneBobPairOneBobPairOneBobPairOn'\nconst BOB_PAIR_2 = 'did:key:z6MkbobPairTwoBobPairTwoBobPairTwoBobPairTw'\nconst ALICE_ANCHOR = 'did:key:z6MkaliceAnchorAliceAnchorAliceAnchorAliceA'\nconst BOB_ANCHOR_0 = 'did:key:z6MkbobAnchorZeroBobAnchorZeroBobAnchorZero'\nconst BOB_ANCHOR_1 = 'did:key:z6MkbobAnchorOneBobAnchorOneBobAnchorOneBo'\nconst OWN_ANCHOR = 'did:key:z6MkownAnchorOwnAnchorOwnAnchorOwnAnchorOw'\n\nconst seqOut = () => ({ lastSalt: '0', exhausted: false, hwm: '0', snapshot: null, snapshotDigest: null, inflight: {} })\nconst seqIn = () => ({ hwm: '0', lowerBound: '0', assembly: null, accepted: null })\n\ninterface TupleSpec {\n  label: string\n  counterpartAnchor: string\n  counterpartKeyAgreement: string\n  rkid: string\n  entryId: string\n  /** the counterpart's community anchor its verified mapping carries */\n  self?: string\n  issued?: boolean\n  profile?: { rev: string, name: string, text?: string }\n}\n\nconst tuple = (t: TupleSpec): Tuple => ({\n  ownPairLabel: t.label,\n  counterpartAnchor: t.counterpartAnchor,\n  counterpartKeyAgreement: t.counterpartKeyAgreement,\n  rkid: t.rkid,\n  entryId: t.entryId,\n  priorCandidates: [],\n  starOut: seqOut(),\n  starIn: seqIn(),\n  groupStarOut: seqOut(),\n  groupStarIn: seqIn(),\n  probeOut: { seq: '0', inflight: {}, done: false },\n  probeIn: { hwm: '0', lowerBound: '0', assembly: null },\n  continuityOut: { rev: '0', body: null, proof: null, sent: [], align: false, chosen: null, reported: null, aligned: false, due: null },\n  continuityIn: { rev: '0', body: null, recordPrior: null },\n  mappingOut: t.issued\n    ? { rev: '1', body: { type: 'anchor-mapping@4', placeholder: true }, underAnchor: OWN_ANCHOR }\n    : { rev: '0', body: null, underAnchor: null },\n  mappingIn: t.self\n    ? { rev: '1', body: { type: 'anchor-mapping@4', placeholder: true }, self: t.self, card: { type: 'self-card@2', anchor: t.self } }\n    : { rev: '0', body: null, self: null, card: null },\n  profileOut: { rev: '0' },\n  profileIn: t.profile\n    ? { rev: t.profile.rev, body: { type: 'profile@1', revision: t.profile.rev, name: t.profile.name, ...(t.profile.text ? { text: t.profile.text } : {}) }, verifiedSeq: '4' }\n    : { rev: '0', body: null, verifiedSeq: '0' },\n  deactivated: false,\n})\n\n/**\n * A populated, valid HolderState, fresh on every call:\n *   - c-alice: met in a ceremony, trusted (anchor mapping on), mappings\n *     both ways, a verified profile\n *   - c-bob: introduced via c-alice, an alias e-bob-old, two relationships\n *     of which r-bob-2 lags (its anchor head is a superseded prev on\n *     r-bob-1), trusted and paused (star and group star off)\n *   - one group g-garden, the own profile (revision 3), one accepted\n *     outbox item to c-alice, one group-invite prompt\n */\nexport function sampleState (): HolderState {\n  const s = emptyState(CODEC)\n  s.commitSeq = '12'\n  s.lastWhen = T + 60_000\n  s.register.labels = ['pair/alice', 'pair/bob-1', 'pair/bob-2']\n  s.register.pairNonces = { 'pair/alice': 'AAAA', 'pair/bob-1': 'BBBB', 'pair/bob-2': 'CCCC' }\n  s.register.community = { genesis: 'uCommunityGenesis', head: '1' }\n  s.addresses.keys = {\n    [OWN_ALICE]: { label: 'pair/alice', lastShown: T },\n    [OWN_BOB_1]: { label: 'pair/bob-1', lastShown: T },\n    [OWN_BOB_2]: { label: 'pair/bob-2', lastShown: T },\n  }\n  const settings = { star: 'default', groupStar: 'default', anchorMapping: 'on', sealedGroupStar: 'default', profile: 'default' } as const\n  s.contacts = {\n    'c-alice': { id: 'c-alice', pos: '0', status: 'admitted', aliases: [], relIds: ['r-alice'], anchorHead: ALICE_ANCHOR, settings: { ...settings }, groupSettings: {} },\n    'c-bob': {\n      id: 'c-bob', pos: '1', status: 'admitted', aliases: ['e-bob-old'], relIds: ['r-bob-1', 'r-bob-2'], anchorHead: BOB_ANCHOR_1,\n      settings: { ...settings, star: 'off', groupStar: 'off' }, groupSettings: { 'g-garden': 'off' },\n    },\n  }\n  const rel = (id: string, contactId: string, tuples: Tuple[], extra: Partial<HolderState['relationships'][string]> = {}) => ({\n    id, contactId, tuples, activeHead: tuples[tuples.length - 1].ownPairLabel, earliestAnchor: OWN_ANCHOR,\n    links: [], bindings: {}, heldCounterpartHead: null, memory: {}, provenance: { kind: 'ceremony' as const, at: T }, chainedInto: null, firstVerified: null,\n    ...extra,\n  })\n  s.relationships = {\n    'r-alice': rel('r-alice', 'c-alice', [tuple({\n      label: 'pair/alice', counterpartAnchor: ALICE_PAIR, counterpartKeyAgreement: KA_ALICE, rkid: OWN_ALICE, entryId: 'c-alice',\n      self: ALICE_ANCHOR, issued: true, profile: { rev: '2', name: 'Alice', text: 'hello' },\n    })], { heldCounterpartHead: ALICE_ANCHOR }),\n    'r-bob-1': rel('r-bob-1', 'c-bob', [tuple({\n      label: 'pair/bob-1', counterpartAnchor: BOB_PAIR_1, counterpartKeyAgreement: KA_BOB, rkid: OWN_BOB_1, entryId: 'c-bob',\n      self: BOB_ANCHOR_1, issued: true,\n    })], {\n      heldCounterpartHead: BOB_ANCHOR_1,\n      links: [{ prev: BOB_ANCHOR_0, next: BOB_ANCHOR_1 }],\n      provenance: { kind: 'introduced', via: 'c-alice', at: T + 1000 },\n    }),\n    'r-bob-2': rel('r-bob-2', 'c-bob', [tuple({\n      label: 'pair/bob-2', counterpartAnchor: BOB_PAIR_2, counterpartKeyAgreement: KA_BOB, rkid: OWN_BOB_2, entryId: 'c-bob',\n      self: BOB_ANCHOR_0, issued: true,\n    })], { heldCounterpartHead: BOB_ANCHOR_0, provenance: { kind: 'ceremony', at: T + 2000 } }),\n  }\n  s.entryOrder = { nextPos: '2', heads: ['r-alice', 'r-bob-1', 'r-bob-2'] }\n  s.groups = {\n    'g-garden': { id: 'g-garden', memberLabel: 'group/g-garden', rules: { vouchThreshold: '2' }, listed: true, name: 'Garden', roster: {}, invitations: {}, evidence: {}, preludes: {}, memberAnchor: 'did:key:z6MkGardenMemberSampleOnly', memberOp: 'oid:garden-admission-sample' },\n  }\n  s.profile = { body: { name: 'Me', text: 'about me' }, revision: '3' }\n  s.outbox = {\n    uDocAlice1: {\n      type: 'https://real-life.org/trust-tasks/profile/0.1',\n      threadId: 'thread-alice-1',\n      recipient: { contactId: 'c-alice', rkid: OWN_ALICE, keyAgreement: KA_ALICE },\n      envelope: { rkid: KA_ALICE, epk: 'epk', nonce: 'nonce', ciphertext: 'ciphertext' },\n      attempt: 1,\n      history: [{ status: 'submitted', at: T + 10_000, attempt: 1 }, { status: 'accepted', at: T + 11_000 }],\n    },\n  }\n  s.prompts = {\n    'p-invite': { id: 'p-invite', kind: 'group-invite', contactId: 'c-alice', groupId: 'g-garden', openedAt: T + 20_000, expiresAt: T + 86_400_000 },\n  }\n  return s\n}\n\n/** The command of openPromptModule. */\nexport const OPEN_PROMPT = 'test.prompt.open'\n\n/** Input of OPEN_PROMPT: the prompt without openedAt, which is `when`. */\nexport interface OpenPromptInput { id: string, kind: PromptKind, contactId?: string, groupId?: string, expiresAt?: number }\n\n/**\n * A module for tests: its non-human command OPEN_PROMPT opens a prompt\n * the way a domain module will, and announces prompt.opened. An id that\n * is already open is a programming error and throws.\n */\nexport const openPromptModule: HolderModule = Object.freeze({\n  name: 'test-prompts',\n  commands: Object.freeze({\n    [OPEN_PROMPT]: {\n      human: false,\n      apply (state: Readonly<HolderState>, _p: unknown, input: OpenPromptInput, when: number) {\n        if (Object.hasOwn(state.prompts, input.id)) throw new Error(`${OPEN_PROMPT}: prompt ${input.id} is already open`)\n        const p: Prompt = {\n          id: input.id, kind: input.kind, openedAt: when,\n          ...(input.contactId !== undefined ? { contactId: input.contactId } : {}),\n          ...(input.groupId !== undefined ? { groupId: input.groupId } : {}),\n          ...(input.expiresAt !== undefined ? { expiresAt: input.expiresAt } : {}),\n        }\n        return {\n          state: { ...state, prompts: { ...state.prompts, [p.id]: p } },\n          events: [{ type: 'prompt.opened' as const, promptId: p.id, kind: p.kind }],\n        }\n      },\n    },\n  }),\n})\n"]}

package/dist/forge.d.ts

@@ -0,0 +1,47 @@
+import type { Context } from './identity.js';
+export interface ForgeMappingInput {
+    /** the addressee's own pair context of the relationship */
+    own: Context;
+    /** the counterparty's pair anchor and key agreement on that relationship */
+    pair: string;
+    pairKeyAgreement: string;
+    /** a self card the addressee holds (another contact disclosed it) */
+    card: {
+        body: {
+            anchor: string;
+            keyAgreement: string;
+        };
+    };
+    revision?: string;
+    issuedAt: string;
+    lineage?: unknown[];
+}
+/**
+ * An anchor-mapping@4 that maps the counterparty's pair anchor to the self
+ * anchor of `card`, built by the addressee alone: both MACs are keyed by
+ * secrets the addressee shares (X25519 with the pair key and with the
+ * card's key), so it verifies exactly like one the counterparty issued —
+ * a leaked mapping proves nothing to a third party.
+ */
+export declare function forgeMapping(i: ForgeMappingInput, subtle?: SubtleCrypto): Promise<{
+    body: {
+        type: string;
+        pair: string;
+        self: string;
+        to: string;
+        card: {
+            body: {
+                anchor: string;
+                keyAgreement: string;
+            };
+        };
+        lineage: unknown[];
+        revision: string;
+        issuedAt: string;
+    };
+    proof: {
+        mac1: string;
+        mac2: string;
+    };
+}>;
+//# sourceMappingURL=forge.d.ts.map

package/dist/forge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.d.ts","sourceRoot":"","sources":["../src/forge.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAG5C,MAAM,WAAW,iBAAiB;IAChC,2DAA2D;IAC3D,GAAG,EAAE,OAAO,CAAA;IACZ,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAA;IACZ,gBAAgB,EAAE,MAAM,CAAA;IACxB,qEAAqE;IACrE,IAAI,EAAE;QAAE,IAAI,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAA;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,OAAO,EAAE,CAAA;CACpB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAE,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,EAAE,YAAY;;;;;;;kBAb/D;gBAAE,MAAM,EAAE,MAAM,CAAC;gBAAC,YAAY,EAAE,MAAM,CAAA;aAAE;;;;;;;;;;GAkBvD"}

package/dist/forge.js

@@ -0,0 +1,20 @@
+// forge — test tools for the deniability of the designated-verifier forms
+// (Trust 6.1): what the addressee itself can build. Exported from
+// ./testing only.
+import { ecdh, xRawOfMk } from './crypto.js';
+import { assembleAnchorMapping } from './anchor.js';
+/**
+ * An anchor-mapping@4 that maps the counterparty's pair anchor to the self
+ * anchor of `card`, built by the addressee alone: both MACs are keyed by
+ * secrets the addressee shares (X25519 with the pair key and with the
+ * card's key), so it verifies exactly like one the counterparty issued —
+ * a leaked mapping proves nothing to a third party.
+ */
+export async function forgeMapping(i, subtle) {
+    const theirs = xRawOfMk(i.pairKeyAgreement), cards = xRawOfMk(i.card.body.keyAgreement);
+    if (!theirs || !cards)
+        throw new Error('forgeMapping: key agreement is not a multikey');
+    const body = { type: 'anchor-mapping@4', pair: i.pair, self: i.card.body.anchor, to: i.own.anchor, card: i.card, lineage: i.lineage ?? [], revision: i.revision ?? '1', issuedAt: i.issuedAt };
+    return assembleAnchorMapping(body, await ecdh(i.own.x.priv, theirs, subtle), await ecdh(i.own.x.priv, cards, subtle), subtle);
+}
+//# sourceMappingURL=forge.js.map

package/dist/forge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.js","sourceRoot":"","sources":["../src/forge.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,kEAAkE;AAClE,kBAAkB;AAClB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAE5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAenD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAE,CAAoB,EAAE,MAAqB;IAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACvF,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;IACvF,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC9L,OAAO,qBAAqB,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;AAC/H,CAAC","sourcesContent":["// forge — test tools for the deniability of the designated-verifier forms\n// (Trust 6.1): what the addressee itself can build. Exported from\n// ./testing only.\nimport { ecdh, xRawOfMk } from './crypto.js'\nimport type { Context } from './identity.js'\nimport { assembleAnchorMapping } from './anchor.js'\n\nexport interface ForgeMappingInput {\n  /** the addressee's own pair context of the relationship */\n  own: Context\n  /** the counterparty's pair anchor and key agreement on that relationship */\n  pair: string\n  pairKeyAgreement: string\n  /** a self card the addressee holds (another contact disclosed it) */\n  card: { body: { anchor: string, keyAgreement: string } }\n  revision?: string\n  issuedAt: string\n  lineage?: unknown[]\n}\n\n/**\n * An anchor-mapping@4 that maps the counterparty's pair anchor to the self\n * anchor of `card`, built by the addressee alone: both MACs are keyed by\n * secrets the addressee shares (X25519 with the pair key and with the\n * card's key), so it verifies exactly like one the counterparty issued —\n * a leaked mapping proves nothing to a third party.\n */\nexport async function forgeMapping (i: ForgeMappingInput, subtle?: SubtleCrypto) {\n  const theirs = xRawOfMk(i.pairKeyAgreement), cards = xRawOfMk(i.card.body.keyAgreement)\n  if (!theirs || !cards) throw new Error('forgeMapping: key agreement is not a multikey')\n  const body = { type: 'anchor-mapping@4', pair: i.pair, self: i.card.body.anchor, to: i.own.anchor, card: i.card, lineage: i.lineage ?? [], revision: i.revision ?? '1', issuedAt: i.issuedAt }\n  return assembleAnchorMapping(body, await ecdh(i.own.x.priv, theirs, subtle), await ecdh(i.own.x.priv, cards, subtle), subtle)\n}\n"]}