@real-life/trust-protocol 0.3.1 → 0.4.0

package/dist/identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAG1C;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,EAAE,EAAE,OAAO,CAAA;IACX,CAAC,EAAE,OAAO,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;CACrB;AAyBD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS5D;AAED,wBAAsB,cAAc,CAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAM1F;AAKD,wBAAsB,WAAW,CAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAG3F;AAED,2FAA2F;AAC3F,eAAO,MAAM,gBAAgB,GAAI,SAAS,UAAU,EAAE,eAAe,MAAM,KAAG,OAAO,CAAC,OAAO,CAC1C,CAAA"}
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAG1C;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,EAAE,EAAE,OAAO,CAAA;IACX,CAAC,EAAE,OAAO,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;CACrB;AAkCD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAuB5D;AAED,sEAAsE;AACtE,eAAO,MAAM,UAAU,GAAI,KAAK,MAAM,KAAG,MAAM,GAAG,IAA2D,CAAA;AAE7G;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAM7G;AAED,wBAAsB,cAAc,CAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAM1F;AAKD,wBAAsB,WAAW,CAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAG3F;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAE,aAAa,EAAE,MAAM,EAAE,UAAU,GAAE,MAAU,GAAG,MAAM,CAGrF;AAED;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,GAAI,SAAS,UAAU,EAAE,eAAe,MAAM,EAAE,aAAY,MAAU,KAAG,OAAO,CAAC,OAAO,CACjD,CAAA"}

package/dist/identity.js

@@ -6,12 +6,15 @@
 // anchor per group, public personas. No two contexts link to each other
 // unless their holder deliberately discloses the link.
 //
-// The label registry is CLOSED (Identity §6.1, unchanged since 0.13):
-// exactly three label forms derive, and this API rejects every other
-// string before any key derivation — fail closed, no repair. `self`,
-// `recovery`, `carrier` and `device/…` are not labels; recovery and the
-// carrier-relationship identity have their own fixed derivations outside
-// this registry and are deliberately NOT part of this module yet.
+// The label registry is CLOSED (Identity §6.1): exactly five label forms
+// derive — group/<digest>, group/<digest>/<generation> (the community
+// anchor's later generations, §5.4), pair/<digest>, persona/<name> and
+// device/<name>/<context> (one device under one anchor context, §5.5) —
+// and this API rejects every other string before any key derivation —
+// fail closed, no repair. `self`, `recovery`, `carrier` and a `device/…`
+// string without exactly its two components are not labels; recovery and
+// the carrier-relationship identity have their own fixed derivations
+// outside this registry and are deliberately NOT part of this module yet.
 //
 // Fresh-always (Encounter §4.4): a ceremony mints a pair context whose
 // label digests the NONCE BYTES, so nothing correlatable is displayed —
@@ -23,6 +26,13 @@ import { allowed15, WHITE_SPACE_15 } from './unicode15.js';
 // A digest component is the ONE canonical u rendering of a sha2-256
 // multihash: 47 characters, no padding, no non-zero trailing bits, no z.
 const digestComponent = (d) => d.length === 47 && d[0] === 'u' && toU(d) === d;
+// the generation domain of the community anchor (Identity §5.4): [2,
+// 2^53 − 1] — the 7a.3 domain (carrier-holder.ts GENERATION_MAX); generation 1
+// is the plain group/<digest>
+const GENERATION_MAX = Number.MAX_SAFE_INTEGER;
+// §6.1: a decimal integer in [2, 2^53 − 1], no sign, no leading zero —
+// '1', '0', '01' and anything above the domain are no label
+const generationComponent = (g) => /^[1-9][0-9]{0,15}$/.test(g) && BigInt(g) >= 2n && BigInt(g) <= BigInt(GENERATION_MAX);
 // §6.2 — the ordered persona-name pipeline. NFC is the one permitted
 // normalization (applied, not rejected); every later check runs on the
 // NFC result — and every Unicode property is evaluated against the
@@ -56,15 +66,48 @@ const personaName = (raw) => {
 export function canonicalLabel(label) {
     if (typeof label !== 'string')
         return null;
-    if (label.startsWith('group/'))
-        return digestComponent(label.slice(6)) ? label : null;
+    if (label.startsWith('group/')) {
+        const rest = label.slice(6);
+        const cut = rest.indexOf('/');
+        if (cut < 0)
+            return digestComponent(rest) ? label : null;
+        return digestComponent(rest.slice(0, cut)) && generationComponent(rest.slice(cut + 1)) ? label : null;
+    }
     if (label.startsWith('pair/'))
         return digestComponent(label.slice(5)) ? label : null;
     if (label.startsWith('persona/')) {
         const name = personaName(label.slice(8));
         return name === null ? null : 'persona/' + name;
     }
-    return null; // self, recovery, carrier, device/…, and every unknown form: fail closed
+    if (label.startsWith('device/')) {
+        // §5.5: device/<n>/<c> — c is 47 characters and n holds no '/', so
+        // the label parses into exactly one (n, c); n follows 6.2 (NFC applied)
+        const rest = label.slice(7);
+        const cut = rest.length - 48;
+        if (cut < 1 || rest[cut] !== '/' || !digestComponent(rest.slice(cut + 1)))
+            return null;
+        const name = personaName(rest.slice(0, cut));
+        return name === null ? null : `device/${name}/${rest.slice(cut + 1)}`;
+    }
+    return null; // self, recovery, carrier, device/… without both components, and every unknown form: fail closed
+}
+/** A device name per 6.2 (Identity §5.5), NFC-normalized, or null. */
+export const deviceName = (raw) => (typeof raw === 'string' ? personaName(raw) : null);
+/**
+ * The device label of one device under one anchor context (Identity
+ * §5.5): device/<n>/<c>, c the 6.1 encoding of sha2-256 over the UTF-8
+ * bytes of the context's canonical label — a group/…, persona/… or pair/…
+ * label, never a device/… one. One device key per anchor context: the
+ * context is part of the label.
+ */
+export async function deviceLabel(name, contextLabel, subtle) {
+    const n = deviceName(name);
+    if (n === null)
+        throw new Error(`not a device name (Identity §5.5, §6.2): ${JSON.stringify(name)}`);
+    const a = canonicalLabel(contextLabel);
+    if (a === null || a.startsWith('device/'))
+        throw new Error(`not an anchor context label (Identity §5.5): ${JSON.stringify(contextLabel)}`);
+    return `device/${n}/${await digestBytes(new TextEncoder().encode(a), subtle)}`;
 }
 export async function labeledContext(rootIkm, label) {
     const canonical = canonicalLabel(label);
@@ -82,6 +125,22 @@ export async function pairContext(rootIkm, nonce) {
         throw new Error('pair nonce must be exactly 32 bytes (Identity §6.1)');
     return labeledContext(rootIkm, 'pair/' + await digestBytes(nonce));
 }
-/** The community anchor: an ordinary group context over the community's genesis digest. */
-export const communityContext = (rootIkm, genesisDigest) => labeledContext(rootIkm, 'group/' + genesisDigest);
+/**
+ * The label of the community anchor at a generation (Identity §5.4,
+ * §6.1): generation 1 is the ordinary group/<digest> context, a later
+ * one group/<digest>/<generation>. The label string is the whole
+ * derivation context — the generation enters nowhere else.
+ */
+export function communityLabel(genesisDigest, generation = 1) {
+    if (!Number.isSafeInteger(generation) || generation < 1)
+        throw new Error(`generation outside [1, 2^53 − 1] (Identity §5.4): ${generation}`);
+    return generation === 1 ? 'group/' + genesisDigest : `group/${genesisDigest}/${generation}`;
+}
+/**
+ * The community anchor: the group context over the personal community's
+ * genesis digest at the holder's current generation (Identity §2, §5.4).
+ * It is not a member of the personal community — that group is founded,
+ * like every group, under a fresh pair anchor (Access §3.4.1).
+ */
+export const communityContext = (rootIkm, genesisDigest, generation = 1) => labeledContext(rootIkm, communityLabel(genesisDigest, generation));
 //# sourceMappingURL=identity.js.map

package/dist/identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity.js","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,wEAAwE;AACxE,yEAAyE;AACzE,mEAAmE;AACnE,wEAAwE;AACxE,uDAAuD;AACvD,EAAE;AACF,sEAAsE;AACtE,qEAAqE;AACrE,qEAAqE;AACrE,wEAAwE;AACxE,yEAAyE;AACzE,kEAAkE;AAClE,EAAE;AACF,uEAAuE;AACvE,wEAAwE;AACxE,6DAA6D;AAC7D,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAC/B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzF,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAe1D,2EAA2E;AAC3E,oEAAoE;AACpE,yEAAyE;AACzE,MAAM,eAAe,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;AAE/F,qEAAqE;AACrE,uEAAuE;AACvE,mEAAmE;AACnE,wEAAwE;AACxE,qEAAqE;AACrE,+DAA+D;AAC/D,MAAM,WAAW,GAAG,CAAC,GAAW,EAAiB,EAAE;IACjD,IAAI,CAAE,GAA8C,CAAC,YAAY,EAAE;QAAE,OAAO,IAAI,CAAA,CAAC,qBAAqB;IACtG,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA,CAAE,4EAA4E;IAC/G,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IACrB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAA;IAClD,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAA;IAC5D,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA,CAAoB,wDAAwD;IAC/G,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;YAAE,OAAO,IAAI,CAAA,CAAC,6BAA6B;IACjG,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;QAAE,OAAO,IAAI,CAAA;IACxH,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1C,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;IACrF,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;IACpF,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QACxC,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAA;IACjD,CAAC;IACD,OAAO,IAAI,CAAA,CAAC,yEAAyE;AACvF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAE,OAAmB,EAAE,KAAa;IACtE,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACvC,IAAI,SAAS,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACvH,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,iBAAiB,GAAG,SAAS,CAAC,CAAC,CAAA;IAC/E,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,CAAC,CAAC,CAAA;IAC5E,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAA;AAClG,CAAC;AAED,wEAAwE;AACxE,uEAAuE;AACvE,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAE,OAAmB,EAAE,KAAiB;IACvE,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IACjI,OAAO,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;AACpE,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAmB,EAAE,aAAqB,EAAoB,EAAE,CAC/F,cAAc,CAAC,OAAO,EAAE,QAAQ,GAAG,aAAa,CAAC,CAAA","sourcesContent":["// identity — the Identity Layer: one root seed, every context derived.\n//\n// A person holds ONE secret. Everything else is derived from it through\n// the ordinary rltp/anchor family: the community anchor that carries the\n// stable social identity, a pair anchor per relationship, a member\n// anchor per group, public personas. No two contexts link to each other\n// unless their holder deliberately discloses the link.\n//\n// The label registry is CLOSED (Identity §6.1, unchanged since 0.13):\n// exactly three label forms derive, and this API rejects every other\n// string before any key derivation — fail closed, no repair. `self`,\n// `recovery`, `carrier` and `device/…` are not labels; recovery and the\n// carrier-relationship identity have their own fixed derivations outside\n// this registry and are deliberately NOT part of this module yet.\n//\n// Fresh-always (Encounter §4.4): a ceremony mints a pair context whose\n// label digests the NONCE BYTES, so nothing correlatable is displayed —\n// not even to someone who scanned the same person yesterday.\nimport { toU } from './core.js'\nimport { hkdf, edFromSeed, xFromSeed, anchorOfEd, mkOfX, digestBytes } from './crypto.js'\nimport type { KeyPair } from './crypto.js'\nimport { allowed15, WHITE_SPACE_15 } from './unicode15.js'\n\n/**\n * One derived identity context: its label, both key pairs, and the two\n * public forms others see — the did:key anchor and the multikey for key\n * agreement. Contexts never link to each other without a deliberate act.\n */\nexport interface Context {\n  label: string\n  ed: KeyPair\n  x: KeyPair\n  anchor: string\n  keyAgreement: string\n}\n\n// ── the closed registry (Identity §6.1) ─────────────────────────────────\n// A digest component is the ONE canonical u rendering of a sha2-256\n// multihash: 47 characters, no padding, no non-zero trailing bits, no z.\nconst digestComponent = (d: string): boolean => d.length === 47 && d[0] === 'u' && toU(d) === d\n\n// §6.2 — the ordered persona-name pipeline. NFC is the one permitted\n// normalization (applied, not rejected); every later check runs on the\n// NFC result — and every Unicode property is evaluated against the\n// PINNED 15.0 data in unicode15.ts, never the platform's tables (review\n// 2, B-1: Node 22 ships Unicode 16 — a post-15.0 code point must not\n// derive an anchor on one runtime and be rejected on another).\nconst personaName = (raw: string): string | null => {\n  if (!(raw as unknown as { isWellFormed(): boolean }).isWellFormed()) return null // no lone surrogates\n  const name = raw.normalize('NFC')  // NFC of 15.0-assigned code points is version-stable by Unicode's guarantee\n  const cps = [...name]\n  if (cps.length < 1 || cps.length > 64) return null\n  if (new TextEncoder().encode(name).length > 256) return null\n  if (name.includes('/')) return null                    // labels have exactly the components the registry shows\n  for (const c of cps) if (!allowed15(c.codePointAt(0)!)) return null // assigned in 15.0, no Cc/Cf\n  if (WHITE_SPACE_15.has(cps[0]!.codePointAt(0)!) || WHITE_SPACE_15.has(cps[cps.length - 1]!.codePointAt(0)!)) return null\n  return name\n}\n\n/**\n * The canonical form of a registry label, or null for everything the\n * closed registry rejects. Personas come back NFC-normalized — for them\n * the canonical label may differ from the input; label equality IS\n * anchor identity, so derivation always uses the canonical form.\n */\nexport function canonicalLabel (label: string): string | null {\n  if (typeof label !== 'string') return null\n  if (label.startsWith('group/')) return digestComponent(label.slice(6)) ? label : null\n  if (label.startsWith('pair/')) return digestComponent(label.slice(5)) ? label : null\n  if (label.startsWith('persona/')) {\n    const name = personaName(label.slice(8))\n    return name === null ? null : 'persona/' + name\n  }\n  return null // self, recovery, carrier, device/…, and every unknown form: fail closed\n}\n\nexport async function labeledContext (rootIkm: Uint8Array, label: string): Promise<Context> {\n  const canonical = canonicalLabel(label)\n  if (canonical === null) throw new Error(`not a label of the closed registry (Identity §6.1): ${JSON.stringify(label)}`)\n  const ed = await edFromSeed(await hkdf(rootIkm, 'rltp/anchor/ed/' + canonical))\n  const x = await xFromSeed(await hkdf(rootIkm, 'rltp/anchor/x/' + canonical))\n  return { label: canonical, ed, x, anchor: anchorOfEd(ed.pubRaw), keyAgreement: mkOfX(x.pubRaw) }\n}\n\n// fresh-always (Encounter §4.4): label = pair/<multihash over the NONCE\n// BYTES>. The nonce is the holder's own, fresh, and exactly 32 bytes —\n// a shorter one weakens the label to below its specified entropy (B-2).\nexport async function pairContext (rootIkm: Uint8Array, nonce: Uint8Array): Promise<Context> {\n  if (!(nonce instanceof Uint8Array) || nonce.length !== 32) throw new Error('pair nonce must be exactly 32 bytes (Identity §6.1)')\n  return labeledContext(rootIkm, 'pair/' + await digestBytes(nonce))\n}\n\n/** The community anchor: an ordinary group context over the community's genesis digest. */\nexport const communityContext = (rootIkm: Uint8Array, genesisDigest: string): Promise<Context> =>\n  labeledContext(rootIkm, 'group/' + genesisDigest)\n"]}
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,wEAAwE;AACxE,yEAAyE;AACzE,mEAAmE;AACnE,wEAAwE;AACxE,uDAAuD;AACvD,EAAE;AACF,yEAAyE;AACzE,sEAAsE;AACtE,uEAAuE;AACvE,wEAAwE;AACxE,sEAAsE;AACtE,yEAAyE;AACzE,yEAAyE;AACzE,qEAAqE;AACrE,0EAA0E;AAC1E,EAAE;AACF,uEAAuE;AACvE,wEAAwE;AACxE,6DAA6D;AAC7D,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAC/B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzF,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAe1D,2EAA2E;AAC3E,oEAAoE;AACpE,yEAAyE;AACzE,MAAM,eAAe,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;AAE/F,qEAAqE;AACrE,+EAA+E;AAC/E,8BAA8B;AAC9B,MAAM,cAAc,GAAG,MAAM,CAAC,gBAAgB,CAAA;AAC9C,uEAAuE;AACvE,4DAA4D;AAC5D,MAAM,mBAAmB,GAAG,CAAC,CAAS,EAAW,EAAE,CACjD,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,CAAA;AAExF,qEAAqE;AACrE,uEAAuE;AACvE,mEAAmE;AACnE,wEAAwE;AACxE,qEAAqE;AACrE,+DAA+D;AAC/D,MAAM,WAAW,GAAG,CAAC,GAAW,EAAiB,EAAE;IACjD,IAAI,CAAE,GAA8C,CAAC,YAAY,EAAE;QAAE,OAAO,IAAI,CAAA,CAAC,qBAAqB;IACtG,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA,CAAE,4EAA4E;IAC/G,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IACrB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAA;IAClD,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAA;IAC5D,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA,CAAoB,wDAAwD;IAC/G,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;YAAE,OAAO,IAAI,CAAA,CAAC,6BAA6B;IACjG,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;QAAE,OAAO,IAAI,CAAA;IACxH,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1C,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC7B,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;QACxD,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;IACvG,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;IACpF,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QACxC,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAA;IACjD,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,mEAAmE;QACnE,wEAAwE;QACxE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,EAAE,CAAA;QAC5B,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;QACtF,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;QAC5C,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAA;IACvE,CAAC;IACD,OAAO,IAAI,CAAA,CAAC,iGAAiG;AAC/G,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,GAAW,EAAiB,EAAE,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;AAE7G;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAE,IAAY,EAAE,YAAoB,EAAE,MAAqB;IAC1F,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAC1B,IAAI,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACnG,MAAM,CAAC,GAAG,cAAc,CAAC,YAAY,CAAC,CAAA;IACtC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;IAC1I,OAAO,UAAU,CAAC,IAAI,MAAM,WAAW,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAA;AAChF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAE,OAAmB,EAAE,KAAa;IACtE,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACvC,IAAI,SAAS,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACvH,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,iBAAiB,GAAG,SAAS,CAAC,CAAC,CAAA;IAC/E,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,CAAC,CAAC,CAAA;IAC5E,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAA;AAClG,CAAC;AAED,wEAAwE;AACxE,uEAAuE;AACvE,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAE,OAAmB,EAAE,KAAiB;IACvE,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IACjI,OAAO,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;AACpE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAE,aAAqB,EAAE,aAAqB,CAAC;IAC3E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,UAAU,EAAE,CAAC,CAAA;IAC3I,OAAO,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,SAAS,aAAa,IAAI,UAAU,EAAE,CAAA;AAC7F,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAmB,EAAE,aAAqB,EAAE,aAAqB,CAAC,EAAoB,EAAE,CACvH,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAA","sourcesContent":["// identity — the Identity Layer: one root seed, every context derived.\n//\n// A person holds ONE secret. Everything else is derived from it through\n// the ordinary rltp/anchor family: the community anchor that carries the\n// stable social identity, a pair anchor per relationship, a member\n// anchor per group, public personas. No two contexts link to each other\n// unless their holder deliberately discloses the link.\n//\n// The label registry is CLOSED (Identity §6.1): exactly five label forms\n// derive — group/<digest>, group/<digest>/<generation> (the community\n// anchor's later generations, §5.4), pair/<digest>, persona/<name> and\n// device/<name>/<context> (one device under one anchor context, §5.5) —\n// and this API rejects every other string before any key derivation —\n// fail closed, no repair. `self`, `recovery`, `carrier` and a `device/…`\n// string without exactly its two components are not labels; recovery and\n// the carrier-relationship identity have their own fixed derivations\n// outside this registry and are deliberately NOT part of this module yet.\n//\n// Fresh-always (Encounter §4.4): a ceremony mints a pair context whose\n// label digests the NONCE BYTES, so nothing correlatable is displayed —\n// not even to someone who scanned the same person yesterday.\nimport { toU } from './core.js'\nimport { hkdf, edFromSeed, xFromSeed, anchorOfEd, mkOfX, digestBytes } from './crypto.js'\nimport type { KeyPair } from './crypto.js'\nimport { allowed15, WHITE_SPACE_15 } from './unicode15.js'\n\n/**\n * One derived identity context: its label, both key pairs, and the two\n * public forms others see — the did:key anchor and the multikey for key\n * agreement. Contexts never link to each other without a deliberate act.\n */\nexport interface Context {\n  label: string\n  ed: KeyPair\n  x: KeyPair\n  anchor: string\n  keyAgreement: string\n}\n\n// ── the closed registry (Identity §6.1) ─────────────────────────────────\n// A digest component is the ONE canonical u rendering of a sha2-256\n// multihash: 47 characters, no padding, no non-zero trailing bits, no z.\nconst digestComponent = (d: string): boolean => d.length === 47 && d[0] === 'u' && toU(d) === d\n\n// the generation domain of the community anchor (Identity §5.4): [2,\n// 2^53 − 1] — the 7a.3 domain (carrier-holder.ts GENERATION_MAX); generation 1\n// is the plain group/<digest>\nconst GENERATION_MAX = Number.MAX_SAFE_INTEGER\n// §6.1: a decimal integer in [2, 2^53 − 1], no sign, no leading zero —\n// '1', '0', '01' and anything above the domain are no label\nconst generationComponent = (g: string): boolean =>\n  /^[1-9][0-9]{0,15}$/.test(g) && BigInt(g) >= 2n && BigInt(g) <= BigInt(GENERATION_MAX)\n\n// §6.2 — the ordered persona-name pipeline. NFC is the one permitted\n// normalization (applied, not rejected); every later check runs on the\n// NFC result — and every Unicode property is evaluated against the\n// PINNED 15.0 data in unicode15.ts, never the platform's tables (review\n// 2, B-1: Node 22 ships Unicode 16 — a post-15.0 code point must not\n// derive an anchor on one runtime and be rejected on another).\nconst personaName = (raw: string): string | null => {\n  if (!(raw as unknown as { isWellFormed(): boolean }).isWellFormed()) return null // no lone surrogates\n  const name = raw.normalize('NFC')  // NFC of 15.0-assigned code points is version-stable by Unicode's guarantee\n  const cps = [...name]\n  if (cps.length < 1 || cps.length > 64) return null\n  if (new TextEncoder().encode(name).length > 256) return null\n  if (name.includes('/')) return null                    // labels have exactly the components the registry shows\n  for (const c of cps) if (!allowed15(c.codePointAt(0)!)) return null // assigned in 15.0, no Cc/Cf\n  if (WHITE_SPACE_15.has(cps[0]!.codePointAt(0)!) || WHITE_SPACE_15.has(cps[cps.length - 1]!.codePointAt(0)!)) return null\n  return name\n}\n\n/**\n * The canonical form of a registry label, or null for everything the\n * closed registry rejects. Personas come back NFC-normalized — for them\n * the canonical label may differ from the input; label equality IS\n * anchor identity, so derivation always uses the canonical form.\n */\nexport function canonicalLabel (label: string): string | null {\n  if (typeof label !== 'string') return null\n  if (label.startsWith('group/')) {\n    const rest = label.slice(6)\n    const cut = rest.indexOf('/')\n    if (cut < 0) return digestComponent(rest) ? label : null\n    return digestComponent(rest.slice(0, cut)) && generationComponent(rest.slice(cut + 1)) ? label : null\n  }\n  if (label.startsWith('pair/')) return digestComponent(label.slice(5)) ? label : null\n  if (label.startsWith('persona/')) {\n    const name = personaName(label.slice(8))\n    return name === null ? null : 'persona/' + name\n  }\n  if (label.startsWith('device/')) {\n    // §5.5: device/<n>/<c> — c is 47 characters and n holds no '/', so\n    // the label parses into exactly one (n, c); n follows 6.2 (NFC applied)\n    const rest = label.slice(7)\n    const cut = rest.length - 48\n    if (cut < 1 || rest[cut] !== '/' || !digestComponent(rest.slice(cut + 1))) return null\n    const name = personaName(rest.slice(0, cut))\n    return name === null ? null : `device/${name}/${rest.slice(cut + 1)}`\n  }\n  return null // self, recovery, carrier, device/… without both components, and every unknown form: fail closed\n}\n\n/** A device name per 6.2 (Identity §5.5), NFC-normalized, or null. */\nexport const deviceName = (raw: string): string | null => (typeof raw === 'string' ? personaName(raw) : null)\n\n/**\n * The device label of one device under one anchor context (Identity\n * §5.5): device/<n>/<c>, c the 6.1 encoding of sha2-256 over the UTF-8\n * bytes of the context's canonical label — a group/…, persona/… or pair/…\n * label, never a device/… one. One device key per anchor context: the\n * context is part of the label.\n */\nexport async function deviceLabel (name: string, contextLabel: string, subtle?: SubtleCrypto): Promise<string> {\n  const n = deviceName(name)\n  if (n === null) throw new Error(`not a device name (Identity §5.5, §6.2): ${JSON.stringify(name)}`)\n  const a = canonicalLabel(contextLabel)\n  if (a === null || a.startsWith('device/')) throw new Error(`not an anchor context label (Identity §5.5): ${JSON.stringify(contextLabel)}`)\n  return `device/${n}/${await digestBytes(new TextEncoder().encode(a), subtle)}`\n}\n\nexport async function labeledContext (rootIkm: Uint8Array, label: string): Promise<Context> {\n  const canonical = canonicalLabel(label)\n  if (canonical === null) throw new Error(`not a label of the closed registry (Identity §6.1): ${JSON.stringify(label)}`)\n  const ed = await edFromSeed(await hkdf(rootIkm, 'rltp/anchor/ed/' + canonical))\n  const x = await xFromSeed(await hkdf(rootIkm, 'rltp/anchor/x/' + canonical))\n  return { label: canonical, ed, x, anchor: anchorOfEd(ed.pubRaw), keyAgreement: mkOfX(x.pubRaw) }\n}\n\n// fresh-always (Encounter §4.4): label = pair/<multihash over the NONCE\n// BYTES>. The nonce is the holder's own, fresh, and exactly 32 bytes —\n// a shorter one weakens the label to below its specified entropy (B-2).\nexport async function pairContext (rootIkm: Uint8Array, nonce: Uint8Array): Promise<Context> {\n  if (!(nonce instanceof Uint8Array) || nonce.length !== 32) throw new Error('pair nonce must be exactly 32 bytes (Identity §6.1)')\n  return labeledContext(rootIkm, 'pair/' + await digestBytes(nonce))\n}\n\n/**\n * The label of the community anchor at a generation (Identity §5.4,\n * §6.1): generation 1 is the ordinary group/<digest> context, a later\n * one group/<digest>/<generation>. The label string is the whole\n * derivation context — the generation enters nowhere else.\n */\nexport function communityLabel (genesisDigest: string, generation: number = 1): string {\n  if (!Number.isSafeInteger(generation) || generation < 1) throw new Error(`generation outside [1, 2^53 − 1] (Identity §5.4): ${generation}`)\n  return generation === 1 ? 'group/' + genesisDigest : `group/${genesisDigest}/${generation}`\n}\n\n/**\n * The community anchor: the group context over the personal community's\n * genesis digest at the holder's current generation (Identity §2, §5.4).\n * It is not a member of the personal community — that group is founded,\n * like every group, under a fresh pair anchor (Access §3.4.1).\n */\nexport const communityContext = (rootIkm: Uint8Array, genesisDigest: string, generation: number = 1): Promise<Context> =>\n  labeledContext(rootIkm, communityLabel(genesisDigest, generation))\n"]}

package/dist/index.d.ts

@@ -2,10 +2,35 @@ export * from './core.js';
 export * from './crypto.js';
 export * from './identity.js';
 export * from './encounter.js';
+export * from './membership.js';
+export * from './introduction.js';
 export * from './delivery.js';
 export * from './carrier-identity.js';
 export * from './carrier.js';
-export * from './holder.js';
+export * from './carrier-holder.js';
+export { PROFILE_TYPE, PROFILE_LIMITS, profileSchemaOk, imageDimensions, imageWithinBounds, profileProblem, profileInfo, profileKey, assembleProfile, profileMacOk, } from './profile.js';
+export type { ProfileContent, ProfileBody, ProfileArtifact, Dimensions, ImageDimensions } from './profile.js';
 export * as visibility from './visibility.js';
 export * as ceremony from './ceremony.js';
+import type { OpaqueHolderState } from './state.js';
+export type { OpaqueHolderState as HolderState, Dec, Millis, B64u, TrustClass, Setting, PromptKind, PromptChoice, OutboxStatus } from './state.js';
+export { CODEC, StateCodecError } from './codec.js';
+export type { StateCodecErrorCode } from './codec.js';
+/** Load a stored state (a JSON string or a parsed value): an independent,
+ *  opaque copy at the current codec, or StateCodecError. */
+export declare function decodeState(raw: unknown): OpaqueHolderState;
+export type * from './ports.js';
+export type * from './events.js';
+export { InfraError, CryptoUnavailableError } from './results.js';
+export type { ActError, ActResult, ReceiveFailure, ReceiveStageNo, ReceiveResult, ResumeResult, InfraErrorCode } from './results.js';
+export { ENTROPY_PURPOSES, EntropyError, randomEntropy } from './entropy.js';
+export type { Entropy, EntropyPurpose, EntropyErrorCode, PlatformRandom } from './entropy.js';
+export { storeContract } from './store-contract.js';
+export { seedKeys } from './keys-seed.js';
+export { createHolder } from './holder-api.js';
+export type { Holder, HolderOptions, HolderSnapshot, HumanActOptions } from './holder-api.js';
+export type { DeviceKeyResult } from './identity-state.js';
+export type { ContactView, RelationshipView, ClassView, SealedClassView, ClassesView, ContactProfileView, GroupView, ProfileView, PromptView, DeliveryItemView, DeliveryStatusView } from './views.js';
+export type { EnginePorts, CommitListener, CryptoHandle } from './engine.js';
+export type { ContractHarness } from './store-contract.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAoCA,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,uBAAuB,CAAA;AACrC,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAqEA,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,uBAAuB,CAAA;AACrC,cAAc,cAAc,CAAA;AAC5B,cAAc,qBAAqB,CAAA;AACnC,OAAO,EACL,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAC1H,eAAe,EAAE,YAAY,GAC9B,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC7G,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AAEzC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AACnD,YAAY,EAAE,iBAAiB,IAAI,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAClJ,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACnD,YAAY,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AACrD;4DAC4D;AAC5D,wBAAgB,WAAW,CAAE,GAAG,EAAE,OAAO,GAAG,iBAAiB,CAE5D;AACD,mBAAmB,YAAY,CAAA;AAC/B,mBAAmB,aAAa,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACjE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AACpI,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5E,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAC7F,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1D,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AACtM,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC5E,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA"}

package/dist/index.js

@@ -1,46 +1,94 @@
-// @real-life/trust-protocol — the cryptographic core of RLTP.
+// @real-life/trust-protocol — the reference library of RLTP.
 //
-// What this entry point IS: the wire-level primitives of the converged
-// layers, reproducing the shipped test vectors byte for byte — the
-// canonical form, the derivation of identity contexts under the closed
-// label registry, the encounter wire builders, the sealed envelope and
-// the generic receive chain.
+// The holder: createHolder({store, keys, entropy?, log?, access?, retry?,
+// crypto?}) — one person's device state behind the human acts, receive,
+// report, resume and tick, and the views an app reads. The ports (Store,
+// KeyProvider, Entropy, Log, Access, DeliveryReport, Outbound) are the
+// app's; seedKeys is the default KeyProvider. Beside it, the pure wire
+// builders and verifiers of every layer, byte-compatible with the shipped
+// vectors.
 //
-// What it is NOT (yet): the layers' full state machines. Identity's
-// recovery derivation, Encounter's ceremony record and acceptance
-// machinery, Delivery's type-specific stages and residual bookkeeping
-// live in the specification and its conformance fixtures, not here. A
-// conformant implementation builds ON this module; importing it is not
-// yet conformance. The README states per module which casting's wire
-// forms it implements.
-//
-//   core              the form every artifact obeys
+//   core              the form every artifact obeys (JCS, digests, schemas)
 //   crypto            the primitives, and the Data Integrity proof
-//   identity          context derivation under the closed registry (§6.1/§6.2)
-//   encounter         the ceremony's wire forms: challenges, cards, credentials
+//   identity          context derivation under the closed registry (§6.1/§6.2),
+//                     device labels device/<n>/<c> (§5.5)
+//   profile           profile@1 (Trust §6b): k_pr, the MAC, the bounds and
+//                     the picture's header read before any decoding
+//   encounter         the ceremony's wire forms: challenges, cards, credentials,
+//                     and its pure checks (5.6 acceptance, the bundle's forms)
+//   membership        Membership 0.19's forms and checks: invite, accept,
+//                     evidence, vouch@2, the member label, oids
+//   introduction      Trust §8's artifacts and checks, the act window, the
+//                     registry declaration's ack-delay
 //   delivery          the sealed envelope and the generic receive stages 1–4
 //   carrier-identity  the carrier-relationship principal (Identity §7a)
 //   carrier           the carrier side of the port (Delivery §4.4 + §5a)
-//   holder            the holder side: proofs, verdicts, recovery (§5a, §9.3)
-//   visibility        Network Visibility 0.29 on Delivery 0.79 — the trust
-//                     act, the blinded star, §6a continuity, the deniable
-//                     ack (namespaced: `visibility.trust`, `.continuity`,
-//                     `.acks`; graduated from /probe on 04.09.2026)
-//   ceremony          Encounter 0.29's registered ceremony on Delivery
-//                     0.79 — encounter-bundle, encounter-credential-
-//                     delivery, the signed ack; own-challenge state
-//                     model, enactment record, 5.6 acceptance, both
-//                     paths of 5.8 (graduated from /probe on 05.09.2026)
+//   carrier-holder    the holder side of the carrier port: proofs, verdicts,
+//                     recovery (§5a, §9.3)
+//   visibility        the Trust Layer's wire forms, pure: anchor (self-card@2,
+//                     anchor-rotation@2, anchor-mapping@4), star@2,
+//                     group-star@1, continuity-probe@1 and
+//                     continuity-mapping@1, delivery-ack/0.1
+//   ceremony          the encounter's, the group's and the introduction's
+//                     wire forms, pure (the same as the root's encounter,
+//                     membership and introduction modules, under one name)
+//
+// The holder (holder-api.ts): the typed human acts (trust, untrust,
+// pauseTrust, setClass, setGroupClass, merge, depart, decide, rotateAnchor,
+// setProfile, addDevice, revokeDevice, show, scan, captureSentCard,
+// counter, foundGroup, invite, vouchFor, introduce; {when, actId}), recover,
+// act, receive, tick, resume, report, subscribe, snapshot, deviceKey and the
+// views contacts, contact, groups, profile, prompts, deliveryStatus;
+// `invariants: true` checks invariants.ts on every commit (testing mode).
+// Its modules: identity (Identity §2, §5.4, §5.5), trust (Trust 2, 2a,
+// 5.2–5.4, 6.1–6.5, 6a, 6b), encounter (Encounter 0.31 §5–§7), membership
+// (Membership 0.19 with an in-library Access) and introduction (Trust §8).
+//
+//   views             the view types (ContactView, …)
+//   keys-seed         seedKeys — the default KeyProvider over a root seed
+//   state             HolderState — opaque here (note §4.5): store adapters
+//                     persist it, apps read the views
+//   codec             decodeState (to the opaque state), CODEC, StateCodecError
+//   ports             Store, KeyProvider, Log, Access, DeliveryReport, Outbound
+//   results, events   ActResult, ReceiveResult, InfraError, HolderEvent
+//   entropy           the Entropy port by closed purpose
+//   store-contract    storeContract — the test suite a Store adapter passes
+//
+// Other entry points:
+//   ./testing         InMemoryStore, memoryLog, scriptedEntropy, storeContract,
+//                     emptyState, stateBuilder, freezeDeep, sampleState,
+//                     openPromptModule, the invariants, forgeMapping, SCHEMAS
+//                     and the generated wire types
+//   ./internal        the structural state, encodeState and the codec chain,
+//                     the engine's module types, the pure view functions, the
+//                     modules' factories and pure reads — for the library's
+//                     modules and tests, not an app contract
+//   ./adapters/vti-mediator   the VTI mediator's reports as DeliveryReport
 //
-// Specification, schemas and vectors: https://rltp.real-life.org
+// Specification, schemas and vectors: https://trust-protocol.real-life.org
 export * from './core.js';
 export * from './crypto.js';
 export * from './identity.js';
 export * from './encounter.js';
+export * from './membership.js';
+export * from './introduction.js';
 export * from './delivery.js';
 export * from './carrier-identity.js';
 export * from './carrier.js';
-export * from './holder.js';
+export * from './carrier-holder.js';
+export { PROFILE_TYPE, PROFILE_LIMITS, profileSchemaOk, imageDimensions, imageWithinBounds, profileProblem, profileInfo, profileKey, assembleProfile, profileMacOk, } from './profile.js';
 export * as visibility from './visibility.js';
 export * as ceremony from './ceremony.js';
+import { decodeState as decodeStructural } from './codec.js';
+export { CODEC, StateCodecError } from './codec.js';
+/** Load a stored state (a JSON string or a parsed value): an independent,
+ *  opaque copy at the current codec, or StateCodecError. */
+export function decodeState(raw) {
+    return decodeStructural(raw);
+}
+export { InfraError, CryptoUnavailableError } from './results.js';
+export { ENTROPY_PURPOSES, EntropyError, randomEntropy } from './entropy.js';
+export { storeContract } from './store-contract.js';
+export { seedKeys } from './keys-seed.js';
+export { createHolder } from './holder-api.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,uEAAuE;AACvE,mEAAmE;AACnE,uEAAuE;AACvE,uEAAuE;AACvE,6BAA6B;AAC7B,EAAE;AACF,oEAAoE;AACpE,kEAAkE;AAClE,sEAAsE;AACtE,sEAAsE;AACtE,uEAAuE;AACvE,qEAAqE;AACrE,uBAAuB;AACvB,EAAE;AACF,oDAAoD;AACpD,mEAAmE;AACnE,+EAA+E;AAC/E,gFAAgF;AAChF,6EAA6E;AAC7E,wEAAwE;AACxE,yEAAyE;AACzE,8EAA8E;AAC9E,2EAA2E;AAC3E,0EAA0E;AAC1E,0EAA0E;AAC1E,oEAAoE;AACpE,uEAAuE;AACvE,qEAAqE;AACrE,oEAAoE;AACpE,oEAAoE;AACpE,yEAAyE;AACzE,EAAE;AACF,iEAAiE;AAEjE,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,uBAAuB,CAAA;AACrC,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA","sourcesContent":["// @real-life/trust-protocol — the cryptographic core of RLTP.\n//\n// What this entry point IS: the wire-level primitives of the converged\n// layers, reproducing the shipped test vectors byte for byte — the\n// canonical form, the derivation of identity contexts under the closed\n// label registry, the encounter wire builders, the sealed envelope and\n// the generic receive chain.\n//\n// What it is NOT (yet): the layers' full state machines. Identity's\n// recovery derivation, Encounter's ceremony record and acceptance\n// machinery, Delivery's type-specific stages and residual bookkeeping\n// live in the specification and its conformance fixtures, not here. A\n// conformant implementation builds ON this module; importing it is not\n// yet conformance. The README states per module which casting's wire\n// forms it implements.\n//\n//   core              the form every artifact obeys\n//   crypto            the primitives, and the Data Integrity proof\n//   identity          context derivation under the closed registry (§6.1/§6.2)\n//   encounter         the ceremony's wire forms: challenges, cards, credentials\n//   delivery          the sealed envelope and the generic receive stages 1–4\n//   carrier-identity  the carrier-relationship principal (Identity §7a)\n//   carrier           the carrier side of the port (Delivery §4.4 + §5a)\n//   holder            the holder side: proofs, verdicts, recovery (§5a, §9.3)\n//   visibility        Network Visibility 0.29 on Delivery 0.79 — the trust\n//                     act, the blinded star, §6a continuity, the deniable\n//                     ack (namespaced: `visibility.trust`, `.continuity`,\n//                     `.acks`; graduated from /probe on 04.09.2026)\n//   ceremony          Encounter 0.29's registered ceremony on Delivery\n//                     0.79 — encounter-bundle, encounter-credential-\n//                     delivery, the signed ack; own-challenge state\n//                     model, enactment record, 5.6 acceptance, both\n//                     paths of 5.8 (graduated from /probe on 05.09.2026)\n//\n// Specification, schemas and vectors: https://rltp.real-life.org\n\nexport * from './core.js'\nexport * from './crypto.js'\nexport * from './identity.js'\nexport * from './encounter.js'\nexport * from './delivery.js'\nexport * from './carrier-identity.js'\nexport * from './carrier.js'\nexport * from './holder.js'\nexport * as visibility from './visibility.js'\nexport * as ceremony from './ceremony.js'\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,0EAA0E;AAC1E,wEAAwE;AACxE,yEAAyE;AACzE,uEAAuE;AACvE,uEAAuE;AACvE,0EAA0E;AAC1E,WAAW;AACX,EAAE;AACF,4EAA4E;AAC5E,mEAAmE;AACnE,gFAAgF;AAChF,0DAA0D;AAC1D,2EAA2E;AAC3E,oEAAoE;AACpE,iFAAiF;AACjF,+EAA+E;AAC/E,0EAA0E;AAC1E,gEAAgE;AAChE,2EAA2E;AAC3E,uDAAuD;AACvD,6EAA6E;AAC7E,wEAAwE;AACxE,yEAAyE;AACzE,6EAA6E;AAC7E,2CAA2C;AAC3C,+EAA+E;AAC/E,oEAAoE;AACpE,2DAA2D;AAC3D,6DAA6D;AAC7D,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,EAAE;AACF,oEAAoE;AACpE,4EAA4E;AAC5E,oEAAoE;AACpE,6EAA6E;AAC7E,6EAA6E;AAC7E,qEAAqE;AACrE,0EAA0E;AAC1E,uEAAuE;AACvE,0EAA0E;AAC1E,2EAA2E;AAC3E,EAAE;AACF,sDAAsD;AACtD,0EAA0E;AAC1E,4EAA4E;AAC5E,sDAAsD;AACtD,gFAAgF;AAChF,gFAAgF;AAChF,wEAAwE;AACxE,yDAAyD;AACzD,4EAA4E;AAC5E,EAAE;AACF,sBAAsB;AACtB,gFAAgF;AAChF,yEAAyE;AACzE,8EAA8E;AAC9E,mDAAmD;AACnD,6EAA6E;AAC7E,8EAA8E;AAC9E,4EAA4E;AAC5E,6DAA6D;AAC7D,2EAA2E;AAC3E,EAAE;AACF,2EAA2E;AAE3E,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,uBAAuB,CAAA;AACrC,cAAc,cAAc,CAAA;AAC5B,cAAc,qBAAqB,CAAA;AACnC,OAAO,EACL,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAC1H,eAAe,EAAE,YAAY,GAC9B,MAAM,cAAc,CAAA;AAErB,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,EAAE,WAAW,IAAI,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAG5D,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEnD;4DAC4D;AAC5D,MAAM,UAAU,WAAW,CAAE,GAAY;IACvC,OAAO,gBAAgB,CAAC,GAAG,CAAiC,CAAA;AAC9D,CAAC;AAGD,OAAO,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AAEjE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAE5E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA","sourcesContent":["// @real-life/trust-protocol — the reference library of RLTP.\n//\n// The holder: createHolder({store, keys, entropy?, log?, access?, retry?,\n// crypto?}) — one person's device state behind the human acts, receive,\n// report, resume and tick, and the views an app reads. The ports (Store,\n// KeyProvider, Entropy, Log, Access, DeliveryReport, Outbound) are the\n// app's; seedKeys is the default KeyProvider. Beside it, the pure wire\n// builders and verifiers of every layer, byte-compatible with the shipped\n// vectors.\n//\n//   core              the form every artifact obeys (JCS, digests, schemas)\n//   crypto            the primitives, and the Data Integrity proof\n//   identity          context derivation under the closed registry (§6.1/§6.2),\n//                     device labels device/<n>/<c> (§5.5)\n//   profile           profile@1 (Trust §6b): k_pr, the MAC, the bounds and\n//                     the picture's header read before any decoding\n//   encounter         the ceremony's wire forms: challenges, cards, credentials,\n//                     and its pure checks (5.6 acceptance, the bundle's forms)\n//   membership        Membership 0.19's forms and checks: invite, accept,\n//                     evidence, vouch@2, the member label, oids\n//   introduction      Trust §8's artifacts and checks, the act window, the\n//                     registry declaration's ack-delay\n//   delivery          the sealed envelope and the generic receive stages 1–4\n//   carrier-identity  the carrier-relationship principal (Identity §7a)\n//   carrier           the carrier side of the port (Delivery §4.4 + §5a)\n//   carrier-holder    the holder side of the carrier port: proofs, verdicts,\n//                     recovery (§5a, §9.3)\n//   visibility        the Trust Layer's wire forms, pure: anchor (self-card@2,\n//                     anchor-rotation@2, anchor-mapping@4), star@2,\n//                     group-star@1, continuity-probe@1 and\n//                     continuity-mapping@1, delivery-ack/0.1\n//   ceremony          the encounter's, the group's and the introduction's\n//                     wire forms, pure (the same as the root's encounter,\n//                     membership and introduction modules, under one name)\n//\n// The holder (holder-api.ts): the typed human acts (trust, untrust,\n// pauseTrust, setClass, setGroupClass, merge, depart, decide, rotateAnchor,\n// setProfile, addDevice, revokeDevice, show, scan, captureSentCard,\n// counter, foundGroup, invite, vouchFor, introduce; {when, actId}), recover,\n// act, receive, tick, resume, report, subscribe, snapshot, deviceKey and the\n// views contacts, contact, groups, profile, prompts, deliveryStatus;\n// `invariants: true` checks invariants.ts on every commit (testing mode).\n// Its modules: identity (Identity §2, §5.4, §5.5), trust (Trust 2, 2a,\n// 5.2–5.4, 6.1–6.5, 6a, 6b), encounter (Encounter 0.31 §5–§7), membership\n// (Membership 0.19 with an in-library Access) and introduction (Trust §8).\n//\n//   views             the view types (ContactView, …)\n//   keys-seed         seedKeys — the default KeyProvider over a root seed\n//   state             HolderState — opaque here (note §4.5): store adapters\n//                     persist it, apps read the views\n//   codec             decodeState (to the opaque state), CODEC, StateCodecError\n//   ports             Store, KeyProvider, Log, Access, DeliveryReport, Outbound\n//   results, events   ActResult, ReceiveResult, InfraError, HolderEvent\n//   entropy           the Entropy port by closed purpose\n//   store-contract    storeContract — the test suite a Store adapter passes\n//\n// Other entry points:\n//   ./testing         InMemoryStore, memoryLog, scriptedEntropy, storeContract,\n//                     emptyState, stateBuilder, freezeDeep, sampleState,\n//                     openPromptModule, the invariants, forgeMapping, SCHEMAS\n//                     and the generated wire types\n//   ./internal        the structural state, encodeState and the codec chain,\n//                     the engine's module types, the pure view functions, the\n//                     modules' factories and pure reads — for the library's\n//                     modules and tests, not an app contract\n//   ./adapters/vti-mediator   the VTI mediator's reports as DeliveryReport\n//\n// Specification, schemas and vectors: https://trust-protocol.real-life.org\n\nexport * from './core.js'\nexport * from './crypto.js'\nexport * from './identity.js'\nexport * from './encounter.js'\nexport * from './membership.js'\nexport * from './introduction.js'\nexport * from './delivery.js'\nexport * from './carrier-identity.js'\nexport * from './carrier.js'\nexport * from './carrier-holder.js'\nexport {\n  PROFILE_TYPE, PROFILE_LIMITS, profileSchemaOk, imageDimensions, imageWithinBounds, profileProblem, profileInfo, profileKey,\n  assembleProfile, profileMacOk,\n} from './profile.js'\nexport type { ProfileContent, ProfileBody, ProfileArtifact, Dimensions, ImageDimensions } from './profile.js'\nexport * as visibility from './visibility.js'\nexport * as ceremony from './ceremony.js'\nimport { decodeState as decodeStructural } from './codec.js'\nimport type { OpaqueHolderState } from './state.js'\nexport type { OpaqueHolderState as HolderState, Dec, Millis, B64u, TrustClass, Setting, PromptKind, PromptChoice, OutboxStatus } from './state.js'\nexport { CODEC, StateCodecError } from './codec.js'\nexport type { StateCodecErrorCode } from './codec.js'\n/** Load a stored state (a JSON string or a parsed value): an independent,\n *  opaque copy at the current codec, or StateCodecError. */\nexport function decodeState (raw: unknown): OpaqueHolderState {\n  return decodeStructural(raw) as unknown as OpaqueHolderState\n}\nexport type * from './ports.js'\nexport type * from './events.js'\nexport { InfraError, CryptoUnavailableError } from './results.js'\nexport type { ActError, ActResult, ReceiveFailure, ReceiveStageNo, ReceiveResult, ResumeResult, InfraErrorCode } from './results.js'\nexport { ENTROPY_PURPOSES, EntropyError, randomEntropy } from './entropy.js'\nexport type { Entropy, EntropyPurpose, EntropyErrorCode, PlatformRandom } from './entropy.js'\nexport { storeContract } from './store-contract.js'\nexport { seedKeys } from './keys-seed.js'\nexport { createHolder } from './holder-api.js'\nexport type { Holder, HolderOptions, HolderSnapshot, HumanActOptions } from './holder-api.js'\nexport type { DeviceKeyResult } from './identity-state.js'\nexport type { ContactView, RelationshipView, ClassView, SealedClassView, ClassesView, ContactProfileView, GroupView, ProfileView, PromptView, DeliveryItemView, DeliveryStatusView } from './views.js'\nexport type { EnginePorts, CommitListener, CryptoHandle } from './engine.js'\nexport type { ContractHarness } from './store-contract.js'\n"]}

package/dist/internal.d.ts

@@ -0,0 +1,36 @@
+export type * from './state.js';
+export type { HolderStateV1 } from './holder-state-v1.js';
+export { emptyState, triasOf, toOpaque } from './state.js';
+export { CODEC, MIGRATIONS, VALIDATORS, decodeState, encodeState, sameState, isKnownDuty, StateCodecError } from './codec.js';
+export type { StateCodecErrorCode, StateValidator } from './codec.js';
+export type { HolderModule, CommandDef, PrepareCtx, Prepared, Applied, Refusal, TaskHandler, DutyHandler, DutyCtx, SweepHandler, AckHandler, DecisionHandler, DecisionDef, DecisionFn, EventDraft, OutboundDraft, EngineSnapshot } from './engine.js';
+export type { Arrival, Channel, ReceivedDocument, TaskDiscarded, DiscardReason, TaskFailure, TaskRefusal } from './receive.js';
+export { SIGNATURE_CLASS } from './receive.js';
+export { contactsView, contactView, groupsView, profileView, promptsView, deliveryStatusView } from './views.js';
+export { DECIDE } from './prompts.js';
+export type { DecideInput } from './prompts.js';
+export { freezeDeep } from './util-freeze.js';
+export { trustModule, ANCHOR_MAPPING_TYPE, TRUST_COMMANDS, lineageSegment, recommitEntries } from './trust/mapping.js';
+export type { TrustModuleOptions, TrustSetInput, TrustSetClassInput, TrustSetGroupClassInput, TrustPauseInput } from './trust/mapping.js';
+export { ADMISSION_BOUND, CLASSES, classOn, classOnToward, trusted, lags, newestHeads, newestOf, entryRelationships, activeTuple, findContact, entryOf, feeding, conflicts, joins, supersededIn, anchorSet, tupleByLabel, liveRel, } from './trust/state.js';
+export { STAR_TYPE, ASSEMBLY_LIMIT, starView, viewDigest, heldAnchors, discardAssemblies, rematchStars, retainInflight } from './trust/star.js';
+export { GROUP_STAR_TYPE, groupStarView, sealedOn } from './trust/group-star.js';
+export { CONTINUITY_PROBE_TYPE, CONTINUITY_MAPPING_TYPE, NEW_TUPLE, openTuple, chainTuple, substitutePrior } from './trust/continuity.js';
+export type { NewTupleInput } from './trust/continuity.js';
+export { ENTRY_COMMANDS, mergeEntries, mergeDutiesAfter, mergeable, mergeSettings, rewriteIdentity, splitOff, depart, chainAliases, settleHead, admitPending, } from './trust/entries.js';
+export type { TrustMergeInput, TrustDepartInput } from './trust/entries.js';
+export { DUTY_CLASSES, RECONCILED, classOnId, profileDutyId, classOfDuty, owedOn, onFor, onRelationships, classOnDuty, dropOff, followClasses, moveDuties, afterChain, classOnHandler, } from './trust/duties.js';
+export { promptsModule, collectDecisions } from './prompts.js';
+export { PROFILE_SET, profileIssueDuty, profileTask, profileParts } from './trust/profile.js';
+export { identityModule, IDENTITY_COMMANDS, GENERATION_LAST, withLabel, withPairNonce, deviceKeyOf, rotationDutyId, reissueId } from './identity-state.js';
+export type { DeviceInput, DeviceKeyResult } from './identity-state.js';
+export { stateViolations, transitionViolations, commitViolations, dutyDrops } from './invariants.js';
+export type { CommitOp, Violation } from './invariants.js';
+export { createEngine } from './engine.js';
+export { encounterModule, ENCOUNTER_COMMANDS, resolve as resolveChallenge, idsOf as encounterIdsOf, confirmPromptId } from './encounter/ceremony.js';
+export type { ShowInput, ScanInput, CaptureInput, CounterInput } from './encounter/ceremony.js';
+export { membershipModule, localAccess, MEMBERSHIP_COMMANDS, PRELUDE_REQUEST_TYPE, PRELUDE_REPLY_TYPE, WELCOME_TYPE } from './membership/holder.js';
+export type { FoundInput, InviteInput, VouchInput } from './membership/holder.js';
+export { introductionModule, INTRODUCTION_COMMANDS, OFFER_TYPE, ACK_DELAY } from './introduction/holder.js';
+export type { IntroduceInput } from './introduction/holder.js';
+//# sourceMappingURL=internal.d.ts.map

package/dist/internal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../src/internal.ts"],"names":[],"mappings":"AA8BA,mBAAmB,YAAY,CAAA;AAE/B,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAC1D,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC7H,YAAY,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AACrE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACrP,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC9H,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAChH,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACtH,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACzI,OAAO,EACL,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW,EACpI,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,GACnF,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,iBAAiB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAC/I,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAChF,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACzI,YAAY,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,EACL,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,GACpJ,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC3E,OAAO,EACL,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAC5J,cAAc,GACf,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC9D,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAC7F,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC1J,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACvE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AACpG,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,OAAO,IAAI,gBAAgB,EAAE,KAAK,IAAI,cAAc,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACpJ,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAC/F,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACnJ,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACjF,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAC3G,YAAY,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA"}

package/dist/internal.js

@@ -0,0 +1,22 @@
+export { emptyState, triasOf, toOpaque } from './state.js';
+export { CODEC, MIGRATIONS, VALIDATORS, decodeState, encodeState, sameState, isKnownDuty, StateCodecError } from './codec.js';
+export { SIGNATURE_CLASS } from './receive.js';
+export { contactsView, contactView, groupsView, profileView, promptsView, deliveryStatusView } from './views.js';
+export { DECIDE } from './prompts.js';
+export { freezeDeep } from './util-freeze.js';
+export { trustModule, ANCHOR_MAPPING_TYPE, TRUST_COMMANDS, lineageSegment, recommitEntries } from './trust/mapping.js';
+export { ADMISSION_BOUND, CLASSES, classOn, classOnToward, trusted, lags, newestHeads, newestOf, entryRelationships, activeTuple, findContact, entryOf, feeding, conflicts, joins, supersededIn, anchorSet, tupleByLabel, liveRel, } from './trust/state.js';
+export { STAR_TYPE, ASSEMBLY_LIMIT, starView, viewDigest, heldAnchors, discardAssemblies, rematchStars, retainInflight } from './trust/star.js';
+export { GROUP_STAR_TYPE, groupStarView, sealedOn } from './trust/group-star.js';
+export { CONTINUITY_PROBE_TYPE, CONTINUITY_MAPPING_TYPE, NEW_TUPLE, openTuple, chainTuple, substitutePrior } from './trust/continuity.js';
+export { ENTRY_COMMANDS, mergeEntries, mergeDutiesAfter, mergeable, mergeSettings, rewriteIdentity, splitOff, depart, chainAliases, settleHead, admitPending, } from './trust/entries.js';
+export { DUTY_CLASSES, RECONCILED, classOnId, profileDutyId, classOfDuty, owedOn, onFor, onRelationships, classOnDuty, dropOff, followClasses, moveDuties, afterChain, classOnHandler, } from './trust/duties.js';
+export { promptsModule, collectDecisions } from './prompts.js';
+export { PROFILE_SET, profileIssueDuty, profileTask, profileParts } from './trust/profile.js';
+export { identityModule, IDENTITY_COMMANDS, GENERATION_LAST, withLabel, withPairNonce, deviceKeyOf, rotationDutyId, reissueId } from './identity-state.js';
+export { stateViolations, transitionViolations, commitViolations, dutyDrops } from './invariants.js';
+export { createEngine } from './engine.js';
+export { encounterModule, ENCOUNTER_COMMANDS, resolve as resolveChallenge, idsOf as encounterIdsOf, confirmPromptId } from './encounter/ceremony.js';
+export { membershipModule, localAccess, MEMBERSHIP_COMMANDS, PRELUDE_REQUEST_TYPE, PRELUDE_REPLY_TYPE, WELCOME_TYPE } from './membership/holder.js';
+export { introductionModule, INTRODUCTION_COMMANDS, OFFER_TYPE, ACK_DELAY } from './introduction/holder.js';
+//# sourceMappingURL=internal.js.map

package/dist/internal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal.js","sourceRoot":"","sources":["../src/internal.ts"],"names":[],"mappings":"AAiCA,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAC1D,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAI7H,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAChH,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAErC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAEtH,OAAO,EACL,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW,EACpI,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,GACnF,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,iBAAiB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAC/I,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAChF,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEzI,OAAO,EACL,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,GACpJ,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EACL,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAC5J,cAAc,GACf,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC9D,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAC7F,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAE1J,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEpG,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,OAAO,IAAI,gBAAgB,EAAE,KAAK,IAAI,cAAc,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAEpJ,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAEnJ,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA","sourcesContent":["// @real-life/trust-protocol/internal — what the library's own modules and\n// its tests build on, not an app contract (lib Stage 2, note §4.5, §4.6).\n//\n// The structural HolderState and its parts change with every codec until\n// 0.4.0 and beyond; apps read the views through createHolder, and store\n// adapters see the state only as the opaque root type. Here:\n//\n//   state     the structural HolderState and its parts, emptyState, triasOf\n//   codec     decodeState (structural), encodeState, sameState, the chain\n//             (CODEC, MIGRATIONS, VALIDATORS), isKnownDuty\n//   engine    the module surface: HolderModule, CommandDef, PrepareCtx,\n//             Prepared, Applied, Refusal, TaskHandler, DutyHandler, DutyCtx,\n//             SweepHandler, AckHandler, FailureHandler, IdentityRename, DecisionHandler, EventDraft,\n//             OutboundDraft, EngineSnapshot; receive's Arrival,\n//             ReceivedDocument, TaskRefusal, TaskDiscarded, TaskFailure\n//   views     the pure projections state → view\n//   prompts   DECIDE, DecideInput\n//   trust     the trust module's factory (trustModule, for tests with another\n//             admission bound or assembly limit), its task types and command\n//             names, the pure reads of trust/state.ts (trusted, lags,\n//             classOn, …), the 2240 re-commit (recommitEntries), the views\n//             of 5.4 (starView, groupStarView, sealedOn), heldAnchors,\n//             ASSEMBLY_LIMIT and discardAssemblies (5360); the entries\n//             (trust/entries.ts: merge, split, departure, the identity\n//             rewrite) and continuity (trust/continuity.ts: openTuple,\n//             chainTuple, substitutePrior, the task types); the class\n//             duties (trust/duties.ts: onFor, the follow rule, the move at\n//             a chaining, the handlers)\n//   freeze    freezeDeep\n//   invariants  the predicates of invariants.ts over a state and a commit\nexport type * from './state.js'\n// the projection of the non-normative lib/schemas/holder-state-v1.schema.json\nexport type { HolderStateV1 } from './holder-state-v1.js'\nexport { emptyState, triasOf, toOpaque } from './state.js'\nexport { CODEC, MIGRATIONS, VALIDATORS, decodeState, encodeState, sameState, isKnownDuty, StateCodecError } from './codec.js'\nexport type { StateCodecErrorCode, StateValidator } from './codec.js'\nexport type { HolderModule, CommandDef, PrepareCtx, Prepared, Applied, Refusal, TaskHandler, DutyHandler, DutyCtx, SweepHandler, AckHandler, DecisionHandler, DecisionDef, DecisionFn, EventDraft, OutboundDraft, EngineSnapshot } from './engine.js'\nexport type { Arrival, Channel, ReceivedDocument, TaskDiscarded, DiscardReason, TaskFailure, TaskRefusal } from './receive.js'\nexport { SIGNATURE_CLASS } from './receive.js'\nexport { contactsView, contactView, groupsView, profileView, promptsView, deliveryStatusView } from './views.js'\nexport { DECIDE } from './prompts.js'\nexport type { DecideInput } from './prompts.js'\nexport { freezeDeep } from './util-freeze.js'\nexport { trustModule, ANCHOR_MAPPING_TYPE, TRUST_COMMANDS, lineageSegment, recommitEntries } from './trust/mapping.js'\nexport type { TrustModuleOptions, TrustSetInput, TrustSetClassInput, TrustSetGroupClassInput, TrustPauseInput } from './trust/mapping.js'\nexport {\n  ADMISSION_BOUND, CLASSES, classOn, classOnToward, trusted, lags, newestHeads, newestOf, entryRelationships, activeTuple, findContact,\n  entryOf, feeding, conflicts, joins, supersededIn, anchorSet, tupleByLabel, liveRel,\n} from './trust/state.js'\nexport { STAR_TYPE, ASSEMBLY_LIMIT, starView, viewDigest, heldAnchors, discardAssemblies, rematchStars, retainInflight } from './trust/star.js'\nexport { GROUP_STAR_TYPE, groupStarView, sealedOn } from './trust/group-star.js'\nexport { CONTINUITY_PROBE_TYPE, CONTINUITY_MAPPING_TYPE, NEW_TUPLE, openTuple, chainTuple, substitutePrior } from './trust/continuity.js'\nexport type { NewTupleInput } from './trust/continuity.js'\nexport {\n  ENTRY_COMMANDS, mergeEntries, mergeDutiesAfter, mergeable, mergeSettings, rewriteIdentity, splitOff, depart, chainAliases, settleHead, admitPending,\n} from './trust/entries.js'\nexport type { TrustMergeInput, TrustDepartInput } from './trust/entries.js'\nexport {\n  DUTY_CLASSES, RECONCILED, classOnId, profileDutyId, classOfDuty, owedOn, onFor, onRelationships, classOnDuty, dropOff, followClasses, moveDuties, afterChain,\n  classOnHandler,\n} from './trust/duties.js'\nexport { promptsModule, collectDecisions } from './prompts.js'\nexport { PROFILE_SET, profileIssueDuty, profileTask, profileParts } from './trust/profile.js'\nexport { identityModule, IDENTITY_COMMANDS, GENERATION_LAST, withLabel, withPairNonce, deviceKeyOf, rotationDutyId, reissueId } from './identity-state.js'\nexport type { DeviceInput, DeviceKeyResult } from './identity-state.js'\nexport { stateViolations, transitionViolations, commitViolations, dutyDrops } from './invariants.js'\nexport type { CommitOp, Violation } from './invariants.js'\nexport { createEngine } from './engine.js'\nexport { encounterModule, ENCOUNTER_COMMANDS, resolve as resolveChallenge, idsOf as encounterIdsOf, confirmPromptId } from './encounter/ceremony.js'\nexport type { ShowInput, ScanInput, CaptureInput, CounterInput } from './encounter/ceremony.js'\nexport { membershipModule, localAccess, MEMBERSHIP_COMMANDS, PRELUDE_REQUEST_TYPE, PRELUDE_REPLY_TYPE, WELCOME_TYPE } from './membership/holder.js'\nexport type { FoundInput, InviteInput, VouchInput } from './membership/holder.js'\nexport { introductionModule, INTRODUCTION_COMMANDS, OFFER_TYPE, ACK_DELAY } from './introduction/holder.js'\nexport type { IntroduceInput } from './introduction/holder.js'\n"]}

package/dist/introduction/holder.d.ts

@@ -0,0 +1,18 @@
+import { DECLARATION_TYPE, INTRODUCTION_TYPES } from '../introduction.js';
+import type { HolderModule } from '../engine.js';
+export declare const OFFER_TYPE: string;
+export { DECLARATION_TYPE, INTRODUCTION_TYPES };
+/** The mediator's declared ack-delay (Delivery §4.4, Trust 8.4). */
+export declare const ACK_DELAY = "PT30S";
+export declare const ACK_DELAY_MS = 30000;
+export declare const INTRODUCTION_COMMANDS: Readonly<{
+    introduce: "introduction.introduce";
+}>;
+export interface IntroduceInput {
+    requesterId: string;
+    targetId: string;
+    label?: string;
+}
+/** The introduction module createHolder registers. */
+export declare function introductionModule(): HolderModule;
+//# sourceMappingURL=holder.d.ts.map

package/dist/introduction/holder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"holder.d.ts","sourceRoot":"","sources":["../../src/introduction/holder.ts"],"names":[],"mappings":"AAgGA,OAAO,EACiB,gBAAgB,EAAE,kBAAkB,EAG3D,MAAM,oBAAoB,CAAA;AAK3B,OAAO,KAAK,EAA6D,YAAY,EAAmD,MAAM,cAAc,CAAA;AAU5J,eAAO,MAAM,UAAU,QAAkC,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,CAAA;AAE/C,oEAAoE;AACpE,eAAO,MAAM,SAAS,UAAU,CAAA;AAChC,eAAO,MAAM,YAAY,QAAS,CAAA;AAElC,eAAO,MAAM,qBAAqB;;EAAyD,CAAA;AAC3F,MAAM,WAAW,cAAc;IAAG,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AA2mBzF,sDAAsD;AACtD,wBAAgB,kBAAkB,IAAK,YAAY,CAmBlD"}