@real-life/trust-protocol 0.7.0 → 0.8.0

package/dist/encounter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"encounter.d.ts","sourceRoot":"","sources":["../src/encounter.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAiB,GAAG,EAA6B,MAAM,WAAW,CAAA;AAEzE,OAAO,EAAE,GAAG,EAAE,CAAA;AAGd,eAAO,MAAM,QAAQ,wBAAwB,CAAA;AAC7C,eAAO,MAAM,YAAY,mBAAmB,CAAA;AAC5C,+DAA+D;AAC/D,eAAO,MAAM,WAAW,mCAAmC,CAAA;AAC3D;gEACgE;AAChE,eAAO,MAAM,WAAW,oDAAoD,CAAA;AAC5E,oFAAoF;AACpF,eAAO,MAAM,YAAY,EAAE,SAAS,MAAM,EAA0G,CAAA;AACpJ;+EAC+E;AAC/E,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGxD,CAAA;AACF;sEACsE;AACtE,eAAO,MAAM,kBAAkB,GAAI,MAAM,OAAO,KAAG,MAAM,GAAG,IAG3D,CAAA;AACD,eAAO,MAAM,OAAO,GAAI,UAAU,MAAM,EAAE,IAAI,MAAM,EAAE,IAAI,MAAM,KAAG,OAAO,CAAC,MAAM,CAAyD,CAAA;AAC1I,eAAO,MAAM,WAAW,GAAI,SAAS,UAAU,KAAG,MAKjD,CAAA;AAID,eAAO,MAAM,QAAQ,GAAI,KAAK,MAAM,EAAE,MAAM,QAAQ,EAAE,SAAS,MAAM;;EAA+B,CAAA;AAEpG,oFAAoF;AACpF,MAAM,WAAW,SAAS;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AAE9D;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,SAAS,CAAC;IAAC,OAAO,CAAC,EAAE,SAAS,CAAA;CAAE,GACjF;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAE7E,kDAAkD;AAClD,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,wBAAgB,QAAQ,CAAE,GAAG,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM,GAAE,UAAe,GAAG,QAAQ,CAU1G;AACD;kEACkE;AAClE,eAAO,MAAM,cAAc,GACzB,cAAc,MAAM,EAAE,eAAe,MAAM,EAAE,UAAU,MAAM,EAC7D,kBAAkB,MAAM,EAAE,kBAAkB,MAAM,EAAE,SAAS,MAAM;;;;;;;;;;;;;CASnE,CAAA;AACF,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EACpD,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;GAGpE;AASD,kEAAkE;AAClE,eAAO,MAAM,WAAW,QAA8B,CAAA;AACtD,2EAA2E;AAC3E,eAAO,MAAM,aAAa,QAA2C,CAAA;AAErE,eAAO,MAAM,iBAAiB,QAAa,CAAA;AAC3C,eAAO,MAAM,eAAe,QAAiB,CAAA;AAC7C,eAAO,MAAM,cAAc,QAAa,CAAA;AAQxC,qEAAqE;AACrE,eAAO,MAAM,QAAQ,GAAI,KAAK,MAAM,EAAE,KAAK,MAAM,KAAG,OAAuD,CAAA;AAC3G,uEAAuE;AACvE,eAAO,MAAM,aAAa,GAAI,KAAK,MAAM,EAAE,KAAK,MAAM,KAAG,OAA4E,CAAA;AACrI;qDACqD;AACrD,eAAO,MAAM,YAAY,GAAI,OAAO,MAAM,EAAE,KAAK,MAAM,KAAG,OAGzD,CAAA;AACD,oGAAoG;AACpG,eAAO,MAAM,WAAW,GAAI,OAAO,MAAM,KAAG,MAAmG,CAAA;AAI/I,eAAO,MAAM,MAAM,GAAI,GAAG,OAAO,KAAG,OAAmD,CAAA;AAEvF,eAAO,MAAM,WAAW,kCAAkC,CAAA;AAC1D;;oDAEoD;AACpD,wBAAsB,MAAM,CAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQtF;AAED,+BAA+B;AAC/B,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,SAAS,GAAG,eAAe,GAAG,eAAe,GAAG,cAAc,GAAG,oBAAoB,GAAG,aAAa,GAAG,cAAc,CAAA;AAE9J;;;;eAIe;AACf,wBAAgB,UAAU,CAAE,IAAI,EAAE,GAAG,EAAE,YAAY,UAAO,GAAG,SAAS,GAAG,IAAI,CAU5E;AAED,mEAAmE;AACnE,wBAAsB,QAAQ,CAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,UAAO,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAMrI;AAED,8EAA8E;AAC9E,wBAAgB,QAAQ,CAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAI3D;AAED,2CAA2C;AAC3C,MAAM,WAAW,WAAW;IAAG,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAEjG;;yCAEyC;AACzC,wBAAgB,UAAU,CAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,GAAG,SAAS,EAAE,KAAK,EAAE,YAAY,GAAG,QAAQ,GAAG,SAAS,GAAG,IAAI,CAQrH;AAED;mCACmC;AACnC,eAAO,MAAM,aAAa,GAAI,GAAG,SAAS,KAAG,gBAAgB,GAAG,mBAA4F,CAAA;AAE5J;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAE,GAAG,EAAE,GAAG,GAAG;IAAE,MAAM,EAAE,mBAAmB,GAAG,gBAAgB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAc5G;AAED,wEAAwE;AACxE,wBAAgB,YAAY,CAAE,GAAG,EAAE,GAAG,GAAG,MAAM,GAAG,IAAI,CAOrD"}
+{"version":3,"file":"encounter.d.ts","sourceRoot":"","sources":["../src/encounter.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAiB,GAAG,EAA6B,MAAM,WAAW,CAAA;AAEzE,OAAO,EAAE,GAAG,EAAE,CAAA;AAGd,eAAO,MAAM,QAAQ,wBAAwB,CAAA;AAC7C,eAAO,MAAM,YAAY,mBAAmB,CAAA;AAC5C,+DAA+D;AAC/D,eAAO,MAAM,WAAW,mCAAmC,CAAA;AAC3D;gEACgE;AAChE,eAAO,MAAM,WAAW,oDAAoD,CAAA;AAC5E,oFAAoF;AACpF,eAAO,MAAM,YAAY,EAAE,SAAS,MAAM,EAA0G,CAAA;AACpJ;+EAC+E;AAC/E,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGxD,CAAA;AACF;sEACsE;AACtE,eAAO,MAAM,kBAAkB,GAAI,MAAM,OAAO,KAAG,MAAM,GAAG,IAG3D,CAAA;AACD,eAAO,MAAM,OAAO,GAAI,UAAU,MAAM,EAAE,IAAI,MAAM,EAAE,IAAI,MAAM,KAAG,OAAO,CAAC,MAAM,CAAyD,CAAA;AAC1I,eAAO,MAAM,WAAW,GAAI,SAAS,UAAU,KAAG,MAKjD,CAAA;AAID,eAAO,MAAM,QAAQ,GAAI,KAAK,MAAM,EAAE,MAAM,QAAQ,EAAE,SAAS,MAAM;;EAA+B,CAAA;AAEpG,oFAAoF;AACpF,MAAM,WAAW,SAAS;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AAE9D;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,SAAS,CAAC;IAAC,OAAO,CAAC,EAAE,SAAS,CAAA;CAAE,GAC3G;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvG,kDAAkD;AAClD,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,kGAAkG;IAClG,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,wBAAgB,QAAQ,CAAE,GAAG,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM,GAAE,UAAe,GAAG,QAAQ,CAW1G;AACD;kEACkE;AAClE,eAAO,MAAM,cAAc,GACzB,cAAc,MAAM,EAAE,eAAe,MAAM,EAAE,UAAU,MAAM,EAC7D,kBAAkB,MAAM,EAAE,kBAAkB,MAAM,EAAE,SAAS,MAAM;;;;;;;;;;;;;CASnE,CAAA;AACF,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EACpD,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;GAGpE;AASD,kEAAkE;AAClE,eAAO,MAAM,WAAW,QAA8B,CAAA;AACtD,2EAA2E;AAC3E,eAAO,MAAM,aAAa,QAA2C,CAAA;AAErE,eAAO,MAAM,iBAAiB,QAAa,CAAA;AAC3C,eAAO,MAAM,eAAe,QAAiB,CAAA;AAC7C,eAAO,MAAM,cAAc,QAAa,CAAA;AAQxC,qEAAqE;AACrE,eAAO,MAAM,QAAQ,GAAI,KAAK,MAAM,EAAE,KAAK,MAAM,KAAG,OAAuD,CAAA;AAC3G,uEAAuE;AACvE,eAAO,MAAM,aAAa,GAAI,KAAK,MAAM,EAAE,KAAK,MAAM,KAAG,OAA4E,CAAA;AACrI;qDACqD;AACrD,eAAO,MAAM,YAAY,GAAI,OAAO,MAAM,EAAE,KAAK,MAAM,KAAG,OAGzD,CAAA;AACD,oGAAoG;AACpG,eAAO,MAAM,WAAW,GAAI,OAAO,MAAM,KAAG,MAAmG,CAAA;AAI/I,eAAO,MAAM,MAAM,GAAI,GAAG,OAAO,KAAG,OAAmD,CAAA;AAEvF,eAAO,MAAM,WAAW,kCAAkC,CAAA;AAC1D;;oDAEoD;AACpD,wBAAsB,MAAM,CAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQtF;AAED,+BAA+B;AAC/B,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,SAAS,GAAG,eAAe,GAAG,eAAe,GAAG,cAAc,GAAG,oBAAoB,GAAG,aAAa,GAAG,cAAc,CAAA;AAE9J;;;;eAIe;AACf,wBAAgB,UAAU,CAAE,IAAI,EAAE,GAAG,EAAE,YAAY,UAAO,GAAG,SAAS,GAAG,IAAI,CAU5E;AAED,mEAAmE;AACnE,wBAAsB,QAAQ,CAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,UAAO,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAMrI;AAED,8EAA8E;AAC9E,wBAAgB,QAAQ,CAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAI3D;AAED,2CAA2C;AAC3C,MAAM,WAAW,WAAW;IAAG,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAEjG;;yCAEyC;AACzC,wBAAgB,UAAU,CAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,GAAG,SAAS,EAAE,KAAK,EAAE,YAAY,GAAG,QAAQ,GAAG,SAAS,GAAG,IAAI,CAQrH;AAED;mCACmC;AACnC,eAAO,MAAM,aAAa,GAAI,GAAG,SAAS,KAAG,gBAAgB,GAAG,mBAA4F,CAAA;AAE5J;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAE,GAAG,EAAE,GAAG,GAAG;IAAE,MAAM,EAAE,mBAAmB,GAAG,gBAAgB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAc5G;AAED,wEAAwE;AACxE,wBAAgB,YAAY,CAAE,GAAG,EAAE,GAAG,GAAG,MAAM,GAAG,IAAI,CAOrD"}

package/dist/encounter.js

@@ -46,7 +46,7 @@ const challengeOfUnchecked = (bytes17) => b64uOf(bytes17).slice(0, 22);
 // cards carry no @context (the proof carries none either — W3C-true)
 export const signCard = (ctx, body, created) => diSign(ctx, body, created);
 export function cardBody(ctx, fields = {}) {
-    const { name, challenge, sentTo, boundTo } = fields;
+    const { name, deliveryHints, challenge, sentTo, boundTo } = fields;
     // runtime guard for JS callers the union cannot reach: the sent-card
     // profile is atomic — half of it is not a card of either profile
     if ((sentTo === undefined) !== (boundTo === undefined))
@@ -54,6 +54,8 @@ export function cardBody(ctx, fields = {}) {
     const b = { version: CARD_VERSION, anchor: ctx.anchor, keyAgreement: ctx.keyAgreement };
     if (name !== undefined)
         b.name = name;
+    if (deliveryHints !== undefined)
+        b.deliveryHints = [...deliveryHints];
     if (challenge !== undefined)
         b.challenge = challenge;
     if (sentTo !== undefined) {

package/dist/encounter.js.map

@@ -1 +1 @@
-{"version":3,"file":"encounter.js","sourceRoot":"","sources":["../src/encounter.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,EAAE;AACF,sEAAsE;AACtE,kEAAkE;AAClE,wEAAwE;AACxE,0CAA0C;AAC1C,EAAE;AACF,kEAAkE;AAClE,uEAAuE;AACvE,mCAAmC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAElF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,GAAG,EAAE,CAAA;AAEd,0EAA0E;AAC1E,MAAM,CAAC,MAAM,QAAQ,GAAG,qBAAqB,CAAA;AAC7C,MAAM,CAAC,MAAM,YAAY,GAAG,gBAAgB,CAAA;AAC5C,+DAA+D;AAC/D,MAAM,CAAC,MAAM,WAAW,GAAG,gCAAgC,CAAA;AAC3D;gEACgE;AAChE,MAAM,CAAC,MAAM,WAAW,GAAG,iDAAiD,CAAA;AAC5E,oFAAoF;AACpF,MAAM,CAAC,MAAM,YAAY,GAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,sCAAsC,EAAE,WAAW,EAAE,+BAA+B,CAAC,CAAC,CAAA;AACpJ;+EAC+E;AAC/E,MAAM,CAAC,MAAM,YAAY,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC1E,gCAAgC,EAAE,uCAAuC;IACzE,gCAAgC,EAAE,uCAAuC;CAC1E,CAAC,CAAA;AACF;sEACsE;AACtE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAAa,EAAiB,EAAE;IACjE,MAAM,CAAC,GAAI,IAA4D,EAAE,iBAAiB,EAAE,MAAM,CAAA;IAClG,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAChH,CAAC,CAAA;AACD,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAE,EAAU,EAAE,EAAU,EAAmB,EAAE,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;AAC1I,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAmB,EAAU,EAAE;IACzD,qEAAqE;IACrE,uEAAuE;IACvE,IAAI,CAAC,CAAC,OAAO,YAAY,UAAU,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IAC5H,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAA;AACtC,CAAC,CAAA;AACD,MAAM,oBAAoB,GAAG,CAAC,OAAmB,EAAU,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAE1F,qEAAqE;AACrE,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,IAAc,EAAE,OAAe,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;AA0BpG,MAAM,UAAU,QAAQ,CAAE,GAA6C,EAAE,SAAqB,EAAE;IAC9F,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAqF,CAAA;IAClI,qEAAqE;IACrE,iEAAiE;IACjE,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAA;IACzI,MAAM,CAAC,GAAa,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAA;IACjG,IAAI,IAAI,KAAK,SAAS;QAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAA;IACrC,IAAI,SAAS,KAAK,SAAS;QAAE,CAAC,CAAC,SAAS,GAAG,SAAS,CAAA;IACpD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAAC,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC;QAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CAAA;IAAC,CAAC;IACpE,OAAO,CAAC,CAAA;AACV,CAAC;AACD;kEACkE;AAClE,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,YAAoB,EAAE,aAAqB,EAAE,QAAgB,EAC7D,gBAAwB,EAAE,gBAAwB,EAAE,OAAe,EACnE,EAAE,CAAC,CAAC;IACJ,UAAU,EAAE,CAAC,GAAG,YAAY,CAAC;IAC7B,IAAI,EAAE,CAAC,sBAAsB,EAAE,eAAe,EAAE,wBAAwB,EAAE,qBAAqB,CAAC;IAChG,MAAM,EAAE,YAAY;IACpB,6EAA6E;IAC7E,WAAW,EAAE,UAAU;IACvB,SAAS,EAAE,OAAO;IAClB,iBAAiB,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,EAAE;CACvH,CAAC,CAAA;AACF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EAAE,aAAqB,EAAE,QAAgB,EACpD,gBAAwB,EAAE,gBAAwB,EAAE,OAAe;IAEnE,OAAO,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;AAC/H,CAAC;AAGD,4EAA4E;AAC5E,0EAA0E;AAC1E,qEAAqE;AACrE,oEAAoE;AACpE,8EAA8E;AAC9E,MAAM,EAAE,GAAG,oCAAoC,CAAA;AAC/C,kEAAkE;AAClE,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,GAAG,sBAAsB,CAAA;AACtD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,GAAG,mCAAmC,CAAA;AACrE,0CAA0C;AAC1C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAG,MAAM,CAAA,CAAK,OAAO;AACvD,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,SAAS,CAAA,CAAG,QAAQ;AACxD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAG,MAAM,CAAA,CAAQ,OAAO;AAEvD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;AAClC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,IAAa,EAAW,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAA;AAExH,2BAA2B;AAC3B,MAAM,GAAG,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAA;AACzD,MAAM,MAAM,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;AACtE,qEAAqE;AACrE,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,GAAW,EAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,cAAc,GAAG,IAAI,CAAA;AAC3G,uEAAuE;AACvE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAW,EAAE,GAAW,EAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,GAAG,cAAc,CAAC,GAAG,IAAI,CAAA;AACrI;qDACqD;AACrD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,GAAW,EAAW,EAAE;IAClE,MAAM,IAAI,GAAG,cAAc,GAAG,IAAI,CAAA;IAClC,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,GAAG,eAAe,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AACtH,CAAC,CAAA;AACD,oGAAoG;AACpG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,GAAG,eAAe,GAAG,cAAc,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,GAAG,GAAG,CAAA;AAE/I,8EAA8E;AAC9E,MAAM,OAAO,GAAG,wEAAwE,CAAA;AACxF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAEvF,MAAM,CAAC,MAAM,WAAW,GAAG,+BAA+B,CAAA;AAC1D;;oDAEoD;AACpD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAE,IAAS,EAAE,MAAqB;IAC5D,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;QAAE,OAAO,qCAAqC,CAAA;IAC9E,IAAI,IAAI,CAAC,OAAO,KAAK,YAAY;QAAE,OAAO,sBAAsB,CAAA;IAChE,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,qDAAqD,CAAA;IACjF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;QAAE,OAAO,kCAAkC,CAAA;IAC7G,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,gEAAgE,CAAA;IACxI,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,YAAY,CAAA;IACrE,OAAO,IAAI,CAAA;AACb,CAAC;AAKD;;;;eAIe;AACf,MAAM,UAAU,UAAU,CAAE,IAAS,EAAE,YAAY,GAAG,IAAI;IACxD,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACvC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;QAAE,OAAO,aAAa,CAAA;IACpE,IAAI,YAAY,IAAI,IAAI,CAAC,iBAAiB,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,aAAa,CAAA;IACtF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;QAAE,OAAO,aAAa,CAAA;IAC/E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC;QAAE,OAAO,aAAa,CAAA;IACvH,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAAE,OAAO,aAAa,CAAA;IAClG,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,kBAAkB,IAAI,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC/E,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,aAAa,CAAA;IAC1H,OAAO,IAAI,CAAA;AACb,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAE,IAAS,EAAE,WAAmB,EAAE,YAAY,GAAG,IAAI,EAAE,MAAqB;IACxG,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IACxC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAA;IACf,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IAClE,IAAI,IAAI,CAAC,iBAAiB,CAAC,EAAE,KAAK,WAAW;QAAE,OAAO,eAAe,CAAA;IACrE,OAAO,IAAI,CAAA;AACb,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,QAAQ,CAAE,IAAS,EAAE,KAAa;IAChD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,GAAG,cAAc,GAAG,IAAI,CAAA;IAClH,MAAM,EAAE,GAAG,GAAG,GAAG,IAAI,EAAE,EAAE,GAAG,GAAG,GAAG,CAAC,iBAAiB,GAAG,eAAe,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;IACrF,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;AACtE,CAAC;AAKD;;yCAEyC;AACzC,MAAM,UAAU,UAAU,CAAE,IAAS,EAAE,GAA4B,EAAE,KAA8B;IACjG,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,eAAe,CAAA;IACnE,IAAI,IAAI,CAAC,iBAAiB,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ;QAAE,OAAO,cAAc,CAAA;IAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;IAC5E,IAAI,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM;QAAE,OAAO,aAAa,CAAA;IACvD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,oBAAoB,CAAA;IACzD,IAAI,CAAC,MAAM;QAAE,OAAO,aAAa,CAAA;IACjC,OAAO,IAAI,CAAA;AACb,CAAC;AAED;mCACmC;AACnC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAY,EAA0C,EAAE,CAAC,CAAC,CAAC,KAAK,oBAAoB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAA;AAE5J;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAE,GAAQ;IAClC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,OAAO,CAAA;IACxC,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,mBAA4B,EAAE,GAAG,EAAE,CAAC,CAAA;IAC1E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;QAAE,OAAO,CAAC,CAAC,2BAA2B,CAAC,CAAA;IAClI,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC,0DAA0D,CAAC,CAAA;IACzI,IAAI,UAAU,CAAC,iBAAiB,EAAE,EAAE,KAAK,GAAG,CAAC,SAAS;QAAE,OAAO,CAAC,CAAC,qCAAqC,CAAC,CAAA;IACvG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,iBAAiB,CAAC,SAAS;QAAE,OAAO,CAAC,CAAC,oCAAoC,CAAC,CAAA;IAC5I,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,CAAC,qDAAqD,CAAC,CAAA;IAC1G,IAAI,GAAG,CAAC,QAAQ,EAAE,SAAS,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC,iBAAiB,CAAC,gBAAgB,CAAC;QAAE,OAAO,CAAC,CAAC,mCAAmC,CAAC,CAAA;IAC9K,IAAI,IAAI,CAAC,OAAO,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,CAAC,wBAAwB,CAAC,CAAA;IACxF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,CAAC,yBAAyB,CAAC,CAAA;IACpG,MAAM,CAAC,GAAG,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;IACvC,IAAI,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAA;IAClD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,YAAY,CAAE,GAAQ;IACpC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAA;IACnC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,2BAA2B,CAAA;IAC5D,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,4CAA4C,CAAA;IACnF,IAAI,IAAI,CAAC,iBAAiB,EAAE,EAAE,KAAK,GAAG,CAAC,SAAS;QAAE,OAAO,qCAAqC,CAAA;IAC9F,IAAI,GAAG,CAAC,QAAQ,EAAE,SAAS,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC;QAAE,OAAO,mCAAmC,CAAA;IACrK,OAAO,IAAI,CAAA;AACb,CAAC","sourcesContent":["// encounter — the Encounter Layer: how two people record that they met.\n//\n// The one registered ceremony (encounter-scan), the contact card each\n// side displays, the challenge that makes an enactment fresh, the\n// enactment binding both sides compute independently, and the encounter\n// credential each issues about the other.\n//\n// The binding is what makes the pair an enactment rather than two\n// unrelated claims: both sides derive it from the same two challenges,\n// sorted, so neither can steer it.\nimport { digestDoc, diSign, diVerify, edRawOfAnchor, xRawOfMk } from './crypto.js'\nimport type { Signer } from './crypto.js'\nimport { b64uOf, calOK, iso, makeValidator, sameDigest } from './core.js'\nimport { SCHEMAS } from './schemas.js'\nexport { iso }\n\n// ── wire builders (Encounter 0.31: card 0.25, credential 0.26) ─────────\nexport const CEREMONY = 'encounter-scan@0.25'\nexport const CARD_VERSION = 'rltp-card/0.25'\n/** The credential form this library issues (Encounter 7.2). */\nexport const CRED_FORMAT = 'rltp-encounter-credential/0.26'\n/** The DTG credential context, DTG Credentials WD 0.6.0 (exact bytes; the\n *  document is pinned by SHA-256 in contexts/dtg-v1.jsonld). */\nexport const DTG_CONTEXT = 'https://registry.trustoverip.org/dtg/context/v1'\n/** The pinned context set of the 0.26 credential (Encounter 2.3, RLTP-ENC-2250). */\nexport const CRED_CONTEXT: readonly string[] = Object.freeze(['https://www.w3.org/ns/credentials/v2', DTG_CONTEXT, 'https://real-life.org/rltp/v1'])\n/** Every credential format a verifier of this version knows, with its schema\n *  file. A held 0.25 credential stays valid under its own format (7.3, 12). */\nexport const CRED_FORMATS: Readonly<Record<string, string>> = Object.freeze({\n  'rltp-encounter-credential/0.26': 'encounter-credential-0.26.schema.json',\n  'rltp-encounter-credential/0.25': 'encounter-credential-0.25.schema.json',\n})\n/** The schema file a credential is validated against, by the format it\n *  names — null for an unknown format (ERR_VERSION at 5.6 step 1). */\nexport const credentialSchemaOf = (cred: unknown): string | null => {\n  const f = (cred as { credentialSubject?: { format?: unknown } } | null)?.credentialSubject?.format\n  return typeof f === 'string' && Object.prototype.hasOwnProperty.call(CRED_FORMATS, f) ? CRED_FORMATS[f] : null\n}\nexport const binding = (ceremony: string, c1: string, c2: string): Promise<string> => digestDoc({ ceremony, challenges: [c1, c2].sort() })\nexport const challengeOf = (bytes17: Uint8Array): string => {\n  // a producer never emits what every conformant receiver must reject:\n  // the challenge is EXACTLY 17 random bytes (>= 128 bits, Encounter §5)\n  if (!(bytes17 instanceof Uint8Array) || bytes17.length !== 17) throw new Error('challenge entropy must be exactly 17 bytes')\n  return challengeOfUnchecked(bytes17)\n}\nconst challengeOfUnchecked = (bytes17: Uint8Array): string => b64uOf(bytes17).slice(0, 22)\n\n// cards carry no @context (the proof carries none either — W3C-true)\nexport const signCard = (ctx: Signer, body: CardBody, created: string) => diSign(ctx, body, created)\n\n/** The challenge a displayed card carries: fresh value, whole-second issue time. */\nexport interface Challenge { value: string, issuedAt: string }\n\n/**\n * The spec knows exactly two disjoint card profiles (Encounter §5):\n * a DISPLAYED card offers a challenge; a SENT card names its recipient\n * AND the challenge it answers — always both, never one (M-2, review 1:\n * the fields travel together or the card is neither profile).\n */\nexport type CardFields =\n  | { name?: string, challenge?: Challenge, sentTo?: undefined, boundTo?: undefined }\n  | { name?: string, challenge?: Challenge, sentTo: string, boundTo: string }\n\n/** A card body as it goes under the signature. */\nexport interface CardBody {\n  version: string\n  anchor: string\n  keyAgreement: string\n  name?: string\n  challenge?: Challenge\n  sentTo?: string\n  boundTo?: string\n}\n\nexport function cardBody (ctx: { anchor: string, keyAgreement: string }, fields: CardFields = {}): CardBody {\n  const { name, challenge, sentTo, boundTo } = fields as { name?: string, challenge?: Challenge, sentTo?: string, boundTo?: string }\n  // runtime guard for JS callers the union cannot reach: the sent-card\n  // profile is atomic — half of it is not a card of either profile\n  if ((sentTo === undefined) !== (boundTo === undefined)) throw new Error('a sent card carries sentTo AND boundTo together (Encounter §5)')\n  const b: CardBody = { version: CARD_VERSION, anchor: ctx.anchor, keyAgreement: ctx.keyAgreement }\n  if (name !== undefined) b.name = name\n  if (challenge !== undefined) b.challenge = challenge\n  if (sentTo !== undefined) { b.sentTo = sentTo; b.boundTo = boundTo }\n  return b\n}\n/** The unsigned body of a step credential (Encounter 7.2): issuer, the\n *  subject, the subject's challenge and the enactment binding. */\nexport const credentialBody = (\n  issuerAnchor: string, subjectAnchor: string, ceremony: string,\n  subjectChallenge: string, enactmentBinding: string, whenIso: string,\n) => ({\n  '@context': [...CRED_CONTEXT],\n  type: ['VerifiableCredential', 'DTGCredential', 'RelationshipCredential', 'EncounterCredential'],\n  issuer: issuerAnchor,\n  // the issuer is a fresh pair anchor, known to exactly one counterparty (4.4)\n  issuerScope: 'pairwise',\n  validFrom: whenIso,\n  credentialSubject: { id: subjectAnchor, format: CRED_FORMAT, ceremony, challenge: subjectChallenge, enactmentBinding },\n})\nexport async function issueCredential (\n  ctx: Signer, subjectAnchor: string, ceremony: string,\n  subjectChallenge: string, enactmentBinding: string, whenIso: string,\n) {\n  return diSign(ctx, credentialBody(ctx.anchor, subjectAnchor, ceremony, subjectChallenge, enactmentBinding, whenIso), whenIso)\n}\n\n\n// ── the ceremony's pure checks (Encounter 0.31 §5–§7, Delivery 4.1/4.3) ──\n// The task types, the §9 constants, the whole-second time rules, the card\n// check, the 5.6 credential checks in their normative order, and the\n// outer/inner forms of the two carriers. State-free: what needs the\n// own-challenge state or the records is the holder's (encounter/ceremony.ts).\nconst TT = 'https://real-life.org/trust-tasks/'\n/** The scanner's sent card and step credential (Delivery 4.1). */\nexport const BUNDLE_TYPE = TT + 'encounter-bundle/0.1'\n/** The counter-step or a standalone credential delivery (Delivery 4.3). */\nexport const DELIVERY_TYPE = TT + 'encounter-credential-delivery/0.1'\n// Encounter §9 operational constants (ms)\nexport const CHALLENGE_MAX_AGE = 5 * 60_000     // PT5M\nexport const ISSUANCE_WINDOW = 24 * 3_600_000   // PT24H\nexport const SKEW_TOLERANCE = 5 * 60_000        // PT5M\n\nconst VAL = makeValidator(SCHEMAS)\nconst schemaOk = (file: string, data: unknown): boolean => VAL.validate(data, SCHEMAS[file], SCHEMAS[file]).length === 0\n\n/** Whole seconds (2.3). */\nconst sec = (ms: number): number => Math.floor(ms / 1000)\nconst secIso = (t: string): number => Math.floor(Date.parse(t) / 1000)\n/** 5.5's explicit future check: t_ch ≤ now + skew, whole seconds. */\nexport const futureOk = (tCh: number, now: number): boolean => sec(tCh) <= sec(now) + SKEW_TOLERANCE / 1000\n/** Is a challenge issued at tCh past its age bound at `now` (5190)? */\nexport const challengeAged = (tCh: number, now: number): boolean => sec(now) > sec(tCh) + (CHALLENGE_MAX_AGE + SKEW_TOLERANCE) / 1000\n/** The producer's mirror of 5.6 step 6: may a credential binding a\n *  challenge issued at tChMs still be issued now? */\nexport const issuanceOpen = (tChMs: number, now: number): boolean => {\n  const skew = SKEW_TOLERANCE / 1000\n  return sec(now) >= sec(tChMs) - skew && sec(now) <= sec(tChMs) + (CHALLENGE_MAX_AGE + ISSUANCE_WINDOW) / 1000 + skew\n}\n/** The last millisecond a credential binding a challenge issued at tChMs may carry (5.6 step 6). */\nexport const issuanceEnd = (tChMs: number): number => (sec(tChMs) + (CHALLENGE_MAX_AGE + ISSUANCE_WINDOW + SKEW_TOLERANCE) / 1000) * 1000 + 999\n\n/** Producer-side profile discipline (Delivery 3): UUID v4 ids and threads. */\nconst UUID_V4 = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i\nexport const uuidOk = (v: unknown): boolean => typeof v === 'string' && UUID_V4.test(v)\n\nexport const CARD_SCHEMA = 'contact-card-0.25.schema.json'\n/** A card for an enactment (Encounter 6): schema-valid, its version known,\n *  a challenge, calendar-valid times, keys that decode, the proof under the\n *  anchor. null when it passes, else the reason. */\nexport async function cardOk (card: any, subtle?: SubtleCrypto): Promise<string | null> {\n  if (!schemaOk(CARD_SCHEMA, card)) return 'card fails contact-card-0.25 schema'\n  if (card.version !== CARD_VERSION) return 'card version unknown'\n  if (!card.challenge) return 'card without challenge (enactment use requires one)'\n  if (!calOK(card.challenge.issuedAt) || !calOK(card.proof?.created)) return 'card: calendar-invalid timestamp'\n  if (!xRawOfMk(card.keyAgreement) || !edRawOfAnchor(card.anchor)) return 'card keyAgreement does not decode (x25519-pub + 32 bytes, 2.3)'\n  if (!(await diVerify(card, card.anchor, subtle))) return 'card proof'\n  return null\n}\n\n/** The 5.6 rejection codes. */\nexport type CredError = 'ERR_VERSION' | 'ERR_SIG' | 'ERR_ADDRESSEE' | 'ERR_NO_RECORD' | 'ERR_CEREMONY' | 'ERR_STALE_ISSUANCE' | 'ERR_BINDING' | 'ERR_CONFLICT'\n\n/** 5.6 step 1, format: a KNOWN format validated against ITS schema (0.26,\n *  or a held 0.25 — 7.3, 12), ceremony and version known, calendar-valid\n *  times, the digest a multihash, keys that decode (2.3). `ceremonyHere`:\n *  5.6 checks the ceremony at step 1; a bundle checks it at Delivery 4.1's\n *  check 5. */\nexport function credFormat (cred: any, ceremonyHere = true): CredError | null {\n  const schema = credentialSchemaOf(cred)\n  if (schema === null || !schemaOk(schema, cred)) return 'ERR_VERSION'\n  if (ceremonyHere && cred.credentialSubject.ceremony !== CEREMONY) return 'ERR_VERSION'\n  if (!calOK(cred.validFrom) || !calOK(cred.proof?.created)) return 'ERR_VERSION'\n  if (!sameDigest(cred.credentialSubject.enactmentBinding, cred.credentialSubject.enactmentBinding)) return 'ERR_VERSION'\n  if (!edRawOfAnchor(cred.issuer) || !edRawOfAnchor(cred.credentialSubject.id)) return 'ERR_VERSION'\n  const vm = String(cred.proof?.verificationMethod ?? ''), hash = vm.indexOf('#')\n  if (hash < 0 || !edRawOfAnchor(vm.slice(0, hash)) || !edRawOfAnchor('did:key:' + vm.slice(hash + 1))) return 'ERR_VERSION'\n  return null\n}\n\n/** 5.6 steps 1–3: format, signature, addressee (`localAnchor`). */\nexport async function credHead (cred: any, localAnchor: string, ceremonyHere = true, subtle?: SubtleCrypto): Promise<CredError | null> {\n  const f = credFormat(cred, ceremonyHere)\n  if (f) return f\n  if (!(await diVerify(cred, cred.issuer, subtle))) return 'ERR_SIG'\n  if (cred.credentialSubject.id !== localAnchor) return 'ERR_ADDRESSEE'\n  return null\n}\n\n/** 5.6 step 6: the issuance window, whole seconds, inclusive, skew widens. */\nexport function windowOk (cred: any, tChMs: number): boolean {\n  const tCh = sec(tChMs), vf = secIso(cred.validFrom), cr = secIso(cred.proof.created), skew = SKEW_TOLERANCE / 1000\n  const lo = tCh - skew, hi = tCh + (CHALLENGE_MAX_AGE + ISSUANCE_WINDOW) / 1000 + skew\n  return !(vf < lo || vf > hi || cr < lo || cr > hi || cr < vf - skew)\n}\n\n/** What 5.6 steps 4–7 read of a record. */\nexport interface RecordFacts { counterpart: string, ceremony: string, tCh: number, bind: string }\n\n/** 5.6 steps 4–7 against a record, synchronous. `order`: 'credential' —\n *  5.6: record, ceremony, window, binding; 'bundle' — Delivery 4.1:\n *  record, ceremony, binding, window. */\nexport function acceptTail (cred: any, rec: RecordFacts | undefined, order: 'credential' | 'bundle'): CredError | null {\n  if (!rec || rec.counterpart !== cred.issuer) return 'ERR_NO_RECORD'\n  if (cred.credentialSubject.ceremony !== rec.ceremony) return 'ERR_CEREMONY'\n  const bindOk = sameDigest(cred.credentialSubject.enactmentBinding, rec.bind)\n  if (order === 'bundle' && !bindOk) return 'ERR_BINDING'\n  if (!windowOk(cred, rec.tCh)) return 'ERR_STALE_ISSUANCE'\n  if (!bindOk) return 'ERR_BINDING'\n  return null\n}\n\n/** Delivery 4.1/4.3: ERR_STALE_ISSUANCE is stale-issuance, every other\n *  rejection validation-failed. */\nexport const dispositionOf = (e: CredError): 'stale-issuance' | 'validation-failed' => (e === 'ERR_STALE_ISSUANCE' ? 'stale-issuance' : 'validation-failed')\n\n/**\n * The bundle's context-free checks of Delivery 4.1 check 1 (stage 8,\n * after the payload schema): calendars, the outer/inner equalities, the\n * sent card's binding, a present ceremony.enactment, the card's version\n * and keys, the credential's format (its ceremony at check 5). null when\n * they pass, else the reason, with the 4.1 disposition.\n */\nexport function bundleForm (doc: any): { reason: 'validation-failed' | 'stale-issuance', why: string } | null {\n  const { card, credential } = doc.payload\n  const v = (why: string) => ({ reason: 'validation-failed' as const, why })\n  if (!calOK(doc.issuedAt) || !calOK(card.challenge?.issuedAt) || !calOK(card.proof?.created)) return v('calendar-invalid issuedAt')\n  if (doc.issuer !== card.anchor || card.anchor !== credential.issuer) return v('outer binding (issuer = card.anchor = credential.issuer)')\n  if (credential.credentialSubject?.id !== doc.recipient) return v('outer binding (recipient = subject)')\n  if (card.sentTo !== doc.recipient || card.boundTo !== credential.credentialSubject.challenge) return v('sent card binding (sentTo/boundTo)')\n  if (card.challenge.value === card.boundTo) return v('sent challenge equals the displayed challenge (5.3)')\n  if (doc.ceremony?.enactment !== undefined && !sameDigest(doc.ceremony.enactment, credential.credentialSubject.enactmentBinding)) return v('ceremony.enactment recomputes not')\n  if (card.version !== CARD_VERSION || !card.challenge) return v('card version/challenge')\n  if (!xRawOfMk(card.keyAgreement) || !edRawOfAnchor(card.anchor)) return v('card keys do not decode')\n  const f = credFormat(credential, false)\n  if (f) return { reason: dispositionOf(f), why: f }\n  return null\n}\n\n/** The credential delivery's outer/inner consistency (Delivery 4.3). */\nexport function deliveryForm (doc: any): string | null {\n  const cred = doc.payload.credential\n  if (!calOK(doc.issuedAt)) return 'calendar-invalid issuedAt'\n  if (doc.issuer !== cred.issuer) return 'outer binding (issuer = credential.issuer)'\n  if (cred.credentialSubject?.id !== doc.recipient) return 'outer binding (recipient = subject)'\n  if (doc.ceremony?.enactment !== undefined && !sameDigest(doc.ceremony.enactment, cred.credentialSubject.enactmentBinding)) return 'ceremony.enactment recomputes not'\n  return null\n}\n"]}
+{"version":3,"file":"encounter.js","sourceRoot":"","sources":["../src/encounter.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,EAAE;AACF,sEAAsE;AACtE,kEAAkE;AAClE,wEAAwE;AACxE,0CAA0C;AAC1C,EAAE;AACF,kEAAkE;AAClE,uEAAuE;AACvE,mCAAmC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAElF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,GAAG,EAAE,CAAA;AAEd,0EAA0E;AAC1E,MAAM,CAAC,MAAM,QAAQ,GAAG,qBAAqB,CAAA;AAC7C,MAAM,CAAC,MAAM,YAAY,GAAG,gBAAgB,CAAA;AAC5C,+DAA+D;AAC/D,MAAM,CAAC,MAAM,WAAW,GAAG,gCAAgC,CAAA;AAC3D;gEACgE;AAChE,MAAM,CAAC,MAAM,WAAW,GAAG,iDAAiD,CAAA;AAC5E,oFAAoF;AACpF,MAAM,CAAC,MAAM,YAAY,GAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,sCAAsC,EAAE,WAAW,EAAE,+BAA+B,CAAC,CAAC,CAAA;AACpJ;+EAC+E;AAC/E,MAAM,CAAC,MAAM,YAAY,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC1E,gCAAgC,EAAE,uCAAuC;IACzE,gCAAgC,EAAE,uCAAuC;CAC1E,CAAC,CAAA;AACF;sEACsE;AACtE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAAa,EAAiB,EAAE;IACjE,MAAM,CAAC,GAAI,IAA4D,EAAE,iBAAiB,EAAE,MAAM,CAAA;IAClG,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAChH,CAAC,CAAA;AACD,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAE,EAAU,EAAE,EAAU,EAAmB,EAAE,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;AAC1I,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAmB,EAAU,EAAE;IACzD,qEAAqE;IACrE,uEAAuE;IACvE,IAAI,CAAC,CAAC,OAAO,YAAY,UAAU,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IAC5H,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAA;AACtC,CAAC,CAAA;AACD,MAAM,oBAAoB,GAAG,CAAC,OAAmB,EAAU,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAE1F,qEAAqE;AACrE,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,IAAc,EAAE,OAAe,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;AA4BpG,MAAM,UAAU,QAAQ,CAAE,GAA6C,EAAE,SAAqB,EAAE;IAC9F,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAA+G,CAAA;IAC3K,qEAAqE;IACrE,iEAAiE;IACjE,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAA;IACzI,MAAM,CAAC,GAAa,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAA;IACjG,IAAI,IAAI,KAAK,SAAS;QAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAA;IACrC,IAAI,aAAa,KAAK,SAAS;QAAE,CAAC,CAAC,aAAa,GAAG,CAAC,GAAG,aAAa,CAAC,CAAA;IACrE,IAAI,SAAS,KAAK,SAAS;QAAE,CAAC,CAAC,SAAS,GAAG,SAAS,CAAA;IACpD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAAC,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC;QAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CAAA;IAAC,CAAC;IACpE,OAAO,CAAC,CAAA;AACV,CAAC;AACD;kEACkE;AAClE,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,YAAoB,EAAE,aAAqB,EAAE,QAAgB,EAC7D,gBAAwB,EAAE,gBAAwB,EAAE,OAAe,EACnE,EAAE,CAAC,CAAC;IACJ,UAAU,EAAE,CAAC,GAAG,YAAY,CAAC;IAC7B,IAAI,EAAE,CAAC,sBAAsB,EAAE,eAAe,EAAE,wBAAwB,EAAE,qBAAqB,CAAC;IAChG,MAAM,EAAE,YAAY;IACpB,6EAA6E;IAC7E,WAAW,EAAE,UAAU;IACvB,SAAS,EAAE,OAAO;IAClB,iBAAiB,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,EAAE;CACvH,CAAC,CAAA;AACF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EAAE,aAAqB,EAAE,QAAgB,EACpD,gBAAwB,EAAE,gBAAwB,EAAE,OAAe;IAEnE,OAAO,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;AAC/H,CAAC;AAGD,4EAA4E;AAC5E,0EAA0E;AAC1E,qEAAqE;AACrE,oEAAoE;AACpE,8EAA8E;AAC9E,MAAM,EAAE,GAAG,oCAAoC,CAAA;AAC/C,kEAAkE;AAClE,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,GAAG,sBAAsB,CAAA;AACtD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,GAAG,mCAAmC,CAAA;AACrE,0CAA0C;AAC1C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAG,MAAM,CAAA,CAAK,OAAO;AACvD,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,SAAS,CAAA,CAAG,QAAQ;AACxD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAG,MAAM,CAAA,CAAQ,OAAO;AAEvD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;AAClC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,IAAa,EAAW,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAA;AAExH,2BAA2B;AAC3B,MAAM,GAAG,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAA;AACzD,MAAM,MAAM,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;AACtE,qEAAqE;AACrE,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,GAAW,EAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,cAAc,GAAG,IAAI,CAAA;AAC3G,uEAAuE;AACvE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAW,EAAE,GAAW,EAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,GAAG,cAAc,CAAC,GAAG,IAAI,CAAA;AACrI;qDACqD;AACrD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,GAAW,EAAW,EAAE;IAClE,MAAM,IAAI,GAAG,cAAc,GAAG,IAAI,CAAA;IAClC,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,GAAG,eAAe,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AACtH,CAAC,CAAA;AACD,oGAAoG;AACpG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,GAAG,eAAe,GAAG,cAAc,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,GAAG,GAAG,CAAA;AAE/I,8EAA8E;AAC9E,MAAM,OAAO,GAAG,wEAAwE,CAAA;AACxF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAEvF,MAAM,CAAC,MAAM,WAAW,GAAG,+BAA+B,CAAA;AAC1D;;oDAEoD;AACpD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAE,IAAS,EAAE,MAAqB;IAC5D,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;QAAE,OAAO,qCAAqC,CAAA;IAC9E,IAAI,IAAI,CAAC,OAAO,KAAK,YAAY;QAAE,OAAO,sBAAsB,CAAA;IAChE,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,qDAAqD,CAAA;IACjF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;QAAE,OAAO,kCAAkC,CAAA;IAC7G,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,gEAAgE,CAAA;IACxI,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,YAAY,CAAA;IACrE,OAAO,IAAI,CAAA;AACb,CAAC;AAKD;;;;eAIe;AACf,MAAM,UAAU,UAAU,CAAE,IAAS,EAAE,YAAY,GAAG,IAAI;IACxD,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACvC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;QAAE,OAAO,aAAa,CAAA;IACpE,IAAI,YAAY,IAAI,IAAI,CAAC,iBAAiB,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,aAAa,CAAA;IACtF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;QAAE,OAAO,aAAa,CAAA;IAC/E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC;QAAE,OAAO,aAAa,CAAA;IACvH,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAAE,OAAO,aAAa,CAAA;IAClG,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,kBAAkB,IAAI,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC/E,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,aAAa,CAAA;IAC1H,OAAO,IAAI,CAAA;AACb,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAE,IAAS,EAAE,WAAmB,EAAE,YAAY,GAAG,IAAI,EAAE,MAAqB;IACxG,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IACxC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAA;IACf,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IAClE,IAAI,IAAI,CAAC,iBAAiB,CAAC,EAAE,KAAK,WAAW;QAAE,OAAO,eAAe,CAAA;IACrE,OAAO,IAAI,CAAA;AACb,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,QAAQ,CAAE,IAAS,EAAE,KAAa;IAChD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,GAAG,cAAc,GAAG,IAAI,CAAA;IAClH,MAAM,EAAE,GAAG,GAAG,GAAG,IAAI,EAAE,EAAE,GAAG,GAAG,GAAG,CAAC,iBAAiB,GAAG,eAAe,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;IACrF,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;AACtE,CAAC;AAKD;;yCAEyC;AACzC,MAAM,UAAU,UAAU,CAAE,IAAS,EAAE,GAA4B,EAAE,KAA8B;IACjG,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,eAAe,CAAA;IACnE,IAAI,IAAI,CAAC,iBAAiB,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ;QAAE,OAAO,cAAc,CAAA;IAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;IAC5E,IAAI,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM;QAAE,OAAO,aAAa,CAAA;IACvD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,oBAAoB,CAAA;IACzD,IAAI,CAAC,MAAM;QAAE,OAAO,aAAa,CAAA;IACjC,OAAO,IAAI,CAAA;AACb,CAAC;AAED;mCACmC;AACnC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAY,EAA0C,EAAE,CAAC,CAAC,CAAC,KAAK,oBAAoB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAA;AAE5J;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAE,GAAQ;IAClC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,OAAO,CAAA;IACxC,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,mBAA4B,EAAE,GAAG,EAAE,CAAC,CAAA;IAC1E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;QAAE,OAAO,CAAC,CAAC,2BAA2B,CAAC,CAAA;IAClI,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC,0DAA0D,CAAC,CAAA;IACzI,IAAI,UAAU,CAAC,iBAAiB,EAAE,EAAE,KAAK,GAAG,CAAC,SAAS;QAAE,OAAO,CAAC,CAAC,qCAAqC,CAAC,CAAA;IACvG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,iBAAiB,CAAC,SAAS;QAAE,OAAO,CAAC,CAAC,oCAAoC,CAAC,CAAA;IAC5I,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,CAAC,qDAAqD,CAAC,CAAA;IAC1G,IAAI,GAAG,CAAC,QAAQ,EAAE,SAAS,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC,iBAAiB,CAAC,gBAAgB,CAAC;QAAE,OAAO,CAAC,CAAC,mCAAmC,CAAC,CAAA;IAC9K,IAAI,IAAI,CAAC,OAAO,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,CAAC,wBAAwB,CAAC,CAAA;IACxF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,CAAC,yBAAyB,CAAC,CAAA;IACpG,MAAM,CAAC,GAAG,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;IACvC,IAAI,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAA;IAClD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,YAAY,CAAE,GAAQ;IACpC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAA;IACnC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,2BAA2B,CAAA;IAC5D,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,4CAA4C,CAAA;IACnF,IAAI,IAAI,CAAC,iBAAiB,EAAE,EAAE,KAAK,GAAG,CAAC,SAAS;QAAE,OAAO,qCAAqC,CAAA;IAC9F,IAAI,GAAG,CAAC,QAAQ,EAAE,SAAS,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC;QAAE,OAAO,mCAAmC,CAAA;IACrK,OAAO,IAAI,CAAA;AACb,CAAC","sourcesContent":["// encounter — the Encounter Layer: how two people record that they met.\n//\n// The one registered ceremony (encounter-scan), the contact card each\n// side displays, the challenge that makes an enactment fresh, the\n// enactment binding both sides compute independently, and the encounter\n// credential each issues about the other.\n//\n// The binding is what makes the pair an enactment rather than two\n// unrelated claims: both sides derive it from the same two challenges,\n// sorted, so neither can steer it.\nimport { digestDoc, diSign, diVerify, edRawOfAnchor, xRawOfMk } from './crypto.js'\nimport type { Signer } from './crypto.js'\nimport { b64uOf, calOK, iso, makeValidator, sameDigest } from './core.js'\nimport { SCHEMAS } from './schemas.js'\nexport { iso }\n\n// ── wire builders (Encounter 0.31: card 0.25, credential 0.26) ─────────\nexport const CEREMONY = 'encounter-scan@0.25'\nexport const CARD_VERSION = 'rltp-card/0.25'\n/** The credential form this library issues (Encounter 7.2). */\nexport const CRED_FORMAT = 'rltp-encounter-credential/0.26'\n/** The DTG credential context, DTG Credentials WD 0.6.0 (exact bytes; the\n *  document is pinned by SHA-256 in contexts/dtg-v1.jsonld). */\nexport const DTG_CONTEXT = 'https://registry.trustoverip.org/dtg/context/v1'\n/** The pinned context set of the 0.26 credential (Encounter 2.3, RLTP-ENC-2250). */\nexport const CRED_CONTEXT: readonly string[] = Object.freeze(['https://www.w3.org/ns/credentials/v2', DTG_CONTEXT, 'https://real-life.org/rltp/v1'])\n/** Every credential format a verifier of this version knows, with its schema\n *  file. A held 0.25 credential stays valid under its own format (7.3, 12). */\nexport const CRED_FORMATS: Readonly<Record<string, string>> = Object.freeze({\n  'rltp-encounter-credential/0.26': 'encounter-credential-0.26.schema.json',\n  'rltp-encounter-credential/0.25': 'encounter-credential-0.25.schema.json',\n})\n/** The schema file a credential is validated against, by the format it\n *  names — null for an unknown format (ERR_VERSION at 5.6 step 1). */\nexport const credentialSchemaOf = (cred: unknown): string | null => {\n  const f = (cred as { credentialSubject?: { format?: unknown } } | null)?.credentialSubject?.format\n  return typeof f === 'string' && Object.prototype.hasOwnProperty.call(CRED_FORMATS, f) ? CRED_FORMATS[f] : null\n}\nexport const binding = (ceremony: string, c1: string, c2: string): Promise<string> => digestDoc({ ceremony, challenges: [c1, c2].sort() })\nexport const challengeOf = (bytes17: Uint8Array): string => {\n  // a producer never emits what every conformant receiver must reject:\n  // the challenge is EXACTLY 17 random bytes (>= 128 bits, Encounter §5)\n  if (!(bytes17 instanceof Uint8Array) || bytes17.length !== 17) throw new Error('challenge entropy must be exactly 17 bytes')\n  return challengeOfUnchecked(bytes17)\n}\nconst challengeOfUnchecked = (bytes17: Uint8Array): string => b64uOf(bytes17).slice(0, 22)\n\n// cards carry no @context (the proof carries none either — W3C-true)\nexport const signCard = (ctx: Signer, body: CardBody, created: string) => diSign(ctx, body, created)\n\n/** The challenge a displayed card carries: fresh value, whole-second issue time. */\nexport interface Challenge { value: string, issuedAt: string }\n\n/**\n * The spec knows exactly two disjoint card profiles (Encounter §5):\n * a DISPLAYED card offers a challenge; a SENT card names its recipient\n * AND the challenge it answers — always both, never one (M-2, review 1:\n * the fields travel together or the card is neither profile).\n */\nexport type CardFields =\n  | { name?: string, deliveryHints?: string[], challenge?: Challenge, sentTo?: undefined, boundTo?: undefined }\n  | { name?: string, deliveryHints?: string[], challenge?: Challenge, sentTo: string, boundTo: string }\n\n/** A card body as it goes under the signature. */\nexport interface CardBody {\n  version: string\n  anchor: string\n  keyAgreement: string\n  name?: string\n  /** Encounter 6080, 6090: opaque strings whose form the carrier profile that names them defines */\n  deliveryHints?: string[]\n  challenge?: Challenge\n  sentTo?: string\n  boundTo?: string\n}\n\nexport function cardBody (ctx: { anchor: string, keyAgreement: string }, fields: CardFields = {}): CardBody {\n  const { name, deliveryHints, challenge, sentTo, boundTo } = fields as { name?: string, deliveryHints?: string[], challenge?: Challenge, sentTo?: string, boundTo?: string }\n  // runtime guard for JS callers the union cannot reach: the sent-card\n  // profile is atomic — half of it is not a card of either profile\n  if ((sentTo === undefined) !== (boundTo === undefined)) throw new Error('a sent card carries sentTo AND boundTo together (Encounter §5)')\n  const b: CardBody = { version: CARD_VERSION, anchor: ctx.anchor, keyAgreement: ctx.keyAgreement }\n  if (name !== undefined) b.name = name\n  if (deliveryHints !== undefined) b.deliveryHints = [...deliveryHints]\n  if (challenge !== undefined) b.challenge = challenge\n  if (sentTo !== undefined) { b.sentTo = sentTo; b.boundTo = boundTo }\n  return b\n}\n/** The unsigned body of a step credential (Encounter 7.2): issuer, the\n *  subject, the subject's challenge and the enactment binding. */\nexport const credentialBody = (\n  issuerAnchor: string, subjectAnchor: string, ceremony: string,\n  subjectChallenge: string, enactmentBinding: string, whenIso: string,\n) => ({\n  '@context': [...CRED_CONTEXT],\n  type: ['VerifiableCredential', 'DTGCredential', 'RelationshipCredential', 'EncounterCredential'],\n  issuer: issuerAnchor,\n  // the issuer is a fresh pair anchor, known to exactly one counterparty (4.4)\n  issuerScope: 'pairwise',\n  validFrom: whenIso,\n  credentialSubject: { id: subjectAnchor, format: CRED_FORMAT, ceremony, challenge: subjectChallenge, enactmentBinding },\n})\nexport async function issueCredential (\n  ctx: Signer, subjectAnchor: string, ceremony: string,\n  subjectChallenge: string, enactmentBinding: string, whenIso: string,\n) {\n  return diSign(ctx, credentialBody(ctx.anchor, subjectAnchor, ceremony, subjectChallenge, enactmentBinding, whenIso), whenIso)\n}\n\n\n// ── the ceremony's pure checks (Encounter 0.31 §5–§7, Delivery 4.1/4.3) ──\n// The task types, the §9 constants, the whole-second time rules, the card\n// check, the 5.6 credential checks in their normative order, and the\n// outer/inner forms of the two carriers. State-free: what needs the\n// own-challenge state or the records is the holder's (encounter/ceremony.ts).\nconst TT = 'https://real-life.org/trust-tasks/'\n/** The scanner's sent card and step credential (Delivery 4.1). */\nexport const BUNDLE_TYPE = TT + 'encounter-bundle/0.1'\n/** The counter-step or a standalone credential delivery (Delivery 4.3). */\nexport const DELIVERY_TYPE = TT + 'encounter-credential-delivery/0.1'\n// Encounter §9 operational constants (ms)\nexport const CHALLENGE_MAX_AGE = 5 * 60_000     // PT5M\nexport const ISSUANCE_WINDOW = 24 * 3_600_000   // PT24H\nexport const SKEW_TOLERANCE = 5 * 60_000        // PT5M\n\nconst VAL = makeValidator(SCHEMAS)\nconst schemaOk = (file: string, data: unknown): boolean => VAL.validate(data, SCHEMAS[file], SCHEMAS[file]).length === 0\n\n/** Whole seconds (2.3). */\nconst sec = (ms: number): number => Math.floor(ms / 1000)\nconst secIso = (t: string): number => Math.floor(Date.parse(t) / 1000)\n/** 5.5's explicit future check: t_ch ≤ now + skew, whole seconds. */\nexport const futureOk = (tCh: number, now: number): boolean => sec(tCh) <= sec(now) + SKEW_TOLERANCE / 1000\n/** Is a challenge issued at tCh past its age bound at `now` (5190)? */\nexport const challengeAged = (tCh: number, now: number): boolean => sec(now) > sec(tCh) + (CHALLENGE_MAX_AGE + SKEW_TOLERANCE) / 1000\n/** The producer's mirror of 5.6 step 6: may a credential binding a\n *  challenge issued at tChMs still be issued now? */\nexport const issuanceOpen = (tChMs: number, now: number): boolean => {\n  const skew = SKEW_TOLERANCE / 1000\n  return sec(now) >= sec(tChMs) - skew && sec(now) <= sec(tChMs) + (CHALLENGE_MAX_AGE + ISSUANCE_WINDOW) / 1000 + skew\n}\n/** The last millisecond a credential binding a challenge issued at tChMs may carry (5.6 step 6). */\nexport const issuanceEnd = (tChMs: number): number => (sec(tChMs) + (CHALLENGE_MAX_AGE + ISSUANCE_WINDOW + SKEW_TOLERANCE) / 1000) * 1000 + 999\n\n/** Producer-side profile discipline (Delivery 3): UUID v4 ids and threads. */\nconst UUID_V4 = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i\nexport const uuidOk = (v: unknown): boolean => typeof v === 'string' && UUID_V4.test(v)\n\nexport const CARD_SCHEMA = 'contact-card-0.25.schema.json'\n/** A card for an enactment (Encounter 6): schema-valid, its version known,\n *  a challenge, calendar-valid times, keys that decode, the proof under the\n *  anchor. null when it passes, else the reason. */\nexport async function cardOk (card: any, subtle?: SubtleCrypto): Promise<string | null> {\n  if (!schemaOk(CARD_SCHEMA, card)) return 'card fails contact-card-0.25 schema'\n  if (card.version !== CARD_VERSION) return 'card version unknown'\n  if (!card.challenge) return 'card without challenge (enactment use requires one)'\n  if (!calOK(card.challenge.issuedAt) || !calOK(card.proof?.created)) return 'card: calendar-invalid timestamp'\n  if (!xRawOfMk(card.keyAgreement) || !edRawOfAnchor(card.anchor)) return 'card keyAgreement does not decode (x25519-pub + 32 bytes, 2.3)'\n  if (!(await diVerify(card, card.anchor, subtle))) return 'card proof'\n  return null\n}\n\n/** The 5.6 rejection codes. */\nexport type CredError = 'ERR_VERSION' | 'ERR_SIG' | 'ERR_ADDRESSEE' | 'ERR_NO_RECORD' | 'ERR_CEREMONY' | 'ERR_STALE_ISSUANCE' | 'ERR_BINDING' | 'ERR_CONFLICT'\n\n/** 5.6 step 1, format: a KNOWN format validated against ITS schema (0.26,\n *  or a held 0.25 — 7.3, 12), ceremony and version known, calendar-valid\n *  times, the digest a multihash, keys that decode (2.3). `ceremonyHere`:\n *  5.6 checks the ceremony at step 1; a bundle checks it at Delivery 4.1's\n *  check 5. */\nexport function credFormat (cred: any, ceremonyHere = true): CredError | null {\n  const schema = credentialSchemaOf(cred)\n  if (schema === null || !schemaOk(schema, cred)) return 'ERR_VERSION'\n  if (ceremonyHere && cred.credentialSubject.ceremony !== CEREMONY) return 'ERR_VERSION'\n  if (!calOK(cred.validFrom) || !calOK(cred.proof?.created)) return 'ERR_VERSION'\n  if (!sameDigest(cred.credentialSubject.enactmentBinding, cred.credentialSubject.enactmentBinding)) return 'ERR_VERSION'\n  if (!edRawOfAnchor(cred.issuer) || !edRawOfAnchor(cred.credentialSubject.id)) return 'ERR_VERSION'\n  const vm = String(cred.proof?.verificationMethod ?? ''), hash = vm.indexOf('#')\n  if (hash < 0 || !edRawOfAnchor(vm.slice(0, hash)) || !edRawOfAnchor('did:key:' + vm.slice(hash + 1))) return 'ERR_VERSION'\n  return null\n}\n\n/** 5.6 steps 1–3: format, signature, addressee (`localAnchor`). */\nexport async function credHead (cred: any, localAnchor: string, ceremonyHere = true, subtle?: SubtleCrypto): Promise<CredError | null> {\n  const f = credFormat(cred, ceremonyHere)\n  if (f) return f\n  if (!(await diVerify(cred, cred.issuer, subtle))) return 'ERR_SIG'\n  if (cred.credentialSubject.id !== localAnchor) return 'ERR_ADDRESSEE'\n  return null\n}\n\n/** 5.6 step 6: the issuance window, whole seconds, inclusive, skew widens. */\nexport function windowOk (cred: any, tChMs: number): boolean {\n  const tCh = sec(tChMs), vf = secIso(cred.validFrom), cr = secIso(cred.proof.created), skew = SKEW_TOLERANCE / 1000\n  const lo = tCh - skew, hi = tCh + (CHALLENGE_MAX_AGE + ISSUANCE_WINDOW) / 1000 + skew\n  return !(vf < lo || vf > hi || cr < lo || cr > hi || cr < vf - skew)\n}\n\n/** What 5.6 steps 4–7 read of a record. */\nexport interface RecordFacts { counterpart: string, ceremony: string, tCh: number, bind: string }\n\n/** 5.6 steps 4–7 against a record, synchronous. `order`: 'credential' —\n *  5.6: record, ceremony, window, binding; 'bundle' — Delivery 4.1:\n *  record, ceremony, binding, window. */\nexport function acceptTail (cred: any, rec: RecordFacts | undefined, order: 'credential' | 'bundle'): CredError | null {\n  if (!rec || rec.counterpart !== cred.issuer) return 'ERR_NO_RECORD'\n  if (cred.credentialSubject.ceremony !== rec.ceremony) return 'ERR_CEREMONY'\n  const bindOk = sameDigest(cred.credentialSubject.enactmentBinding, rec.bind)\n  if (order === 'bundle' && !bindOk) return 'ERR_BINDING'\n  if (!windowOk(cred, rec.tCh)) return 'ERR_STALE_ISSUANCE'\n  if (!bindOk) return 'ERR_BINDING'\n  return null\n}\n\n/** Delivery 4.1/4.3: ERR_STALE_ISSUANCE is stale-issuance, every other\n *  rejection validation-failed. */\nexport const dispositionOf = (e: CredError): 'stale-issuance' | 'validation-failed' => (e === 'ERR_STALE_ISSUANCE' ? 'stale-issuance' : 'validation-failed')\n\n/**\n * The bundle's context-free checks of Delivery 4.1 check 1 (stage 8,\n * after the payload schema): calendars, the outer/inner equalities, the\n * sent card's binding, a present ceremony.enactment, the card's version\n * and keys, the credential's format (its ceremony at check 5). null when\n * they pass, else the reason, with the 4.1 disposition.\n */\nexport function bundleForm (doc: any): { reason: 'validation-failed' | 'stale-issuance', why: string } | null {\n  const { card, credential } = doc.payload\n  const v = (why: string) => ({ reason: 'validation-failed' as const, why })\n  if (!calOK(doc.issuedAt) || !calOK(card.challenge?.issuedAt) || !calOK(card.proof?.created)) return v('calendar-invalid issuedAt')\n  if (doc.issuer !== card.anchor || card.anchor !== credential.issuer) return v('outer binding (issuer = card.anchor = credential.issuer)')\n  if (credential.credentialSubject?.id !== doc.recipient) return v('outer binding (recipient = subject)')\n  if (card.sentTo !== doc.recipient || card.boundTo !== credential.credentialSubject.challenge) return v('sent card binding (sentTo/boundTo)')\n  if (card.challenge.value === card.boundTo) return v('sent challenge equals the displayed challenge (5.3)')\n  if (doc.ceremony?.enactment !== undefined && !sameDigest(doc.ceremony.enactment, credential.credentialSubject.enactmentBinding)) return v('ceremony.enactment recomputes not')\n  if (card.version !== CARD_VERSION || !card.challenge) return v('card version/challenge')\n  if (!xRawOfMk(card.keyAgreement) || !edRawOfAnchor(card.anchor)) return v('card keys do not decode')\n  const f = credFormat(credential, false)\n  if (f) return { reason: dispositionOf(f), why: f }\n  return null\n}\n\n/** The credential delivery's outer/inner consistency (Delivery 4.3). */\nexport function deliveryForm (doc: any): string | null {\n  const cred = doc.payload.credential\n  if (!calOK(doc.issuedAt)) return 'calendar-invalid issuedAt'\n  if (doc.issuer !== cred.issuer) return 'outer binding (issuer = credential.issuer)'\n  if (cred.credentialSubject?.id !== doc.recipient) return 'outer binding (recipient = subject)'\n  if (doc.ceremony?.enactment !== undefined && !sameDigest(doc.ceremony.enactment, cred.credentialSubject.enactmentBinding)) return 'ceremony.enactment recomputes not'\n  return null\n}\n"]}

package/dist/holder-api.d.ts

@@ -26,6 +26,17 @@ export interface HumanActOptions {
     when: Millis;
     actId: string;
 }
+/** A carrier offer for the card of show or scan: the relationship's
+ *  carrier nonce N, 32 bytes the app draws fresh (Identity §7a.3), and the
+ *  delivery hints it built from N for the card (at least one; Encounter
+ *  6090: at most eight, each at most 512 characters; their form is the carrier
+ *  profile's, e.g. the VTI mediator adapter profile §1b). The library
+ *  signs the hints into the card, records N in the register under the
+ *  relationship the card opens, and interprets neither. */
+export interface CarrierOffer {
+    nonce: Uint8Array;
+    deliveryHints: readonly string[];
+}
 export interface Holder {
     /** any registered command by name, for modules and tests; apps use the typed acts */
     act(command: string, input: unknown, when: Millis, opts?: {
@@ -70,15 +81,20 @@ export interface Holder {
     /** a displayed card with a fresh own challenge under a fresh pair
      *  anchor (Encounter 5.3, 4.4): the event encounter.shown carries the
      *  card to display; `name` the card's display name (default: the own
-     *  profile's); human */
+     *  profile's); `carrier` the delivery hints the card carries and the
+     *  carrier nonce of the relationship it opens (card-invalid with ref
+     *  RLTP-ENC-6090, carrier-nonce-invalid); human */
     show(opts: HumanActOptions & {
         name?: string;
+        carrier?: CarrierOffer;
     }): Promise<ActResult>;
     /** the scanner's step on a displayed card (Encounter 5.8): the record,
      *  the fresh tuple, the bundle; encounter.scanned carries the sent card
-     *  for the optical leg; human */
+     *  for the optical leg; `carrier` as with show, its hints in the sent
+     *  card; human */
     scan(card: Json, opts: HumanActOptions & {
         name?: string;
+        carrier?: CarrierOffer;
     }): Promise<ActResult>;
     /** the optical leg (Encounter 5.8, 5710): a sent card shown by the scanner; human */
     captureSentCard(card: Json, opts: HumanActOptions): Promise<ActResult>;

package/dist/holder-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"holder-api.d.ts","sourceRoot":"","sources":["../src/holder-api.ts"],"names":[],"mappings":"AAkGA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC7H,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEhD,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAQxF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAE1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAOnG,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAErC,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvH;yDACyD;AACzD,MAAM,WAAW,cAAc;IAAG,SAAS,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE;AAE5E,MAAM,WAAW,aAAa;IAC5B,wFAAwF;IACxF,OAAO,CAAC,EAAE,SAAS,YAAY,EAAE,CAAA;IACjC;;2EAEuE;IACvE,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED;iCACiC;AACjC,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAEhE,MAAM,WAAW,MAAM;IACrB,qFAAqF;IACrF,GAAG,CAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAClG;wEACoE;IACpE,MAAM,CAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1F,kFAAkF;IAClF,KAAK,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE,wEAAwE;IACxE,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE,mFAAmF;IACnF,UAAU,CAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1F,iEAAiE;IACjE,QAAQ,CAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1G,qFAAqF;IACrF,aAAa,CAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/G,yEAAyE;IACzE,KAAK,CAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvE;+CAC2C;IAC3C,MAAM,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACnG,uFAAuF;IACvF,OAAO,CAAE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpD,yGAAyG;IACzG,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACnE,mGAAmG;IACnG,YAAY,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;;qFAEiF;IACjF,YAAY,CAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxD;;oDAEgD;IAChD,UAAU,CAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/E;;;4BAGwB;IACxB,IAAI,CAAE,IAAI,EAAE,eAAe,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE;;qCAEiC;IACjC,IAAI,CAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAChF,qFAAqF;IACrF,eAAe,CAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvE,uFAAuF;IACvF,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;kFAC8E;IAC9E,UAAU,CAAE,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1H;;wBAEoB;IACpB,MAAM,CAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtF;;;;8DAI0D;IAC1D,SAAS,CAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjH;8CAC0C;IAC1C,QAAQ,CAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,UAAU,CAAC,EAAE,KAAK,GAAG,YAAY,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC7H;;;;;;;;6DAQyD;IACzD,WAAW,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/G;kEAC8D;IAC9D,YAAY,CAAE,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxE;;;+EAG2E;IAC3E,KAAK,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE;yDACqD;IACrD,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;0DACsD;IACtD,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACxE,IAAI,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvC,MAAM,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC5C,MAAM,CAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjE;yDACqD;IACrD,OAAO,CAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAC5D,iFAAiF;IACjF,SAAS,CAAE,QAAQ,EAAE,cAAc,GAAG,MAAM,IAAI,CAAA;IAChD,QAAQ,IAAK,OAAO,CAAC,cAAc,CAAC,CAAA;IACpC,QAAQ,IAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IACnC,2BAA2B;IAC3B,OAAO,CAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAA;IACtD,MAAM,IAAK,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAC/B,OAAO,IAAK,OAAO,CAAC,WAAW,CAAC,CAAA;IAChC,OAAO,IAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IACjC;iEAC6D;IAC7D,KAAK,IAAK,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAA;IACrC,qCAAqC;IACrC,cAAc,CAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IACtE;;;;qEAIiE;IACjE,MAAM,CAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC3D;2EACuE;IACvE,gBAAgB,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,gBAAgB,CAAC,CAAA;IAC1E,0EAA0E;IAC1E,WAAW,CAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnE;;yCAEqC;IACrC,QAAQ,CAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtF;;+DAE2D;IAC3D,KAAK,IAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CACzB;AAED;;;wDAGwD;AACxD,wBAAsB,YAAY,CAAE,KAAK,EAAE,WAAW,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAqEjG"}
+{"version":3,"file":"holder-api.d.ts","sourceRoot":"","sources":["../src/holder-api.ts"],"names":[],"mappings":"AAkGA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC7H,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEhD,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAQxF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAE1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAOnG,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAGrC,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvH;yDACyD;AACzD,MAAM,WAAW,cAAc;IAAG,SAAS,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE;AAE5E,MAAM,WAAW,aAAa;IAC5B,wFAAwF;IACxF,OAAO,CAAC,EAAE,SAAS,YAAY,EAAE,CAAA;IACjC;;2EAEuE;IACvE,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED;iCACiC;AACjC,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAEhE;;;;;;2DAM2D;AAC3D,MAAM,WAAW,YAAY;IAAG,KAAK,EAAE,UAAU,CAAC;IAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE;AAQrF,MAAM,WAAW,MAAM;IACrB,qFAAqF;IACrF,GAAG,CAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAClG;wEACoE;IACpE,MAAM,CAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1F,kFAAkF;IAClF,KAAK,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE,wEAAwE;IACxE,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE,mFAAmF;IACnF,UAAU,CAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1F,iEAAiE;IACjE,QAAQ,CAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1G,qFAAqF;IACrF,aAAa,CAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/G,yEAAyE;IACzE,KAAK,CAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvE;+CAC2C;IAC3C,MAAM,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACnG,uFAAuF;IACvF,OAAO,CAAE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpD,yGAAyG;IACzG,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACnE,mGAAmG;IACnG,YAAY,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;;qFAEiF;IACjF,YAAY,CAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxD;;oDAEgD;IAChD,UAAU,CAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/E;;;;;uDAKmD;IACnD,IAAI,CAAE,IAAI,EAAE,eAAe,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,YAAY,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC5F;;;sBAGkB;IAClB,IAAI,CAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,YAAY,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxG,qFAAqF;IACrF,eAAe,CAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvE,uFAAuF;IACvF,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;kFAC8E;IAC9E,UAAU,CAAE,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1H;;wBAEoB;IACpB,MAAM,CAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtF;;;;8DAI0D;IAC1D,SAAS,CAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjH;8CAC0C;IAC1C,QAAQ,CAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,UAAU,CAAC,EAAE,KAAK,GAAG,YAAY,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC7H;;;;;;;;6DAQyD;IACzD,WAAW,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/G;kEAC8D;IAC9D,YAAY,CAAE,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxE;;;+EAG2E;IAC3E,KAAK,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE;yDACqD;IACrD,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;0DACsD;IACtD,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACxE,IAAI,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvC,MAAM,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC5C,MAAM,CAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjE;yDACqD;IACrD,OAAO,CAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAC5D,iFAAiF;IACjF,SAAS,CAAE,QAAQ,EAAE,cAAc,GAAG,MAAM,IAAI,CAAA;IAChD,QAAQ,IAAK,OAAO,CAAC,cAAc,CAAC,CAAA;IACpC,QAAQ,IAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IACnC,2BAA2B;IAC3B,OAAO,CAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAA;IACtD,MAAM,IAAK,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAC/B,OAAO,IAAK,OAAO,CAAC,WAAW,CAAC,CAAA;IAChC,OAAO,IAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IACjC;iEAC6D;IAC7D,KAAK,IAAK,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAA;IACrC,qCAAqC;IACrC,cAAc,CAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IACtE;;;;qEAIiE;IACjE,MAAM,CAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC3D;2EACuE;IACvE,gBAAgB,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,gBAAgB,CAAC,CAAA;IAC1E,0EAA0E;IAC1E,WAAW,CAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnE;;yCAEqC;IACrC,QAAQ,CAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtF;;+DAE2D;IAC3D,KAAK,IAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CACzB;AAED;;;wDAGwD;AACxD,wBAAsB,YAAY,CAAE,KAAK,EAAE,WAAW,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CA2EjG"}

package/dist/holder-api.js

@@ -34,8 +34,8 @@
 //   revokeDevice(name, opts)                  identity.revokeDevice     human
 //   rotateAnchor(opts)                        identity.rotate           human
 //   setProfile({name, image?, text?}, opts)   profile.set               human
-//   show(opts{name?})                         encounter.show            human
-//   scan(card, opts{name?})                   encounter.scan            human
+//   show(opts{name?, carrier?})               encounter.show            human
+//   scan(card, opts{name?, carrier?})         encounter.scan            human
 //   captureSentCard(card, opts)               encounter.capture         human
 //   counter(contactId, opts)                  encounter.counter         human
 //   foundGroup({name, vouchThreshold?, listed?}, opts)  membership.found human
@@ -109,7 +109,13 @@ import { ENCOUNTER_COMMANDS, encounterModule } from './encounter/ceremony.js';
 import { MEMBERSHIP_COMMANDS, localAccess, membershipModule } from './membership/holder.js';
 import { INTRODUCTION_COMMANDS, introductionModule } from './introduction/holder.js';
 import { MESSAGE_COMMANDS, messageModule } from './message/holder.js';
+import { b64uOf } from './core.js';
 import { contactView, contactsView, deliveryStatusView, groupsView, inboxView, profileView, promptsView } from './views.js';
+/** The offer as act input: N in canonical base64url (bound and journaled with the act). */
+const offerInput = (c) => c === undefined ? undefined : {
+    nonce: c?.nonce instanceof Uint8Array ? b64uOf(c.nonce) : null,
+    deliveryHints: Array.isArray(c?.deliveryHints) ? [...c.deliveryHints] : null,
+};
 /** A holder over its ports: `{store, keys, entropy?, log?, access?, retry?, crypto?}`.
  *  The crypto handle (default globalThis.crypto) is resolved and probed
  *  here and also feeds the default entropy; an app that injects one
@@ -140,8 +146,14 @@ export async function createHolder(ports, opts = {}) {
         recover: (o) => engine.act(TRUST_COMMANDS.recover, {}, o?.when),
         rotateAnchor: (o) => human(IDENTITY_COMMANDS.rotate, {}, o),
         setProfile: (content, o) => human(PROFILE_SET, content, o),
-        show: (o) => human(ENCOUNTER_COMMANDS.show, o?.name === undefined ? {} : { name: o.name }, o),
-        scan: (card, o) => human(ENCOUNTER_COMMANDS.scan, o?.name === undefined ? { card } : { card, name: o.name }, o),
+        show: (o) => {
+            const carrier = offerInput(o?.carrier);
+            return human(ENCOUNTER_COMMANDS.show, { ...(o?.name === undefined ? {} : { name: o.name }), ...(carrier === undefined ? {} : { carrier }) }, o);
+        },
+        scan: (card, o) => {
+            const carrier = offerInput(o?.carrier);
+            return human(ENCOUNTER_COMMANDS.scan, { card, ...(o?.name === undefined ? {} : { name: o.name }), ...(carrier === undefined ? {} : { carrier }) }, o);
+        },
         captureSentCard: (card, o) => human(ENCOUNTER_COMMANDS.capture, { card }, o),
         counter: (contactId, o) => human(ENCOUNTER_COMMANDS.counter, { contactId }, o),
         foundGroup: (g, o) => human(MEMBERSHIP_COMMANDS.found, g, o),

package/dist/holder-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"holder-api.js","sourceRoot":"","sources":["../src/holder-api.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,4EAA4E;AAC5E,wEAAwE;AACxE,qEAAqE;AACrE,4EAA4E;AAC5E,wEAAwE;AACxE,sEAAsE;AACtE,uEAAuE;AACvE,uEAAuE;AACvE,0EAA0E;AAC1E,wIAAwI;AACxI,0EAA0E;AAC1E,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,wEAAwE;AACxE,oEAAoE;AACpE,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,0EAA0E;AAC1E,yEAAyE;AACzE,qEAAqE;AACrE,SAAS;AACT,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,oFAAoF;AACpF,oFAAoF;AACpF,+EAA+E;AAC/E,+EAA+E;AAC/E,wEAAwE;AACxE,kEAAkE;AAClE,0DAA0D;AAC1D,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,sEAAsE;AACtE,yDAAyD;AACzD,uEAAuE;AACvE,uEAAuE;AACvE,uDAAuD;AACvD,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AACvE,yEAAyE;AACzE,8CAA8C;AAC9C,EAAE;AACF,oEAAoE;AACpE,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AACxE,0EAA0E;AAC1E,0CAA0C;AAC1C,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,2EAA2E;AAC3E,uEAAuE;AACvE,yEAAyE;AACzE,mEAAmE;AACnE,yEAAyE;AACzE,qEAAqE;AACrE,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,yFAAyF;AACzF,8EAA8E;AAC9E,0EAA0E;AAC1E,+EAA+E;AAC/E,iEAAiE;AACjE,uEAAuE;AACvE,6BAA6B;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG1C,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAEtE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAGlD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAGhD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAC7E,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAC3F,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AACpF,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAErE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAsJ3H;;;wDAGwD;AACxD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAE,KAAkB,EAAE,OAAsB,EAAE;IAC9E,MAAM,OAAO,GAAG,CAAC,cAAc,EAAE,EAAE,WAAW,EAAE,EAAE,eAAe,EAAE,EAAE,gBAAgB,EAAE,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAA;IACxJ,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI;QACpC,CAAC,CAAC,CAAC,MAA6B,EAAE,KAA4B,EAAE,EAAY,EAAE,EAAE;YAC5E,MAAM,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;YAC7C,IAAI,CAAC,CAAC,MAAM;gBAAE,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,wBAAwB,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QACvK,CAAC;QACH,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAA;IAC1J,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAA;IACxD,4FAA4F;IAC5F,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,KAAc,EAAE,CAA8B,EAAE,EAAE,CAChF,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAc,EAAE,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAA;IACjG,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,CAAC,OAAe,EAAE,KAAc,EAAE,IAAY,EAAE,CAAsB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnH,MAAM,EAAE,CAAC,QAAgB,EAAE,MAAoB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9G,KAAK,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACvG,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1G,UAAU,EAAE,CAAC,SAAiB,EAAE,MAAe,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7H,QAAQ,EAAE,CAAC,SAAiB,EAAE,GAAe,EAAE,OAAgB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACtJ,aAAa,EAAE,CAAC,SAAiB,EAAE,OAAe,EAAE,OAAgB,EAAE,CAAkB,EAAE,EAAE,CAC1F,KAAK,CAAC,cAAc,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACzE,KAAK,EAAE,CAAC,UAAoB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QACnG,MAAM,EAAE,CAAC,SAAiB,EAAE,CAAgD,EAAE,EAAE,CAC9E,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACpI,OAAO,EAAE,CAAC,CAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,IAAc,CAAC;QAC3F,YAAY,EAAE,CAAC,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5E,UAAU,EAAE,CAAC,OAAuB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3F,IAAI,EAAE,CAAC,CAAsC,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClI,IAAI,EAAE,CAAC,IAAU,EAAE,CAAsC,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1J,eAAe,EAAE,CAAC,IAAU,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACnG,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACvG,UAAU,EAAE,CAAC,CAA8D,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1I,MAAM,EAAE,CAAC,OAAe,EAAE,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAChI,QAAQ,EAAE,CAAC,OAAe,EAAE,MAAc,EAAE,CAA0D,EAAE,EAAE,CACxG,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACxI,SAAS,EAAE,CAAC,WAAmB,EAAE,QAAgB,EAAE,CAAuC,EAAE,EAAE,CAC5F,KAAK,CAAC,qBAAqB,CAAC,SAAS,EAAE,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3I,WAAW,EAAE,CAAC,SAAiB,EAAE,IAAY,EAAE,CAAyC,EAAE,EAAE,CAC1F,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3H,YAAY,EAAE,CAAC,GAAa,EAAE,CAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,IAAc,CAAC;QACnH,KAAK,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChH,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACnH,SAAS,EAAE,CAAC,IAAY,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChG,YAAY,EAAE,CAAC,IAAY,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACtG,SAAS,EAAE,KAAK,EAAE,IAAY,EAAE,YAAoB,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC;QAClH,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACzC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,CAAC,MAAsB,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;QAC7E,OAAO,EAAE,CAAC,GAAY,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC;QAClE,SAAS,EAAE,CAAC,QAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;QACnE,QAAQ,EAAE,KAAK,IAA6B,EAAE;YAC5C,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAA;YACjC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC5E,CAAC;QACD,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5D,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC;QAC5C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9C,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;QAC1C,cAAc,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,EAAE,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;QACnE,gBAAgB,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC;QACjE,WAAW,EAAE,CAAC,KAAqB,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC;QACrF,QAAQ,EAAE,CAAC,KAAqB,EAAE,IAAY,EAAE,KAAoB,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;QAC5G,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;QAC3B,IAAI,MAAM,KAAM,OAAO,MAAM,CAAC,MAAM,CAAA,CAAC,CAAC;KACvC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["// holder-api — createHolder, the facade over the engine (lib Stage 2,\n// note §4.1, §4.5). Domain modules (identity, encounter, trust, continuity,\n// membership, profile) register with the engine as they graduate; today\n// the facade carries the engine's built-ins, the prompts module, the\n// encounter module (encounter/ceremony.ts: show, scan, the optical leg, the\n// counter-step, the bundle and the credential delivery), the membership\n// module (membership/holder.ts: founding, the prelude and invite, the\n// accept on a group-invite prompt, admission and welcome, evidence and\n// vouches; and the in-library Access over the holder's groups where no\n// Access port is given), the introduction module (introduction/holder.ts:\n// the three roles of Trust §8 and the mediator's start), the identity module (identity-state.ts: device names, the rotation), the trust\n// module (trust/mapping.ts: the Trust act, the class settings, the anchor\n// mapping's issuance and reception, the entry commit; trust/star.ts and\n// trust/group-star.ts: the star and the group star, reconciled on resume\n// and received with their assemblies; trust/entries.ts: merge, split and\n// departure; trust/continuity.ts: the probe, the continuity mapping and\n// the chaining; trust/profile.ts: profile@1) and the modules given.\n//\n// The human acts (note §4.2) are typed methods with an options object\n// `{when, actId}`; actId is required, minted by the app when the human\n// acts, and journaled with the act's result (a repeat with the same actId\n// replays it, another input under it is actid-conflict). They wrap `act`\n// with the trust module's command names, which stays for modules and\n// tests:\n//   trust(contactId, opts)                    trust.set {on: true}      human\n//   untrust(contactId, opts)                  trust.set {on: false}     human\n//   pauseTrust(contactId, paused, opts)       trust.pause               human\n//   setClass(contactId, cls, setting, opts)   trust.setClass            human\n//   setGroupClass(contactId, groupId, setting, opts)  trust.setGroupClass human\n//   merge(contactIds, opts)                   trust.merge               human\n//   depart(contactId, opts{relationshipId?})  trust.depart              human\n//   decide(promptId, choice, opts)            prompt.decide             human\n//   addDevice(name, opts)                     identity.addDevice        human\n//   revokeDevice(name, opts)                  identity.revokeDevice     human\n//   rotateAnchor(opts)                        identity.rotate           human\n//   setProfile({name, image?, text?}, opts)   profile.set               human\n//   show(opts{name?})                         encounter.show            human\n//   scan(card, opts{name?})                   encounter.scan            human\n//   captureSentCard(card, opts)               encounter.capture         human\n//   counter(contactId, opts)                  encounter.counter         human\n//   foundGroup({name, vouchThreshold?, listed?}, opts)  membership.found human\n//   invite(groupId, contactId, opts)          membership.invite         human\n//   vouchFor(groupId, member, opts{provenance?})  membership.vouch      human\n//   introduce(requesterId, targetId, opts)    introduction.introduce    human\n//   sendMessage(contactId, text, opts{replyTo?})  message.send         human\n//   block(contactId, opts)                    message.block {blocked: true}   human\n//   unblock(contactId, opts)                  message.block {blocked: false}  human\n//   recover({when})                           trust.recover          not human\n//   takeMessages(ids, {when})                 message.take           not human\n// and the read deviceKey(name, contextLabel): the device key of a held,\n// unrevoked name under an own anchor context (identity-state.ts).\n// A missing actId is refused at runtime as actid-missing.\n//\n// One actId, one result: replay(actId, when) reads the journaled result of\n// any of the human acts above (its events: for sendMessage `message.sent`\n// with mid and digest; its commit time; its documents and whether a repeat\n// would hand them out at `when`), or answers unknown-act. It runs nothing\n// and commits nothing, needs no keys, and works on every opening over the\n// store. A repeat of the act under the same actId answers the same events\n// at any clock, across a lock and a new opening; the journal holds an act\n// for the retention max(P90D, retry.horizonMs) after its commit and after\n// the last step of each of its documents, in holder time (engine.ts),\n// after which the actId is unknown. An app that does not\n// know whether an act committed (a crash, an unknown-commit-outcome, a\n// lock) asks replay; on unknown-act the act did not commit or has left\n// the journal, and only the human decides to act anew.\n//\n// Reading: the views (views.ts) over one snapshot each, carrying its\n// commitSeq. `subscribe` announces every commit with its commitSeq and\n// events; the app re-reads the views it shows, and a view read after the\n// announcement is at that commitSeq or later.\n//\n// Delivery: `receive(env, when)` runs Delivery §6.2 in the core and\n// dispatches through the task register (receive.ts); `report` takes the\n// adapter's reports (on an ack's digest: accepted or delivered marks it\n// sent, failed gives it up, awaiting-transport records that the adapter\n// holds it); `resume` re-emits, runs due duties and re-emits unsent acks;\n// `tick` expires and retains (engine.ts).\n//\n// Custody (Delivery 0.83 RLTP-DEL-6120 to 6135): the holder keeps every\n// outbound document until a service takes it or the holder gives it up,\n// across a lock and the end of a process. One createHolder is one opening.\n// After its first resume, `pendingTransport(when)` names what is to be\n// handed over: the outbox items neither terminal nor accepted (held ones\n// included) and the unsent acks, each with its envelope, its first\n// submission and its deadline, none past it. A transport hands over only\n// such entries, through `handOver(entry, when, start)`: the check of\n// `mayHandOver` and the start of the deposit in one step of the holder's\n// queue, true only for an entry this opening issued that is still pending,\n// unchanged, before its deadline. A duplicate's stored ack past its retries\n// appears once as a `resend` entry (Delivery RLTP-DEL-6330). A document missing from the\n// view is no longer to be sent. `await close()` ends the opening at a lock or\n// the end of a process (resolved once the running operation finished, the\n// moment the next opening may start): every later call rejects with InfraError\n// 'closed', mayHandOver answers false, and nothing issued before\n// authorizes anything; the next opening is a new createHolder over the\n// same store, resumed first.\nimport { createEngine } from './engine.js'\nimport type { CommitListener, EnginePorts, HolderModule, TransportEntry, TransportRefusal, TransportView } from './engine.js'\nimport type { DeliveryReport } from './ports.js'\nimport { DECIDE, collectDecisions, promptsModule } from './prompts.js'\nimport type { ActResult, ReceiveResult, ReplayResult, ResumeResult } from './results.js'\nimport { InfraError } from './results.js'\nimport { commitViolations } from './invariants.js'\nimport type { CommitOp } from './invariants.js'\nimport type { HolderState } from './state.js'\nimport { toOpaque } from './state.js'\nimport { trustModule } from './trust/mapping.js'\nimport { IDENTITY_COMMANDS, deviceKeyOf, identityModule } from './identity-state.js'\nimport type { DeviceKeyResult } from './identity-state.js'\nimport { PROFILE_SET } from './trust/profile.js'\nimport type { ProfileContent } from './profile.js'\nimport type { Dec, Millis, OpaqueHolderState, PromptChoice, Setting, TrustClass } from './state.js'\nimport { TRUST_COMMANDS } from './trust/mapping.js'\nimport { ENTRY_COMMANDS } from './trust/entries.js'\nimport { ENCOUNTER_COMMANDS, encounterModule } from './encounter/ceremony.js'\nimport { MEMBERSHIP_COMMANDS, localAccess, membershipModule } from './membership/holder.js'\nimport { INTRODUCTION_COMMANDS, introductionModule } from './introduction/holder.js'\nimport { MESSAGE_COMMANDS, messageModule } from './message/holder.js'\nimport type { Json } from './core.js'\nimport { contactView, contactsView, deliveryStatusView, groupsView, inboxView, profileView, promptsView } from './views.js'\nimport type { ContactView, DeliveryStatusView, GroupView, InboxMessageView, ProfileView, PromptView } from './views.js'\n\n/** The committed state and its commitSeq; the state is opaque (note §4.5):\n *  apps read the views, store tooling may persist it. */\nexport interface HolderSnapshot { commitSeq: Dec, state: OpaqueHolderState }\n\nexport interface HolderOptions {\n  /** domain modules to register beside the built-ins, the prompts and the trust module */\n  modules?: readonly HolderModule[]\n  /** testing mode: check the invariants of invariants.ts on every commit,\n   *  before the store's CAS; a violation throws InfraError\n   *  'invariant-violated' (cause: the violations) and nothing commits */\n  invariants?: boolean\n}\n\n/** The options of a human act (note §4.2): its time and the actId the app\n *  mints when the human acts. */\nexport interface HumanActOptions { when: Millis, actId: string }\n\nexport interface Holder {\n  /** any registered command by name, for modules and tests; apps use the typed acts */\n  act (command: string, input: unknown, when: Millis, opts?: { actId?: string }): Promise<ActResult>\n  /** the human's decision on an open prompt: a human act under the app's\n   *  actId (note §4.2); a missing actId is also refused at runtime */\n  decide (promptId: string, choice: PromptChoice, opts: HumanActOptions): Promise<ActResult>\n  /** the Trust act: the anchor mapping class on toward the contact (2770); human */\n  trust (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** trust withdrawn: the anchor mapping class off (2840, 2850); human */\n  untrust (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the pause of 5.4: star and blinded group star off, or back to default; human */\n  pauseTrust (contactId: string, paused: boolean, opts: HumanActOptions): Promise<ActResult>\n  /** one class's setting toward the contact (2780, 2810); human */\n  setClass (contactId: string, cls: TrustClass, setting: Setting, opts: HumanActOptions): Promise<ActResult>\n  /** the sealed group star's setting for one group toward the contact (2830); human */\n  setGroupClass (contactId: string, groupId: string, setting: Setting, opts: HumanActOptions): Promise<ActResult>\n  /** the manual merge (6640): at most one of them holds an entry; human */\n  merge (contactIds: string[], opts: HumanActOptions): Promise<ActResult>\n  /** departure (2260): the entry, the relationships of an alias, or one\n   *  relationship (relationshipId); human */\n  depart (contactId: string, opts: HumanActOptions & { relationshipId?: string }): Promise<ActResult>\n  /** 2240: entries re-commit from verified mappings recovered without them; not human */\n  recover (opts: { when: Millis }): Promise<ActResult>\n  /** a device name into the register before any key derived from it is presented (Identity §5.5); human */\n  addDevice (name: string, opts: HumanActOptions): Promise<ActResult>\n  /** the name's revocation mark: never removed, the name never given again (Identity §5.5); human */\n  revokeDevice (name: string, opts: HumanActOptions): Promise<ActResult>\n  /** the community anchor's rotation (Identity §5.4): step 1 (label,\n   *  closure, 6596 decided) when none runs, else step 2 of the running one\n   *  through the Log port; resume carries step 2 on its own (identity-state.ts) */\n  rotateAnchor (opts: HumanActOptions): Promise<ActResult>\n  /** the own profile (Trust 6b): validated (6430, 6435, 6475), the next\n   *  revision of the one counter (6450), delivered on every relationship\n   *  the profile class is on for (6455); human */\n  setProfile (content: ProfileContent, opts: HumanActOptions): Promise<ActResult>\n  /** a displayed card with a fresh own challenge under a fresh pair\n   *  anchor (Encounter 5.3, 4.4): the event encounter.shown carries the\n   *  card to display; `name` the card's display name (default: the own\n   *  profile's); human */\n  show (opts: HumanActOptions & { name?: string }): Promise<ActResult>\n  /** the scanner's step on a displayed card (Encounter 5.8): the record,\n   *  the fresh tuple, the bundle; encounter.scanned carries the sent card\n   *  for the optical leg; human */\n  scan (card: Json, opts: HumanActOptions & { name?: string }): Promise<ActResult>\n  /** the optical leg (Encounter 5.8, 5710): a sent card shown by the scanner; human */\n  captureSentCard (card: Json, opts: HumanActOptions): Promise<ActResult>\n  /** the counter-step toward a contact met as displayer (Encounter 5.8 step 4); human */\n  counter (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** a group founded under a fresh pair anchor (Access 3.4.1); its rule\n   *  vouchThreshold (default \"1\") is group state; event group.founded; human */\n  foundGroup (group: { name: string, vouchThreshold?: string, listed?: boolean }, opts: HumanActOptions): Promise<ActResult>\n  /** invite a contact into a group: the prelude, then the invite on its\n   *  answer (Membership 1.2, 3.1); the contact decides on a group-invite\n   *  prompt; human */\n  invite (groupId: string, contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the mediator's act (Trust §8, this library's start of it): the\n   *  requester gets an offer naming the target by an opaque designator and\n   *  at most the `label` the human types here, with the mediator's\n   *  ack-delay declaration; the requester decides on an\n   *  `introduction` prompt, the target on another; human */\n  introduce (requesterId: string, targetId: string, opts: HumanActOptions & { label?: string }): Promise<ActResult>\n  /** a vouch@2 for a member anchor whose consent pair this holder holds\n   *  (Access 5.3, Membership 3.4); human */\n  vouchFor (groupId: string, member: string, opts: HumanActOptions & { provenance?: 'met' | 'introduced' }): Promise<ActResult>\n  /** a text message to the contact (Message Tasks 3, 5): 1 to 4096 code\n   *  points, replyTo the mid of an earlier message of the relationship. It\n   *  goes on a ready, unblocked relationship (canMessage); otherwise refused\n   *  as not-ready, blocked or no-own-channel, and the app keeps it unsent.\n   *  Event message.sent {mid, digest}; deliveryStatus(digest) is its sender\n   *  status. Undelivered, it ends as failed(expired-by-adapter-policy) at\n   *  the retry horizon (P7D by default, P90D at most), before its sender\n   *  lifetime sentAt + P179D: failed(task-expired) is not reached for a\n   *  message under any horizon the engine admits; human */\n  sendMessage (contactId: string, text: string, opts: HumanActOptions & { replyTo?: string }): Promise<ActResult>\n  /** the inbox entries the app has durably taken over leave the inbox\n   *  (4420); their completion record stays (4350); not human */\n  takeMessages (ids: string[], opts: { when: Millis }): Promise<ActResult>\n  /** the block (Message Tasks 6): set on every relationship of the\n   *  contact's entry. Messages, invitations and the holder's own offers on\n   *  them stop; the protocol steps owed continue; the contact observes\n   *  nothing it would not without the block. Event contact.blocked; human */\n  block (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the block cleared on every relationship of the entry: nothing that\n   *  was discarded under it reappears (6510); human */\n  unblock (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the device key of a held, unrevoked device name under an own anchor\n   *  context (Identity §5.5); reads, changes nothing */\n  deviceKey (name: string, contextLabel: string): Promise<DeviceKeyResult>\n  tick (when: Millis): Promise<ActResult>\n  resume (when: Millis): Promise<ResumeResult>\n  report (report: DeliveryReport, when: Millis): Promise<ActResult>\n  /** an arriving envelope, as the app's transport delivered it (non-human,\n   *  no actId; idempotent over the document digest) */\n  receive (env: unknown, when: Millis): Promise<ReceiveResult>\n  /** after every commit: its commitSeq and events, the cue to re-read the views */\n  subscribe (listener: CommitListener): () => void\n  snapshot (): Promise<HolderSnapshot>\n  contacts (): Promise<ContactView[]>\n  /** by entry id or alias */\n  contact (id: string): Promise<ContactView | undefined>\n  groups (): Promise<GroupView[]>\n  profile (): Promise<ProfileView>\n  prompts (): Promise<PromptView[]>\n  /** the messages accepted and not yet taken over (Message Tasks 4.5),\n   *  by display time; event message.received announces each */\n  inbox (): Promise<InboxMessageView[]>\n  /** by document digest or threadId */\n  deliveryStatus (digestOrThreadId: string): Promise<DeliveryStatusView>\n  /** the journaled result of the human act `actId` (any of the acts above:\n   *  for sendMessage its `message.sent` event with `mid` and `digest`), or\n   *  `{ok: false, code: 'unknown-act'}`; a pure read that never runs the\n   *  act, never mints a mid, commits nothing. The question an app asks\n   *  after a crash or a lock instead of repeating the act blind */\n  replay (actId: string, when: Millis): Promise<ReplayResult>\n  /** what the holder keeps for transport at `when`, after this opening's\n   *  first completed resume (else `{ok: false, code: 'not-resumed'}`) */\n  pendingTransport (when: Millis): Promise<TransportView | TransportRefusal>\n  /** right before a hand-over: whether this opening's `entry` may go now */\n  mayHandOver (entry: TransportEntry, when: Millis): Promise<boolean>\n  /** the hand-over: the same check, then `start()` (which starts the\n   *  deposit synchronously and says whether it did) inside the holder's\n   *  queue; true when both said yes */\n  handOver (entry: TransportEntry, when: Millis, start: () => boolean): Promise<boolean>\n  /** ends this opening (a lock, the end of a process); resolves once the\n   *  operation running at the call has finished: after that the opening\n   *  commits nothing more, and the next opening may start */\n  close (): Promise<void>\n  readonly closed: boolean\n}\n\n/** A holder over its ports: `{store, keys, entropy?, log?, access?, retry?, crypto?}`.\n *  The crypto handle (default globalThis.crypto) is resolved and probed\n *  here and also feeds the default entropy; an app that injects one\n *  passes the same handle to seedKeys(seed, crypto). */\nexport async function createHolder (ports: EnginePorts, opts: HolderOptions = {}): Promise<Holder> {\n  const modules = [identityModule(), trustModule(), encounterModule(), membershipModule(), introductionModule(), messageModule(), ...(opts.modules ?? [])]\n  const check = opts.invariants === true\n    ? (before: Readonly<HolderState>, after: Readonly<HolderState>, op: CommitOp) => {\n        const v = commitViolations(before, after, op)\n        if (v.length) throw new InfraError('invariant-violated', `invariants broken by ${op.kind}: ${v.map((x) => `[${x.invariant}] ${x.detail}`).join('; ')}`, { cause: v })\n      }\n    : undefined\n  const engine = await createEngine(ports, [promptsModule(collectDecisions(modules)), ...modules], { ...(check ? { check } : {}), accessFrom: localAccess })\n  const read = async () => (await engine.snapshot()).state\n  /** a human act: `when` and actId from the options, a missing actId refused by the engine */\n  const human = (command: string, input: unknown, o: HumanActOptions | undefined) =>\n    engine.act(command, input, o?.when as Millis, o?.actId === undefined ? {} : { actId: o.actId })\n  return Object.freeze({\n    act: (command: string, input: unknown, when: Millis, o?: { actId?: string }) => engine.act(command, input, when, o),\n    decide: (promptId: string, choice: PromptChoice, o: HumanActOptions) => human(DECIDE, { promptId, choice }, o),\n    trust: (contactId: string, o: HumanActOptions) => human(TRUST_COMMANDS.set, { contactId, on: true }, o),\n    untrust: (contactId: string, o: HumanActOptions) => human(TRUST_COMMANDS.set, { contactId, on: false }, o),\n    pauseTrust: (contactId: string, paused: boolean, o: HumanActOptions) => human(TRUST_COMMANDS.pause, { contactId, paused }, o),\n    setClass: (contactId: string, cls: TrustClass, setting: Setting, o: HumanActOptions) => human(TRUST_COMMANDS.setClass, { contactId, cls, setting }, o),\n    setGroupClass: (contactId: string, groupId: string, setting: Setting, o: HumanActOptions) =>\n      human(TRUST_COMMANDS.setGroupClass, { contactId, groupId, setting }, o),\n    merge: (contactIds: string[], o: HumanActOptions) => human(ENTRY_COMMANDS.merge, { contactIds }, o),\n    depart: (contactId: string, o: HumanActOptions & { relationshipId?: string }) =>\n      human(ENTRY_COMMANDS.depart, o?.relationshipId === undefined ? { contactId } : { contactId, relationshipId: o.relationshipId }, o),\n    recover: (o: { when: Millis }) => engine.act(TRUST_COMMANDS.recover, {}, o?.when as Millis),\n    rotateAnchor: (o: HumanActOptions) => human(IDENTITY_COMMANDS.rotate, {}, o),\n    setProfile: (content: ProfileContent, o: HumanActOptions) => human(PROFILE_SET, content, o),\n    show: (o: HumanActOptions & { name?: string }) => human(ENCOUNTER_COMMANDS.show, o?.name === undefined ? {} : { name: o.name }, o),\n    scan: (card: Json, o: HumanActOptions & { name?: string }) => human(ENCOUNTER_COMMANDS.scan, o?.name === undefined ? { card } : { card, name: o.name }, o),\n    captureSentCard: (card: Json, o: HumanActOptions) => human(ENCOUNTER_COMMANDS.capture, { card }, o),\n    counter: (contactId: string, o: HumanActOptions) => human(ENCOUNTER_COMMANDS.counter, { contactId }, o),\n    foundGroup: (g: { name: string, vouchThreshold?: string, listed?: boolean }, o: HumanActOptions) => human(MEMBERSHIP_COMMANDS.found, g, o),\n    invite: (groupId: string, contactId: string, o: HumanActOptions) => human(MEMBERSHIP_COMMANDS.invite, { groupId, contactId }, o),\n    vouchFor: (groupId: string, member: string, o: HumanActOptions & { provenance?: 'met' | 'introduced' }) =>\n      human(MEMBERSHIP_COMMANDS.vouch, o?.provenance === undefined ? { groupId, member } : { groupId, member, provenance: o.provenance }, o),\n    introduce: (requesterId: string, targetId: string, o: HumanActOptions & { label?: string }) =>\n      human(INTRODUCTION_COMMANDS.introduce, o?.label === undefined ? { requesterId, targetId } : { requesterId, targetId, label: o.label }, o),\n    sendMessage: (contactId: string, text: string, o: HumanActOptions & { replyTo?: string }) =>\n      human(MESSAGE_COMMANDS.send, o?.replyTo === undefined ? { contactId, text } : { contactId, text, replyTo: o.replyTo }, o),\n    takeMessages: (ids: string[], o: { when: Millis }) => engine.act(MESSAGE_COMMANDS.take, { ids }, o?.when as Millis),\n    block: (contactId: string, o: HumanActOptions) => human(MESSAGE_COMMANDS.block, { contactId, blocked: true }, o),\n    unblock: (contactId: string, o: HumanActOptions) => human(MESSAGE_COMMANDS.block, { contactId, blocked: false }, o),\n    addDevice: (name: string, o: HumanActOptions) => human(IDENTITY_COMMANDS.addDevice, { name }, o),\n    revokeDevice: (name: string, o: HumanActOptions) => human(IDENTITY_COMMANDS.revokeDevice, { name }, o),\n    deviceKey: async (name: string, contextLabel: string) => deviceKeyOf(await read(), ports.keys, name, contextLabel),\n    tick: (when: Millis) => engine.tick(when),\n    resume: (when: Millis) => engine.resume(when),\n    report: (report: DeliveryReport, when: Millis) => engine.report(report, when),\n    receive: (env: unknown, when: Millis) => engine.receive(env, when),\n    subscribe: (listener: CommitListener) => engine.subscribe(listener),\n    snapshot: async (): Promise<HolderSnapshot> => {\n      const s = await engine.snapshot()\n      return Object.freeze({ commitSeq: s.commitSeq, state: toOpaque(s.state) })\n    },\n    contacts: async () => contactsView(await read()),\n    contact: async (id: string) => contactView(await read(), id),\n    groups: async () => groupsView(await read()),\n    profile: async () => profileView(await read()),\n    prompts: async () => promptsView(await read()),\n    inbox: async () => inboxView(await read()),\n    deliveryStatus: async (x: string) => deliveryStatusView(await read(), x),\n    replay: (actId: string, when: Millis) => engine.replay(actId, when),\n    pendingTransport: (when: Millis) => engine.pendingTransport(when),\n    mayHandOver: (entry: TransportEntry, when: Millis) => engine.mayHandOver(entry, when),\n    handOver: (entry: TransportEntry, when: Millis, start: () => boolean) => engine.handOver(entry, when, start),\n    close: () => engine.close(),\n    get closed () { return engine.closed },\n  })\n}\n"]}
+{"version":3,"file":"holder-api.js","sourceRoot":"","sources":["../src/holder-api.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,4EAA4E;AAC5E,wEAAwE;AACxE,qEAAqE;AACrE,4EAA4E;AAC5E,wEAAwE;AACxE,sEAAsE;AACtE,uEAAuE;AACvE,uEAAuE;AACvE,0EAA0E;AAC1E,wIAAwI;AACxI,0EAA0E;AAC1E,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,wEAAwE;AACxE,oEAAoE;AACpE,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,0EAA0E;AAC1E,yEAAyE;AACzE,qEAAqE;AACrE,SAAS;AACT,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,oFAAoF;AACpF,oFAAoF;AACpF,+EAA+E;AAC/E,+EAA+E;AAC/E,wEAAwE;AACxE,kEAAkE;AAClE,0DAA0D;AAC1D,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,sEAAsE;AACtE,yDAAyD;AACzD,uEAAuE;AACvE,uEAAuE;AACvE,uDAAuD;AACvD,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AACvE,yEAAyE;AACzE,8CAA8C;AAC9C,EAAE;AACF,oEAAoE;AACpE,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AACxE,0EAA0E;AAC1E,0CAA0C;AAC1C,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,2EAA2E;AAC3E,uEAAuE;AACvE,yEAAyE;AACzE,mEAAmE;AACnE,yEAAyE;AACzE,qEAAqE;AACrE,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,yFAAyF;AACzF,8EAA8E;AAC9E,0EAA0E;AAC1E,+EAA+E;AAC/E,iEAAiE;AACjE,uEAAuE;AACvE,6BAA6B;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG1C,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAEtE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAGlD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAGhD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAC7E,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAC3F,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AACpF,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAErE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAClC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AA6B3H,2FAA2F;AAC3F,MAAM,UAAU,GAAG,CAAC,CAA2B,EAAoC,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAClH,KAAK,EAAE,CAAC,EAAE,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;IAC9D,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI;CAC7E,CAAA;AAuID;;;wDAGwD;AACxD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAE,KAAkB,EAAE,OAAsB,EAAE;IAC9E,MAAM,OAAO,GAAG,CAAC,cAAc,EAAE,EAAE,WAAW,EAAE,EAAE,eAAe,EAAE,EAAE,gBAAgB,EAAE,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAA;IACxJ,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI;QACpC,CAAC,CAAC,CAAC,MAA6B,EAAE,KAA4B,EAAE,EAAY,EAAE,EAAE;YAC5E,MAAM,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;YAC7C,IAAI,CAAC,CAAC,MAAM;gBAAE,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,wBAAwB,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QACvK,CAAC;QACH,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAA;IAC1J,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAA;IACxD,4FAA4F;IAC5F,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,KAAc,EAAE,CAA8B,EAAE,EAAE,CAChF,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAc,EAAE,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAA;IACjG,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,CAAC,OAAe,EAAE,KAAc,EAAE,IAAY,EAAE,CAAsB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnH,MAAM,EAAE,CAAC,QAAgB,EAAE,MAAoB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9G,KAAK,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACvG,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1G,UAAU,EAAE,CAAC,SAAiB,EAAE,MAAe,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7H,QAAQ,EAAE,CAAC,SAAiB,EAAE,GAAe,EAAE,OAAgB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACtJ,aAAa,EAAE,CAAC,SAAiB,EAAE,OAAe,EAAE,OAAgB,EAAE,CAAkB,EAAE,EAAE,CAC1F,KAAK,CAAC,cAAc,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACzE,KAAK,EAAE,CAAC,UAAoB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QACnG,MAAM,EAAE,CAAC,SAAiB,EAAE,CAAgD,EAAE,EAAE,CAC9E,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACpI,OAAO,EAAE,CAAC,CAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,IAAc,CAAC;QAC3F,YAAY,EAAE,CAAC,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5E,UAAU,EAAE,CAAC,OAAuB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3F,IAAI,EAAE,CAAC,CAA8D,EAAE,EAAE;YACvE,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;YACtC,OAAO,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QACjJ,CAAC;QACD,IAAI,EAAE,CAAC,IAAU,EAAE,CAA8D,EAAE,EAAE;YACnF,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;YACtC,OAAO,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QACvJ,CAAC;QACD,eAAe,EAAE,CAAC,IAAU,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACnG,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACvG,UAAU,EAAE,CAAC,CAA8D,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1I,MAAM,EAAE,CAAC,OAAe,EAAE,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAChI,QAAQ,EAAE,CAAC,OAAe,EAAE,MAAc,EAAE,CAA0D,EAAE,EAAE,CACxG,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACxI,SAAS,EAAE,CAAC,WAAmB,EAAE,QAAgB,EAAE,CAAuC,EAAE,EAAE,CAC5F,KAAK,CAAC,qBAAqB,CAAC,SAAS,EAAE,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3I,WAAW,EAAE,CAAC,SAAiB,EAAE,IAAY,EAAE,CAAyC,EAAE,EAAE,CAC1F,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3H,YAAY,EAAE,CAAC,GAAa,EAAE,CAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,IAAc,CAAC;QACnH,KAAK,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChH,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACnH,SAAS,EAAE,CAAC,IAAY,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChG,YAAY,EAAE,CAAC,IAAY,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACtG,SAAS,EAAE,KAAK,EAAE,IAAY,EAAE,YAAoB,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC;QAClH,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACzC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,CAAC,MAAsB,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;QAC7E,OAAO,EAAE,CAAC,GAAY,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC;QAClE,SAAS,EAAE,CAAC,QAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;QACnE,QAAQ,EAAE,KAAK,IAA6B,EAAE;YAC5C,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAA;YACjC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC5E,CAAC;QACD,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5D,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC;QAC5C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9C,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;QAC1C,cAAc,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,EAAE,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;QACnE,gBAAgB,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC;QACjE,WAAW,EAAE,CAAC,KAAqB,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC;QACrF,QAAQ,EAAE,CAAC,KAAqB,EAAE,IAAY,EAAE,KAAoB,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;QAC5G,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;QAC3B,IAAI,MAAM,KAAM,OAAO,MAAM,CAAC,MAAM,CAAA,CAAC,CAAC;KACvC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["// holder-api — createHolder, the facade over the engine (lib Stage 2,\n// note §4.1, §4.5). Domain modules (identity, encounter, trust, continuity,\n// membership, profile) register with the engine as they graduate; today\n// the facade carries the engine's built-ins, the prompts module, the\n// encounter module (encounter/ceremony.ts: show, scan, the optical leg, the\n// counter-step, the bundle and the credential delivery), the membership\n// module (membership/holder.ts: founding, the prelude and invite, the\n// accept on a group-invite prompt, admission and welcome, evidence and\n// vouches; and the in-library Access over the holder's groups where no\n// Access port is given), the introduction module (introduction/holder.ts:\n// the three roles of Trust §8 and the mediator's start), the identity module (identity-state.ts: device names, the rotation), the trust\n// module (trust/mapping.ts: the Trust act, the class settings, the anchor\n// mapping's issuance and reception, the entry commit; trust/star.ts and\n// trust/group-star.ts: the star and the group star, reconciled on resume\n// and received with their assemblies; trust/entries.ts: merge, split and\n// departure; trust/continuity.ts: the probe, the continuity mapping and\n// the chaining; trust/profile.ts: profile@1) and the modules given.\n//\n// The human acts (note §4.2) are typed methods with an options object\n// `{when, actId}`; actId is required, minted by the app when the human\n// acts, and journaled with the act's result (a repeat with the same actId\n// replays it, another input under it is actid-conflict). They wrap `act`\n// with the trust module's command names, which stays for modules and\n// tests:\n//   trust(contactId, opts)                    trust.set {on: true}      human\n//   untrust(contactId, opts)                  trust.set {on: false}     human\n//   pauseTrust(contactId, paused, opts)       trust.pause               human\n//   setClass(contactId, cls, setting, opts)   trust.setClass            human\n//   setGroupClass(contactId, groupId, setting, opts)  trust.setGroupClass human\n//   merge(contactIds, opts)                   trust.merge               human\n//   depart(contactId, opts{relationshipId?})  trust.depart              human\n//   decide(promptId, choice, opts)            prompt.decide             human\n//   addDevice(name, opts)                     identity.addDevice        human\n//   revokeDevice(name, opts)                  identity.revokeDevice     human\n//   rotateAnchor(opts)                        identity.rotate           human\n//   setProfile({name, image?, text?}, opts)   profile.set               human\n//   show(opts{name?, carrier?})               encounter.show            human\n//   scan(card, opts{name?, carrier?})         encounter.scan            human\n//   captureSentCard(card, opts)               encounter.capture         human\n//   counter(contactId, opts)                  encounter.counter         human\n//   foundGroup({name, vouchThreshold?, listed?}, opts)  membership.found human\n//   invite(groupId, contactId, opts)          membership.invite         human\n//   vouchFor(groupId, member, opts{provenance?})  membership.vouch      human\n//   introduce(requesterId, targetId, opts)    introduction.introduce    human\n//   sendMessage(contactId, text, opts{replyTo?})  message.send         human\n//   block(contactId, opts)                    message.block {blocked: true}   human\n//   unblock(contactId, opts)                  message.block {blocked: false}  human\n//   recover({when})                           trust.recover          not human\n//   takeMessages(ids, {when})                 message.take           not human\n// and the read deviceKey(name, contextLabel): the device key of a held,\n// unrevoked name under an own anchor context (identity-state.ts).\n// A missing actId is refused at runtime as actid-missing.\n//\n// One actId, one result: replay(actId, when) reads the journaled result of\n// any of the human acts above (its events: for sendMessage `message.sent`\n// with mid and digest; its commit time; its documents and whether a repeat\n// would hand them out at `when`), or answers unknown-act. It runs nothing\n// and commits nothing, needs no keys, and works on every opening over the\n// store. A repeat of the act under the same actId answers the same events\n// at any clock, across a lock and a new opening; the journal holds an act\n// for the retention max(P90D, retry.horizonMs) after its commit and after\n// the last step of each of its documents, in holder time (engine.ts),\n// after which the actId is unknown. An app that does not\n// know whether an act committed (a crash, an unknown-commit-outcome, a\n// lock) asks replay; on unknown-act the act did not commit or has left\n// the journal, and only the human decides to act anew.\n//\n// Reading: the views (views.ts) over one snapshot each, carrying its\n// commitSeq. `subscribe` announces every commit with its commitSeq and\n// events; the app re-reads the views it shows, and a view read after the\n// announcement is at that commitSeq or later.\n//\n// Delivery: `receive(env, when)` runs Delivery §6.2 in the core and\n// dispatches through the task register (receive.ts); `report` takes the\n// adapter's reports (on an ack's digest: accepted or delivered marks it\n// sent, failed gives it up, awaiting-transport records that the adapter\n// holds it); `resume` re-emits, runs due duties and re-emits unsent acks;\n// `tick` expires and retains (engine.ts).\n//\n// Custody (Delivery 0.83 RLTP-DEL-6120 to 6135): the holder keeps every\n// outbound document until a service takes it or the holder gives it up,\n// across a lock and the end of a process. One createHolder is one opening.\n// After its first resume, `pendingTransport(when)` names what is to be\n// handed over: the outbox items neither terminal nor accepted (held ones\n// included) and the unsent acks, each with its envelope, its first\n// submission and its deadline, none past it. A transport hands over only\n// such entries, through `handOver(entry, when, start)`: the check of\n// `mayHandOver` and the start of the deposit in one step of the holder's\n// queue, true only for an entry this opening issued that is still pending,\n// unchanged, before its deadline. A duplicate's stored ack past its retries\n// appears once as a `resend` entry (Delivery RLTP-DEL-6330). A document missing from the\n// view is no longer to be sent. `await close()` ends the opening at a lock or\n// the end of a process (resolved once the running operation finished, the\n// moment the next opening may start): every later call rejects with InfraError\n// 'closed', mayHandOver answers false, and nothing issued before\n// authorizes anything; the next opening is a new createHolder over the\n// same store, resumed first.\nimport { createEngine } from './engine.js'\nimport type { CommitListener, EnginePorts, HolderModule, TransportEntry, TransportRefusal, TransportView } from './engine.js'\nimport type { DeliveryReport } from './ports.js'\nimport { DECIDE, collectDecisions, promptsModule } from './prompts.js'\nimport type { ActResult, ReceiveResult, ReplayResult, ResumeResult } from './results.js'\nimport { InfraError } from './results.js'\nimport { commitViolations } from './invariants.js'\nimport type { CommitOp } from './invariants.js'\nimport type { HolderState } from './state.js'\nimport { toOpaque } from './state.js'\nimport { trustModule } from './trust/mapping.js'\nimport { IDENTITY_COMMANDS, deviceKeyOf, identityModule } from './identity-state.js'\nimport type { DeviceKeyResult } from './identity-state.js'\nimport { PROFILE_SET } from './trust/profile.js'\nimport type { ProfileContent } from './profile.js'\nimport type { Dec, Millis, OpaqueHolderState, PromptChoice, Setting, TrustClass } from './state.js'\nimport { TRUST_COMMANDS } from './trust/mapping.js'\nimport { ENTRY_COMMANDS } from './trust/entries.js'\nimport { ENCOUNTER_COMMANDS, encounterModule } from './encounter/ceremony.js'\nimport { MEMBERSHIP_COMMANDS, localAccess, membershipModule } from './membership/holder.js'\nimport { INTRODUCTION_COMMANDS, introductionModule } from './introduction/holder.js'\nimport { MESSAGE_COMMANDS, messageModule } from './message/holder.js'\nimport type { Json } from './core.js'\nimport { b64uOf } from './core.js'\nimport { contactView, contactsView, deliveryStatusView, groupsView, inboxView, profileView, promptsView } from './views.js'\nimport type { ContactView, DeliveryStatusView, GroupView, InboxMessageView, ProfileView, PromptView } from './views.js'\n\n/** The committed state and its commitSeq; the state is opaque (note §4.5):\n *  apps read the views, store tooling may persist it. */\nexport interface HolderSnapshot { commitSeq: Dec, state: OpaqueHolderState }\n\nexport interface HolderOptions {\n  /** domain modules to register beside the built-ins, the prompts and the trust module */\n  modules?: readonly HolderModule[]\n  /** testing mode: check the invariants of invariants.ts on every commit,\n   *  before the store's CAS; a violation throws InfraError\n   *  'invariant-violated' (cause: the violations) and nothing commits */\n  invariants?: boolean\n}\n\n/** The options of a human act (note §4.2): its time and the actId the app\n *  mints when the human acts. */\nexport interface HumanActOptions { when: Millis, actId: string }\n\n/** A carrier offer for the card of show or scan: the relationship's\n *  carrier nonce N, 32 bytes the app draws fresh (Identity §7a.3), and the\n *  delivery hints it built from N for the card (at least one; Encounter\n *  6090: at most eight, each at most 512 characters; their form is the carrier\n *  profile's, e.g. the VTI mediator adapter profile §1b). The library\n *  signs the hints into the card, records N in the register under the\n *  relationship the card opens, and interprets neither. */\nexport interface CarrierOffer { nonce: Uint8Array, deliveryHints: readonly string[] }\n\n/** The offer as act input: N in canonical base64url (bound and journaled with the act). */\nconst offerInput = (c: CarrierOffer | undefined): Record<string, Json> | undefined => c === undefined ? undefined : {\n  nonce: c?.nonce instanceof Uint8Array ? b64uOf(c.nonce) : null,\n  deliveryHints: Array.isArray(c?.deliveryHints) ? [...c.deliveryHints] : null,\n}\n\nexport interface Holder {\n  /** any registered command by name, for modules and tests; apps use the typed acts */\n  act (command: string, input: unknown, when: Millis, opts?: { actId?: string }): Promise<ActResult>\n  /** the human's decision on an open prompt: a human act under the app's\n   *  actId (note §4.2); a missing actId is also refused at runtime */\n  decide (promptId: string, choice: PromptChoice, opts: HumanActOptions): Promise<ActResult>\n  /** the Trust act: the anchor mapping class on toward the contact (2770); human */\n  trust (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** trust withdrawn: the anchor mapping class off (2840, 2850); human */\n  untrust (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the pause of 5.4: star and blinded group star off, or back to default; human */\n  pauseTrust (contactId: string, paused: boolean, opts: HumanActOptions): Promise<ActResult>\n  /** one class's setting toward the contact (2780, 2810); human */\n  setClass (contactId: string, cls: TrustClass, setting: Setting, opts: HumanActOptions): Promise<ActResult>\n  /** the sealed group star's setting for one group toward the contact (2830); human */\n  setGroupClass (contactId: string, groupId: string, setting: Setting, opts: HumanActOptions): Promise<ActResult>\n  /** the manual merge (6640): at most one of them holds an entry; human */\n  merge (contactIds: string[], opts: HumanActOptions): Promise<ActResult>\n  /** departure (2260): the entry, the relationships of an alias, or one\n   *  relationship (relationshipId); human */\n  depart (contactId: string, opts: HumanActOptions & { relationshipId?: string }): Promise<ActResult>\n  /** 2240: entries re-commit from verified mappings recovered without them; not human */\n  recover (opts: { when: Millis }): Promise<ActResult>\n  /** a device name into the register before any key derived from it is presented (Identity §5.5); human */\n  addDevice (name: string, opts: HumanActOptions): Promise<ActResult>\n  /** the name's revocation mark: never removed, the name never given again (Identity §5.5); human */\n  revokeDevice (name: string, opts: HumanActOptions): Promise<ActResult>\n  /** the community anchor's rotation (Identity §5.4): step 1 (label,\n   *  closure, 6596 decided) when none runs, else step 2 of the running one\n   *  through the Log port; resume carries step 2 on its own (identity-state.ts) */\n  rotateAnchor (opts: HumanActOptions): Promise<ActResult>\n  /** the own profile (Trust 6b): validated (6430, 6435, 6475), the next\n   *  revision of the one counter (6450), delivered on every relationship\n   *  the profile class is on for (6455); human */\n  setProfile (content: ProfileContent, opts: HumanActOptions): Promise<ActResult>\n  /** a displayed card with a fresh own challenge under a fresh pair\n   *  anchor (Encounter 5.3, 4.4): the event encounter.shown carries the\n   *  card to display; `name` the card's display name (default: the own\n   *  profile's); `carrier` the delivery hints the card carries and the\n   *  carrier nonce of the relationship it opens (card-invalid with ref\n   *  RLTP-ENC-6090, carrier-nonce-invalid); human */\n  show (opts: HumanActOptions & { name?: string, carrier?: CarrierOffer }): Promise<ActResult>\n  /** the scanner's step on a displayed card (Encounter 5.8): the record,\n   *  the fresh tuple, the bundle; encounter.scanned carries the sent card\n   *  for the optical leg; `carrier` as with show, its hints in the sent\n   *  card; human */\n  scan (card: Json, opts: HumanActOptions & { name?: string, carrier?: CarrierOffer }): Promise<ActResult>\n  /** the optical leg (Encounter 5.8, 5710): a sent card shown by the scanner; human */\n  captureSentCard (card: Json, opts: HumanActOptions): Promise<ActResult>\n  /** the counter-step toward a contact met as displayer (Encounter 5.8 step 4); human */\n  counter (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** a group founded under a fresh pair anchor (Access 3.4.1); its rule\n   *  vouchThreshold (default \"1\") is group state; event group.founded; human */\n  foundGroup (group: { name: string, vouchThreshold?: string, listed?: boolean }, opts: HumanActOptions): Promise<ActResult>\n  /** invite a contact into a group: the prelude, then the invite on its\n   *  answer (Membership 1.2, 3.1); the contact decides on a group-invite\n   *  prompt; human */\n  invite (groupId: string, contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the mediator's act (Trust §8, this library's start of it): the\n   *  requester gets an offer naming the target by an opaque designator and\n   *  at most the `label` the human types here, with the mediator's\n   *  ack-delay declaration; the requester decides on an\n   *  `introduction` prompt, the target on another; human */\n  introduce (requesterId: string, targetId: string, opts: HumanActOptions & { label?: string }): Promise<ActResult>\n  /** a vouch@2 for a member anchor whose consent pair this holder holds\n   *  (Access 5.3, Membership 3.4); human */\n  vouchFor (groupId: string, member: string, opts: HumanActOptions & { provenance?: 'met' | 'introduced' }): Promise<ActResult>\n  /** a text message to the contact (Message Tasks 3, 5): 1 to 4096 code\n   *  points, replyTo the mid of an earlier message of the relationship. It\n   *  goes on a ready, unblocked relationship (canMessage); otherwise refused\n   *  as not-ready, blocked or no-own-channel, and the app keeps it unsent.\n   *  Event message.sent {mid, digest}; deliveryStatus(digest) is its sender\n   *  status. Undelivered, it ends as failed(expired-by-adapter-policy) at\n   *  the retry horizon (P7D by default, P90D at most), before its sender\n   *  lifetime sentAt + P179D: failed(task-expired) is not reached for a\n   *  message under any horizon the engine admits; human */\n  sendMessage (contactId: string, text: string, opts: HumanActOptions & { replyTo?: string }): Promise<ActResult>\n  /** the inbox entries the app has durably taken over leave the inbox\n   *  (4420); their completion record stays (4350); not human */\n  takeMessages (ids: string[], opts: { when: Millis }): Promise<ActResult>\n  /** the block (Message Tasks 6): set on every relationship of the\n   *  contact's entry. Messages, invitations and the holder's own offers on\n   *  them stop; the protocol steps owed continue; the contact observes\n   *  nothing it would not without the block. Event contact.blocked; human */\n  block (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the block cleared on every relationship of the entry: nothing that\n   *  was discarded under it reappears (6510); human */\n  unblock (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the device key of a held, unrevoked device name under an own anchor\n   *  context (Identity §5.5); reads, changes nothing */\n  deviceKey (name: string, contextLabel: string): Promise<DeviceKeyResult>\n  tick (when: Millis): Promise<ActResult>\n  resume (when: Millis): Promise<ResumeResult>\n  report (report: DeliveryReport, when: Millis): Promise<ActResult>\n  /** an arriving envelope, as the app's transport delivered it (non-human,\n   *  no actId; idempotent over the document digest) */\n  receive (env: unknown, when: Millis): Promise<ReceiveResult>\n  /** after every commit: its commitSeq and events, the cue to re-read the views */\n  subscribe (listener: CommitListener): () => void\n  snapshot (): Promise<HolderSnapshot>\n  contacts (): Promise<ContactView[]>\n  /** by entry id or alias */\n  contact (id: string): Promise<ContactView | undefined>\n  groups (): Promise<GroupView[]>\n  profile (): Promise<ProfileView>\n  prompts (): Promise<PromptView[]>\n  /** the messages accepted and not yet taken over (Message Tasks 4.5),\n   *  by display time; event message.received announces each */\n  inbox (): Promise<InboxMessageView[]>\n  /** by document digest or threadId */\n  deliveryStatus (digestOrThreadId: string): Promise<DeliveryStatusView>\n  /** the journaled result of the human act `actId` (any of the acts above:\n   *  for sendMessage its `message.sent` event with `mid` and `digest`), or\n   *  `{ok: false, code: 'unknown-act'}`; a pure read that never runs the\n   *  act, never mints a mid, commits nothing. The question an app asks\n   *  after a crash or a lock instead of repeating the act blind */\n  replay (actId: string, when: Millis): Promise<ReplayResult>\n  /** what the holder keeps for transport at `when`, after this opening's\n   *  first completed resume (else `{ok: false, code: 'not-resumed'}`) */\n  pendingTransport (when: Millis): Promise<TransportView | TransportRefusal>\n  /** right before a hand-over: whether this opening's `entry` may go now */\n  mayHandOver (entry: TransportEntry, when: Millis): Promise<boolean>\n  /** the hand-over: the same check, then `start()` (which starts the\n   *  deposit synchronously and says whether it did) inside the holder's\n   *  queue; true when both said yes */\n  handOver (entry: TransportEntry, when: Millis, start: () => boolean): Promise<boolean>\n  /** ends this opening (a lock, the end of a process); resolves once the\n   *  operation running at the call has finished: after that the opening\n   *  commits nothing more, and the next opening may start */\n  close (): Promise<void>\n  readonly closed: boolean\n}\n\n/** A holder over its ports: `{store, keys, entropy?, log?, access?, retry?, crypto?}`.\n *  The crypto handle (default globalThis.crypto) is resolved and probed\n *  here and also feeds the default entropy; an app that injects one\n *  passes the same handle to seedKeys(seed, crypto). */\nexport async function createHolder (ports: EnginePorts, opts: HolderOptions = {}): Promise<Holder> {\n  const modules = [identityModule(), trustModule(), encounterModule(), membershipModule(), introductionModule(), messageModule(), ...(opts.modules ?? [])]\n  const check = opts.invariants === true\n    ? (before: Readonly<HolderState>, after: Readonly<HolderState>, op: CommitOp) => {\n        const v = commitViolations(before, after, op)\n        if (v.length) throw new InfraError('invariant-violated', `invariants broken by ${op.kind}: ${v.map((x) => `[${x.invariant}] ${x.detail}`).join('; ')}`, { cause: v })\n      }\n    : undefined\n  const engine = await createEngine(ports, [promptsModule(collectDecisions(modules)), ...modules], { ...(check ? { check } : {}), accessFrom: localAccess })\n  const read = async () => (await engine.snapshot()).state\n  /** a human act: `when` and actId from the options, a missing actId refused by the engine */\n  const human = (command: string, input: unknown, o: HumanActOptions | undefined) =>\n    engine.act(command, input, o?.when as Millis, o?.actId === undefined ? {} : { actId: o.actId })\n  return Object.freeze({\n    act: (command: string, input: unknown, when: Millis, o?: { actId?: string }) => engine.act(command, input, when, o),\n    decide: (promptId: string, choice: PromptChoice, o: HumanActOptions) => human(DECIDE, { promptId, choice }, o),\n    trust: (contactId: string, o: HumanActOptions) => human(TRUST_COMMANDS.set, { contactId, on: true }, o),\n    untrust: (contactId: string, o: HumanActOptions) => human(TRUST_COMMANDS.set, { contactId, on: false }, o),\n    pauseTrust: (contactId: string, paused: boolean, o: HumanActOptions) => human(TRUST_COMMANDS.pause, { contactId, paused }, o),\n    setClass: (contactId: string, cls: TrustClass, setting: Setting, o: HumanActOptions) => human(TRUST_COMMANDS.setClass, { contactId, cls, setting }, o),\n    setGroupClass: (contactId: string, groupId: string, setting: Setting, o: HumanActOptions) =>\n      human(TRUST_COMMANDS.setGroupClass, { contactId, groupId, setting }, o),\n    merge: (contactIds: string[], o: HumanActOptions) => human(ENTRY_COMMANDS.merge, { contactIds }, o),\n    depart: (contactId: string, o: HumanActOptions & { relationshipId?: string }) =>\n      human(ENTRY_COMMANDS.depart, o?.relationshipId === undefined ? { contactId } : { contactId, relationshipId: o.relationshipId }, o),\n    recover: (o: { when: Millis }) => engine.act(TRUST_COMMANDS.recover, {}, o?.when as Millis),\n    rotateAnchor: (o: HumanActOptions) => human(IDENTITY_COMMANDS.rotate, {}, o),\n    setProfile: (content: ProfileContent, o: HumanActOptions) => human(PROFILE_SET, content, o),\n    show: (o: HumanActOptions & { name?: string, carrier?: CarrierOffer }) => {\n      const carrier = offerInput(o?.carrier)\n      return human(ENCOUNTER_COMMANDS.show, { ...(o?.name === undefined ? {} : { name: o.name }), ...(carrier === undefined ? {} : { carrier }) }, o)\n    },\n    scan: (card: Json, o: HumanActOptions & { name?: string, carrier?: CarrierOffer }) => {\n      const carrier = offerInput(o?.carrier)\n      return human(ENCOUNTER_COMMANDS.scan, { card, ...(o?.name === undefined ? {} : { name: o.name }), ...(carrier === undefined ? {} : { carrier }) }, o)\n    },\n    captureSentCard: (card: Json, o: HumanActOptions) => human(ENCOUNTER_COMMANDS.capture, { card }, o),\n    counter: (contactId: string, o: HumanActOptions) => human(ENCOUNTER_COMMANDS.counter, { contactId }, o),\n    foundGroup: (g: { name: string, vouchThreshold?: string, listed?: boolean }, o: HumanActOptions) => human(MEMBERSHIP_COMMANDS.found, g, o),\n    invite: (groupId: string, contactId: string, o: HumanActOptions) => human(MEMBERSHIP_COMMANDS.invite, { groupId, contactId }, o),\n    vouchFor: (groupId: string, member: string, o: HumanActOptions & { provenance?: 'met' | 'introduced' }) =>\n      human(MEMBERSHIP_COMMANDS.vouch, o?.provenance === undefined ? { groupId, member } : { groupId, member, provenance: o.provenance }, o),\n    introduce: (requesterId: string, targetId: string, o: HumanActOptions & { label?: string }) =>\n      human(INTRODUCTION_COMMANDS.introduce, o?.label === undefined ? { requesterId, targetId } : { requesterId, targetId, label: o.label }, o),\n    sendMessage: (contactId: string, text: string, o: HumanActOptions & { replyTo?: string }) =>\n      human(MESSAGE_COMMANDS.send, o?.replyTo === undefined ? { contactId, text } : { contactId, text, replyTo: o.replyTo }, o),\n    takeMessages: (ids: string[], o: { when: Millis }) => engine.act(MESSAGE_COMMANDS.take, { ids }, o?.when as Millis),\n    block: (contactId: string, o: HumanActOptions) => human(MESSAGE_COMMANDS.block, { contactId, blocked: true }, o),\n    unblock: (contactId: string, o: HumanActOptions) => human(MESSAGE_COMMANDS.block, { contactId, blocked: false }, o),\n    addDevice: (name: string, o: HumanActOptions) => human(IDENTITY_COMMANDS.addDevice, { name }, o),\n    revokeDevice: (name: string, o: HumanActOptions) => human(IDENTITY_COMMANDS.revokeDevice, { name }, o),\n    deviceKey: async (name: string, contextLabel: string) => deviceKeyOf(await read(), ports.keys, name, contextLabel),\n    tick: (when: Millis) => engine.tick(when),\n    resume: (when: Millis) => engine.resume(when),\n    report: (report: DeliveryReport, when: Millis) => engine.report(report, when),\n    receive: (env: unknown, when: Millis) => engine.receive(env, when),\n    subscribe: (listener: CommitListener) => engine.subscribe(listener),\n    snapshot: async (): Promise<HolderSnapshot> => {\n      const s = await engine.snapshot()\n      return Object.freeze({ commitSeq: s.commitSeq, state: toOpaque(s.state) })\n    },\n    contacts: async () => contactsView(await read()),\n    contact: async (id: string) => contactView(await read(), id),\n    groups: async () => groupsView(await read()),\n    profile: async () => profileView(await read()),\n    prompts: async () => promptsView(await read()),\n    inbox: async () => inboxView(await read()),\n    deliveryStatus: async (x: string) => deliveryStatusView(await read(), x),\n    replay: (actId: string, when: Millis) => engine.replay(actId, when),\n    pendingTransport: (when: Millis) => engine.pendingTransport(when),\n    mayHandOver: (entry: TransportEntry, when: Millis) => engine.mayHandOver(entry, when),\n    handOver: (entry: TransportEntry, when: Millis, start: () => boolean) => engine.handOver(entry, when, start),\n    close: () => engine.close(),\n    get closed () { return engine.closed },\n  })\n}\n"]}

package/dist/identity-state.d.ts

@@ -1,5 +1,5 @@
 import type { HolderModule } from './engine.js';
-import type { Dec, HolderState, Register } from './state.js';
+import type { CarrierNonce, Dec, HolderState, Register } from './state.js';
 import type { KeyProvider } from './ports.js';
 /** The identity module's command names. */
 export declare const IDENTITY_COMMANDS: Readonly<{
@@ -17,6 +17,18 @@ export declare const withLabel: (r: Readonly<Register>, label: string) => Regist
 /** The register with a pair label and its relationship nonce (Identity
  *  §6.1): the nonce is recorded alongside the label and never changes. */
 export declare function withPairNonce(r: Readonly<Register>, label: string, nonce: string): Register;
+/** Does the register hold `nonce` (canonical base64url) as a carrier
+ *  nonce of any relationship, or as a pair nonce (Identity §7a.3: N is
+ *  fresh and never a pair nonce)? */
+export declare const carrierNonceHeld: (r: Readonly<Register>, nonce: string) => boolean;
+/** The register with the first carrier-nonce entry of relationship
+ *  `relId`, generation 1 (Identity §7a.3). A relationship that already
+ *  holds an entry is not given a second one here: rotation is not this. */
+export declare function withCarrierNonce(r: Readonly<Register>, relId: string, nonce: string): Register;
+/** The canonical carrier-nonce entry of a relationship (Identity §7a.3):
+ *  the highest generation, among equal ones the nonce whose bytes are
+ *  smallest in unsigned bytewise order; undefined where none is held. */
+export declare function canonicalCarrierNonce(r: Readonly<Register>, relId: string): CarrierNonce | undefined;
 /** The rotation duty's id for a rotation. */
 export declare const rotationDutyId: (rotationId: string) => string;
 /** A re-issue duty's id after the rotation to generation `to` (6370). */

package/dist/identity-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity-state.d.ts","sourceRoot":"","sources":["../src/identity-state.ts"],"names":[],"mappings":"AA4FA,OAAO,KAAK,EAAoC,YAAY,EAAuB,MAAM,aAAa,CAAA;AACtG,OAAO,KAAK,EAAE,GAAG,EAAQ,WAAW,EAAU,QAAQ,EAA8C,MAAM,YAAY,CAAA;AAEtH,OAAO,KAAK,EAAE,WAAW,EAAW,MAAM,YAAY,CAAA;AAMtD,2CAA2C;AAC3C,eAAO,MAAM,iBAAiB;;;;EAEnB,CAAA;AAEX,yEAAyE;AACzE,eAAO,MAAM,eAAe,QAA8B,CAAA;AAE1D,MAAM,WAAW,WAAW;IAAG,IAAI,EAAE,MAAM,CAAA;CAAE;AAE7C,sEAAsE;AACtE,eAAO,MAAM,SAAS,GAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,MAAM,KAAG,QACkB,CAAA;AAEnF;0EAC0E;AAC1E,wBAAgB,aAAa,CAAE,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,CAM5F;AA8CD,6CAA6C;AAC7C,eAAO,MAAM,cAAc,GAAI,YAAY,MAAM,KAAG,MAAkC,CAAA;AACtF,yEAAyE;AACzE,eAAO,MAAM,SAAS,GAAI,IAAI,GAAG,EAAE,OAAO,MAAM,KAAG,MAAkC,CAAA;AAkOrF;8DAC8D;AAC9D,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,GAAG,iBAAiB,CAAA;CAAE,CAAA;AAqBhF;;;;GAIG;AACH,wBAAsB,WAAW,CAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAUhJ;AAED,mEAAmE;AACnE,wBAAgB,cAAc,IAAK,YAAY,CAM9C"}
+{"version":3,"file":"identity-state.d.ts","sourceRoot":"","sources":["../src/identity-state.ts"],"names":[],"mappings":"AA8FA,OAAO,KAAK,EAAoC,YAAY,EAAuB,MAAM,aAAa,CAAA;AACtG,OAAO,KAAK,EAAE,YAAY,EAAE,GAAG,EAAQ,WAAW,EAAU,QAAQ,EAA8C,MAAM,YAAY,CAAA;AAEpI,OAAO,KAAK,EAAE,WAAW,EAAW,MAAM,YAAY,CAAA;AAMtD,2CAA2C;AAC3C,eAAO,MAAM,iBAAiB;;;;EAEnB,CAAA;AAEX,yEAAyE;AACzE,eAAO,MAAM,eAAe,QAA8B,CAAA;AAE1D,MAAM,WAAW,WAAW;IAAG,IAAI,EAAE,MAAM,CAAA;CAAE;AAE7C,sEAAsE;AACtE,eAAO,MAAM,SAAS,GAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,MAAM,KAAG,QACkB,CAAA;AAEnF;0EAC0E;AAC1E,wBAAgB,aAAa,CAAE,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,CAM5F;AAED;;qCAEqC;AACrC,eAAO,MAAM,gBAAgB,GAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,MAAM,KAAG,OACsD,CAAA;AAE9H;;2EAE2E;AAC3E,wBAAgB,gBAAgB,CAAE,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,CAG/F;AAED;;yEAEyE;AACzE,wBAAgB,qBAAqB,CAAE,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CASrG;AAmDD,6CAA6C;AAC7C,eAAO,MAAM,cAAc,GAAI,YAAY,MAAM,KAAG,MAAkC,CAAA;AACtF,yEAAyE;AACzE,eAAO,MAAM,SAAS,GAAI,IAAI,GAAG,EAAE,OAAO,MAAM,KAAG,MAAkC,CAAA;AAkOrF;8DAC8D;AAC9D,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,GAAG,iBAAiB,CAAA;CAAE,CAAA;AAqBhF;;;;GAIG;AACH,wBAAsB,WAAW,CAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAUhJ;AAED,mEAAmE;AACnE,wBAAgB,cAAc,IAAK,YAAY,CAM9C"}

package/dist/identity-state.js

@@ -1,5 +1,5 @@
 import { canonicalLabel, communityLabel, deviceLabel, deviceName } from './identity.js';
-import { jcs } from './core.js';
+import { fromB64u, jcs } from './core.js';
 import { bindingOf, rawProofValue } from './anchor.js';
 import { classOnToward, entryOf, entryRelationships, lags, liveRel } from './trust/state.js';
 /** The identity module's command names. */
@@ -20,6 +20,41 @@ export function withPairNonce(r, label, nonce) {
     }
     return { ...withLabel(r, label), pairNonces: { ...r.pairNonces, [label]: nonce } };
 }
+/** Does the register hold `nonce` (canonical base64url) as a carrier
+ *  nonce of any relationship, or as a pair nonce (Identity §7a.3: N is
+ *  fresh and never a pair nonce)? */
+export const carrierNonceHeld = (r, nonce) => Object.values(r.carriers).some((list) => list.some((e) => e.nonce === nonce)) || Object.values(r.pairNonces).includes(nonce);
+/** The register with the first carrier-nonce entry of relationship
+ *  `relId`, generation 1 (Identity §7a.3). A relationship that already
+ *  holds an entry is not given a second one here: rotation is not this. */
+export function withCarrierNonce(r, relId, nonce) {
+    if (Object.hasOwn(r.carriers, relId))
+        throw new Error(`identity: ${relId} already holds a carrier nonce (§7a.3)`);
+    return { ...r, carriers: { ...r.carriers, [relId]: [{ nonce, generation: '1' }] } };
+}
+/** The canonical carrier-nonce entry of a relationship (Identity §7a.3):
+ *  the highest generation, among equal ones the nonce whose bytes are
+ *  smallest in unsigned bytewise order; undefined where none is held. */
+export function canonicalCarrierNonce(r, relId) {
+    const list = Object.hasOwn(r.carriers, relId) ? r.carriers[relId] : [];
+    let best;
+    for (const e of list) {
+        if (!best) {
+            best = e;
+            continue;
+        }
+        const g = BigInt(e.generation) - BigInt(best.generation);
+        if (g > 0n || (g === 0n && bytewiseLess(fromB64u(e.nonce), fromB64u(best.nonce))))
+            best = e;
+    }
+    return best;
+}
+const bytewiseLess = (a, b) => {
+    for (let i = 0; i < Math.min(a.length, b.length); i++)
+        if (a[i] !== b[i])
+            return a[i] < b[i];
+    return a.length < b.length;
+};
 const needName = (x, cmd) => {
     if (x === null || typeof x !== 'object' || Array.isArray(x))
         throw new TypeError(`${cmd} needs an input object`);