@singi-labs/sifa-sdk 0.19.87 → 0.19.89

package/dist/{verification-providers-7il3kPQS.d.ts → verification-providers-DeyGqaoC.d.ts}

@@ -96,9 +96,9 @@ declare const selfLabelsSchema: z.ZodObject<{
  * score or a gate. This registry only decides which issuers Sifa displays and
  * with what provenance.
  *
- * Data-only: badge colors and icons are consumer concerns (React DOM on web,
- * React Native on mobile), same split as {@link PLATFORM_LABELS}. Consumers map
- * a provider id to a token/color.
+ * Data-only: badge colors live in the `/tokens` entry point
+ * (`verificationColors`, keyed by provider id); icons and components are
+ * consumer concerns (React DOM on web, React Native on mobile).
  */
 type VerificationProviderId = 'bluesky' | 'mu';
 /** How Sifa learns about a provider's verifications. */
@@ -120,12 +120,25 @@ interface VerificationProvider {
      */
     source: VerificationSource;
     /**
-     * Trusted verifier DIDs for firehose-sourced providers. A verification record
-     * counts only if its ISSUER DID is in this list. Empty for `bluesky-api`
-     * providers (Bluesky's AppView owns that decision). DIDs, not handles: a handle
-     * takeover must never confer verifier status.
+     * Trust-root DIDs for firehose-sourced providers. A verification record counts
+     * if its ISSUER DID is a root or a member of {@link verifierListUri}. Empty for
+     * `bluesky-api` providers (Bluesky's AppView owns that decision). DIDs, not
+     * handles: a handle takeover must never confer verifier status.
      */
     verifierDids: readonly string[];
+    /**
+     * AT-URI of the `app.bsky.graph.list` where the provider publishes its
+     * trusted verifiers. Consumers load its members at runtime and pass them to
+     * {@link resolveVerifierProvider}, so a verifier the provider adds counts on
+     * Sifa without a release. The list owner must be in {@link verifierDids}.
+     */
+    verifierListUri?: string;
+    /**
+     * Verifiers last confirmed by hand, used ONLY when the caller supplies no
+     * list members (list not loaded yet, or a consumer that does not load it).
+     * Keeps such callers working; once members are supplied, the list wins.
+     */
+    fallbackVerifierDids?: readonly string[];
 }
 /**
  * A verification held by an account, as surfaced to the UI. `issuerDid` is
@@ -135,6 +148,8 @@ interface AccountVerification {
     provider: VerificationProviderId;
     verifiedAt?: string | null;
     issuerDid?: string | null;
+    /** Display name of the issuer (firehose providers), when the API knows it. */
+    issuerName?: string | null;
 }
 declare const VERIFICATION_PROVIDERS: Record<VerificationProviderId, VerificationProvider>;
 declare function isKnownVerificationProvider(id: string): id is VerificationProviderId;
@@ -142,11 +157,30 @@ declare function getVerificationProvider(id: string): VerificationProvider | und
 /**
  * The firehose issuer gate: given the DID that authored an
  * `app.bsky.graph.verification` record, return the provider it verifies for, or
- * `null` if the issuer is not a recognized firehose verifier. API-sourced
- * providers (Bluesky) are never matched here -- their verifications do not enter
- * through the firehose, so a self-issued record cannot resolve to them.
+ * `null` if the issuer is not a recognized firehose verifier. A DID counts if it
+ * is a provider's trust root, or if `listMembers` (built with
+ * {@link buildVerifierListMembers}) maps it to a firehose provider. Without
+ * `listMembers`, each provider's `fallbackVerifierDids` apply instead.
+ * API-sourced providers (Bluesky) are never matched here -- their verifications
+ * do not enter through the firehose, so a self-issued record cannot resolve to
+ * them.
  */
-declare function resolveVerifierProvider(issuerDid: string): VerificationProviderId | null;
+declare function resolveVerifierProvider(issuerDid: string, listMembers?: ReadonlyMap<string, VerificationProviderId>): VerificationProviderId | null;
+/** One `app.bsky.graph.listitem` record value, plus the repo it was read from. */
+interface VerifierListItem {
+    /** DID of the repo the listitem record was read from. */
+    repoDid: string;
+    list: unknown;
+    subject: unknown;
+}
+/**
+ * Build the `listMembers` map for {@link resolveVerifierProvider} from raw
+ * listitem records. An item counts only if it belongs to a firehose provider's
+ * {@link VerificationProvider.verifierListUri}, was read from that list owner's
+ * repo, and that owner is one of the provider's trust roots. Anything else
+ * (a list item someone else wrote, another list, a malformed subject) is dropped.
+ */
+declare function buildVerifierListMembers(items: readonly VerifierListItem[]): Map<string, VerificationProviderId>;
 /**
  * D1 primary-provider selection: from all verifications an account holds, pick
  * the one whose provider has the highest priority (lowest `priority` number) for
@@ -154,5 +188,25 @@ declare function resolveVerifierProvider(issuerDid: string): VerificationProvide
  * unknown providers are ignored. Returns `null` when nothing is displayable.
  */
 declare function primaryVerification(verifications: readonly AccountVerification[]): AccountVerification | null;
+/**
+ * Label for one verification: the verifier's own display name (`issuerName`,
+ * sent by the API for firehose providers such as mu, where each verifier is
+ * shown by name), otherwise the provider label. Long names are shortened with
+ * an ellipsis. A provider this SDK version does not know falls back to its raw
+ * id ({@link resolveVerificationBadges} already drops those).
+ */
+declare function verificationLabel(v: Pick<AccountVerification, 'provider' | 'issuerName'>): string;
+/**
+ * The verifications a badge should render, as a new array. Keeps the API's
+ * `verificationBadges` from providers this SDK knows; an empty array means
+ * "none", even with the legacy flag. When the array is absent, or holds only
+ * unknown providers, builds a Bluesky entry from the legacy `blueskyVerified`
+ * flag (payloads that predate `verificationBadges`).
+ */
+declare function resolveVerificationBadges(input: {
+    verificationBadges?: readonly AccountVerification[] | null;
+    blueskyVerified?: boolean;
+    blueskyVerifiedAt?: string | null;
+}): AccountVerification[];
 
-export { type AgentRef as A, VERIFICATION_PROVIDERS as V, type AccountVerification as a, type VerificationProvider as b, type VerificationProviderId as c, type VerificationSource as d, agentRefSchema as e, atUriSchema as f, cidSchema as g, datetimeSchema as h, didSchema as i, externalRecordRefSchema as j, getVerificationProvider as k, isKnownVerificationProvider as l, languageTagSchema as m, maxGraphemes as n, primaryVerification as o, partialDateSchema as p, skillRefSchema as q, resolveVerifierProvider as r, selfLabelsSchema as s, strongRefSchema as t, uriSchema as u };
+export { type AgentRef as A, VERIFICATION_PROVIDERS as V, type AccountVerification as a, type VerificationProvider as b, type VerificationProviderId as c, type VerificationSource as d, type VerifierListItem as e, agentRefSchema as f, atUriSchema as g, buildVerifierListMembers as h, cidSchema as i, datetimeSchema as j, didSchema as k, externalRecordRefSchema as l, getVerificationProvider as m, isKnownVerificationProvider as n, languageTagSchema as o, maxGraphemes as p, partialDateSchema as q, primaryVerification as r, resolveVerificationBadges as s, resolveVerifierProvider as t, selfLabelsSchema as u, skillRefSchema as v, strongRefSchema as w, uriSchema as x, verificationLabel as y };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@singi-labs/sifa-sdk",
-  "version": "0.19.87",
+  "version": "0.19.89",
   "description": "Sifa SDK — public client library for the Sifa AppView on AT Protocol. Shared by sifa-web and sifa-app.",
   "license": "MIT",
   "type": "module",