@volter/twin-sentry 0.1.36 → 1.0.0

package/dist/journeys/customer-life.outline.md

@@ -0,0 +1,51 @@
+# sentry customer life: outline
+
+Author: Contributor 93
+
+## The customer
+
+**Harbourline** runs Rallly (lukevella/rallly at `3e63239dbdec`) and Twenty (twentyhq/twenty at `1d561b8c73c9`) for its team,
+and Postiz (gitroomhq/postiz-app at `e0a08a7d9592`) for its social channels, each reporting to Sentry (../journeys/demand.json):
+
+- **Rallly**: `@sentry/nextjs` 10.38 on the server, edge and browser (errors, transactions, logs, Session Replay; the
+  browser envelopes directly to its DSN host (tunnelRoute is commented out)), and at build `withSentryConfig`, whose sentry-cli makes the release,
+  uploads the source maps in chunks, assembles them into an artifact bundle and finalizes the release.
+- **Twenty**: `@sentry/nestjs` 10.73 on the server (errors, transactions, profiles), its cron jobs checked in as
+  monitors (`captureCheckIn` with the schedule).
+
+Harbourline also runs Cal.com (calcom/cal.diy at `54343aa685ae`) for bookings. Its release script reads SENTRY_AUTH_TOKEN, makes its git HEAD release, associates local commits, injects source-map debug ids, uploads the bundle and finalizes. Postiz pins Sentry 10.56.0.
+
+The World clock starts 2026-01-01.
+
+## People and programs
+
+| who | holds | how |
+|---|---|---|
+| Priya Raman, Harbourline's engineer | the harbourline organization | bootstrap sign-up; additional projects and keys through the API; token issuance door |
+| Rallly and Cal builds | the bootstrap token and Cal CI token | sentry-cli 2.58.4 |
+| Rallly, Twenty and Postiz in production | their projects' DSNs | the SDKs' envelopes |
+
+## The arc
+
+### 1. Setting up (Mon 5 Jan)
+The bootstrap makes the organization, first auth token and rallly project/DSN. Priya issues Cal's CI auth token for SENTRY_AUTH_TOKEN. With her bootstrap token she creates twenty and postiz through createOrganizationProject, and reads their DSNs through listProjectKeys. She creates cal for the booking app.
+
+### 2. Rallly's release (Tue 6 Jan, 10:00)
+sentry-cli makes `rallly@4.2.0` (a retry answers 208), reads the chunk
+options, finds its chunk missing, uploads it gzipped by its SHA-1, assembles the bundle (created, then ok), and
+finalizes the release. 
+
+### 3. Production (Tue 6 Jan, 14:30)
+A browser session; an unhandled rejection with its stack trace, and the same error for another visitor in a gzipped
+envelope (one issue, two users); a transaction; a replay of the visitor who hit
+the error; a Postiz user sends feedback from its configured widget; Postiz's post_created metric; the server's logs and minute of HTTP request-session aggregates; a client report for sampled-out transactions.
+
+### 4. Twenty's cron (Wed 7 Jan, 03:00)
+The cleanup job checks in in progress with its schedule (the monitor is made), then ok using the same check-in id and no explicit duration (checkin_margin 1, max_runtime 5); a worker
+error through its configured exception handler. A sampled cleanup transaction carries its CPU profile. The next night's cleanup reports in_progress and error on the next night.
+
+### 5. The next release (Mon 2 Feb)
+Cal's full 40-hex git HEAD release; its shipped script uses `set-commits --auto --ignore-missing` and finds no repository. It reads the preceding release (200 {}, as none has commits) and attaches local git commits. Its source maps, after local debug-ID injection, are uploaded through chunk options, missing-chunk assembly, gzip upload, and assembly polling. Then the release is finalized.
+
+## What the life does not do
+Every other API operation (`unmodeled`); a repository's integration; symbolication with the uploaded source maps.

package/dist/journeys/decisions.json

@@ -0,0 +1,170 @@
+{
+  "about": "Demanded application SDK ingestion, release and source-map uploads, account setup and derived vendor-backed reads.",
+  "decisions": [
+    {
+      "operation": "listOrganizationProjects",
+      "mechanism": "core",
+      "demand": "Vendor-backed resource refresh.",
+      "why": "The spec names the stored resource and the derived core reads it; no application-specific read behavior is served."
+    },
+    {
+      "operation": "getProjectEvent",
+      "mechanism": "core",
+      "demand": "Vendor-backed resource refresh.",
+      "why": "The spec names the stored resource and the derived core reads it; no application-specific read behavior is served."
+    },
+    {
+      "operation": "createProjectRelease",
+      "mechanism": "handler",
+      "demand": "sentry-cli releases new for one project.",
+      "why": "sentry-cli releases new for one project.",
+      "sourceRules": [
+        {
+          "source": "https://raw.githubusercontent.com/getsentry/sentry/2efdd4760a75a3d395e3534b7f66a7fbb0c3f22e/src/sentry/releases/endpoints/project_releases.py",
+          "means": "Create a new release and/or associate a project with a release. A new association is created even when the organization release already exists."
+        }
+      ]
+    },
+    {
+      "operation": "updateProjectRelease",
+      "mechanism": "handler",
+      "demand": "sentry-cli releases finalize for one project.",
+      "why": "sentry-cli releases finalize for one project."
+    },
+    {
+      "operation": "updateOrganizationRelease",
+      "mechanism": "handler",
+      "demand": "sentry-cli set-commits associates repository refs.",
+      "why": "sentry-cli set-commits associates repository refs."
+    },
+    {
+      "operation": "listOrganizationRepos",
+      "mechanism": "handler",
+      "demand": "sentry-cli set-commits --auto reads available repositories.",
+      "why": "sentry-cli set-commits --auto reads available repositories."
+    },
+    {
+      "operation": "getChunkUploadOptions",
+      "mechanism": "handler",
+      "demand": "sentry-cli discovers chunk uploads for source maps.",
+      "why": "sentry-cli discovers chunk uploads for source maps."
+    },
+    {
+      "operation": "uploadChunks",
+      "mechanism": "handler",
+      "demand": "sentry-cli uploads the source map bundle chunks.",
+      "why": "sentry-cli uploads the source map bundle chunks."
+    },
+    {
+      "operation": "assembleArtifactBundle",
+      "mechanism": "handler",
+      "demand": "sentry-cli polls artifact bundle assembly.",
+      "why": "sentry-cli polls artifact bundle assembly."
+    },
+    {
+      "operation": "sendEnvelope",
+      "mechanism": "handler",
+      "demand": "The pinned Sentry SDKs send envelopes from the demanded applications.",
+      "why": "Envelope authentication, parsing and item effects are vendor semantics."
+    },
+    {
+      "operation": "door:appCredentials",
+      "mechanism": "door",
+      "demand": "The World issues application credentials and the customer configures its account.",
+      "why": "The bootstrap creates the account, first credential and project/key named by application env.",
+      "lane": "api"
+    },
+    {
+      "operation": "door:organizations",
+      "mechanism": "door",
+      "demand": "The World issues application credentials and the customer configures its account.",
+      "why": "Account setup that no served customer operation reaches.",
+      "lane": "api"
+    },
+    {
+      "operation": "door:authTokens",
+      "mechanism": "door",
+      "demand": "The World issues application credentials and the customer configures its account.",
+      "why": "Account setup that no served customer operation reaches.",
+      "lane": "api"
+    },
+    {
+      "operation": "createOrganizationProject",
+      "mechanism": "handler",
+      "demand": "The customer creates additional account projects through the vendor API.",
+      "why": "The customer creates additional account projects through the vendor API."
+    },
+    {
+      "operation": "listProjectKeys",
+      "mechanism": "handler",
+      "demand": "The customer reads the created project client key and DSN through the vendor API.",
+      "why": "The customer reads the created project client key and DSN through the vendor API."
+    },
+    {
+      "operation": "listOrganizations",
+      "mechanism": "handler",
+      "demand": "Vendor-backed resource refresh.",
+      "why": "Read-back of stored vendor state through its documented API."
+    },
+    {
+      "operation": "listOrganizationReleases",
+      "mechanism": "handler",
+      "demand": "Vendor-backed resource refresh.",
+      "why": "Read-back of stored vendor state through its documented API."
+    },
+    {
+      "operation": "listOrganizationMonitors",
+      "mechanism": "core",
+      "demand": "Vendor-backed resource refresh.",
+      "why": "The spec names the stored resource and the derived core reads it; no application-specific read behavior is served.",
+      "sourceRules": [
+        {
+          "source": "https://raw.githubusercontent.com/getsentry/sentry/2efdd4760a75a3d395e3534b7f66a7fbb0c3f22e/src/sentry/monitors/serializers.py",
+          "means": "MonitorSerializerResponse"
+        }
+      ]
+    },
+    {
+      "operation": "listProjectMonitorCheckins",
+      "mechanism": "core",
+      "demand": "Vendor-backed resource refresh.",
+      "why": "The spec names the stored resource and the derived core reads it; no application-specific read behavior is served.",
+      "sourceRules": [
+        {
+          "source": "https://raw.githubusercontent.com/getsentry/sentry/2efdd4760a75a3d395e3534b7f66a7fbb0c3f22e/src/sentry/monitors/serializers.py",
+          "means": "MonitorCheckInSerializerResponse"
+        },
+        {
+          "source": "https://raw.githubusercontent.com/getsentry/sentry/2efdd4760a75a3d395e3534b7f66a7fbb0c3f22e/src/sentry/monitors/endpoints/project_monitor_checkin_index.py",
+          "means": "404: RESPONSE_NOT_FOUND"
+        }
+      ]
+    },
+    {
+      "operation": "getPreviousReleaseWithCommits",
+      "mechanism": "handler",
+      "demand": "Cal set-commits local-git fallback (apps/web/scripts/create-sentry-release.js:22).",
+      "why": "sentry-cli reads the preceding release before choosing its commit range.",
+      "sourceRules": [
+        {
+          "source": "https://raw.githubusercontent.com/getsentry/sentry/2efdd4760a75a3d395e3534b7f66a7fbb0c3f22e/src/sentry/issues/endpoints/organization_release_previous_commits.py",
+          "means": "raise ResourceDoesNotExist"
+        },
+        {
+          "source": "https://raw.githubusercontent.com/getsentry/sentry/2efdd4760a75a3d395e3534b7f66a7fbb0c3f22e/src/sentry/issues/endpoints/organization_release_previous_commits.py",
+          "means": "return Response({})"
+        },
+        {
+          "source": "https://raw.githubusercontent.com/getsentry/sentry/2efdd4760a75a3d395e3534b7f66a7fbb0c3f22e/src/sentry/issues/endpoints/organization_release_previous_commits.py",
+          "means": "projects__id__in=project_ids"
+        }
+      ]
+    },
+    {
+      "operation": "getOrganizationIssue",
+      "mechanism": "core",
+      "demand": "Known issue refresh.",
+      "why": "The vendored organization issue operation reads stored issues in a vendor-backed World."
+    }
+  ]
+}

package/dist/journeys/demand.json

@@ -0,0 +1,136 @@
+{
+  "measured": "Application calls and optional settings are recorded below at the cited commits.",
+  "applications": [
+    {
+      "name": "gitroomhq/postiz-app",
+      "commit": "e0a08a7d9592fdc1ef1e82cb7cb781489fceade3",
+      "client": "@sentry/nextjs 10.56.0 feedbackIntegration; the SDK envelope transport",
+      "frontend": [
+        {
+          "call": "A Postiz user sends feedback through the shipped feedback button; its message, contact and user context are sent as a feedback envelope item",
+          "operation": "sendEnvelope",
+          "evidence": "apps/frontend/src/components/new-layout/sentry.feedback.component.tsx:13-24,30-38; libraries/react-shared-libraries/src/sentry/initialize.sentry.client.ts:34-38"
+        }
+      ],
+      "gate": "The shipped button attaches the SDK feedback widget when its DSN is supplied; there is no separate install or feature/provider selection (apps/frontend/src/components/new-layout/sentry.feedback.component.tsx:13-24,30-38; libraries/react-shared-libraries/src/sentry/initialize.sentry.client.ts:34-38)."
+    }
+  ],
+  "notDemanded": "every other operation of Sentry's API (dashboards, alerts, detectors, members, teams, integrations, issue changes, the organization's events and discover queries, replays' and profiles' reads, release files, deploys): no application here calls them.",
+  "optional": [
+    {
+      "commit": "3e63239dbdec9949ea0b4c82e28828c5498464a0",
+      "client": "@sentry/nextjs 10.38 (bundler plugin 4.9, sentry-cli 2.58.4)",
+      "backend": [
+        {
+          "call": "errors, transactions and logs from the server and edge; errors and Session Replay from the browser",
+          "operation": "sendEnvelope",
+          "evidence": "apps/web/sentry.server.config.ts:9"
+        },
+        {
+          "call": "withSentryConfig at build: release, source maps, finalize",
+          "operation": "createProjectRelease; getChunkUploadOptions; uploadChunks; assembleArtifactBundle; updateProjectRelease",
+          "evidence": "apps/web/next.config.ts:194"
+        }
+      ],
+      "application": "lukevella/rallly",
+      "what": "@sentry/nextjs 10.38 (bundler plugin 4.9, sentry-cli 2.58.4)",
+      "setting": "Configuration: operator instrumentation is a setting that turns the reporting provider on; operator error reporting uses SENTRY_DSN/NEXT_PUBLIC_SENTRY_DSN; no person uses the reporting flow (apps/web/instrumentation-client.ts:9-12).",
+      "evidence": "apps/web/instrumentation-client.ts:9-12"
+    },
+    {
+      "commit": "e0a08a7d9592fdc1ef1e82cb7cb781489fceade3",
+      "client": "@sentry/nestjs, @sentry/nextjs and @sentry/react 10.56.0 with profiling (bundler plugin 5.3, sentry-cli 2.58.5)",
+      "backend": [
+        {
+          "call": "errors, transactions and profiles from the backend, with its logs",
+          "operation": "sendEnvelope",
+          "evidence": "libraries/nestjs-libraries/src/sentry/initialize.sentry.ts:34"
+        },
+        {
+          "call": "the frontend: Session Replay and browser profiling (user feedback is a separate demanded frontend call)",
+          "operation": "sendEnvelope",
+          "evidence": "libraries/react-shared-libraries/src/sentry/initialize.sentry.client.ts:34"
+        },
+        {
+          "call": "metrics: counters, gauges and distributions (Sentry.metrics)",
+          "operation": "sendEnvelope",
+          "evidence": "libraries/nestjs-libraries/src/database/prisma/posts/posts.service.ts:994"
+        },
+        {
+          "call": "withSentryConfig at build: release, source maps, finalize",
+          "operation": "createProjectRelease; getChunkUploadOptions; uploadChunks; assembleArtifactBundle; updateProjectRelease",
+          "evidence": "apps/frontend/next.config.js:60"
+        }
+      ],
+      "application": "gitroomhq/postiz-app",
+      "what": "@sentry/nestjs, @sentry/nextjs and @sentry/react 10.56.0 with profiling (bundler plugin 5.3, sentry-cli 2.58.5)",
+      "setting": "Configuration: operator instrumentation is a setting that turns the reporting provider on; operator error, replay, profile and metrics reporting uses NEXT_PUBLIC_SENTRY_DSN (libraries/react-shared-libraries/src/sentry/initialize.sentry.next.basic.ts:4-7). The shipped feedback button using the same SDK is separately demand; supplying its DSN is a credential, not a provider-selection setting.",
+      "evidence": "docker-compose.yaml:89; (apps/frontend/src/instrumentation.ts:2"
+    },
+    {
+      "commit": "1d561b8c73c984058a5121ec229f4805a2424a91",
+      "client": "@sentry/nestjs and @sentry/node 10.73 with profiling, @sentry/react 10.59.0 (lockfile resolution of ^10.51.0)",
+      "backend": [
+        {
+          "call": "errors, transactions and profiles from the server",
+          "operation": "sendEnvelope",
+          "evidence": "packages/twenty-server/src/instrument.ts:67"
+        },
+        {
+          "call": "its cron jobs as monitors: check-ins in progress, ok or error, with the schedule (captureCheckIn)",
+          "operation": "sendEnvelope",
+          "evidence": "packages/twenty-server/src/engine/core-modules/cron/sentry-cron-monitor.decorator.ts:29"
+        },
+        {
+          "call": "the front: errors and Session Replay",
+          "operation": "sendEnvelope",
+          "evidence": "packages/twenty-front/src/modules/error-handler/components/SentryInitEffect.tsx:51"
+        }
+      ],
+      "application": "twentyhq/twenty",
+      "what": "@sentry/nestjs and @sentry/node 10.73 with profiling, @sentry/react 10.59.0 (lockfile resolution of ^10.51.0)",
+      "setting": "Configuration: operator instrumentation is a setting that turns the reporting provider on; EXCEPTION_HANDLER_DRIVER=SENTRY replaces CONSOLE; optional frontend DSN configures operator error reporting (packages/twenty-server/src/engine/core-modules/twenty-config/config-variables.ts:1224-1225; packages/twenty-server/src/instrument.ts:61).",
+      "evidence": "packages/twenty-server/.env.example:50-51; packages/twenty-server/src/instrument.ts:61; packages/twenty-server/src/engine/core-modules/twenty-config/config-variables.ts:1224-1225"
+    },
+    {
+      "commit": "54343aa685ae8f33159d2f485ec4a57bad5c574a",
+      "client": "@sentry/nextjs 10.33, @sentry/nestjs and @sentry/node 9.46 with @sentry/profiling-node; sentry-cli in its release script",
+      "backend": [
+        {
+          "call": "errors and transactions from the web app (server, edge, browser): event and transaction items, with sessions and client reports from the browser",
+          "operation": "sendEnvelope",
+          "evidence": "apps/web/sentry.server.config.ts:9"
+        },
+        {
+          "call": "the API v2 service: errors, transactions and profiles",
+          "operation": "sendEnvelope",
+          "evidence": "apps/api/v2/src/instrument.ts:9"
+        },
+        {
+          "call": "sentry-cli releases new (one project: the project release path)",
+          "operation": "createProjectRelease",
+          "evidence": "apps/web/scripts/create-sentry-release.js:19"
+        },
+        {
+          "call": "sentry-cli releases set-commits --auto --ignore-missing: the organization repositories, then the refs",
+          "operation": "listOrganizationRepos; getPreviousReleaseWithCommits; updateOrganizationRelease",
+          "evidence": "apps/web/scripts/create-sentry-release.js:22"
+        },
+        {
+          "call": "sentry-cli sourcemaps upload: chunk options, chunks, the artifact bundle assembled",
+          "operation": "getChunkUploadOptions; uploadChunks; assembleArtifactBundle",
+          "evidence": "apps/web/scripts/create-sentry-release.js:31"
+        },
+        {
+          "call": "sentry-cli releases finalize",
+          "operation": "updateProjectRelease",
+          "evidence": "apps/web/scripts/create-sentry-release.js:39"
+        }
+      ],
+      "application": "calcom/cal.diy",
+      "what": "@sentry/nextjs 10.33, @sentry/nestjs and @sentry/node 9.46 with @sentry/profiling-node; sentry-cli in its release script",
+      "setting": "Configuration: operator instrumentation is a setting that turns the reporting provider on; operator error reporting requires DSN/sampling; the plain callback is the default (packages/lib/sentryWrapper.ts:27; .env.example:165-166).",
+      "evidence": ".env.example:165-166"
+    }
+  ]
+}

package/dist/journeys/score.json

@@ -0,0 +1,231 @@
+{
+  "vendor": "sentry",
+  "life": {
+    "steps": 50,
+    "verdict": "unjudged",
+    "judge": null,
+    "authors": []
+  },
+  "failures": [],
+  "flags": [],
+  "coverage": {
+    "vendor": "sentry",
+    "missing": 11,
+    "stale": [],
+    "code": {
+      "lines": 919,
+      "run": 900,
+      "recorded": 8,
+      "missing": 11
+    },
+    "state": {
+      "declared": 2,
+      "reached": 2,
+      "recorded": 0,
+      "missing": [],
+      "undeclared": []
+    },
+    "files": [
+      {
+        "file": "semantics/shared.ts",
+        "lines": {
+          "found": 279,
+          "hit": 277
+        },
+        "missing": []
+      },
+      {
+        "file": "manifest.ts",
+        "lines": {
+          "found": 33,
+          "hit": 33
+        },
+        "missing": []
+      },
+      {
+        "file": "index.ts",
+        "lines": {
+          "found": 10,
+          "hit": 10
+        },
+        "missing": []
+      },
+      {
+        "file": "server.ts",
+        "lines": {
+          "found": 4,
+          "hit": 2
+        },
+        "missing": []
+      },
+      {
+        "file": "fetch.ts",
+        "lines": {
+          "found": 6,
+          "hit": 6
+        },
+        "missing": []
+      },
+      {
+        "file": "../api/src/semantics/doors.ts",
+        "lines": {
+          "found": 27,
+          "hit": 23
+        },
+        "missing": []
+      },
+      {
+        "file": "../api/src/semantics/states.ts",
+        "lines": {
+          "found": 9,
+          "hit": 9
+        },
+        "missing": []
+      },
+      {
+        "file": "../api/src/semantics/api.ts",
+        "lines": {
+          "found": 164,
+          "hit": 157
+        },
+        "missing": [
+          {
+            "from": 38,
+            "to": 41,
+            "fn": "makeRelease"
+          },
+          {
+            "from": 222,
+            "to": 224,
+            "fn": "listOrganizationReleases"
+          }
+        ]
+      },
+      {
+        "file": "../api/src/semantics/shared.ts",
+        "lines": {
+          "found": 17,
+          "hit": 17
+        },
+        "missing": []
+      },
+      {
+        "file": "../api/src/semantics/around.ts",
+        "lines": {
+          "found": 27,
+          "hit": 23
+        },
+        "missing": [
+          {
+            "from": 27,
+            "to": 30,
+            "fn": "around"
+          }
+        ]
+      },
+      {
+        "file": "../api/src/semantics/index.ts",
+        "lines": {
+          "found": 15,
+          "hit": 15
+        },
+        "missing": []
+      },
+      {
+        "file": "../api/src/manifest.ts",
+        "lines": {
+          "found": 112,
+          "hit": 112
+        },
+        "missing": []
+      },
+      {
+        "file": "../api/src/index.ts",
+        "lines": {
+          "found": 2,
+          "hit": 2
+        },
+        "missing": []
+      },
+      {
+        "file": "../api/src/fetch.ts",
+        "lines": {
+          "found": 14,
+          "hit": 14
+        },
+        "missing": []
+      },
+      {
+        "file": "../ingest/src/semantics/api.ts",
+        "lines": {
+          "found": 153,
+          "hit": 153
+        },
+        "missing": []
+      },
+      {
+        "file": "../ingest/src/semantics/shared.ts",
+        "lines": {
+          "found": 2,
+          "hit": 2
+        },
+        "missing": []
+      },
+      {
+        "file": "../ingest/src/semantics/around.ts",
+        "lines": {
+          "found": 3,
+          "hit": 3
+        },
+        "missing": []
+      },
+      {
+        "file": "../ingest/src/semantics/index.ts",
+        "lines": {
+          "found": 4,
+          "hit": 4
+        },
+        "missing": []
+      },
+      {
+        "file": "../ingest/src/manifest.ts",
+        "lines": {
+          "found": 24,
+          "hit": 24
+        },
+        "missing": []
+      },
+      {
+        "file": "../ingest/src/index.ts",
+        "lines": {
+          "found": 2,
+          "hit": 2
+        },
+        "missing": []
+      },
+      {
+        "file": "../ingest/src/fetch.ts",
+        "lines": {
+          "found": 12,
+          "hit": 12
+        },
+        "missing": []
+      }
+    ]
+  },
+  "examples": {
+    "done": false,
+    "replayed": false,
+    "verdict": "unjudged",
+    "failures": [
+      "FAIL  listOrganizations published account response  [EXAMPLE] .0.features has 34 items, the published answer has 5"
+    ],
+    "line": "examples: 204 published, 0 of patch-removed operations, 175 of operations the twin does not serve, 21 replayed, 8 recorded; 1 failing   done: no"
+  },
+  "breadth": {
+    "operations": 253,
+    "handler": 13,
+    "gap": 235,
+    "core": 5
+  }
+}

package/dist/journeys/unreachable.json

@@ -0,0 +1,29 @@
+{
+  "code": [
+    {
+      "file": "server.ts",
+      "declarations": [
+        "createSentryTwinServer"
+      ],
+      "world": "host-process",
+      "why": "The journey drives the fetch in-process; serveHttp belongs to the owning host process."
+    },
+    {
+      "file": "../api/src/semantics/doors.ts",
+      "declarations": [
+        "organizations"
+      ],
+      "world": "door",
+      "why": "Additional account signup belongs only to the World account door; the application account uses descriptor bootstrap."
+    },
+    {
+      "file": "semantics/shared.ts",
+      "declarations": [
+        "reissueHeldToken"
+      ],
+      "world": "door",
+      "why": "Repeat bootstrap at World boot rederives the held credential from custody; application calls issue their token once."
+    }
+  ],
+  "state": []
+}