/*!
 * Copyright (c) 2026 Interop Alliance. All rights reserved.
 */
/**
 * The `@interop/wallet-core/clients` subpath: the enrolled-client management
 * surface -- the place "disconnect this wallet" lives -- and the cascades
 * behind it.
 *
 * - `listAccountClients` / `currentAccountSigningKeys` /
 *   `currentAccountRecordSigners` -- the listing over the locally verified
 *   did:webvh log, with display labels merged; the same read reduced to the
 *   key set an app grant's delegation signer is checked against; and that
 *   set widened by the document's ladder VMs, the allowlist a re-minted
 *   unlock or recovery record's proof is settled against. All take an
 *   already-verified log in place of fetching one.
 * - `deriveGrantSignerState` -- the grant-state check a connected-apps
 *   surface runs over a recorded delegation's signer against that key set:
 *   active, orphaned (an enrolled client the account struck), or unknown
 *   (nothing to check against, or a client-annex per-visit signer the
 *   document never lists).
 * - `disconnectEligibility` / `revokedClientKeysFor` / `cascadeCompletion` --
 *   the disconnect-eligibility policy as data and pure functions, so both
 *   surfaces refuse the same rows for the same reasons and report a partial
 *   fan-out as the resumable success it is.
 * - `revokeAccountClient` -- the revocation cascade in dependency order
 *   (document edit, roster rotation with its seal backstop, collection
 *   fan-out, the optional generation-delegation re-mint), with the
 *   app-specific stages injected. It writes no unlock record: each is signed
 *   by its own credential (`decisions/0019`).
 * - `checkUserKeyRosterAtLogin` / `convergeUserKeyRosterToAccount` -- the
 *   login-time
 *   roster policy: which roster failures refuse a session, and the standing
 *   convergence of the roster onto the account document (recipients, then
 *   the roster log's seal).
 */
export { currentAccountRecordSigners, currentAccountSigningKeys, listAccountClients } from './listing.js';
export type { AccountClientView, AccountLogPointer, VerifiedAccountLog } from './listing.js';
export { deriveGrantSignerState } from './grantState.js';
export type { GrantSignerState } from './grantState.js';
export { cascadeCompletion, disconnectEligibility, revokedClientKeysFor } from './policy.js';
export type { DisconnectRefusal } from './policy.js';
export { revokeAccountClient } from './revocation.js';
export type { CascadeCollections, ClientRevocationResult, GenerationDelegationRemint, RosterSealReport } from './revocation.js';
export { checkUserKeyRosterAtLogin, convergeUserKeyRosterToAccount } from './rosterPolicy.js';
export type { AdoptedUserKey } from './rosterPolicy.js';
//# sourceMappingURL=index.d.ts.map