API Reference crosswake v#0.1.2

Public entry point for Crosswake policy authoring and normalization.

Defines the core Audit Ledger contract struct and HMAC anonymization helper.

Payload structs for app.info.get bridge command.

Typed payload structs for the transfer-bound files.pick bridge command.

Payload structs for haptics.impact bridge command.

Typed payload structs for the prompt-free notifications.token.get bridge command.

Typed payload structs for the read-only permissions.status bridge command.

Payload structs for share.invoke bridge command.

Typed, versioned, request/reply-only contract for the bounded Phase 3 bridge.

Typed denial reply payload for bounded bridge requests.

Manifest-backed Phase 3 bridge allowlist.

Thin behaviour/orchestration seam for Phoenix-owned commerce intent and snapshot hooks.

Typed commerce contract surfaces shared by core, route policy, and manifest truth.

Typed backend-owned reconciliation vocabulary for commerce.

A typed record of a backend-owned reconciliation attempt.

Represents an evidence-only result state for device purchase, restore, or native callback success. These states do not directly mutate entitlement authority.

Provider-aware and backend-owned idempotency fields. Transient device correlation ids are not part of this key.

Behaviour for first-party Phoenix-native companion integrations.

Provider-neutral Chimeway token evidence and binding contracts.

Canonical denial subcodes and sanitization for Chimeway notification open intents.

Behaviour for host registry/resolver to implement intent and state checks for notification opens.

Raw-token boundary helpers for Chimeway notification evidence.

Resolves notification open evidence against the Crosswake manifest and backend intent state, and delegates to RouteGate.

Stable telemetry contract for Chimeway notification diagnostics.

Typed media seam contracts for the first-party Rindle companion.

Evidence reported after a device or native upload attempt.

Backend-owned media projection and availability state.

Backend-issued permission to upload one media object.

Backend-owned reconciliation vocabulary for Rindle media capture evidence.

A backend-owned media reconciliation attempt.

Evidence-only result of media capture ingestion.

Stable media evidence idempotency fields.

Named Agent storing flag state for local dev and hermetic proof tests.

Pure Sigra auth-return boundary contracts.

Host-owned authoritative auth-return attempt record contract.

Append-only auth-return lifecycle evidence contract.

Successful backend auth-return validation result.

Shared outer auth-return envelope.

Native auth-return evidence posture after transport parsing.

Provider-neutral OAuth/OIDC return evidence posture.

Provider-neutral passkey/WebAuthn assertion evidence posture.

Host validation input after transport-specific parsing.

Typed auth contracts for the Sigra backend seam.

Backend-projected auth context used for route-level auth checks.

Backend-owned session authority facts.

Reference-only step-up requirement state.

Canonical Sigra auth denial subcodes and shell-safe detail sanitization.

Pure Sigra route-auth evaluator for backend-owned session authority.

Pure Sigra session handoff contracts.

Append-only handoff lifecycle evidence contract.

Signed-envelope payload after host verification.

Successful backend redemption result.

Host redemption input after transport-specific parsing.

Host-owned server ticket record contract.

Host-owned Phoenix session renewal instructions.

Pure Sigra step-up intent contracts.

Host-owned session, CSRF, and LiveView invalidation instructions.

Append-only step-up lifecycle evidence contract.

Host-owned challenge descriptor for a server-backed step-up intent.

Successful backend step-up completion result.

Host consume input after locator parsing and challenge evidence collection.

Low-sensitivity locator payload after host transport verification.

Host-owned authoritative step-up intent record contract.

Shared Sigra step-up ceremony decision core.

Stable telemetry contract for Sigra auth diagnostics.

Layered compatibility evaluation for manifests and route activation.

Fail-closed route activation decisions derived from layered compatibility findings.

Host-truth-first diagnostics over install state, policy compilation, manifest truth, shell posture, bounded bridge posture, and support verification.

Structured doctor finding.

Central Phase 18 finding taxonomy for proof posture and support-claim severity.

Human-readable formatter for Crosswake doctor reports.

Stable JSON formatter for Crosswake doctor reports.

Deterministic release/support readiness checks for mix crosswake.doctor --check-publish.

Persists machine-readable scaffold state for later diagnostics and upgrade tooling.

Applies explicit, idempotent Crosswake install patches to host-owned files.

LiveView on_mount thread_id metadata bridge.

Canonical Phase 2 manifest compiler.

Builds the route-first manifest root from compiled Crosswake route policy.

Deterministic JSON renderer and idempotent writer for the canonical manifest artifact.

Typed manifest contract shared by manifest generation, compatibility checks, doctor diagnostics, and support-matrix rendering.

Validates manifest contract truth before serialization or release artifact output.

Typed contract for Crosswake's single public native escape hatch: route-owned media capture with explicit local staging and explicit transfer handoff.

Runtime helpers for the single native media-capture escape hatch.

Data structure representing an offline content pack.

Typed Phase 4 offline contract surfaces for the cached-route and study-session exemplar.

Immutable journal contract for committed offline study-session actions.

Typed replay request and outcome contract for the study-session exemplar.

Executable runtime contract for cached hydration and the study-session island.

Stable route-local offline vocabulary for Crosswake support surfaces.

Stable telemetry metadata contract for offline transitions and outcomes.

Route-authoritative operator inspection contract.

Human-readable formatter for route-authoritative operator inspection documents.

Stable JSON formatter for operator inspection documents.

Typed operator inspection contract.

Typed pack lifecycle vocabulary shared across activation, shell UI, and proof lanes.

Installed-pack inventory truth consumed by activation, compatibility, and shell UI.

Derives fail-closed lifecycle state from manifest pack references and installed inventory.

Deterministic closeout checks for milestone planning artifacts.

HTTP thread_id read/mint Plug with telemetry triplet.

Namespace for Crosswake route policy contracts.

Compiles Crosswake-managed router metadata into normalized route policy.

Canonical provider-neutral commerce corridor declarations used by manifest assembly.

Canonical defaults for Phase 1 route policy declarations.

Aggregated compile-time diagnostics for Crosswake route policy.

Structured compile-time route policy error with route-local context.

Merge helpers for router-authored Crosswake policy.

Normalized Phase 1 route policy contract.

Attaches and extracts compiled Crosswake route policy from Phoenix route metadata.

NimbleOptions schema for Phase 1 Crosswake route policy declarations.

Semantic invariant checks for normalized Crosswake route policy.

Non-blocking adoption warning for unmanaged routes.

Phoenix-native router DSL for authoring Crosswake policy next to routes.

Applies nested Crosswake defaults directly to router AST.

Policy contract deriving OTA-safe vs. rebuild-required classification from the existing native_runtime_version compatibility axis.

Shared activation contract for native shell entrypoints.

Stable denial envelope shared by shell activation and bounded bridge replies.

Behaviour-only transport seam for the diagnostic export contract.

Typed, versioned diagnostic envelope with layer attribution (D-06).

Typed diagnostic codes for native-layer (iOS/Android) diagnostic events.

Canonical bundled shell fixtures derived from manifest truth, shared activation contracts, and stable denial vocabulary.

Canonical support-matrix truth shared across manifest generation, doctor, and docs.

Deterministic Markdown renderer for the canonical support matrix guide.

Core structs for the sync event log.

RFC-4122 v4 UUID minting for Crosswake Threadline.

Telemetry contract for Crosswake Threadline correlation diagnostics.

Typed, versioned route-local transfer declarations for upload, download, import, and export seams.

Route-local transfer runtime status helpers.

Runs deterministic closeout checks over planning artifacts and release truth.

Runs host-truth-first diagnostics over installer state, route-policy compilation, manifest validity, and support-matrix consistency.

Generates host-owned offline UI components.

Generates reviewable iOS or Android shell baselines, bundled manifest-backed activation fixtures, and explicit ownership guidance without claiming runtime behavior Crosswake has not proven yet.

Emits a route-authoritative Crosswake operator inspection document.

Bootstraps a Phoenix host for Crosswake with explicit markers, a host-owned policy module, and a machine-readable install manifest.

Presents a Native -> Bridge -> Phoenix chronological timeline visualization for a given thread_id or actor_ref.