@agoric/vats 0.15.2-dev-aa68d8f.0 → 0.15.2-dev-96c9ff5.0

package/src/vat-bank.d.ts

@@ -8,7 +8,7 @@ export function buildRootObject(_vatPowers: any, _args: any, baggage: any): {
      */
     makeBankManager(bankBridgeManagerP?: ERef<import("./types.js").ScopedBridgeManager | undefined>, nameAdminP?: globalThis.ERef<{
         update: import("./types.js").NameAdmin["update"];
-    }> | undefined): Promise<import("@endo/exo").Guarded<{
+    }> | undefined): Promise<Guarded<{
         /**
          * Returns assets as they are added to the bank.
          *
@@ -57,7 +57,7 @@ export function buildRootObject(_vatPowers: any, _args: any, baggage: any): {
          */
         getBankForAddress(address: string): Promise<Bank>;
     }>>;
-} & import("@endo/eventual-send").RemotableBrand<{}, {
+} & RemotableObject<`Alleged: ${string}`> & import("@endo/eventual-send").RemotableBrand<{}, {
     /**
      * @param {ERef<import('./types.js').ScopedBridgeManager | undefined>} [bankBridgeManagerP]
      *   a bridge manager for the "remote" bank (such as on cosmos-sdk). If not
@@ -67,7 +67,7 @@ export function buildRootObject(_vatPowers: any, _args: any, baggage: any): {
      */
     makeBankManager(bankBridgeManagerP?: ERef<import("./types.js").ScopedBridgeManager | undefined>, nameAdminP?: globalThis.ERef<{
         update: import("./types.js").NameAdmin["update"];
-    }> | undefined): Promise<import("@endo/exo").Guarded<{
+    }> | undefined): Promise<Guarded<{
         /**
          * Returns assets as they are added to the bank.
          *
@@ -117,11 +117,16 @@ export function buildRootObject(_vatPowers: any, _args: any, baggage: any): {
         getBankForAddress(address: string): Promise<Bank>;
     }>>;
 }>;
-/** @typedef {AssetIssuerKit & { denom: string; escrowPurse?: ERef<Purse> }} AssetRecord */
+/**
+ * @typedef {AssetIssuerKit & {
+ *   denom: string;
+ *   escrowPurse?: RemotableObject & ERef<Purse>;
+ * }} AssetRecord
+ */
 /**
  * @typedef {object} AssetDescriptor
  * @property {Brand} brand
- * @property {ERef<Issuer>} issuer
+ * @property {RemotableObject & ERef<Issuer>} issuer
  * @property {string} issuerName
  * @property {string} denom
  * @property {string} proposedName
@@ -146,20 +151,26 @@ export const BankI: import("@endo/patterns").InterfaceGuard<{
 export type VirtualPurse = Awaited<ReturnType<ReturnType<typeof prepareVirtualPurse>>>;
 export type BalanceUpdater = {
     update: (value: string, nonce?: string) => void;
-};
+} & import("../../../node_modules/@endo/exo/src/get-interface.js").GetInterfaceGuard<{
+    update: (value: string, nonce?: string) => void;
+}> & import("@endo/eventual-send").RemotableBrand<{}, {
+    update: (value: string, nonce?: string) => void;
+} & import("../../../node_modules/@endo/exo/src/get-interface.js").GetInterfaceGuard<{
+    update: (value: string, nonce?: string) => void;
+}>> & RemotableObject;
 export type BridgeChannel = Pick<import("./types.js").ScopedBridgeManager, "fromBridge" | "toBridge">;
 export type AssetIssuerKit<K extends globalThis.AssetKind = globalThis.AssetKind> = {
-    mint?: globalThis.ERef<globalThis.Mint<K>> | undefined;
-    issuer: ERef<Issuer<K>>;
+    mint?: globalThis.Mint<K> | undefined;
+    issuer: Issuer<K>;
     brand: Brand<K>;
 };
-export type AssetRecord = AssetIssuerKit & {
+export type AssetRecord = AssetIssuerKit<globalThis.AssetKind> & {
     denom: string;
-    escrowPurse?: ERef<Purse>;
+    escrowPurse?: (RemotableObject & globalThis.ERef<globalThis.Purse>) | undefined;
 };
 export type AssetDescriptor = {
     brand: Brand;
-    issuer: ERef<Issuer>;
+    issuer: RemotableObject & globalThis.ERef<globalThis.Issuer>;
     issuerName: string;
     denom: string;
     proposedName: string;
@@ -180,6 +191,8 @@ export type Bank = {
     getPurse: (brand: Brand) => Promise<VirtualPurse>;
 };
 export type BankManager = ReturnType<ReturnType<typeof prepareBankManager>>;
+import type { Guarded } from '@endo/exo';
+import type { RemotableObject } from '@endo/pass-style';
 import { prepareVirtualPurse } from './virtual-purse.js';
 /**
  * @param {import('@agoric/zone').Zone} zone
@@ -191,12 +204,12 @@ import { prepareVirtualPurse } from './virtual-purse.js';
  * @param {ReturnType<prepareVirtualPurse>} makers.makeVirtualPurse
  */
 declare function prepareBankManager(zone: import("@agoric/zone").Zone, { provideAssetSubscription, makeBank, makePublishKit, makeRewardPurseController, makeVirtualPurse, }: {
-    provideAssetSubscription: ReturnType<(zone: import("@agoric/zone").Zone) => (brandToAssetDescriptor?: any, assetSubscriber?: any) => import("@endo/exo").Guarded<{
+    provideAssetSubscription: ReturnType<(zone: import("@agoric/zone").Zone) => (brandToAssetDescriptor?: any, assetSubscriber?: any) => Guarded<{
         subscribeAfter(publishCount?: bigint): any;
         [Symbol.asyncIterator](): import("@agoric/notifier").ForkableAsyncIterableIterator<any, any>;
     }>>;
     makeBank: ReturnType<(zone: import("@agoric/zone").Zone, { provideAssetSubscription, makePublishKit, makeVirtualPurse }: {
-        provideAssetSubscription: ReturnType<(zone: import("@agoric/zone").Zone) => (brandToAssetDescriptor?: any, assetSubscriber?: any) => import("@endo/exo").Guarded<{
+        provideAssetSubscription: ReturnType<(zone: import("@agoric/zone").Zone) => (brandToAssetDescriptor?: any, assetSubscriber?: any) => Guarded<{
             subscribeAfter(publishCount?: bigint): any;
             [Symbol.asyncIterator](): import("@agoric/notifier").ForkableAsyncIterableIterator<any, any>;
         }>>;
@@ -218,117 +231,7 @@ declare function prepareBankManager(zone: import("@agoric/zone").Zone, { provide
             brand: Brand;
             mint?: ERef<Mint>;
             escrowPurse?: ERef<Purse>;
-        }) => Promise<{
-            /**
-             * Get the alleged Brand for this
-             * Purse
-             */
-            getAllegedBrand: () => globalThis.ERef<{
-                /**
-                 *   Should be used with `issuer.getBrand` to ensure an issuer and brand match.
-                 */
-                isMyIssuer: (allegedIssuer: globalThis.ERef<globalThis.Issuer>) => globalThis.ERef<boolean>;
-                getAllegedName: () => globalThis.ERef<string>;
-                /**
-                 * Give information to UI on how
-                 * to display the amount.
-                 */
-                getDisplayInfo: () => globalThis.ERef<globalThis.DisplayInfo<globalThis.AssetKind>>;
-                getAmountShape: () => any;
-            }>;
-            /**
-             * Get the amount contained in this
-             * purse.
-             */
-            getCurrentAmount: () => globalThis.ERef<globalThis.Amount<globalThis.AssetKind>>;
-            /**
-             * Get a lossy
-             * notifier for changes to this purse's balance.
-             */
-            getCurrentAmountNotifier: () => globalThis.ERef<{
-                /**
-                 * Returns a promise for an update record as of an update count.
-                 * If the `updateCount` argument is omitted or differs from the current update count,
-                 * the promise promptly resolves to the current record.
-                 * Otherwise, after the next state change, the promise resolves to the resulting record.
-                 * This is an attenuated form of `subscribeAfter` whose return value stands alone and
-                 * does not allow consumers to pin a chain of historical PublicationRecords.
-                 * Used to make lossy ("latest") iterators.
-                 * NOTE: Use of `number` as an `updateCount` is deprecated.
-                 */
-                getUpdateSince: (updateCount?: number | bigint | undefined) => globalThis.ERef<globalThis.UpdateRecord<globalThis.Amount<globalThis.AssetKind>>>;
-            }>;
-            /**
-             * Deposit all the contents of payment into
-             * this purse, returning the amount. If the optional argument `optAmount` does
-             * not equal the amount of digital assets in the payment, throw an error.
-             *
-             * If payment is a promise, throw an error.
-             */
-            deposit: (args_0: globalThis.Payment<globalThis.AssetKind>, args_1?: any) => globalThis.ERef<globalThis.Amount<globalThis.AssetKind>>;
-            /**
-             * Return an object whose
-             * `receive` method deposits to the current Purse.
-             */
-            getDepositFacet: () => globalThis.ERef<{
-                /**
-                 * Deposit all the contents of payment
-                 * into the purse that made this facet, returning the amount. If the optional
-                 * argument `optAmount` does not equal the amount of digital assets in the
-                 * payment, throw an error.
-                 *
-                 * If payment is a promise, throw an error.
-                 */
-                receive: (args_0: globalThis.Payment, args_1?: any) => globalThis.ERef<globalThis.Amount>;
-            }>;
-            /**
-             * Withdraw amount from
-             * this purse into a new Payment.
-             */
-            withdraw: (amount: globalThis.Amount<globalThis.AssetKind>) => globalThis.ERef<{
-                /**
-                 * Get the allegedBrand, indicating
-                 * the type of digital asset this payment purports to be, and which issuer to
-                 * use. Because payments are not trusted, any method calls on payments should
-                 * be treated with suspicion and verified elsewhere.
-                 */
-                getAllegedBrand: () => globalThis.ERef<{
-                    /**
-                     *   Should be used with `issuer.getBrand` to ensure an issuer and brand match.
-                     */
-                    isMyIssuer: (allegedIssuer: globalThis.ERef<globalThis.Issuer>) => globalThis.ERef<boolean>;
-                    getAllegedName: () => globalThis.ERef<string>;
-                    /**
-                     * Give information to UI on how
-                     * to display the amount.
-                     */
-                    getDisplayInfo: () => globalThis.ERef<globalThis.DisplayInfo<globalThis.AssetKind>>;
-                    getAmountShape: () => any;
-                }>;
-            }>;
-            /**
-             * The set of payments
-             * withdrawn from this purse that are still live. These are the payments that
-             * can still be recovered in emergencies by, for example, depositing into this
-             * purse. Such a deposit action is like canceling an outstanding check because
-             * you're tired of waiting for it. Once your cancellation is acknowledged, you
-             * can spend the assets at stake on other things. Afterwards, if the recipient
-             * of the original check finally gets around to depositing it, their deposit
-             * fails.
-             *
-             * Returns an empty set if this issuer does not support recovery sets.
-             */
-            getRecoverySet: () => globalThis.ERef<import("@endo/patterns").CopySet<globalThis.Payment<globalThis.AssetKind>>>;
-            /**
-             * For use in emergencies, such as coming
-             * back from a traumatic crash and upgrade. This deposits all the payments in
-             * this purse's recovery set into the purse itself, returning the total amount
-             * of assets recovered.
-             *
-             * Returns an empty amount if this issuer does not support recovery sets.
-             */
-            recoverAll: () => globalThis.ERef<globalThis.Amount<globalThis.AssetKind>>;
-        }>>;
+        }) => Promise<globalThis.Purse>>;
     }) => (args_0: {
         address: string;
         assetSubscriber: EachTopic<AssetDescriptor>;
@@ -337,130 +240,13 @@ declare function prepareBankManager(zone: import("@agoric/zone").Zone, { provide
         brandToAssetRecord: MapStore<Brand, AssetRecord>;
         brandToVPurse: MapStore<Brand, VirtualPurse>;
         denomToAddressUpdater: MapStore<string, MapStore<string, BalanceUpdater>>;
-    }) => import("@endo/exo").Guarded<{
-        getAssetSubscription(): import("@endo/exo").Guarded<{
+    }) => Guarded<{
+        getAssetSubscription(): Guarded<{
             subscribeAfter(publishCount?: bigint): any;
             [Symbol.asyncIterator](): import("@agoric/notifier").ForkableAsyncIterableIterator<any, any>;
         }>;
         /** @param {Brand} brand */
-        getPurse(brand: Brand): Promise<{
-            /**
-             * Get the alleged Brand for this
-             * Purse
-             */
-            getAllegedBrand: () => globalThis.ERef<{
-                /**
-                 *   Should be used with `issuer.getBrand` to ensure an issuer and brand match.
-                 */
-                isMyIssuer: (allegedIssuer: globalThis.ERef<globalThis.Issuer>) => globalThis.ERef<boolean>;
-                getAllegedName: () => globalThis.ERef<string>;
-                /**
-                 * Give information to UI on how
-                 * to display the amount.
-                 */
-                getDisplayInfo: () => globalThis.ERef<globalThis.DisplayInfo<globalThis.AssetKind>>;
-                getAmountShape: () => any;
-            }>;
-            /**
-             * Get the amount contained in this
-             * purse.
-             */
-            getCurrentAmount: () => globalThis.ERef<globalThis.Amount<globalThis.AssetKind>>;
-            /**
-             * Get a lossy
-             * notifier for changes to this purse's balance.
-             */
-            getCurrentAmountNotifier: () => globalThis.ERef<{
-                /**
-                 * Returns a promise for an update record as of an update count.
-                 * If the `updateCount` argument is omitted or differs from the current update count,
-                 * the promise promptly resolves to the current record.
-                 * Otherwise, after the next state change, the promise resolves to the resulting record.
-                 * This is an attenuated form of `subscribeAfter` whose return value stands alone and
-                 * does not allow consumers to pin a chain of historical PublicationRecords.
-                 * Used to make lossy ("latest") iterators.
-                 * NOTE: Use of `number` as an `updateCount` is deprecated.
-                 */
-                getUpdateSince: (updateCount?: number | bigint | undefined) => globalThis.ERef<globalThis.UpdateRecord<globalThis.Amount<globalThis.AssetKind>>>;
-            }>;
-            /**
-             * Deposit all the contents of payment into
-             * this purse, returning the amount. If the optional argument `optAmount` does
-             * not equal the amount of digital assets in the payment, throw an error.
-             *
-             * If payment is a promise, throw an error.
-             */
-            deposit: (args_0: globalThis.Payment<globalThis.AssetKind>, args_1?: any) => globalThis.ERef<globalThis.Amount<globalThis.AssetKind>>;
-            /**
-             * Return an object whose
-             * `receive` method deposits to the current Purse.
-             */
-            getDepositFacet: () => globalThis.ERef<{
-                /**
-                 * Deposit all the contents of payment
-                 * into the purse that made this facet, returning the amount. If the optional
-                 * argument `optAmount` does not equal the amount of digital assets in the
-                 * payment, throw an error.
-                 *
-                 * If payment is a promise, throw an error.
-                 */
-                receive: (args_0: globalThis.Payment, args_1?: any) => globalThis.ERef<globalThis.Amount>;
-            }>;
-            /**
-             * Withdraw amount from
-             * this purse into a new Payment.
-             */
-            withdraw: (amount: globalThis.Amount<globalThis.AssetKind>) => globalThis.ERef<{
-                /**
-                 * Get the allegedBrand, indicating
-                 * the type of digital asset this payment purports to be, and which issuer to
-                 * use. Because payments are not trusted, any method calls on payments should
-                 * be treated with suspicion and verified elsewhere.
-                 */
-                getAllegedBrand: () => globalThis.ERef<{
-                    /**
-                     *   Should be used with `issuer.getBrand` to ensure an issuer and brand match.
-                     */
-                    /**
-                     *   Should be used with `issuer.getBrand` to ensure an issuer and brand match.
-                     */
-                    isMyIssuer: (allegedIssuer: globalThis.ERef<globalThis.Issuer>) => globalThis.ERef<boolean>;
-                    getAllegedName: () => globalThis.ERef<string>;
-                    /**
-                     * Give information to UI on how
-                     * to display the amount.
-                     */
-                    /**
-                     * Give information to UI on how
-                     * to display the amount.
-                     */
-                    getDisplayInfo: () => globalThis.ERef<globalThis.DisplayInfo<globalThis.AssetKind>>;
-                    getAmountShape: () => any;
-                }>;
-            }>;
-            /**
-             * The set of payments
-             * withdrawn from this purse that are still live. These are the payments that
-             * can still be recovered in emergencies by, for example, depositing into this
-             * purse. Such a deposit action is like canceling an outstanding check because
-             * you're tired of waiting for it. Once your cancellation is acknowledged, you
-             * can spend the assets at stake on other things. Afterwards, if the recipient
-             * of the original check finally gets around to depositing it, their deposit
-             * fails.
-             *
-             * Returns an empty set if this issuer does not support recovery sets.
-             */
-            getRecoverySet: () => globalThis.ERef<import("@endo/patterns").CopySet<globalThis.Payment<globalThis.AssetKind>>>;
-            /**
-             * For use in emergencies, such as coming
-             * back from a traumatic crash and upgrade. This deposits all the payments in
-             * this purse's recovery set into the purse itself, returning the total amount
-             * of assets recovered.
-             *
-             * Returns an empty amount if this issuer does not support recovery sets.
-             */
-            recoverAll: () => globalThis.ERef<globalThis.Amount<globalThis.AssetKind>>;
-        }>;
+        getPurse(brand: Brand): Promise<RemotableObject & import("@agoric/ertp/exported.js").PurseMethods<globalThis.AssetKind, import("@endo/patterns").Key>>;
     }>>;
     makePublishKit: ReturnType<(baggage: import("@agoric/swingset-liveslots").Baggage, kindName: string) => (options?: {
         valueDurability?: "mandatory" | undefined;
@@ -475,7 +261,7 @@ declare function prepareBankManager(zone: import("@agoric/zone").Zone, { provide
             getUpdateSince(updateCount: any): any;
         };
     }>>;
-    makeRewardPurseController: ReturnType<(zone: import("@agoric/zone").Zone) => (bankChannel: BridgeChannel, denom: string, brand: globalThis.Brand) => import("@endo/exo").Guarded<{
+    makeRewardPurseController: ReturnType<(zone: import("@agoric/zone").Zone) => (bankChannel: BridgeChannel, denom: string, brand: globalThis.Brand) => Guarded<{
         getBalances(b: any): globalThis.Notifier<any>;
         pullAmount(_amount: any): Promise<never>;
         pushAmount(amount: any): Promise<void>;
@@ -485,207 +271,12 @@ declare function prepareBankManager(zone: import("@agoric/zone").Zone, { provide
         brand: Brand;
         mint?: ERef<Mint>;
         escrowPurse?: ERef<Purse>;
-    }) => Promise<{
-        /**
-         * Get the alleged Brand for this
-         * Purse
-         */
-        /**
-         * Get the alleged Brand for this
-         * Purse
-         */
-        getAllegedBrand: () => globalThis.ERef<{
-            /**
-             *   Should be used with `issuer.getBrand` to ensure an issuer and brand match.
-             */
-            /**
-             *   Should be used with `issuer.getBrand` to ensure an issuer and brand match.
-             */
-            isMyIssuer: (allegedIssuer: globalThis.ERef<globalThis.Issuer>) => globalThis.ERef<boolean>;
-            getAllegedName: () => globalThis.ERef<string>;
-            /**
-             * Give information to UI on how
-             * to display the amount.
-             */
-            /**
-             * Give information to UI on how
-             * to display the amount.
-             */
-            getDisplayInfo: () => globalThis.ERef<globalThis.DisplayInfo<globalThis.AssetKind>>;
-            getAmountShape: () => any;
-        }>;
-        /**
-         * Get the amount contained in this
-         * purse.
-         */
-        /**
-         * Get the amount contained in this
-         * purse.
-         */
-        getCurrentAmount: () => globalThis.ERef<globalThis.Amount<globalThis.AssetKind>>;
-        /**
-         * Get a lossy
-         * notifier for changes to this purse's balance.
-         */
-        /**
-         * Get a lossy
-         * notifier for changes to this purse's balance.
-         */
-        getCurrentAmountNotifier: () => globalThis.ERef<{
-            /**
-             * Returns a promise for an update record as of an update count.
-             * If the `updateCount` argument is omitted or differs from the current update count,
-             * the promise promptly resolves to the current record.
-             * Otherwise, after the next state change, the promise resolves to the resulting record.
-             * This is an attenuated form of `subscribeAfter` whose return value stands alone and
-             * does not allow consumers to pin a chain of historical PublicationRecords.
-             * Used to make lossy ("latest") iterators.
-             * NOTE: Use of `number` as an `updateCount` is deprecated.
-             */
-            /**
-             * Returns a promise for an update record as of an update count.
-             * If the `updateCount` argument is omitted or differs from the current update count,
-             * the promise promptly resolves to the current record.
-             * Otherwise, after the next state change, the promise resolves to the resulting record.
-             * This is an attenuated form of `subscribeAfter` whose return value stands alone and
-             * does not allow consumers to pin a chain of historical PublicationRecords.
-             * Used to make lossy ("latest") iterators.
-             * NOTE: Use of `number` as an `updateCount` is deprecated.
-             */
-            getUpdateSince: (updateCount?: number | bigint | undefined) => globalThis.ERef<globalThis.UpdateRecord<globalThis.Amount<globalThis.AssetKind>>>;
-        }>;
-        /**
-         * Deposit all the contents of payment into
-         * this purse, returning the amount. If the optional argument `optAmount` does
-         * not equal the amount of digital assets in the payment, throw an error.
-         *
-         * If payment is a promise, throw an error.
-         */
-        /**
-         * Deposit all the contents of payment into
-         * this purse, returning the amount. If the optional argument `optAmount` does
-         * not equal the amount of digital assets in the payment, throw an error.
-         *
-         * If payment is a promise, throw an error.
-         */
-        deposit: (args_0: globalThis.Payment<globalThis.AssetKind>, args_1?: any) => globalThis.ERef<globalThis.Amount<globalThis.AssetKind>>;
-        /**
-         * Return an object whose
-         * `receive` method deposits to the current Purse.
-         */
-        /**
-         * Return an object whose
-         * `receive` method deposits to the current Purse.
-         */
-        getDepositFacet: () => globalThis.ERef<{
-            /**
-             * Deposit all the contents of payment
-             * into the purse that made this facet, returning the amount. If the optional
-             * argument `optAmount` does not equal the amount of digital assets in the
-             * payment, throw an error.
-             *
-             * If payment is a promise, throw an error.
-             */
-            /**
-             * Deposit all the contents of payment
-             * into the purse that made this facet, returning the amount. If the optional
-             * argument `optAmount` does not equal the amount of digital assets in the
-             * payment, throw an error.
-             *
-             * If payment is a promise, throw an error.
-             */
-            receive: (args_0: globalThis.Payment, args_1?: any) => globalThis.ERef<globalThis.Amount>;
-        }>;
-        /**
-         * Withdraw amount from
-         * this purse into a new Payment.
-         */
-        /**
-         * Withdraw amount from
-         * this purse into a new Payment.
-         */
-        withdraw: (amount: globalThis.Amount<globalThis.AssetKind>) => globalThis.ERef<{
-            /**
-             * Get the allegedBrand, indicating
-             * the type of digital asset this payment purports to be, and which issuer to
-             * use. Because payments are not trusted, any method calls on payments should
-             * be treated with suspicion and verified elsewhere.
-             */
-            /**
-             * Get the allegedBrand, indicating
-             * the type of digital asset this payment purports to be, and which issuer to
-             * use. Because payments are not trusted, any method calls on payments should
-             * be treated with suspicion and verified elsewhere.
-             */
-            getAllegedBrand: () => globalThis.ERef<{
-                /**
-                 *   Should be used with `issuer.getBrand` to ensure an issuer and brand match.
-                 */
-                /**
-                 *   Should be used with `issuer.getBrand` to ensure an issuer and brand match.
-                 */
-                isMyIssuer: (allegedIssuer: globalThis.ERef<globalThis.Issuer>) => globalThis.ERef<boolean>;
-                getAllegedName: () => globalThis.ERef<string>;
-                /**
-                 * Give information to UI on how
-                 * to display the amount.
-                 */
-                /**
-                 * Give information to UI on how
-                 * to display the amount.
-                 */
-                getDisplayInfo: () => globalThis.ERef<globalThis.DisplayInfo<globalThis.AssetKind>>;
-                getAmountShape: () => any;
-            }>;
-        }>;
-        /**
-         * The set of payments
-         * withdrawn from this purse that are still live. These are the payments that
-         * can still be recovered in emergencies by, for example, depositing into this
-         * purse. Such a deposit action is like canceling an outstanding check because
-         * you're tired of waiting for it. Once your cancellation is acknowledged, you
-         * can spend the assets at stake on other things. Afterwards, if the recipient
-         * of the original check finally gets around to depositing it, their deposit
-         * fails.
-         *
-         * Returns an empty set if this issuer does not support recovery sets.
-         */
-        /**
-         * The set of payments
-         * withdrawn from this purse that are still live. These are the payments that
-         * can still be recovered in emergencies by, for example, depositing into this
-         * purse. Such a deposit action is like canceling an outstanding check because
-         * you're tired of waiting for it. Once your cancellation is acknowledged, you
-         * can spend the assets at stake on other things. Afterwards, if the recipient
-         * of the original check finally gets around to depositing it, their deposit
-         * fails.
-         *
-         * Returns an empty set if this issuer does not support recovery sets.
-         */
-        getRecoverySet: () => globalThis.ERef<import("@endo/patterns").CopySet<globalThis.Payment<globalThis.AssetKind>>>;
-        /**
-         * For use in emergencies, such as coming
-         * back from a traumatic crash and upgrade. This deposits all the payments in
-         * this purse's recovery set into the purse itself, returning the total amount
-         * of assets recovered.
-         *
-         * Returns an empty amount if this issuer does not support recovery sets.
-         */
-        /**
-         * For use in emergencies, such as coming
-         * back from a traumatic crash and upgrade. This deposits all the payments in
-         * this purse's recovery set into the purse itself, returning the total amount
-         * of assets recovered.
-         *
-         * Returns an empty amount if this issuer does not support recovery sets.
-         */
-        recoverAll: () => globalThis.ERef<globalThis.Amount<globalThis.AssetKind>>;
-    }>>;
+    }) => Promise<globalThis.Purse>>;
 }): (args_0: {
     bankChannel?: BridgeChannel | undefined;
     denomToAddressUpdater: MapStore<string, MapStore<string, BalanceUpdater>>;
     nameAdmin?: Pick<import("./types.js").NameAdmin, "update"> | undefined;
-}) => import("@endo/exo").Guarded<{
+}) => Guarded<{
     /**
      * Returns assets as they are added to the bank.
      *

package/src/vat-bank.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vat-bank.d.ts","sourceRoot":"","sources":["vat-bank.js"],"names":[],"mappings":"AA60BA;IASI;;;;;;OAMG;yCALQ,IAAI,CAAC,OAAO,YAAY,EAAE,mBAAmB,GAAG,SAAS,CAAC;gBAG3C,OAAO,YAAY,EAAE,SAAS,CAAC,QAAQ,CAAC;;QArPhE;;;;WAIG;gCADU,iBAAiB,CAAC,eAAe,CAAC;QAS/C;;;;;;;;WAQG;gDAPQ,MAAM,UACN,cAAc,GACZ,IAAI,CAChB,OAAW,WAAW,EAAE,KAAK,CAC7B,OAAa,0BAA0B,EAAE,YAAY,CAChD,CACF;QAkBJ;;;;;;WAMG;4CAHQ,MAAM,GACJ,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;QAenC;;;;;;;;;;;;WAYG;wBALQ,MAAM,cACN,MAAM,gBACN,MAAM,OACN,cAAc,GAAG;YAAE,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;SAAE;QA2EvD;;;;;WAKG;mCAFQ,MAAM,GACJ,OAAO,CAAC,IAAI,CAAC;;;IAgG5B;;;;;;OAMG;yCALQ,IAAI,CAAC,OAAO,YAAY,EAAE,mBAAmB,GAAG,SAAS,CAAC;gBAG3C,OAAO,YAAY,EAAE,SAAS,CAAC,QAAQ,CAAC;;QArPhE;;;;WAIG;gCADU,iBAAiB,CAAC,eAAe,CAAC;QAS/C;;;;;;;;WAQG;gDAPQ,MAAM,UACN,cAAc,GACZ,IAAI,CAChB,OAAW,WAAW,EAAE,KAAK,CAC7B,OAAa,0BAA0B,EAAE,YAAY,CAChD,CACF;QAkBJ;;;;;;WAMG;4CAHQ,MAAM,GACJ,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;QAenC;;;;;;;;;;;;WAYG;wBALQ,MAAM,cACN,MAAM,gBACN,MAAM,OACN,cAAc,GAAG;YAAE,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;SAAE;QA2EvD;;;;;WAKG;mCAFQ,MAAM,GACJ,OAAO,CAAC,IAAI,CAAC;;GA8I/B;AAxhBD,2FAA2F;AAE3F;;;;;;;GAOG;AAEH;;;;;GAKG;AAEH;;;;;;GAMG;AAEH;;;GAGG;2BAtWU,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC;;YAM1D,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI;;4BAQxC,IAAI,CAChB,OAAW,YAAY,EAAE,mBAAmB,EAC5C,YAAgB,GAAG,UAAU,CAC1B;2BA4SgB,CAAC;;YADP,IAAI,CAAC,MAAM,CACL,CAAC,AADM,CAAC,CAAC;WACf,KAAK,CAAC,CAAC,CAAC;;0BAYR,cAAc,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;CAAE;;WAI7D,KAAK;YACL,IAAI,CAAC,MAAM,CAAC;gBACZ,MAAM;WACN,MAAM;kBACN,MAAM;;wBAIP,eAAe,GAAG;IAC9B,MAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,WAAe,EAAE,WAAW,CAAC;CAC1B;;;;;0BAKU,MAAM,iBAAiB,CAAC,eAAe,CAAC;;;;;cAExC,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC,YAAY,CAAC;;0BAsZvC,UAAU,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;oCArwBxD,oBAAoB;AA+gB3B;;;;;;;;GAQG;AACH,0CARW,OAAO,cAAc,EAAE,IAAI;IAEkB,wBAAwB,EAArE,UAAU,QAzQT,OAAO,cAAc,EAAE,IAAI;;;OAyQQ;IACJ,QAAQ,EAAxC,UAAU,QA1JV,OAAO,cAAc,EAAE,IAAI;QAEkB,wBAAwB,EAArE,UAAU,QAlHT,OAAO,cAAc,EAAE,IAAI;;;WAkHQ;QACS,cAAc,EAA3D,UAAU,WAD+B,OAAO,4BACrD,EAAE,OAAO;;;;;;;;;;;;WAAgC;QACI,gBAAgB,EAAxD,UAAU,QA7EX,OAFG,cAAc,EAAE,IAAI,WAEM,KAAK,sBAC1B,CAAC,qDAIZ;YACD,QAAQ,KAAM,MAAM,CAAC,CAAC;YAAA,OACnB,KAAM,CAAC;YAAA,IAAY,CAAC,EAAC,KAAM,IAAI,CAAC,CAAC;YAAA,WAAmB,CAAC,EAAC,KACzD,KACN,CAAC,CAAC;SACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAmEwC;;iBA2B3B,MAAM;yBACN,SAAS,CAAC,eAAe,CAAC;gCAC1B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;;4BAEhC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;uBAC5B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;+BAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;;;;;;QA4B3D,2BAA2B;wBAAf,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAyFW;IACsB,cAAc,EAA3D,UAAU,gDAxJb,OAAO;;;;;;;;;;;;OAwJgC;IACa,yBAAyB,EAA1E,UAAU,QAxZT,OAAO,cAAc,EAAE,IAAI;;;;OAwZY;IACA,gBAAgB,EAAxD,UAAU,+BAxOQ,IAAI;;;YASL,CAAC;mBAAgC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+NpB;;;2BAoB3B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;;;IAwC3D;;;;OAIG;4BADU,iBAAiB,CAAC,eAAe,CAAC;IAS/C;;;;;;;;OAQG;4CAPQ,MAAM,UACN,cAAc,GACZ,IAAI,CAChB,OAAW,WAAW,EAAE,KAAK,CAC7B,OAAa,0BAA0B,EAAE,YAAY,CAChD,CACF;IAkBJ;;;;;;OAMG;wCAHQ,MAAM,GACJ,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAenC;;;;;;;;;;;;OAYG;oBALQ,MAAM,cACN,MAAM,gBACN,MAAM,OACN,cAAc,GAAG;QAAE,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;KAAE;IA2EvD;;;;;OAKG;+BAFQ,MAAM,GACJ,OAAO,CAAC,IAAI,CAAC;GAiC/B;4CAnvBwC,oBAAoB"}
+{"version":3,"file":"vat-bank.d.ts","sourceRoot":"","sources":["vat-bank.js"],"names":[],"mappings":"AAy1BA;IASI;;;;;;OAMG;yCALQ,IAAI,CAAC,OAAO,YAAY,EAAE,mBAAmB,GAAG,SAAS,CAAC;gBAG3C,OAAO,YAAY,EAAE,SAAS,CAAC,QAAQ,CAAC;;QArPhE;;;;WAIG;gCADU,iBAAiB,CAAC,eAAe,CAAC;QAS/C;;;;;;;;WAQG;gDAPQ,MAAM,UACN,cAAc,GACZ,IAAI,CAChB,OAAW,WAAW,EAAE,KAAK,CAC7B,OAAa,0BAA0B,EAAE,YAAY,CAChD,CACF;QAkBJ;;;;;;WAMG;4CAHQ,MAAM,GACJ,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;QAenC;;;;;;;;;;;;WAYG;wBALQ,MAAM,cACN,MAAM,gBACN,MAAM,OACN,cAAc,GAAG;YAAE,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;SAAE;QA2EvD;;;;;WAKG;mCAFQ,MAAM,GACJ,OAAO,CAAC,IAAI,CAAC;;;IAgG5B;;;;;;OAMG;yCALQ,IAAI,CAAC,OAAO,YAAY,EAAE,mBAAmB,GAAG,SAAS,CAAC;gBAG3C,OAAO,YAAY,EAAE,SAAS,CAAC,QAAQ,CAAC;;QArPhE;;;;WAIG;gCADU,iBAAiB,CAAC,eAAe,CAAC;QAS/C;;;;;;;;WAQG;gDAPQ,MAAM,UACN,cAAc,GACZ,IAAI,CAChB,OAAW,WAAW,EAAE,KAAK,CAC7B,OAAa,0BAA0B,EAAE,YAAY,CAChD,CACF;QAkBJ;;;;;;WAMG;4CAHQ,MAAM,GACJ,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;QAenC;;;;;;;;;;;;WAYG;wBALQ,MAAM,cACN,MAAM,gBACN,MAAM,OACN,cAAc,GAAG;YAAE,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;SAAE;QA2EvD;;;;;WAKG;mCAFQ,MAAM,GACJ,OAAO,CAAC,IAAI,CAAC;;GA8I/B;AA9hBD;;;;;GAKG;AAEH;;;;;;;GAOG;AAEH;;;;;GAKG;AAEH;;;;;;GAMG;AAEH;;;GAGG;2BA5WU,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC;;YAM3D,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI;;YAAvC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI;;YAAvC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI;;YAAvC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI;;4BASvC,IAAI,CAChB,OAAW,YAAY,EAAE,mBAAmB,EAC5C,YAAgB,GAAG,UAAU,CAC1B;2BA4SgB,CAAC;;YADP,MAAM,CACA,CAAC,AADC,CAAC;WACT,KAAK,CAAC,CAAC,CAAC;;;WAcV,MAAM;;;;WAOJ,KAAK;;gBAEL,MAAM;WACN,MAAM;kBACN,MAAM;;wBAIP,eAAe,GAAG;IAC9B,MAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,WAAe,EAAE,WAAW,CAAC;CAC1B;;;;;0BAKU,MAAM,iBAAiB,CAAC,eAAe,CAAC;;;;;cAExC,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC,YAAY,CAAC;;0BAuZvC,UAAU,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;6BA5wBrC,WAAW;qCACO,kBAAkB;oCANvD,oBAAoB;AA2hB3B;;;;;;;;GAQG;AACH,0CARW,OAAO,cAAc,EAAE,IAAI;IAEkB,wBAAwB,EAArE,UAAU,QA/QT,OAAO,cAAc,EAAE,IAAI;;;OA+QQ;IACJ,QAAQ,EAAxC,UAAU,QA3JV,OAAO,cAAc,EAAE,IAAI;QAEkB,wBAAwB,EAArE,UAAU,QAvHT,OAAO,cAAc,EAAE,IAAI;;;WAuHQ;QACS,cAAc,EAA3D,UAAU,WAP6B,OAAO,4BAItD,EAAE,OAAO;;;;;;;;;;;;WAGmC;QACI,gBAAgB,EAAxD,UAAU,QAzFU,OAAO,cAClC,EAAU,IAAJ,WAI6C,KAAK,sBAChD,CAAC,qDAC8B;YAAC,QACjC,KAAM,MAAM,CAAC,CAAC;YAAA,OAAc,KAAM,CAAC;YAAA,IAAY,CAAC,EAAC,KACpD,IAAJ,CAAC,CAAC;YAAE,WAEO,CAAA,EAAC,KAAM,KACnB,CAAC,CAAC;SACF,+BA4EuC;;iBA4B3B,MAAM;yBACN,SAAS,CAAC,eAAe,CAAC;gCAC1B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;;4BAEhC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;uBAC5B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;+BAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;;;;;;QA4B3D,2BAA2B;wBAAf,KAAK;OAyFW;IACsB,cAAc,EAA3D,UAAU,gDA5JhB,OAAO;;;;;;;;;;;;OA4JmC;IACa,yBAAyB,EAA1E,UAAU,QA9ZT,OAAO,cAAc,EAAE,IAAI;;;;OA8ZY;IACA,gBAAgB,EAAxD,UAAU,+BAlPP,IAAJ;;;YAOgD,CAAC;mBAG5C,CAAA;oCAwO2B;;;2BAoB3B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;;;IAwC3D;;;;OAIG;4BADU,iBAAiB,CAAC,eAAe,CAAC;IAS/C;;;;;;;;OAQG;4CAPQ,MAAM,UACN,cAAc,GACZ,IAAI,CAChB,OAAW,WAAW,EAAE,KAAK,CAC7B,OAAa,0BAA0B,EAAE,YAAY,CAChD,CACF;IAkBJ;;;;;;OAMG;wCAHQ,MAAM,GACJ,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAenC;;;;;;;;;;;;OAYG;oBALQ,MAAM,cACN,MAAM,gBACN,MAAM,OACN,cAAc,GAAG;QAAE,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;KAAE;IA2EvD;;;;;OAKG;+BAFQ,MAAM,GACJ,OAAO,CAAC,IAAI,CAAC;GAiC/B;4CA1vBwC,oBAAoB"}

package/src/vat-bank.js

@@ -21,6 +21,11 @@ import {
 
 import '@agoric/notifier/exported.js';
 
+/**
+ * @import {Guarded} from '@endo/exo')
+ * @import {Passable, RemotableObject} from '@endo/pass-style')
+ */
+
 const { Fail } = assert;
 
 const { VirtualPurseControllerI } = makeVirtualPurseKitIKit();
@@ -38,8 +43,9 @@ const BridgeChannelI = M.interface('BridgeChannel', {
  */
 
 /**
- * @typedef {object} BalanceUpdater
- * @property {(value: string, nonce?: string) => void} update
+ * @typedef {Guarded<{
+ *   update: (value: string, nonce?: string) => void;
+ * }>} BalanceUpdater
  */
 
 const BalanceUpdaterI = M.interface('BalanceUpdater', {
@@ -348,8 +354,8 @@ const prepareAssetSubscription = zone => {
 /**
  * @template {AssetKind} [K=AssetKind]
  * @typedef {object} AssetIssuerKit
- * @property {ERef<Mint<K>>} [mint]
- * @property {ERef<Issuer<K>>} issuer
+ * @property {Mint<K>} [mint]
+ * @property {Issuer<K>} issuer
  * @property {Brand<K>} brand
  */
 
@@ -362,12 +368,17 @@ const AssetIssuerKitShape = M.splitRecord(BaseIssuerKitShape, {
   mint: M.remotable('Mint'),
 });
 
-/** @typedef {AssetIssuerKit & { denom: string; escrowPurse?: ERef<Purse> }} AssetRecord */
+/**
+ * @typedef {AssetIssuerKit & {
+ *   denom: string;
+ *   escrowPurse?: RemotableObject & ERef<Purse>;
+ * }} AssetRecord
+ */
 
 /**
  * @typedef {object} AssetDescriptor
  * @property {Brand} brand
- * @property {ERef<Issuer>} issuer
+ * @property {RemotableObject & ERef<Issuer>} issuer
  * @property {string} issuerName
  * @property {string} denom
  * @property {string} proposedName
@@ -411,6 +422,7 @@ const prepareBank = (
   // (which we emulate, since we know both address and denom are JSONable).  If
   // we decide to partition the provider and use `brandToVPurse` directly, we'd
   // need ephemera for each `makeBank` call.
+  /** @type {MapStore<string, VirtualPurse>} */
   const addressDenomToPurse = zone.mapStore('addressDenomToPurse');
   /**
    * @type {import('@agoric/store/src/stores/store-utils.js').AtomicProvider<
@@ -584,7 +596,7 @@ const prepareBankManager = (
       /**
        * @type {MapStore<
        *   string,
-       *   { bank: Bank; brandToVPurse: MapStore<Brand, VirtualPurse> }
+       *   { bank: Guarded<Bank>; brandToVPurse: MapStore<Brand, VirtualPurse> }
        * >}
        */
       const addressToBank = detachedZone.mapStore('addressToBank');