@codemem/server 0.47.0-beta.3 → 0.47.0

package/dist/account/context.d.ts

@@ -13,6 +13,8 @@ export interface AccountContext extends AccountProfile {
     coordinatorUrl: string;
     groupId: string;
     fingerprint: string;
+    /** Present on real profile contexts; optional for legacy injected readers. */
+    publicKeyHash?: string;
     fileIdentity: {
         dev: string;
         ino: string;

package/dist/account/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/account/context.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,YAAY,GACrB,OAAO,GACP,4BAA4B,GAC5B,yBAAyB,GACzB,0BAA0B,GAC1B,oBAAoB,GACpB,sBAAsB,CAAC;AAC1B,MAAM,WAAW,cAAc;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AACD,MAAM,WAAW,cAAe,SAAQ,cAAc;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AACD,MAAM,MAAM,oBAAoB,GAC7B;IACA,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,WAAW,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACvC,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;CAC9B,GACD;IAAE,KAAK,EAAE,8BAA8B,GAAG,6BAA6B,CAAA;CAAE,CAAC;AAC7E,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,oBAAoB,CAAC;AAC9E,MAAM,WAAW,2BAA2B;IAC3C,UAAU,EAAE,MAAM,cAAc,GAAG,IAAI,CAAC;IACxC,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AA6GD,qFAAqF;AACrF,wBAAgB,0BAA0B,CACzC,OAAO,EAAE,2BAA2B,GAClC,oBAAoB,CAQtB"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/account/context.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,YAAY,GACrB,OAAO,GACP,4BAA4B,GAC5B,yBAAyB,GACzB,0BAA0B,GAC1B,oBAAoB,GACpB,sBAAsB,CAAC;AAC1B,MAAM,WAAW,cAAc;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AACD,MAAM,WAAW,cAAe,SAAQ,cAAc;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AACD,MAAM,MAAM,oBAAoB,GAC7B;IACA,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,WAAW,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACvC,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;CAC9B,GACD;IAAE,KAAK,EAAE,8BAA8B,GAAG,6BAA6B,CAAA;CAAE,CAAC;AAC7E,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,oBAAoB,CAAC;AAC9E,MAAM,WAAW,2BAA2B;IAC3C,UAAU,EAAE,MAAM,cAAc,GAAG,IAAI,CAAC;IACxC,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AA8GD,qFAAqF;AACrF,wBAAgB,0BAA0B,CACzC,OAAO,EAAE,2BAA2B,GAClC,oBAAoB,CAQtB"}

package/dist/account/link-registry.d.ts

@@ -1,9 +1,17 @@
 import { changeCoordinatorAccount, linkCoordinatorAccount } from "@codemem/core";
 import type { AccountContext, AccountContextReader } from "./context.js";
+import type { AccountRebindRunner } from "./rebind.js";
 type CoordinatorAuthLinkAuthorityKind = Parameters<typeof linkCoordinatorAccount>[0]["expectedAuthority"];
-export type AccountLinkFailure = "schema_upgrade_required" | "configuration_invalid" | "device_unavailable" | "request_failed" | "review_required" | "link_conflict" | "invalid_response" | "context_changed" | "identity_mismatch" | "link_stopped" | "cancellation_unconfirmed" | "receiver_close_failed";
+export type AccountLinkFailure = "schema_upgrade_required" | "configuration_invalid" | "device_unavailable" | "request_failed" | "review_required" | "link_conflict" | "invalid_response" | "context_changed" | "identity_mismatch" | "link_stopped" | "cancellation_unconfirmed" | "receiver_close_failed" | "account_not_linked" | "already_this_identity" | "current_identity_linked" | "device_already_bound" | "daily_limit"
+/** The coordinator can't switch this device (for example, no enrollment names its Identity). */
+ | "sign_in_unavailable"
+/** The coordinator may have bound this device; the switch resumes on restart. */
+ | "switch_pending"
+/** A self-bind may have committed; this Viewer holds the operation until it restarts. */
+ | "bind_unconfirmed";
+export type AccountOperationIntent = "connect" | "refresh" | "disconnect" | "sign_in";
 export interface AccountLinkOperationV1 {
-    intent?: "connect" | "refresh" | "disconnect";
+    intent?: AccountOperationIntent;
     operationId: string;
     groupId: string;
     contextId: string;
@@ -23,8 +31,9 @@ export type AccountLinkStartResult = {
     error: "account_shutting_down" | "account_context_changed";
 };
 export interface AccountLinkRegistry {
+    tryReserveRecovery?(): AccountRecoveryReservation | null;
     start(options: {
-        intent?: "connect" | "refresh" | "disconnect";
+        intent?: AccountOperationIntent;
         context: AccountContext;
         expectedCoordinatorId: string;
         expectedAuthority: CoordinatorAuthLinkAuthorityKind;
@@ -32,6 +41,8 @@ export interface AccountLinkRegistry {
         expectedLinkId?: string;
     }): AccountLinkStartResult;
     lifecycleToken(): symbol;
+    /** True when a rebind runner was configured, so sign_in can run. */
+    supportsSignIn?(): boolean;
     get(operationId: string): AccountLinkOperationV1 | null;
     forContext(contextId: string): AccountLinkOperationV1 | null;
     hasActive(): boolean;
@@ -39,10 +50,16 @@ export interface AccountLinkRegistry {
     cancel(operationId: string): AccountLinkOperationV1 | null;
     close(): Promise<void>;
 }
+export interface AccountRecoveryReservation {
+    isCurrent(): boolean;
+    release(): void;
+}
 export interface AccountLinkRegistryOptions {
     readContext: AccountContextReader;
     link?: typeof linkCoordinatorAccount;
     change?: typeof changeCoordinatorAccount;
+    /** Sign-in that may switch this device's Identity; without it, sign_in is unavailable. */
+    rebind?: AccountRebindRunner;
     now?: () => number;
 }
 export declare function sameAuthority(captured: AccountContext, fresh: AccountContext): boolean;

package/dist/account/link-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"link-registry.d.ts","sourceRoot":"","sources":["../../src/account/link-registry.ts"],"names":[],"mappings":"AACA,OAAO,EAEN,wBAAwB,EACxB,sBAAsB,EACtB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEzE,KAAK,gCAAgC,GAAG,UAAU,CACjD,OAAO,sBAAsB,CAC7B,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;AAE1B,MAAM,MAAM,kBAAkB,GAC3B,yBAAyB,GACzB,uBAAuB,GACvB,oBAAoB,GACpB,gBAAgB,GAChB,iBAAiB,GACjB,eAAe,GACf,kBAAkB,GAClB,iBAAiB,GACjB,mBAAmB,GACnB,cAAc,GACd,0BAA0B,GAC1B,uBAAuB,CAAC;AAC3B,MAAM,WAAW,sBAAsB;IACtC,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,UAAU,GAAG,kBAAkB,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,iBAAiB,CAAC;IAClG,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACnC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AACD,MAAM,MAAM,sBAAsB,GAC/B;IAAE,SAAS,EAAE,sBAAsB,CAAA;CAAE,GACrC;IAAE,KAAK,EAAE,0BAA0B,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,KAAK,EAAE,uBAAuB,GAAG,yBAAyB,CAAA;CAAE,CAAC;AAClE,MAAM,WAAW,mBAAmB;IACnC,KAAK,CAAC,OAAO,EAAE;QACd,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC;QAC9C,OAAO,EAAE,cAAc,CAAC;QACxB,qBAAqB,EAAE,MAAM,CAAC;QAC9B,iBAAiB,EAAE,gCAAgC,CAAC;QACpD,sBAAsB,CAAC,EAAE,MAAM,CAAC;QAChC,cAAc,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,sBAAsB,CAAC;IAC3B,cAAc,IAAI,MAAM,CAAC;IACzB,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI,CAAC;IACxD,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI,CAAC;IAC7D,SAAS,IAAI,OAAO,CAAC;IACrB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC/C,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI,CAAC;IAC3D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AACD,MAAM,WAAW,0BAA0B;IAC1C,WAAW,EAAE,oBAAoB,CAAC;IAClC,IAAI,CAAC,EAAE,OAAO,sBAAsB,CAAC;IACrC,MAAM,CAAC,EAAE,OAAO,wBAAwB,CAAC;IACzC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AAuCD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAMtF;AAmUD,wBAAgB,yBAAyB,CACxC,OAAO,EAAE,0BAA0B,GACjC,mBAAmB,CAErB"}
+{"version":3,"file":"link-registry.d.ts","sourceRoot":"","sources":["../../src/account/link-registry.ts"],"names":[],"mappings":"AACA,OAAO,EAGN,wBAAwB,EACxB,sBAAsB,EACtB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,KAAK,EAAuB,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAE5E,KAAK,gCAAgC,GAAG,UAAU,CACjD,OAAO,sBAAsB,CAC7B,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;AAE1B,MAAM,MAAM,kBAAkB,GAC3B,yBAAyB,GACzB,uBAAuB,GACvB,oBAAoB,GACpB,gBAAgB,GAChB,iBAAiB,GACjB,eAAe,GACf,kBAAkB,GAClB,iBAAiB,GACjB,mBAAmB,GACnB,cAAc,GACd,0BAA0B,GAC1B,uBAAuB,GAEvB,oBAAoB,GACpB,uBAAuB,GACvB,yBAAyB,GACzB,sBAAsB,GACtB,aAAa;AACf,gGAAgG;GAC9F,qBAAqB;AACvB,iFAAiF;GAC/E,gBAAgB;AAClB,yFAAyF;GACvF,kBAAkB,CAAC;AACtB,MAAM,MAAM,sBAAsB,GAAG,SAAS,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,CAAC;AACtF,MAAM,WAAW,sBAAsB;IACtC,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,UAAU,GAAG,kBAAkB,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,iBAAiB,CAAC;IAClG,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACnC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AACD,MAAM,MAAM,sBAAsB,GAC/B;IAAE,SAAS,EAAE,sBAAsB,CAAA;CAAE,GACrC;IAAE,KAAK,EAAE,0BAA0B,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,KAAK,EAAE,uBAAuB,GAAG,yBAAyB,CAAA;CAAE,CAAC;AAClE,MAAM,WAAW,mBAAmB;IACnC,kBAAkB,CAAC,IAAI,0BAA0B,GAAG,IAAI,CAAC;IACzD,KAAK,CAAC,OAAO,EAAE;QACd,MAAM,CAAC,EAAE,sBAAsB,CAAC;QAChC,OAAO,EAAE,cAAc,CAAC;QACxB,qBAAqB,EAAE,MAAM,CAAC;QAC9B,iBAAiB,EAAE,gCAAgC,CAAC;QACpD,sBAAsB,CAAC,EAAE,MAAM,CAAC;QAChC,cAAc,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,sBAAsB,CAAC;IAC3B,cAAc,IAAI,MAAM,CAAC;IACzB,oEAAoE;IACpE,cAAc,CAAC,IAAI,OAAO,CAAC;IAC3B,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI,CAAC;IACxD,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI,CAAC;IAC7D,SAAS,IAAI,OAAO,CAAC;IACrB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC/C,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI,CAAC;IAC3D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AACD,MAAM,WAAW,0BAA0B;IAC1C,SAAS,IAAI,OAAO,CAAC;IACrB,OAAO,IAAI,IAAI,CAAC;CAChB;AACD,MAAM,WAAW,0BAA0B;IAC1C,WAAW,EAAE,oBAAoB,CAAC;IAClC,IAAI,CAAC,EAAE,OAAO,sBAAsB,CAAC;IACrC,MAAM,CAAC,EAAE,OAAO,wBAAwB,CAAC;IACzC,0FAA0F;IAC1F,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AAuCD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAMtF;AAkZD,wBAAgB,yBAAyB,CACxC,OAAO,EAAE,0BAA0B,GACjC,mBAAmB,CAErB"}

package/dist/account/owner-recovery-candidates.d.ts

@@ -0,0 +1,30 @@
+import { type coordinatorAuthControllerReviewAction } from "@codemem/core";
+export interface RecoveryOwnerCandidate {
+    id: string;
+    label?: string;
+}
+interface CandidateDevice {
+    deviceId: string;
+    fingerprint: string;
+    identityId: string;
+}
+/** Map each Identity recorded for this device to the groups whose Team history records it. */
+export declare function recordedOwnerGroups(responses: readonly unknown[], device: Pick<CandidateDevice, "deviceId">): Map<string, Set<string>>;
+export declare function candidateList(owners: Map<string, Set<string>>, currentIdentityId: string): RecoveryOwnerCandidate[];
+/**
+ * Suggest owners from read-only coordinator previews of this device's current review.
+ * Suggestions are display hints: the scoped owner preview still checks the chosen ID.
+ *
+ * Previews share the coordinator's admin review rate limit with the owner preview and
+ * confirmation. History is filtered by device, not group, so this asks one group at a
+ * time and stops at the first enrolled group instead of spending one request per group.
+ */
+export declare function readRecoveryCandidates(options: {
+    previewDeviceOwner: typeof coordinatorAuthControllerReviewAction;
+    remoteUrl: string;
+    adminSecret: string;
+    groups: readonly string[];
+    device: CandidateDevice;
+}): Promise<RecoveryOwnerCandidate[]>;
+export {};
+//# sourceMappingURL=owner-recovery-candidates.d.ts.map

package/dist/account/owner-recovery-candidates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-recovery-candidates.d.ts","sourceRoot":"","sources":["../../src/account/owner-recovery-candidates.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,KAAK,qCAAqC,EAG1C,MAAM,eAAe,CAAC;AAGvB,MAAM,WAAW,sBAAsB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AACD,UAAU,eAAe;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACnB;AA2BD,8FAA8F;AAC9F,wBAAgB,mBAAmB,CAClC,SAAS,EAAE,SAAS,OAAO,EAAE,EAC7B,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,GACvC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAS1B;AAqBD,wBAAgB,aAAa,CAC5B,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,EAChC,iBAAiB,EAAE,MAAM,GACvB,sBAAsB,EAAE,CAU1B;AAaD;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IACrD,kBAAkB,EAAE,OAAO,qCAAqC,CAAC;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,MAAM,EAAE,eAAe,CAAC;CACxB,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAqBpC"}

package/dist/account/owner-recovery-context.d.ts

@@ -0,0 +1,20 @@
+import { type AccountOwnerProfile, type AccountOwnerProfilePins } from "@codemem/core";
+import type { AccountContext, AccountContextReader } from "./context.js";
+import type { RecoveryProfile, RecoverySelection } from "./owner-recovery-types.js";
+export interface RecoveryCapture {
+    context: AccountContext;
+    groups: string[];
+    publicKey: string;
+    semanticId: string;
+}
+export declare function recoverySha(value: string): string;
+export declare function captureRecoveryContext(readContext: AccountContextReader): RecoveryCapture;
+export declare function recoveryProfile(capture: RecoveryCapture, coordinatorId: string): RecoveryProfile;
+export declare function assertRecoverySelection(selection: RecoverySelection, expected: RecoveryProfile): void;
+export declare function recoveryDestinations(capture: RecoveryCapture, coordinatorId: string): Map<string, {
+    profile: AccountOwnerProfile;
+    pins: AccountOwnerProfilePins;
+}>;
+export type RecoveryDestinations = ReturnType<typeof recoveryDestinations>;
+export declare function assertNoCompetingOwner(destinations: RecoveryDestinations, ownerIdentityId: string): void;
+//# sourceMappingURL=owner-recovery-context.d.ts.map

package/dist/account/owner-recovery-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-recovery-context.d.ts","sourceRoot":"","sources":["../../src/account/owner-recovery-context.ts"],"names":[],"mappings":"AAGA,OAAO,EACN,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAK5B,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEzE,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEpF,MAAM,WAAW,eAAe;IAC/B,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACnB;AACD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEjD;AAmBD,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,oBAAoB,GAAG,eAAe,CA4BzF;AACD,wBAAgB,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,GAAG,eAAe,CAWhG;AACD,wBAAgB,uBAAuB,CACtC,SAAS,EAAE,iBAAiB,EAC5B,QAAQ,EAAE,eAAe,GACvB,IAAI,CAUN;AACD,wBAAgB,oBAAoB,CACnC,OAAO,EAAE,eAAe,EACxB,aAAa,EAAE,MAAM,GACnB,GAAG,CAAC,MAAM,EAAE;IAAE,OAAO,EAAE,mBAAmB,CAAC;IAAC,IAAI,EAAE,uBAAuB,CAAA;CAAE,CAAC,CAgB9E;AACD,MAAM,MAAM,oBAAoB,GAAG,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAC3E,wBAAgB,sBAAsB,CACrC,YAAY,EAAE,oBAAoB,EAClC,eAAe,EAAE,MAAM,GACrB,IAAI,CAKN"}

package/dist/account/owner-recovery-evidence.d.ts

@@ -0,0 +1,24 @@
+import { type ResolvedAccountOwnerReceiptReference } from "@codemem/core";
+import type { RecoveryHistoryRow, RecoverySelection, ReviewedWeakLabel } from "./owner-recovery-types.js";
+export declare const RECOVERY_SCOPE = "historical_included_owner_labels_only";
+export declare class AccountOwnerRecoveryError extends Error {
+    readonly code: "invalid" | "busy" | "context_changed" | "unavailable";
+    constructor(code?: "invalid" | "busy" | "context_changed" | "unavailable");
+}
+export declare function requireRecovery(condition: unknown, code?: AccountOwnerRecoveryError["code"]): asserts condition;
+export declare function recoveryId(value: unknown): value is string;
+export declare function recoveryHash(value: unknown): value is string;
+export declare function recoveryRecord(value: unknown): Record<string, unknown>;
+export declare function exactRecoveryFields(row: Record<string, unknown>, fields: readonly string[]): void;
+export declare function reviewReceipt(row: Record<string, unknown>): ResolvedAccountOwnerReceiptReference;
+export interface ValidatedRecoveryReview {
+    state: "ready" | "restored" | "needs_review";
+    digest?: string;
+    receipt?: ResolvedAccountOwnerReceiptReference;
+    rows: RecoveryHistoryRow[];
+    labels: ReviewedWeakLabel[];
+    reasons: string[];
+}
+export declare function validateRecoveryReview(value: unknown, selection: RecoverySelection, groupId: string): ValidatedRecoveryReview;
+export declare function parseRecoveryReply(text: string, selection: RecoverySelection): Map<string, ResolvedAccountOwnerReceiptReference>;
+//# sourceMappingURL=owner-recovery-evidence.d.ts.map

package/dist/account/owner-recovery-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-recovery-evidence.d.ts","sourceRoot":"","sources":["../../src/account/owner-recovery-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAKN,KAAK,oCAAoC,EACzC,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EACX,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,MAAM,2BAA2B,CAAC;AAEnC,eAAO,MAAM,cAAc,0CAA0C,CAAC;AAKtE,qBAAa,yBAA0B,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,iBAAiB,GAAG,aAAa;IAAjF,YAAqB,IAAI,GAAE,SAAS,GAAG,MAAM,GAAG,iBAAiB,GAAG,aAAyB,EAE5F;CACD;AACD,wBAAgB,eAAe,CAC9B,SAAS,EAAE,OAAO,EAClB,IAAI,GAAE,yBAAyB,CAAC,MAAM,CAAa,GACjD,OAAO,CAAC,SAAS,CAEnB;AACD,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAQ1D;AACD,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE5D;AACD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGtE;AACD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAIjG;AAqFD,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,oCAAoC,CAWhG;AACD,MAAM,WAAW,uBAAuB;IACvC,KAAK,EAAE,OAAO,GAAG,UAAU,GAAG,cAAc,CAAC;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,oCAAoC,CAAC;IAC/C,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC3B,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;CAClB;AACD,wBAAgB,sBAAsB,CACrC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,iBAAiB,EAC5B,OAAO,EAAE,MAAM,GACb,uBAAuB,CAiDzB;AA8BD,wBAAgB,kBAAkB,CACjC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,iBAAiB,GAC1B,GAAG,CAAC,MAAM,EAAE,oCAAoC,CAAC,CAmCnD"}

package/dist/account/owner-recovery-service.d.ts

@@ -0,0 +1,41 @@
+import { coordinatorAuthControllerReviewAction, readCoordinatorAccountLinkStatus, readCoordinatorResolvedAccountOwnerReceiptStatus, readCoordinatorResolvedAccountOwnerStatus } from "@codemem/core";
+import type { AccountContextReader } from "./context.js";
+import type { AccountLinkRegistry } from "./link-registry.js";
+import { type RecoveryOwnerCandidate } from "./owner-recovery-candidates.js";
+import type { RecoveryPreview, RecoveryPreviewRequest, RecoveryResult, RecoverySelection } from "./owner-recovery-types.js";
+export type { RecoveryPreview, RecoveryPreviewRequest, RecoveryProfile, RecoveryResult, RecoverySelection, } from "./owner-recovery-types.js";
+export interface AccountOwnerRecoveryServiceOptions {
+    readContext: AccountContextReader;
+    readAdminSecret: () => string | null | undefined;
+    registry: AccountLinkRegistry;
+    readRemoteStatus?: typeof readCoordinatorAccountLinkStatus;
+    readRemoteOwnerStatus?: typeof readCoordinatorResolvedAccountOwnerStatus;
+    readRemoteReceiptStatus?: typeof readCoordinatorResolvedAccountOwnerReceiptStatus;
+    reviewOwner?: typeof coordinatorAuthControllerReviewAction;
+    /** Read-only device-owner preview used only to suggest recorded owners. */
+    previewDeviceOwner?: typeof coordinatorAuthControllerReviewAction;
+    now?: () => number;
+}
+/** No routes or configuration composition: these callbacks are private server capabilities. */
+declare class AccountOwnerRecoveryService {
+    #private;
+    constructor(options: AccountOwnerRecoveryServiceOptions);
+    getProfile(): Promise<{
+        version: 1;
+        profile: import("./owner-recovery-types.js").RecoveryProfile;
+        reviewAccess: "operator" | "request";
+        candidates: RecoveryOwnerCandidate[];
+    }>;
+    preview(request: RecoveryPreviewRequest): Promise<RecoveryPreview>;
+    confirm(input: {
+        preview: unknown;
+        approvalDigest: string;
+    }): Promise<RecoveryResult>;
+    importReply(input: {
+        selection: RecoverySelection;
+        replyText: string;
+    }): Promise<RecoveryResult>;
+    close(): Promise<void>;
+}
+export declare function createAccountOwnerRecoveryService(options: AccountOwnerRecoveryServiceOptions): AccountOwnerRecoveryService;
+//# sourceMappingURL=owner-recovery-service.d.ts.map

package/dist/account/owner-recovery-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-recovery-service.d.ts","sourceRoot":"","sources":["../../src/account/owner-recovery-service.ts"],"names":[],"mappings":"AACA,OAAO,EACN,qCAAqC,EAGrC,gCAAgC,EAChC,gDAAgD,EAChD,yCAAyC,EACzC,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAA8B,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EACN,KAAK,sBAAsB,EAE3B,MAAM,gCAAgC,CAAC;AAkBxC,OAAO,KAAK,EACX,eAAe,EACf,sBAAsB,EACtB,cAAc,EACd,iBAAiB,EACjB,MAAM,2BAA2B,CAAC;AAEnC,YAAY,EACX,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,iBAAiB,GACjB,MAAM,2BAA2B,CAAC;AACnC,MAAM,WAAW,kCAAkC;IAClD,WAAW,EAAE,oBAAoB,CAAC;IAClC,eAAe,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACjD,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,gBAAgB,CAAC,EAAE,OAAO,gCAAgC,CAAC;IAC3D,qBAAqB,CAAC,EAAE,OAAO,yCAAyC,CAAC;IACzE,uBAAuB,CAAC,EAAE,OAAO,gDAAgD,CAAC;IAClF,WAAW,CAAC,EAAE,OAAO,qCAAqC,CAAC;IAC3D,2EAA2E;IAC3E,kBAAkB,CAAC,EAAE,OAAO,qCAAqC,CAAC;IAClE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AAkCD,+FAA+F;AAC/F,cAAM,2BAA2B;;IAOhC,YAAY,OAAO,EAAE,kCAAkC,EAEtD;IA2CK,UAAU;iBAQL,CAAC;;;;OAKX;IAsGK,OAAO,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,eAAe,CAAC,CAoBvE;IA8BK,OAAO,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAc1F;IAqJK,WAAW,CAAC,KAAK,EAAE;QACxB,SAAS,EAAE,iBAAiB,CAAC;QAC7B,SAAS,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,cAAc,CAAC,CAoB1B;IAiBK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAK3B;CACD;AACD,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,kCAAkC,+BAE5F"}

package/dist/account/owner-recovery-types.d.ts

@@ -0,0 +1,65 @@
+/** Noncredential projections only; private paths and review evidence stay in the service. */
+export interface RecoveryProfile {
+    contextId: string;
+    memoryActorId: string;
+    deviceId: string;
+    fingerprint: string;
+    coordinatorOrigin: string;
+    coordinatorId: string;
+    configuredGroups: readonly string[];
+}
+export interface RecoverySelection {
+    profile: RecoveryProfile;
+    existingOwnerId: string;
+    groups: readonly string[];
+}
+export interface RecoveryPreviewRequest extends RecoverySelection {
+    requestId: string;
+    purpose: "review" | "check_status";
+}
+export interface RecoveryHistoryRow {
+    id: string;
+    groupId: string;
+    deviceId: string;
+    fingerprint: string;
+    identityId: string;
+    assignment: "included" | "excluded";
+    relation: "exact_subject" | "alias" | "other";
+    reason: string;
+}
+export interface ReviewedWeakLabel {
+    label: string;
+    kind: "legacy_included_owner_label" | "consumed_project_actor_label";
+    group_id: string;
+    device_id: string;
+    evidence_ref: string;
+    effect: "account_owner_display_only";
+}
+export interface RecoveryPreview extends RecoverySelection {
+    requestId: string;
+    scope: "historical_included_owner_labels_only";
+    approvalDigest: string;
+    groupPreviews: readonly {
+        groupId: string;
+        action: "new" | "reuse" | "blocked";
+        reason: string;
+    }[];
+    history: {
+        complete: true;
+        rows: readonly RecoveryHistoryRow[];
+    } | {
+        complete: false;
+        rows: readonly RecoveryHistoryRow[];
+        operatorHelp: string;
+    };
+    reviewedWeakLabels: readonly ReviewedWeakLabel[];
+}
+export interface RecoveryResult {
+    preview: RecoveryPreview;
+    groups: readonly {
+        groupId: string;
+        status: "confirmed" | "failed" | "unknown";
+        message: string;
+    }[];
+}
+//# sourceMappingURL=owner-recovery-types.d.ts.map

package/dist/account/owner-recovery-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-recovery-types.d.ts","sourceRoot":"","sources":["../../src/account/owner-recovery-types.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,MAAM,WAAW,eAAe;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AACD,MAAM,WAAW,iBAAiB;IACjC,OAAO,EAAE,eAAe,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B;AACD,MAAM,WAAW,sBAAuB,SAAQ,iBAAiB;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,QAAQ,GAAG,cAAc,CAAC;CACnC;AACD,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,UAAU,GAAG,UAAU,CAAC;IACpC,QAAQ,EAAE,eAAe,GAAG,OAAO,GAAG,OAAO,CAAC;IAC9C,MAAM,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,iBAAiB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,6BAA6B,GAAG,8BAA8B,CAAC;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,4BAA4B,CAAC;CACrC;AACD,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,uCAAuC,CAAC;IAC/C,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,SAAS;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,KAAK,GAAG,OAAO,GAAG,SAAS,CAAC;QACpC,MAAM,EAAE,MAAM,CAAC;KACf,EAAE,CAAC;IACJ,OAAO,EACJ;QAAE,QAAQ,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,SAAS,kBAAkB,EAAE,CAAA;KAAE,GACvD;QACA,QAAQ,EAAE,KAAK,CAAC;QAChB,IAAI,EAAE,SAAS,kBAAkB,EAAE,CAAC;QACpC,YAAY,EAAE,MAAM,CAAC;KACpB,CAAC;IACL,kBAAkB,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACjD;AACD,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,eAAe,CAAC;IACzB,MAAM,EAAE,SAAS;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;QAC3C,OAAO,EAAE,MAAM,CAAC;KAChB,EAAE,CAAC;CACJ"}

package/dist/account/owner-status.d.ts

@@ -0,0 +1,8 @@
+import { type AccountOwnerAssociation, type CoordinatorResolvedAccountOwnerStatusRead } from "@codemem/core";
+import type { AccountContext } from "./context.js";
+import type { AccountLinkViewV1 } from "./status.js";
+/** The coordinator ID comes from the first signed actor-status read, never the origin. */
+export declare function readOwnerAssociation(context: AccountContext, coordinatorId: string): AccountOwnerAssociation | null;
+export declare function ownerUnavailable(view: AccountLinkViewV1, code: "account_owner_association_invalid" | "context_changed"): AccountLinkViewV1;
+export declare function associatedOwnerView(view: AccountLinkViewV1, context: AccountContext, association: AccountOwnerAssociation, remote: CoordinatorResolvedAccountOwnerStatusRead): AccountLinkViewV1;
+//# sourceMappingURL=owner-status.d.ts.map

package/dist/account/owner-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-status.d.ts","sourceRoot":"","sources":["../../src/account/owner-status.ts"],"names":[],"mappings":"AAEA,OAAO,EACN,KAAK,uBAAuB,EAC5B,KAAK,yCAAyC,EAO9C,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,0FAA0F;AAC1F,wBAAgB,oBAAoB,CACnC,OAAO,EAAE,cAAc,EACvB,aAAa,EAAE,MAAM,GACnB,uBAAuB,GAAG,IAAI,CAsChC;AA+DD,wBAAgB,gBAAgB,CAC/B,IAAI,EAAE,iBAAiB,EACvB,IAAI,EAAE,mCAAmC,GAAG,iBAAiB,GAC3D,iBAAiB,CAOnB;AA8CD,wBAAgB,mBAAmB,CAClC,IAAI,EAAE,iBAAiB,EACvB,OAAO,EAAE,cAAc,EACvB,WAAW,EAAE,uBAAuB,EACpC,MAAM,EAAE,yCAAyC,GAC/C,iBAAiB,CAuDnB"}

package/dist/account/rebind.d.ts

@@ -0,0 +1,41 @@
+import { type DeviceRebindClientRefusal, type MemoryStore } from "@codemem/core";
+import type { AccountContext } from "./context.js";
+export type AccountRebindResult = {
+    kind: "switched";
+    targetIdentityId: string;
+}
+/** Self-bind: the account is this Identity's, and the device now holds its own binding. */
+ | {
+    kind: "bound";
+}
+/** A self-bind may have committed; nothing local changes, so status tells. */
+ | {
+    kind: "bind_unknown";
+} | {
+    kind: "refused";
+    reason: DeviceRebindClientRefusal;
+    beforeBrowser?: true;
+} | {
+    kind: "failed";
+}
+/** The coordinator may have committed, or did and the local switch is unfinished. */
+ | {
+    kind: "pending";
+};
+export type AccountRebindRunner = (input: {
+    context: AccountContext;
+    signal: AbortSignal;
+    onBrowserStart: (url: string) => void;
+    /** The registry's live account-context check; false stops the switch before finalize. */
+    isCurrent?: () => boolean;
+}) => Promise<AccountRebindResult>;
+export declare function createAccountRebindRunner(store: MemoryStore): AccountRebindRunner;
+/**
+ * Picks up a switch an earlier run left open. A recorded attempt is resolved
+ * by reading coordinator status, never by sending finalize again.
+ */
+export declare function resumeAccountRebind(store: MemoryStore, paths: {
+    keysDir?: string;
+    configPath?: string;
+}): Promise<AccountRebindResult | null>;
+//# sourceMappingURL=rebind.d.ts.map

package/dist/account/rebind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rebind.d.ts","sourceRoot":"","sources":["../../src/account/rebind.ts"],"names":[],"mappings":"AAMA,OAAO,EAIN,KAAK,yBAAyB,EAG9B,KAAK,WAAW,EAOhB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,MAAM,mBAAmB,GAC5B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE;AAChD,2FAA2F;GACzF;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE;AACnB,8EAA8E;GAC5E;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GACxB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,yBAAyB,CAAC;IAAC,aAAa,CAAC,EAAE,IAAI,CAAA;CAAE,GAC5E;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE;AACpB,qFAAqF;GACnF;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAEvB,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE;IACzC,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,WAAW,CAAC;IACpB,cAAc,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,yFAAyF;IACzF,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC;CAC1B,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAmEnC,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,WAAW,GAAG,mBAAmB,CAkBjF;AA0ED;;;GAGG;AACH,wBAAsB,mBAAmB,CACxC,KAAK,EAAE,WAAW,EAClB,KAAK,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9C,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAkBrC"}

package/dist/account/status.d.ts

@@ -1,11 +1,14 @@
-import { type CoordinatorAccountLinkStatusRead, readCoordinatorAccountChangeCapabilities, readCoordinatorAccountLinkStatus } from "@codemem/core";
+import { type CoordinatorAccountLinkStatusRead, type ResolvedAccountOwnerStatus, readCoordinatorAccountChangeCapabilities, readCoordinatorAccountLinkStatus, readCoordinatorResolvedAccountOwnerStatus } from "@codemem/core";
 import type { AccountContext, AccountContextReader, AccountContextResult, AccountSetup } from "./context.js";
 import { type AccountLinkOperationV1, type AccountLinkRegistry } from "./link-registry.js";
 export interface AccountStatusOptions {
     registry?: AccountLinkRegistry;
     readContext?: AccountContextReader;
     readRemoteStatus?: typeof readCoordinatorAccountLinkStatus;
+    readRemoteOwnerStatus?: typeof readCoordinatorResolvedAccountOwnerStatus;
     readRemoteCapabilities?: typeof readCoordinatorAccountChangeCapabilities;
+    /** The local People name for an Identity, so My Account and Sharing name it the same way. */
+    identityName?: (identityId: string) => string | undefined;
 }
 type UnavailableCode = Extract<CoordinatorAccountLinkStatusRead, {
     kind: "unavailable";
@@ -20,13 +23,26 @@ export interface AccountLinkViewV1 {
     coordinator: {
         origin: string;
     } | null;
+    /** Display target only; local.identityId and all mutation contexts remain the memory actor. */
+    accountOwner?: {
+        identityId: string;
+        memoryActorId: string;
+        displayName?: string;
+    };
+    /** Read-only owner evidence, never ordinary account authority or management capabilities. */
+    ownerProjection?: {
+        kind: "resolved_account_owner";
+        status: Extract<ResolvedAccountOwnerStatus, {
+            state: "owner_confirmed";
+        }>;
+    };
     remote: {
         kind: "not_checked";
     } | {
         kind: "unsupported";
     } | {
         kind: "unavailable";
-        code: UnavailableCode | "context_changed";
+        code: UnavailableCode | "context_changed" | "account_owner_association_invalid";
     } | {
         kind: "status";
         coordinatorId: string;
@@ -41,6 +57,17 @@ export interface AccountLinkViewV1 {
         } | null;
     };
     canLink: boolean;
+    /** "Sign in with Google": may link this Identity or switch the device to the account's. */
+    canSignIn?: boolean;
+    /**
+     * Where sign-in starts when this view is the owner-only projection, whose
+     * own contextId is not a mutation context: this device's own Identity.
+     */
+    signIn?: {
+        contextId: string;
+        coordinatorId: string;
+        authority: "controller_attestation" | "device_claim" | null;
+    };
     managementActions?: {
         refresh: boolean;
         disconnect: boolean;
@@ -48,18 +75,24 @@ export interface AccountLinkViewV1 {
     unlinkTarget?: string;
     blockedReason: null | "setup_incomplete" | "status_unavailable" | "unsupported" | "review_required" | "already_linked" | "revoked" | "conflict" | "identity_mismatch" | "operation_active";
     operation: AccountLinkOperationV1 | null;
+    /** Displayed operation's original context, never a mutation target. */
+    operationContextId?: string;
     checkedAt: string;
 }
 type LocalResult = Exclude<AccountContextResult, {
     error: string;
 }>;
 export declare function accountLocalView(result: LocalResult): AccountLinkViewV1;
+type AccountStatusResult = AccountLinkViewV1 | Extract<AccountContextResult, {
+    error: string;
+}>;
+type ReadOptions = {
+    expectedContext?: AccountContext;
+    /** Sign-in checks this device's own Identity, not an owner-only projection. */
+    ownIdentityOnly?: boolean;
+};
 export declare function readAccountStatus(options: AccountStatusOptions & {
     readContext: AccountContextReader;
-}, groupId: string | undefined, signal: AbortSignal, readOptions?: {
-    expectedContext?: AccountContext;
-}): Promise<AccountLinkViewV1 | Extract<AccountContextResult, {
-    error: string;
-}>>;
+}, groupId: string | undefined, signal: AbortSignal, readOptions?: ReadOptions): Promise<AccountStatusResult>;
 export {};
 //# sourceMappingURL=status.d.ts.map

package/dist/account/status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/account/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,KAAK,gCAAgC,EACrC,wCAAwC,EACxC,gCAAgC,EAChC,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EACX,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACpB,YAAY,EACZ,MAAM,cAAc,CAAC;AACtB,OAAO,EACN,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,EAExB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,WAAW,CAAC,EAAE,oBAAoB,CAAC;IACnC,gBAAgB,CAAC,EAAE,OAAO,gCAAgC,CAAC;IAC3D,sBAAsB,CAAC,EAAE,OAAO,wCAAwC,CAAC;CACzE;AACD,KAAK,eAAe,GAAG,OAAO,CAAC,gCAAgC,EAAE;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC,CAAC,MAAM,CAAC,CAAC;AAClG,MAAM,WAAW,iBAAiB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,EAAE,IAAI,CACV,cAAc,EACd,UAAU,GAAG,aAAa,GAAG,YAAY,GAAG,eAAe,GAAG,aAAa,CAC3E,GAAG,IAAI,CAAC;IACT,WAAW,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACvC,MAAM,EACH;QAAE,IAAI,EAAE,aAAa,CAAA;KAAE,GACvB;QAAE,IAAI,EAAE,aAAa,CAAA;KAAE,GACvB;QAAE,IAAI,EAAE,aAAa,CAAC;QAAC,IAAI,EAAE,eAAe,GAAG,iBAAiB,CAAA;KAAE,GAClE;QACA,IAAI,EAAE,QAAQ,CAAC;QACf,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,wBAAwB,GAAG,cAAc,GAAG,IAAI,CAAC;QAC5D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,KAAK,EAAE,iBAAiB,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;QAC1E,eAAe,EAAE,OAAO,CAAC;QACzB,OAAO,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;KAC7E,CAAC;IACL,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,OAAO,CAAA;KAAE,CAAC;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,EACV,IAAI,GACJ,kBAAkB,GAClB,oBAAoB,GACpB,aAAa,GACb,iBAAiB,GACjB,gBAAgB,GAChB,SAAS,GACT,UAAU,GACV,mBAAmB,GACnB,kBAAkB,CAAC;IACtB,SAAS,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACzC,SAAS,EAAE,MAAM,CAAC;CAClB;AACD,KAAK,WAAW,GAAG,OAAO,CAAC,oBAAoB,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAUpE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,iBAAiB,CAwBvE;AAsCD,wBAAsB,iBAAiB,CACtC,OAAO,EAAE,oBAAoB,GAAG;IAAE,WAAW,EAAE,oBAAoB,CAAA;CAAE,EACrE,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,MAAM,EAAE,WAAW,EACnB,WAAW,GAAE;IAAE,eAAe,CAAC,EAAE,cAAc,CAAA;CAAO,GACpD,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CA0D/E"}
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/account/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,KAAK,gCAAgC,EAErC,KAAK,0BAA0B,EAC/B,wCAAwC,EACxC,gCAAgC,EAChC,yCAAyC,EACzC,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EACX,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACpB,YAAY,EACZ,MAAM,cAAc,CAAC;AACtB,OAAO,EACN,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,EAExB,MAAM,oBAAoB,CAAC;AAG5B,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,WAAW,CAAC,EAAE,oBAAoB,CAAC;IACnC,gBAAgB,CAAC,EAAE,OAAO,gCAAgC,CAAC;IAC3D,qBAAqB,CAAC,EAAE,OAAO,yCAAyC,CAAC;IACzE,sBAAsB,CAAC,EAAE,OAAO,wCAAwC,CAAC;IACzE,6FAA6F;IAC7F,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;CAC1D;AACD,KAAK,eAAe,GAAG,OAAO,CAAC,gCAAgC,EAAE;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC,CAAC,MAAM,CAAC,CAAC;AAClG,MAAM,WAAW,iBAAiB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,EAAE,IAAI,CACV,cAAc,EACd,UAAU,GAAG,aAAa,GAAG,YAAY,GAAG,eAAe,GAAG,aAAa,CAC3E,GAAG,IAAI,CAAC;IACT,WAAW,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACvC,+FAA+F;IAC/F,YAAY,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnF,6FAA6F;IAC7F,eAAe,CAAC,EAAE;QACjB,IAAI,EAAE,wBAAwB,CAAC;QAC/B,MAAM,EAAE,OAAO,CAAC,0BAA0B,EAAE;YAAE,KAAK,EAAE,iBAAiB,CAAA;SAAE,CAAC,CAAC;KAC1E,CAAC;IACF,MAAM,EACH;QAAE,IAAI,EAAE,aAAa,CAAA;KAAE,GACvB;QAAE,IAAI,EAAE,aAAa,CAAA;KAAE,GACvB;QACA,IAAI,EAAE,aAAa,CAAC;QACpB,IAAI,EAAE,eAAe,GAAG,iBAAiB,GAAG,mCAAmC,CAAC;KAC/E,GACD;QACA,IAAI,EAAE,QAAQ,CAAC;QACf,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,wBAAwB,GAAG,cAAc,GAAG,IAAI,CAAC;QAC5D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,KAAK,EAAE,iBAAiB,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;QAC1E,eAAe,EAAE,OAAO,CAAC;QACzB,OAAO,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;KAC7E,CAAC;IACL,OAAO,EAAE,OAAO,CAAC;IACjB,2FAA2F;IAC3F,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,MAAM,CAAC,EAAE;QACR,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,wBAAwB,GAAG,cAAc,GAAG,IAAI,CAAC;KAC5D,CAAC;IACF,iBAAiB,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,OAAO,CAAA;KAAE,CAAC;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,EACV,IAAI,GACJ,kBAAkB,GAClB,oBAAoB,GACpB,aAAa,GACb,iBAAiB,GACjB,gBAAgB,GAChB,SAAS,GACT,UAAU,GACV,mBAAmB,GACnB,kBAAkB,CAAC;IACtB,SAAS,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACzC,uEAAuE;IACvE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;CAClB;AACD,KAAK,WAAW,GAAG,OAAO,CAAC,oBAAoB,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAyDpE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,iBAAiB,CAyBvE;AA2CD,KAAK,mBAAmB,GAAG,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEhG,KAAK,WAAW,GAAG;IAClB,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC,+EAA+E;IAC/E,eAAe,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,wBAAsB,iBAAiB,CACtC,OAAO,EAAE,oBAAoB,GAAG;IAAE,WAAW,EAAE,oBAAoB,CAAA;CAAE,EACrE,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,MAAM,EAAE,WAAW,EACnB,WAAW,GAAE,WAAgB,GAC3B,OAAO,CAAC,mBAAmB,CAAC,CAiB9B"}

package/dist/index.d.ts

@@ -11,6 +11,7 @@ import type { DeviceIdentityCoordinatorEvidence, GetUpdateStatusOptions, Observe
 import { MemoryStore, type RawEventSweeper, VERSION } from "@codemem/core";
 import { Hono } from "hono";
 import { type AccountLinkOptions } from "./account/guard.js";
+import type { createAccountOwnerRecoveryService } from "./account/owner-recovery-service.js";
 import type { AccountStatusOptions } from "./account/status.js";
 import type { RawEventInbox } from "./raw-event-inbox.js";
 import { type InMemoryRequestRateLimiter } from "./request-rate-limit.js";
@@ -23,6 +24,9 @@ export { createAccountContextReader } from "./account/context.js";
 export type { AccountLinkOptions } from "./account/guard.js";
 export type { AccountLinkFailure, AccountLinkOperationV1, AccountLinkRegistry, AccountLinkRegistryOptions, AccountLinkStartResult, } from "./account/link-registry.js";
 export { createAccountLinkRegistry } from "./account/link-registry.js";
+export type { AccountOwnerRecoveryServiceOptions } from "./account/owner-recovery-service.js";
+export { createAccountOwnerRecoveryService } from "./account/owner-recovery-service.js";
+export { type AccountRebindResult, createAccountRebindRunner, resumeAccountRebind, } from "./account/rebind.js";
 export type { AccountLinkViewV1, AccountStatusOptions } from "./account/status.js";
 export type { AdvancePendingProjectSharesResult, AdvanceProjectShareOperationResult, ReconcileRecipientPolicyProjectsResult, } from "./application/coordinator-maintenance.js";
 export { advancePendingProjectSharesOperation, reconcileRecipientPolicyProjectsOperation, } from "./application/coordinator-maintenance.js";
@@ -34,14 +38,18 @@ export type { LegacyTeamSetupActionBlockedReasonV1, LegacyTeamSetupActionGateV1,
 export { VERSION };
 /** Get (or create) the shared store instance. Exported so the sweeper can share it. */
 export declare function getStore(): MemoryStore;
-/** Close the shared store (called on shutdown). */
+/** Close a synchronous-only shared store. Async pack owners use closeStoreAsync(). */
 export declare function closeStore(): void;
+/** Drain semantic work before closing SQLite and releasing the shared store. */
+export declare function closeStoreAsync(): Promise<void>;
 /**
  * Create the Hono app with all viewer routes.
  * Exported for testing — pass a custom store factory to inject test DBs.
  */
 export interface AppOptions {
-    accountLink?: AccountLinkOptions & AccountStatusOptions;
+    accountLink?: AccountLinkOptions & AccountStatusOptions & {
+        ownerRecovery?: ReturnType<typeof createAccountOwnerRecoveryService>;
+    };
     storeFactory?: () => MemoryStore;
     rawEventInbox?: RawEventInbox | null;
     rawEventTarget?: ViewerTargetStore;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EACX,iCAAiC,EACjC,sBAAsB,EACtB,cAAc,EACd,YAAY,EACZ,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,KAAK,eAAe,EAAiB,OAAO,EAAE,MAAM,eAAe,CAAC;AAE1F,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,KAAK,kBAAkB,EAAsB,MAAM,oBAAoB,CAAC;AACjF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEhE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAEN,KAAK,0BAA0B,EAC/B,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,KAAK,kBAAkB,EAAgB,MAAM,oBAAoB,CAAC;AAU3E,OAAO,EAAE,KAAK,iBAAiB,EAAkC,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EAAE,KAAK,iBAAiB,EAA0B,MAAM,+BAA+B,CAAC;AAC/F,OAAO,EACN,KAAK,gCAAgC,EACrC,KAAK,uCAAuC,EAG5C,MAAM,wBAAwB,CAAC;AAGhC,YAAY,EACX,cAAc,EACd,oBAAoB,EACpB,2BAA2B,EAC3B,oBAAoB,EACpB,cAAc,EACd,YAAY,GACZ,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,YAAY,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,YAAY,EACX,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,0BAA0B,EAC1B,sBAAsB,GACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACnF,YAAY,EACX,iCAAiC,EACjC,kCAAkC,EAClC,sCAAsC,GACtC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACN,oCAAoC,EACpC,yCAAyC,GACzC,MAAM,0CAA0C,CAAC;AAClD,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AACnG,OAAO,EACN,yBAAyB,EACzB,iBAAiB,EACjB,6BAA6B,GAC7B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACX,sCAAsC,EACtC,sCAAsC,EACtC,8CAA8C,GAC9C,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,2BAA2B,EAC3B,4BAA4B,EAC5B,sCAAsC,EACtC,uCAAuC,EACvC,mCAAmC,EACnC,wCAAwC,EACxC,gCAAgC,GAChC,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACX,oCAAoC,EACpC,2BAA2B,EAC3B,iCAAiC,EACjC,+BAA+B,EAC/B,uBAAuB,EACvB,8BAA8B,EAC9B,+BAA+B,EAC/B,+BAA+B,EAC/B,iCAAiC,EACjC,wCAAwC,EACxC,wBAAwB,EACxB,gCAAgC,EAChC,kCAAkC,EAClC,qBAAqB,GACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,CAAC;AAKnB,uFAAuF;AACvF,wBAAgB,QAAQ,IAAI,WAAW,CAKtC;AAED,mDAAmD;AACnD,wBAAgB,UAAU,IAAI,IAAI,CAGjC;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IAC1B,WAAW,CAAC,EAAE,kBAAkB,GAAG,oBAAoB,CAAC;IACxD,YAAY,CAAC,EAAE,MAAM,WAAW,CAAC;IACjC,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,cAAc,CAAC,EAAE,iBAAiB,CAAC;IACnC,OAAO,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,cAAc,GAAG,IAAI,CAAC;IAC1C,qBAAqB,CAAC,EAAE,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IACpE,sBAAsB,CAAC,EAAE,kBAAkB,CAAC,wBAAwB,CAAC,CAAC;IACtE,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7E,qCAAqC,CAAC,EAAE,MAAM,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACzF,sCAAsC,CAAC,EAAE,uCAAuC,CAAC;IACjF,+BAA+B,CAAC,EAAE,gCAAgC,GAAG,IAAI,CAAC;IAC1E,qBAAqB,CAAC,EAAE,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;IACnE,sBAAsB,CAAC,EAAE,iBAAiB,CAAC,wBAAwB,CAAC,CAAC;IACrE,oBAAoB,CAAC,EAAE;QACtB,OAAO,CAAC,EAAE,0BAA0B,CAAC;QACrC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,wBAAwB,CAAC,EAAE,MAAM,CAAC;QAClC,4BAA4B,CAAC,EAAE,MAAM,CAAC;KACtC,CAAC;IACF,oBAAoB,CAAC,EAAE,MAAM;QAC5B,KAAK,EACF,UAAU,GACV,SAAS,GACT,UAAU,GACV,OAAO,GACP,UAAU,GACV,iBAAiB,GACjB,iBAAiB,GACjB,IAAI,CAAC;QACR,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,GAAG,IAAI,CAAC;CACT;AAuED,wBAAgB,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU,8EAgE1C;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,IAAI,CAAC,EAAE,UAAU,8EA8B9C"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EACX,iCAAiC,EACjC,sBAAsB,EACtB,cAAc,EACd,YAAY,EACZ,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,KAAK,eAAe,EAAiB,OAAO,EAAE,MAAM,eAAe,CAAC;AAE1F,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,KAAK,kBAAkB,EAAsB,MAAM,oBAAoB,CAAC;AACjF,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AAC7F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEhE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAEN,KAAK,0BAA0B,EAC/B,MAAM,yBAAyB,CAAC;AAIjC,OAAO,EAAE,KAAK,kBAAkB,EAAgB,MAAM,oBAAoB,CAAC;AAU3E,OAAO,EAAE,KAAK,iBAAiB,EAAkC,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EAAE,KAAK,iBAAiB,EAA0B,MAAM,+BAA+B,CAAC;AAC/F,OAAO,EACN,KAAK,gCAAgC,EACrC,KAAK,uCAAuC,EAG5C,MAAM,wBAAwB,CAAC;AAGhC,YAAY,EACX,cAAc,EACd,oBAAoB,EACpB,2BAA2B,EAC3B,oBAAoB,EACpB,cAAc,EACd,YAAY,GACZ,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,YAAY,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,YAAY,EACX,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,0BAA0B,EAC1B,sBAAsB,GACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,YAAY,EAAE,kCAAkC,EAAE,MAAM,qCAAqC,CAAC;AAC9F,OAAO,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AACxF,OAAO,EACN,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,mBAAmB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACnF,YAAY,EACX,iCAAiC,EACjC,kCAAkC,EAClC,sCAAsC,GACtC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACN,oCAAoC,EACpC,yCAAyC,GACzC,MAAM,0CAA0C,CAAC;AAClD,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AACnG,OAAO,EACN,yBAAyB,EACzB,iBAAiB,EACjB,6BAA6B,GAC7B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACX,sCAAsC,EACtC,sCAAsC,EACtC,8CAA8C,GAC9C,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,2BAA2B,EAC3B,4BAA4B,EAC5B,sCAAsC,EACtC,uCAAuC,EACvC,mCAAmC,EACnC,wCAAwC,EACxC,gCAAgC,GAChC,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACX,oCAAoC,EACpC,2BAA2B,EAC3B,iCAAiC,EACjC,+BAA+B,EAC/B,uBAAuB,EACvB,8BAA8B,EAC9B,+BAA+B,EAC/B,+BAA+B,EAC/B,iCAAiC,EACjC,wCAAwC,EACxC,wBAAwB,EACxB,gCAAgC,EAChC,kCAAkC,EAClC,qBAAqB,GACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,CAAC;AAMnB,uFAAuF;AACvF,wBAAgB,QAAQ,IAAI,WAAW,CAKtC;AAED,sFAAsF;AACtF,wBAAgB,UAAU,IAAI,IAAI,CAGjC;AAED,gFAAgF;AAChF,wBAAgB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAS/C;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IAC1B,WAAW,CAAC,EAAE,kBAAkB,GAC/B,oBAAoB,GAAG;QACtB,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,iCAAiC,CAAC,CAAC;KACrE,CAAC;IACH,YAAY,CAAC,EAAE,MAAM,WAAW,CAAC;IACjC,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,cAAc,CAAC,EAAE,iBAAiB,CAAC;IACnC,OAAO,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,cAAc,GAAG,IAAI,CAAC;IAC1C,qBAAqB,CAAC,EAAE,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IACpE,sBAAsB,CAAC,EAAE,kBAAkB,CAAC,wBAAwB,CAAC,CAAC;IACtE,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7E,qCAAqC,CAAC,EAAE,MAAM,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACzF,sCAAsC,CAAC,EAAE,uCAAuC,CAAC;IACjF,+BAA+B,CAAC,EAAE,gCAAgC,GAAG,IAAI,CAAC;IAC1E,qBAAqB,CAAC,EAAE,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;IACnE,sBAAsB,CAAC,EAAE,iBAAiB,CAAC,wBAAwB,CAAC,CAAC;IACrE,oBAAoB,CAAC,EAAE;QACtB,OAAO,CAAC,EAAE,0BAA0B,CAAC;QACrC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,wBAAwB,CAAC,EAAE,MAAM,CAAC;QAClC,4BAA4B,CAAC,EAAE,MAAM,CAAC;KACtC,CAAC;IACF,oBAAoB,CAAC,EAAE,MAAM;QAC5B,KAAK,EACF,UAAU,GACV,SAAS,GACT,UAAU,GACV,OAAO,GACP,UAAU,GACV,iBAAiB,GACjB,iBAAiB,GACjB,IAAI,CAAC;QACR,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,GAAG,IAAI,CAAC;CACT;AAqED,wBAAgB,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU,8EAiE1C;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,IAAI,CAAC,EAAE,UAAU,8EA8B9C"}