@interop/did-cli 0.10.0 → 0.12.0

package/dist/documentLoader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentLoader.d.ts","sourceRoot":"","sources":["../src/documentLoader.ts"],"names":[],"mappings":"AA6BA,uDAAuD;AACvD,eAAO,MAAM,cAAc,wDAA0C,CAAA"}

package/dist/documentLoader.js

@@ -0,0 +1,26 @@
+/**
+ * The CLI's single shared JSON-LD document loader, used by every command that
+ * resolves DIDs / dereferences DID URLs or loads JSON-LD contexts (DID
+ * resolution, VC issue/verify, EDV recipient resolution, zcap signing).
+ *
+ * Per project convention, DID/JSON-LD resolution always goes through
+ * `@interop/security-document-loader`, never a hand-rolled loader. The loader's
+ * default resolver only knows did:key and did:web, so the did:webvh driver is
+ * registered onto a copy of the defaults -- keeping the did:webvh dependency out
+ * of the shared loader package itself. A bare DID resolves to its DID document;
+ * a `did#fragment` URL is dereferenced straight to its verification-method node.
+ * Works for did:key (offline), did:web, and did:webvh (both fetched). Built once
+ * and reused.
+ */
+import { createDefaultDidResolver, securityLoader } from '@interop/security-document-loader';
+import { createDidWebvhDriver } from '@interop/did-method-webvh/driver';
+// The shared DID resolver underlying `documentLoader`. Kept module-private: its
+// `@interop/did-io` type is not portably nameable across an export boundary.
+const didResolver = createDefaultDidResolver();
+// `CachedResolver.use` types its argument as the full generation-capable
+// `DidMethodDriver`, but only reads `.method` (and later calls `.get`) for
+// resolution; the webvh driver implements just that resolution subset.
+didResolver.use(createDidWebvhDriver());
+/** The shared document loader for all CLI commands. */
+export const documentLoader = securityLoader({ didResolver }).build();
+//# sourceMappingURL=documentLoader.js.map

package/dist/documentLoader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentLoader.js","sourceRoot":"","sources":["../src/documentLoader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,wBAAwB,EACxB,cAAc,EACf,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAA;AAGvE,gFAAgF;AAChF,6EAA6E;AAC7E,MAAM,WAAW,GAAG,wBAAwB,EAAE,CAAA;AAC9C,yEAAyE;AACzE,2EAA2E;AAC3E,uEAAuE;AACvE,WAAW,CAAC,GAAG,CAAC,oBAAoB,EAAgC,CAAC,CAAA;AAErE,uDAAuD;AACvD,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,EAAE,CAAA"}

package/dist/edv/core.d.ts

@@ -17,7 +17,7 @@ export interface UpdateBase {
     indexed: IEncryptedDocument['indexed'];
 }
 /**
- * Encrypt an EDV Document through `EdvClientCore._encrypt`: serialize the
+ * Encrypt an EDV Document through `EdvDocumentCipher.encrypt`: serialize the
  * document's `{ content, meta, stream }` into a single JWE for the recipients,
  * blind any declared indexable attributes with `hmac`, and assemble the
  * `{ id, sequence, indexed, jwe }` envelope (plus `stream` when present).
@@ -44,9 +44,10 @@ export declare function encryptDocument({ doc, keys, hmac, indexes, base }: {
     base?: UpdateBase;
 }): Promise<IEncryptedDocument>;
 /**
- * Decrypt an EDV Document envelope through `EdvClientCore._decrypt`, returning
- * its cleartext payload (`content`, plus `meta`/`stream` when present). A wrong
- * key surfaces as a thrown error (the core rejects a `null` decrypt).
+ * Decrypt an EDV Document envelope through `EdvDocumentCipher.decrypt`,
+ * returning its cleartext payload (`content`, plus `meta`/`stream` when
+ * present). Decryption reads no index, so the codec needs no `indexHelper`. A
+ * wrong key surfaces as a thrown error (the codec rejects a `null` decrypt).
  *
  * @param options {object}
  * @param options.encryptedDoc {IEncryptedDocument}

package/dist/edv/core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../src/edv/core.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACV,YAAY,EACZ,kBAAkB,EAClB,KAAK,EACN,MAAM,8BAA8B,CAAA;AACrC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAEtD,2EAA2E;AAC3E,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAA;CACvC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,eAAe,CAAC,EACpC,GAAG,EACH,IAAI,EACJ,IAAI,EACJ,OAAO,EACP,IAAI,EACL,EAAE;IACD,GAAG,EAAE,YAAY,CAAA;IACjB,IAAI,EAAE,eAAe,EAAE,CAAA;IACvB,IAAI,CAAC,EAAE,KAAK,CAAA;IACZ,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAC5B,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAkB9B;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CAAC,EACpC,YAAY,EACZ,eAAe,EAChB,EAAE;IACD,YAAY,EAAE,kBAAkB,CAAA;IAChC,eAAe,EAAE,eAAe,CAAA;CACjC,GAAG,OAAO,CAAC,eAAe,CAAC,CAO3B"}
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../src/edv/core.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EACV,YAAY,EACZ,kBAAkB,EAClB,KAAK,EACN,MAAM,8BAA8B,CAAA;AACrC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAEtD,2EAA2E;AAC3E,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAA;CACvC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,eAAe,CAAC,EACpC,GAAG,EACH,IAAI,EACJ,IAAI,EACJ,OAAO,EACP,IAAI,EACL,EAAE;IACD,GAAG,EAAE,YAAY,CAAA;IACjB,IAAI,EAAE,eAAe,EAAE,CAAA;IACvB,IAAI,CAAC,EAAE,KAAK,CAAA;IACZ,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAC5B,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAkB9B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CAAC,EACpC,YAAY,EACZ,eAAe,EAChB,EAAE;IACD,YAAY,EAAE,kBAAkB,CAAA;IAChC,eAAe,EAAE,eAAe,CAAA;CACjC,GAAG,OAAO,CAAC,eAAe,CAAC,CAO3B"}

package/dist/edv/core.js

@@ -1,21 +1,23 @@
 /**
- * EDV Document encryption via `@interop/edv-client`'s `EdvClientCore` (Layer 2,
- * Phase 3). Phases 1-2 hand-rolled the `{ id, sequence, indexed, jwe }` envelope;
- * this routes document encryption and decryption through the reference core
- * instead, so the envelope -- and now the HMAC-blinded `indexed` array -- is
- * correct-by-construction against the implementation an EDV / WAS server expects.
+ * EDV Document encryption via `@interop/edv-client`'s `EdvDocumentCipher`. The
+ * `{ id, sequence, indexed, jwe }` envelope is not assembled here; it is routed
+ * through the reference codec instead, so the envelope -- and the HMAC-blinded
+ * `indexed` array -- is correct-by-construction against the implementation an
+ * EDV / WAS server expects.
  *
- * Only the transport-free helpers are used: `EdvClientCore._encrypt` /
- * `_decrypt` (the envelope + index blinding), `ensureIndex` (declaring indexable
- * attributes), and `generateId` (the document id). The chunked-stream bytes are
- * still produced by the cipher directly (see `./stream.ts`), since the core's
- * stream path requires a server transport; only the stream document's envelope
- * passes through here.
+ * Only the transport-free helpers are used: `EdvDocumentCipher.encrypt` /
+ * `decrypt` (the envelope + index blinding), plus `EdvClientCore.ensureIndex`
+ * (declaring indexable attributes, which registers them on the core's
+ * `indexHelper` -- and so on the `documentCipher` that shares it) and
+ * `generateId` (the document id). The chunked-stream bytes are still produced
+ * by the cipher directly (see `./stream.ts`), since the core's stream path
+ * requires a server transport; only the stream document's envelope passes
+ * through here.
  */
 import { Cipher } from '@interop/minimal-cipher';
-import { EdvClientCore } from '@interop/edv-client';
+import { EdvClientCore, EdvDocumentCipher } from '@interop/edv-client';
 /**
- * Encrypt an EDV Document through `EdvClientCore._encrypt`: serialize the
+ * Encrypt an EDV Document through `EdvDocumentCipher.encrypt`: serialize the
  * document's `{ content, meta, stream }` into a single JWE for the recipients,
  * blind any declared indexable attributes with `hmac`, and assemble the
  * `{ id, sequence, indexed, jwe }` envelope (plus `stream` when present).
@@ -46,7 +48,7 @@ export async function encryptDocument({ doc, keys, hmac, indexes, base }) {
         core.ensureIndex({ attribute, unique });
     }
     const { recipients, keyResolver } = new Cipher().createRecipients({ keys });
-    return core._encrypt({
+    return core.documentCipher.encrypt({
         doc,
         recipients,
         keyResolver,
@@ -55,9 +57,10 @@ export async function encryptDocument({ doc, keys, hmac, indexes, base }) {
     });
 }
 /**
- * Decrypt an EDV Document envelope through `EdvClientCore._decrypt`, returning
- * its cleartext payload (`content`, plus `meta`/`stream` when present). A wrong
- * key surfaces as a thrown error (the core rejects a `null` decrypt).
+ * Decrypt an EDV Document envelope through `EdvDocumentCipher.decrypt`,
+ * returning its cleartext payload (`content`, plus `meta`/`stream` when
+ * present). Decryption reads no index, so the codec needs no `indexHelper`. A
+ * wrong key surfaces as a thrown error (the codec rejects a `null` decrypt).
  *
  * @param options {object}
  * @param options.encryptedDoc {IEncryptedDocument}
@@ -65,8 +68,8 @@ export async function encryptDocument({ doc, keys, hmac, indexes, base }) {
  * @returns {Promise<DocumentPayload>}
  */
 export async function decryptDocument({ encryptedDoc, keyAgreementKey }) {
-    const core = new EdvClientCore();
-    const { content, meta, stream } = await core._decrypt({
+    const documentCipher = new EdvDocumentCipher({ cipher: new Cipher() });
+    const { content, meta, stream } = await documentCipher.decrypt({
         encryptedDoc,
         keyAgreementKey
     });

package/dist/edv/core.js.map

@@ -1 +1 @@
-{"version":3,"file":"core.js","sourceRoot":"","sources":["../../src/edv/core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AA0BnD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,GAAG,EACH,IAAI,EACJ,IAAI,EACJ,OAAO,EACP,IAAI,EAOL;IACC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAC1B,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,EAAE,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,CAAA;IAC3C,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IACxC,KAAK,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;IACzC,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3E,OAAO,IAAI,CAAC,QAAQ,CAAC;QACnB,GAAG;QACH,UAAU;QACV,WAAW;QACX,IAAI;QACJ,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC;KACtB,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,YAAY,EACZ,eAAe,EAIhB;IACC,MAAM,IAAI,GAAG,IAAI,aAAa,EAAE,CAAA;IAChC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC;QACpD,YAAY;QACZ,eAAe;KAChB,CAAC,CAAA;IACF,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AAC7E,CAAC"}
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../../src/edv/core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AA0BtE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,GAAG,EACH,IAAI,EACJ,IAAI,EACJ,OAAO,EACP,IAAI,EAOL;IACC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAC1B,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,EAAE,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,CAAA;IAC3C,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IACxC,KAAK,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;IACzC,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3E,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;QACjC,GAAG;QACH,UAAU;QACV,WAAW;QACX,IAAI;QACJ,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC;KACtB,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,YAAY,EACZ,eAAe,EAIhB;IACC,MAAM,cAAc,GAAG,IAAI,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,MAAM,EAAE,EAAE,CAAC,CAAA;IACtE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC;QAC7D,YAAY;QACZ,eAAe;KAChB,CAAC,CAAA;IACF,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AAC7E,CAAC"}

package/dist/edv/hmac.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hmac.d.ts","sourceRoot":"","sources":["../../src/edv/hmac.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,aAAa,EAEd,MAAM,8BAA8B,CAAA;AAOrC,iFAAiF;AACjF,eAAO,MAAM,aAAa,sBAAsB,CAAA;AAyBhD;;;;;;;;;;GAUG;AACH,wBAAsB,WAAW,CAAC,EAChC,GAAG,EACJ,EAAE;IACD,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAAC,aAAa,CAAC,CA+CzB"}
+{"version":3,"file":"hmac.d.ts","sourceRoot":"","sources":["../../src/edv/hmac.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,aAAa,EAEd,MAAM,8BAA8B,CAAA;AAQrC,iFAAiF;AACjF,eAAO,MAAM,aAAa,sBAAsB,CAAA;AAyBhD;;;;;;;;;;GAUG;AACH,wBAAsB,WAAW,CAAC,EAChC,GAAG,EACJ,EAAE;IACD,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAAC,aAAa,CAAC,CAyCzB"}

package/dist/edv/hmac.js

@@ -8,6 +8,7 @@
  */
 import { SHA256HMACKey } from '@interop/data-integrity-core';
 import { listCollection, loadFromCollection, loadMetaFromCollection } from '../storage.js';
+import { resolveByHandle } from '../meta.js';
 /** The stored `type` value of an HMAC blinding key (the EDV protocol string). */
 export const HMAC_KEY_TYPE = 'Sha256HmacKey2019';
 /**
@@ -17,7 +18,7 @@ export const HMAC_KEY_TYPE = 'Sha256HmacKey2019';
  */
 async function listStoredHmacs() {
     const storageIds = await listCollection('keys');
-    const stored = await Promise.all(storageIds.map(storageId => loadFromCollection('keys', storageId)));
+    const stored = await Promise.all(storageIds.map(storageId => loadFromCollection({ collection: 'keys', storageId })));
     return storageIds
         .map((storageId, index) => ({ storageId, stored: stored[index] }))
         .filter(({ stored }) => stored.type === HMAC_KEY_TYPE);
@@ -50,18 +51,17 @@ export async function resolveHmac({ ref }) {
     if (direct) {
         return SHA256HMACKey.from(direct.stored);
     }
-    const metas = await Promise.all(candidates.map(candidate => loadMetaFromCollection({
-        collection: 'keys',
-        storageId: candidate.storageId
-    })));
-    const byHandle = candidates.filter((_candidate, index) => metas[index]?.handle === ref);
-    if (byHandle.length === 0) {
+    const match = await resolveByHandle({
+        ref,
+        noun: 'HMAC keys',
+        alternative: 'key id',
+        storageIds: candidates.map(candidate => candidate.storageId),
+        loadMeta: storageId => loadMetaFromCollection({ collection: 'keys', storageId })
+    });
+    if (!match) {
         throw new Error(`No HMAC key found for "${ref}".`);
     }
-    if (byHandle.length > 1) {
-        throw new Error(`Handle "${ref}" matches ${byHandle.length} HMAC keys; ` +
-            'use the key id instead.');
-    }
-    return SHA256HMACKey.from(byHandle[0].stored);
+    const candidate = candidates.find(candidate => candidate.storageId === match.storageId);
+    return SHA256HMACKey.from(candidate.stored);
 }
 //# sourceMappingURL=hmac.js.map

package/dist/edv/hmac.js.map

@@ -1 +1 @@
-{"version":3,"file":"hmac.js","sourceRoot":"","sources":["../../src/edv/hmac.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,aAAa,EAEd,MAAM,8BAA8B,CAAA;AACrC,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACvB,MAAM,eAAe,CAAA;AAEtB,iFAAiF;AACjF,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAA;AAQhD;;;;GAIG;AACH,KAAK,UAAU,eAAe;IAC5B,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAA;IAC/C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CACzB,kBAAkB,CAAiB,MAAM,EAAE,SAAS,CAAC,CACtD,CACF,CAAA;IACD,OAAO,UAAU;SACd,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;SACjE,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,CAAA;AAC1D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAChC,GAAG,EAGJ;IACC,MAAM,UAAU,GAAG,MAAM,eAAe,EAAE,CAAA;IAC1C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,mDAAmD;YACjD,qCAAqC,CACxC,CAAA;IACH,CAAC;IAED,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,kBAAkB,UAAU,CAAC,MAAM,cAAc;gBAC/C,4BAA4B,CAC/B,CAAA;QACH,CAAC;QACD,OAAO,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IACjD,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAC5B,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,IAAI,SAAS,CAAC,SAAS,KAAK,GAAG,CACxE,CAAA;IACD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC1C,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CACzB,sBAAsB,CAAC;QACrB,UAAU,EAAE,MAAM;QAClB,SAAS,EAAE,SAAS,CAAC,SAAS;KAC/B,CAAC,CACH,CACF,CAAA;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAChC,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,GAAG,CACpD,CAAA;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAA;IACpD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,WAAW,GAAG,aAAa,QAAQ,CAAC,MAAM,cAAc;YACtD,yBAAyB,CAC5B,CAAA;IACH,CAAC;IACD,OAAO,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;AAC/C,CAAC"}
+{"version":3,"file":"hmac.js","sourceRoot":"","sources":["../../src/edv/hmac.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,aAAa,EAEd,MAAM,8BAA8B,CAAA;AACrC,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACvB,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE5C,iFAAiF;AACjF,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAA;AAQhD;;;;GAIG;AACH,KAAK,UAAU,eAAe;IAC5B,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAA;IAC/C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CACzB,kBAAkB,CAAiB,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CACtE,CACF,CAAA;IACD,OAAO,UAAU;SACd,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;SACjE,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,CAAA;AAC1D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAChC,GAAG,EAGJ;IACC,MAAM,UAAU,GAAG,MAAM,eAAe,EAAE,CAAA;IAC1C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,mDAAmD;YACjD,qCAAqC,CACxC,CAAA;IACH,CAAC;IAED,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,kBAAkB,UAAU,CAAC,MAAM,cAAc;gBAC/C,4BAA4B,CAC/B,CAAA;QACH,CAAC;QACD,OAAO,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IACjD,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAC5B,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,IAAI,SAAS,CAAC,SAAS,KAAK,GAAG,CACxE,CAAA;IACD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC1C,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC;QAClC,GAAG;QACH,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,QAAQ;QACrB,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC;QAC5D,QAAQ,EAAE,SAAS,CAAC,EAAE,CACpB,sBAAsB,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;KAC5D,CAAC,CAAA;IACF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAA;IACpD,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAC/B,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CACpD,CAAA;IACF,OAAO,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;AAC7C,CAAC"}

package/dist/edv/recipients.d.ts

@@ -1,6 +1,8 @@
 import { X25519KeyAgreementKey2020 } from '@interop/x25519-key-agreement-key';
 /** The X25519 key-agreement verification-method type minimal-cipher expects. */
 export declare const KEY_AGREEMENT_TYPE = "X25519KeyAgreementKey2020";
+/** The multibase prefix of an X25519 `publicKeyMultibase`. */
+export declare const X25519_MULTIBASE_PREFIX = "z6LS";
 /**
  * An X25519 key-agreement key instance with its `.id` (`kid`) populated. Used
  * both as a resolved recipient (encrypt reads `id` + `publicKeyMultibase`) and

package/dist/edv/recipients.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recipients.d.ts","sourceRoot":"","sources":["../../src/edv/recipients.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAI7E,gFAAgF;AAChF,eAAO,MAAM,kBAAkB,8BAA8B,CAAA;AAW7D;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,yBAAyB,CAAC,GAAG;IAC7E,EAAE,EAAE,MAAM,CAAA;CACX,CAAA;AAqKD;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACJ,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,OAAO,CAAC,eAAe,CAAC,CAmB3B;AAED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,IAAI,EACL,EAAE;IACD,IAAI,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAAC,eAAe,CAAC,CAa3B;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,GAAG,EACJ,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,OAAO,CAAC,eAAe,CAAC,CAa3B;AAED;;;;;;;;GAQG;AACH,wBAAsB,yBAAyB,CAAC,EAC9C,GAAG,EACJ,EAAE;IACD,GAAG,EAAE;QAAE,UAAU,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE;gBAAE,GAAG,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,EAAE,CAAA;KAAE,CAAA;CACtD,GAAG,OAAO,CAAC,eAAe,CAAC,CAsC3B"}
+{"version":3,"file":"recipients.d.ts","sourceRoot":"","sources":["../../src/edv/recipients.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAK7E,gFAAgF;AAChF,eAAO,MAAM,kBAAkB,8BAA8B,CAAA;AAE7D,8DAA8D;AAC9D,eAAO,MAAM,uBAAuB,SAAS,CAAA;AAoB7C;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,yBAAyB,CAAC,GAAG;IAC7E,EAAE,EAAE,MAAM,CAAA;CACX,CAAA;AAkKD;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACJ,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,OAAO,CAAC,eAAe,CAAC,CAmB3B;AAED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,IAAI,EACL,EAAE;IACD,IAAI,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAAC,eAAe,CAAC,CAa3B;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,GAAG,EACJ,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,OAAO,CAAC,eAAe,CAAC,CAa3B;AAED;;;;;;;;GAQG;AACH,wBAAsB,yBAAyB,CAAC,EAC9C,GAAG,EACJ,EAAE;IACD,GAAG,EAAE;QAAE,UAAU,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE;gBAAE,GAAG,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,EAAE,CAAA;KAAE,CAAA;CACtD,GAAG,OAAO,CAAC,eAAe,CAAC,CAsC3B"}

package/dist/edv/recipients.js

@@ -10,20 +10,14 @@
  * for decrypt.
  */
 import { readFile } from 'node:fs/promises';
-import { securityLoader } from '@interop/security-document-loader';
 import { X25519KeyAgreementKey2020 } from '@interop/x25519-key-agreement-key';
+import { documentLoader } from '../documentLoader.js';
 import { listCollection, loadFromCollection } from '../storage.js';
 import { resolveKeyRef } from '../meta.js';
 /** The X25519 key-agreement verification-method type minimal-cipher expects. */
 export const KEY_AGREEMENT_TYPE = 'X25519KeyAgreementKey2020';
-/**
- * Document loader for DID-URL recipient resolution: resolves a bare DID to its
- * DID document and dereferences a `did#fragment` URL straight to its
- * verification-method node, for both did:key (offline) and did:web (fetched).
- * Built once and reused. (Per project convention, DID/JSON-LD resolution goes
- * through `@interop/security-document-loader`, never a hand-rolled loader.)
- */
-const documentLoader = securityLoader().build();
+/** The multibase prefix of an X25519 `publicKeyMultibase`. */
+export const X25519_MULTIBASE_PREFIX = 'z6LS';
 /**
  * Construct an X25519 key-agreement key from a verification method or stored
  * key pair. `didKey: true` defaults a source with no `controller`/`id` to its
@@ -33,7 +27,7 @@ const documentLoader = securityLoader().build();
  * `type: 'Multikey'` source is normalized via `fromMultikey`. The constructor
  * validates the multibase header bytes.
  *
- * @param source {Record<string, any>}
+ * @param source {VerificationMethodNode}
  * @returns {Promise<KeyAgreementKey>}
  */
 async function keyAgreementKeyFrom(source) {
@@ -61,7 +55,7 @@ function splitFragment({ ref }) {
  *
  * @param options {object}
  * @param options.url {string}
- * @returns {Promise<Record<string, any>>}
+ * @returns {Promise<VerificationMethodNode>}
  */
 async function resolveDidUrl({ url }) {
     const { document } = (await documentLoader(url));
@@ -98,7 +92,7 @@ function isX25519PublicKey(publicKeyMultibase) {
  * and construct it.
  *
  * @param options {object}
- * @param options.method {Record<string, any>}
+ * @param options.method {VerificationMethodNode}
  * @param options.ref {string}
  * @returns {Promise<KeyAgreementKey>}
  */
@@ -126,7 +120,7 @@ async function resolveDidRecipient({ ref }) {
     // A bare DID: pick the single keyAgreement key, dereferencing any entries
     // that are id references rather than embedded verification methods.
     const didDocument = await resolveDidUrl({ url: did });
-    const entries = (didDocument.keyAgreement ?? []);
+    const entries = didDocument.keyAgreement ?? [];
     const methods = [];
     for (const entry of entries) {
         methods.push(typeof entry === 'string' ? await resolveDidUrl({ url: entry }) : entry);
@@ -151,7 +145,7 @@ async function resolveDidRecipient({ ref }) {
  * @returns {Promise<KeyAgreementKey>}
  */
 export async function resolveRecipient({ ref }) {
-    if (ref.startsWith('z6LS')) {
+    if (ref.startsWith(X25519_MULTIBASE_PREFIX)) {
         return toKeyAgreementKey({
             method: { type: KEY_AGREEMENT_TYPE, publicKeyMultibase: ref },
             ref
@@ -229,7 +223,10 @@ export async function autoSelectKeyAgreementKey({ jwe }) {
     const storageIds = await listCollection('keys');
     const matches = [];
     for (const storageId of storageIds) {
-        const stored = await loadFromCollection('keys', storageId);
+        const stored = await loadFromCollection({
+            collection: 'keys',
+            storageId
+        });
         if (stored.type !== KEY_AGREEMENT_TYPE ||
             !stored.privateKeyMultibase ||
             !stored.publicKeyMultibase) {

package/dist/edv/recipients.js.map

@@ -1 +1 @@
-{"version":3,"file":"recipients.js","sourceRoot":"","sources":["../../src/edv/recipients.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAA;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAC7E,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAE1C,gFAAgF;AAChF,MAAM,CAAC,MAAM,kBAAkB,GAAG,2BAA2B,CAAA;AAE7D;;;;;;GAMG;AACH,MAAM,cAAc,GAAG,cAAc,EAAE,CAAC,KAAK,EAAE,CAAA;AAmB/C;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,mBAAmB,CAChC,MAA2B;IAE3B,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAA;IAC7E,OAAO,GAAsB,CAAA;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,EAAE,GAAG,EAAmB;IAI7C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC7B,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;QAChB,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;IACrB,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAA;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,aAAa,CAAC,EAC3B,GAAG,EAGJ;IACC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,CAE9C,CAAA;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,iBAAiB,CAAC,kBAA2B;IACpD,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,CAAC;QACH,0EAA0E;QAC1E,yBAAyB,CAAC,eAAe,CAAC;YACxC,WAAW,EAAE,kBAAkB;SAChC,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,iBAAiB,CAAC,EAC/B,MAAM,EACN,GAAG,EAIJ;IACC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,cAAc,GAAG,eAAe,kBAAkB,OAAO,CAAC,CAAA;IAC5E,CAAC;IACD,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAA;AACpC,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,mBAAmB,CAAC,EACjC,GAAG,EAGJ;IACC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IAEhD,wEAAwE;IACxE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IAC9E,CAAC;IAED,0EAA0E;IAC1E,oEAAoE;IACpE,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;IACrD,MAAM,OAAO,GAAG,CAAC,WAAW,CAAC,YAAY,IAAI,EAAE,CAG5C,CAAA;IACH,MAAM,OAAO,GAA0B,EAAE,CAAA;IACzC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CACV,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CACxE,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,IAAI,MAAM,CAAC,kBAAkB,CAC1E,CAAA;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,OAAO,GAAG,WAAW,kBAAkB,oBAAoB,CAAC,CAAA;IAC9E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,OAAO,GAAG,QAAQ,MAAM,CAAC,MAAM,sBAAsB;YACnD,0CAA0C,CAC7C,CAAA;IACH,CAAC;IACD,OAAO,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;AACtD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,GAAG,EAGJ;IACC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,iBAAiB,CAAC;YACvB,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,GAAG,EAAE;YAC7D,GAAG;SACJ,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IACrC,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IAC7C,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,IAAI,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAA4B,CAAA;IACpD,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,eAAe,GAAG,eAAe,kBAAkB,OAAO,CAAC,CAAA;IAC7E,CAAC;IACD,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAA;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,IAAI,EAGL;IACC,IAAI,MAA2B,CAAA;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,MAAO,GAAa,CAAC,OAAO,EAAE,EAClE;YACE,KAAK,EAAE,GAAG;SACX,CACF,CAAA;IACH,CAAC;IACD,OAAO,iBAAiB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;AACjD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EACxC,GAAG,EAGJ;IACC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,IAAI,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAA4B,CAAA;IACpD,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,eAAe,GAAG,eAAe,kBAAkB,OAAO,CAAC,CAAA;IAC7E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,eAAe,GAAG,sCAAsC,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAA;AACpC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAC9C,GAAG,EAGJ;IACC,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;SACnB,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC;SACxC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAC3D,CAAA;IACD,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAA;IAC/C,MAAM,OAAO,GAAsB,EAAE,CAAA;IACrC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACrC,MAAM,EACN,SAAS,CACV,CAAA;QACD,IACE,MAAM,CAAC,IAAI,KAAK,kBAAkB;YAClC,CAAC,MAAM,CAAC,mBAAmB;YAC3B,CAAC,MAAM,CAAC,kBAAkB,EAC1B,CAAC;YACD,SAAQ;QACV,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAA;QAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACnB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,0DAA0D;YACxD,2BAA2B,CAC9B,CAAA;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,CAAC,MAAM,sCAAsC;YACrD,2BAA2B,CAC9B,CAAA;IACH,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAA;AACnB,CAAC"}
+{"version":3,"file":"recipients.js","sourceRoot":"","sources":["../../src/edv/recipients.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAE1C,gFAAgF;AAChF,MAAM,CAAC,MAAM,kBAAkB,GAAG,2BAA2B,CAAA;AAE7D,8DAA8D;AAC9D,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAA;AAqC7C;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,mBAAmB,CAChC,MAA8B;IAE9B,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAA;IAC7E,OAAO,GAAsB,CAAA;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,EAAE,GAAG,EAAmB;IAI7C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC7B,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;QAChB,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;IACrB,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAA;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,aAAa,CAAC,EAC3B,GAAG,EAGJ;IACC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,CAE9C,CAAA;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,iBAAiB,CAAC,kBAA2B;IACpD,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,CAAC;QACH,0EAA0E;QAC1E,yBAAyB,CAAC,eAAe,CAAC;YACxC,WAAW,EAAE,kBAAkB;SAChC,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,iBAAiB,CAAC,EAC/B,MAAM,EACN,GAAG,EAIJ;IACC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,cAAc,GAAG,eAAe,kBAAkB,OAAO,CAAC,CAAA;IAC5E,CAAC;IACD,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAA;AACpC,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,mBAAmB,CAAC,EACjC,GAAG,EAGJ;IACC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IAEhD,wEAAwE;IACxE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IAC9E,CAAC;IAED,0EAA0E;IAC1E,oEAAoE;IACpE,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;IACrD,MAAM,OAAO,GAAG,WAAW,CAAC,YAAY,IAAI,EAAE,CAAA;IAC9C,MAAM,OAAO,GAA6B,EAAE,CAAA;IAC5C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CACV,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CACxE,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,IAAI,MAAM,CAAC,kBAAkB,CAC1E,CAAA;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,OAAO,GAAG,WAAW,kBAAkB,oBAAoB,CAAC,CAAA;IAC9E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,OAAO,GAAG,QAAQ,MAAM,CAAC,MAAM,sBAAsB;YACnD,0CAA0C,CAC7C,CAAA;IACH,CAAC;IACD,OAAO,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;AACtD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,GAAG,EAGJ;IACC,IAAI,GAAG,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC5C,OAAO,iBAAiB,CAAC;YACvB,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,GAAG,EAAE;YAC7D,GAAG;SACJ,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IACrC,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IAC7C,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,IAAI,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAA4B,CAAA;IACpD,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,eAAe,GAAG,eAAe,kBAAkB,OAAO,CAAC,CAAA;IAC7E,CAAC;IACD,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAA;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,IAAI,EAGL;IACC,IAAI,MAA8B,CAAA;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,MAAO,GAAa,CAAC,OAAO,EAAE,EAClE;YACE,KAAK,EAAE,GAAG;SACX,CACF,CAAA;IACH,CAAC;IACD,OAAO,iBAAiB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;AACjD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EACxC,GAAG,EAGJ;IACC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,IAAI,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAA4B,CAAA;IACpD,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,eAAe,GAAG,eAAe,kBAAkB,OAAO,CAAC,CAAA;IAC7E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,eAAe,GAAG,sCAAsC,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAA;AACpC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAC9C,GAAG,EAGJ;IACC,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;SACnB,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC;SACxC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAC3D,CAAA;IACD,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAA;IAC/C,MAAM,OAAO,GAAsB,EAAE,CAAA;IACrC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAwB;YAC7D,UAAU,EAAE,MAAM;YAClB,SAAS;SACV,CAAC,CAAA;QACF,IACE,MAAM,CAAC,IAAI,KAAK,kBAAkB;YAClC,CAAC,MAAM,CAAC,mBAAmB;YAC3B,CAAC,MAAM,CAAC,kBAAkB,EAC1B,CAAC;YACD,SAAQ;QACV,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAA;QAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACnB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,0DAA0D;YACxD,2BAA2B,CAC9B,CAAA;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,CAAC,MAAM,sCAAsC;YACrD,2BAA2B,CAC9B,CAAA;IACH,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAA;AACnB,CAAC"}

package/dist/keys/webvh-signer.d.ts

@@ -1,6 +1,6 @@
-import type { Signer, Verifier } from '@interop/did-method-webvh';
+import type { Signer } from '@interop/did-method-webvh';
 /**
- * Build a did:webvh `Signer` (and `Verifier`) backed by an Ed25519 key pair.
+ * Build a did:webvh `Signer` backed by an Ed25519 key pair.
  *
  * `keyPair.signer()` requires `keyPair.id` to be set, so the caller must assign
  * an id before signing; this helper derives the verification method id from the
@@ -8,7 +8,7 @@ import type { Signer, Verifier } from '@interop/did-method-webvh';
  *
  * @param options {object}
  * @param options.keyPair {object} an `@interop/ed25519-verification-key` pair.
- * @returns {Signer & Verifier}
+ * @returns {Signer}
  */
 export declare function makeWebvhSigner({ keyPair }: {
     keyPair: {
@@ -18,12 +18,6 @@ export declare function makeWebvhSigner({ keyPair }: {
                 data: Uint8Array;
             }): Promise<Uint8Array>;
         };
-        verifier(): {
-            verify(options: {
-                data: Uint8Array;
-                signature: Uint8Array;
-            }): Promise<boolean>;
-        };
     };
-}): Signer & Verifier;
+}): Signer;
 //# sourceMappingURL=webvh-signer.d.ts.map

package/dist/keys/webvh-signer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webvh-signer.d.ts","sourceRoot":"","sources":["../../src/keys/webvh-signer.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAA;AAEjE;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,EAC9B,OAAO,EACR,EAAE;IACD,OAAO,EAAE;QACP,kBAAkB,EAAE,MAAM,CAAA;QAC1B,MAAM,IAAI;YAAE,IAAI,CAAC,OAAO,EAAE;gBAAE,IAAI,EAAE,UAAU,CAAA;aAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;SAAE,CAAA;QACtE,QAAQ,IAAI;YACV,MAAM,CAAC,OAAO,EAAE;gBACd,IAAI,EAAE,UAAU,CAAA;gBAChB,SAAS,EAAE,UAAU,CAAA;aACtB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;SACrB,CAAA;KACF,CAAA;CACF,GAAG,MAAM,GAAG,QAAQ,CAiBpB"}
+{"version":3,"file":"webvh-signer.d.ts","sourceRoot":"","sources":["../../src/keys/webvh-signer.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAA;AAEvD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,EAC9B,OAAO,EACR,EAAE;IACD,OAAO,EAAE;QACP,kBAAkB,EAAE,MAAM,CAAA;QAC1B,MAAM,IAAI;YAAE,IAAI,CAAC,OAAO,EAAE;gBAAE,IAAI,EAAE,UAAU,CAAA;aAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;SAAE,CAAA;KACvE,CAAA;CACF,GAAG,MAAM,CAcT"}

package/dist/keys/webvh-signer.js

@@ -1,19 +1,18 @@
 /**
  * Bridge between the CLI's `@interop/ed25519-verification-key` key pair and the
- * `Signer` / `Verifier` interfaces expected by `@interop/did-method-webvh`, so
- * did:webvh reuses the same Ed25519 key class as did:key / did:web rather than
- * pulling in a separate signing implementation.
+ * `Signer` interface expected by `@interop/did-method-webvh`, so did:webvh
+ * reuses the same Ed25519 key class as did:key / did:web rather than pulling in
+ * a separate signing implementation.
  *
- * `createDID` both signs the initial log entry and verifies it before
- * returning, so the bridge implements both interfaces: `sign({ document,
- * proof })` returns a base58btc multibase `proofValue`, and `verify` checks an
- * Ed25519 signature. `prepareDataForSigning` produces the bytes to sign (the
- * `eddsa-jcs-2022` cryptosuite hash); the key pair's own `signer()` / `verifier()`
- * do the cryptography.
+ * `sign({ document, proof })` returns a base58btc multibase `proofValue`.
+ * `prepareDataForSigning` produces the bytes to sign (the `eddsa-jcs-2022`
+ * cryptosuite hash); the key pair's own `signer()` does the cryptography.
+ * Verification is left to the library's default log verifier, which recovers
+ * each entry's public key from its proof rather than being bound to one key.
  */
 import { MultibaseEncoding, multibaseEncode, prepareDataForSigning } from '@interop/did-method-webvh';
 /**
- * Build a did:webvh `Signer` (and `Verifier`) backed by an Ed25519 key pair.
+ * Build a did:webvh `Signer` backed by an Ed25519 key pair.
  *
  * `keyPair.signer()` requires `keyPair.id` to be set, so the caller must assign
  * an id before signing; this helper derives the verification method id from the
@@ -21,7 +20,7 @@ import { MultibaseEncoding, multibaseEncode, prepareDataForSigning } from '@inte
  *
  * @param options {object}
  * @param options.keyPair {object} an `@interop/ed25519-verification-key` pair.
- * @returns {Signer & Verifier}
+ * @returns {Signer}
  */
 export function makeWebvhSigner({ keyPair }) {
     const verificationMethodId = `did:key:${keyPair.publicKeyMultibase}#${keyPair.publicKeyMultibase}`;
@@ -35,9 +34,6 @@ export function makeWebvhSigner({ keyPair }) {
         },
         getVerificationMethodId() {
             return verificationMethodId;
-        },
-        async verify(signature, message) {
-            return keyPair.verifier().verify({ data: message, signature });
         }
     };
 }

package/dist/keys/webvh-signer.js.map

@@ -1 +1 @@
-{"version":3,"file":"webvh-signer.js","sourceRoot":"","sources":["../../src/keys/webvh-signer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,qBAAqB,EACtB,MAAM,2BAA2B,CAAA;AAGlC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,EAC9B,OAAO,EAYR;IACC,MAAM,oBAAoB,GAAG,WAAW,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAA;IAClG,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC5B,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;YACzD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;YACvD,OAAO;gBACL,UAAU,EAAE,eAAe,CAAC,SAAS,EAAE,iBAAiB,CAAC,UAAU,CAAC;aACrE,CAAA;QACH,CAAC;QACD,uBAAuB;YACrB,OAAO,oBAAoB,CAAA;QAC7B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO;YAC7B,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAA;QAChE,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"webvh-signer.js","sourceRoot":"","sources":["../../src/keys/webvh-signer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,qBAAqB,EACtB,MAAM,2BAA2B,CAAA;AAGlC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,EAC9B,OAAO,EAMR;IACC,MAAM,oBAAoB,GAAG,WAAW,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAA;IAClG,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC5B,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;YACzD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;YACvD,OAAO;gBACL,UAAU,EAAE,eAAe,CAAC,SAAS,EAAE,iBAAiB,CAAC,UAAU,CAAC;aACrE,CAAA;QACH,CAAC;QACD,uBAAuB;YACrB,OAAO,oBAAoB,CAAA;QAC7B,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/keys/webvh-update.d.ts

@@ -25,9 +25,14 @@ export declare function exportUpdateKey(keyPair: Ed25519VerificationKey): Promis
  * (and reconstructed via `loadUpdateKey` at the next rotation), so the key pair
  * itself is not returned.
  *
+ * @param [options] {object}
+ * @param [options.seed] {Uint8Array}   derive the key deterministically from
+ *   this seed (e.g. for `--with-seed`); generated randomly when omitted.
  * @returns {Promise<WebvhUpdateKey & { nextKeyHash: string }>}
  */
-export declare function generateStagedKey(): Promise<WebvhUpdateKey & {
+export declare function generateStagedKey({ seed }?: {
+    seed?: Uint8Array;
+}): Promise<WebvhUpdateKey & {
     nextKeyHash: string;
 }>;
 //# sourceMappingURL=webvh-update.d.ts.map

package/dist/keys/webvh-update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webvh-update.d.ts","sourceRoot":"","sources":["../../src/keys/webvh-update.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAA;AAC1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAEnD;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,sBAAsB,CAAC,CAYjC;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC;IAAE,kBAAkB,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAA;CAAE,CAAC,CAMrE;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAChD,cAAc,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CACzC,CAMA"}
+{"version":3,"file":"webvh-update.d.ts","sourceRoot":"","sources":["../../src/keys/webvh-update.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAA;AAC1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAEnD;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,sBAAsB,CAAC,CAYjC;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC;IAAE,kBAAkB,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAA;CAAE,CAAC,CAMrE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CAAC,EACtC,IAAI,EACL,GAAE;IAAE,IAAI,CAAC,EAAE,UAAU,CAAA;CAAO,GAAG,OAAO,CACrC,cAAc,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CACzC,CAMA"}

package/dist/keys/webvh-update.js

@@ -52,10 +52,13 @@ export async function exportUpdateKey(keyPair) {
  * (and reconstructed via `loadUpdateKey` at the next rotation), so the key pair
  * itself is not returned.
  *
+ * @param [options] {object}
+ * @param [options.seed] {Uint8Array}   derive the key deterministically from
+ *   this seed (e.g. for `--with-seed`); generated randomly when omitted.
  * @returns {Promise<WebvhUpdateKey & { nextKeyHash: string }>}
  */
-export async function generateStagedKey() {
-    const { publicKeyMultibase, secretKeyMultibase } = await exportUpdateKey(await Ed25519VerificationKey.generate());
+export async function generateStagedKey({ seed } = {}) {
+    const { publicKeyMultibase, secretKeyMultibase } = await exportUpdateKey(await Ed25519VerificationKey.generate({ seed }));
     const nextKeyHash = await deriveNextKeyHash(publicKeyMultibase);
     return { publicKeyMultibase, secretKeyMultibase, nextKeyHash };
 }

package/dist/keys/webvh-update.js.map

@@ -1 +1 @@
-{"version":3,"file":"webvh-update.js","sourceRoot":"","sources":["../../src/keys/webvh-update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAA;AAG1E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAmB;IAEnB,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACtE,CAAC;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,gEAAgE;IAChE,OAAO,sBAAsB,CAAC,IAAI,CAAC;QACjC,IAAI,EAAE,UAAU;QAChB,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;KAC3C,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAA+B;IAE/B,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;QACtE,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;KAChB,CAAC,CAAA;IACF,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAA;AACnD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IAGrC,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,GAAG,MAAM,eAAe,CACtE,MAAM,sBAAsB,CAAC,QAAQ,EAAE,CACxC,CAAA;IACD,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAA;IAC/D,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAA;AAChE,CAAC"}
+{"version":3,"file":"webvh-update.js","sourceRoot":"","sources":["../../src/keys/webvh-update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAA;AAG1E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAmB;IAEnB,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACtE,CAAC;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,gEAAgE;IAChE,OAAO,sBAAsB,CAAC,IAAI,CAAC;QACjC,IAAI,EAAE,UAAU;QAChB,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;KAC3C,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAA+B;IAE/B,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;QACtE,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;KAChB,CAAC,CAAA;IACF,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAA;AACnD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,IAAI,KACqB,EAAE;IAG3B,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,GAAG,MAAM,eAAe,CACtE,MAAM,sBAAsB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAChD,CAAA;IACD,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAA;IAC/D,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAA;AAChE,CAAC"}

package/dist/meta.d.ts

@@ -5,7 +5,7 @@
  * and resolving user-supplied key, DID, zcap, and credential references
  * (fingerprint / DID / capability or credential id, or metadata handle).
  */
-import { type KeyMetadata } from './storage.js';
+import { type ItemMetadata, type KeyMetadata, type StoredKeyPair } from './storage.js';
 /**
  * Parse a key storage ID of the form `YYYY-MM-DD-<type>[-<curve>]-<rawId>`
  * into its date, key type, and (for ecdsa) curve components. Returns empty
@@ -61,6 +61,35 @@ export declare function removeKeyDidAssociation({ publicKeyMultibase, did }: {
     publicKeyMultibase: string;
     did: string;
 }): Promise<void>;
+/**
+ * Resolve a metadata handle to a single storage id by scanning the `.meta.json`
+ * sidecars of a set of items. This is the shared core of every `resolve*Ref`
+ * helper: the direct id/fingerprint match stays in each caller, and this
+ * collapses the "scan handles, collect matches, complain on ambiguity" tail.
+ * Returns undefined when no handle matches; throws when more than one does
+ * (handles are not unique).
+ *
+ * @param options {object}
+ * @param options.ref {string}             The handle to match.
+ * @param options.noun {string}            Plural noun for the ambiguity message (e.g. `zcaps`).
+ * @param options.alternative {string}     The unambiguous identifier to suggest instead.
+ * @param options.storageIds {string[]}    The storage ids to scan.
+ * @param options.loadMeta {(storageId: string) => Promise<MetaType | undefined>}
+ *   Loads the metadata sidecar for a storage id.
+ * @returns {Promise<{storageId: string, meta: MetaType} | undefined>}
+ */
+export declare function resolveByHandle<MetaType extends {
+    handle?: string;
+}>({ ref, noun, alternative, storageIds, loadMeta }: {
+    ref: string;
+    noun: string;
+    alternative: string;
+    storageIds: string[];
+    loadMeta: (storageId: string) => Promise<MetaType | undefined>;
+}): Promise<{
+    storageId: string;
+    meta: MetaType;
+} | undefined>;
 /**
  * Resolve a user-supplied DID reference -- a full DID or a metadata handle --
  * to a stored DID. Anything starting with `did:` is returned as-is; otherwise
@@ -96,14 +125,14 @@ export interface StoredZcap {
  *
  * @param options {object}
  * @param options.ref {string}
- * @returns {Promise<{storageId: string, zcap: StoredZcap, meta?: KeyMetadata} | undefined>}
+ * @returns {Promise<{storageId: string, zcap: StoredZcap, meta?: ItemMetadata} | undefined>}
  */
 export declare function resolveZcapRef({ ref }: {
     ref: string;
 }): Promise<{
     storageId: string;
     zcap: StoredZcap;
-    meta?: KeyMetadata;
+    meta?: ItemMetadata;
 } | undefined>;
 /**
  * A stored Verifiable Credential, as loaded from wallet storage. Only the
@@ -131,14 +160,14 @@ export interface StoredCredential {
  *
  * @param options {object}
  * @param options.ref {string}
- * @returns {Promise<{storageId: string, credential: StoredCredential, meta?: KeyMetadata} | undefined>}
+ * @returns {Promise<{storageId: string, credential: StoredCredential, meta?: ItemMetadata} | undefined>}
  */
 export declare function resolveCredentialRef({ ref }: {
     ref: string;
 }): Promise<{
     storageId: string;
     credential: StoredCredential;
-    meta?: KeyMetadata;
+    meta?: ItemMetadata;
 } | undefined>;
 /**
  * Resolve a user-supplied key reference -- a publicKeyMultibase fingerprint
@@ -149,17 +178,13 @@ export declare function resolveCredentialRef({ ref }: {
  *
  * @param options {object}
  * @param options.ref {string}
- * @returns {Promise<{storageId: string, key: object, meta?: KeyMetadata} | undefined>}
+ * @returns {Promise<{storageId: string, key: StoredKeyPair, meta?: KeyMetadata} | undefined>}
  */
 export declare function resolveKeyRef({ ref }: {
     ref: string;
 }): Promise<{
     storageId: string;
-    key: {
-        id?: string;
-        publicKeyMultibase?: string;
-        secretKeyMultibase?: string;
-    };
+    key: StoredKeyPair;
     meta?: KeyMetadata;
 } | undefined>;
 //# sourceMappingURL=meta.d.ts.map

package/dist/meta.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"meta.d.ts","sourceRoot":"","sources":["../src/meta.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EASL,KAAK,WAAW,EACjB,MAAM,cAAc,CAAA;AAErB;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,SAAS,EAAE,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG;IACvE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAQA;AAED;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAsB5E;AAED;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAAC,EAC5C,kBAAkB,EAClB,GAAG,EACJ,EAAE;IACD,kBAAkB,EAAE,MAAM,CAAA;IAC1B,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBhB;AAED;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAAC,EAC5C,kBAAkB,EAClB,GAAG,EACJ,EAAE;IACD,kBAAkB,EAAE,MAAM,CAAA;IAC1B,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBhB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,aAAa,CAAC,EAClC,GAAG,EACJ,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAsB9B;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAAC,EAAE,GAAG,EAAE,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CACnE;IACE,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,UAAU,CAAA;IAChB,IAAI,CAAC,EAAE,WAAW,CAAA;CACnB,GACD,SAAS,CACZ,CAkCA;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,oBAAoB,CAAC,EAAE,GAAG,EAAE,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CACzE;IACE,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,gBAAgB,CAAA;IAC5B,IAAI,CAAC,EAAE,WAAW,CAAA;CACnB,GACD,SAAS,CACZ,CAmDA;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,aAAa,CAAC,EAAE,GAAG,EAAE,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAClE;IACE,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE;QACH,EAAE,CAAC,EAAE,MAAM,CAAA;QACX,kBAAkB,CAAC,EAAE,MAAM,CAAA;QAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAC5B,CAAA;IACD,IAAI,CAAC,EAAE,WAAW,CAAA;CACnB,GACD,SAAS,CACZ,CAiCA"}
+{"version":3,"file":"meta.d.ts","sourceRoot":"","sources":["../src/meta.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EASL,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,aAAa,EACnB,MAAM,cAAc,CAAA;AAErB;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,SAAS,EAAE,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG;IACvE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAQA;AAED;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAsB5E;AAED;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAAC,EAC5C,kBAAkB,EAClB,GAAG,EACJ,EAAE;IACD,kBAAkB,EAAE,MAAM,CAAA;IAC1B,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBhB;AAED;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAAC,EAC5C,kBAAkB,EAClB,GAAG,EACJ,EAAE;IACD,kBAAkB,EAAE,MAAM,CAAA;IAC1B,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBhB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,eAAe,CAAC,QAAQ,SAAS;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,EAC1E,GAAG,EACH,IAAI,EACJ,WAAW,EACX,UAAU,EACV,QAAQ,EACT,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAA;CAC/D,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAAG,SAAS,CAAC,CAkB7D;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,aAAa,CAAC,EAClC,GAAG,EACJ,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAY9B;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAAC,EAAE,GAAG,EAAE,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CACnE;IACE,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,UAAU,CAAA;IAChB,IAAI,CAAC,EAAE,YAAY,CAAA;CACpB,GACD,SAAS,CACZ,CA+BA;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,oBAAoB,CAAC,EAAE,GAAG,EAAE,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CACzE;IACE,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,gBAAgB,CAAA;IAC5B,IAAI,CAAC,EAAE,YAAY,CAAA;CACpB,GACD,SAAS,CACZ,CA0CA;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,aAAa,CAAC,EAAE,GAAG,EAAE,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAClE;IACE,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,aAAa,CAAA;IAClB,IAAI,CAAC,EAAE,WAAW,CAAA;CACnB,GACD,SAAS,CACZ,CAyBA"}