@interop/wallet-core 0.49.0 → 0.50.0

package/dist/request/ephemeralExchange.d.ts

@@ -0,0 +1,118 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The requester's half of an ephemeral exchange on a WAS server: creating an
+ * exchange that carries a Verifiable Presentation Request as its stored
+ * request, and polling that exchange until the answering wallet posts its
+ * response. Generic over what the request asks for -- a wallet's onboarding
+ * invite stores a `WalletOnboardingQuery` (`onboarding.ts`), a CLI asking for
+ * capabilities stores a zcap-only request (`capabilityRequest.ts`). Pure
+ * logic: no UI framework, no DOM, and no module-level mutable state; every
+ * run is per-instance, cancelled through the caller's `AbortSignal` or the
+ * poll's own deadline, with the network transport injected.
+ *
+ * These routes are deliberately unauthenticated (a capability-URL posture:
+ * the exchange URL is the secret, and it travels point-to-point, as a QR code
+ * or a printed link), so nothing here signs a request.
+ */
+/**
+ * How often the requester polls the exchange for the wallet's response.
+ */
+export declare const EPHEMERAL_EXCHANGE_POLL_INTERVAL_MS = 3000;
+/**
+ * How long the server keeps an ephemeral exchange. A poll past it can only
+ * ever find the exchange gone, so a caller with no other bound (a CLI) passes
+ * this as its `timeoutMs`; a UI offering the exchange for a shorter window
+ * (an invite countdown) picks its own.
+ */
+export declare const EPHEMERAL_EXCHANGE_TTL_MS: number;
+/**
+ * The exchange path the interaction URL adds, with the interaction-URL
+ * version query the answering wallet's scanner expects.
+ */
+export declare const EPHEMERAL_EXCHANGE_INTERACTION_PATH = "/protocols?iuv=1";
+/**
+ * The subset of `fetch` this module uses, so a caller (or a test) injects its
+ * own transport instead of relying on the global.
+ */
+type FetchLike = (input: string, init?: RequestInit) => Promise<Response>;
+/**
+ * Raised when the exchange is no longer on the server (a `404`): it either
+ * expired or was never created. The remedy is a fresh exchange, so a caller
+ * renders its "expired" state. Dispatch on `err.name` rather than
+ * `instanceof`: the transport is injected and may resolve to a different copy
+ * of this package, which makes the name the stable contract.
+ */
+export declare class EphemeralExchangeGoneError extends Error {
+    constructor(message?: string);
+}
+/**
+ * Raised when the poll's own `timeoutMs` elapses before the exchange
+ * completes. Distinct from {@link EphemeralExchangeGoneError}: the exchange
+ * may still be on the server and approvable, the requester just stopped
+ * waiting. Dispatch on `err.name`, for the same reason as the gone error.
+ */
+export declare class EphemeralExchangeTimeoutError extends Error {
+    constructor(message?: string);
+}
+/**
+ * REQUESTER: creates an ephemeral exchange holding the request as its stored
+ * request, and returns both the exchange URL (the requester polls it) and the
+ * interaction URL (what the QR code or printed link carries).
+ *
+ * The server relays the stored request verbatim as its reply to the begin
+ * POST, so the VPR details are stored wrapped as a VC-API exchange response
+ * (`{ verifiablePresentationRequest: request }`) -- the shape the answering
+ * wallet's classifier reads.
+ *
+ * The exchange URL is read from the `Location` response header, falling back
+ * to the body's `location` member -- deployments differ on which they set,
+ * and either alone is enough.
+ *
+ * @param options {object}
+ * @param options.serverUrl {string}   the WAS server base URL
+ * @param options.request {unknown}   the VPR details to store
+ * @param [options.fetch] {FetchLike}
+ * @returns {Promise<{ exchangeUrl: string, interactionUrl: string }>}
+ */
+export declare function createEphemeralExchange({ serverUrl, request, fetch: fetchImpl }: {
+    serverUrl: string;
+    request: unknown;
+    fetch?: FetchLike;
+}): Promise<{
+    exchangeUrl: string;
+    interactionUrl: string;
+}>;
+/**
+ * REQUESTER: polls the exchange until the wallet posts its response, and
+ * resolves with that response body verbatim (the caller interprets it: an
+ * onboarding invite through `parseOnboardingResponse`, a capability request
+ * by reading the presentation's `zcap` member).
+ *
+ * A `404` means the exchange expired or was never there, and rejects with
+ * {@link EphemeralExchangeGoneError}. Every other failure -- a network error,
+ * another non-ok status, an unparseable body -- is transient and simply
+ * retried on the next tick. Two bounds end the wait early: the caller's
+ * `signal` rejects promptly with its own reason, and `timeoutMs` (measured
+ * from the call) rejects with {@link EphemeralExchangeTimeoutError}; either
+ * cancels an in-flight request. Without both, the poll runs until the
+ * exchange completes or disappears.
+ *
+ * @param options {object}
+ * @param options.exchangeUrl {string}
+ * @param [options.signal] {AbortSignal}
+ * @param [options.timeoutMs] {number}   the poll's own deadline
+ * @param [options.intervalMs] {number}
+ * @param [options.fetch] {FetchLike}
+ * @returns {Promise<unknown>}   the completed exchange's `response` member
+ */
+export declare function pollEphemeralExchange({ exchangeUrl, signal, timeoutMs, intervalMs, fetch: fetchImpl }: {
+    exchangeUrl: string;
+    signal?: AbortSignal;
+    timeoutMs?: number;
+    intervalMs?: number;
+    fetch?: FetchLike;
+}): Promise<unknown>;
+export {};
+//# sourceMappingURL=ephemeralExchange.d.ts.map

package/dist/request/ephemeralExchange.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ephemeralExchange.d.ts","sourceRoot":"","sources":["../../src/request/ephemeralExchange.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;GAcG;AAEH;;GAEG;AACH,eAAO,MAAM,mCAAmC,OAAO,CAAA;AAEvD;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,QAAiB,CAAA;AAEvD;;;GAGG;AACH,eAAO,MAAM,mCAAmC,qBAAqB,CAAA;AAErE;;;GAGG;AACH,KAAK,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEzE;;;;;;GAMG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;gBACvC,OAAO,SAAmD;CAIvE;AAED;;;;;GAKG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;gBAEpD,OAAO,SAA8D;CAKxE;AAcD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,uBAAuB,CAAC,EAC5C,SAAS,EACT,OAAO,EACP,KAAK,EAAE,SAA4B,EACpC,EAAE;IACD,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,SAAS,CAAA;CAClB,GAAG,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAAC,CA8B3D;AAmCD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,qBAAqB,CAAC,EAC1C,WAAW,EACX,MAAM,EACN,SAAS,EACT,UAAgD,EAChD,KAAK,EAAE,SAA4B,EACpC,EAAE;IACD,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,SAAS,CAAA;CAClB,GAAG,OAAO,CAAC,OAAO,CAAC,CAyDnB"}

package/dist/request/ephemeralExchange.js

@@ -0,0 +1,224 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The requester's half of an ephemeral exchange on a WAS server: creating an
+ * exchange that carries a Verifiable Presentation Request as its stored
+ * request, and polling that exchange until the answering wallet posts its
+ * response. Generic over what the request asks for -- a wallet's onboarding
+ * invite stores a `WalletOnboardingQuery` (`onboarding.ts`), a CLI asking for
+ * capabilities stores a zcap-only request (`capabilityRequest.ts`). Pure
+ * logic: no UI framework, no DOM, and no module-level mutable state; every
+ * run is per-instance, cancelled through the caller's `AbortSignal` or the
+ * poll's own deadline, with the network transport injected.
+ *
+ * These routes are deliberately unauthenticated (a capability-URL posture:
+ * the exchange URL is the secret, and it travels point-to-point, as a QR code
+ * or a printed link), so nothing here signs a request.
+ */
+/**
+ * How often the requester polls the exchange for the wallet's response.
+ */
+export const EPHEMERAL_EXCHANGE_POLL_INTERVAL_MS = 3000;
+/**
+ * How long the server keeps an ephemeral exchange. A poll past it can only
+ * ever find the exchange gone, so a caller with no other bound (a CLI) passes
+ * this as its `timeoutMs`; a UI offering the exchange for a shorter window
+ * (an invite countdown) picks its own.
+ */
+export const EPHEMERAL_EXCHANGE_TTL_MS = 10 * 60 * 1000;
+/**
+ * The exchange path the interaction URL adds, with the interaction-URL
+ * version query the answering wallet's scanner expects.
+ */
+export const EPHEMERAL_EXCHANGE_INTERACTION_PATH = '/protocols?iuv=1';
+/**
+ * Raised when the exchange is no longer on the server (a `404`): it either
+ * expired or was never created. The remedy is a fresh exchange, so a caller
+ * renders its "expired" state. Dispatch on `err.name` rather than
+ * `instanceof`: the transport is injected and may resolve to a different copy
+ * of this package, which makes the name the stable contract.
+ */
+export class EphemeralExchangeGoneError extends Error {
+    constructor(message = 'The ephemeral exchange is no longer available.') {
+        super(message);
+        this.name = 'EphemeralExchangeGoneError';
+    }
+}
+/**
+ * Raised when the poll's own `timeoutMs` elapses before the exchange
+ * completes. Distinct from {@link EphemeralExchangeGoneError}: the exchange
+ * may still be on the server and approvable, the requester just stopped
+ * waiting. Dispatch on `err.name`, for the same reason as the gone error.
+ */
+export class EphemeralExchangeTimeoutError extends Error {
+    constructor(message = 'Timed out waiting for the ephemeral exchange to complete.') {
+        super(message);
+        this.name = 'EphemeralExchangeTimeoutError';
+    }
+}
+/**
+ * Strips a trailing slash from a configured base URL, so joining a path onto
+ * it cannot produce a doubled separator.
+ *
+ * @param options {object}
+ * @param options.serverUrl {string}
+ * @returns {string}
+ */
+function normalizedServerUrl({ serverUrl }) {
+    return serverUrl.replace(/\/+$/, '');
+}
+/**
+ * REQUESTER: creates an ephemeral exchange holding the request as its stored
+ * request, and returns both the exchange URL (the requester polls it) and the
+ * interaction URL (what the QR code or printed link carries).
+ *
+ * The server relays the stored request verbatim as its reply to the begin
+ * POST, so the VPR details are stored wrapped as a VC-API exchange response
+ * (`{ verifiablePresentationRequest: request }`) -- the shape the answering
+ * wallet's classifier reads.
+ *
+ * The exchange URL is read from the `Location` response header, falling back
+ * to the body's `location` member -- deployments differ on which they set,
+ * and either alone is enough.
+ *
+ * @param options {object}
+ * @param options.serverUrl {string}   the WAS server base URL
+ * @param options.request {unknown}   the VPR details to store
+ * @param [options.fetch] {FetchLike}
+ * @returns {Promise<{ exchangeUrl: string, interactionUrl: string }>}
+ */
+export async function createEphemeralExchange({ serverUrl, request, fetch: fetchImpl = globalThis.fetch }) {
+    const url = `${normalizedServerUrl({ serverUrl })}/workflows/ephemeral/exchanges`;
+    const response = await fetchImpl(url, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({
+            request: { verifiablePresentationRequest: request }
+        })
+    });
+    if (!response.ok) {
+        throw new Error(`Could not create the ephemeral exchange (HTTP ${response.status}).`);
+    }
+    let exchangeUrl = response.headers?.get('location') ?? '';
+    if (!exchangeUrl) {
+        try {
+            const body = (await response.json());
+            exchangeUrl = body?.location ?? '';
+        }
+        catch (err) {
+            console.warn('Could not parse the created exchange body:', err);
+        }
+    }
+    if (!exchangeUrl) {
+        throw new Error('The created ephemeral exchange has no location.');
+    }
+    return {
+        exchangeUrl,
+        interactionUrl: `${exchangeUrl}${EPHEMERAL_EXCHANGE_INTERACTION_PATH}`
+    };
+}
+/**
+ * Sleeps for `delayMs`, rejecting promptly with the signal's reason if the
+ * signal aborts first. The timer is always cleared.
+ *
+ * @param options {object}
+ * @param options.delayMs {number}
+ * @param options.signal {AbortSignal}
+ * @returns {Promise<void>}
+ */
+function abortableDelay({ delayMs, signal }) {
+    return new Promise((resolve, reject) => {
+        if (signal.aborted) {
+            reject(signal.reason);
+            return;
+        }
+        const timer = setTimeout(() => {
+            signal.removeEventListener('abort', onAbort);
+            resolve();
+        }, delayMs);
+        function onAbort() {
+            clearTimeout(timer);
+            reject(signal.reason);
+        }
+        signal.addEventListener('abort', onAbort, { once: true });
+    });
+}
+/**
+ * REQUESTER: polls the exchange until the wallet posts its response, and
+ * resolves with that response body verbatim (the caller interprets it: an
+ * onboarding invite through `parseOnboardingResponse`, a capability request
+ * by reading the presentation's `zcap` member).
+ *
+ * A `404` means the exchange expired or was never there, and rejects with
+ * {@link EphemeralExchangeGoneError}. Every other failure -- a network error,
+ * another non-ok status, an unparseable body -- is transient and simply
+ * retried on the next tick. Two bounds end the wait early: the caller's
+ * `signal` rejects promptly with its own reason, and `timeoutMs` (measured
+ * from the call) rejects with {@link EphemeralExchangeTimeoutError}; either
+ * cancels an in-flight request. Without both, the poll runs until the
+ * exchange completes or disappears.
+ *
+ * @param options {object}
+ * @param options.exchangeUrl {string}
+ * @param [options.signal] {AbortSignal}
+ * @param [options.timeoutMs] {number}   the poll's own deadline
+ * @param [options.intervalMs] {number}
+ * @param [options.fetch] {FetchLike}
+ * @returns {Promise<unknown>}   the completed exchange's `response` member
+ */
+export async function pollEphemeralExchange({ exchangeUrl, signal, timeoutMs, intervalMs = EPHEMERAL_EXCHANGE_POLL_INTERVAL_MS, fetch: fetchImpl = globalThis.fetch }) {
+    // One internal signal folds the caller's abort and the deadline together,
+    // so a single `signal` reaches fetch and the delay. The caller's reason is
+    // forwarded verbatim; the deadline aborts with the timeout error.
+    const controller = new AbortController();
+    const onCallerAbort = () => controller.abort(signal?.reason);
+    if (signal?.aborted) {
+        onCallerAbort();
+    }
+    else {
+        signal?.addEventListener('abort', onCallerAbort, { once: true });
+    }
+    const deadline = timeoutMs === undefined
+        ? undefined
+        : setTimeout(() => controller.abort(new EphemeralExchangeTimeoutError()), timeoutMs);
+    try {
+        for (;;) {
+            if (controller.signal.aborted) {
+                throw controller.signal.reason;
+            }
+            try {
+                const response = await fetchImpl(exchangeUrl, {
+                    signal: controller.signal
+                });
+                if (response.status === 404) {
+                    throw new EphemeralExchangeGoneError();
+                }
+                if (response.ok) {
+                    const body = (await response.json());
+                    if (body?.state === 'complete') {
+                        return body.response;
+                    }
+                }
+            }
+            catch (err) {
+                if (controller.signal.aborted) {
+                    throw controller.signal.reason;
+                }
+                if (err?.name === 'EphemeralExchangeGoneError') {
+                    throw err;
+                }
+                // Anything else is transient -- keep polling.
+                console.warn('Polling the ephemeral exchange failed; retrying:', err);
+            }
+            await abortableDelay({ delayMs: intervalMs, signal: controller.signal });
+        }
+    }
+    finally {
+        signal?.removeEventListener('abort', onCallerAbort);
+        if (deadline !== undefined) {
+            clearTimeout(deadline);
+        }
+    }
+}
+//# sourceMappingURL=ephemeralExchange.js.map

package/dist/request/ephemeralExchange.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ephemeralExchange.js","sourceRoot":"","sources":["../../src/request/ephemeralExchange.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;GAcG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,IAAI,CAAA;AAEvD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAEvD;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,kBAAkB,CAAA;AAQrE;;;;;;GAMG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD,YAAY,OAAO,GAAG,gDAAgD;QACpE,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAA;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACtD,YACE,OAAO,GAAG,2DAA2D;QAErE,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAA;IAC7C,CAAC;CACF;AAED;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAAC,EAAE,SAAS,EAAyB;IAC/D,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,EAC5C,SAAS,EACT,OAAO,EACP,KAAK,EAAE,SAAS,GAAG,UAAU,CAAC,KAAK,EAKpC;IACC,MAAM,GAAG,GAAG,GAAG,mBAAmB,CAAC,EAAE,SAAS,EAAE,CAAC,gCAAgC,CAAA;IACjF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QACpC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO,EAAE,EAAE,6BAA6B,EAAE,OAAO,EAAE;SACpD,CAAC;KACH,CAAC,CAAA;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,iDAAiD,QAAQ,CAAC,MAAM,IAAI,CACrE,CAAA;IACH,CAAC;IACD,IAAI,WAAW,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAA;IACzD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAA;YAC7D,WAAW,GAAG,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAA;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,4CAA4C,EAAE,GAAG,CAAC,CAAA;QACjE,CAAC;IACH,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IACpE,CAAC;IACD,OAAO;QACL,WAAW;QACX,cAAc,EAAE,GAAG,WAAW,GAAG,mCAAmC,EAAE;KACvE,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,EACtB,OAAO,EACP,MAAM,EAIP;IACC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACrB,OAAM;QACR,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC5C,OAAO,EAAE,CAAA;QACX,CAAC,EAAE,OAAO,CAAC,CAAA;QACX,SAAS,OAAO;YACd,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACvB,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,EAC1C,WAAW,EACX,MAAM,EACN,SAAS,EACT,UAAU,GAAG,mCAAmC,EAChD,KAAK,EAAE,SAAS,GAAG,UAAU,CAAC,KAAK,EAOpC;IACC,0EAA0E;IAC1E,2EAA2E;IAC3E,kEAAkE;IAClE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5D,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;QACpB,aAAa,EAAE,CAAA;IACjB,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAClE,CAAC;IACD,MAAM,QAAQ,GACZ,SAAS,KAAK,SAAS;QACrB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,UAAU,CACR,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,6BAA6B,EAAE,CAAC,EAC3D,SAAS,CACV,CAAA;IACP,IAAI,CAAC;QACH,SAAS,CAAC;YACR,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAA;YAChC,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE;oBAC5C,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAA;gBACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,MAAM,IAAI,0BAA0B,EAAE,CAAA;gBACxC,CAAC;gBACD,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAA;oBACD,IAAI,IAAI,EAAE,KAAK,KAAK,UAAU,EAAE,CAAC;wBAC/B,OAAO,IAAI,CAAC,QAAQ,CAAA;oBACtB,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC9B,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAA;gBAChC,CAAC;gBACD,IAAK,GAAa,EAAE,IAAI,KAAK,4BAA4B,EAAE,CAAC;oBAC1D,MAAM,GAAG,CAAA;gBACX,CAAC;gBACD,8CAA8C;gBAC9C,OAAO,CAAC,IAAI,CAAC,kDAAkD,EAAE,GAAG,CAAC,CAAA;YACvE,CAAC;YACD,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;QAC1E,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;QACnD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,YAAY,CAAC,QAAQ,CAAC,CAAA;QACxB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/request/index.d.ts

@@ -25,6 +25,10 @@
  *   the (optionally signed, optionally grant-embedding) response VP.
  * - `exchangeClient` is the fetch-injectable VC-API exchange client;
  *   `interactionUrl` resolves VCALM `interaction:` URLs.
+ * - `ephemeralExchange` is the requester's side of a WAS server's ephemeral
+ *   exchange: create one carrying a VPR, poll it (with an optional deadline)
+ *   until the wallet answers. `capabilityRequest` composes the zcap-only VPR
+ *   a requester stores on it.
  * - `processRequest` is the pure request-to-response pipeline, with the
  *   app-side side effects injected.
  * - `classifyWalletInput` / `handleWalletInput` are the ordered
@@ -44,6 +48,8 @@ export * from './presentationSuite.js';
 export * from './composeVp.js';
 export * from './exchangeClient.js';
 export * from './interactionUrl.js';
+export * from './ephemeralExchange.js';
+export * from './capabilityRequest.js';
 export * from './processRequest.js';
 export * from './walletInput.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/request/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/request/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,wBAAwB,CAAA;AACtC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA;AACnC,cAAc,kBAAkB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/request/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,wBAAwB,CAAA;AACtC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA;AACnC,cAAc,wBAAwB,CAAA;AACtC,cAAc,wBAAwB,CAAA;AACtC,cAAc,qBAAqB,CAAA;AACnC,cAAc,kBAAkB,CAAA"}

package/dist/request/index.js

@@ -25,6 +25,10 @@
  *   the (optionally signed, optionally grant-embedding) response VP.
  * - `exchangeClient` is the fetch-injectable VC-API exchange client;
  *   `interactionUrl` resolves VCALM `interaction:` URLs.
+ * - `ephemeralExchange` is the requester's side of a WAS server's ephemeral
+ *   exchange: create one carrying a VPR, poll it (with an optional deadline)
+ *   until the wallet answers. `capabilityRequest` composes the zcap-only VPR
+ *   a requester stores on it.
  * - `processRequest` is the pure request-to-response pipeline, with the
  *   app-side side effects injected.
  * - `classifyWalletInput` / `handleWalletInput` are the ordered
@@ -44,6 +48,8 @@ export * from './presentationSuite.js';
 export * from './composeVp.js';
 export * from './exchangeClient.js';
 export * from './interactionUrl.js';
+export * from './ephemeralExchange.js';
+export * from './capabilityRequest.js';
 export * from './processRequest.js';
 export * from './walletInput.js';
 //# sourceMappingURL=index.js.map

package/dist/request/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/request/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,wBAAwB,CAAA;AACtC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA;AACnC,cAAc,kBAAkB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/request/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,wBAAwB,CAAA;AACtC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA;AACnC,cAAc,wBAAwB,CAAA;AACtC,cAAc,wBAAwB,CAAA;AACtC,cAAc,qBAAqB,CAAA;AACnC,cAAc,kBAAkB,CAAA"}

package/dist/space/activity.d.ts

@@ -230,7 +230,7 @@ export declare function addHistoryClientRevoked({ user, signingKeyMultibase, lab
     created?: string;
 }): WalletActivity;
 /**
- * The GenerationCollect activity: companion GC collected one generation --
+ * The GenerationCollect activity: client-annex GC collected one generation --
  * the owner-side digest written BEFORE the generation collection is deleted,
  * and the only record of the collected window's visits that survives the
  * delete. One row per collected generation.
@@ -240,7 +240,7 @@ export declare function addHistoryClientRevoked({ user, signingKeyMultibase, lab
  * the deterministic payload id is what lets a torn re-run's second row
  * collapse at read time under the store's documented dedupe model.
  *
- * `firstEntry` / `lastEntry` quote the collected companion log's first and
+ * `firstEntry` / `lastEntry` quote the collected annex log's first and
  * last entries' `versionTime` strings verbatim (the digest outlives the log
  * it describes, so it does not launder its source), and `entryCount` is the
  * log's total entry count, genesis included -- an entry count, deliberately

package/dist/space/activity.js

@@ -268,7 +268,7 @@ export function addHistoryClientRevoked({ user, signingKeyMultibase, label, rota
     };
 }
 /**
- * The GenerationCollect activity: companion GC collected one generation --
+ * The GenerationCollect activity: client-annex GC collected one generation --
  * the owner-side digest written BEFORE the generation collection is deleted,
  * and the only record of the collected window's visits that survives the
  * delete. One row per collected generation.
@@ -278,7 +278,7 @@ export function addHistoryClientRevoked({ user, signingKeyMultibase, label, rota
  * the deterministic payload id is what lets a torn re-run's second row
  * collapse at read time under the store's documented dedupe model.
  *
- * `firstEntry` / `lastEntry` quote the collected companion log's first and
+ * `firstEntry` / `lastEntry` quote the collected annex log's first and
  * last entries' `versionTime` strings verbatim (the digest outlives the log
  * it describes, so it does not launder its source), and `entryCount` is the
  * log's total entry count, genesis included -- an entry count, deliberately
@@ -300,7 +300,7 @@ export function addHistoryGenerationCollected({ user, generationId, firstEntry,
     return {
         id: generationId,
         type: [ACTIVITY_TYPE.GenerationCollect],
-        summary: `Collected companion generation "${generationId}".`,
+        summary: `Collected client-annex generation "${generationId}".`,
         actor: { email: user.email },
         object: { generationId, firstEntry, lastEntry, entryCount },
         created: created ?? new Date().toISOString()

package/dist/space/activity.js.map

@@ -1 +1 @@
-{"version":3,"file":"activity.js","sourceRoot":"","sources":["../../src/space/activity.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;GAiBG;AAgBH;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,YAAY,EAAE,cAAc;IAC5B,eAAe,EAAE,iBAAiB;IAClC,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,mBAAmB;CAC9B,CAAA;AAOV;;GAEG;AACH,SAAS,KAAK,CAAC,EAAW,EAAE,OAAgB;IAC1C,OAAO;QACL,EAAE,EAAE,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE;QAC7B,OAAO,EAAE,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC7C,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACnC,IAAI,EACJ,EAAE,EACF,OAAO,EAKR;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAClC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC;QAC5B,OAAO,EAAE,yCAAyC;QAClD,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QAC5B,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CAAC,EACrC,KAAK,EACL,MAAM,EACN,MAAM,EACN,EAAE,EACF,OAAO,EAOR;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAClC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC;QAC5B,OAAO,EAAE,MAAM;YACb,CAAC,CAAC,0EAA0E;YAC5E,CAAC,CAAC,kDAAkD;QACtD,KAAK;QACL,MAAM;QACN,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,EAC1B,GAAG,EACH,KAAK,EACL,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,EAAE,EACF,OAAO,EASR;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAClC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,CAAC,IAAI,CAAC;QACZ,OAAO,EAAE,cAAc,IAAI,KAAK,KAAK,IAAI,GAAG,EAAE;QAC9C,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QAC5B,MAAM,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE;QAClD,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAAC,EAC1C,GAAG,EACH,KAAK,EACL,IAAI,EACJ,EAAE,EACF,OAAO,EAOR;IACC,OAAO,kBAAkB,CAAC;QACxB,GAAG;QACH,KAAK;QACL,IAAI;QACJ,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,IAAI,EAAE,SAAS;QACf,EAAE;QACF,OAAO;KACR,CAAC,CAAA;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAAC,EAC1C,GAAG,EACH,KAAK,EACL,IAAI,EACJ,EAAE,EACF,OAAO,EAOR;IACC,OAAO,kBAAkB,CAAC;QACxB,GAAG;QACH,KAAK;QACL,IAAI;QACJ,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,IAAI,EAAE,SAAS;QACf,EAAE;QACF,OAAO;KACR,CAAC,CAAA;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CAAC,EACzC,GAAG,EACH,KAAK,EACL,IAAI,EACJ,EAAE,EACF,OAAO,EAOR;IACC,OAAO,kBAAkB,CAAC;QACxB,GAAG;QACH,KAAK;QACL,IAAI;QACJ,IAAI,EAAE,aAAa,CAAC,KAAK;QACzB,IAAI,EAAE,QAAQ;QACd,EAAE;QACF,OAAO;KACR,CAAC,CAAA;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAAC,EAC3C,GAAG,EACH,KAAK,EACL,IAAI,EACJ,EAAE,EACF,OAAO,EAOR;IACC,OAAO,kBAAkB,CAAC;QACxB,GAAG;QACH,KAAK;QACL,IAAI;QACJ,IAAI,EAAE,aAAa,CAAC,OAAO;QAC3B,IAAI,EAAE,UAAU;QAChB,EAAE;QACF,OAAO;KACR,CAAC,CAAA;AACJ,CAAC;AAaD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,eAAe,CAAC,EAC9B,IAAI,EACJ,MAAM,EACN,MAAM,EACN,UAAU,EACV,EAAE,EACF,OAAO,EAQR;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAClC,MAAM,OAAO,GAAG,UAAU;QACxB,CAAC,CAAC,aAAa,UAAU,CAAC,IAAI,KAAK,MAAM,aAAa;YACpD,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,GAAG;QAC5D,CAAC,CAAC,gBAAgB,MAAM,eAAe,CAAA;IACzC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC;QAC3B,OAAO;QACP,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QAC5B,MAAM,EAAE,UAAU;YAChB,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE;YACvC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;QAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,EACpC,IAAI,EACJ,EAAE,EACF,OAAO,KAKL,EAAE;IACJ,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAClC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC;QAC3B,OAAO,EAAE,sBAAsB;QAC/B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,uBAAuB,CAAC,EACtC,IAAI,EACJ,mBAAmB,EACnB,KAAK,EACL,OAAO,EACP,MAAM,EACN,EAAE,EACF,OAAO,EASR;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAClC,MAAM,GAAG,GAAG,KAAK,IAAI,mBAAmB,CAAA;IACxC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC;QAClC,OAAO,EAAE,8BAA8B,GAAG,GAAG;QAC7C,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QAC5B,MAAM,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE;QACvD,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,6BAA6B,CAAC,EAC5C,IAAI,EACJ,YAAY,EACZ,UAAU,EACV,SAAS,EACT,UAAU,EACV,OAAO,EAQR;IACC,OAAO;QACL,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,CAAC,aAAa,CAAC,iBAAiB,CAAC;QACvC,OAAO,EAAE,mCAAmC,YAAY,IAAI;QAC5D,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QAC5B,MAAM,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE;QAC3D,OAAO,EAAE,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC7C,CAAA;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,EAClC,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,GAAG,EACH,OAAO,EACP,OAAO,EACP,EAAE,EACF,OAAO,EAUR;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAClC,MAAM,OAAO,GACX,OAAO,OAAO,KAAK,QAAQ;QACzB,CAAC,CAAC,WAAW,IAAI,KAAK,MAAM,iBAAiB,OAAO,YAAY;YAC9D,UAAU,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG;QACpD,CAAC,CAAC,WAAW,IAAI,KAAK,MAAM,eAAe,CAAA;IAC/C,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC;QAC5B,OAAO;QACP,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE;QAC/D,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAA;AACH,CAAC"}
+{"version":3,"file":"activity.js","sourceRoot":"","sources":["../../src/space/activity.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;GAiBG;AAgBH;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,YAAY,EAAE,cAAc;IAC5B,eAAe,EAAE,iBAAiB;IAClC,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,mBAAmB;CAC9B,CAAA;AAOV;;GAEG;AACH,SAAS,KAAK,CAAC,EAAW,EAAE,OAAgB;IAC1C,OAAO;QACL,EAAE,EAAE,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE;QAC7B,OAAO,EAAE,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC7C,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACnC,IAAI,EACJ,EAAE,EACF,OAAO,EAKR;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAClC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC;QAC5B,OAAO,EAAE,yCAAyC;QAClD,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QAC5B,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CAAC,EACrC,KAAK,EACL,MAAM,EACN,MAAM,EACN,EAAE,EACF,OAAO,EAOR;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAClC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC;QAC5B,OAAO,EAAE,MAAM;YACb,CAAC,CAAC,0EAA0E;YAC5E,CAAC,CAAC,kDAAkD;QACtD,KAAK;QACL,MAAM;QACN,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,EAC1B,GAAG,EACH,KAAK,EACL,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,EAAE,EACF,OAAO,EASR;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAClC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,CAAC,IAAI,CAAC;QACZ,OAAO,EAAE,cAAc,IAAI,KAAK,KAAK,IAAI,GAAG,EAAE;QAC9C,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QAC5B,MAAM,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE;QAClD,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAAC,EAC1C,GAAG,EACH,KAAK,EACL,IAAI,EACJ,EAAE,EACF,OAAO,EAOR;IACC,OAAO,kBAAkB,CAAC;QACxB,GAAG;QACH,KAAK;QACL,IAAI;QACJ,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,IAAI,EAAE,SAAS;QACf,EAAE;QACF,OAAO;KACR,CAAC,CAAA;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAAC,EAC1C,GAAG,EACH,KAAK,EACL,IAAI,EACJ,EAAE,EACF,OAAO,EAOR;IACC,OAAO,kBAAkB,CAAC;QACxB,GAAG;QACH,KAAK;QACL,IAAI;QACJ,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,IAAI,EAAE,SAAS;QACf,EAAE;QACF,OAAO;KACR,CAAC,CAAA;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CAAC,EACzC,GAAG,EACH,KAAK,EACL,IAAI,EACJ,EAAE,EACF,OAAO,EAOR;IACC,OAAO,kBAAkB,CAAC;QACxB,GAAG;QACH,KAAK;QACL,IAAI;QACJ,IAAI,EAAE,aAAa,CAAC,KAAK;QACzB,IAAI,EAAE,QAAQ;QACd,EAAE;QACF,OAAO;KACR,CAAC,CAAA;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAAC,EAC3C,GAAG,EACH,KAAK,EACL,IAAI,EACJ,EAAE,EACF,OAAO,EAOR;IACC,OAAO,kBAAkB,CAAC;QACxB,GAAG;QACH,KAAK;QACL,IAAI;QACJ,IAAI,EAAE,aAAa,CAAC,OAAO;QAC3B,IAAI,EAAE,UAAU;QAChB,EAAE;QACF,OAAO;KACR,CAAC,CAAA;AACJ,CAAC;AAaD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,eAAe,CAAC,EAC9B,IAAI,EACJ,MAAM,EACN,MAAM,EACN,UAAU,EACV,EAAE,EACF,OAAO,EAQR;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAClC,MAAM,OAAO,GAAG,UAAU;QACxB,CAAC,CAAC,aAAa,UAAU,CAAC,IAAI,KAAK,MAAM,aAAa;YACpD,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,GAAG;QAC5D,CAAC,CAAC,gBAAgB,MAAM,eAAe,CAAA;IACzC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC;QAC3B,OAAO;QACP,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QAC5B,MAAM,EAAE,UAAU;YAChB,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE;YACvC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;QAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,EACpC,IAAI,EACJ,EAAE,EACF,OAAO,KAKL,EAAE;IACJ,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAClC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC;QAC3B,OAAO,EAAE,sBAAsB;QAC/B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,uBAAuB,CAAC,EACtC,IAAI,EACJ,mBAAmB,EACnB,KAAK,EACL,OAAO,EACP,MAAM,EACN,EAAE,EACF,OAAO,EASR;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAClC,MAAM,GAAG,GAAG,KAAK,IAAI,mBAAmB,CAAA;IACxC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC;QAClC,OAAO,EAAE,8BAA8B,GAAG,GAAG;QAC7C,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QAC5B,MAAM,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE;QACvD,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,6BAA6B,CAAC,EAC5C,IAAI,EACJ,YAAY,EACZ,UAAU,EACV,SAAS,EACT,UAAU,EACV,OAAO,EAQR;IACC,OAAO;QACL,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,CAAC,aAAa,CAAC,iBAAiB,CAAC;QACvC,OAAO,EAAE,sCAAsC,YAAY,IAAI;QAC/D,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QAC5B,MAAM,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE;QAC3D,OAAO,EAAE,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC7C,CAAA;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,EAClC,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,GAAG,EACH,OAAO,EACP,OAAO,EACP,EAAE,EACF,OAAO,EAUR;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAClC,MAAM,OAAO,GACX,OAAO,OAAO,KAAK,QAAQ;QACzB,CAAC,CAAC,WAAW,IAAI,KAAK,MAAM,iBAAiB,OAAO,YAAY;YAC9D,UAAU,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG;QACpD,CAAC,CAAC,WAAW,IAAI,KAAK,MAAM,eAAe,CAAA;IAC/C,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC;QAC5B,OAAO;QACP,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QAC5B,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE;QAC/D,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAA;AACH,CAAC"}

package/dist/unlock/index.d.ts

@@ -10,45 +10,33 @@
  * - `standingClientFromUnlockSeed` / `unlockClientIdentityFromSeed` -- the
  *   deterministic client identity a credential derives (roster wrap target,
  *   binding MAC key), shared with the recovery-code derivation.
- * - `generateLadderSeed` / `ladderRung` / `attributeLadderRung` -- the
- *   update-key ladder: latent-and-consumed did:webvh update authority from a
- *   random seed carried in the unlock record, current rung recovered from the
- *   log itself, ambiguity failing closed. `ladderVmKeyMultibase` derives the
- *   ladder VM (the stable sibling), the document-visible key a client-less
- *   account anchors on.
- * - `createClientlessAccountLog` -- the client-less genesis log: an account
- *   with zero enrolled durable clients, `updateKeys` = [rung 0], the ladder
- *   VM under `assertionMethod` and `capabilityDelegation` only, and the
- *   credential's `keyAgreement` posture folded into genesis. The window it
- *   opens is closed atomically by the first durable self-enrollment's add
- *   entry.
  * - `wrapUnlockRecord` / `unwrapUnlockRecord` / `remintUnlockRecordDelegations`
  *   -- the unlock record codec: the credential-authenticated shell-and-core
  *   layout (controller, email, pointer under the binding MAC; the bridge and
- *   companion-Space `delegatedClients` delegations re-mintable; the ladder
- *   seed sealed and carried verbatim).
+ *   client-annex Space `delegatedClients` delegations re-mintable; the ladder
+ *   seed sealed and carried verbatim, its `LADDER_SEED_BYTES` size owned by
+ *   the record format).
  * - `publishUnlockKey` / `removeUnlockKey` -- the merged document posture
  *   edit, parameterized by credential class: a verbatim `keyAgreement` entry,
  *   or a `MultikeyCommitment` entry for a low-entropy-derived key.
  * - `retireUnlockCredential` -- the retirement ceremony behind "change my
  *   passphrase" and "remove this passkey": the posture edit, then the shared
  *   roster rotation and collection fan-out off the retired credential's wrap.
- * - `selfEnrollWebvhClient` / `selfEnrollClientCore` -- the self-enrolling
- *   continuation (reveal a rung, add an ordinary client, retire the rung) and
- *   the composed completion a fresh browser runs end to end.
+ *
+ * The ladder itself, and every ceremony that exercises it (the ladder-anchored
+ * genesis, self-enrollment, the forget ceremony), live in
+ * `@interop/wallet-core/clientAnnex` -- what stays here is the posture and
+ * record machinery every wallet needs regardless of posture.
  *
  * Kept out of the root export: this subpath pulls the webkms-client / ezcap /
  * was-client dependency graph (the same isolation pattern as `./keyring`).
  */
 export { standingClientFromUnlockSeed, STANDING_CLIENT_SALT, unlockClientIdentityFromSeed } from './standingClient.js';
 export type { StandingUnlockClient, UnlockClientIdentity } from './standingClient.js';
-export { attributeLadderRung, companionRung, companionRungSeed, generateLadderSeed, LADDER_MAX_SCAN, LADDER_SEED_BYTES, LadderAttributionError, ladderRung, ladderRungSeed, ladderVmKeyMultibase, ladderVmSeed } from './ladder.js';
-export type { LadderRung, LadderRungState } from './ladder.js';
-export { computeUnlockBinding, remintUnlockRecordDelegations, UnlockBindingError, unlockRecordBinding, unwrapUnlockRecord, wrapUnlockRecord } from './unlockRecord.js';
+export { computeUnlockBinding, LADDER_SEED_BYTES, remintUnlockRecordDelegations, UnlockBindingError, unlockRecordBinding, unwrapUnlockRecord, wrapUnlockRecord } from './unlockRecord.js';
 export type { SealedRecordMember, SignedUnlockRecord, UnlockRecordContents, UnlockRecordProofState } from './unlockRecord.js';
-export { createClientlessAccountLog, publishUnlockKey, removeUnlockKey, selfEnrollWebvhClient, unlockKeyVerificationMethod, unlockKeyVmId } from './standingWebvh.js';
+export { publishUnlockKey, removeUnlockKey, unlockKeyVerificationMethod, unlockKeyVmId } from './standingWebvh.js';
 export type { StandingUnlockKeys, UnlockKeyAgreementPublication, UnlockLogStore } from './standingWebvh.js';
 export { retireUnlockCredential } from './retire.js';
-export type { UnlockCredentialRetirementResult } from './retire.js';
-export { selfEnrollClientCore } from './selfEnroll.js';
+export type { ClientAnnexPostureRetirement, UnlockCredentialRetirementResult } from './retire.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/unlock/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/unlock/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,4BAA4B,EAC7B,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACb,MAAM,aAAa,CAAA;AACpB,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE9D,OAAO,EACL,oBAAoB,EACpB,6BAA6B,EAC7B,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACvB,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,2BAA2B,EAC3B,aAAa,EACd,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EACV,kBAAkB,EAClB,6BAA6B,EAC7B,cAAc,EACf,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,YAAY,EAAE,gCAAgC,EAAE,MAAM,aAAa,CAAA;AAEnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/unlock/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,4BAA4B,EAC7B,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,6BAA6B,EAC7B,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACvB,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,2BAA2B,EAC3B,aAAa,EACd,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EACV,kBAAkB,EAClB,6BAA6B,EAC7B,cAAc,EACf,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,YAAY,EACV,4BAA4B,EAC5B,gCAAgC,EACjC,MAAM,aAAa,CAAA"}

package/dist/unlock/index.js

@@ -10,40 +10,29 @@
  * - `standingClientFromUnlockSeed` / `unlockClientIdentityFromSeed` -- the
  *   deterministic client identity a credential derives (roster wrap target,
  *   binding MAC key), shared with the recovery-code derivation.
- * - `generateLadderSeed` / `ladderRung` / `attributeLadderRung` -- the
- *   update-key ladder: latent-and-consumed did:webvh update authority from a
- *   random seed carried in the unlock record, current rung recovered from the
- *   log itself, ambiguity failing closed. `ladderVmKeyMultibase` derives the
- *   ladder VM (the stable sibling), the document-visible key a client-less
- *   account anchors on.
- * - `createClientlessAccountLog` -- the client-less genesis log: an account
- *   with zero enrolled durable clients, `updateKeys` = [rung 0], the ladder
- *   VM under `assertionMethod` and `capabilityDelegation` only, and the
- *   credential's `keyAgreement` posture folded into genesis. The window it
- *   opens is closed atomically by the first durable self-enrollment's add
- *   entry.
  * - `wrapUnlockRecord` / `unwrapUnlockRecord` / `remintUnlockRecordDelegations`
  *   -- the unlock record codec: the credential-authenticated shell-and-core
  *   layout (controller, email, pointer under the binding MAC; the bridge and
- *   companion-Space `delegatedClients` delegations re-mintable; the ladder
- *   seed sealed and carried verbatim).
+ *   client-annex Space `delegatedClients` delegations re-mintable; the ladder
+ *   seed sealed and carried verbatim, its `LADDER_SEED_BYTES` size owned by
+ *   the record format).
  * - `publishUnlockKey` / `removeUnlockKey` -- the merged document posture
  *   edit, parameterized by credential class: a verbatim `keyAgreement` entry,
  *   or a `MultikeyCommitment` entry for a low-entropy-derived key.
  * - `retireUnlockCredential` -- the retirement ceremony behind "change my
  *   passphrase" and "remove this passkey": the posture edit, then the shared
  *   roster rotation and collection fan-out off the retired credential's wrap.
- * - `selfEnrollWebvhClient` / `selfEnrollClientCore` -- the self-enrolling
- *   continuation (reveal a rung, add an ordinary client, retire the rung) and
- *   the composed completion a fresh browser runs end to end.
+ *
+ * The ladder itself, and every ceremony that exercises it (the ladder-anchored
+ * genesis, self-enrollment, the forget ceremony), live in
+ * `@interop/wallet-core/clientAnnex` -- what stays here is the posture and
+ * record machinery every wallet needs regardless of posture.
  *
  * Kept out of the root export: this subpath pulls the webkms-client / ezcap /
  * was-client dependency graph (the same isolation pattern as `./keyring`).
  */
 export { standingClientFromUnlockSeed, STANDING_CLIENT_SALT, unlockClientIdentityFromSeed } from './standingClient.js';
-export { attributeLadderRung, companionRung, companionRungSeed, generateLadderSeed, LADDER_MAX_SCAN, LADDER_SEED_BYTES, LadderAttributionError, ladderRung, ladderRungSeed, ladderVmKeyMultibase, ladderVmSeed } from './ladder.js';
-export { computeUnlockBinding, remintUnlockRecordDelegations, UnlockBindingError, unlockRecordBinding, unwrapUnlockRecord, wrapUnlockRecord } from './unlockRecord.js';
-export { createClientlessAccountLog, publishUnlockKey, removeUnlockKey, selfEnrollWebvhClient, unlockKeyVerificationMethod, unlockKeyVmId } from './standingWebvh.js';
+export { computeUnlockBinding, LADDER_SEED_BYTES, remintUnlockRecordDelegations, UnlockBindingError, unlockRecordBinding, unwrapUnlockRecord, wrapUnlockRecord } from './unlockRecord.js';
+export { publishUnlockKey, removeUnlockKey, unlockKeyVerificationMethod, unlockKeyVmId } from './standingWebvh.js';
 export { retireUnlockCredential } from './retire.js';
-export { selfEnrollClientCore } from './selfEnroll.js';
 //# sourceMappingURL=index.js.map

package/dist/unlock/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/unlock/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,4BAA4B,EAC7B,MAAM,qBAAqB,CAAA;AAM5B,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACb,MAAM,aAAa,CAAA;AAGpB,OAAO,EACL,oBAAoB,EACpB,6BAA6B,EAC7B,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,mBAAmB,CAAA;AAQ1B,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,2BAA2B,EAC3B,aAAa,EACd,MAAM,oBAAoB,CAAA;AAO3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAGpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/unlock/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,4BAA4B,EAC7B,MAAM,qBAAqB,CAAA;AAM5B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,6BAA6B,EAC7B,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,mBAAmB,CAAA;AAQ1B,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,2BAA2B,EAC3B,aAAa,EACd,MAAM,oBAAoB,CAAA;AAO3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA"}