@interop/wallet-core 0.53.0 → 0.55.0

package/dist/clientAnnex/heal.js

@@ -0,0 +1,421 @@
+import { WasClient } from '@interop/was-client';
+import { effectiveParameters, readPublishedLog } from '../webvh/didWebvh.js';
+import { delegationKeyInDocument, ladderVmIds } from '../webvh/listClients.js';
+import { delegationProofKeyId, zcapExpiring } from '../webvh/standingZcap.js';
+import { accountLogPinId } from '../webvh/verifyLog.js';
+import { mintSpaceId } from '../genesis/accountGenesis.js';
+import { attributeLadderRung, ladderRung, ladderVmKeyMultibase } from './ladder.js';
+import { ladderVmAgent, ladderVmZcapClient } from './zcap.js';
+import { clientAnnexDidParts, clientAnnexLogPinId, clientAnnexLogStore, delegatedClientsDelegationSpaceId, delegatedClientsPointer, ensureGenerationDelegationCurrent, mintCredentialClientAnnexGeneration, mintDelegatedClientsDelegation, mintGenerationDelegation, setDelegatedClientsPointer } from './log.js';
+/**
+ * The typed refusal of {@link ensureCredentialClientAnnexGeneration}: the
+ * account is not in a shape this visit can mend, and nothing was written.
+ * Matched on `name` -- error classes do not survive crossing package copies.
+ */
+export class ClientAnnexGenerationUnavailableError extends Error {
+    reason;
+    constructor({ reason, message }) {
+        super(message);
+        this.name = 'ClientAnnexGenerationUnavailableError';
+        this.reason = reason;
+    }
+}
+/**
+ * The ladder-signed generation-delegation minter: the
+ * `mintGenerationDelegation` closure shape `ensureGenerationDelegationCurrent`
+ * takes, signing with the credential's ladder VM (`ladderVmZcapClient`) --
+ * the renewal must not depend on the very delegation it replaces, and on a
+ * ladder-anchored account the ladder VM is the one licensed delegator.
+ * Exported on its own: the transient App Connect approval's blocking renewal
+ * stage consumes the same closure.
+ *
+ * @param options {object}
+ * @param options.accountDid {string}   the account did:webvh
+ * @param options.ladderSeed {Uint8Array}   the credential's ladder seed, from
+ *   its unlock record
+ * @param options.wasServerUrl {string}   the ACCOUNT Space's storage server
+ * @param options.spaceId {string}   the ACCOUNT Space's id (the delegation's
+ *   target subtree)
+ * @param [options.now] {number}   epoch milliseconds, for tests
+ * @returns {Function}   `({ clientAnnexDid }) => Promise<IZcap>`
+ */
+export function ladderSignedGenerationDelegationMinter({ accountDid, ladderSeed, wasServerUrl, spaceId, now }) {
+    return async ({ clientAnnexDid }) => {
+        const zcapClient = await ladderVmZcapClient({ accountDid, ladderSeed });
+        return mintGenerationDelegation({
+            zcapClient,
+            wasServerUrl,
+            spaceId,
+            clientAnnexDid,
+            ...(now !== undefined ? { now } : {})
+        });
+    };
+}
+/**
+ * Ensures a transient visit can reach a live client-annex generation with a
+ * current generation delegation and a usable sibling delegation, mending
+ * from durable state alone (see the module doc for the states and the stage
+ * orders). A healthy account is a pure no-op report.
+ *
+ * Known residue: the pre-flight rung attribution runs against the SUPPLIED
+ * account view, while the pointer entry's own publish re-reads the log. The
+ * no-orphan guarantee therefore holds against that view; a concurrent
+ * ceremony advancing the rung between the two makes the pointer entry fail
+ * loudly AFTER the mint, leaving an inert unpointed generation this ensure
+ * does not reuse -- the next run converges on a fresh generation, and the
+ * orphan is the standing collect fan-out's to pick up.
+ *
+ * @param options {object}
+ * @param options.wasServerUrl {string}   the account pointer's host
+ * @param options.spaceId {string}   the ACCOUNT Space's id
+ * @param options.account {object}   the VERIFIED account log view
+ *   (`{ did, doc, log }` -- the caller's `verifyAccountLog` read; never
+ *   re-fetched here)
+ * @param options.ladderSeed {Uint8Array}   the credential's ladder seed, from
+ *   its unlock record
+ * @param options.standingClient {object}   the standing-client identity
+ *   derived from the typed secret: `did` (the sibling delegation's
+ *   controller) and `zcapClient` (its signer, which invokes annex requests
+ *   under the sibling capability)
+ * @param options.bootstrapWasFor {Function}   `({ keyAgent }) => WasClient`
+ *   -- the storage client for the fresh-Space arm, signing as the ladder
+ *   VM's bare did:key (the caller wires the transport; the agent is derived
+ *   here from the ladder seed)
+ * @param options.idStore {WebvhIdStore}   the ACCOUNT log's store (a
+ *   bridge-delegated one suffices: pointer entries publish with
+ *   `logOnly: true`)
+ * @param options.onRebindRecord {Function}
+ *   `({ delegatedClients }) => Promise<void>` -- REQUIRED: re-seals the
+ *   unlock record with the fresh sibling delegation; called whenever one was
+ *   minted, after the generation and pointer are durable
+ * @param [options.delegatedClients] {IZcap}   the record's sibling
+ *   delegation, when the record carries one
+ * @param [options.pinStore] {ResourceLogPinStore}   chain-head pins (a
+ *   transient session passes an in-memory store); slot keys are derived here
+ *   per log
+ * @param [options.now] {number}   epoch milliseconds, for tests
+ * @returns {Promise<ClientAnnexGenerationEnsureOutcome>}
+ */
+export function ensureCredentialClientAnnexGeneration(options) {
+    // Refused synchronously, before any read: a fresh sibling nothing re-seals
+    // into the record would strand the very credential this ensure serves.
+    if (typeof options.onRebindRecord !== 'function') {
+        throw new TypeError('ensureCredentialClientAnnexGeneration requires onRebindRecord: a ' +
+            'fresh sibling delegation must be re-sealed into the unlock record.');
+    }
+    return ensureCredentialClientAnnexGenerationChecked(options);
+}
+/**
+ * The checked body of {@link ensureCredentialClientAnnexGeneration}.
+ *
+ * @param options {object}   see {@link ensureCredentialClientAnnexGeneration}
+ * @returns {Promise<ClientAnnexGenerationEnsureOutcome>}
+ */
+async function ensureCredentialClientAnnexGenerationChecked({ wasServerUrl, spaceId, account, ladderSeed, standingClient, bootstrapWasFor, idStore, onRebindRecord, delegatedClients, pinStore, now }) {
+    // The gate: everything below signs as the ladder (the delegations as the
+    // ladder VM, the annex entries as its per-generation rung), so unless THIS
+    // ladder's VM stands in the document under the ladder-VM relation
+    // asymmetry (`capabilityDelegation` without `capabilityInvocation` -- the
+    // authority the mends actually exercise, which mere key presence says
+    // nothing about), every mend is unverifiable. The honest refusal, before
+    // anything is written.
+    const vmKey = await ladderVmKeyMultibase({ ladderSeed });
+    if (!ladderVmIds({ doc: account.doc }).includes(`${account.did}#${vmKey}`)) {
+        throw new ClientAnnexGenerationUnavailableError({
+            reason: 'ladder-vm-not-anchored',
+            message: "This credential's ladder VM is not a verification method of the " +
+                'account document, so a transient visit cannot mend the client annex.'
+        });
+    }
+    // The annex Space, in the settled resolution order: the document's pointer
+    // names it; else the sibling delegation's target does (converging a torn
+    // establishment onto its own stranded Space instead of minting another
+    // orphan); else a fresh Space is minted below.
+    const pointer = delegatedClientsPointer({ doc: account.doc });
+    const siblingSpaceId = delegatedClients === undefined
+        ? undefined
+        : delegatedClientsDelegationSpaceId({ delegation: delegatedClients });
+    const annexSpaceId = pointer !== undefined
+        ? clientAnnexDidParts({ did: pointer }).spaceId
+        : siblingSpaceId;
+    const ladderClient = await ladderVmZcapClient({
+        accountDid: account.did,
+        ladderSeed
+    });
+    const mintDelegation = ladderSignedGenerationDelegationMinter({
+        accountDid: account.did,
+        ladderSeed,
+        wasServerUrl,
+        spaceId,
+        ...(now !== undefined ? { now } : {})
+    });
+    if (annexSpaceId === undefined) {
+        // THE FRESH-SPACE ARM: neither the pointer nor a sibling names a Space.
+        // The pre-flight attribution runs before anything is minted; the stage
+        // order mirrors the credential-anchored genesis exactly.
+        const updateKeys = await pointerEntryUpdateKeys({
+            ladderSeed,
+            log: account.log
+        });
+        const freshSpaceId = mintSpaceId();
+        const keyAgent = await ladderVmAgent({ ladderSeed });
+        const bootstrapWas = bootstrapWasFor({ keyAgent });
+        const minted = await mintCredentialClientAnnexGeneration({
+            was: bootstrapWas,
+            wasServerUrl,
+            spaceId: freshSpaceId,
+            controller: keyAgent.id,
+            ladderSeed
+        });
+        // The delegation embeds while the Space still answers to the bootstrap
+        // did:key; the controller flip follows, then the pointer entry.
+        const ensured = await ensureGenerationDelegationCurrent({
+            store: clientAnnexLogStore({
+                was: bootstrapWas,
+                spaceId: freshSpaceId,
+                generationId: minted.generationId
+            }),
+            ladderSeed,
+            generationId: minted.generationId,
+            mintGenerationDelegation: mintDelegation,
+            expectedDid: minted.did,
+            ...(pinStore !== undefined
+                ? {
+                    pinStore,
+                    logId: clientAnnexLogPinId({
+                        spaceId: freshSpaceId,
+                        generationId: minted.generationId
+                    })
+                }
+                : {}),
+            ...(now !== undefined ? { now } : {})
+        });
+        await bootstrapWas
+            .space(freshSpaceId)
+            .configure({ controller: account.did, force: true });
+        await setDelegatedClientsPointer({
+            idStore,
+            updateKeys,
+            clientAnnexDid: minted.did,
+            expectedDid: account.did,
+            logOnly: true,
+            ...(pinStore !== undefined
+                ? { pinStore, logId: accountLogPinId({ spaceId }) }
+                : {})
+        });
+        const sibling = await mintDelegatedClientsDelegation({
+            zcapClient: ladderClient,
+            wasServerUrl,
+            clientAnnexSpaceId: freshSpaceId,
+            controller: standingClient.did,
+            ...(now !== undefined ? { now } : {})
+        });
+        await onRebindRecord({ delegatedClients: sibling });
+        return {
+            clientAnnexDid: minted.did,
+            generationDelegation: ensured.delegation,
+            delegatedClients: sibling,
+            generationMinted: true,
+            spaceMinted: true,
+            delegationRenewed: false,
+            siblingReminted: true
+        };
+    }
+    // THE EXISTING-SPACE ARMS. A usable sibling first: absent, targeting a
+    // different Space than the resolved one, or stale on either of the
+    // standing-zcap axes -- expiry (past, or inside the renewal window) and
+    // signer death (its proof key no longer in the verified account document,
+    // the current-key-set rule) -- a fresh sibling is minted (local ladder-VM
+    // signing, which verifies because the gate above proved the VM a document
+    // verification method) so every annex request below can ride it.
+    let sibling = delegatedClients;
+    let siblingReminted = false;
+    const siblingStale = sibling !== undefined &&
+        (zcapExpiring({
+            ...(sibling.expires !== undefined
+                ? { expires: sibling.expires }
+                : {}),
+            ...(now !== undefined ? { now } : {})
+        }) ||
+            !delegationKeyInDocument({
+                doc: account.doc,
+                ...(delegationProofKeyId(sibling) !== undefined
+                    ? { delegationKeyId: delegationProofKeyId(sibling) }
+                    : {})
+            }));
+    if (sibling === undefined ||
+        siblingSpaceId !== annexSpaceId ||
+        siblingStale) {
+        sibling = await mintDelegatedClientsDelegation({
+            zcapClient: ladderClient,
+            wasServerUrl,
+            clientAnnexSpaceId: annexSpaceId,
+            controller: standingClient.did,
+            ...(now !== undefined ? { now } : {})
+        });
+        siblingReminted = true;
+    }
+    const usableSibling = sibling;
+    const standingWas = new WasClient({
+        serverUrl: wasServerUrl,
+        zcapClient: standingClient.zcapClient
+    });
+    const storeFor = (generationId) => clientAnnexLogStore({
+        was: standingWas,
+        spaceId: annexSpaceId,
+        generationId,
+        capability: usableSibling
+    });
+    const annexPin = (generationId) => pinStore !== undefined
+        ? {
+            pinStore,
+            logId: clientAnnexLogPinId({ spaceId: annexSpaceId, generationId })
+        }
+        : {};
+    // RENEW PRECEDES MINT: a live, verifiable pointed generation is renewed in
+    // place; only a rung this generation never committed falls through to the
+    // fresh mint (the GC swap's no-committed-survivor escape).
+    if (pointer !== undefined) {
+        const parts = clientAnnexDidParts({ did: pointer });
+        const pointedLog = await readPublishedLog({
+            idStore: storeFor(parts.generationId),
+            expectedDid: pointer,
+            ...annexPin(parts.generationId)
+        });
+        if (pointedLog !== undefined) {
+            try {
+                const ensured = await ensureGenerationDelegationCurrent({
+                    store: storeFor(parts.generationId),
+                    ladderSeed,
+                    generationId: parts.generationId,
+                    mintGenerationDelegation: mintDelegation,
+                    expectedDid: pointer,
+                    accountDoc: account.doc,
+                    ...annexPin(parts.generationId),
+                    ...(now !== undefined ? { now } : {})
+                });
+                if (siblingReminted) {
+                    await onRebindRecord({ delegatedClients: usableSibling });
+                }
+                return {
+                    clientAnnexDid: pointer,
+                    generationDelegation: ensured.delegation,
+                    delegatedClients: usableSibling,
+                    generationMinted: false,
+                    spaceMinted: false,
+                    delegationRenewed: ensured.renewed,
+                    siblingReminted
+                };
+            }
+            catch (err) {
+                if (err.name !== 'ClientAnnexRungUncommittedError') {
+                    throw err;
+                }
+                // This credential's rung was never committed into the pointed
+                // generation (bound mid-generation): fall through to the fresh mint,
+                // which commits it with the fresh genesis.
+            }
+        }
+    }
+    // THE FRESH-GENERATION ARM, existing Space: pre-flight attribution first
+    // (never mint a generation the pointer entry cannot then name), then the
+    // GC swap's stage order minus its revoke -- mint, install the delegation,
+    // re-point. The fresh genesis commits only the acting credential's annex
+    // rung; other standing credentials' per-generation rungs are re-committed
+    // only by their own later ceremonies (a property of every generation
+    // swap).
+    const updateKeys = await pointerEntryUpdateKeys({
+        ladderSeed,
+        log: account.log
+    });
+    const minted = await mintCredentialClientAnnexGeneration({
+        was: standingWas,
+        wasServerUrl,
+        spaceId: annexSpaceId,
+        controller: account.did,
+        ladderSeed,
+        capability: usableSibling
+    });
+    const ensured = await ensureGenerationDelegationCurrent({
+        store: storeFor(minted.generationId),
+        ladderSeed,
+        generationId: minted.generationId,
+        mintGenerationDelegation: mintDelegation,
+        expectedDid: minted.did,
+        ...annexPin(minted.generationId),
+        ...(now !== undefined ? { now } : {})
+    });
+    // No revocation of the superseded generation's delegation is attempted:
+    // a transient visit has no reach that could invoke it (the standing client
+    // is neither the Space controller nor in that delegation's chain). The
+    // pointer move itself retires it on a conforming server -- the inspector
+    // clause compares the delegation's controller against the document's
+    // pointer -- and it otherwise rots on its TTL.
+    await setDelegatedClientsPointer({
+        idStore,
+        updateKeys,
+        clientAnnexDid: minted.did,
+        expectedDid: account.did,
+        logOnly: true,
+        ...(pinStore !== undefined
+            ? { pinStore, logId: accountLogPinId({ spaceId }) }
+            : {})
+    });
+    if (siblingReminted) {
+        await onRebindRecord({ delegatedClients: usableSibling });
+    }
+    return {
+        clientAnnexDid: minted.did,
+        generationDelegation: ensured.delegation,
+        delegatedClients: usableSibling,
+        generationMinted: true,
+        spaceMinted: false,
+        delegationRenewed: false,
+        siblingReminted
+    };
+}
+/**
+ * The pre-flight rung attribution: the `{ updateSeed, stagedSeed }` pair the
+ * pointer entry signs with, recovered from the verified account log's
+ * current parameters. The signer must be a REVEALED rung (the entry verifies
+ * against the log's `updateKeys`), with the next rung staged per the
+ * carry-over convention. No rung of this ladder standing -- or only a
+ * committed hash, which cannot sign -- refuses with
+ * {@link ClientAnnexGenerationUnavailableError} before anything is minted.
+ *
+ * @param options {object}
+ * @param options.ladderSeed {Uint8Array}
+ * @param options.log {DIDLog}   the VERIFIED account log
+ * @returns {Promise<ClientWebvhUpdateKeys>}
+ */
+async function pointerEntryUpdateKeys({ ladderSeed, log }) {
+    const params = effectiveParameters(log);
+    const current = params[params.length - 1] ?? {
+        updateKeys: [],
+        nextKeyHashes: []
+    };
+    const unattributable = () => new ClientAnnexGenerationUnavailableError({
+        reason: 'update-key-not-attributable',
+        message: "No current account-log update key is a rung of this credential's " +
+            'ladder; the pointer entry could not be signed, so nothing is minted.'
+    });
+    let attributed;
+    try {
+        attributed = await attributeLadderRung({ ladderSeed, published: current });
+    }
+    catch (err) {
+        if (err.name === 'LadderAttributionError') {
+            throw unattributable();
+        }
+        throw err;
+    }
+    if (attributed.state !== 'revealed') {
+        throw unattributable();
+    }
+    const staged = await ladderRung({
+        ladderSeed,
+        index: attributed.rung.index + 1
+    });
+    return { updateSeed: attributed.rung.seed, stagedSeed: staged.seed };
+}
+//# sourceMappingURL=heal.js.map

package/dist/clientAnnex/heal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"heal.js","sourceRoot":"","sources":["../../src/clientAnnex/heal.ts"],"names":[],"mappings":"AAoDA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAE/C,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAM5E,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAE9E,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAE1D,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,oBAAoB,EACrB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAC7D,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,iCAAiC,EACjC,uBAAuB,EACvB,iCAAiC,EACjC,mCAAmC,EACnC,8BAA8B,EAC9B,wBAAwB,EACxB,0BAA0B,EAC3B,MAAM,UAAU,CAAA;AAqBjB;;;;GAIG;AACH,MAAM,OAAO,qCAAsC,SAAQ,KAAK;IACrD,MAAM,CAAwC;IAEvD,YAAY,EACV,MAAM,EACN,OAAO,EAIR;QACC,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,uCAAuC,CAAA;QACnD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,sCAAsC,CAAC,EACrD,UAAU,EACV,UAAU,EACV,YAAY,EACZ,OAAO,EACP,GAAG,EAOJ;IACC,OAAO,KAAK,EAAE,EAAE,cAAc,EAA8B,EAAE,EAAE;QAC9D,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAA;QACvE,OAAO,wBAAwB,CAAC;YAC9B,UAAU;YACV,YAAY;YACZ,OAAO;YACP,cAAc;YACd,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAA;IACJ,CAAC,CAAA;AACH,CAAC;AAuBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,MAAM,UAAU,qCAAqC,CAAC,OAYrD;IACC,2EAA2E;IAC3E,uEAAuE;IACvE,IAAI,OAAO,OAAO,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;QACjD,MAAM,IAAI,SAAS,CACjB,mEAAmE;YACjE,oEAAoE,CACvE,CAAA;IACH,CAAC;IACD,OAAO,4CAA4C,CAAC,OAAO,CAAC,CAAA;AAC9D,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,4CAA4C,CAAC,EAC1D,YAAY,EACZ,OAAO,EACP,OAAO,EACP,UAAU,EACV,cAAc,EACd,eAAe,EACf,OAAO,EACP,cAAc,EACd,gBAAgB,EAChB,QAAQ,EACR,GAAG,EAaJ;IACC,yEAAyE;IACzE,2EAA2E;IAC3E,kEAAkE;IAClE,0EAA0E;IAC1E,sEAAsE;IACtE,yEAAyE;IACzE,uBAAuB;IACvB,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;IACxD,IAAI,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,qCAAqC,CAAC;YAC9C,MAAM,EAAE,wBAAwB;YAChC,OAAO,EACL,kEAAkE;gBAClE,sEAAsE;SACzE,CAAC,CAAA;IACJ,CAAC;IAED,2EAA2E;IAC3E,yEAAyE;IACzE,uEAAuE;IACvE,+CAA+C;IAC/C,MAAM,OAAO,GAAG,uBAAuB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAC7D,MAAM,cAAc,GAClB,gBAAgB,KAAK,SAAS;QAC5B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,iCAAiC,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAA;IACzE,MAAM,YAAY,GAChB,OAAO,KAAK,SAAS;QACnB,CAAC,CAAC,mBAAmB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO;QAC/C,CAAC,CAAC,cAAc,CAAA;IAEpB,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC;QAC5C,UAAU,EAAE,OAAO,CAAC,GAAG;QACvB,UAAU;KACX,CAAC,CAAA;IACF,MAAM,cAAc,GAAG,sCAAsC,CAAC;QAC5D,UAAU,EAAE,OAAO,CAAC,GAAG;QACvB,UAAU;QACV,YAAY;QACZ,OAAO;QACP,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtC,CAAC,CAAA;IAEF,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,wEAAwE;QACxE,uEAAuE;QACvE,yDAAyD;QACzD,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC;YAC9C,UAAU;YACV,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAA;QACF,MAAM,YAAY,GAAG,WAAW,EAAE,CAAA;QAClC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;QACpD,MAAM,YAAY,GAAG,eAAe,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;QAClD,MAAM,MAAM,GAAG,MAAM,mCAAmC,CAAC;YACvD,GAAG,EAAE,YAAY;YACjB,YAAY;YACZ,OAAO,EAAE,YAAY;YACrB,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,UAAU;SACX,CAAC,CAAA;QACF,uEAAuE;QACvE,gEAAgE;QAChE,MAAM,OAAO,GAAG,MAAM,iCAAiC,CAAC;YACtD,KAAK,EAAE,mBAAmB,CAAC;gBACzB,GAAG,EAAE,YAAY;gBACjB,OAAO,EAAE,YAAY;gBACrB,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC;YACF,UAAU;YACV,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,wBAAwB,EAAE,cAAc;YACxC,WAAW,EAAE,MAAM,CAAC,GAAG;YACvB,GAAG,CAAC,QAAQ,KAAK,SAAS;gBACxB,CAAC,CAAC;oBACE,QAAQ;oBACR,KAAK,EAAE,mBAAmB,CAAC;wBACzB,OAAO,EAAE,YAAY;wBACrB,YAAY,EAAE,MAAM,CAAC,YAAY;qBAClC,CAAC;iBACH;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAA;QACF,MAAM,YAAY;aACf,KAAK,CAAC,YAAY,CAAC;aACnB,SAAS,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,MAAM,0BAA0B,CAAC;YAC/B,OAAO;YACP,UAAU;YACV,cAAc,EAAE,MAAM,CAAC,GAAG;YAC1B,WAAW,EAAE,OAAO,CAAC,GAAG;YACxB,OAAO,EAAE,IAAI;YACb,GAAG,CAAC,QAAQ,KAAK,SAAS;gBACxB,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;gBACnD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,MAAM,8BAA8B,CAAC;YACnD,UAAU,EAAE,YAAY;YACxB,YAAY;YACZ,kBAAkB,EAAE,YAAY;YAChC,UAAU,EAAE,cAAc,CAAC,GAAG;YAC9B,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAA;QACF,MAAM,cAAc,CAAC,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAA;QACnD,OAAO;YACL,cAAc,EAAE,MAAM,CAAC,GAAG;YAC1B,oBAAoB,EAAE,OAAO,CAAC,UAAU;YACxC,gBAAgB,EAAE,OAAO;YACzB,gBAAgB,EAAE,IAAI;YACtB,WAAW,EAAE,IAAI;YACjB,iBAAiB,EAAE,KAAK;YACxB,eAAe,EAAE,IAAI;SACtB,CAAA;IACH,CAAC;IAED,uEAAuE;IACvE,mEAAmE;IACnE,wEAAwE;IACxE,0EAA0E;IAC1E,0EAA0E;IAC1E,0EAA0E;IAC1E,iEAAiE;IACjE,IAAI,OAAO,GAAG,gBAAgB,CAAA;IAC9B,IAAI,eAAe,GAAG,KAAK,CAAA;IAC3B,MAAM,YAAY,GAChB,OAAO,KAAK,SAAS;QACrB,CAAC,YAAY,CAAC;YACZ,GAAG,CAAE,OAAgC,CAAC,OAAO,KAAK,SAAS;gBACzD,CAAC,CAAC,EAAE,OAAO,EAAG,OAAgC,CAAC,OAAO,EAAE;gBACxD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC;YACA,CAAC,uBAAuB,CAAC;gBACvB,GAAG,EAAE,OAAO,CAAC,GAA2B;gBACxC,GAAG,CAAC,oBAAoB,CAAC,OAAO,CAAC,KAAK,SAAS;oBAC7C,CAAC,CAAC,EAAE,eAAe,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE;oBACpD,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC,CAAA;IACP,IACE,OAAO,KAAK,SAAS;QACrB,cAAc,KAAK,YAAY;QAC/B,YAAY,EACZ,CAAC;QACD,OAAO,GAAG,MAAM,8BAA8B,CAAC;YAC7C,UAAU,EAAE,YAAY;YACxB,YAAY;YACZ,kBAAkB,EAAE,YAAY;YAChC,UAAU,EAAE,cAAc,CAAC,GAAG;YAC9B,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAA;QACF,eAAe,GAAG,IAAI,CAAA;IACxB,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAA;IAC7B,MAAM,WAAW,GAAG,IAAI,SAAS,CAAC;QAChC,SAAS,EAAE,YAAY;QACvB,UAAU,EAAE,cAAc,CAAC,UAAU;KACtC,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,CAAC,YAAoB,EAAE,EAAE,CACxC,mBAAmB,CAAC;QAClB,GAAG,EAAE,WAAW;QAChB,OAAO,EAAE,YAAY;QACrB,YAAY;QACZ,UAAU,EAAE,aAAa;KAC1B,CAAC,CAAA;IACJ,MAAM,QAAQ,GAAG,CAAC,YAAoB,EAAE,EAAE,CACxC,QAAQ,KAAK,SAAS;QACpB,CAAC,CAAC;YACE,QAAQ;YACR,KAAK,EAAE,mBAAmB,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;SACpE;QACH,CAAC,CAAC,EAAE,CAAA;IAER,2EAA2E;IAC3E,0EAA0E;IAC1E,2DAA2D;IAC3D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,mBAAmB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;QACnD,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC;YACxC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAiB;YACrD,WAAW,EAAE,OAAO;YACpB,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC;SAChC,CAAC,CAAA;QACF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,iCAAiC,CAAC;oBACtD,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC;oBACnC,UAAU;oBACV,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,wBAAwB,EAAE,cAAc;oBACxC,WAAW,EAAE,OAAO;oBACpB,UAAU,EAAE,OAAO,CAAC,GAA2B;oBAC/C,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC;oBAC/B,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtC,CAAC,CAAA;gBACF,IAAI,eAAe,EAAE,CAAC;oBACpB,MAAM,cAAc,CAAC,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC,CAAA;gBAC3D,CAAC;gBACD,OAAO;oBACL,cAAc,EAAE,OAAO;oBACvB,oBAAoB,EAAE,OAAO,CAAC,UAAU;oBACxC,gBAAgB,EAAE,aAAa;oBAC/B,gBAAgB,EAAE,KAAK;oBACvB,WAAW,EAAE,KAAK;oBAClB,iBAAiB,EAAE,OAAO,CAAC,OAAO;oBAClC,eAAe;iBAChB,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IACG,GAAyB,CAAC,IAAI,KAAK,iCAAiC,EACrE,CAAC;oBACD,MAAM,GAAG,CAAA;gBACX,CAAC;gBACD,8DAA8D;gBAC9D,qEAAqE;gBACrE,2CAA2C;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,qEAAqE;IACrE,SAAS;IACT,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC;QAC9C,UAAU;QACV,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,MAAM,mCAAmC,CAAC;QACvD,GAAG,EAAE,WAAW;QAChB,YAAY;QACZ,OAAO,EAAE,YAAY;QACrB,UAAU,EAAE,OAAO,CAAC,GAAG;QACvB,UAAU;QACV,UAAU,EAAE,aAAa;KAC1B,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,MAAM,iCAAiC,CAAC;QACtD,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC;QACpC,UAAU;QACV,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,wBAAwB,EAAE,cAAc;QACxC,WAAW,EAAE,MAAM,CAAC,GAAG;QACvB,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC;QAChC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtC,CAAC,CAAA;IAEF,wEAAwE;IACxE,2EAA2E;IAC3E,uEAAuE;IACvE,yEAAyE;IACzE,qEAAqE;IACrE,+CAA+C;IAC/C,MAAM,0BAA0B,CAAC;QAC/B,OAAO;QACP,UAAU;QACV,cAAc,EAAE,MAAM,CAAC,GAAG;QAC1B,WAAW,EAAE,OAAO,CAAC,GAAG;QACxB,OAAO,EAAE,IAAI;QACb,GAAG,CAAC,QAAQ,KAAK,SAAS;YACxB,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;YACnD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAA;IACF,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,cAAc,CAAC,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC,CAAA;IAC3D,CAAC;IACD,OAAO;QACL,cAAc,EAAE,MAAM,CAAC,GAAG;QAC1B,oBAAoB,EAAE,OAAO,CAAC,UAAU;QACxC,gBAAgB,EAAE,aAAa;QAC/B,gBAAgB,EAAE,IAAI;QACtB,WAAW,EAAE,KAAK;QAClB,iBAAiB,EAAE,KAAK;QACxB,eAAe;KAChB,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,sBAAsB,CAAC,EACpC,UAAU,EACV,GAAG,EAIJ;IACC,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI;QAC3C,UAAU,EAAE,EAAE;QACd,aAAa,EAAE,EAAE;KAClB,CAAA;IACD,MAAM,cAAc,GAAG,GAAG,EAAE,CAC1B,IAAI,qCAAqC,CAAC;QACxC,MAAM,EAAE,6BAA6B;QACrC,OAAO,EACL,mEAAmE;YACnE,sEAAsE;KACzE,CAAC,CAAA;IACJ,IAAI,UAA2D,CAAA;IAC/D,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,mBAAmB,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAA;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAAyB,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YACjE,MAAM,cAAc,EAAE,CAAA;QACxB,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,cAAc,EAAE,CAAA;IACxB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;QAC9B,UAAU;QACV,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC;KACjC,CAAC,CAAA;IACF,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;AACtE,CAAC"}

package/dist/clientAnnex/index.d.ts

@@ -48,6 +48,8 @@ export type { ClientAnnexWriteStore } from './log.js';
 export { clientAnnexGcDue, delegatedClientsPointerEstablishedAt, GENERATION_GC_PERIOD_MS, GENERATION_QUIET_BOUND_MS, GENERATION_QUIET_GRACE_MS, generationQuiet, runClientAnnexGc, swapClientAnnexGeneration } from './gc.js';
 export type { ClientAnnexGcReport, ClientAnnexGcSwapOutcome } from './gc.js';
 export { ladderVmAgent, ladderVmZcapClient } from './zcap.js';
+export { ClientAnnexGenerationUnavailableError, ensureCredentialClientAnnexGeneration, ladderSignedGenerationDelegationMinter } from './heal.js';
+export type { ClientAnnexGenerationEnsureOutcome, ClientAnnexGenerationUnavailableReason } from './heal.js';
 export { BuiltOnHeadNotReachedError, createLadderAnchoredAccountLog, ensureLadderAnchoredDidWebvh, forgetLastWebvhClient, forgetWebvhClient, installLadderVmWebvh, LastDurableClientForgetError, selfEnrollWebvhClient } from './ladderAnchored.js';
 export { selfEnrollClientCore } from './selfEnroll.js';
 export { forgetDurableClient } from './forget.js';

package/dist/clientAnnex/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACb,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,UAAU,EACV,eAAe,EACf,uBAAuB,EACxB,MAAM,aAAa,CAAA;AAEpB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,+BAA+B,EAC/B,qBAAqB,EACrB,oBAAoB,EACpB,oCAAoC,EACpC,mCAAmC,EACnC,8BAA8B,EAC9B,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,kCAAkC,EAClC,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,EACrB,qCAAqC,EACrC,4BAA4B,EAC5B,0BAA0B,EAC3B,MAAM,UAAU,CAAA;AACjB,YAAY,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAA;AAErD,OAAO,EACL,gBAAgB,EAChB,oCAAoC,EACpC,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAChB,YAAY,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,SAAS,CAAA;AAE5E,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAE7D,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,4BAA4B,EAC5B,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,4BAA4B,EAC5B,qBAAqB,EACtB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAEtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,YAAY,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAA;AAE5D,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,iBAAiB,CAAA;AACxB,YAAY,EACV,8BAA8B,EAC9B,6BAA6B,EAC7B,wBAAwB,EACzB,MAAM,iBAAiB,CAAA;AAExB,OAAO,EACL,sCAAsC,EACtC,mCAAmC,EACpC,MAAM,gCAAgC,CAAA;AAEvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAOxE,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,sBAAsB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACb,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,UAAU,EACV,eAAe,EACf,uBAAuB,EACxB,MAAM,aAAa,CAAA;AAEpB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,+BAA+B,EAC/B,qBAAqB,EACrB,oBAAoB,EACpB,oCAAoC,EACpC,mCAAmC,EACnC,8BAA8B,EAC9B,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,kCAAkC,EAClC,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,EACrB,qCAAqC,EACrC,4BAA4B,EAC5B,0BAA0B,EAC3B,MAAM,UAAU,CAAA;AACjB,YAAY,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAA;AAErD,OAAO,EACL,gBAAgB,EAChB,oCAAoC,EACpC,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAChB,YAAY,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,SAAS,CAAA;AAE5E,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAE7D,OAAO,EACL,qCAAqC,EACrC,qCAAqC,EACrC,sCAAsC,EACvC,MAAM,WAAW,CAAA;AAClB,YAAY,EACV,kCAAkC,EAClC,sCAAsC,EACvC,MAAM,WAAW,CAAA;AAElB,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,4BAA4B,EAC5B,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,4BAA4B,EAC5B,qBAAqB,EACtB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAEtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,YAAY,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAA;AAE5D,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,iBAAiB,CAAA;AACxB,YAAY,EACV,8BAA8B,EAC9B,6BAA6B,EAC7B,wBAAwB,EACzB,MAAM,iBAAiB,CAAA;AAExB,OAAO,EACL,sCAAsC,EACtC,mCAAmC,EACpC,MAAM,gCAAgC,CAAA;AAEvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAOxE,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,sBAAsB,CAAA"}

package/dist/clientAnnex/index.js

@@ -45,6 +45,7 @@ export { attributeLadderInventory, attributeLadderRung, clientAnnexRung, clientA
 export { assertGenerationId, clampGrantExpires, CLIENT_ANNEX_SPACE_TYPE, clientAnnexDidParts, clientAnnexLogPinId, clientAnnexLogStore, ClientAnnexRungUncommittedError, commitClientAnnexRung, createClientAnnexLog, DELEGATED_CLIENTS_DELEGATION_ACTIONS, DELEGATED_CLIENTS_DELEGATION_TTL_MS, DELEGATED_CLIENTS_SERVICE_TYPE, delegatedClientsDelegationMinter, delegatedClientsDelegationSpaceId, delegatedClientsPointer, delegatedClientsServiceEntry, embeddedGenerationDelegation, enrollClientAnnexTransientClient, enrollTransientClient, ensureClientAnnexSpace, ensureGenerationDelegationCurrent, GENERATION_DELEGATION_ACTIONS, GENERATION_DELEGATION_SERVICE_TYPE, GENERATION_DELEGATION_TTL_MS, GENERATION_ID_PREFIX, generationDelegationHistory, generationDelegationServiceEntry, mintClientAnnexGeneration, mintCredentialClientAnnexGeneration, mintDelegatedClientsDelegation, mintGenerationDelegation, mintGenerationId, retireClientAnnexRung, revokeTreatingAlreadyRevokedAsSuccess, servicesPointedAtClientAnnex, setDelegatedClientsPointer } from './log.js';
 export { clientAnnexGcDue, delegatedClientsPointerEstablishedAt, GENERATION_GC_PERIOD_MS, GENERATION_QUIET_BOUND_MS, GENERATION_QUIET_GRACE_MS, generationQuiet, runClientAnnexGc, swapClientAnnexGeneration } from './gc.js';
 export { ladderVmAgent, ladderVmZcapClient } from './zcap.js';
+export { ClientAnnexGenerationUnavailableError, ensureCredentialClientAnnexGeneration, ladderSignedGenerationDelegationMinter } from './heal.js';
 export { BuiltOnHeadNotReachedError, createLadderAnchoredAccountLog, ensureLadderAnchoredDidWebvh, forgetLastWebvhClient, forgetWebvhClient, installLadderVmWebvh, LastDurableClientForgetError, selfEnrollWebvhClient } from './ladderAnchored.js';
 export { selfEnrollClientCore } from './selfEnroll.js';
 export { forgetDurableClient } from './forget.js';

package/dist/clientAnnex/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/clientAnnex/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACb,MAAM,aAAa,CAAA;AAOpB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,+BAA+B,EAC/B,qBAAqB,EACrB,oBAAoB,EACpB,oCAAoC,EACpC,mCAAmC,EACnC,8BAA8B,EAC9B,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,kCAAkC,EAClC,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,EACrB,qCAAqC,EACrC,4BAA4B,EAC5B,0BAA0B,EAC3B,MAAM,UAAU,CAAA;AAGjB,OAAO,EACL,gBAAgB,EAChB,oCAAoC,EACpC,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAGhB,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAE7D,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,4BAA4B,EAC5B,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,4BAA4B,EAC5B,qBAAqB,EACtB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAEtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAGjD,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,iBAAiB,CAAA;AAOxB,OAAO,EACL,sCAAsC,EACtC,mCAAmC,EACpC,MAAM,gCAAgC,CAAA;AAEvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAExE,4EAA4E;AAC5E,qEAAqE;AACrE,6EAA6E;AAC7E,4EAA4E;AAC5E,wBAAwB;AACxB,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,sBAAsB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/clientAnnex/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACb,MAAM,aAAa,CAAA;AAOpB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,+BAA+B,EAC/B,qBAAqB,EACrB,oBAAoB,EACpB,oCAAoC,EACpC,mCAAmC,EACnC,8BAA8B,EAC9B,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,kCAAkC,EAClC,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,EACrB,qCAAqC,EACrC,4BAA4B,EAC5B,0BAA0B,EAC3B,MAAM,UAAU,CAAA;AAGjB,OAAO,EACL,gBAAgB,EAChB,oCAAoC,EACpC,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAGhB,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAE7D,OAAO,EACL,qCAAqC,EACrC,qCAAqC,EACrC,sCAAsC,EACvC,MAAM,WAAW,CAAA;AAMlB,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,4BAA4B,EAC5B,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,4BAA4B,EAC5B,qBAAqB,EACtB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAEtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAGjD,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,iBAAiB,CAAA;AAOxB,OAAO,EACL,sCAAsC,EACtC,mCAAmC,EACpC,MAAM,gCAAgC,CAAA;AAEvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAExE,4EAA4E;AAC5E,qEAAqE;AACrE,6EAA6E;AAC7E,4EAA4E;AAC5E,wBAAwB;AACxB,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,sBAAsB,CAAA"}

package/dist/clientAnnex/ladderAnchored.d.ts

@@ -1,5 +1,5 @@
 import type { DIDDoc, DIDLog } from '@interop/did-method-webvh';
-import type { ClientWebvhUpdateKeys, WebvhEnrollmentKeys, WebvhIdStore } from '../webvh/didWebvh.js';
+import type { ClientWebvhUpdateKeys, DidWebKeyMapV2, WebvhEnrollmentKeys, WebvhIdStore } from '../webvh/didWebvh.js';
 import type { ResourceLogPinStore } from '@interop/vh-resource-log';
 import { type RevokedClientKeys } from '../webvh/revokeClient.js';
 import { type UnlockKeyAgreementPublication, type UnlockLogStore } from '../unlock/standingWebvh.js';
@@ -21,20 +21,28 @@ import { type UnlockKeyAgreementPublication, type UnlockLogStore } from '../unlo
  * durable self-enrollment ({@link selfEnrollWebvhClient}), whose add entry
  * atomically publishes the client, retires rung 0, and removes the ladder VM.
  *
+ * When the wallet keeps a KMS, `didWebKeys` folds the KMS-held
+ * authentication key into the entry under `authentication` only -- the
+ * durable genesis's server-side convenience, with its exclusions intact (no
+ * KMS keyAgreement or assertion key).
+ *
  * The caller owns publication (conditional, create-only) and the pointer
  * write that follows; this assembles and signs the log only.
  *
  * @param options {object}
  * @param options.wasServerUrl {string}
  * @param options.spaceId {string}
+ * @param [options.didWebKeys] {DidWebKeyMapV2}   the parsed keys.json, when
+ *   the wallet keeps a KMS; absent, the genesis is ladder-and-credential-only
  * @param options.ladderSeed {Uint8Array}   the credential's ladder seed
  * @param options.keyAgreement {UnlockKeyAgreementPublication}   the
  *   credential's key-agreement publication (commitment or verbatim)
  * @returns {Promise<{ log: DIDLog, webDoc: object, did: string }>}
  */
-export declare function createLadderAnchoredAccountLog({ wasServerUrl, spaceId, ladderSeed, keyAgreement }: {
+export declare function createLadderAnchoredAccountLog({ wasServerUrl, spaceId, didWebKeys, ladderSeed, keyAgreement }: {
     wasServerUrl: string;
     spaceId: string;
+    didWebKeys?: DidWebKeyMapV2;
     ladderSeed: Uint8Array;
     keyAgreement: UnlockKeyAgreementPublication;
 }): Promise<{
@@ -63,6 +71,10 @@ export declare function createLadderAnchoredAccountLog({ wasServerUrl, spaceId,
  * @param options.idStore {WebvhIdStore}
  * @param options.wasServerUrl {string}
  * @param options.spaceId {string}
+ * @param [options.didWebKeys] {DidWebKeyMapV2}   the parsed keys.json, when
+ *   the wallet keeps a KMS; folded into the CREATE path only (see the
+ *   adoption note in the body), which also records the minted DID into
+ *   keys.json's webvh block as the durable ensure does
  * @param options.ladderSeed {Uint8Array}   the credential's ladder seed
  * @param options.keyAgreement {UnlockKeyAgreementPublication}   the
  *   credential's key-agreement publication (commitment or verbatim)
@@ -78,6 +90,7 @@ export declare function ensureLadderAnchoredDidWebvh(options: {
     idStore: WebvhIdStore;
     wasServerUrl: string;
     spaceId: string;
+    didWebKeys?: DidWebKeyMapV2;
     ladderSeed: Uint8Array;
     keyAgreement: UnlockKeyAgreementPublication;
     expectedDid?: string;

package/dist/clientAnnex/ladderAnchored.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ladderAnchored.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/ladderAnchored.ts"],"names":[],"mappings":"AAmDA,OAAO,KAAK,EACV,MAAM,EACN,MAAM,EAEP,MAAM,2BAA2B,CAAA;AAmBlC,OAAO,KAAK,EACV,qBAAqB,EACrB,mBAAmB,EACnB,YAAY,EACb,MAAM,sBAAsB,CAAA;AAE7B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAEnE,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAGL,KAAK,6BAA6B,EAClC,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAA;AAOnC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,8BAA8B,CAAC,EACnD,YAAY,EACZ,OAAO,EACP,UAAU,EACV,YAAY,EACb,EAAE;IACD,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,6BAA6B,CAAA;CAC5C,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBxD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE;IAC1D,OAAO,EAAE,YAAY,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,6BAA6B,CAAA;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;CAC/B,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAE3B;AA4FD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiFG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,aAAa,EAAE,mBAAmB,CAAA;IAClC,oBAAoB,EAAE,qBAAqB,CAAA;IAC3C,WAAW,EAAE,CAAC,SAAS,EAAE;QACvB,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACjD,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnB,WAAW,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IACjD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAsBhE;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,WAAW,EACZ,EAAE;IACD,WAAW,EAAE,OAAO,CAAA;CACrB,GAAG,IAAI,CAmBP;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACnD;;OAEG;IACH,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IAEhD;;;OAGG;gBACS,EACV,WAAW,EACZ,EAAE;QACD,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACjD;CAUF;AAyMD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;;CAStD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE;IAC/C,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,iBAAiB,CAAA;IAClC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,iBAAiB,CAAA;IAClC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD;AA2HD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAEzE"}
+{"version":3,"file":"ladderAnchored.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/ladderAnchored.ts"],"names":[],"mappings":"AAmDA,OAAO,KAAK,EACV,MAAM,EACN,MAAM,EAEP,MAAM,2BAA2B,CAAA;AAoBlC,OAAO,KAAK,EACV,qBAAqB,EACrB,cAAc,EACd,mBAAmB,EACnB,YAAY,EACb,MAAM,sBAAsB,CAAA;AAE7B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAEnE,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAGL,KAAK,6BAA6B,EAClC,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAA;AAOnC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAsB,8BAA8B,CAAC,EACnD,YAAY,EACZ,OAAO,EACP,UAAU,EACV,UAAU,EACV,YAAY,EACb,EAAE;IACD,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,cAAc,CAAA;IAC3B,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,6BAA6B,CAAA;CAC5C,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAuBxD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE;IAC1D,OAAO,EAAE,YAAY,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,cAAc,CAAA;IAC3B,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,6BAA6B,CAAA;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;CAC/B,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAE3B;AA4GD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiFG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,aAAa,EAAE,mBAAmB,CAAA;IAClC,oBAAoB,EAAE,qBAAqB,CAAA;IAC3C,WAAW,EAAE,CAAC,SAAS,EAAE;QACvB,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACjD,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnB,WAAW,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IACjD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAsBhE;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,WAAW,EACZ,EAAE;IACD,WAAW,EAAE,OAAO,CAAA;CACrB,GAAG,IAAI,CAmBP;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACnD;;OAEG;IACH,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IAEhD;;;OAGG;gBACS,EACV,WAAW,EACZ,EAAE;QACD,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACjD;CAUF;AAyMD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;;CAStD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE;IAC/C,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,iBAAiB,CAAA;IAClC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,iBAAiB,CAAA;IAClC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD;AA2HD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAEzE"}