@interop/wallet-core 0.60.0 → 0.62.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (83) hide show
  1. package/dist/clientAnnex/forgetLast.d.ts +66 -19
  2. package/dist/clientAnnex/forgetLast.d.ts.map +1 -1
  3. package/dist/clientAnnex/forgetLast.js +120 -38
  4. package/dist/clientAnnex/forgetLast.js.map +1 -1
  5. package/dist/clientAnnex/heal.d.ts +64 -29
  6. package/dist/clientAnnex/heal.d.ts.map +1 -1
  7. package/dist/clientAnnex/heal.js +292 -54
  8. package/dist/clientAnnex/heal.js.map +1 -1
  9. package/dist/clientAnnex/index.d.ts +2 -2
  10. package/dist/clientAnnex/index.d.ts.map +1 -1
  11. package/dist/clientAnnex/index.js +2 -2
  12. package/dist/clientAnnex/index.js.map +1 -1
  13. package/dist/clientAnnex/ladder.d.ts +246 -18
  14. package/dist/clientAnnex/ladder.d.ts.map +1 -1
  15. package/dist/clientAnnex/ladder.js +742 -53
  16. package/dist/clientAnnex/ladder.js.map +1 -1
  17. package/dist/clientAnnex/ladderAnchored.d.ts +113 -6
  18. package/dist/clientAnnex/ladderAnchored.d.ts.map +1 -1
  19. package/dist/clientAnnex/ladderAnchored.js +208 -27
  20. package/dist/clientAnnex/ladderAnchored.js.map +1 -1
  21. package/dist/clientAnnex/log.d.ts +37 -1
  22. package/dist/clientAnnex/log.d.ts.map +1 -1
  23. package/dist/clientAnnex/log.js +34 -10
  24. package/dist/clientAnnex/log.js.map +1 -1
  25. package/dist/clientAnnex/recoveryLadderAnchored.d.ts +32 -7
  26. package/dist/clientAnnex/recoveryLadderAnchored.d.ts.map +1 -1
  27. package/dist/clientAnnex/recoveryLadderAnchored.js +124 -23
  28. package/dist/clientAnnex/recoveryLadderAnchored.js.map +1 -1
  29. package/dist/clientAnnex/zcap.js +2 -2
  30. package/dist/clientAnnex/zcap.js.map +1 -1
  31. package/dist/identity/agents.js +2 -2
  32. package/dist/identity/agents.js.map +1 -1
  33. package/dist/keys/index.d.ts +1 -1
  34. package/dist/keys/index.d.ts.map +1 -1
  35. package/dist/keys/index.js +1 -1
  36. package/dist/keys/index.js.map +1 -1
  37. package/dist/keys/userKeyRoster.d.ts +32 -2
  38. package/dist/keys/userKeyRoster.d.ts.map +1 -1
  39. package/dist/keys/userKeyRoster.js +40 -2
  40. package/dist/keys/userKeyRoster.js.map +1 -1
  41. package/dist/recovery/recoveryDelegation.d.ts +4 -1
  42. package/dist/recovery/recoveryDelegation.d.ts.map +1 -1
  43. package/dist/recovery/recoveryDelegation.js +9 -7
  44. package/dist/recovery/recoveryDelegation.js.map +1 -1
  45. package/dist/recovery/recoveryWebvh.d.ts +42 -2
  46. package/dist/recovery/recoveryWebvh.d.ts.map +1 -1
  47. package/dist/recovery/recoveryWebvh.js +160 -18
  48. package/dist/recovery/recoveryWebvh.js.map +1 -1
  49. package/dist/unlock/index.d.ts +2 -2
  50. package/dist/unlock/index.d.ts.map +1 -1
  51. package/dist/unlock/index.js +1 -1
  52. package/dist/unlock/index.js.map +1 -1
  53. package/dist/unlock/retire.d.ts +62 -9
  54. package/dist/unlock/retire.d.ts.map +1 -1
  55. package/dist/unlock/retire.js +59 -5
  56. package/dist/unlock/retire.js.map +1 -1
  57. package/dist/unlock/standingWebvh.d.ts +131 -21
  58. package/dist/unlock/standingWebvh.d.ts.map +1 -1
  59. package/dist/unlock/standingWebvh.js +239 -54
  60. package/dist/unlock/standingWebvh.js.map +1 -1
  61. package/dist/webvh/didWebvh.d.ts +3 -2
  62. package/dist/webvh/didWebvh.d.ts.map +1 -1
  63. package/dist/webvh/didWebvh.js +7 -5
  64. package/dist/webvh/didWebvh.js.map +1 -1
  65. package/dist/webvh/index.d.ts +5 -4
  66. package/dist/webvh/index.d.ts.map +1 -1
  67. package/dist/webvh/index.js +4 -3
  68. package/dist/webvh/index.js.map +1 -1
  69. package/dist/webvh/keyAgreement.d.ts +25 -0
  70. package/dist/webvh/keyAgreement.d.ts.map +1 -1
  71. package/dist/webvh/keyAgreement.js +24 -0
  72. package/dist/webvh/keyAgreement.js.map +1 -1
  73. package/dist/webvh/listClients.d.ts +31 -18
  74. package/dist/webvh/listClients.d.ts.map +1 -1
  75. package/dist/webvh/listClients.js +60 -16
  76. package/dist/webvh/listClients.js.map +1 -1
  77. package/dist/webvh/revokeClient.d.ts +48 -0
  78. package/dist/webvh/revokeClient.d.ts.map +1 -1
  79. package/dist/webvh/revokeClient.js +85 -1
  80. package/dist/webvh/revokeClient.js.map +1 -1
  81. package/dist/webvh/zcap.js +3 -3
  82. package/dist/webvh/zcap.js.map +1 -1
  83. package/package.json +5 -5
@@ -1 +1 @@
1
- {"version":3,"file":"retire.js","sourceRoot":"","sources":["../../src/unlock/retire.ts"],"names":[],"mappings":"AAuEA,OAAO,EACL,gCAAgC,EAKjC,MAAM,kBAAkB,CAAA;AAEzB,OAAO,EAAE,eAAe,EAA2B,MAAM,oBAAoB,CAAA;AAkC7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,EAC3C,OAAO,EACP,UAAU,EACV,UAAU,EACV,UAAU,EACV,WAAW,EACX,IAAI,EACJ,WAAW,EACX,OAAO,EACP,qBAAqB,EACrB,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,0BAA0B,EAC1B,iBAAiB,EAsBlB;IACC,yEAAyE;IACzE,yEAAyE;IACzE,iCAAiC;IACjC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,eAAe,CAAC;QAC9C,OAAO;QACP,UAAU;QACV,UAAU;QACV,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC,CAAA;IAEF,kEAAkE;IAClE,6EAA6E;IAC7E,4EAA4E;IAC5E,wEAAwE;IACxE,8BAA8B;IAC9B,IAAI,WAAuD,CAAA;IAC3D,IAAI,0BAA0B,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,0BAA0B,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAA;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;QACvD,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,uEAAuE;IACvE,6DAA6D;IAC7D,MAAM,IAAI,GAAG,MAAM,gCAAgC,CAAC;QAClD,WAAW;QACX,GAAG;QACH,GAAG;QACH,GAAG;QACH,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,qBAAqB;QACrB,aAAa;QACb,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,WAAW;KACZ,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5C,2EAA2E;QAC3E,wDAAwD;QACxD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,GAAG;YACb,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,CAAA;IACH,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,iBAAiB,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;IACtD,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,GAAG;QACb,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAA;AACH,CAAC"}
1
+ {"version":3,"file":"retire.js","sourceRoot":"","sources":["../../src/unlock/retire.ts"],"names":[],"mappings":"AAiGA,OAAO,EACL,gCAAgC,EAKjC,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EACL,8BAA8B,EAC9B,cAAc,EACd,eAAe,EAGhB,MAAM,oBAAoB,CAAA;AAwC3B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,EAC3C,OAAO,EACP,UAAU,EACV,UAAU,EACV,UAAU,EACV,WAAW,EACX,QAAQ,EACR,KAAK,EACL,IAAI,EACJ,WAAW,EACX,OAAO,EACP,qBAAqB,EACrB,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,sBAAsB,EACtB,0BAA0B,EAC1B,iBAAiB,EA4BlB;IACC,2EAA2E;IAC3E,yEAAyE;IACzE,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,wEAAwE;IACxE,4CAA4C;IAC5C,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAA;IACD,IAAI,gBAAyB,CAAA;IAC7B,IAAI,mBAAyC,CAAA;IAC7C,IAAI,sBAAsB,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC;YACrC,KAAK,EAAE,OAAO;YACd,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,MAAM;SACV,CAAC,CAAA;QACF,MAAM,SAAS,GAAG,MAAM,8BAA8B,CAAC;YACrD,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,UAAU;YACV,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAA;QACF,0EAA0E;QAC1E,mEAAmE;QACnE,oCAAoC;QACpC,mBAAmB,GAAG,SAAS,CAAC,WAAW,CAAA;QAC3C,gBAAgB,GAAG,MAAM,sBAAsB,CAAC;YAC9C,QAAQ,EAAE,SAAS,CAAC,GAAG;YACvB,qBAAqB,EAAE,SAAS,CAAC,WAAW;SAC7C,CAAC,CAAA;IACJ,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,iCAAiC;IACjC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAe,CAAC;QACxD,OAAO;QACP,UAAU;QACV,UAAU;QACV,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,MAAM;QACT,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC,CAAA;IAEF,kEAAkE;IAClE,6EAA6E;IAC7E,4EAA4E;IAC5E,wEAAwE;IACxE,8BAA8B;IAC9B,IAAI,WAAuD,CAAA;IAC3D,IAAI,0BAA0B,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,0BAA0B,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAA;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;QACvD,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,uEAAuE;IACvE,6DAA6D;IAC7D,MAAM,IAAI,GAAG,MAAM,gCAAgC,CAAC;QAClD,WAAW;QACX,GAAG;QACH,GAAG;QACH,GAAG;QACH,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,qBAAqB;QACrB,aAAa;QACb,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,WAAW;KACZ,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5C,2EAA2E;QAC3E,wDAAwD;QACxD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ;YACR,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,GAAG;YACb,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD,CAAA;IACH,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,iBAAiB,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;IACtD,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ;QACR,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,GAAG;QACb,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAA;AACH,CAAC"}
@@ -1,6 +1,7 @@
1
1
  import type { DIDDoc, DIDLog, VerificationMethod } from '@interop/did-method-webvh';
2
2
  import type { ClientWebvhUpdateKeys, PublishedWebvhLog, WebvhIdStore } from '../webvh/didWebvh.js';
3
3
  import type { ResourceLogPinStore } from '@interop/vh-resource-log';
4
+ import { type LadderStandingInventory } from '../clientAnnex/ladder.js';
4
5
  /**
5
6
  * The narrow store seam the self-enrolling and delegated-bridge ceremonies
6
7
  * write through: a public read of the log and the delegated `did.jsonl` PUT.
@@ -8,6 +9,41 @@ import type { ResourceLogPinStore } from '@interop/vh-resource-log';
8
9
  * it too.
9
10
  */
10
11
  export type UnlockLogStore = Pick<WebvhIdStore, 'getIdResourceRaw' | 'putIdResource'>;
12
+ /**
13
+ * The ladder inventory the removal edit resolved from the log diverges from
14
+ * what the caller was told one read earlier. A ceremony that names its
15
+ * expected ladder VM ids (the retirement's stage 0, which hands the same list
16
+ * to the dependent-record re-mint pass) gets this refusal BEFORE the edit is
17
+ * published, so a concurrent ceremony -- or a host serving different log
18
+ * versions to the two reads -- cannot make the strike diverge from what the
19
+ * re-mint pass acted on. Nothing is written. Matched on `name` (the error
20
+ * crosses app-injected seams that may resolve to another copy of this
21
+ * package).
22
+ */
23
+ export declare class LadderInventoryDriftError extends Error {
24
+ readonly expected: string[];
25
+ readonly attributed: string[];
26
+ constructor({ expected, attributed }: {
27
+ expected: string[];
28
+ attributed: string[];
29
+ });
30
+ }
31
+ /**
32
+ * What the removal edit says about ladder VMs: `struck`, the ids this entry
33
+ * removed from the document, and `unclaimed`, the ladder VMs still standing
34
+ * afterwards that this credential's attribution could not claim.
35
+ *
36
+ * `unclaimed` is information rather than a gate, and the caller cannot read
37
+ * an orphan out of it by subtraction alone: a VM standing here may perfectly
38
+ * well be a SIBLING credential's, which this ladder has no business claiming.
39
+ * What it does catch is the seedless strike whose attribution claims nothing
40
+ * -- a retirement that returns clean while the credential's VM stands on --
41
+ * which would otherwise be reported as a completed removal.
42
+ */
43
+ export interface LadderVmRemovalReport {
44
+ struck: string[];
45
+ unclaimed: string[];
46
+ }
11
47
  /**
12
48
  * How a credential's key-agreement key is published in the document: the key
13
49
  * verbatim (a high-entropy credential -- passkey PRF, recovery code), or its
@@ -44,6 +80,33 @@ export declare function unlockKeyVmId({ did, keyAgreement }: {
44
80
  did: string;
45
81
  keyAgreement: UnlockKeyAgreementPublication;
46
82
  }): string;
83
+ /**
84
+ * What of a standing credential's ladder currently stands in the published
85
+ * log, resolved with the recorded update key as ANCHOR and the credential's
86
+ * own key-agreement id as the attribution's second arm. The removal edit uses
87
+ * it to know what to strike; the retirement ceremony uses it one stage
88
+ * earlier, to name the ladder VM it is about to strike to the pass that
89
+ * re-mints whatever that VM signed for other credentials.
90
+ *
91
+ * It lives here rather than in the ceremony because this module is the one
92
+ * base-side holder of the annex attribution helpers (the pinned lint
93
+ * exception).
94
+ *
95
+ * @param options {object}
96
+ * @param options.log {DIDLog} a resolved, caller-verified log
97
+ * @param options.did {string} the account DID the log resolves to
98
+ * @param options.unlockKeys {StandingUnlockKeys} the credential's recorded
99
+ * public inventory
100
+ * @param [options.ladderSeed] {Uint8Array} the credential's ladder seed,
101
+ * when the ceremony holds it
102
+ * @returns {Promise<LadderStandingInventory>}
103
+ */
104
+ export declare function attributeUnlockLadderInventory({ log, did, unlockKeys, ladderSeed }: {
105
+ log: DIDLog;
106
+ did: string;
107
+ unlockKeys: StandingUnlockKeys;
108
+ ladderSeed?: Uint8Array;
109
+ }): Promise<LadderStandingInventory>;
47
110
  /**
48
111
  * The credential's `keyAgreement` verification method: an ordinary unmarked
49
112
  * entry carrying either the key verbatim (a `Multikey` with
@@ -88,12 +151,25 @@ export declare function readLogOrThrow({ store, expectedDid, pinStore, logId }:
88
151
  /**
89
152
  * BIND (run by an enrolled client, root authority): publishes a standing
90
153
  * credential's split configuration into the document -- one entry adding the
91
- * credential's `keyAgreement` entry (verbatim or commitment) and committing
92
- * its current update key's hash in `nextKeyHashes`. The update key joins
93
- * `updateKeys` nowhere. Idempotent: an inventory already published is a no-op,
94
- * so re-running a torn bind converges. The entry publishes conditionally on
95
- * the log this call read; a race lost to a concurrent ceremony re-runs and
96
- * rebases on the new head.
154
+ * credential's `keyAgreement` entry (verbatim or commitment), committing its
155
+ * current update key's hash in `nextKeyHashes`, and installing its LADDER VM
156
+ * under `assertionMethod` and `capabilityDelegation`, and under no other
157
+ * relation -- the asymmetry that recognizes it. The update key joins `updateKeys` nowhere.
158
+ * One entry for the whole inventory: a separate install would open a window
159
+ * in which the credential stands without the key it signs with.
160
+ *
161
+ * The ladder seed is the CALLER's to mint and to have already written
162
+ * durably. This function never mints one, so a torn bind's re-run tests
163
+ * idempotence against the SAME seed, finds the completed stage and publishes
164
+ * nothing -- where a mint-when-absent would publish a second VM that no
165
+ * anchored attribution could later strike. A credential with no ladder at all
166
+ * (a recovery code, whose inventory is one key-agreement method and one
167
+ * update key) passes `null` and gets no VM.
168
+ *
169
+ * Idempotent: an inventory already published is a no-op, so re-running a torn
170
+ * bind converges. The entry publishes conditionally on the log this call
171
+ * read; a race lost to a concurrent ceremony re-runs and rebases on the new
172
+ * head.
97
173
  *
98
174
  * @param options {object}
99
175
  * @param options.idStore {WebvhIdStore}
@@ -101,6 +177,9 @@ export declare function readLogOrThrow({ store, expectedDid, pinStore, logId }:
101
177
  * did:webvh update-key seeds
102
178
  * @param options.unlockKeys {StandingUnlockKeys} the credential's public
103
179
  * inventory
180
+ * @param options.ladderSeed {Uint8Array | null} the credential's ladder
181
+ * seed, whose VM this entry installs; `null` for a credential that carries
182
+ * no ladder
104
183
  * @param [options.expectedDid] {string} the account DID the log must resolve
105
184
  * to, from the caller's stored account pointer
106
185
  * @param [options.pinStore] {ResourceLogPinStore} the caller's chain-head
@@ -120,6 +199,7 @@ export declare function publishUnlockKey(options: {
120
199
  idStore: WebvhIdStore;
121
200
  updateKeys: ClientWebvhUpdateKeys;
122
201
  unlockKeys: StandingUnlockKeys;
202
+ ladderSeed: Uint8Array | null;
123
203
  expectedDid?: string;
124
204
  pinStore?: ResourceLogPinStore;
125
205
  logId?: string;
@@ -146,31 +226,60 @@ export declare function publishUnlockKey(options: {
146
226
  * rung key still sitting in `updateKeys` (plus the never-claimed hashes its
147
227
  * reveal entry committed). Trusting the recorded multibase alone would leave
148
228
  * the live rung commitment standing: a latent re-seizure credential via the
149
- * reveal mechanism. A supplied `ladderSeed` strengthens the attribution (every
150
- * rung known a priori, independent of the anchor's staleness); without it the
151
- * log walk alone resolves the inventory. For a single-key credential (a
229
+ * reveal mechanism. The seedless walk recovers the rungs BEHIND the anchor
230
+ * too, reading the log's positional rules backwards, so an anchor advanced by
231
+ * a self-enrollment resolves the same inventory a bind-time anchor does
232
+ * wherever each rung's hash was committed by an entry that also revealed the
233
+ * previous rung, or by a handover. One reachable shape falls outside that: a
234
+ * ladder VM the last-client transition reinstalled, whose acting rung a later
235
+ * self-enrollment then spends. That reveal-and-commit entry authorizes no key,
236
+ * so the backward walk cannot name the rung that signed it, and the VM stays
237
+ * standing as `unclaimed` (WC-158). A supplied `ladderSeed` is then a shortcut
238
+ * and a cross-check rather than a requirement (every rung known outright, no
239
+ * backward walk). For a
240
+ * single-key credential (a
152
241
  * recovery code, a never-self-enrolled bind) the resolution degenerates to
153
242
  * exactly the recorded key's hash, as before.
154
243
  *
155
- * The seed also names the credential's LADDER VM -- the stable sibling a
156
- * last-client forget's install entry publishes under `assertionMethod` and
157
- * `capabilityDelegation`, left standing by a forget torn after that entry --
158
- * and the removal strikes it in the same entry, so a retired seed no longer
159
- * signs governed-log appends or account delegations. The sibling is derived
160
- * from the seed alone, with nothing in the log attributing it to a ladder, so
161
- * a removal without the seed leaves it: rotation is the remedy for a leaked
162
- * seed exactly when the ceremony holds the credential.
244
+ * The credential's LADDER VM goes in the same entry, so a retired credential
245
+ * no longer signs governed-log appends or account delegations. This is the
246
+ * sole remover, and it needs no seed to do it: the VM is attributed from the
247
+ * log on any of three arms ({@link attributeLadderInventory}). The SIGNER
248
+ * arm claims a VM whose publishing entry a ladder rung signed. The
249
+ * CO-INTRODUCTION arm claims one whose publishing entry also introduced this
250
+ * credential's own `keyAgreement` member, which is what reaches a bind entry
251
+ * an enrolled client signed; it fires only when that entry introduced exactly
252
+ * one credential-class key-agreement member and exactly one ladder VM. The
253
+ * COMMITMENT arm claims one whose publishing entry committed a hash this
254
+ * ladder knows a priori and introduced no other credential's member, which is
255
+ * what reaches a reinstall for a credential whose member already stands. A VM
256
+ * no arm claims is left standing rather than struck -- on an account
257
+ * with several standing credentials, striking an unattributed key would take
258
+ * out a survivor's. With the seed in hand the derived id is struck too, and
259
+ * an attribution naming any OTHER VM refuses with
260
+ * {@link LadderAttributionError} rather than acting on a ladder the seed and
261
+ * the recorded anchor disagree about.
163
262
  *
164
- * @param options {object} see {@link publishUnlockKey}, plus
165
- * `[ladderSeed]` -- the retired credential's ladder seed, when in hand
166
- * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog }>} see
167
- * {@link publishUnlockKey}
263
+ * @param options {object} see {@link publishUnlockKey}, plus:
264
+ * @param [options.ladderSeed] {Uint8Array} the retired credential's ladder
265
+ * seed, when in hand
266
+ * @param [options.expectedLadderVmIds] {string[]} the ladder VM ids the
267
+ * caller already resolved for this credential, from its own read of the
268
+ * log. Supplied, this edit's own attribution must match them as a set --
269
+ * after the seed cross-check above -- or the edit refuses with
270
+ * {@link LadderInventoryDriftError} before writing anything. That is what
271
+ * ties the retirement's stage-0 read (whose list the dependent-record
272
+ * re-mint pass acted on) to this one, which is otherwise independent
273
+ * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog, ladderVm:
274
+ * LadderVmRemovalReport }>} see {@link publishUnlockKey}, plus the ladder
275
+ * VM report: what this entry struck, and what stands unclaimed after it
168
276
  */
169
277
  export declare function removeUnlockKey(options: {
170
278
  idStore: WebvhIdStore;
171
279
  updateKeys: ClientWebvhUpdateKeys;
172
280
  unlockKeys: StandingUnlockKeys;
173
281
  ladderSeed?: Uint8Array;
282
+ expectedLadderVmIds?: string[];
174
283
  expectedDid?: string;
175
284
  pinStore?: ResourceLogPinStore;
176
285
  logId?: string;
@@ -179,5 +288,6 @@ export declare function removeUnlockKey(options: {
179
288
  did: string;
180
289
  doc: DIDDoc;
181
290
  log: DIDLog;
291
+ ladderVm: LadderVmRemovalReport;
182
292
  }>;
183
293
  //# sourceMappingURL=standingWebvh.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"standingWebvh.d.ts","sourceRoot":"","sources":["../../src/unlock/standingWebvh.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EACV,MAAM,EACN,MAAM,EACN,kBAAkB,EACnB,MAAM,2BAA2B,CAAA;AAalC,OAAO,KAAK,EACV,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,EACb,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAYnE;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,IAAI,CAC/B,YAAY,EACZ,kBAAkB,GAAG,eAAe,CACrC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,MAAM,6BAA6B,GACvC;IAAE,kBAAkB,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzD;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,6BAA6B,CAAA;IAC3C,kBAAkB,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,EAC5B,GAAG,EACH,YAAY,EACb,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,6BAA6B,CAAA;CAC5C,GAAG,MAAM,CAMT;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,2BAA2B,CAAC,EAC1C,GAAG,EACH,YAAY,EACb,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,6BAA6B,CAAA;CAC5C,GAAG,kBAAkB,CAgBrB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,cAAc,CAAC,EACnC,KAAK,EACL,WAAW,EACX,QAAQ,EACR,KAAK,EACN,EAAE;IACD,KAAK,EAAE,cAAc,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAY7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE;IAC9C,OAAO,EAAE,YAAY,CAAA;IACrB,UAAU,EAAE,qBAAqB,CAAA;IACjC,UAAU,EAAE,kBAAkB,CAAA;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE;IAC7C,OAAO,EAAE,YAAY,CAAA;IACrB,UAAU,EAAE,qBAAqB,CAAA;IACjC,UAAU,EAAE,kBAAkB,CAAA;IAC9B,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD"}
1
+ {"version":3,"file":"standingWebvh.d.ts","sourceRoot":"","sources":["../../src/unlock/standingWebvh.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EACV,MAAM,EACN,MAAM,EACN,kBAAkB,EACnB,MAAM,2BAA2B,CAAA;AAclC,OAAO,KAAK,EACV,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,EACb,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAMnE,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,0BAA0B,CAAA;AAEjC;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,IAAI,CAC/B,YAAY,EACZ,kBAAkB,GAAG,eAAe,CACrC,CAAA;AAED;;;;;;;;;;GAUG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,CAAA;gBAEjB,EACV,QAAQ,EACR,UAAU,EACX,EAAE;QACD,QAAQ,EAAE,MAAM,EAAE,CAAA;QAClB,UAAU,EAAE,MAAM,EAAE,CAAA;KACrB;CAYF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,6BAA6B,GACvC;IAAE,kBAAkB,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzD;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,6BAA6B,CAAA;IAC3C,kBAAkB,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,EAC5B,GAAG,EACH,YAAY,EACb,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,6BAA6B,CAAA;CAC5C,GAAG,MAAM,CAMT;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,8BAA8B,CAAC,EACnD,GAAG,EACH,GAAG,EACH,UAAU,EACV,UAAU,EACX,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,kBAAkB,CAAA;IAC9B,UAAU,CAAC,EAAE,UAAU,CAAA;CACxB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAUnC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,2BAA2B,CAAC,EAC1C,GAAG,EACH,YAAY,EACb,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,6BAA6B,CAAA;CAC5C,GAAG,kBAAkB,CAgBrB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,cAAc,CAAC,EACnC,KAAK,EACL,WAAW,EACX,QAAQ,EACR,KAAK,EACN,EAAE;IACD,KAAK,EAAE,cAAc,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAY7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE;IAC9C,OAAO,EAAE,YAAY,CAAA;IACrB,UAAU,EAAE,qBAAqB,CAAA;IACjC,UAAU,EAAE,kBAAkB,CAAA;IAC9B,UAAU,EAAE,UAAU,GAAG,IAAI,CAAA;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE;IAC7C,OAAO,EAAE,YAAY,CAAA;IACrB,UAAU,EAAE,qBAAqB,CAAA;IACjC,UAAU,EAAE,kBAAkB,CAAA;IAC9B,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC;IACV,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,qBAAqB,CAAA;CAChC,CAAC,CAID"}