@interop/wallet-core 0.61.0 → 0.65.0

package/dist/clientAnnex/recoveryLadderAnchored.js

@@ -5,17 +5,18 @@
  * The transient-recovery continuation -- the ladder-anchored variant of the
  * recovery subpath's `recoverWebvhClient`, split out beside the rest of the
  * annex-anchored ceremonies: a code spent on a non-remembered browser mints
- * no enrolled client, so the fresh credential's ladder VM stands in for one
- * and the account lands client-less and ladder-anchored. The enrolled-client
+ * no enrolled client, and the ladder VM the fresh credential's own bind
+ * publishes is what anchors the account, so it lands client-less and
+ * ladder-anchored. The enrolled-client
  * continuation and the recovery-key inventory edits stay in
  * `recovery/recoveryWebvh.ts`.
  */
 import { deriveNextKeyHash, updateDID } from '@interop/did-method-webvh';
-import { assertCarryOverCommitments, ladderVerificationMethod, MULTIKEY_VM_TYPE, pinOfLog, relationIds, updateKeySigner, withLogConflictRetry } from '../webvh/didWebvh.js';
-import { ladderVmIds } from '../webvh/listClients.js';
+import { assertCarryOverCommitments, ladderVerificationMethod, MULTIKEY_VM_TYPE, publishEntryPinned, readPublishedLogOrThrow, updateKeySigner, withLogConflictRetry } from '../webvh/didWebvh.js';
+import { credentialKeyAgreementMethods, ladderVmIds, relationIds } from '../resourceLog/document.js';
 import { unlockKeyVerificationMethod, unlockKeyVmId } from '../unlock/standingWebvh.js';
-import { publishLogOnly, readLogOrThrow, RecoveryKeyNotCommittedError, recoveryVmId } from '../recovery/recoveryWebvh.js';
-import { ladderRung, ladderVmKeyMultibase } from './ladder.js';
+import { RecoveryKeyNotCommittedError, recoveryVmId, retiredCredentialVmIdsFromLog } from '../recovery/recoveryWebvh.js';
+import { assertNextKeyHashesRemain, attributeRetiredCredentialRungs, ladderRung, ladderVmKeyMultibase, retiredCredentialRungsBeforeKey } from './ladder.js';
 import { clientAnnexDidParts, servicesPointedAtClientAnnex } from './log.js';
 /**
  * THE TRANSIENT-RECOVERY CONTINUATION (run by the code-derived client through
@@ -35,11 +36,27 @@ import { clientAnnexDidParts, servicesPointedAtClientAnnex } from './log.js';
  *    (commitment or verbatim -- the entry the mandatory rotation's recipient
  *    resolver will back the credential's standing wrap with) in; the
  *    replacement code's inventory in; the spent code's VM, update key, and hash
- *    out; and EVERY standing ladder VM out -- the stale-third-party
- *    retirement no other ceremony performs (their revealed update keys and
- *    committed hashes stay: a standing credential keeps its account-ladder
- *    authority, and an unattributable hash cannot be named without its seed).
- *    Rung 0 replaces the spent code's key in `updateKeys`. This same entry
+ *    out; and EVERY pre-recovery standing credential fully retired -- its
+ *    ladder VM and its `keyAgreement` member both struck. The recognition is
+ *    structural on both axes: `ladderVmIds` by the relation asymmetry, and
+ *    `credentialKeyAgreementMethods` by the account-DID controller (an
+ *    enrolled client's key-agreement method carries the client marker
+ *    instead, so enrolled clients keep their pairs). Other unspent recovery
+ *    codes fall under the same rule and are retired too: a code's
+ *    `keyAgreement` member is unmarked and verbatim, indistinguishable from a
+ *    passkey's, and a cold-browser recovery has no way to put the choice to
+ *    the user. Each retired credential's whole update-key inventory goes in
+ *    the same entry: the rung hashes it has standing in `nextKeyHashes`, and
+ *    any rung of its own left revealed in `updateKeys`. The VM strike alone
+ *    would rot only a ladder-signed bridge. A bridge minted by an enrolled
+ *    client -- a passkey added, or a code issued, from a remembered session
+ *    -- signs with that client's account key, and the client survives this
+ *    entry, so the committed rung would stay revealable through it
+ *    (`decisions/0014`). Each credential is anchored from the log alone, its
+ *    bind entry naming rung 0, and an ambiguous one is reported on
+ *    `unclaimedCredentialVmIds` rather than struck. Its bridge stays live but
+ *    inert: nothing revokes it, and it can extend nothing. Rung 0
+ *    replaces the spent code's key in `updateKeys`. This same entry
  *    also points `#DelegatedClients` at the annex generation `onCommitted`
  *    minted. That is what the atomicity buys: the entry retires the
  *    pre-recovery credential's ladder VM, so a pointer written after it would
@@ -84,8 +101,10 @@ import { clientAnnexDidParts, servicesPointedAtClientAnnex } from './log.js';
  * @param options.credentialKeyAgreement {UnlockKeyAgreementPublication}   the
  *   fresh credential's key-agreement publication (a commitment for a
  *   passphrase-derived key)
- * @param options.replacement {RecoveryPublicKeys}   the replacement code's
- *   public halves, committed and published in the same continuation
+ * @param options.replacement {ReplacementRecoveryPublicKeys}   the
+ *   replacement code's public halves -- its key-agreement key, its rung-0
+ *   update key, and its ladder VM key -- committed and published in the same
+ *   continuation
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, where the recovering flow already knows it
  * @param options.onCommitted {function}
@@ -103,8 +122,14 @@ import { clientAnnexDidParts, servicesPointedAtClientAnnex } from './log.js';
  *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
  *   supplied
  * @returns {Promise<object>}   the account DID, the post-continuation
- *   document and log (the rotation's recipient source and anchor), and, when
- *   the add entry ran here, the final `did.json` projection
+ *   document and log (the rotation's recipient source and anchor), the
+ *   `keyAgreement` verification-method ids this entry struck for
+ *   pre-recovery credentials OTHER than the spent code
+ *   (`retiredCredentialVmIds` -- what the caller drops registry entries and
+ *   deletes unlock Spaces for; on a resumed run whose add entry already
+ *   landed it is derived from the log, so the resume reports the same list
+ *   the first run did), and, when the add entry ran here, the final
+ *   `did.json` projection
  */
 export async function recoverWebvhLadderAnchored(options) {
     // The seam is what makes the fresh credential's and replacement code's
@@ -123,33 +148,64 @@ export async function recoverWebvhLadderAnchored(options) {
  * conflict retry.
  *
  * @param options {object}   see {@link recoverWebvhLadderAnchored}
- * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog, webDoc?: object }>}
+ * @returns {Promise<object>}   see {@link recoverWebvhLadderAnchored}
  */
 async function recoverWebvhLadderAnchoredOnce({ store, recovery, ladderSeed, credentialKeyAgreement, replacement, expectedDid, onCommitted, pinStore, logId }) {
     // Each attempt's own read is what the CAS publish is built on, so the
     // continuity check runs here -- and again on a conflict-retry re-run -- not
     // only on the verify that follows both entries.
-    const pinned = {
-        ...(pinStore ? { pinStore } : {}),
-        ...(logId !== undefined ? { logId } : {})
-    };
-    let published = await readLogOrThrow({
-        store,
-        ...(expectedDid !== undefined ? { expectedDid } : {}),
-        ...pinned
+    let published = await readPublishedLogOrThrow({
+        idStore: store,
+        expectedDid,
+        pinStore,
+        logId,
+        missingMessage: 'did:webvh: did.jsonl is missing; nothing to recover.'
     });
     const rung0 = await ladderRung({ ladderSeed, index: 0 });
     const rung1 = await ladderRung({ ladderSeed, index: 1 });
     const ladderVmKey = await ladderVmKeyMultibase({ ladderSeed });
-    // Already complete (a torn earlier run finished the add entry): the fresh
-    // ladder's rung 0 is authorized, which only the add entry writes.
-    if (published.updateKeys.includes(rung0.keyMultibase)) {
-        return { did: published.did, doc: published.doc, log: published.log };
-    }
+    // Derived before the completion check, because a resume recomputes the
+    // strike with the same protected sets the first run used.
     const recoveryHash = await deriveNextKeyHash(recovery.updateKeyMultibase);
     const rung0Hash = await deriveNextKeyHash(rung0.keyMultibase);
     const rung1Hash = await deriveNextKeyHash(rung1.keyMultibase);
     const replacementHash = await deriveNextKeyHash(replacement.updateKeyMultibase);
+    // Already complete (a torn earlier run finished the add entry): the fresh
+    // ladder's rung 0 is authorized, which only the add entry writes.
+    if (published.updateKeys.includes(rung0.keyMultibase)) {
+        // The add entry already struck the pre-recovery credentials, so the
+        // document names none of them any more. The report is derived from the
+        // log instead (`retiredCredentialVmIdsFromLog`), so a resume tells the
+        // caller exactly what the first run told it.
+        const retired = retiredCredentialVmIdsFromLog({
+            log: published.log,
+            did: published.did,
+            successorKeyMultibase: rung0.keyMultibase,
+            spentVmId: recoveryVmId({
+                did: published.did,
+                keyAgreementKeyMultibase: recovery.keyAgreementKeyMultibase
+            })
+        });
+        // The strike is recomputed by re-running it over the log as it stood just
+        // before the add entry, with the same protected sets, so a resume reports
+        // exactly what the first run reported rather than a second definition of
+        // the same question.
+        const strike = await retiredCredentialRungsBeforeKey({
+            log: published.log,
+            authorizedKeyMultibase: rung0.keyMultibase,
+            credentialVmIds: retired,
+            protectedHashes: [rung0Hash, rung1Hash, replacementHash],
+            protectedKeys: [rung0.keyMultibase]
+        });
+        return {
+            did: published.did,
+            doc: published.doc,
+            log: published.log,
+            retiredCredentialVmIds: retired,
+            struckRungHashes: strike.struckHashes,
+            unclaimedCredentialVmIds: strike.unclaimedCredentialVmIds
+        };
+    }
     // The reveal-and-commit entry, skipped when a torn earlier run already
     // published it (the revealed key authorized AND every needed hash
     // committed).
@@ -180,22 +236,23 @@ async function recoverWebvhLadderAnchoredOnce({ store, recovery, ladderSeed, cre
                 ])
             ]
         });
-        await publishLogOnly({
+        // The publish advances the pin to what the reveal entry just published,
+        // so the re-read below (and any read after a tear here) refuses a host
+        // that rolls the log back behind it.
+        await publishEntryPinned({
             store,
             log: updated.log,
-            ifMatch: published.etag
+            ifMatch: published.etag,
+            pinStore,
+            logId
         });
-        // Advance the pin to what the reveal entry just published, so the re-read
-        // below (and any read after a tear here) refuses a host that rolls the
-        // log back behind it.
-        if (pinStore && logId !== undefined) {
-            await pinStore.write({ logId, pin: pinOfLog(updated.log) });
-        }
         // The same account the reveal entry just extended, under the same pin.
-        published = await readLogOrThrow({
-            store,
+        published = await readPublishedLogOrThrow({
+            idStore: store,
             expectedDid: published.did,
-            ...pinned
+            pinStore,
+            logId,
+            missingMessage: 'did:webvh: did.jsonl is missing; nothing to recover.'
         });
     }
     // The persist-before-publish seam: the replacement code's record and the
@@ -206,8 +263,9 @@ async function recoverWebvhLadderAnchoredOnce({ store, recovery, ladderSeed, cre
     clientAnnexDidParts({ did: persisted.clientAnnexDid });
     // The add-and-retire entry: the ladder VM, the fresh credential's
     // keyAgreement inventory, and the replacement code's inventory in; the spent
-    // code's VM, update key, and hash out; every standing ladder VM out. Signed
-    // by rung 0, whose hash the commit entry just committed.
+    // code's VM, update key, and hash out; every pre-recovery standing
+    // credential fully retired -- its ladder VM and its keyAgreement member
+    // both. Signed by rung 0, whose hash the commit entry just committed.
     const { did, doc } = published;
     const spentVmId = recoveryVmId({
         did,
@@ -231,6 +289,41 @@ async function recoverWebvhLadderAnchoredOnce({ store, recovery, ladderSeed, cre
         did,
         keyAgreement: credentialKeyAgreement
     });
+    // Every pre-recovery credential's keyAgreement member, by the account-DID
+    // controller (an enrolled client's carries the client marker instead), less
+    // the ids this entry itself adds. The spent code's own id is reported
+    // separately: the caller already retires that one by name.
+    // The replacement code's ladder VM, published beside its key-agreement
+    // member: a code is a standing credential with a ladder, and its own bridge
+    // delegation is signed by this VM, so a replacement without it could never
+    // spend (`decisions/0019`, `decisions/0020`). Its rung-0 hash is already
+    // committed by the reveal-and-commit entry, which this entry carries
+    // through.
+    const replacementLadderVmId = `${did}#${replacement.ladderVmKeyMultibase}`;
+    const addedVmIds = [
+        ladderVmId,
+        credentialVmId,
+        replacementVmId,
+        replacementLadderVmId
+    ];
+    const struckCredentialVmIds = credentialKeyAgreementMethods({ doc, did })
+        .map(method => method.id)
+        .filter((id) => typeof id === 'string')
+        .filter(id => !addedVmIds.includes(id));
+    const retiredCredentialVmIds = struckCredentialVmIds.filter(id => id !== spentVmId);
+    // Each retired credential's committed rungs and any revealed rung of its
+    // own go in the SAME entry. Striking the VM alone rots a ladder-signed
+    // bridge, but a bridge an enrolled client minted outlives the strike, and
+    // that client survives this entry -- so a committed rung left standing is a
+    // reveal the retired credential could still perform. The anchoring is
+    // log-only (this browser holds no registry), and an unanchorable credential
+    // is reported rather than struck.
+    const strike = await attributeRetiredCredentialRungs({
+        log: published.log,
+        credentialVmIds: retiredCredentialVmIds,
+        protectedHashes: [rung0Hash, rung1Hash, replacementHash],
+        protectedKeys: [rung0.keyMultibase]
+    });
     const addedMethods = [
         ladderVm,
         credentialVm,
@@ -239,16 +332,33 @@ async function recoverWebvhLadderAnchoredOnce({ store, recovery, ladderSeed, cre
             type: MULTIKEY_VM_TYPE,
             controller: did,
             publicKeyMultibase: replacement.keyAgreementKeyMultibase
-        }
+        },
+        ladderVerificationMethod({
+            controller: did,
+            publicKeyMultibase: replacement.ladderVmKeyMultibase
+        })
     ];
     const existingMethods = (doc.verificationMethod ?? []);
     const verificationMethods = [
         ...existingMethods.filter(method => method.id !== spentVmId &&
             !addedMethods.some(added => added.id === method.id) &&
-            (method.id === undefined || !ladderVms.includes(method.id))),
+            (method.id === undefined ||
+                (!ladderVms.includes(method.id) &&
+                    !struckCredentialVmIds.includes(method.id)))),
         ...addedMethods
     ];
-    const withoutRemoved = (relation, added) => [...new Set([...relationIds(relation), ...(added ?? [])])].filter(referencedId => referencedId !== spentVmId && !ladderVms.includes(referencedId));
+    // The retirement filter runs over the EXISTING relation ids only, and the
+    // added ids join afterwards: a resumed run's fresh ladder VM already stands
+    // in `doc.capabilityDelegation`, so filtering the union would strike the
+    // very method this entry is publishing.
+    const withoutRemoved = (relation, added) => [
+        ...new Set([
+            ...relationIds(relation).filter(referencedId => referencedId !== spentVmId &&
+                !ladderVms.includes(referencedId) &&
+                !struckCredentialVmIds.includes(referencedId)),
+            ...(added ?? [])
+        ])
+    ];
     const signer = await updateKeySigner({ seed: rung0.seed });
     const updated = await updateDID({
         log: published.log,
@@ -256,25 +366,33 @@ async function recoverWebvhLadderAnchoredOnce({ store, recovery, ladderSeed, cre
         alsoKnownAsWeb: true,
         updateKeys: [
             ...new Set([
-                ...published.updateKeys.filter(key => key !== recovery.updateKeyMultibase),
+                ...published.updateKeys.filter(key => key !== recovery.updateKeyMultibase &&
+                    !strike.struckKeys.includes(key)),
                 rung0.keyMultibase
             ])
         ],
-        nextKeyHashes: published.nextKeyHashes.filter(hash => hash !== recoveryHash),
+        nextKeyHashes: assertNextKeyHashesRemain({
+            nextKeyHashes: published.nextKeyHashes.filter(hash => hash !== recoveryHash && !strike.struckHashes.includes(hash)),
+            ceremony: 'the transient-recovery add-and-retire entry'
+        }),
         verificationMethods,
         // The ladder VM's relation asymmetry: `assertionMethod` and
         // `capabilityDelegation` only -- no `authentication`, no
         // `capabilityInvocation` -- which is also what keeps it out of every
         // client listing.
         authentication: withoutRemoved(doc.authentication),
-        assertionMethod: withoutRemoved(doc.assertionMethod, [ladderVmId]),
+        assertionMethod: withoutRemoved(doc.assertionMethod, [
+            ladderVmId,
+            replacementLadderVmId
+        ]),
         keyAgreement: withoutRemoved(doc.keyAgreement, [
             credentialVmId,
             replacementVmId
         ]),
         capabilityInvocation: withoutRemoved(doc.capabilityInvocation),
         capabilityDelegation: withoutRemoved(doc.capabilityDelegation, [
-            ladderVmId
+            ladderVmId,
+            replacementLadderVmId
         ]),
         // Atomic with the retirement above: the pointer and the ladder-VM set
         // change in one entry, so no window exists in which the document points
@@ -287,16 +405,20 @@ async function recoverWebvhLadderAnchoredOnce({ store, recovery, ladderSeed, cre
     });
     // Conditional on the read this entry was built on: the re-read above when
     // the commit entry ran here, the first read when it was skipped.
-    await publishLogOnly({ store, log: updated.log, ifMatch: published.etag });
-    // Advance the pin to what this entry just published, so a host rolling the
-    // log back straight afterwards is refused on the next read.
-    if (pinStore && logId !== undefined) {
-        await pinStore.write({ logId, pin: pinOfLog(updated.log) });
-    }
+    await publishEntryPinned({
+        store,
+        log: updated.log,
+        ifMatch: published.etag,
+        pinStore,
+        logId
+    });
     return {
         did: updated.did,
         doc: updated.doc,
         log: updated.log,
+        retiredCredentialVmIds,
+        struckRungHashes: strike.struckHashes,
+        unclaimedCredentialVmIds: strike.unclaimedCredentialVmIds,
         webDoc: updated.webDoc
     };
 }

package/dist/clientAnnex/recoveryLadderAnchored.js.map

@@ -1 +1 @@
-{"version":3,"file":"recoveryLadderAnchored.js","sourceRoot":"","sources":["../../src/clientAnnex/recoveryLadderAnchored.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;GAQG;AACH,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAMxE,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,gBAAgB,EAChB,QAAQ,EACR,WAAW,EACX,eAAe,EACf,oBAAoB,EACrB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AACrD,OAAO,EACL,2BAA2B,EAC3B,aAAa,EAEd,MAAM,4BAA4B,CAAA;AACnC,OAAO,EACL,cAAc,EACd,cAAc,EACd,4BAA4B,EAC5B,YAAY,EAGb,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAC9D,OAAO,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,MAAM,UAAU,CAAA;AAE5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwFG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAUhD;IACC,uEAAuE;IACvE,wEAAwE;IACxE,oEAAoE;IACpE,6DAA6D;IAC7D,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC9C,MAAM,IAAI,SAAS,CACjB,mEAAmE;YACjE,oEAAoE;YACpE,oCAAoC,CACvC,CAAA;IACH,CAAC;IACD,OAAO,oBAAoB,CAAC,GAAG,EAAE,CAAC,8BAA8B,CAAC,OAAO,CAAC,CAAC,CAAA;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,8BAA8B,CAAC,EAC5C,KAAK,EACL,QAAQ,EACR,UAAU,EACV,sBAAsB,EACtB,WAAW,EACX,WAAW,EACX,WAAW,EACX,QAAQ,EACR,KAAK,EAWN;IACC,sEAAsE;IACtE,4EAA4E;IAC5E,gDAAgD;IAChD,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAA;IACD,IAAI,SAAS,GAAG,MAAM,cAAc,CAAC;QACnC,KAAK;QACL,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,MAAM;KACV,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;IACxD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;IACxD,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;IAE9D,0EAA0E;IAC1E,kEAAkE;IAClE,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAA;IACvE,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IACzE,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IAC7D,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IAC7D,MAAM,eAAe,GAAG,MAAM,iBAAiB,CAC7C,WAAW,CAAC,kBAAkB,CAC/B,CAAA;IAED,uEAAuE;IACvE,kEAAkE;IAClE,cAAc;IACd,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IAC3E,MAAM,SAAS,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CACrE,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CACvC,CAAA;IACD,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,4BAA4B,EAAE,CAAA;QAC1C,CAAC;QACD,MAAM,0BAA0B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;QACnE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;YAC9B,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,MAAM;YACN,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE;gBACV,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;aACnE;YACD,qEAAqE;YACrE,iEAAiE;YACjE,aAAa,EAAE;gBACb,GAAG,IAAI,GAAG,CAAC;oBACT,GAAG,SAAS,CAAC,aAAa;oBAC1B,YAAY;oBACZ,SAAS;oBACT,SAAS;oBACT,eAAe;iBAChB,CAAC;aACH;SACF,CAAC,CAAA;QACF,MAAM,cAAc,CAAC;YACnB,KAAK;YACL,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,OAAO,EAAE,SAAS,CAAC,IAAI;SACxB,CAAC,CAAA;QACF,0EAA0E;QAC1E,uEAAuE;QACvE,sBAAsB;QACtB,IAAI,QAAQ,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC7D,CAAC;QACD,uEAAuE;QACvE,SAAS,GAAG,MAAM,cAAc,CAAC;YAC/B,KAAK;YACL,WAAW,EAAE,SAAS,CAAC,GAAG;YAC1B,GAAG,MAAM;SACV,CAAC,CAAA;IACJ,CAAC;IAED,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,SAAS,GAAG,MAAM,WAAW,EAAE,CAAA;IACrC,gEAAgE;IAChE,mBAAmB,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,cAAc,EAAE,CAAC,CAAA;IAEtD,kEAAkE;IAClE,6EAA6E;IAC7E,4EAA4E;IAC5E,yDAAyD;IACzD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,CAAA;IAC9B,MAAM,SAAS,GAAG,YAAY,CAAC;QAC7B,GAAG;QACH,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;KAC5D,CAAC,CAAA;IACF,MAAM,eAAe,GAAG,YAAY,CAAC;QACnC,GAAG;QACH,wBAAwB,EAAE,WAAW,CAAC,wBAAwB;KAC/D,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IACtC,MAAM,QAAQ,GAAG,wBAAwB,CAAC;QACxC,UAAU,EAAE,GAAG;QACf,kBAAkB,EAAE,WAAW;KAChC,CAAC,CAAA;IACF,MAAM,UAAU,GAAG,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;IAC1C,MAAM,YAAY,GAAG,2BAA2B,CAAC;QAC/C,GAAG;QACH,YAAY,EAAE,sBAAsB;KACrC,CAAC,CAAA;IACF,MAAM,cAAc,GAAG,aAAa,CAAC;QACnC,GAAG;QACH,YAAY,EAAE,sBAAsB;KACrC,CAAC,CAAA;IACF,MAAM,YAAY,GAAyB;QACzC,QAAQ;QACR,YAAY;QACZ;YACE,EAAE,EAAE,eAAe;YACnB,IAAI,EAAE,gBAAgB;YACtB,UAAU,EAAE,GAAG;YACf,kBAAkB,EAAE,WAAW,CAAC,wBAAwB;SACzD;KACF,CAAA;IACD,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAyB,CAAA;IAC9E,MAAM,mBAAmB,GAAG;QAC1B,GAAG,eAAe,CAAC,MAAM,CACvB,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,EAAE,KAAK,SAAS;YACvB,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC;YACnD,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAC9D;QACD,GAAG,YAAY;KAChB,CAAA;IACD,MAAM,cAAc,GAAG,CACrB,QAAqD,EACrD,KAAgB,EAChB,EAAE,CACF,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAC/D,YAAY,CAAC,EAAE,CACb,YAAY,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,CAClE,CAAA;IAEH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;IAC1D,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;QAC9B,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,MAAM;QACN,cAAc,EAAE,IAAI;QACpB,UAAU,EAAE;YACV,GAAG,IAAI,GAAG,CAAC;gBACT,GAAG,SAAS,CAAC,UAAU,CAAC,MAAM,CAC5B,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,kBAAkB,CAC3C;gBACD,KAAK,CAAC,YAAY;aACnB,CAAC;SACH;QACD,aAAa,EAAE,SAAS,CAAC,aAAa,CAAC,MAAM,CAC3C,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,YAAY,CAC9B;QACD,mBAAmB;QACnB,4DAA4D;QAC5D,yDAAyD;QACzD,qEAAqE;QACrE,kBAAkB;QAClB,cAAc,EAAE,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC;QAClD,eAAe,EAAE,cAAc,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,UAAU,CAAC,CAAC;QAClE,YAAY,EAAE,cAAc,CAAC,GAAG,CAAC,YAAY,EAAE;YAC7C,cAAc;YACd,eAAe;SAChB,CAAC;QACF,oBAAoB,EAAE,cAAc,CAAC,GAAG,CAAC,oBAAoB,CAAC;QAC9D,oBAAoB,EAAE,cAAc,CAAC,GAAG,CAAC,oBAAoB,EAAE;YAC7D,UAAU;SACX,CAAC;QACF,sEAAsE;QACtE,wEAAwE;QACxE,qDAAqD;QACrD,QAAQ,EAAE,4BAA4B,CAAC;YACrC,GAAG;YACH,UAAU,EAAE,GAAG;YACf,cAAc,EAAE,SAAS,CAAC,cAAc;SACzC,CAAC;KACH,CAAC,CAAA;IACF,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAA;IAC1E,2EAA2E;IAC3E,4DAA4D;IAC5D,IAAI,QAAQ,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAA;AACH,CAAC"}
+{"version":3,"file":"recoveryLadderAnchored.js","sourceRoot":"","sources":["../../src/clientAnnex/recoveryLadderAnchored.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;GASG;AACH,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAMxE,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,EACrB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EACL,6BAA6B,EAC7B,WAAW,EACX,WAAW,EACZ,MAAM,4BAA4B,CAAA;AACnC,OAAO,EACL,2BAA2B,EAC3B,aAAa,EAEd,MAAM,4BAA4B,CAAA;AACnC,OAAO,EACL,4BAA4B,EAC5B,YAAY,EACZ,6BAA6B,EAI9B,MAAM,8BAA8B,CAAA;AACrC,OAAO,EACL,yBAAyB,EACzB,+BAA+B,EAC/B,UAAU,EACV,oBAAoB,EACpB,+BAA+B,EAChC,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,MAAM,UAAU,CAAA;AAE5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgHG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAUhD;IASC,uEAAuE;IACvE,wEAAwE;IACxE,oEAAoE;IACpE,6DAA6D;IAC7D,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC9C,MAAM,IAAI,SAAS,CACjB,mEAAmE;YACjE,oEAAoE;YACpE,oCAAoC,CACvC,CAAA;IACH,CAAC;IACD,OAAO,oBAAoB,CAAC,GAAG,EAAE,CAAC,8BAA8B,CAAC,OAAO,CAAC,CAAC,CAAA;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,8BAA8B,CAAC,EAC5C,KAAK,EACL,QAAQ,EACR,UAAU,EACV,sBAAsB,EACtB,WAAW,EACX,WAAW,EACX,WAAW,EACX,QAAQ,EACR,KAAK,EAWN;IASC,sEAAsE;IACtE,4EAA4E;IAC5E,gDAAgD;IAChD,IAAI,SAAS,GAAG,MAAM,uBAAuB,CAAC;QAC5C,OAAO,EAAE,KAAK;QACd,WAAW;QACX,QAAQ;QACR,KAAK;QACL,cAAc,EAAE,sDAAsD;KACvE,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;IACxD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;IACxD,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;IAC9D,uEAAuE;IACvE,0DAA0D;IAC1D,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IACzE,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IAC7D,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IAC7D,MAAM,eAAe,GAAG,MAAM,iBAAiB,CAC7C,WAAW,CAAC,kBAAkB,CAC/B,CAAA;IAED,0EAA0E;IAC1E,kEAAkE;IAClE,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACtD,oEAAoE;QACpE,uEAAuE;QACvE,uEAAuE;QACvE,6CAA6C;QAC7C,MAAM,OAAO,GAAG,6BAA6B,CAAC;YAC5C,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,qBAAqB,EAAE,KAAK,CAAC,YAAY;YACzC,SAAS,EAAE,YAAY,CAAC;gBACtB,GAAG,EAAE,SAAS,CAAC,GAAG;gBAClB,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;aAC5D,CAAC;SACH,CAAC,CAAA;QACF,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,qBAAqB;QACrB,MAAM,MAAM,GAAG,MAAM,+BAA+B,CAAC;YACnD,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,sBAAsB,EAAE,KAAK,CAAC,YAAY;YAC1C,eAAe,EAAE,OAAO;YACxB,eAAe,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC;YACxD,aAAa,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;SACpC,CAAC,CAAA;QACF,OAAO;YACL,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,sBAAsB,EAAE,OAAO;YAC/B,gBAAgB,EAAE,MAAM,CAAC,YAAY;YACrC,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;SAC1D,CAAA;IACH,CAAC;IAED,uEAAuE;IACvE,kEAAkE;IAClE,cAAc;IACd,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IAC3E,MAAM,SAAS,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CACrE,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CACvC,CAAA;IACD,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,4BAA4B,EAAE,CAAA;QAC1C,CAAC;QACD,MAAM,0BAA0B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;QACnE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;YAC9B,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,MAAM;YACN,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE;gBACV,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;aACnE;YACD,qEAAqE;YACrE,iEAAiE;YACjE,aAAa,EAAE;gBACb,GAAG,IAAI,GAAG,CAAC;oBACT,GAAG,SAAS,CAAC,aAAa;oBAC1B,YAAY;oBACZ,SAAS;oBACT,SAAS;oBACT,eAAe;iBAChB,CAAC;aACH;SACF,CAAC,CAAA;QACF,wEAAwE;QACxE,uEAAuE;QACvE,qCAAqC;QACrC,MAAM,kBAAkB,CAAC;YACvB,KAAK;YACL,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,OAAO,EAAE,SAAS,CAAC,IAAI;YACvB,QAAQ;YACR,KAAK;SACN,CAAC,CAAA;QACF,uEAAuE;QACvE,SAAS,GAAG,MAAM,uBAAuB,CAAC;YACxC,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,SAAS,CAAC,GAAG;YAC1B,QAAQ;YACR,KAAK;YACL,cAAc,EAAE,sDAAsD;SACvE,CAAC,CAAA;IACJ,CAAC;IAED,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,SAAS,GAAG,MAAM,WAAW,EAAE,CAAA;IACrC,gEAAgE;IAChE,mBAAmB,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,cAAc,EAAE,CAAC,CAAA;IAEtD,kEAAkE;IAClE,6EAA6E;IAC7E,mEAAmE;IACnE,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,CAAA;IAC9B,MAAM,SAAS,GAAG,YAAY,CAAC;QAC7B,GAAG;QACH,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;KAC5D,CAAC,CAAA;IACF,MAAM,eAAe,GAAG,YAAY,CAAC;QACnC,GAAG;QACH,wBAAwB,EAAE,WAAW,CAAC,wBAAwB;KAC/D,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IACtC,MAAM,QAAQ,GAAG,wBAAwB,CAAC;QACxC,UAAU,EAAE,GAAG;QACf,kBAAkB,EAAE,WAAW;KAChC,CAAC,CAAA;IACF,MAAM,UAAU,GAAG,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;IAC1C,MAAM,YAAY,GAAG,2BAA2B,CAAC;QAC/C,GAAG;QACH,YAAY,EAAE,sBAAsB;KACrC,CAAC,CAAA;IACF,MAAM,cAAc,GAAG,aAAa,CAAC;QACnC,GAAG;QACH,YAAY,EAAE,sBAAsB;KACrC,CAAC,CAAA;IACF,0EAA0E;IAC1E,4EAA4E;IAC5E,sEAAsE;IACtE,2DAA2D;IAC3D,uEAAuE;IACvE,4EAA4E;IAC5E,2EAA2E;IAC3E,yEAAyE;IACzE,qEAAqE;IACrE,WAAW;IACX,MAAM,qBAAqB,GAAG,GAAG,GAAG,IAAI,WAAW,CAAC,oBAAoB,EAAE,CAAA;IAC1E,MAAM,UAAU,GAAG;QACjB,UAAU;QACV,cAAc;QACd,eAAe;QACf,qBAAqB;KACtB,CAAA;IACD,MAAM,qBAAqB,GAAG,6BAA6B,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SACtE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;SACxB,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC;SACpD,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IACzC,MAAM,sBAAsB,GAAG,qBAAqB,CAAC,MAAM,CACzD,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,SAAS,CACvB,CAAA;IACD,yEAAyE;IACzE,uEAAuE;IACvE,0EAA0E;IAC1E,4EAA4E;IAC5E,sEAAsE;IACtE,4EAA4E;IAC5E,kCAAkC;IAClC,MAAM,MAAM,GAAG,MAAM,+BAA+B,CAAC;QACnD,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,eAAe,EAAE,sBAAsB;QACvC,eAAe,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC;QACxD,aAAa,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;KACpC,CAAC,CAAA;IACF,MAAM,YAAY,GAAyB;QACzC,QAAQ;QACR,YAAY;QACZ;YACE,EAAE,EAAE,eAAe;YACnB,IAAI,EAAE,gBAAgB;YACtB,UAAU,EAAE,GAAG;YACf,kBAAkB,EAAE,WAAW,CAAC,wBAAwB;SACzD;QACD,wBAAwB,CAAC;YACvB,UAAU,EAAE,GAAG;YACf,kBAAkB,EAAE,WAAW,CAAC,oBAAoB;SACrD,CAAC;KACH,CAAA;IACD,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAyB,CAAA;IAC9E,MAAM,mBAAmB,GAAG;QAC1B,GAAG,eAAe,CAAC,MAAM,CACvB,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,EAAE,KAAK,SAAS;YACvB,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC;YACnD,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS;gBACtB,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC7B,CAAC,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CACnD;QACD,GAAG,YAAY;KAChB,CAAA;IACD,0EAA0E;IAC1E,4EAA4E;IAC5E,yEAAyE;IACzE,wCAAwC;IACxC,MAAM,cAAc,GAAG,CACrB,QAAqD,EACrD,KAAgB,EAChB,EAAE,CAAC;QACH,GAAG,IAAI,GAAG,CAAC;YACT,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAC7B,YAAY,CAAC,EAAE,CACb,YAAY,KAAK,SAAS;gBAC1B,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACjC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAChD;YACD,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;SACjB,CAAC;KACH,CAAA;IAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;IAC1D,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;QAC9B,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,MAAM;QACN,cAAc,EAAE,IAAI;QACpB,UAAU,EAAE;YACV,GAAG,IAAI,GAAG,CAAC;gBACT,GAAG,SAAS,CAAC,UAAU,CAAC,MAAM,CAC5B,GAAG,CAAC,EAAE,CACJ,GAAG,KAAK,QAAQ,CAAC,kBAAkB;oBACnC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CACnC;gBACD,KAAK,CAAC,YAAY;aACnB,CAAC;SACH;QACD,aAAa,EAAE,yBAAyB,CAAC;YACvC,aAAa,EAAE,SAAS,CAAC,aAAa,CAAC,MAAM,CAC3C,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CACrE;YACD,QAAQ,EAAE,6CAA6C;SACxD,CAAC;QACF,mBAAmB;QACnB,4DAA4D;QAC5D,yDAAyD;QACzD,qEAAqE;QACrE,kBAAkB;QAClB,cAAc,EAAE,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC;QAClD,eAAe,EAAE,cAAc,CAAC,GAAG,CAAC,eAAe,EAAE;YACnD,UAAU;YACV,qBAAqB;SACtB,CAAC;QACF,YAAY,EAAE,cAAc,CAAC,GAAG,CAAC,YAAY,EAAE;YAC7C,cAAc;YACd,eAAe;SAChB,CAAC;QACF,oBAAoB,EAAE,cAAc,CAAC,GAAG,CAAC,oBAAoB,CAAC;QAC9D,oBAAoB,EAAE,cAAc,CAAC,GAAG,CAAC,oBAAoB,EAAE;YAC7D,UAAU;YACV,qBAAqB;SACtB,CAAC;QACF,sEAAsE;QACtE,wEAAwE;QACxE,qDAAqD;QACrD,QAAQ,EAAE,4BAA4B,CAAC;YACrC,GAAG;YACH,UAAU,EAAE,GAAG;YACf,cAAc,EAAE,SAAS,CAAC,cAAc;SACzC,CAAC;KACH,CAAC,CAAA;IACF,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,kBAAkB,CAAC;QACvB,KAAK;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,SAAS,CAAC,IAAI;QACvB,QAAQ;QACR,KAAK;KACN,CAAC,CAAA;IACF,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,sBAAsB;QACtB,gBAAgB,EAAE,MAAM,CAAC,YAAY;QACrC,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;QACzD,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAA;AACH,CAAC"}

package/dist/clientAnnex/spaceCapability.d.ts

@@ -0,0 +1,123 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * Single-verb Space capabilities: the short-lived children a transient
+ * session mints so it can destroy (or probe) a Space it has no root
+ * invocation over. Two shapes, one mint, both target-exact:
+ *
+ * - Three links, over a stored parent. The parent is the management zcap an
+ *   unlock identity delegated to the account at bind time. The child's
+ *   `invocationTarget` is the parent's own, copied verbatim from the parent's
+ *   bytes rather than rebuilt, so a deployment whose stored parent carries a
+ *   target this client would build differently still lands on the bytes the
+ *   server checks.
+ * - Two links, over a Space's synthesized root. The child's
+ *   `invocationTarget` is the bare Space URL, built with was-client's path
+ *   builders so a sub-path deployment keeps its prefix.
+ *
+ * `allowedAction` is exactly one HTTP verb -- `DELETE` for the deletion
+ * child, `GET` for the probe child -- which is what a storage server's
+ * admission predicate keys on. The delegatee is the caller's: the ladder
+ * VM's bare did:key on a transient session (it re-derives from the ladder
+ * seed and resolves from its own bytes, so it outlives the account log it
+ * was minted beside), the account did:webvh on a remembered one.
+ *
+ * Nothing here is stored. A child is minted immediately before its own
+ * request and dropped; on a torn run it lapses by its short TTL, so no
+ * revocation is owed.
+ *
+ * Two checks stay with the caller rather than here: that the parent's
+ * `controller` is the delegator this client signs as, and that the parent's
+ * target names the Space the caller means on the deployment it is talking
+ * to. The caller holds the deployment URL and the delegator DID; this module
+ * holds neither, and guessing either would rebuild the very bytes the
+ * verbatim copy exists to preserve.
+ */
+import type { IZcap } from '@interop/data-integrity-core';
+import type { ZcapClient } from '@interop/ezcap';
+/**
+ * The single-verb Space capability's lifetime: ten minutes, long enough for
+ * the request it is minted for and twice `@interop/zcap`'s 300-second clock
+ * skew allowance. A child's `expires` is the earlier of this and its
+ * parent's, since the library refuses a child less restrictive than its
+ * parent with no skew allowance.
+ */
+export declare const DELETION_ZCAP_TTL_MS: number;
+/**
+ * The two verbs a single-verb Space capability may carry: the deletion
+ * child's `DELETE` and the probe child's `GET`.
+ */
+export type SpaceCapabilityVerb = 'DELETE' | 'GET';
+/**
+ * The typed refusal of a mint over a parent capability whose own `expires`
+ * has already passed: the child would verify nowhere, so nothing is minted
+ * and nothing is sent. Matched on `name` -- error classes do not survive
+ * crossing package copies. The parent's `expires` and `id` ride the error so
+ * a caller can name the lapsed capability in its own copy without re-reading
+ * the parent.
+ */
+export declare class ExpiredParentCapabilityError extends Error {
+    readonly parentExpires: string;
+    readonly parentId: string | undefined;
+    constructor({ message, parentExpires, parentId }: {
+        message: string;
+        parentExpires: string;
+        parentId: string | undefined;
+    });
+}
+/**
+ * Mints a single-verb child of a STORED parent capability -- the three-link
+ * shape, used on an unlock Space whose management zcap the account already
+ * holds. The child's `invocationTarget` is the parent's unchanged.
+ *
+ * @param options {object}
+ * @param options.zcapClient {ZcapClient}   the delegating signer (the ladder
+ *   VM's client on a transient session, an enrolled client's on a remembered
+ *   one)
+ * @param options.parent {IZcap}   the stored parent capability
+ * @param options.verb {SpaceCapabilityVerb}   the child's one allowed action
+ * @param options.controller {string}   the delegatee DID
+ * @param [options.ttlMs] {number}   the child's requested lifetime
+ * @param [options.now] {number}   the clock the child is minted against
+ *   (epoch milliseconds); a caller holding server-relative time passes it
+ *   so the proof's `created` and the child's `expires` come off one clock
+ * @returns {Promise<IZcap>}
+ */
+export declare function mintSpaceVerbCapability({ zcapClient, parent, verb, controller, ttlMs, now }: {
+    zcapClient: ZcapClient;
+    parent: IZcap;
+    verb: SpaceCapabilityVerb;
+    controller: string;
+    ttlMs?: number;
+    now?: number;
+}): Promise<IZcap>;
+/**
+ * Mints a single-verb child of a Space's SYNTHESIZED ROOT -- the two-link
+ * shape, used on the account Space and an auxiliary annex Space, where the
+ * session holds no stored parent. The child's `invocationTarget` is the bare
+ * Space URL, with no trailing slash, so the deletion child covers the Space
+ * itself rather than its items subtree.
+ *
+ * @param options {object}
+ * @param options.zcapClient {ZcapClient}   the delegating signer
+ * @param options.storageServerUrl {string}   the Space's storage server
+ * @param options.spaceId {string}
+ * @param options.verb {SpaceCapabilityVerb}   the child's one allowed action
+ * @param options.controller {string}   the delegatee DID
+ * @param [options.ttlMs] {number}   the child's requested lifetime
+ * @param [options.now] {number}   the clock the child is minted against
+ *   (epoch milliseconds); a caller holding server-relative time passes it
+ *   so the proof's `created` and the child's `expires` come off one clock
+ * @returns {Promise<IZcap>}
+ */
+export declare function mintSpaceRootVerbCapability({ zcapClient, storageServerUrl, spaceId, verb, controller, ttlMs, now }: {
+    zcapClient: ZcapClient;
+    storageServerUrl: string;
+    spaceId: string;
+    verb: SpaceCapabilityVerb;
+    controller: string;
+    ttlMs?: number;
+    now?: number;
+}): Promise<IZcap>;
+//# sourceMappingURL=spaceCapability.d.ts.map

package/dist/clientAnnex/spaceCapability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spaceCapability.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/spaceCapability.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAGhD;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,QAAiB,CAAA;AAElD;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,KAAK,CAAA;AAElD;;;;;;;GAOG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;gBAEzB,EACV,OAAO,EACP,aAAa,EACb,QAAQ,EACT,EAAE;QACD,OAAO,EAAE,MAAM,CAAA;QACf,aAAa,EAAE,MAAM,CAAA;QACrB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;KAC7B;CAMF;AA+ED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,uBAAuB,CAAC,EAC5C,UAAU,EACV,MAAM,EACN,IAAI,EACJ,UAAU,EACV,KAA4B,EAC5B,GAAgB,EACjB,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,MAAM,EAAE,KAAK,CAAA;IACb,IAAI,EAAE,mBAAmB,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAAC,KAAK,CAAC,CAkBjB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,2BAA2B,CAAC,EAChD,UAAU,EACV,gBAAgB,EAChB,OAAO,EACP,IAAI,EACJ,UAAU,EACV,KAA4B,EAC5B,GAAgB,EACjB,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,mBAAmB,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAAC,KAAK,CAAC,CAajB"}