@interop/wallet-core 0.61.0 → 0.65.0

package/dist/recovery/recoveryWebvh.js

@@ -2,29 +2,33 @@
  * Copyright (c) 2026 Interop Alliance. All rights reserved.
  */
 /**
- * The did:webvh half of recovery-code lifecycle: the split configuration the
- * roster identity model gives a code. At issuance the document gains the
- * code's `keyAgreement` verification method (an ordinary Multikey entry --
- * deliberately unmarked; a recovery key is distinguishable structurally,
- * since it appears ONLY under `keyAgreement` while every enrolled client
- * also publishes signing relationships, so client listings key on
- * `capabilityInvocation` and never see it) and `nextKeyHashes` gains the
- * code's update-key hash -- decryption standing, authority latent: the
- * code's update key joins `updateKeys` nowhere, and its material exists
- * nowhere until the code is typed.
+ * The did:webvh half of recovery-code lifecycle: the split configuration a
+ * code holds as a standing unlock credential that retires on spend. At
+ * issuance the document gains the code's `keyAgreement` verification method
+ * (an ordinary Multikey entry -- deliberately unmarked; a recovery key is
+ * distinguishable structurally, since it appears under `keyAgreement` and
+ * `assertionMethod`/`capabilityDelegation` while every enrolled client also
+ * publishes an invocation relationship, so client listings key on
+ * `capabilityInvocation` and never see it), the code's ladder VM, and its
+ * rung-0 hash in `nextKeyHashes` -- decryption and delegation standing,
+ * update authority latent: rung 0 joins `updateKeys` nowhere, and every key
+ * of the set exists nowhere until the code is typed.
  *
- * At recovery time the pre-committed update key reveals itself to sign the
+ * At recovery time the pre-committed rung 0 reveals itself to sign the
  * self-enrolling continuation, two entries:
  *
- * 1. **Reveal + commit**: the code's update key joins `updateKeys` (its hash
- *    stands committed since issuance, which is what makes the entry verify)
- *    and `nextKeyHashes` extends with the NEW ordinary client's update- and
- *    staged-key hashes plus the replacement code's update-key hash.
+ * 1. **Reveal + commit**: rung 0 joins `updateKeys` (its hash stands
+ *    committed since issuance, which is what makes the entry verify -- the
+ *    ordinary ladder reveal) and `nextKeyHashes` extends with the NEW
+ *    ordinary client's update- and staged-key hashes plus the replacement
+ *    code's rung-0 hash.
  * 2. **Add + retire**: signed by the new client's update key (revealed from
  *    the commit), this entry publishes the new client's verification methods
- *    and update key, removes the spent code's `keyAgreement` VM, publishes
- *    the replacement code's, and drops the spent code's update key and hash
- *    -- so no recovery authority stands afterwards.
+ *    and update key, removes the spent code's `keyAgreement` VM and its
+ *    ladder VM (with every other standing credential's, by the relation
+ *    asymmetry), publishes the replacement code's inventory, and drops the
+ *    spent code's revealed rung and its hash -- so no recovery authority
+ *    stands afterwards.
  *
  * Both entries are written through the caller's store seam; the recovery
  * continuation publishes ONLY `did.jsonl` (the delegation the record carries
@@ -34,8 +38,53 @@
  * with the same key material converges without forking the log.
  */
 import { deriveNextKeyHash, updateDID } from '@interop/did-method-webvh';
-import { assertCanonicalClientKeys, assertCarryOverCommitments, markedVerificationMethodPair, MULTIKEY_VM_TYPE, pinOfLog, putLogResource, readPublishedLog, relationIds, servedHead, updateKeySigner, withLogConflictRetry } from '../webvh/didWebvh.js';
+import { assertCanonicalClientKeys, assertCarryOverCommitments, effectiveParameters, ladderVerificationMethod, markedVerificationMethodPair, MULTIKEY_VM_TYPE, publishEntryPinned, readPublishedLogOrThrow, servedHead, updateKeySigner, withLogConflictRetry } from '../webvh/didWebvh.js';
 import { publishUnlockKey, removeUnlockKey } from '../unlock/standingWebvh.js';
+import { credentialKeyAgreementMethods, ladderVmIds, relationIds } from '../resourceLog/document.js';
+// The base-side dependency the lint config pins: the ladder ATTRIBUTION
+// helpers only, never the annex log machinery. The add-and-retire entry
+// resolves each retired credential's standing rungs from the log with them.
+import { assertNextKeyHashesRemain, attributeRetiredCredentialRungs, retiredCredentialRungsBeforeKey } from '../clientAnnex/ladder.js';
+/**
+ * What the add-and-retire entry retired, read back OFF THE LOG -- the resumed
+ * spend's answer to the same question the live run answers from the document
+ * it is editing. A run torn after that entry but before the caller's registry
+ * and unlock-Space teardown resumes into the already-complete branch, and
+ * without this it would be told nothing was retired and leave every other
+ * credential's registry entry standing.
+ *
+ * The entry is located by its own signature on the log: it is the first entry
+ * whose effective `updateKeys` authorize the successor key (the fresh
+ * ladder's rung 0 on the transient continuation, the new client's update key
+ * on the remembered one), which only that entry writes. What it retired is
+ * then the credential-class `keyAgreement` ids its predecessor published and
+ * it does not, less the spent code's own id -- the same exclusion the live
+ * branch makes, since the caller retires that one by name.
+ *
+ * @param options {object}
+ * @param options.log {DIDLog}   the verified account log
+ * @param options.did {string}   the account DID the log resolves to
+ * @param options.successorKeyMultibase {string}   the update key only the
+ *   add-and-retire entry authorizes
+ * @param options.spentVmId {string}   the spent code's key-agreement
+ *   verification-method id, excluded from the result
+ * @returns {string[]}   the retired credentials' key-agreement ids, empty
+ *   when no entry authorizes the successor key or it is the genesis entry
+ */
+export function retiredCredentialVmIdsFromLog({ log, did, successorKeyMultibase, spentVmId }) {
+    const params = effectiveParameters(log);
+    const index = params.findIndex(entry => (entry.updateKeys ?? []).includes(successorKeyMultibase));
+    const previous = index > 0 ? log[index - 1]?.state : undefined;
+    const entryDoc = index > 0 ? log[index]?.state : undefined;
+    if (previous === undefined || entryDoc === undefined) {
+        return [];
+    }
+    const standing = new Set(credentialKeyAgreementMethods({ doc: entryDoc, did }).map(method => method.id));
+    return credentialKeyAgreementMethods({ doc: previous, did })
+        .map(method => method.id)
+        .filter((id) => typeof id === 'string')
+        .filter(id => !standing.has(id) && id !== spentVmId);
+}
 /**
  * The verification-method id a code's key-agreement key publishes under --
  * the ordinary `<did>#<multibase>` form, indistinguishable by id from any
@@ -64,64 +113,33 @@ export class RecoveryKeyNotCommittedError extends Error {
     }
 }
 /**
- * Reads and resolves the published log through the narrow recovery seam.
- *
- * @param options {object}
- * @param options.store {RecoveryLogStore}
- * @param [options.expectedDid] {string}   the account DID the log must resolve
- *   to, where the caller holds one
- * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
- *   pins; a served log that is a rollback, a fork, or an identity switch
- *   against the pinned head is refused (`ResourceLogContinuityError`)
- * @param [options.logId] {string}   the account log's pin slot
- *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
- *   supplied
- * @returns {Promise<PublishedWebvhLog>}
- */
-export async function readLogOrThrow({ store, expectedDid, pinStore, logId }) {
-    // readPublishedLog only calls getIdResourceRaw, so the narrow seam is safe.
-    const published = await readPublishedLog({
-        idStore: store,
-        ...(expectedDid !== undefined ? { expectedDid } : {}),
-        ...(pinStore ? { pinStore } : {}),
-        ...(logId !== undefined ? { logId } : {})
-    });
-    if (!published) {
-        throw new Error('did:webvh: did.jsonl is missing; nothing to recover.');
-    }
-    return published;
-}
-/**
- * Publishes `did.jsonl` through the narrow recovery seam -- the log only,
- * never `did.json` (the delegation covers nothing else; the recovered
- * session republishes the projection once it is the controller). The write is
- * conditional on the read the entry was built on, and a lost race surfaces as
- * a `WebvhLogConflictError` (the mapping lives in `putLogResource`).
+ * ISSUANCE: publishes a recovery code's split configuration into the
+ * document -- the code's `keyAgreement` verification method (an ordinary,
+ * unmarked Multikey entry, the key published verbatim: a code is
+ * high-entropy, so no commitment is needed), its rung-0 hash committed in
+ * `nextKeyHashes`, and its ladder VM. The code's update key joins
+ * `updateKeys` nowhere. A thin wrapper over the
+ * standing unlock-key inventory core ({@link publishUnlockKey}), which owns
+ * idempotence and the conditional publish.
  *
- * @param options {object}
- * @param options.store {RecoveryLogStore}
- * @param options.log {DIDLog}
- * @param [options.ifMatch] {string}   publish only if `did.jsonl` is unchanged
- * @returns {Promise<void>}
- */
-export async function publishLogOnly({ store, log, ifMatch }) {
-    await putLogResource({ store, log, ifMatch });
-}
-/**
- * ISSUANCE (run by an enrolled client, root authority): publishes a recovery
- * code's split configuration into the document -- one entry adding the code's
- * `keyAgreement` verification method (an ordinary, unmarked Multikey entry,
- * the key published verbatim: a code is high-entropy, so no commitment is
- * needed) and committing its update-key hash in `nextKeyHashes`. The code's
- * update key joins `updateKeys` nowhere. A thin wrapper over the standing
- * unlock-key inventory core ({@link publishUnlockKey}), which owns idempotence
- * and the conditional publish.
+ * `part` is how the ladder branch splits the entry so the code's decryption
+ * material precedes its authority: a key entry (`'key'`), then the escrow,
+ * then an authority entry (`'authority'`) carrying the ladder VM and the
+ * rung-0 commitment. An enrolled client's issuance escrows before the entry
+ * and writes the merged `'all'` entry.
  *
  * @param options {object}
  * @param options.idStore {WebvhIdStore}
- * @param options.updateKeys {ClientWebvhUpdateKeys}   the ISSUING client's
- *   own did:webvh update-key seeds
+ * @param options.signer {AccountLogSigner}   who signs the entry: the ISSUING
+ *   client's own did:webvh update-key seeds, or the acting credential's
+ *   ladder seed
  * @param options.recovery {RecoveryPublicKeys}   the code's public halves
+ * @param options.ladderSeed {Uint8Array}   the code's OWN ladder seed,
+ *   derived from the code bytes (`recoveryClientFromCode`). The entry
+ *   installs that ladder's VM, and `recovery.updateKeyMultibase` is its
+ *   rung 0
+ * @param [options.part] {string}   `'all'` (the default), `'key'`, or
+ *   `'authority'` -- see above
  * @param [options.expectedDid] {string}   the account DID the log must
  *   resolve to, from the caller's stored account pointer
  * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
@@ -133,16 +151,20 @@ export async function publishLogOnly({ store, log, ifMatch }) {
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog }>}   the account
  *   DID and the document and log as this call leaves them
  */
-export async function publishRecoveryKey({ idStore, updateKeys, recovery, expectedDid, pinStore, logId }) {
+export async function publishRecoveryKey({ idStore, signer, recovery, ladderSeed, part, expectedDid, pinStore, logId }) {
     return publishUnlockKey({
         idStore,
-        updateKeys,
+        signer,
         unlockKeys: {
             keyAgreement: {
                 publicKeyMultibase: recovery.keyAgreementKeyMultibase
             },
             updateKeyMultibase: recovery.updateKeyMultibase
         },
+        // Every code carries a ladder, so the authority half of its inventory is
+        // that ladder's VM beside the rung-0 commitment.
+        ladderSeed,
+        ...(part !== undefined ? { part } : {}),
         ...(expectedDid !== undefined ? { expectedDid } : {}),
         ...(pinStore ? { pinStore } : {}),
         ...(logId !== undefined ? { logId } : {}),
@@ -150,27 +172,48 @@ export async function publishRecoveryKey({ idStore, updateKeys, recovery, expect
     });
 }
 /**
- * REVOCATION (run by an enrolled client, root authority): removes a recovery
- * code's inventory from the document -- its `keyAgreement` verification method
- * and its committed update-key hash -- in one entry, through the same shared
- * inventory core ({@link removeUnlockKey}). The roster-side half (rotating the
- * user key epoch off the code's wrap) is the caller's, and runs after this so
- * the resolver's document no longer backs the removed entry.
+ * REVOCATION: removes a recovery code's whole inventory from the document --
+ * its `keyAgreement` verification method, its committed rung-0 hash, and its
+ * ladder VM -- in one entry, through the same shared inventory core
+ * ({@link removeUnlockKey}). The roster-side half (rotating the user key
+ * epoch off the code's wrap) is the caller's, and runs after this so the
+ * resolver's document no longer backs the removed entry.
  *
- * @param options {object}   see {@link publishRecoveryKey}
+ * The revoker holds neither the code bytes nor its ladder seed, so the VM
+ * claim is seedless: the removal attributes it from the log, anchored on the
+ * rung-0 update-key multibase the registry recorded at issuance
+ * (`recovery.updateKeyMultibase`). The claim is required rather than
+ * best-effort. A VM no attribution arm claims refuses the whole revocation
+ * with `UnclaimedLadderVmRetirementError` before anything is written, since a
+ * standing ladder VM whose credential is otherwise retired keeps its
+ * delegation authority -- including the DELETE-only capability on the account
+ * Space that the account-deletion ceremony mints.
+ *
+ * @param options {object}   see {@link publishRecoveryKey}, except that
+ *   `ladderSeed` is optional here: a revoking client does not hold it, and
+ *   the code's own holder is the only party who can supply it
+ * @param [options.projectionStore] {object}   an `id`-collection store the
+ *   caller may write through, passed straight to the inventory edit: the
+ *   post-strike `did:web` projection is PUT through it immediately before
+ *   that entry publishes, so a ladder-signed revocation does not leave
+ *   `did.json` naming the revoked code. Best-effort, and omitted the
+ *   behavior is unchanged (see `removeUnlockKey`)
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog }>}   see
  *   {@link publishRecoveryKey}
  */
-export async function removeRecoveryKey({ idStore, updateKeys, recovery, expectedDid, pinStore, logId }) {
+export async function removeRecoveryKey({ idStore, signer, recovery, ladderSeed, projectionStore, expectedDid, pinStore, logId }) {
     return removeUnlockKey({
         idStore,
-        updateKeys,
+        signer,
         unlockKeys: {
             keyAgreement: {
                 publicKeyMultibase: recovery.keyAgreementKeyMultibase
             },
             updateKeyMultibase: recovery.updateKeyMultibase
         },
+        ...(ladderSeed ? { ladderSeed } : {}),
+        ...(projectionStore ? { projectionStore } : {}),
+        requireLadderVmClaim: true,
         ...(expectedDid !== undefined ? { expectedDid } : {}),
         ...(pinStore ? { pinStore } : {}),
         ...(logId !== undefined ? { logId } : {}),
@@ -203,8 +246,10 @@ export async function removeRecoveryKey({ idStore, updateKeys, recovery, expecte
  * @param options.newClientUpdateSeeds {ClientWebvhUpdateKeys}   the new
  *   client's update-key seeds (minted by the recovery flow, which therefore
  *   holds them and can sign the add entry)
- * @param options.replacement {RecoveryPublicKeys}   the replacement code's
- *   public halves, committed and published in the same continuation
+ * @param options.replacement {ReplacementRecoveryPublicKeys}   the
+ *   replacement code's public halves -- its key-agreement key, its rung-0
+ *   update key, and its ladder VM key -- committed and published in the same
+ *   continuation
  * @param options.onCommitted {function}
  *   `(committed: { builtOnHead: { scid, versionId } }) => Promise<void>` --
  *   the REQUIRED persist-before-publish seam. It runs once per attempt, after
@@ -242,7 +287,7 @@ export async function removeRecoveryKey({ idStore, updateKeys, recovery, expecte
  * @param [options.logId] {string}   the account log's pin slot
  *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
  *   supplied
- * @returns {Promise<{ did: string, webDoc?: object, committed: boolean }>}
+ * @returns {Promise<object>}
  *   the account DID, the final `did.json` projection when the add-and-retire
  *   entry ran here, and `committed` -- whether THIS call published the pivot
  *   entry (`false` exactly on the idempotent completed branch, where a torn
@@ -250,7 +295,12 @@ export async function removeRecoveryKey({ idStore, updateKeys, recovery, expecte
  *   a success flag: a returning call means the continuation stands either
  *   way, so a caller clears its pending state on the RETURN, whatever
  *   `committed` says. Its absence from a return value is a build skew, which
- *   is why it is stated rather than inferred
+ *   is why it is stated rather than inferred.
+ *   `retiredCredentialVmIds` lists the `keyAgreement` verification-method ids
+ *   this entry struck for pre-recovery credentials OTHER than the spent code
+ *   -- what the caller drops registry entries and deletes unlock Spaces for.
+ *   On the completed branch, whose entry already landed, it is derived from
+ *   the log, so a resume reports the same list the first run did
  */
 export async function recoverWebvhClient(options) {
     // The seam is what gets the successor material persisted before the pivot
@@ -274,7 +324,7 @@ export async function recoverWebvhClient(options) {
  * One attempt of {@link recoverWebvhClient}, re-invoked by the conflict retry.
  *
  * @param options {object}   see {@link recoverWebvhClient}
- * @returns {Promise<{ did: string, webDoc?: object, committed: boolean }>}
+ * @returns {Promise<object>}   see {@link recoverWebvhClient}
  */
 async function recoverWebvhClientOnce({ store, recovery, newClientKeys, newClientUpdateSeeds, replacement, onCommitted, expectedDid, pinStore, logId }) {
     // Each attempt's own read is what the CAS publish is built on, so the
@@ -284,22 +334,55 @@ async function recoverWebvhClientOnce({ store, recovery, newClientKeys, newClien
         ...(pinStore ? { pinStore } : {}),
         ...(logId !== undefined ? { logId } : {})
     };
-    let published = await readLogOrThrow({
-        store,
+    let published = await readPublishedLogOrThrow({
+        idStore: store,
         ...(expectedDid !== undefined ? { expectedDid } : {}),
-        ...pinned
+        ...pinned,
+        missingMessage: 'did:webvh: did.jsonl is missing; nothing to recover.'
     });
+    // Derived before the completion check, because a resume recomputes the
+    // strike with the same protected sets the first run used.
+    const recoveryHash = await deriveNextKeyHash(recovery.updateKeyMultibase);
+    const newUpdateHash = await deriveNextKeyHash(newClientKeys.updateKeyMultibase);
+    const newStagedHash = await deriveNextKeyHash(newClientKeys.stagedUpdateKeyMultibase);
+    const replacementHash = await deriveNextKeyHash(replacement.updateKeyMultibase);
     // Already complete (a torn earlier run finished the add entry): the new
     // client's update key is authorized, which only the add entry writes. The
     // seam is deliberately NOT entered here -- nothing is about to be
     // published, so there is no pivot to persist ahead of.
     if (published.updateKeys.includes(newClientKeys.updateKeyMultibase)) {
-        return { did: published.did, committed: false };
+        // The add entry already struck the pre-recovery credentials, so the
+        // document names none of them any more. The report is derived from the
+        // log instead ({@link retiredCredentialVmIdsFromLog}), so a resume tells
+        // the caller exactly what the first run told it.
+        const retired = retiredCredentialVmIdsFromLog({
+            log: published.log,
+            did: published.did,
+            successorKeyMultibase: newClientKeys.updateKeyMultibase,
+            spentVmId: recoveryVmId({
+                did: published.did,
+                keyAgreementKeyMultibase: recovery.keyAgreementKeyMultibase
+            })
+        });
+        // The strike is recomputed by re-running it over the log as it stood just
+        // before the add entry, with the same protected sets, so a resume reports
+        // exactly what the first run reported rather than a second definition of
+        // the same question.
+        const strike = await retiredCredentialRungsBeforeKey({
+            log: published.log,
+            authorizedKeyMultibase: newClientKeys.updateKeyMultibase,
+            credentialVmIds: retired,
+            protectedHashes: [newUpdateHash, newStagedHash, replacementHash],
+            protectedKeys: [newClientKeys.updateKeyMultibase]
+        });
+        return {
+            did: published.did,
+            committed: false,
+            retiredCredentialVmIds: retired,
+            struckRungHashes: strike.struckHashes,
+            unclaimedCredentialVmIds: strike.unclaimedCredentialVmIds
+        };
     }
-    const recoveryHash = await deriveNextKeyHash(recovery.updateKeyMultibase);
-    const newUpdateHash = await deriveNextKeyHash(newClientKeys.updateKeyMultibase);
-    const newStagedHash = await deriveNextKeyHash(newClientKeys.stagedUpdateKeyMultibase);
-    const replacementHash = await deriveNextKeyHash(replacement.updateKeyMultibase);
     // The reveal-and-commit entry, skipped when a torn earlier run already
     // published it (the revealed key authorized AND every needed hash
     // committed).
@@ -330,22 +413,21 @@ async function recoverWebvhClientOnce({ store, recovery, newClientKeys, newClien
                 ])
             ]
         });
-        await publishLogOnly({
+        // The pin advances with the publish, so the re-read below (and any read
+        // after a tear here) refuses a host that rolls the log back behind the
+        // reveal entry.
+        await publishEntryPinned({
             store,
             log: updated.log,
-            ifMatch: published.etag
+            ifMatch: published.etag,
+            ...pinned
         });
-        // Advance the pin to what the reveal entry just published, so the re-read
-        // below (and any read after a tear here) refuses a host that rolls the
-        // log back behind it.
-        if (pinStore && logId !== undefined) {
-            await pinStore.write({ logId, pin: pinOfLog(updated.log) });
-        }
         // The same account the reveal entry just extended, under the same pin.
-        published = await readLogOrThrow({
-            store,
+        published = await readPublishedLogOrThrow({
+            idStore: store,
             expectedDid: published.did,
-            ...pinned
+            ...pinned,
+            missingMessage: 'did:webvh: did.jsonl is missing; nothing to recover.'
         });
     }
     // The persist-before-publish seam: the successor material is persisted
@@ -355,9 +437,12 @@ async function recoverWebvhClientOnce({ store, recovery, newClientKeys, newClien
     // above, or a torn earlier run's reveal entry standing already.
     await onCommitted({ builtOnHead: servedHead(published.log) });
     // The add-and-retire entry: the new client's verification methods and
-    // update key in; the spent code's VM, update key, and hash out; the
-    // replacement code's VM in. Signed by the new client's update key, whose
-    // hash the commit entry just committed.
+    // update key in; the replacement code's VM in; every pre-recovery standing
+    // credential fully retired -- the spent code by name, and every other one
+    // by the same structural rule the transient continuation uses (its ladder
+    // VM by the relation asymmetry, its keyAgreement member by the account-DID
+    // controller). Signed by the new client's update key, whose hash the commit
+    // entry just committed.
     const { did, doc } = published;
     const vmId = (publicKeyMultibase) => `${did}#${publicKeyMultibase}`;
     const spentVmId = recoveryVmId({
@@ -376,6 +461,13 @@ async function recoverWebvhClientOnce({ store, recovery, newClientKeys, newClien
     // through the shared builder, which refuses a new client whose key-agreement
     // key is not its signing key's canonical twin; the replacement code's
     // unmarked method is appended after it.
+    // The replacement code's ladder VM, published in the same entry as its
+    // key-agreement member: a code is a standing credential with a ladder, and
+    // its own bridge delegation is signed by this VM, so a replacement without
+    // it could never spend (`decisions/0019`, `decisions/0020`). Its rung-0
+    // hash needs nothing here -- the reveal-and-commit entry committed it, and
+    // this entry carries it through.
+    const replacementLadderVmId = vmId(replacement.ladderVmKeyMultibase);
     const addedMethods = [
         ...markedVerificationMethodPair({
             controller: did,
@@ -387,15 +479,61 @@ async function recoverWebvhClientOnce({ store, recovery, newClientKeys, newClien
             type: MULTIKEY_VM_TYPE,
             controller: did,
             publicKeyMultibase: replacement.keyAgreementKeyMultibase
-        }
+        },
+        ladderVerificationMethod({
+            controller: did,
+            publicKeyMultibase: replacement.ladderVmKeyMultibase
+        })
     ];
+    // The full retirement, recognized structurally rather than from a list the
+    // caller supplies: every standing ladder VM, and every keyAgreement member
+    // the account DID controls, less the ids this entry itself adds. Other
+    // unspent recovery codes retire with the rest -- a code's member is
+    // unmarked and verbatim, indistinguishable from a passkey's. Each retired
+    // credential's committed rungs and revealed rungs go in the same entry (see
+    // the strike below and `decisions/0014`), because striking the VM rots only
+    // a ladder-signed bridge and a bridge an enrolled client minted outlives
+    // this entry. The bridge itself stays live but inert; nothing revokes it.
+    // The new client's marked pair and the KMS
+    // convenience key are untouched -- neither is account-DID-controlled
+    // keyAgreement.
+    const ladderVms = ladderVmIds({ doc });
+    const addedVmIds = addedMethods
+        .map(method => method.id)
+        .filter((id) => typeof id === 'string');
+    const struckCredentialVmIds = credentialKeyAgreementMethods({ doc, did })
+        .map(method => method.id)
+        .filter((id) => typeof id === 'string')
+        .filter(id => !addedVmIds.includes(id));
+    const retiredCredentialVmIds = struckCredentialVmIds.filter(id => id !== spentVmId);
+    // Each retired credential's committed rungs and any revealed rung of its own
+    // go in the SAME entry. Striking the ladder VM rots only a ladder-signed
+    // bridge; a bridge an enrolled client minted outlives the strike, and that
+    // client survives this entry, so a committed rung left standing is a reveal
+    // the retired credential could still perform. Anchored from the log alone,
+    // and an unanchorable credential is reported rather than struck.
+    const strike = await attributeRetiredCredentialRungs({
+        log: published.log,
+        credentialVmIds: retiredCredentialVmIds,
+        protectedHashes: [newUpdateHash, newStagedHash, replacementHash],
+        protectedKeys: [newClientKeys.updateKeyMultibase]
+    });
+    const struck = (id) => id !== undefined &&
+        (id === spentVmId ||
+            ladderVms.includes(id) ||
+            struckCredentialVmIds.includes(id));
     const existingMethods = (doc.verificationMethod ?? []);
     const verificationMethods = [
-        ...existingMethods.filter(method => method.id !== spentVmId &&
+        ...existingMethods.filter(method => !struck(method.id) &&
             !addedMethods.some(added => added.id === method.id)),
         ...addedMethods
     ];
-    const withReference = (relation, id) => [...new Set([...relationIds(relation), id])];
+    const withReference = (relation, ...ids) => [
+        ...new Set([
+            ...relationIds(relation).filter(referencedId => !struck(referencedId)),
+            ...ids
+        ])
+    ];
     const signingVmId = vmId(newClientKeys.signingKeyMultibase);
     const signer = await updateKeySigner({
         seed: newClientUpdateSeeds.updateSeed
@@ -406,32 +544,47 @@ async function recoverWebvhClientOnce({ store, recovery, newClientKeys, newClien
         alsoKnownAsWeb: true,
         updateKeys: [
             ...new Set([
-                ...published.updateKeys.filter(key => key !== recovery.updateKeyMultibase),
+                ...published.updateKeys.filter(key => key !== recovery.updateKeyMultibase &&
+                    !strike.struckKeys.includes(key)),
                 newClientKeys.updateKeyMultibase
             ])
         ],
-        nextKeyHashes: published.nextKeyHashes.filter(hash => hash !== recoveryHash),
+        nextKeyHashes: assertNextKeyHashesRemain({
+            nextKeyHashes: published.nextKeyHashes.filter(hash => hash !== recoveryHash && !strike.struckHashes.includes(hash)),
+            ceremony: 'the recovery add-and-retire entry'
+        }),
         verificationMethods,
         authentication: withReference(doc.authentication, signingVmId),
-        assertionMethod: withReference(doc.assertionMethod, signingVmId),
+        // The ladder VM's relation asymmetry: `assertionMethod` and
+        // `capabilityDelegation` only, so it never reads as an enrolled client.
+        assertionMethod: withReference(doc.assertionMethod, signingVmId, replacementLadderVmId),
         keyAgreement: [
             ...new Set([
-                ...relationIds(doc.keyAgreement).filter(id => id !== spentVmId),
+                ...relationIds(doc.keyAgreement).filter(id => !struck(id)),
                 vmId(newClientKeys.keyAgreementKeyMultibase),
                 replacementVmId
             ])
         ],
         capabilityInvocation: withReference(doc.capabilityInvocation, signingVmId),
-        capabilityDelegation: withReference(doc.capabilityDelegation, signingVmId)
+        capabilityDelegation: withReference(doc.capabilityDelegation, signingVmId, replacementLadderVmId)
     });
     // Conditional on the read this entry was built on: the re-read above when
-    // the commit entry ran here, the first read when it was skipped.
-    await publishLogOnly({ store, log: updated.log, ifMatch: published.etag });
-    // Advance the pin to what this entry just published, so a host rolling the
-    // log back straight afterwards is refused on the next read.
-    if (pinStore && logId !== undefined) {
-        await pinStore.write({ logId, pin: pinOfLog(updated.log) });
-    }
-    return { did: updated.did, webDoc: updated.webDoc, committed: true };
+    // the commit entry ran here, the first read when it was skipped. The pin
+    // advances with the publish, so a host rolling the log back straight
+    // afterwards is refused on the next read.
+    await publishEntryPinned({
+        store,
+        log: updated.log,
+        ifMatch: published.etag,
+        ...pinned
+    });
+    return {
+        did: updated.did,
+        webDoc: updated.webDoc,
+        committed: true,
+        retiredCredentialVmIds,
+        struckRungHashes: strike.struckHashes,
+        unclaimedCredentialVmIds: strike.unclaimedCredentialVmIds
+    };
 }
 //# sourceMappingURL=recoveryWebvh.js.map

package/dist/recovery/recoveryWebvh.js.map

@@ -1 +1 @@
-{"version":3,"file":"recoveryWebvh.js","sourceRoot":"","sources":["../../src/recovery/recoveryWebvh.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAMxE,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,4BAA4B,EAC5B,gBAAgB,EAChB,QAAQ,EACR,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,UAAU,EACV,eAAe,EACf,oBAAoB,EACrB,MAAM,sBAAsB,CAAA;AAQ7B,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,GAAG,EACH,wBAAwB,EAIzB;IACC,OAAO,GAAG,GAAG,IAAI,wBAAwB,EAAE,CAAA;AAC7C,CAAC;AAYD;;;;GAIG;AACH,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YACE,OAAO,GAAG,4DAA4D;QACpE,4CAA4C;QAE9C,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAA;IAC5C,CAAC;CACF;AAYD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EACnC,KAAK,EACL,WAAW,EACX,QAAQ,EACR,KAAK,EAMN;IACC,4EAA4E;IAC5E,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC;QACvC,OAAO,EAAE,KAAqB;QAC9B,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC,CAAA;IACF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;IACzE,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EACnC,KAAK,EACL,GAAG,EACH,OAAO,EAKR;IACC,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;AAC/C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,OAAO,EACP,UAAU,EACV,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,KAAK,EAQN;IACC,OAAO,gBAAgB,CAAC;QACtB,OAAO;QACP,UAAU;QACV,UAAU,EAAE;YACV,YAAY,EAAE;gBACZ,kBAAkB,EAAE,QAAQ,CAAC,wBAAwB;aACtD;YACD,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;SAChD;QACD,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,IAAI,EAAE,yBAAyB;KAChC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,OAAO,EACP,UAAU,EACV,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,KAAK,EAQN;IACC,OAAO,eAAe,CAAC;QACrB,OAAO;QACP,UAAU;QACV,UAAU,EAAE;YACV,YAAY,EAAE;gBACZ,kBAAkB,EAAE,QAAQ,CAAC,wBAAwB;aACtD;YACD,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;SAChD;QACD,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,IAAI,EAAE,0BAA0B;KACjC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0EG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAYxC;IACC,0EAA0E;IAC1E,2EAA2E;IAC3E,uEAAuE;IACvE,oDAAoD;IACpD,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC9C,MAAM,IAAI,SAAS,CACjB,uEAAuE;YACrE,sEAAsE,CACzE,CAAA;IACH,CAAC;IACD,0EAA0E;IAC1E,yEAAyE;IACzE,qCAAqC;IACrC,yBAAyB,CAAC;QACxB,mBAAmB,EAAE,OAAO,CAAC,aAAa,CAAC,mBAAmB;QAC9D,wBAAwB,EAAE,OAAO,CAAC,aAAa,CAAC,wBAAwB;KACzE,CAAC,CAAA;IACF,OAAO,oBAAoB,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAA;AACpE,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,sBAAsB,CAAC,EACpC,KAAK,EACL,QAAQ,EACR,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,WAAW,EACX,WAAW,EACX,QAAQ,EACR,KAAK,EAaN;IACC,sEAAsE;IACtE,4EAA4E;IAC5E,gDAAgD;IAChD,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAA;IACD,IAAI,SAAS,GAAG,MAAM,cAAc,CAAC;QACnC,KAAK;QACL,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,MAAM;KACV,CAAC,CAAA;IAEF,wEAAwE;IACxE,0EAA0E;IAC1E,kEAAkE;IAClE,uDAAuD;IACvD,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IACjD,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IACzE,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAC3C,aAAa,CAAC,kBAAkB,CACjC,CAAA;IACD,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAC3C,aAAa,CAAC,wBAAwB,CACvC,CAAA;IACD,MAAM,eAAe,GAAG,MAAM,iBAAiB,CAC7C,WAAW,CAAC,kBAAkB,CAC/B,CAAA;IAED,uEAAuE;IACvE,kEAAkE;IAClE,cAAc;IACd,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IAC3E,MAAM,SAAS,GAAG,CAAC,aAAa,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC,KAAK,CACrE,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC/C,CAAA;IACD,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,4BAA4B,EAAE,CAAA;QAC1C,CAAC;QACD,MAAM,0BAA0B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;QACnE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;YAC9B,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,MAAM;YACN,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE;gBACV,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;aACnE;YACD,qEAAqE;YACrE,iEAAiE;YACjE,aAAa,EAAE;gBACb,GAAG,IAAI,GAAG,CAAC;oBACT,GAAG,SAAS,CAAC,aAAa;oBAC1B,YAAY;oBACZ,aAAa;oBACb,aAAa;oBACb,eAAe;iBAChB,CAAC;aACH;SACF,CAAC,CAAA;QACF,MAAM,cAAc,CAAC;YACnB,KAAK;YACL,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,OAAO,EAAE,SAAS,CAAC,IAAI;SACxB,CAAC,CAAA;QACF,0EAA0E;QAC1E,uEAAuE;QACvE,sBAAsB;QACtB,IAAI,QAAQ,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC7D,CAAC;QACD,uEAAuE;QACvE,SAAS,GAAG,MAAM,cAAc,CAAC;YAC/B,KAAK;YACL,WAAW,EAAE,SAAS,CAAC,GAAG;YAC1B,GAAG,MAAM;SACV,CAAC,CAAA;IACJ,CAAC;IAED,uEAAuE;IACvE,sEAAsE;IACtE,uEAAuE;IACvE,4EAA4E;IAC5E,gEAAgE;IAChE,MAAM,WAAW,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAE7D,sEAAsE;IACtE,oEAAoE;IACpE,yEAAyE;IACzE,wCAAwC;IACxC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,CAAA;IAC9B,MAAM,IAAI,GAAG,CAAC,kBAA0B,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,kBAAkB,EAAE,CAAA;IAC3E,MAAM,SAAS,GAAG,YAAY,CAAC;QAC7B,GAAG;QACH,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;KAC5D,CAAC,CAAA;IACF,MAAM,eAAe,GAAG,YAAY,CAAC;QACnC,GAAG;QACH,wBAAwB,EAAE,WAAW,CAAC,wBAAwB;KAC/D,CAAC,CAAA;IACF,wEAAwE;IACxE,yEAAyE;IACzE,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,sEAAsE;IACtE,wCAAwC;IACxC,MAAM,YAAY,GAAyB;QACzC,GAAG,4BAA4B,CAAC;YAC9B,UAAU,EAAE,GAAG;YACf,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;YACtD,wBAAwB,EAAE,aAAa,CAAC,wBAAwB;SACjE,CAAC;QACF;YACE,EAAE,EAAE,eAAe;YACnB,IAAI,EAAE,gBAAgB;YACtB,UAAU,EAAE,GAAG;YACf,kBAAkB,EAAE,WAAW,CAAC,wBAAwB;SACzD;KACF,CAAA;IACD,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAyB,CAAA;IAC9E,MAAM,mBAAmB,GAAG;QAC1B,GAAG,eAAe,CAAC,MAAM,CACvB,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,EAAE,KAAK,SAAS;YACvB,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CACtD;QACD,GAAG,YAAY;KAChB,CAAA;IACD,MAAM,aAAa,GAAG,CACpB,QAAqD,EACrD,EAAU,EACV,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACjD,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAA;IAE3D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,IAAI,EAAE,oBAAoB,CAAC,UAAU;KACtC,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;QAC9B,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,MAAM;QACN,cAAc,EAAE,IAAI;QACpB,UAAU,EAAE;YACV,GAAG,IAAI,GAAG,CAAC;gBACT,GAAG,SAAS,CAAC,UAAU,CAAC,MAAM,CAC5B,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,kBAAkB,CAC3C;gBACD,aAAa,CAAC,kBAAkB;aACjC,CAAC;SACH;QACD,aAAa,EAAE,SAAS,CAAC,aAAa,CAAC,MAAM,CAC3C,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,YAAY,CAC9B;QACD,mBAAmB;QACnB,cAAc,EAAE,aAAa,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC;QAC9D,eAAe,EAAE,aAAa,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC;QAChE,YAAY,EAAE;YACZ,GAAG,IAAI,GAAG,CAAC;gBACT,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,SAAS,CAAC;gBAC/D,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC;gBAC5C,eAAe;aAChB,CAAC;SACH;QACD,oBAAoB,EAAE,aAAa,CAAC,GAAG,CAAC,oBAAoB,EAAE,WAAW,CAAC;QAC1E,oBAAoB,EAAE,aAAa,CAAC,GAAG,CAAC,oBAAoB,EAAE,WAAW,CAAC;KAC3E,CAAC,CAAA;IACF,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAA;IAC1E,2EAA2E;IAC3E,4DAA4D;IAC5D,IAAI,QAAQ,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;AACtE,CAAC"}
+{"version":3,"file":"recoveryWebvh.js","sourceRoot":"","sources":["../../src/recovery/recoveryWebvh.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAMxE,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,mBAAmB,EACnB,wBAAwB,EACxB,4BAA4B,EAC5B,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,EACvB,UAAU,EACV,eAAe,EACf,oBAAoB,EACrB,MAAM,sBAAsB,CAAA;AAO7B,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAG9E,OAAO,EACL,6BAA6B,EAC7B,WAAW,EACX,WAAW,EACZ,MAAM,4BAA4B,CAAA;AACnC,wEAAwE;AACxE,wEAAwE;AACxE,4EAA4E;AAC5E,OAAO,EACL,yBAAyB,EACzB,+BAA+B,EAC/B,+BAA+B,EAChC,MAAM,0BAA0B,CAAA;AAEjC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,6BAA6B,CAAC,EAC5C,GAAG,EACH,GAAG,EACH,qBAAqB,EACrB,SAAS,EAMV;IACC,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CACrC,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CACzD,CAAA;IACD,MAAM,QAAQ,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9D,MAAM,QAAQ,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACrD,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,6BAA6B,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CACvD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CACpB,CACF,CAAA;IACD,OAAO,6BAA6B,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;SACzD,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;SACxB,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC;SACpD,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,SAAS,CAAC,CAAA;AACxD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,GAAG,EACH,wBAAwB,EAIzB;IACC,OAAO,GAAG,GAAG,IAAI,wBAAwB,EAAE,CAAA;AAC7C,CAAC;AAyBD;;;;GAIG;AACH,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YACE,OAAO,GAAG,4DAA4D;QACpE,4CAA4C;QAE9C,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAA;IAC5C,CAAC;CACF;AAYD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,OAAO,EACP,MAAM,EACN,QAAQ,EACR,UAAU,EACV,IAAI,EACJ,WAAW,EACX,QAAQ,EACR,KAAK,EAUN;IACC,OAAO,gBAAgB,CAAC;QACtB,OAAO;QACP,MAAM;QACN,UAAU,EAAE;YACV,YAAY,EAAE;gBACZ,kBAAkB,EAAE,QAAQ,CAAC,wBAAwB;aACtD;YACD,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;SAChD;QACD,yEAAyE;QACzE,iDAAiD;QACjD,UAAU;QACV,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,IAAI,EAAE,yBAAyB;KAChC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,OAAO,EACP,MAAM,EACN,QAAQ,EACR,UAAU,EACV,eAAe,EACf,WAAW,EACX,QAAQ,EACR,KAAK,EAUN;IACC,OAAO,eAAe,CAAC;QACrB,OAAO;QACP,MAAM;QACN,UAAU,EAAE;YACV,YAAY,EAAE;gBACZ,kBAAkB,EAAE,QAAQ,CAAC,wBAAwB;aACtD;YACD,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;SAChD;QACD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,oBAAoB,EAAE,IAAI;QAC1B,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,IAAI,EAAE,0BAA0B;KACjC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiFG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAYxC;IAQC,0EAA0E;IAC1E,2EAA2E;IAC3E,uEAAuE;IACvE,oDAAoD;IACpD,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC9C,MAAM,IAAI,SAAS,CACjB,uEAAuE;YACrE,sEAAsE,CACzE,CAAA;IACH,CAAC;IACD,0EAA0E;IAC1E,yEAAyE;IACzE,qCAAqC;IACrC,yBAAyB,CAAC;QACxB,mBAAmB,EAAE,OAAO,CAAC,aAAa,CAAC,mBAAmB;QAC9D,wBAAwB,EAAE,OAAO,CAAC,aAAa,CAAC,wBAAwB;KACzE,CAAC,CAAA;IACF,OAAO,oBAAoB,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAA;AACpE,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,sBAAsB,CAAC,EACpC,KAAK,EACL,QAAQ,EACR,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,WAAW,EACX,WAAW,EACX,QAAQ,EACR,KAAK,EAaN;IAQC,sEAAsE;IACtE,4EAA4E;IAC5E,gDAAgD;IAChD,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAA;IACD,IAAI,SAAS,GAAG,MAAM,uBAAuB,CAAC;QAC5C,OAAO,EAAE,KAAK;QACd,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,MAAM;QACT,cAAc,EAAE,sDAAsD;KACvE,CAAC,CAAA;IAEF,uEAAuE;IACvE,0DAA0D;IAC1D,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IACzE,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAC3C,aAAa,CAAC,kBAAkB,CACjC,CAAA;IACD,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAC3C,aAAa,CAAC,wBAAwB,CACvC,CAAA;IACD,MAAM,eAAe,GAAG,MAAM,iBAAiB,CAC7C,WAAW,CAAC,kBAAkB,CAC/B,CAAA;IAED,wEAAwE;IACxE,0EAA0E;IAC1E,kEAAkE;IAClE,uDAAuD;IACvD,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACpE,oEAAoE;QACpE,uEAAuE;QACvE,yEAAyE;QACzE,iDAAiD;QACjD,MAAM,OAAO,GAAG,6BAA6B,CAAC;YAC5C,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,qBAAqB,EAAE,aAAa,CAAC,kBAAkB;YACvD,SAAS,EAAE,YAAY,CAAC;gBACtB,GAAG,EAAE,SAAS,CAAC,GAAG;gBAClB,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;aAC5D,CAAC;SACH,CAAC,CAAA;QACF,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,qBAAqB;QACrB,MAAM,MAAM,GAAG,MAAM,+BAA+B,CAAC;YACnD,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,sBAAsB,EAAE,aAAa,CAAC,kBAAkB;YACxD,eAAe,EAAE,OAAO;YACxB,eAAe,EAAE,CAAC,aAAa,EAAE,aAAa,EAAE,eAAe,CAAC;YAChE,aAAa,EAAE,CAAC,aAAa,CAAC,kBAAkB,CAAC;SAClD,CAAC,CAAA;QACF,OAAO;YACL,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,SAAS,EAAE,KAAK;YAChB,sBAAsB,EAAE,OAAO;YAC/B,gBAAgB,EAAE,MAAM,CAAC,YAAY;YACrC,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;SAC1D,CAAA;IACH,CAAC;IAED,uEAAuE;IACvE,kEAAkE;IAClE,cAAc;IACd,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IAC3E,MAAM,SAAS,GAAG,CAAC,aAAa,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC,KAAK,CACrE,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC/C,CAAA;IACD,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,4BAA4B,EAAE,CAAA;QAC1C,CAAC;QACD,MAAM,0BAA0B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;QACnE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;YAC9B,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,MAAM;YACN,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE;gBACV,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;aACnE;YACD,qEAAqE;YACrE,iEAAiE;YACjE,aAAa,EAAE;gBACb,GAAG,IAAI,GAAG,CAAC;oBACT,GAAG,SAAS,CAAC,aAAa;oBAC1B,YAAY;oBACZ,aAAa;oBACb,aAAa;oBACb,eAAe;iBAChB,CAAC;aACH;SACF,CAAC,CAAA;QACF,wEAAwE;QACxE,uEAAuE;QACvE,gBAAgB;QAChB,MAAM,kBAAkB,CAAC;YACvB,KAAK;YACL,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,OAAO,EAAE,SAAS,CAAC,IAAI;YACvB,GAAG,MAAM;SACV,CAAC,CAAA;QACF,uEAAuE;QACvE,SAAS,GAAG,MAAM,uBAAuB,CAAC;YACxC,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,SAAS,CAAC,GAAG;YAC1B,GAAG,MAAM;YACT,cAAc,EAAE,sDAAsD;SACvE,CAAC,CAAA;IACJ,CAAC;IAED,uEAAuE;IACvE,sEAAsE;IACtE,uEAAuE;IACvE,4EAA4E;IAC5E,gEAAgE;IAChE,MAAM,WAAW,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAE7D,sEAAsE;IACtE,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,4EAA4E;IAC5E,wBAAwB;IACxB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,CAAA;IAC9B,MAAM,IAAI,GAAG,CAAC,kBAA0B,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,kBAAkB,EAAE,CAAA;IAC3E,MAAM,SAAS,GAAG,YAAY,CAAC;QAC7B,GAAG;QACH,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;KAC5D,CAAC,CAAA;IACF,MAAM,eAAe,GAAG,YAAY,CAAC;QACnC,GAAG;QACH,wBAAwB,EAAE,WAAW,CAAC,wBAAwB;KAC/D,CAAC,CAAA;IACF,wEAAwE;IACxE,yEAAyE;IACzE,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,sEAAsE;IACtE,wCAAwC;IACxC,uEAAuE;IACvE,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,2EAA2E;IAC3E,iCAAiC;IACjC,MAAM,qBAAqB,GAAG,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAA;IACpE,MAAM,YAAY,GAAyB;QACzC,GAAG,4BAA4B,CAAC;YAC9B,UAAU,EAAE,GAAG;YACf,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;YACtD,wBAAwB,EAAE,aAAa,CAAC,wBAAwB;SACjE,CAAC;QACF;YACE,EAAE,EAAE,eAAe;YACnB,IAAI,EAAE,gBAAgB;YACtB,UAAU,EAAE,GAAG;YACf,kBAAkB,EAAE,WAAW,CAAC,wBAAwB;SACzD;QACD,wBAAwB,CAAC;YACvB,UAAU,EAAE,GAAG;YACf,kBAAkB,EAAE,WAAW,CAAC,oBAAoB;SACrD,CAAC;KACH,CAAA;IACD,2EAA2E;IAC3E,2EAA2E;IAC3E,uEAAuE;IACvE,oEAAoE;IACpE,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,2CAA2C;IAC3C,qEAAqE;IACrE,gBAAgB;IAChB,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IACtC,MAAM,UAAU,GAAG,YAAY;SAC5B,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;SACxB,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAA;IACvD,MAAM,qBAAqB,GAAG,6BAA6B,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SACtE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;SACxB,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC;SACpD,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IACzC,MAAM,sBAAsB,GAAG,qBAAqB,CAAC,MAAM,CACzD,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,SAAS,CACvB,CAAA;IACD,6EAA6E;IAC7E,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,iEAAiE;IACjE,MAAM,MAAM,GAAG,MAAM,+BAA+B,CAAC;QACnD,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,eAAe,EAAE,sBAAsB;QACvC,eAAe,EAAE,CAAC,aAAa,EAAE,aAAa,EAAE,eAAe,CAAC;QAChE,aAAa,EAAE,CAAC,aAAa,CAAC,kBAAkB,CAAC;KAClD,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,CAAC,EAAsB,EAAW,EAAE,CACjD,EAAE,KAAK,SAAS;QAChB,CAAC,EAAE,KAAK,SAAS;YACf,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtB,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IACvC,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAyB,CAAA;IAC9E,MAAM,mBAAmB,GAAG;QAC1B,GAAG,eAAe,CAAC,MAAM,CACvB,MAAM,CAAC,EAAE,CACP,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAClB,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CACtD;QACD,GAAG,YAAY;KAChB,CAAA;IACD,MAAM,aAAa,GAAG,CACpB,QAAqD,EACrD,GAAG,GAAa,EAChB,EAAE,CAAC;QACH,GAAG,IAAI,GAAG,CAAC;YACT,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACtE,GAAG,GAAG;SACP,CAAC;KACH,CAAA;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAA;IAE3D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,IAAI,EAAE,oBAAoB,CAAC,UAAU;KACtC,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;QAC9B,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,MAAM;QACN,cAAc,EAAE,IAAI;QACpB,UAAU,EAAE;YACV,GAAG,IAAI,GAAG,CAAC;gBACT,GAAG,SAAS,CAAC,UAAU,CAAC,MAAM,CAC5B,GAAG,CAAC,EAAE,CACJ,GAAG,KAAK,QAAQ,CAAC,kBAAkB;oBACnC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CACnC;gBACD,aAAa,CAAC,kBAAkB;aACjC,CAAC;SACH;QACD,aAAa,EAAE,yBAAyB,CAAC;YACvC,aAAa,EAAE,SAAS,CAAC,aAAa,CAAC,MAAM,CAC3C,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CACrE;YACD,QAAQ,EAAE,mCAAmC;SAC9C,CAAC;QACF,mBAAmB;QACnB,cAAc,EAAE,aAAa,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC;QAC9D,4DAA4D;QAC5D,wEAAwE;QACxE,eAAe,EAAE,aAAa,CAC5B,GAAG,CAAC,eAAe,EACnB,WAAW,EACX,qBAAqB,CACtB;QACD,YAAY,EAAE;YACZ,GAAG,IAAI,GAAG,CAAC;gBACT,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC1D,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC;gBAC5C,eAAe;aAChB,CAAC;SACH;QACD,oBAAoB,EAAE,aAAa,CAAC,GAAG,CAAC,oBAAoB,EAAE,WAAW,CAAC;QAC1E,oBAAoB,EAAE,aAAa,CACjC,GAAG,CAAC,oBAAoB,EACxB,WAAW,EACX,qBAAqB,CACtB;KACF,CAAC,CAAA;IACF,0EAA0E;IAC1E,yEAAyE;IACzE,qEAAqE;IACrE,0CAA0C;IAC1C,MAAM,kBAAkB,CAAC;QACvB,KAAK;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,SAAS,CAAC,IAAI;QACvB,GAAG,MAAM;KACV,CAAC,CAAA;IACF,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,IAAI;QACf,sBAAsB;QACtB,gBAAgB,EAAE,MAAM,CAAC,YAAY;QACrC,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;KAC1D,CAAA;AACH,CAAC"}