@interop/wallet-core 0.61.0 → 0.65.0

package/dist/webvh/didWebvh.d.ts

@@ -1,5 +1,4 @@
 import type { DIDDoc, DIDLog, Signer, VerificationMethod } from '@interop/did-method-webvh';
-import type { KeystoreAgent } from '@interop/webkms-client';
 import { type ResourceLogHeadPin, type ResourceLogPinStore } from '@interop/vh-resource-log';
 import type { DidWebKeyMap } from './didWeb.js';
 /**
@@ -40,6 +39,14 @@ export interface WebvhIdStore {
      * `'PreconditionFailedError'` (was-client's class; any implementation may
      * throw its own error carrying that name), which this module maps to
      * {@link WebvhLogConflictError}.
+     *
+     * The returned `etag` is the new validator of the resource just written --
+     * the `ifMatch` token for the next entry built on it, so a ceremony that
+     * publishes can hand a compare-and-swap-capable head to the stage after it
+     * rather than re-reading the log it just wrote. It is absent against a
+     * backend that does not version resources, and an implementation that
+     * resolves `void` is accepted verbatim (the head it produced then carries
+     * no ETag and the next publish degrades to an unconditional write).
      */
     putIdResource(options: {
         resourceId: string;
@@ -47,13 +54,40 @@ export interface WebvhIdStore {
         contentType?: string;
         ifMatch?: string;
         ifNoneMatch?: boolean;
-    }): Promise<void>;
+    }): Promise<{
+        etag?: string;
+    } | void>;
     /**
-     * Writes (upserts) `keys.json` in the private `key-map` collection.
+     * The parsed `keys.json` body together with its ETag validator, or
+     * `undefined` when the map is not written yet. Optional: a store that does
+     * not offer it keeps the pre-convergence behavior -- the genesis' rewrite
+     * has no served map to re-read, so a lost precondition propagates, and the
+     * adopt branch backfills no `webvh` block.
+     */
+    getKeyMapRaw?(): Promise<{
+        content: unknown;
+        etag?: string;
+    } | undefined>;
+    /**
+     * Writes `keys.json` in the private `key-map` collection, under the write
+     * precondition the caller states: `ifNoneMatch` for the KMS stage's
+     * create-if-absent write, `ifMatch` for the genesis' rewrite of the map
+     * that write produced. Neither stated, the write is unconditional.
+     *
+     * The returned `etag` is the new validator of the resource just written --
+     * the `ifMatch` token for the rewrite built on it, so the stage that
+     * records the KMS binding hands a compare-and-swap-capable map to the
+     * stage that adds the account DID. It is absent against a backend that
+     * does not version resources, and an implementation that resolves `void`
+     * is accepted verbatim (the rewrite then degrades to unconditional).
      */
     putKeyMap(options: {
         content: object;
-    }): Promise<void>;
+        ifMatch?: string;
+        ifNoneMatch?: boolean;
+    }): Promise<{
+        etag?: string;
+    } | void>;
 }
 /**
  * The Multikey verification-method type the did:webvh data model uses for both
@@ -251,8 +285,9 @@ export declare function assertCanonicalClientKeys({ signingKeyMultibase, keyAgre
 /**
  * The one builder of the ladder VM's published verification method -- the
  * STABLE SIBLING key a standing credential derives from its ladder seed
- * (`@interop/wallet-core/unlock`, `ladderVmKeyMultibase`), published while
- * the account has no enrolled client. The shape is forced, not
+ * (`@interop/wallet-core/unlock`, `ladderVmKeyMultibase`), published for as
+ * long as that credential stands and co-resident with whatever clients the
+ * account has enrolled. The shape is forced, not
  * preferred: @interop/zcap's `isController` flat-compares the delegating VM's
  * `controller` string against the parent capability's controller (which the
  * server synthesizes as the account did:webvh), and only an
@@ -263,9 +298,9 @@ export declare function assertCanonicalClientKeys({ signingKeyMultibase, keyAgre
  * The method is listed under `assertionMethod` and `capabilityDelegation`
  * ONLY -- no `authentication`, no `capabilityInvocation`, no `keyAgreement`
  * twin, and no marker property. Recognition is by that relation asymmetry
- * (`ladderVmIds` in the listings module): a `capabilityDelegation` member
- * absent from `capabilityInvocation` is the ladder VM, which also keeps it
- * structurally out of every client listing.
+ * (`ladderVmIds`, in the shared account-document readers): a
+ * `capabilityDelegation` member absent from `capabilityInvocation` is the
+ * ladder VM, which also keeps it structurally out of every client listing.
  *
  * Because the key is derived, a reinstall republishes the SAME key under the
  * SAME id, and a still-unexpired delegation it signed resumes verifying the
@@ -293,13 +328,25 @@ export interface DidWebvhBlock {
     did?: string;
 }
 /**
- * `keys.json` v2: the did:web key map plus the optional `webvh` block. The
- * did:web parse/guard tolerates and preserves the block, so a round-trip
- * through the did:web provisioning never strips it.
+ * `keys.json` v2: the KMS binding map plus the optional `webvh` block. The
+ * parse/guard tolerates and preserves the block, so a round-trip through the
+ * KMS-authentication stage never strips it.
  */
 export type DidWebKeyMapV2 = DidWebKeyMap & {
     webvh?: DidWebvhBlock;
 };
+/**
+ * What the KMS-authentication stage hands the genesis: the key map to fold
+ * into the genesis entry, and the `keys.json` ETag the stage's own write
+ * produced, which the genesis' rewrite carries as its `ifMatch`. The ETag is
+ * absent when the stage wrote nothing (it adopted a served map) or when the
+ * backend versions no resources, and the rewrite then degrades to an
+ * unconditional write.
+ */
+export interface KmsAuthenticationBinding {
+    keys: DidWebKeyMapV2;
+    etag?: string;
+}
 /**
  * The `did:webvh:{SCID}:<host>:space:<spaceId>:<collectionId>` controller
  * template, with the literal `{SCID}` placeholder the library replaces at
@@ -356,6 +403,25 @@ export declare function updateKeyMultibase({ seed }: {
 export declare function updateKeySigner({ seed }: {
     seed: Uint8Array;
 }): Promise<Signer>;
+/**
+ * What a create path hands back: the log, its `did:web` projection, and the
+ * resolved state `createDID` already returned. The three resolved members are
+ * what let a caller that publishes this log assemble a
+ * {@link PublishedWebvhLog} for the head it just wrote -- pairing them with
+ * the publish's own ETag -- rather than resolving the log a second time.
+ */
+export interface CreatedWebvhLog {
+    log: DIDLog;
+    webDoc: object;
+    did: string;
+    /**
+     * The resolved document, detached from the genesis entry's own `state`, so
+     * it aliases exactly as a read-side head's document does.
+     */
+    doc: DIDDoc;
+    updateKeys: string[];
+    nextKeyHashes: string[];
+}
 /**
  * Builds a genesis entry's `nextKeyHashes`: the active update key's own
  * carry-over hash beside the staged key's (the carry-over convention in the
@@ -409,7 +475,7 @@ export declare function genesisNextKeyHashes({ activeKeyMultibase, stagedKeyMult
  * @param options.updateKeyPublicKeyMultibase {string}   ladder rung 0's key
  * @param options.nextKeyHashes {string[]}   [hash(rung 0), hash(rung 1)]
  * @param options.signer {Signer}   ladder rung 0's signer
- * @returns {Promise<{ log: DIDLog; webDoc: object; did: string }>}
+ * @returns {Promise<CreatedWebvhLog>}
  */
 export declare function createLadderAnchoredWebvhLog({ wasServerUrl, spaceId, didWebKeys, ladderVmKeyMultibase, credentialKeyAgreementMethod, updateKeyPublicKeyMultibase, nextKeyHashes, signer }: {
     wasServerUrl: string;
@@ -420,11 +486,7 @@ export declare function createLadderAnchoredWebvhLog({ wasServerUrl, spaceId, di
     updateKeyPublicKeyMultibase: string;
     nextKeyHashes: string[];
     signer: Signer;
-}): Promise<{
-    log: DIDLog;
-    webDoc: object;
-    did: string;
-}>;
+}): Promise<CreatedWebvhLog>;
 /**
  * Thrown when a conditional publish of `did.jsonl` lost a race to a concurrent
  * ceremony: the log moved on between the read this ceremony built its entry on
@@ -465,14 +527,59 @@ export declare function withLogConflictRetry<T>(run: () => Promise<T>): Promise<
  * @param options.log {DIDLog}
  * @param [options.ifMatch] {string}   publish only if the log is unchanged
  * @param [options.ifNoneMatch] {boolean}   publish only if the log is absent
- * @returns {Promise<void>}
+ * @returns {Promise<{ etag?: string }>}   the new validator of the log just
+ *   written, for a stage building its entry on this head; absent against a
+ *   backend that serves no ETags
  */
 export declare function putLogResource({ store, log, ifMatch, ifNoneMatch }: {
     store: Pick<WebvhIdStore, 'putIdResource'>;
     log: DIDLog;
     ifMatch?: string;
     ifNoneMatch?: boolean;
-}): Promise<void>;
+}): Promise<{
+    etag?: string;
+}>;
+/**
+ * THE POSTAMBLE: publishes `did.jsonl` -- the log only, never `did.json` (a
+ * caller writing through a bridge delegation is authorized for nothing else)
+ * -- and advances the caller's chain-head pin to what it just published, so a
+ * host rolling the log back straight afterwards is refused on the next read.
+ *
+ * So an entry published here leaves the `did:web` projection standing at
+ * whatever it said before: a ceremony whose entry REMOVES inventory (a
+ * removal, a retirement) must republish the projection itself before the
+ * entry lands, and a projection left behind by one that did not is mended by
+ * `ensureDidWebProjection` at the next visit holding a writer for the `id`
+ * collection (a controller-invoking client, or a transient visit under its
+ * generation delegation).
+ * The publish is conditional on the read the entry was built on; a lost race
+ * surfaces as a {@link WebvhLogConflictError} (the mapping lives in
+ * {@link putLogResource}).
+ *
+ * The two halves are one function on purpose. Separating them is what leaves
+ * a pin standing behind an entry this client itself published, the gap that
+ * already forced `BuiltOnHeadNotReachedError` into existence as a
+ * compensating class.
+ *
+ * @param options {object}
+ * @param options.store {object}   anything with the seam's `putIdResource`
+ * @param options.log {DIDLog}   the log this entry produced
+ * @param [options.ifMatch] {string}   publish only if `did.jsonl` is unchanged
+ * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
+ *   pins; the pin advances only when a `logId` names its slot
+ * @param [options.logId] {string}   the log's pin slot
+ * @returns {Promise<{ etag?: string }>}   the new validator of the log this
+ *   entry just published, for a stage building on the post-entry head
+ */
+export declare function publishEntryPinned({ store, log, ifMatch, pinStore, logId }: {
+    store: Pick<WebvhIdStore, 'putIdResource'>;
+    log: DIDLog;
+    ifMatch?: string;
+    pinStore?: ResourceLogPinStore;
+    logId?: string;
+}): Promise<{
+    etag?: string;
+}>;
 /**
  * Publishes an already-created log: PUT `did.jsonl` (`text/jsonl`) then PUT
  * `did.json` from `webDoc` (`application/did+json`, adopting the webvh
@@ -489,8 +596,11 @@ export declare function putLogResource({ store, log, ifMatch, ifNoneMatch }: {
  * after the log's compare-and-swap was WON, so it is already serialized behind
  * that win; the log is the source of truth and the projection a derived cache;
  * and {@link concludeWithPublishedLog} re-derives and republishes the
- * projection from the resolved log on every ceremony's no-op path, healing any
- * lag a race or a torn publish leaves behind.
+ * projection from the resolved log on the no-op path of every ceremony that
+ * reaches this function, so a torn publish on one of those paths is healed by
+ * the next run of the same ceremony. That reach is the controller-invoking
+ * paths alone; `ensureDidWebProjection` is what mends a projection a
+ * ladder-signed entry ({@link publishEntryPinned}) left behind.
  *
  * @param options {object}
  * @param options.idStore {WebvhIdStore}
@@ -498,7 +608,9 @@ export declare function putLogResource({ store, log, ifMatch, ifNoneMatch }: {
  * @param options.webDoc {object}
  * @param [options.ifMatch] {string}   publish only if `did.jsonl` is unchanged
  * @param [options.ifNoneMatch] {boolean}   publish only if `did.jsonl` is absent
- * @returns {Promise<void>}
+ * @returns {Promise<{ etag?: string }>}   the LOG's new validator, never the
+ *   projection's: the projection is a derived cache, and only the log's ETag
+ *   is a precondition anything is built on
  */
 export declare function publishWebvhLog({ idStore, log, webDoc, ifMatch, ifNoneMatch }: {
     idStore: WebvhIdStore;
@@ -506,7 +618,9 @@ export declare function publishWebvhLog({ idStore, log, webDoc, ifMatch, ifNoneM
     webDoc: object;
     ifMatch?: string;
     ifNoneMatch?: boolean;
-}): Promise<void>;
+}): Promise<{
+    etag?: string;
+}>;
 /**
  * The shared guard-and-publish tail of every ceremony that extends the log
  * through `updateDID`: the parallel `webDoc` must be there (it is, whenever
@@ -520,7 +634,7 @@ export declare function publishWebvhLog({ idStore, log, webDoc, ifMatch, ifNoneM
  * @param [options.updated.webDoc] {object}
  * @param [options.ifMatch] {string}   the ETag of the read this entry was built
  *   on
- * @returns {Promise<void>}
+ * @returns {Promise<{ etag?: string }>}   the log's new validator
  */
 export declare function publishUpdatedLog({ idStore, updated, ifMatch }: {
     idStore: WebvhIdStore;
@@ -529,23 +643,64 @@ export declare function publishUpdatedLog({ idStore, updated, ifMatch }: {
         webDoc?: object;
     };
     ifMatch?: string;
-}): Promise<void>;
+}): Promise<{
+    etag?: string;
+}>;
 /**
- * Writes `keys.json` v2: the did:web relationship map plus the `webvh` block,
- * preserving the three did:web relationships. Exported for the ladder-anchored
- * ensure, whose create path records the account DID the same way the
- * enrolled-client one does.
+ * Writes `keys.json` v2: the KMS binding plus the `webvh` block. Exported for
+ * the ladder-anchored ensure, whose create path records the account DID the
+ * same way the enrolled-client one does.
+ *
+ * The body is CONSTRUCTED from the two members the map carries rather than
+ * spread from the caller's, so a legacy `keyAgreement` binding a stored map
+ * still holds is dropped by this rewrite.
+ *
+ * This is the genesis' rewrite of the map the KMS stage created one stage
+ * earlier, so it carries that write's ETag as its `ifMatch`. A caller holding
+ * no ETag (a backend that versions nothing) writes unconditionally.
+ *
+ * A lost precondition CONVERGES rather than propagating, since the genesis
+ * entry has already published by the time this runs and a bookkeeping resource
+ * must not fail a ceremony standing behind it: the served map is re-read, a
+ * map already naming this DID under this binding is left alone, and anything
+ * else is rewritten once under the served ETag. A second lost precondition
+ * propagates. Without the store's optional read there is nothing to converge
+ * on, and the first failure propagates.
  *
  * @param options {object}
  * @param options.idStore {WebvhIdStore}
- * @param options.didWebKeys {DidWebKeyMap}
+ * @param options.didWebKeys {DidWebKeyMap}   the binding to record, which on
+ *   the create path is the one this run published in the genesis entry
  * @param options.webvh {DidWebvhBlock}
+ * @param [options.ifMatch] {string}   the ETag the KMS stage's own write
+ *   returned
  * @returns {Promise<void>}
  */
-export declare function writeKeysJson({ idStore, didWebKeys, webvh }: {
+export declare function writeKeysJson({ idStore, didWebKeys, webvh, ifMatch }: {
     idStore: WebvhIdStore;
     didWebKeys: DidWebKeyMap;
     webvh: DidWebvhBlock;
+    ifMatch?: string;
+}): Promise<void>;
+/**
+ * Records the account DID into a `keys.json` carrying a KMS binding and no (or
+ * a stale) `webvh` block -- the state a run torn between its genesis entry and
+ * its rewrite leaves behind. It is the adoption path's half of that rewrite,
+ * and the binding comes from the SERVED map: the run that published the log
+ * recorded it, while this run's own map may name a key that log never
+ * published.
+ *
+ * A no-op when the store offers no read, when the served map carries no
+ * binding, and when it already names this DID.
+ *
+ * @param options {object}
+ * @param options.idStore {WebvhIdStore}
+ * @param options.did {string}   the DID the adopted log resolves to
+ * @returns {Promise<void>}
+ */
+export declare function backfillKeyMapWebvhBlock({ idStore, did }: {
+    idStore: WebvhIdStore;
+    did: string;
 }): Promise<void>;
 /**
  * The verified state of the published log: the log itself, the resolved DID
@@ -592,7 +747,9 @@ export interface PublishedWebvhLog {
  * refused as a `rollback` instead of read as `undefined`.
  *
  * @param options {object}
- * @param options.idStore {WebvhIdStore}
+ * @param options.idStore {Pick<WebvhIdStore, 'getIdResourceRaw'>}   the read
+ *   half of the seam alone, so a caller holding a narrower store (a bridge
+ *   delegation's read + PUT pair) passes it directly
  * @param [options.expectedDid] {string}   the DID the log must resolve to
  * @param [options.pinStore] {ResourceLogPinStore}   this client's chain-head
  *   pins for the account log
@@ -601,11 +758,65 @@ export interface PublishedWebvhLog {
  * @returns {Promise<PublishedWebvhLog | undefined>}
  */
 export declare function readPublishedLog({ idStore, expectedDid, pinStore, logId }: {
-    idStore: WebvhIdStore;
+    idStore: Pick<WebvhIdStore, 'getIdResourceRaw'>;
     expectedDid?: string;
     pinStore?: ResourceLogPinStore;
     logId?: string;
 }): Promise<PublishedWebvhLog | undefined>;
+/**
+ * The substituted-account refusal on its own: a resolved head that is not the
+ * DID the caller expected is refused rather than built on. Stated once so a
+ * fresh read and a caller-threaded head refuse identically.
+ *
+ * A ceremony that takes an already-read head from its caller (the transient
+ * visit's one-read composition, where the readiness stage hands its verified
+ * head to the enrollment) runs this explicitly: the read that would otherwise
+ * have run it never happened, and a head resolving to another DID must not
+ * become the entry's basis just because it arrived by parameter.
+ *
+ * @param options {object}
+ * @param options.published {PublishedWebvhLog}   the resolved head
+ * @param [options.expectedDid] {string}   the DID it must resolve to; absent,
+ *   the head is accepted (the caller discovering the DID from the log itself)
+ * @returns {PublishedWebvhLog}   the head verbatim
+ */
+export declare function assertPublishedLogDid({ published, expectedDid }: {
+    published: PublishedWebvhLog;
+    expectedDid?: string;
+}): PublishedWebvhLog;
+/**
+ * {@link readPublishedLog} for the ceremonies whose premise is a log that
+ * already exists: an absent `did.jsonl` is a refusal rather than a state to
+ * branch on, so the caller gets a `PublishedWebvhLog` or an error. The
+ * `missingMessage` is the caller's own phrasing of what there is nothing to do
+ * against ("nothing to enroll into", "nothing to recover"), since the read
+ * itself cannot know which ceremony is standing on it.
+ *
+ * Every other option, and every check behind them -- the `expectedDid`
+ * refusal and the chain-head pin's rollback / fork / identity-switch
+ * refusals -- is {@link readPublishedLog}'s verbatim. Each attempt of a
+ * conflict-retried ceremony reads for itself, so the continuity check runs on
+ * the read the compare-and-swap publish is conditioned on rather than only on
+ * an orchestrator's pre-read.
+ *
+ * @param options {object}
+ * @param options.idStore {Pick<WebvhIdStore, 'getIdResourceRaw'>}
+ * @param [options.expectedDid] {string}   the DID the log must resolve to
+ * @param [options.pinStore] {ResourceLogPinStore}   this client's chain-head
+ *   pins for the log being read
+ * @param [options.logId] {string}   the log's pin-slot key; required whenever
+ *   a `pinStore` is supplied
+ * @param [options.missingMessage] {string}   the thrown `Error`'s message when
+ *   the log is absent
+ * @returns {Promise<PublishedWebvhLog>}
+ */
+export declare function readPublishedLogOrThrow({ idStore, expectedDid, pinStore, logId, missingMessage }: {
+    idStore: Pick<WebvhIdStore, 'getIdResourceRaw'>;
+    expectedDid?: string;
+    pinStore?: ResourceLogPinStore;
+    logId?: string;
+    missingMessage?: string;
+}): Promise<PublishedWebvhLog>;
 /**
  * The chain-head pin a log establishes: the genesis entry's method and SCID
  * plus the head entry's `versionId`. Used where this client is the one that
@@ -634,16 +845,22 @@ export declare function servedHead(log: DIDLog): {
  * already-revoked no-op. All of them used to infer completion from `did.jsonl`
  * alone, which is a half of the state: {@link publishWebvhLog} writes the log
  * and its `did:web` projection in two non-atomic PUTs, so a crash between them
- * leaves a `did.jsonl` that is complete beside a `did.json` that lags it
- * forever (nothing else republishes the projection).
+ * leaves a `did.jsonl` that is complete beside a `did.json` that lags it.
  *
  * So the projection is re-derived from the resolved log and re-PUT
  * unconditionally rather than compared first: the write is idempotent and one
  * request either way, and the resolved log is the source of truth for what the
  * projection must say. A ceremony that no-ops on the log therefore still heals
- * a torn earlier publish. The projection PUT is deliberately unconditional
- * here too: healing it is the whole point, and the log it was derived from is
- * the state this call just read and resolved.
+ * a torn earlier publish OF THAT CEREMONY. The projection PUT is deliberately
+ * unconditional here too: healing it is the whole point, and the log it was
+ * derived from is the state this call just read and resolved.
+ *
+ * The reach is what to hold on to: every caller here invokes as the account's
+ * controller, so this heals nothing for the ladder-signed entries that publish
+ * through {@link publishEntryPinned} and write the log alone. Those are mended
+ * by their own ceremony's pre-entry projection PUT and, failing that, by
+ * `ensureDidWebProjection` at the next visit that holds an `id`-collection
+ * writer.
  *
  * @param options {object}
  * @param options.idStore {WebvhIdStore}
@@ -672,6 +889,24 @@ export declare function effectiveParameters(log: DIDLog): Array<{
     updateKeys: string[];
     nextKeyHashes: string[];
 }>;
+/**
+ * The log's current `updateKeys` / `nextKeyHashes` view: the last entry's
+ * effective parameters, or the empty pair for a log with no entries.
+ *
+ * The empty default is a policy choice, not a convenience: it is what makes
+ * an unresolvable log attribute as "no rung standing" rather than throw, so
+ * it is stated here once rather than at each attribution site.
+ *
+ * @param published {object}
+ * @param published.log {DIDLog}
+ * @returns {object}
+ */
+export declare function currentLogParameters(published: {
+    log: DIDLog;
+}): {
+    updateKeys: string[];
+    nextKeyHashes: string[];
+};
 /**
  * Idempotently provisions and publishes the user's did:webvh DID log. A wallet
  * that keeps a KMS runs it directly after the did:web provisioning (non-fatal)
@@ -715,8 +950,10 @@ export declare function effectiveParameters(log: DIDLog): Array<{
  * @param options.wasServerUrl {string}
  * @param options.spaceId {string}
  * @param [options.didWebKeys] {DidWebKeyMapV2}   the parsed keys.json (with any
- *   webvh block) returned by the did:web provisioning; absent on a
+ *   webvh block) returned by the KMS-authentication stage; absent on a
  *   client-keys-only genesis (no KMS anywhere in the path)
+ * @param [options.keysJsonEtag] {string}   the ETag that stage's own write
+ *   returned, carried as the `ifMatch` of the rewrite that records the DID
  * @param options.clientKeys {WebvhClientKeys}   this client's published keys
  * @param options.updateKeys {ClientWebvhUpdateKeys}   already persisted
  *   client-local
@@ -732,6 +969,7 @@ export declare function ensureDidWebvh(options: {
     wasServerUrl: string;
     spaceId: string;
     didWebKeys?: DidWebKeyMapV2;
+    keysJsonEtag?: string;
     clientKeys: WebvhClientKeys;
     updateKeys: ClientWebvhUpdateKeys;
     expectedDid?: string;
@@ -825,102 +1063,4 @@ export interface WebvhEnrollmentKeys extends WebvhClientKeys {
     updateKeyMultibase: string;
     stagedUpdateKeyMultibase: string;
 }
-/**
- * The relationship references of a resolved document as verification-method
- * ids, tolerating embedded objects beside string references.
- *
- * @param relation {Array}   the relationship array, when present
- * @returns {string[]}
- */
-export declare function relationIds(relation: Array<string | {
-    id?: string;
-}> | undefined): string[];
-/**
- * Enrolls a second wallet client into the published did:webvh document -- the
- * log half of the enrollment ceremony (the user key roster wrap happens first,
- * outside this module). Two entries, forced by prerotation (a new update key
- * must hash into the PREVIOUS entry's `nextKeyHashes`):
- *
- * 1. **Commit**: a sparse entry extending `nextKeyHashes` with the new
- *    client's update-key and staged-key hashes (document and `updateKeys`
- *    untouched).
- * 2. **Add**: an entry adding the new client's verification methods (its
- *    Ed25519 key under the four signing relationships, its X25519 twin under
- *    `keyAgreement`) and its update key to `updateKeys`.
- *
- * Both entries are signed by THIS client's active update key (quorum-of-one:
- * any single enrolled client can enroll). The ceremony is resumable from
- * durable state alone: a tear after the commit is detected by its hashes
- * already standing in `nextKeyHashes` (skip to the add entry), and a
- * completed enrollment is detected by the update key already being authorized
- * (no-op). Re-running with the same key set converges without forking the
- * log.
- *
- * Each entry publishes conditionally on the read it was built on (the add
- * entry on the mid-ceremony re-read), so a concurrent ceremony -- a revocation,
- * another enrollment -- can never be erased by this one; a lost race re-runs
- * from the top (see {@link withLogConflictRetry}) and rebases on the new head.
- *
- * @param options {object}
- * @param options.idStore {WebvhIdStore}
- * @param options.updateKeys {ClientWebvhUpdateKeys}   THIS client's seeds
- * @param options.newClient {WebvhEnrollmentKeys}   the enrollee's public halves
- * @returns {Promise<{ did: string }>}
- */
-export declare function enrollWebvhClient(options: {
-    idStore: WebvhIdStore;
-    updateKeys: ClientWebvhUpdateKeys;
-    newClient: WebvhEnrollmentKeys;
-}): Promise<{
-    did: string;
-}>;
-/**
- * Rebuilds `keys.json` from the published artifacts plus a WebKMS key listing
- * -- the recovery path for a lost or rolled-back `keys.json`. List Keys is
- * authorized as `read` against the keystore controller, which only the
- * root-controlled keystore agent can invoke.
- *
- * KMS key local ids are server-generated random and appear in no published
- * artifact, so the bindings are rediscovered by public key material instead.
- * List the keystore once -- each listed description carries `keyUrl`, the
- * key's canonical invocation URL (the signable handle its alias-overridden
- * `id` erases) -- then match `did.json`'s relationship verification methods
- * by `publicKeyMultibase` and rewrite `keys.json` from what matched. The
- * `authentication` and `keyAgreement` bindings are required; `assertionMethod`
- * lists client keys only, so no KMS binding exists there and none is rebuilt.
- * When `did.jsonl` is published, its resolved DID is recorded in the `webvh`
- * block; there is nothing else to repair there, since the log's update keys are
- * client-held seeds that no keystore listing could recover.
- *
- * An unmatchable binding is unrepairable and throws: a published artifact
- * depends on a key the keystore no longer lists.
- *
- * The log read takes the same checks every other ceremony read does, and for
- * the same reason: what it reads is written straight back into the rebuilt
- * `keys.json`, so a substituted log would rewrite the `webvh` block to a wrong
- * DID and a truncated one would be adopted as this account's history. A caller
- * that still holds the account pointer passes `expectedDid` and its
- * `pinStore`; the pure-recovery caller that has lost everything but the
- * keystore has no DID to expect and passes neither, which is the one read here
- * that legitimately discovers the DID from the log itself.
- *
- * @param options {object}
- * @param options.keystoreAgent {KeystoreAgent}
- * @param options.idStore {WebvhIdStore}
- * @param [options.expectedDid] {string}   the DID the published log must
- *   resolve to
- * @param [options.pinStore] {ResourceLogPinStore}   this client's chain-head
- *   pins for the account log
- * @param [options.logId] {string}   the account log's pin-slot key, built by
- *   the caller with `accountLogPinId({ spaceId })`; required whenever a
- *   `pinStore` is supplied
- * @returns {Promise<DidWebKeyMapV2>}   the rebuilt, persisted keys.json
- */
-export declare function repairKeyBindings({ keystoreAgent, idStore, expectedDid, pinStore, logId }: {
-    keystoreAgent: KeystoreAgent;
-    idStore: WebvhIdStore;
-    expectedDid?: string;
-    pinStore?: ResourceLogPinStore;
-    logId?: string;
-}): Promise<DidWebKeyMapV2>;
 //# sourceMappingURL=didWebvh.d.ts.map

package/dist/webvh/didWebvh.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"didWebvh.d.ts","sourceRoot":"","sources":["../../src/webvh/didWebvh.ts"],"names":[],"mappings":"AA4EA,OAAO,KAAK,EACV,MAAM,EACN,MAAM,EACN,MAAM,EACN,kBAAkB,EACnB,MAAM,2BAA2B,CAAA;AAUlC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAU3D,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAA;AAEjC,OAAO,KAAK,EAAa,YAAY,EAAE,MAAM,aAAa,CAAA;AAG1D;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;;;OAOG;IACH,gBAAgB,CAAC,OAAO,EAAE;QACxB,UAAU,EAAE,MAAM,CAAA;KACnB,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,CAAA;IACxD;;;OAGG;IACH,aAAa,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAChE;;;;;;;;;;OAUG;IACH,aAAa,CAAC,OAAO,EAAE;QACrB,UAAU,EAAE,MAAM,CAAA;QAClB,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;QACxB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,WAAW,CAAC,EAAE,OAAO,CAAA;KACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjB;;OAEG;IACH,SAAS,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACvD;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,aAAa,CAAA;AAE1C;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,uBAAuB,CAAA;AAE/D;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,6BAAoB,CAAA;AAOjD;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,UAAU,CAAA;IACtB,UAAU,EAAE,UAAU,CAAA;IACtB,iBAAiB,CAAC,EAAE,UAAU,CAAA;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,mBAAmB,EAAE,MAAM,CAAA;IAC3B,wBAAwB,EAAE,MAAM,CAAA;CACjC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,4BAA4B,CAAC,EAC3C,mBAAmB,EACpB,EAAE;IACD,mBAAmB,EAAE,MAAM,CAAA;CAC5B,GAAG,MAAM,CAET;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CAAC,EACxC,mBAAmB,EACpB,EAAE;IACD,mBAAmB,EAAE,MAAM,CAAA;CAC5B,GAAG,MAAM,CAGT;AAiCD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,sBAAsB,CAAC,EAC3C,wBAAwB,EACzB,EAAE;IACD,wBAAwB,EAAE,MAAM,CAAA;CACjC,GAAG,OAAO,CAAC,MAAM,CAAC,CAKlB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,UAAU,EACV,wBAAwB,EACzB,EAAE;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,wBAAwB,EAAE,MAAM,CAAA;CACjC,GAAG,OAAO,CAIV;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,EAChC,WAAW,EACZ,EAAE;IACD,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB,GAAG,CAAC,wBAAwB,EAAE,MAAM,KAAK,OAAO,CA4BhD;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,4BAA4B,CAAC,EAC3C,UAAU,EACV,mBAAmB,EACnB,wBAAwB,EACzB,EAAE;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,wBAAwB,EAAE,MAAM,CAAA;CACjC,GAAG,kBAAkB,EAAE,CAgBvB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CAAC,EACxC,mBAAmB,EACnB,wBAAwB,EACzB,EAAE;IACD,mBAAmB,EAAE,MAAM,CAAA;IAC3B,wBAAwB,EAAE,MAAM,CAAA;CACjC,GAAG,IAAI,CAWP;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,UAAU,EACV,kBAAkB,EACnB,EAAE;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,MAAM,CAAA;CAC3B,GAAG,kBAAkB,CAOrB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG;IAAE,KAAK,CAAC,EAAE,aAAa,CAAA;CAAE,CAAA;AAErE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,0BAA0B,CAAC,EACzC,YAAY,EACZ,OAAO,EACP,YAA+B,EAChC,EAAE;IACD,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,GAAG,MAAM,CAGT;AAED;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAKhF;AAWD;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CAAC,EACvC,IAAI,EACL,EAAE;IACD,IAAI,EAAE,UAAU,CAAA;CACjB,GAAG,OAAO,CAAC,MAAM,CAAC,CAGlB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,eAAe,CAAC,EACpC,IAAI,EACL,EAAE;IACD,IAAI,EAAE,UAAU,CAAA;CACjB,GAAG,OAAO,CAAC,MAAM,CAAC,CAqBlB;AA2PD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,kBAAkB,EAClB,kBAAkB,EACnB,EAAE;IACD,kBAAkB,EAAE,MAAM,CAAA;IAC1B,kBAAkB,EAAE,MAAM,CAAA;CAC3B,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAKpB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAsB,4BAA4B,CAAC,EACjD,YAAY,EACZ,OAAO,EACP,UAAU,EACV,oBAAoB,EACpB,4BAA4B,EAC5B,2BAA2B,EAC3B,aAAa,EACb,MAAM,EACP,EAAE;IACD,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,YAAY,CAAA;IACzB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,4BAA4B,EAAE,kBAAkB,CAAA;IAChD,2BAA2B,EAAE,MAAM,CAAA;IACnC,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAaxD;AAED;;;;;;;GAOG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;gBAE5C,OAAO,SACkE,EACzE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAKhC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,EAC1C,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACpB,OAAO,CAAC,CAAC,CAAC,CAWZ;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,cAAc,CAAC,EACnC,KAAK,EACL,GAAG,EACH,OAAO,EACP,WAAW,EACZ,EAAE;IACD,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;IAC1C,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,OAAO,CAAA;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAehB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,eAAe,CAAC,EACpC,OAAO,EACP,GAAG,EACH,MAAM,EACN,OAAO,EACP,WAAW,EACZ,EAAE;IACD,OAAO,EAAE,YAAY,CAAA;IACrB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,OAAO,CAAA;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAOhB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CAAC,EACtC,OAAO,EACP,OAAO,EACP,OAAO,EACR,EAAE;IACD,OAAO,EAAE,YAAY,CAAA;IACrB,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACzC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,EAClC,OAAO,EACP,UAAU,EACV,KAAK,EACN,EAAE;IACD,OAAO,EAAE,YAAY,CAAA;IACrB,UAAU,EAAE,YAAY,CAAA;IACxB,KAAK,EAAE,aAAa,CAAA;CACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGhB;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,OAAO,EACP,WAAW,EACX,QAAQ,EACR,KAAK,EACN,EAAE;IACD,OAAO,EAAE,YAAY,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAoDzC;AAED;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,CAExD;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAG3E;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,wBAAwB,CAAC,EAC7C,OAAO,EACP,SAAS,EACV,EAAE;IACD,OAAO,EAAE,YAAY,CAAA;IACrB,SAAS,EAAE,iBAAiB,CAAA;CAC7B,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAOxC;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,GACV,KAAK,CAAC;IAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAc1D;AA6DD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE;IAC5C,OAAO,EAAE,YAAY,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,cAAc,CAAA;IAC3B,UAAU,EAAE,eAAe,CAAA;IAC3B,UAAU,EAAE,qBAAqB,CAAA;IACjC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;CAC/B,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAE3B;AA6GD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,OAAO,EAAE,YAAY,CAAA;IACrB,UAAU,EAAE,qBAAqB,CAAA;IACjC,iBAAiB,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACjE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAE3B;AAyID;;;;;;;;;;GAUG;AACH,wBAAsB,0BAA0B,CAAC,EAC/C,SAAS,EACV,EAAE;IACD,SAAS,EAAE,iBAAiB,CAAA;CAC7B,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAoB,SAAQ,eAAe;IAC1D,kBAAkB,EAAE,MAAM,CAAA;IAC1B,wBAAwB,EAAE,MAAM,CAAA;CACjC;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,KAAK,CAAC,MAAM,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,SAAS,GACpD,MAAM,EAAE,CASV;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE;IAC/C,OAAO,EAAE,YAAY,CAAA;IACrB,UAAU,EAAE,qBAAqB,CAAA;IACjC,SAAS,EAAE,mBAAmB,CAAA;CAC/B,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAE3B;AAqJD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,wBAAsB,iBAAiB,CAAC,EACtC,aAAa,EACb,OAAO,EACP,WAAW,EACX,QAAQ,EACR,KAAK,EACN,EAAE;IACD,aAAa,EAAE,aAAa,CAAA;IAC5B,OAAO,EAAE,YAAY,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,cAAc,CAAC,CA6F1B"}
+{"version":3,"file":"didWebvh.d.ts","sourceRoot":"","sources":["../../src/webvh/didWebvh.ts"],"names":[],"mappings":"AA2EA,OAAO,KAAK,EACV,MAAM,EACN,MAAM,EACN,MAAM,EACN,kBAAkB,EACnB,MAAM,2BAA2B,CAAA;AAelC,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAA;AAGjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAO/C;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;;;OAOG;IACH,gBAAgB,CAAC,OAAO,EAAE;QACxB,UAAU,EAAE,MAAM,CAAA;KACnB,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,CAAA;IACxD;;;OAGG;IACH,aAAa,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAChE;;;;;;;;;;;;;;;;;;OAkBG;IACH,aAAa,CAAC,OAAO,EAAE;QACrB,UAAU,EAAE,MAAM,CAAA;QAClB,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;QACxB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,WAAW,CAAC,EAAE,OAAO,CAAA;KACtB,GAAG,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IACrC;;;;;;OAMG;IACH,YAAY,CAAC,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,CAAA;IACzE;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,OAAO,EAAE;QACjB,OAAO,EAAE,MAAM,CAAA;QACf,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,WAAW,CAAC,EAAE,OAAO,CAAA;KACtB,GAAG,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;CACtC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,aAAa,CAAA;AAE1C;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,uBAAuB,CAAA;AAE/D;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,6BAAoB,CAAA;AAOjD;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,UAAU,CAAA;IACtB,UAAU,EAAE,UAAU,CAAA;IACtB,iBAAiB,CAAC,EAAE,UAAU,CAAA;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,mBAAmB,EAAE,MAAM,CAAA;IAC3B,wBAAwB,EAAE,MAAM,CAAA;CACjC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,4BAA4B,CAAC,EAC3C,mBAAmB,EACpB,EAAE;IACD,mBAAmB,EAAE,MAAM,CAAA;CAC5B,GAAG,MAAM,CAET;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CAAC,EACxC,mBAAmB,EACpB,EAAE;IACD,mBAAmB,EAAE,MAAM,CAAA;CAC5B,GAAG,MAAM,CAGT;AAiCD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,sBAAsB,CAAC,EAC3C,wBAAwB,EACzB,EAAE;IACD,wBAAwB,EAAE,MAAM,CAAA;CACjC,GAAG,OAAO,CAAC,MAAM,CAAC,CAKlB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,UAAU,EACV,wBAAwB,EACzB,EAAE;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,wBAAwB,EAAE,MAAM,CAAA;CACjC,GAAG,OAAO,CAIV;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,EAChC,WAAW,EACZ,EAAE;IACD,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB,GAAG,CAAC,wBAAwB,EAAE,MAAM,KAAK,OAAO,CA4BhD;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,4BAA4B,CAAC,EAC3C,UAAU,EACV,mBAAmB,EACnB,wBAAwB,EACzB,EAAE;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,wBAAwB,EAAE,MAAM,CAAA;CACjC,GAAG,kBAAkB,EAAE,CAgBvB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CAAC,EACxC,mBAAmB,EACnB,wBAAwB,EACzB,EAAE;IACD,mBAAmB,EAAE,MAAM,CAAA;IAC3B,wBAAwB,EAAE,MAAM,CAAA;CACjC,GAAG,IAAI,CAWP;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,UAAU,EACV,kBAAkB,EACnB,EAAE;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,MAAM,CAAA;CAC3B,GAAG,kBAAkB,CAOrB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG;IAAE,KAAK,CAAC,EAAE,aAAa,CAAA;CAAE,CAAA;AAErE;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,cAAc,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,0BAA0B,CAAC,EACzC,YAAY,EACZ,OAAO,EACP,YAA+B,EAChC,EAAE;IACD,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,GAAG,MAAM,CAGT;AAED;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAKhF;AAWD;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CAAC,EACvC,IAAI,EACL,EAAE;IACD,IAAI,EAAE,UAAU,CAAA;CACjB,GAAG,OAAO,CAAC,MAAM,CAAC,CAGlB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,eAAe,CAAC,EACpC,IAAI,EACL,EAAE;IACD,IAAI,EAAE,UAAU,CAAA;CACjB,GAAG,OAAO,CAAC,MAAM,CAAC,CAqBlB;AAyKD;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX;;;OAGG;IACH,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,aAAa,EAAE,MAAM,EAAE,CAAA;CACxB;AAiGD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,kBAAkB,EAClB,kBAAkB,EACnB,EAAE;IACD,kBAAkB,EAAE,MAAM,CAAA;IAC1B,kBAAkB,EAAE,MAAM,CAAA;CAC3B,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAKpB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAsB,4BAA4B,CAAC,EACjD,YAAY,EACZ,OAAO,EACP,UAAU,EACV,oBAAoB,EACpB,4BAA4B,EAC5B,2BAA2B,EAC3B,aAAa,EACb,MAAM,EACP,EAAE;IACD,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,YAAY,CAAA;IACzB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,4BAA4B,EAAE,kBAAkB,CAAA;IAChD,2BAA2B,EAAE,MAAM,CAAA;IACnC,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,eAAe,CAAC,CAa3B;AAED;;;;;;;GAOG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;gBAE5C,OAAO,SACkE,EACzE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAKhC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,EAC1C,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACpB,OAAO,CAAC,CAAC,CAAC,CAWZ;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,cAAc,CAAC,EACnC,KAAK,EACL,GAAG,EACH,OAAO,EACP,WAAW,EACZ,EAAE;IACD,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;IAC1C,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,OAAO,CAAA;CACtB,GAAG,OAAO,CAAC;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAgB7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,kBAAkB,CAAC,EACvC,KAAK,EACL,GAAG,EACH,OAAO,EACP,QAAQ,EACR,KAAK,EACN,EAAE;IACD,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;IAC1C,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAM7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,eAAe,CAAC,EACpC,OAAO,EACP,GAAG,EACH,MAAM,EACN,OAAO,EACP,WAAW,EACZ,EAAE;IACD,OAAO,EAAE,YAAY,CAAA;IACrB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,OAAO,CAAA;CACtB,GAAG,OAAO,CAAC;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAS7B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CAAC,EACtC,OAAO,EACP,OAAO,EACP,OAAO,EACR,EAAE;IACD,OAAO,EAAE,YAAY,CAAA;IACrB,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACzC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,OAAO,CAAC;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAY7B;AA4BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,aAAa,CAAC,EAClC,OAAO,EACP,UAAU,EACV,KAAK,EACL,OAAO,EACR,EAAE;IACD,OAAO,EAAE,YAAY,CAAA;IACrB,UAAU,EAAE,YAAY,CAAA;IACxB,KAAK,EAAE,aAAa,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CA+BhB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,wBAAwB,CAAC,EAC7C,OAAO,EACP,GAAG,EACJ,EAAE;IACD,OAAO,EAAE,YAAY,CAAA;IACrB,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,OAAO,CAAC,IAAI,CAAC,CAehB;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,OAAO,EACP,WAAW,EACX,QAAQ,EACR,KAAK,EACN,EAAE;IACD,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAA;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CA8CzC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,SAAS,EACT,WAAW,EACZ,EAAE;IACD,SAAS,EAAE,iBAAiB,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,iBAAiB,CAQpB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,uBAAuB,CAAC,EAC5C,OAAO,EACP,WAAW,EACX,QAAQ,EACR,KAAK,EACL,cAAmD,EACpD,EAAE;IACD,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAA;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAW7B;AAED;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,CAExD;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAG3E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,wBAAwB,CAAC,EAC7C,OAAO,EACP,SAAS,EACV,EAAE;IACD,OAAO,EAAE,YAAY,CAAA;IACrB,SAAS,EAAE,iBAAiB,CAAA;CAC7B,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAMxC;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,GACV,KAAK,CAAC;IAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAc1D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAChE,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,aAAa,EAAE,MAAM,EAAE,CAAA;CACxB,CAGA;AA6DD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE;IAC5C,OAAO,EAAE,YAAY,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,cAAc,CAAA;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,eAAe,CAAA;IAC3B,UAAU,EAAE,qBAAqB,CAAA;IACjC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;CAC/B,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAE3B;AAmHD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,OAAO,EAAE,YAAY,CAAA;IACrB,UAAU,EAAE,qBAAqB,CAAA;IACjC,iBAAiB,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACjE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAE3B;AAyID;;;;;;;;;;GAUG;AACH,wBAAsB,0BAA0B,CAAC,EAC/C,SAAS,EACV,EAAE;IACD,SAAS,EAAE,iBAAiB,CAAA;CAC7B,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAoB,SAAQ,eAAe;IAC1D,kBAAkB,EAAE,MAAM,CAAA;IAC1B,wBAAwB,EAAE,MAAM,CAAA;CACjC"}