@interop/wallet-core 0.62.0 → 0.65.0

package/dist/resourceLog/ladderRungs.js

@@ -0,0 +1,352 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * Seedless ladder-rung attribution over a verified account log: which update
+ * keys are rungs of which standing ladder, read from the log alone. The
+ * ceremony-tail license's third shape needs it -- shape 3 admits a
+ * ladder-signed roster append only when the document version it anchors at was
+ * itself signed by a rung of the SAME ladder that signs the append, and a
+ * reader on the verify side holds no ladder seed to answer that with.
+ *
+ * The walk is deliberately narrow and fails closed. A ladder is anchored at
+ * the entry that introduces its verification method, in the two shapes that
+ * entry can take: the ladder-anchored genesis, where the entry authorizes
+ * exactly one update key and that key signed it (rung 0 revealed outright);
+ * and the bind another signer publishes, where rung 0 arrives as the one hash
+ * the entry newly commits, revealed by whichever later entry authorizes its
+ * pre-image. Anything else leaves the ladder unattributed, and an
+ * unattributed ladder never satisfies shape 3.
+ *
+ * Which of the two an entry is takes one question first: whose the key it
+ * reveals already is. An entry authorizing exactly one self-signing key is
+ * the genesis shape only when no ladder already holds that key and the entry
+ * publishes no enrolled client. A ladder-branch bind is the counterexample --
+ * the ACTING credential's rung reveals itself in the very entry that
+ * introduces another credential's ladder VM and commits its rung-0 hash -- so
+ * the newcomer anchors on that commitment and the acting ladder climbs onto
+ * the rung it just revealed. Reading it the other way would anchor the
+ * newcomer on a key it does not hold and hand the acting ladder a shot at a
+ * version the newcomer's bind minted. The remembered recovery spend's
+ * add-and-retire entry is the enrolled-client counterexample: it introduces
+ * the replacement code's ladder VM while the one key it authorizes is the new
+ * CLIENT's update key.
+ *
+ * An anchored ladder then CLIMBS with the log, by the last-position rule of
+ * `decisions/0007-ladder-reveal-hash-order.md` read forward. An entry that
+ * authorizes exactly one new update key and was signed by that key is a
+ * prerotation reveal; when the key's hash was committed LAST among some
+ * earlier entry's additions, and that earlier entry itself authorized exactly
+ * one key and was signed by it, the committer was committing for itself, so
+ * the revealed key is the next rung of the ladder that earlier key belongs
+ * to. The step is taken only while the ladder's own VM still stands in the
+ * revealing entry's document. Without the climb a self-enrollment would end
+ * the attribution outright -- it retires the spent rung, so the ladder would
+ * be frozen at a key the account no longer authorizes -- and a passkey
+ * account, which self-enrolls by construction, could never satisfy shape 3.
+ *
+ * Two states stay out of reach on purpose, and both refuse rather than guess.
+ * An entry introducing more than one ladder VM names no rung for any of them.
+ * And a hash committed anywhere but last is never climbed: an enrollment
+ * approval reuses its rung, so its commit entry authorizes no key at all and
+ * the client update key its add entry authorizes sits in the commit's first
+ * position rather than its last. Under-attributing costs a refused append,
+ * which the ceremony surfaces and a retry cannot mend; over-attributing would
+ * hand a ladder a shot minted by an enrolled client's own entry, which is the
+ * class the license exists to exclude.
+ *
+ * The parameter carry-forward here is the did:webvh log format's own rule (an
+ * entry that omits `updateKeys` or `nextKeyHashes` keeps the previous entry's)
+ * read at layer 0, where the `webvh` layer's reader cannot be imported.
+ */
+import { deriveNextKeyHash } from '@interop/did-method-webvh';
+import { vmFragmentOf } from '@interop/vh-resource-log';
+import { ladderVmMethods, resolvedRelationMethods } from './document.js';
+/**
+ * The update-key multibases that signed one log entry: the fragment of each
+ * proof's `did:key:<multibase>#<multibase>` verification method.
+ *
+ * @param entry {DIDLogEntry | undefined}
+ * @returns {Set<string>}
+ */
+export function entrySignerKeysOf(entry) {
+    const keys = new Set();
+    for (const proof of entry?.proof ?? []) {
+        const id = proof.verificationMethod;
+        const keyMultibase = id === undefined ? undefined : vmFragmentOf(id);
+        if (keyMultibase !== undefined) {
+            keys.add(keyMultibase);
+        }
+    }
+    return keys;
+}
+/**
+ * The ladder VMs' key multibases in one entry's document.
+ *
+ * @param doc {AccountDocument | undefined}
+ * @returns {Set<string>}
+ */
+function ladderKeysOf(doc) {
+    const keys = new Set();
+    if (!doc) {
+        return keys;
+    }
+    for (const method of ladderVmMethods({ doc })) {
+        if (typeof method.publicKeyMultibase === 'string') {
+            keys.add(method.publicKeyMultibase);
+        }
+    }
+    return keys;
+}
+/**
+ * The enrolled clients' signing-key multibases in one entry's document: the
+ * `capabilityInvocation` methods, which is what an enrolled client publishes
+ * and a ladder VM deliberately does not. Only the SET matters here -- an
+ * entry that grows it published a client, and the update key such an entry
+ * authorizes is that client's rather than any ladder's rung.
+ *
+ * @param doc {AccountDocument | undefined}
+ * @returns {Set<string>}
+ */
+function enrolledClientKeysOf(doc) {
+    const keys = new Set();
+    if (!doc) {
+        return keys;
+    }
+    for (const method of resolvedRelationMethods({
+        doc,
+        relation: 'capabilityInvocation'
+    })) {
+        if (typeof method.publicKeyMultibase === 'string') {
+            keys.add(method.publicKeyMultibase);
+        }
+    }
+    return keys;
+}
+/**
+ * The ladder a key is already a rung of, or `undefined` when no ladder holds
+ * it. Asked of the revealed key before the anchoring branch runs, since a key
+ * another ladder owns can anchor nothing.
+ *
+ * @param options {object}
+ * @param options.rungsByLadder {LadderRungKeys}
+ * @param options.key {string}
+ * @returns {string | undefined}
+ */
+function ownerOfRung({ rungsByLadder, key }) {
+    for (const [ladderKey, rungs] of rungsByLadder) {
+        if (rungs.has(key)) {
+            return ladderKey;
+        }
+    }
+    return undefined;
+}
+/**
+ * Members of `next` that `previous` does not carry, in order.
+ *
+ * @param options {object}
+ * @param options.next {Iterable<string>}
+ * @param options.previous {Set<string>}
+ * @returns {string[]}
+ */
+function addedMembers({ next, previous }) {
+    const added = [];
+    for (const member of next) {
+        if (!previous.has(member) && !added.includes(member)) {
+            added.push(member);
+        }
+    }
+    return added;
+}
+/**
+ * Attributes each standing ladder VM's rung keys, one snapshot per log entry:
+ * the returned array is indexed by entry position, and each snapshot names
+ * what the log attributes as of that version and no later one. A ladder is
+ * anchored at the entry introducing its VM and climbs from there by the
+ * last-position rule (the module header states both).
+ *
+ * A snapshot names a ladder's rungs that the version still authorizes in
+ * `updateKeys`, plus any rung that signed the version's own entry -- the one
+ * question the ceremony-tail license asks of this map, so a rung retired by
+ * the very entry it signed still answers it. A ladder left with no such rung
+ * is absent from that snapshot rather than present and empty, as is a ladder
+ * the walk refuses, so a caller cannot mistake "no rung attributed" for "this
+ * key signed nothing".
+ *
+ * @param log {DIDLog}   a resolved, caller-verified account log
+ * @returns {Promise<LadderRungKeys[]>}   one snapshot per entry, in log order
+ */
+export async function attributeLadderRungsPerVersion(log) {
+    const snapshots = [];
+    const rungsByLadder = new Map();
+    // A rung-0 hash a bind entry committed, awaiting the entry that authorizes
+    // its pre-image. One owner per hash: a second claimant retires the claim,
+    // since neither ladder can then be told from the other.
+    const claims = new Map();
+    // Ladder VMs the walk refused, so a later snapshot cannot resurrect one.
+    const refused = new Set();
+    // A hash an entry committed LAST among its additions, mapped to the ladder
+    // whose rung both authorized and signed that entry: the pre-image, when a
+    // later entry reveals it, is that ladder's next rung. Spent on sight.
+    const climbs = new Map();
+    let previousLadderKeys = new Set();
+    let previousClientKeys = new Set();
+    let previousUpdateKeys = new Set();
+    let previousNextKeyHashes = new Set();
+    let updateKeys = [];
+    let nextKeyHashes = [];
+    for (const entry of log) {
+        if (entry.parameters?.updateKeys) {
+            updateKeys = entry.parameters.updateKeys;
+        }
+        if (entry.parameters?.nextKeyHashes) {
+            nextKeyHashes = entry.parameters.nextKeyHashes;
+        }
+        const doc = entry.state;
+        const ladderKeys = ladderKeysOf(doc);
+        const introduced = addedMembers({
+            next: ladderKeys,
+            previous: previousLadderKeys
+        });
+        const addedKeys = addedMembers({
+            next: updateKeys,
+            previous: previousUpdateKeys
+        });
+        const addedHashes = addedMembers({
+            next: nextKeyHashes,
+            previous: previousNextKeyHashes
+        });
+        const signers = entrySignerKeysOf(entry);
+        // A committed rung-0 hash whose pre-image this entry authorizes: the bind
+        // shape's second half. The claim is spent whether or not it names a
+        // ladder, so a retired claim can never be picked up later.
+        for (const key of addedKeys) {
+            const hash = await deriveNextKeyHash(key);
+            if (!claims.has(hash)) {
+                continue;
+            }
+            const owner = claims.get(hash);
+            claims.delete(hash);
+            if (owner !== null && owner !== undefined && !refused.has(owner)) {
+                rungsByLadder.set(owner, (rungsByLadder.get(owner) ?? new Set()).add(key));
+            }
+        }
+        // The CLIMB: this entry authorizes exactly one new key and that key
+        // signed it (a prerotation reveal), and an earlier entry committed the
+        // key's hash in last position under a rung of a known ladder. The
+        // candidate is spent whether or not the guard below admits it, so a
+        // released hash can never be climbed later.
+        const revealedRung = addedKeys.length === 1 ? addedKeys[0] : undefined;
+        if (revealedRung !== undefined && signers.has(revealedRung)) {
+            const hash = await deriveNextKeyHash(revealedRung);
+            const owner = climbs.get(hash);
+            climbs.delete(hash);
+            // The ladder's own VM must still stand in THIS entry's document. That
+            // is what keeps a recovery spend out: the spent credential's
+            // reveal-and-commit entry commits the REPLACEMENT credential's hash
+            // last, and the entry revealing that hash is the one that strikes the
+            // spent credential's ladder VM.
+            if (owner !== undefined &&
+                !refused.has(owner) &&
+                ladderKeys.has(owner) &&
+                rungsByLadder.has(owner)) {
+                rungsByLadder.set(owner, (rungsByLadder.get(owner) ?? new Set()).add(revealedRung));
+            }
+        }
+        // WHOSE the revealed key already is, resolved BEFORE the anchoring
+        // branch: the claim resolution and the climb above have just credited it
+        // where it belongs, so a hit here names a ladder that already holds it.
+        // A ladder-branch bind entry is the shape this orders: the ACTING
+        // credential's rung reveals itself in the very entry that introduces
+        // another credential's ladder VM, and reading that rung as the newcomer's
+        // rung 0 would anchor the newcomer on a key it does not hold AND credit
+        // the acting ladder with the newcomer's rung-0 commitment below.
+        const revealedOwner = revealedRung === undefined
+            ? undefined
+            : ownerOfRung({ rungsByLadder, key: revealedRung });
+        // Whether this entry also published an enrolled client. The one key such
+        // an entry authorizes is that client's update key (the remembered
+        // recovery spend's add-and-retire entry, which introduces the replacement
+        // code's ladder VM beside the new client), so it anchors no ladder.
+        const introducedClients = addedMembers({
+            next: enrolledClientKeysOf(doc),
+            previous: previousClientKeys
+        });
+        // The introduction, the one place a ladder is anchored. A VM introduced
+        // beside another names no rung for either.
+        let claimedHere;
+        if (introduced.length > 1) {
+            for (const ladderKey of introduced) {
+                refused.add(ladderKey);
+                rungsByLadder.delete(ladderKey);
+            }
+        }
+        else if (introduced.length === 1) {
+            const ladderKey = introduced[0];
+            refused.delete(ladderKey);
+            rungsByLadder.delete(ladderKey);
+            const revealed = addedKeys[0];
+            // Rung 0 revealed outright, the ladder-anchored genesis shape: one key
+            // authorized, signing its own entry, owned by no other ladder and not a
+            // client's.
+            const revealsOwnRungZero = addedKeys.length === 1 &&
+                revealed !== undefined &&
+                signers.has(revealed) &&
+                revealedOwner === undefined &&
+                introducedClients.length === 0;
+            // The commitment arm: the bind another signer publishes, where rung 0
+            // arrives as a commitment and is picked up when a later entry reveals
+            // its pre-image. It covers the bind an enrolled client signs (which
+            // authorizes no key of its own) and the ladder-branch bind another
+            // credential's rung signs (which authorizes that rung and nothing
+            // else), both of which commit exactly the newcomer's rung-0 hash.
+            const commitsRungZero = addedHashes.length === 1 &&
+                (addedKeys.length === 0 || revealedOwner !== undefined);
+            if (revealsOwnRungZero) {
+                rungsByLadder.set(ladderKey, new Set([revealed]));
+            }
+            else if (commitsRungZero) {
+                const hash = addedHashes[0];
+                // A hash two binds commit is nobody's: retire the claim outright.
+                claims.set(hash, claims.has(hash) ? null : ladderKey);
+                claimedHere = hash;
+            }
+            else {
+                refused.add(ladderKey);
+            }
+        }
+        // What this entry committed for ITSELF: the last of its newly committed
+        // hashes, recorded against the ladder whose rung authorized and signed
+        // the entry. Recorded after the introduction branch, so a ladder-anchored
+        // genesis stages its own rung 1. An entry that reuses its rung authorizes
+        // no key of its own and so records nothing, and a hash the introduction
+        // above claimed for the ladder this entry BINDS is that ladder's rung 0
+        // rather than the signer's next rung.
+        const committedLast = addedHashes[addedHashes.length - 1];
+        const signingLadder = revealedRung === undefined
+            ? undefined
+            : ownerOfRung({ rungsByLadder, key: revealedRung });
+        if (revealedRung !== undefined &&
+            signers.has(revealedRung) &&
+            signingLadder !== undefined &&
+            committedLast !== undefined &&
+            committedLast !== claimedHere) {
+            climbs.set(committedLast, signingLadder);
+        }
+        const authorized = new Set(updateKeys);
+        const snapshot = new Map();
+        for (const [ladderKey, rungs] of rungsByLadder) {
+            const standing = [...rungs].filter(rung => authorized.has(rung) || signers.has(rung));
+            if (standing.length > 0) {
+                snapshot.set(ladderKey, new Set(standing));
+            }
+        }
+        snapshots.push(snapshot);
+        previousLadderKeys = ladderKeys;
+        previousClientKeys = enrolledClientKeysOf(doc);
+        previousUpdateKeys = new Set(updateKeys);
+        previousNextKeyHashes = new Set(nextKeyHashes);
+    }
+    return snapshots;
+}
+//# sourceMappingURL=ladderRungs.js.map

package/dist/resourceLog/ladderRungs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ladderRungs.js","sourceRoot":"","sources":["../../src/resourceLog/ladderRungs.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAE7D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EACL,eAAe,EACf,uBAAuB,EAExB,MAAM,eAAe,CAAA;AAStB;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAA8B;IAC9D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,EAAE,GAAG,KAAK,CAAC,kBAAkB,CAAA;QACnC,MAAM,YAAY,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;QACpE,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QACxB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,GAAgC;IACpD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAA;IACb,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QAC9C,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAClD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAAC,GAAgC;IAC5D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAA;IACb,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,uBAAuB,CAAC;QAC3C,GAAG;QACH,QAAQ,EAAE,sBAAsB;KACjC,CAAC,EAAE,CAAC;QACH,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAClD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,WAAW,CAAC,EACnB,aAAa,EACb,GAAG,EAIJ;IACC,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;QAC/C,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACnB,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,EACpB,IAAI,EACJ,QAAQ,EAIT;IACC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACpB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,GAAW;IAEX,MAAM,SAAS,GAAqB,EAAE,CAAA;IACtC,MAAM,aAAa,GAAmB,IAAI,GAAG,EAAE,CAAA;IAC/C,2EAA2E;IAC3E,0EAA0E;IAC1E,wDAAwD;IACxD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAA;IAC/C,yEAAyE;IACzE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,2EAA2E;IAC3E,0EAA0E;IAC1E,sEAAsE;IACtE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAA;IACxC,IAAI,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAA;IAC1C,IAAI,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAA;IAC1C,IAAI,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAA;IAC1C,IAAI,qBAAqB,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7C,IAAI,UAAU,GAAa,EAAE,CAAA;IAC7B,IAAI,aAAa,GAAa,EAAE,CAAA;IAChC,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC;YACjC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,UAAU,CAAA;QAC1C,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC;YACpC,aAAa,GAAG,KAAK,CAAC,UAAU,CAAC,aAAa,CAAA;QAChD,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAoC,CAAA;QACtD,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;QACpC,MAAM,UAAU,GAAG,YAAY,CAAC;YAC9B,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,kBAAkB;SAC7B,CAAC,CAAA;QACF,MAAM,SAAS,GAAG,YAAY,CAAC;YAC7B,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,kBAAkB;SAC7B,CAAC,CAAA;QACF,MAAM,WAAW,GAAG,YAAY,CAAC;YAC/B,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,qBAAqB;SAChC,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;QAExC,0EAA0E;QAC1E,oEAAoE;QACpE,2DAA2D;QAC3D,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAA;YACzC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,SAAQ;YACV,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACnB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjE,aAAa,CAAC,GAAG,CACf,KAAK,EACL,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CACjD,CAAA;YACH,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,uEAAuE;QACvE,kEAAkE;QAClE,oEAAoE;QACpE,4CAA4C;QAC5C,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACtE,IAAI,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,YAAY,CAAC,CAAA;YAClD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACnB,sEAAsE;YACtE,6DAA6D;YAC7D,oEAAoE;YACpE,sEAAsE;YACtE,gCAAgC;YAChC,IACE,KAAK,KAAK,SAAS;gBACnB,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;gBACnB,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;gBACrB,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EACxB,CAAC;gBACD,aAAa,CAAC,GAAG,CACf,KAAK,EACL,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAC1D,CAAA;YACH,CAAC;QACH,CAAC;QAED,mEAAmE;QACnE,yEAAyE;QACzE,wEAAwE;QACxE,kEAAkE;QAClE,qEAAqE;QACrE,0EAA0E;QAC1E,wEAAwE;QACxE,iEAAiE;QACjE,MAAM,aAAa,GACjB,YAAY,KAAK,SAAS;YACxB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAA;QACvD,yEAAyE;QACzE,kEAAkE;QAClE,0EAA0E;QAC1E,oEAAoE;QACpE,MAAM,iBAAiB,GAAG,YAAY,CAAC;YACrC,IAAI,EAAE,oBAAoB,CAAC,GAAG,CAAC;YAC/B,QAAQ,EAAE,kBAAkB;SAC7B,CAAC,CAAA;QAEF,wEAAwE;QACxE,2CAA2C;QAC3C,IAAI,WAA+B,CAAA;QACnC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;gBACtB,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YACjC,CAAC;QACH,CAAC;aAAM,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAE,CAAA;YAChC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YACzB,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YAC/B,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAA;YAC7B,uEAAuE;YACvE,wEAAwE;YACxE,YAAY;YACZ,MAAM,kBAAkB,GACtB,SAAS,CAAC,MAAM,KAAK,CAAC;gBACtB,QAAQ,KAAK,SAAS;gBACtB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACrB,aAAa,KAAK,SAAS;gBAC3B,iBAAiB,CAAC,MAAM,KAAK,CAAC,CAAA;YAChC,sEAAsE;YACtE,sEAAsE;YACtE,oEAAoE;YACpE,mEAAmE;YACnE,kEAAkE;YAClE,kEAAkE;YAClE,MAAM,eAAe,GACnB,WAAW,CAAC,MAAM,KAAK,CAAC;gBACxB,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,KAAK,SAAS,CAAC,CAAA;YACzD,IAAI,kBAAkB,EAAE,CAAC;gBACvB,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,GAAG,CAAC,CAAC,QAAS,CAAC,CAAC,CAAC,CAAA;YACpD,CAAC;iBAAM,IAAI,eAAe,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAE,CAAA;gBAC5B,kEAAkE;gBAClE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;gBACrD,WAAW,GAAG,IAAI,CAAA;YACpB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YACxB,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,sCAAsC;QACtC,MAAM,aAAa,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QACzD,MAAM,aAAa,GACjB,YAAY,KAAK,SAAS;YACxB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAA;QACvD,IACE,YAAY,KAAK,SAAS;YAC1B,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;YACzB,aAAa,KAAK,SAAS;YAC3B,aAAa,KAAK,SAAS;YAC3B,aAAa,KAAK,WAAW,EAC7B,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,aAAa,CAAC,CAAA;QAC1C,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAA;QACtC,MAAM,QAAQ,GAAmB,IAAI,GAAG,EAAE,CAAA;QAC1C,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAChC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAClD,CAAA;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;YAC5C,CAAC;QACH,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACxB,kBAAkB,GAAG,UAAU,CAAA;QAC/B,kBAAkB,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAA;QAC9C,kBAAkB,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAA;QACxC,qBAAqB,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAA;IAChD,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/resourceLog/license.d.ts

@@ -4,30 +4,55 @@
 /**
  * The ceremony-tail license on ladder-signed resource-log appends (clause B
  * of the ladder VM's authority clauses). A ladder-signed append is accepted
- * in exactly two shapes: the log's first entry (creation, not extension --
- * callers admit that shape by not calling this check on a genesis entry),
- * or a rotation that carries an inventory-changing controller document
- * version, one-shot -- refused when the verified log head already carries
- * an entry at that version or later. Both shapes carry a per-entry rule: at
- * most one of an entry's proofs may be by a ladder key, so a second ladder
- * key cannot co-sign its way around the one-shot. A rotation co-signed by an
- * ordinary member stays licensed. Everything else, above all a rotation
+ * in exactly three shapes: the log's first entry (creation, not extension --
+ * callers admit that shape by not calling this check on a genesis entry);
+ * a rotation that carries an inventory-changing controller document version
+ * (shape 2); or a rotation carrying a version whose ENROLLED-CLIENT set
+ * changed and whose entry a rung of the appending ladder signed (shape 3).
+ * Shapes 2 and 3 are one-shot -- refused when the verified log head already
+ * carries an entry at that version or later -- and both carry a per-entry
+ * rule: at most one of an entry's proofs may be by a ladder key, so a second
+ * ladder key cannot co-sign its way around the one-shot. A rotation co-signed
+ * by an ordinary member stays licensed. Everything else, above all a rotation
  * against an unchanged document (the silent-rekey shape), is refused with
  * {@link ResourceLogLicenseError}. Controller versions compare by position
  * in the controller's verified version history, the structural twin of the
  * sealing sweep's `headControllerVersionIndex >= removalIndex` check.
+ *
+ * Shape 3's signer conjunct is the whole of what keeps it out of the
+ * any-`keyAgreement`-change predicate the clause rejects. A client's own
+ * enrollment or revocation entry is signed by a client, so it mints no shot
+ * for any ladder; only a ladder-signed enrollment or removal does, and only
+ * for the ladder that signed it. Whose rung signed a version is read from the
+ * log alone (`ladderRungKeys` on the controller inventory), so a verifier
+ * needs no ladder seed, and a ladder the log does not attribute is refused.
+ *
+ * Shape 3 is a verifier-side rule on an append-only log: a reader that has
+ * not shipped it refuses the whole roster log, because this refusal is thrown
+ * from the admission hook and the verifier propagates it. Rollout is
+ * therefore verifier-first -- every reader of a roster log ships shape 3
+ * before any writer emits an append that needs it.
  */
 import type { WebvhResourceLogController } from './controller.js';
 /**
- * Evaluates the ceremony-tail license's second shape for one ladder-signed
- * append: the append must carry an inventory-changing document version V --
- * S(V) differs from S(V-1) in either direction, with S(-1) empty for the
- * genesis version -- and no verified entry may already carry V or later
- * (`headControllerVersionIndex >= controllerVersionIndex` refuses; the
- * license is one-shot, so a torn ceremony's late-arriving tail still passes
- * while a second rotation against the same version does not). A `null`
- * controller version index (an unversioned controller, where no version
- * exists to license against) is refused fail-closed.
+ * Evaluates the ceremony-tail license's second and third shapes for one
+ * ladder-signed append. Shape 2: the append carries an inventory-changing
+ * document version V -- S(V) differs from S(V-1) in either direction, with
+ * S(-1) empty for the genesis version. Shape 3: the version's enrolled-client
+ * set differs from V-1's, in either direction, AND one of the update keys
+ * that signed the version's own entry is a rung the log attributes to the
+ * ladder signing this append. Either shape then meets the same one-shot
+ * check: no verified entry may already carry V or later
+ * (`headControllerVersionIndex >= controllerVersionIndex` refuses, so a torn
+ * ceremony's late-arriving tail still passes while a second rotation against
+ * the same version does not). A `null` controller version index (an
+ * unversioned controller, where no version exists to license against) is
+ * refused fail-closed.
+ *
+ * The appending ladder is read off `proofKeys` rather than passed: the entry
+ * carries at most one ladder proof (the refusal below), and the port promises
+ * the calling proof's own key is among them, so the intersection with the
+ * version's ladder keys names exactly the ladder whose shot is being spent.
  *
  * The one-shot is spent per entry, so the entry itself may carry at most one
  * ladder-key proof: a second ladder key among `proofKeys` refuses, because

package/dist/resourceLog/license.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"license.d.ts","sourceRoot":"","sources":["../../src/resourceLog/license.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAA;AAsBjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,0BAA0B,CAAC,EAC/C,UAAU,EACV,sBAAsB,EACtB,0BAA0B,EAC1B,SAAS,EACV,EAAE;IACD,UAAU,EAAE,IAAI,CAAC,0BAA0B,EAAE,YAAY,GAAG,aAAa,CAAC,CAAA;IAC1E,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAA;IACzC,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoDhB"}
+{"version":3,"file":"license.d.ts","sourceRoot":"","sources":["../../src/resourceLog/license.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAA;AAsBjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAsB,0BAA0B,CAAC,EAC/C,UAAU,EACV,sBAAsB,EACtB,0BAA0B,EAC1B,SAAS,EACV,EAAE;IACD,UAAU,EAAE,IAAI,CAAC,0BAA0B,EAAE,YAAY,GAAG,aAAa,CAAC,CAAA;IAC1E,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAA;IACzC,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgEhB"}

package/dist/resourceLog/license.js

@@ -18,15 +18,24 @@ function setsEqual(left, right) {
     return true;
 }
 /**
- * Evaluates the ceremony-tail license's second shape for one ladder-signed
- * append: the append must carry an inventory-changing document version V --
- * S(V) differs from S(V-1) in either direction, with S(-1) empty for the
- * genesis version -- and no verified entry may already carry V or later
- * (`headControllerVersionIndex >= controllerVersionIndex` refuses; the
- * license is one-shot, so a torn ceremony's late-arriving tail still passes
- * while a second rotation against the same version does not). A `null`
- * controller version index (an unversioned controller, where no version
- * exists to license against) is refused fail-closed.
+ * Evaluates the ceremony-tail license's second and third shapes for one
+ * ladder-signed append. Shape 2: the append carries an inventory-changing
+ * document version V -- S(V) differs from S(V-1) in either direction, with
+ * S(-1) empty for the genesis version. Shape 3: the version's enrolled-client
+ * set differs from V-1's, in either direction, AND one of the update keys
+ * that signed the version's own entry is a rung the log attributes to the
+ * ladder signing this append. Either shape then meets the same one-shot
+ * check: no verified entry may already carry V or later
+ * (`headControllerVersionIndex >= controllerVersionIndex` refuses, so a torn
+ * ceremony's late-arriving tail still passes while a second rotation against
+ * the same version does not). A `null` controller version index (an
+ * unversioned controller, where no version exists to license against) is
+ * refused fail-closed.
+ *
+ * The appending ladder is read off `proofKeys` rather than passed: the entry
+ * carries at most one ladder proof (the refusal below), and the port promises
+ * the calling proof's own key is among them, so the intersection with the
+ * version's ladder keys names exactly the ladder whose shot is being spent.
  *
  * The one-shot is spent per entry, so the entry itself may carry at most one
  * ladder-key proof: a second ladder key among `proofKeys` refuses, because
@@ -57,30 +66,35 @@ export async function assertLadderAppendLicensed({ controller, controllerVersion
             'without a controller document version to license against.');
     }
     const inventory = await controller.inventoryAt(controller.versionIds[controllerVersionIndex]);
-    let ladderProofs = 0;
-    for (const key of proofKeys) {
-        if (inventory.ladderKeys.has(key)) {
-            ladderProofs += 1;
-        }
-    }
-    if (ladderProofs > 1) {
+    const ladderProofKeys = proofKeys.filter(key => inventory.ladderKeys.has(key));
+    if (ladderProofKeys.length > 1) {
         throw new ResourceLogLicenseError('The append carries more than one ladder-signed proof (at most one ' +
             'ladder key may sign an entry, so a co-signing ladder key cannot ' +
             'spend the one-shot twice).');
     }
-    const current = inventory.inventoryKeys;
     const previous = controllerVersionIndex === 0
-        ? new Set()
-        : (await controller.inventoryAt(controller.versionIds[controllerVersionIndex - 1])).inventoryKeys;
-    if (setsEqual(current, previous)) {
-        throw new ResourceLogLicenseError('The ladder-signed append carries a controller document version ' +
-            'that did not change the credential inventory (a rotation against an ' +
-            'unchanged document is never licensed).');
+        ? undefined
+        : await controller.inventoryAt(controller.versionIds[controllerVersionIndex - 1]);
+    const inventoryChanged = !setsEqual(inventory.inventoryKeys, previous?.inventoryKeys ?? new Set());
+    const clientSetChanged = !setsEqual(inventory.enrolledClientKeys, previous?.enrolledClientKeys ?? new Set());
+    // Shape 3's signer conjunct: a rung the log attributes to THIS ladder signed
+    // the version's entry. An unattributed ladder holds no rungs here, so it
+    // never satisfies the conjunct.
+    const appendingLadderKey = ladderProofKeys[0];
+    const ownRungs = appendingLadderKey === undefined
+        ? undefined
+        : inventory.ladderRungKeys.get(appendingLadderKey);
+    const signedByOwnLadder = [...(ownRungs ?? [])].some(rung => inventory.entrySignerKeys.has(rung));
+    if (!inventoryChanged && !(clientSetChanged && signedByOwnLadder)) {
+        throw new ResourceLogLicenseError('The ladder-signed append carries a controller document version that ' +
+            'neither changed the credential inventory nor changed the ' +
+            'enrolled-client set under a rung of this ladder (a rotation ' +
+            'against an unchanged document is never licensed).');
     }
     if (headControllerVersionIndex !== null &&
         headControllerVersionIndex >= controllerVersionIndex) {
         throw new ResourceLogLicenseError('The verified log head already carries an entry at or past this ' +
-            'inventory-changing document version (the license is one-shot).');
+            'licensed document version (the license is one-shot).');
     }
 }
 //# sourceMappingURL=license.js.map

package/dist/resourceLog/license.js.map

@@ -1 +1 @@
-{"version":3,"file":"license.js","sourceRoot":"","sources":["../../src/resourceLog/license.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAErD;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,IAAiB,EAAE,KAAkB;IACtD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,EAC/C,UAAU,EACV,sBAAsB,EACtB,0BAA0B,EAC1B,SAAS,EAMV;IACC,IACE,sBAAsB,KAAK,IAAI;QAC/B,sBAAsB,GAAG,CAAC;QAC1B,sBAAsB,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,EACtD,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,mEAAmE;YACjE,2DAA2D,CAC9D,CAAA;IACH,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,WAAW,CAC5C,UAAU,CAAC,UAAU,CAAC,sBAAsB,CAAE,CAC/C,CAAA;IACD,IAAI,YAAY,GAAG,CAAC,CAAA;IACpB,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,YAAY,IAAI,CAAC,CAAA;QACnB,CAAC;IACH,CAAC;IACD,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,uBAAuB,CAC/B,oEAAoE;YAClE,kEAAkE;YAClE,4BAA4B,CAC/B,CAAA;IACH,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,aAAa,CAAA;IACvC,MAAM,QAAQ,GACZ,sBAAsB,KAAK,CAAC;QAC1B,CAAC,CAAC,IAAI,GAAG,EAAU;QACnB,CAAC,CAAC,CACE,MAAM,UAAU,CAAC,WAAW,CAC1B,UAAU,CAAC,UAAU,CAAC,sBAAsB,GAAG,CAAC,CAAE,CACnD,CACF,CAAC,aAAa,CAAA;IACrB,IAAI,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,uBAAuB,CAC/B,iEAAiE;YAC/D,sEAAsE;YACtE,wCAAwC,CAC3C,CAAA;IACH,CAAC;IACD,IACE,0BAA0B,KAAK,IAAI;QACnC,0BAA0B,IAAI,sBAAsB,EACpD,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,iEAAiE;YAC/D,gEAAgE,CACnE,CAAA;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"license.js","sourceRoot":"","sources":["../../src/resourceLog/license.ts"],"names":[],"mappings":"AAoCA,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAErD;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,IAAiB,EAAE,KAAkB;IACtD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,EAC/C,UAAU,EACV,sBAAsB,EACtB,0BAA0B,EAC1B,SAAS,EAMV;IACC,IACE,sBAAsB,KAAK,IAAI;QAC/B,sBAAsB,GAAG,CAAC;QAC1B,sBAAsB,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,EACtD,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,mEAAmE;YACjE,2DAA2D,CAC9D,CAAA;IACH,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,WAAW,CAC5C,UAAU,CAAC,UAAU,CAAC,sBAAsB,CAAE,CAC/C,CAAA;IACD,MAAM,eAAe,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9E,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,uBAAuB,CAC/B,oEAAoE;YAClE,kEAAkE;YAClE,4BAA4B,CAC/B,CAAA;IACH,CAAC;IACD,MAAM,QAAQ,GACZ,sBAAsB,KAAK,CAAC;QAC1B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,UAAU,CAAC,WAAW,CAC1B,UAAU,CAAC,UAAU,CAAC,sBAAsB,GAAG,CAAC,CAAE,CACnD,CAAA;IACP,MAAM,gBAAgB,GAAG,CAAC,SAAS,CACjC,SAAS,CAAC,aAAa,EACvB,QAAQ,EAAE,aAAa,IAAI,IAAI,GAAG,EAAU,CAC7C,CAAA;IACD,MAAM,gBAAgB,GAAG,CAAC,SAAS,CACjC,SAAS,CAAC,kBAAkB,EAC5B,QAAQ,EAAE,kBAAkB,IAAI,IAAI,GAAG,EAAU,CAClD,CAAA;IACD,6EAA6E;IAC7E,yEAAyE;IACzE,gCAAgC;IAChC,MAAM,kBAAkB,GAAG,eAAe,CAAC,CAAC,CAAC,CAAA;IAC7C,MAAM,QAAQ,GACZ,kBAAkB,KAAK,SAAS;QAC9B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;IACtD,MAAM,iBAAiB,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1D,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CACpC,CAAA;IACD,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC,gBAAgB,IAAI,iBAAiB,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,uBAAuB,CAC/B,sEAAsE;YACpE,2DAA2D;YAC3D,8DAA8D;YAC9D,mDAAmD,CACtD,CAAA;IACH,CAAC;IACD,IACE,0BAA0B,KAAK,IAAI;QACnC,0BAA0B,IAAI,sBAAsB,EACpD,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,iEAAiE;YAC/D,sDAAsD,CACzD,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/space/activity.d.ts

@@ -193,21 +193,6 @@ export declare function addHistoryWalletLogin({ user, id, created }?: {
     id?: string;
     created?: string;
 }): WalletActivity;
-/**
- * The Revoke activity: the user revoked a connected app's access, retiring its
- * app-key credential and its storage grants.
- *
- * @param options {object}
- * @param options.user {Actor}
- * @param options.origin {string}   the connected app's origin
- * @param options.name {string}   the connected app's display name
- * @param [options.cid] {string}   the retired app-key credential's cid
- * @param [options.revoked] {number}   how many storage grants were revoked
- * @param [options.skipped] {number}   how many grants needed no revocation
- * @param [options.id] {string}
- * @param [options.created] {string}
- * @returns {WalletActivity}
- */
 /**
  * The ClientRevoke activity: the user disconnected an enrolled wallet client
  * -- its verification methods and update key left the did:webvh document, the
@@ -313,6 +298,21 @@ export declare function addHistoryAgentRevoke({ user, origin, controller, zcaps,
     id?: string;
     created?: string;
 }): WalletActivity;
+/**
+ * The Revoke activity: the user revoked a connected app's access, retiring its
+ * app-key credential and its storage grants.
+ *
+ * @param options {object}
+ * @param options.user {Actor}
+ * @param options.origin {string}   the connected app's origin
+ * @param options.name {string}   the connected app's display name
+ * @param [options.cid] {string}   the retired app-key credential's cid
+ * @param [options.revoked] {number}   how many storage grants were revoked
+ * @param [options.skipped] {number}   how many grants needed no revocation
+ * @param [options.id] {string}
+ * @param [options.created] {string}
+ * @returns {WalletActivity}
+ */
 export declare function addHistoryAppRevoke({ user, origin, name, cid, revoked, skipped, id, created }: {
     user: Actor;
     origin: string;

package/dist/space/activity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"activity.d.ts","sourceRoot":"","sources":["../../src/space/activity.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;CAWhB,CAAA;AAEV;;GAEG;AACH,KAAK,KAAK,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAY5C;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,IAAI,EACJ,EAAE,EACF,OAAO,EACR,EAAE;IACD,IAAI,EAAE,KAAK,CAAA;IACX,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAUjB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,KAAK,EACL,MAAM,EACN,MAAM,EACN,EAAE,EACF,OAAO,EACR,EAAE;IACD,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,OAAO,CAAA;IACf,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAYjB;AAqCD;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,EAC1C,GAAG,EACH,KAAK,EACL,IAAI,EACJ,EAAE,EACF,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,KAAK,CAAA;IACX,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAUjB;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,EAC1C,GAAG,EACH,KAAK,EACL,IAAI,EACJ,EAAE,EACF,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,KAAK,CAAA;IACX,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAUjB;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CAAC,EACzC,GAAG,EACH,KAAK,EACL,IAAI,EACJ,EAAE,EACF,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,KAAK,CAAA;IACX,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAUjB;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,EAC3C,GAAG,EACH,KAAK,EACL,IAAI,EACJ,EAAE,EACF,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,KAAK,CAAA;IACX,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAUjB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,eAAe,CAAC,EAC9B,IAAI,EACJ,MAAM,EACN,MAAM,EACN,UAAU,EACV,KAAK,EACL,EAAE,EACF,OAAO,EACR,EAAE;IACD,IAAI,EAAE,KAAK,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,aAAa,EAAE,CAAA;IACvB,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACjE,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IACxB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAmBjB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,IAAI,EACJ,EAAE,EACF,OAAO,EACR,GAAE;IACD,IAAI,CAAC,EAAE,KAAK,CAAA;IACZ,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACZ,GAAG,cAAc,CAStB;AAED;;;;;;;;;;;;;;GAcG;AACH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,uBAAuB,CAAC,EACtC,IAAI,EACJ,mBAAmB,EACnB,KAAK,EACL,OAAO,EACP,MAAM,EACN,EAAE,EACF,OAAO,EACR,EAAE;IACD,IAAI,EAAE,KAAK,CAAA;IACX,mBAAmB,EAAE,MAAM,CAAA;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAWjB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,6BAA6B,CAAC,EAC5C,IAAI,EACJ,YAAY,EACZ,UAAU,EACV,SAAS,EACT,UAAU,EACV,OAAO,EACR,EAAE;IACD,IAAI,EAAE,KAAK,CAAA;IACX,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CASjB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,IAAI,EACJ,MAAM,EACN,UAAU,EACV,KAAK,EACL,KAAK,EACL,OAAO,EACP,OAAO,EACP,EAAE,EACF,OAAO,EACR,EAAE;IACD,IAAI,EAAE,KAAK,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC7B,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAgBjB;AAED,wBAAgB,mBAAmB,CAAC,EAClC,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,GAAG,EACH,OAAO,EACP,OAAO,EACP,EAAE,EACF,OAAO,EACR,EAAE;IACD,IAAI,EAAE,KAAK,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAejB"}
+{"version":3,"file":"activity.d.ts","sourceRoot":"","sources":["../../src/space/activity.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;CAWhB,CAAA;AAEV;;GAEG;AACH,KAAK,KAAK,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAY5C;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,IAAI,EACJ,EAAE,EACF,OAAO,EACR,EAAE;IACD,IAAI,EAAE,KAAK,CAAA;IACX,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAUjB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,KAAK,EACL,MAAM,EACN,MAAM,EACN,EAAE,EACF,OAAO,EACR,EAAE;IACD,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,OAAO,CAAA;IACf,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAYjB;AAqCD;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,EAC1C,GAAG,EACH,KAAK,EACL,IAAI,EACJ,EAAE,EACF,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,KAAK,CAAA;IACX,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAUjB;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,EAC1C,GAAG,EACH,KAAK,EACL,IAAI,EACJ,EAAE,EACF,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,KAAK,CAAA;IACX,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAUjB;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CAAC,EACzC,GAAG,EACH,KAAK,EACL,IAAI,EACJ,EAAE,EACF,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,KAAK,CAAA;IACX,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAUjB;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,EAC3C,GAAG,EACH,KAAK,EACL,IAAI,EACJ,EAAE,EACF,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,KAAK,CAAA;IACX,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAUjB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,eAAe,CAAC,EAC9B,IAAI,EACJ,MAAM,EACN,MAAM,EACN,UAAU,EACV,KAAK,EACL,EAAE,EACF,OAAO,EACR,EAAE;IACD,IAAI,EAAE,KAAK,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,aAAa,EAAE,CAAA;IACvB,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACjE,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IACxB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAmBjB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,IAAI,EACJ,EAAE,EACF,OAAO,EACR,GAAE;IACD,IAAI,CAAC,EAAE,KAAK,CAAA;IACZ,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACZ,GAAG,cAAc,CAStB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,uBAAuB,CAAC,EACtC,IAAI,EACJ,mBAAmB,EACnB,KAAK,EACL,OAAO,EACP,MAAM,EACN,EAAE,EACF,OAAO,EACR,EAAE;IACD,IAAI,EAAE,KAAK,CAAA;IACX,mBAAmB,EAAE,MAAM,CAAA;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAWjB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,6BAA6B,CAAC,EAC5C,IAAI,EACJ,YAAY,EACZ,UAAU,EACV,SAAS,EACT,UAAU,EACV,OAAO,EACR,EAAE;IACD,IAAI,EAAE,KAAK,CAAA;IACX,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CASjB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,IAAI,EACJ,MAAM,EACN,UAAU,EACV,KAAK,EACL,KAAK,EACL,OAAO,EACP,OAAO,EACP,EAAE,EACF,OAAO,EACR,EAAE;IACD,IAAI,EAAE,KAAK,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC7B,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAgBjB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,GAAG,EACH,OAAO,EACP,OAAO,EACP,EAAE,EACF,OAAO,EACR,EAAE;IACD,IAAI,EAAE,KAAK,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAejB"}