@interop/wallet-core 0.62.0 → 0.66.0

package/dist/clientAnnex/establish.d.ts

@@ -26,8 +26,9 @@
  *    moments before dying on the promoted Space, a permanent lockout.
  * 2. `ensureCredentialAnchoredAccountGenesis` under the ladder VM's bare
  *    did:key as bootstrap controller, promotion deferred
- *    (`promoteController: false`): Space + collections, the optional KMS key
- *    map (`provideDidWebKeys`, an opaque best-effort thunk the caller owns),
+ *    (`promoteController: false`): Space + collections, the optional KMS
+ *    authentication binding (`provideKmsAuthentication`, an opaque
+ *    best-effort thunk the caller owns, started alongside the Space),
  *    the one-entry ladder-anchored did:webvh genesis with the credential's
  *    `keyAgreement` publication folded in, the roster's epoch[0] wrapped to
  *    the credential's standing key-agreement key with a ladder-signed entry
@@ -86,13 +87,14 @@
  * bare did:key -- outside the current-key-set rule -- with no mender here;
  * an open gap owned by the did:web-stage collapse.
  */
+import type { DIDLog } from '@interop/did-method-webvh';
 import type { IKeyAgreementKey, IZcap } from '@interop/data-integrity-core';
 import type { WasClient } from '@interop/was-client';
 import type { EncryptionDescriptorStore } from '@interop/was-client/edv';
 import type { ResourceLogPinStore } from '@interop/vh-resource-log';
 import type { ZcapClient } from '@interop/ezcap';
 import { type AccountGenesisResult } from '../genesis/accountGenesis.js';
-import type { ClientWebvhUpdateKeys, DidWebKeyMapV2, PublishedWebvhLog, WebvhIdStore } from '../webvh/didWebvh.js';
+import type { ClientWebvhUpdateKeys, KmsAuthenticationBinding, PublishedWebvhLog, WebvhIdStore } from '../webvh/didWebvh.js';
 import type { ICapabilityAgent } from '../webvh/zcap.js';
 import type { AccountPointer } from '../keyring/record.js';
 import { type UserKey } from '../keys/index.js';
@@ -122,16 +124,25 @@ export interface CredentialAnchoredStandingFields {
  * DID, the record's unlock Space id and management zcap, the standing fields
  * a registry entry records, and the report members -- the genesis's
  * `epochsSkipped` marker and the best-effort stages' collected failures
- * (`didWebKeys`, `keystorePromotion`).
+ * (`kmsAuthentication`, `keystorePromotion`).
  */
 export interface CredentialAnchoredEstablishment {
     did: string;
+    /**
+     * The account log's verified head this run ends standing on -- the pointer
+     * entry's own post-publish head when stage 3 wrote one, otherwise the head
+     * stage 3 stood on. The caller enters the account straight after this
+     * returns, so it seeds its session's verified-log memo from here rather
+     * than fetching `did.jsonl` again (`verifiedAccountLogOf`); reuse is within
+     * this one run alone.
+     */
+    accountLog: PublishedWebvhLog;
     unlockSpaceId: string;
     manageCapability?: IZcap;
     standingFields: CredentialAnchoredStandingFields;
     epochsSkipped?: AccountGenesisResult['epochsSkipped'];
     failed: Array<{
-        stage: 'didWebKeys' | 'keystorePromotion';
+        stage: 'kmsAuthentication' | 'keystorePromotion';
         error: unknown;
     }>;
 }
@@ -230,11 +241,19 @@ export type CredentialAnchoredBindRecordHook = (options: {
  *   establishment's root window omits it
  * @param [options.pinStore] {ResourceLogPinStore}   chain-head pins; slot
  *   keys are derived here per log
+ * @param [options.published] {PublishedWebvhLog}   the same account head as
+ *   `account`, complete with the ETag its read carried, when the caller holds
+ *   one. The pointer entry's first attempt then builds on it -- one saved
+ *   read of the log the caller just read or published -- and a lost
+ *   compare-and-swap falls through to a fresh pinned read
  * @param [options.now] {number}   epoch milliseconds, for tests
  * @returns {Promise<object>}   the pointed (or freshly minted) annex DID,
- *   the generation delegation when one was installed here, and what ran
+ *   the generation delegation when one was installed here, what ran, and --
+ *   on `accountLog` -- the account head this block leaves standing: the
+ *   post-pointer-entry one when it wrote, the supplied `published` verbatim
+ *   when the document already pointed at a generation
  */
-export declare function ensurePointedClientAnnexGeneration({ account, wasServerUrl, accountSpaceId, ladderSeed, was, mintController, mintGenerationDelegation, idStore, updateKeys, delegatedClients, invocation, logOnly, pinStore, now }: {
+export declare function ensurePointedClientAnnexGeneration({ account, wasServerUrl, accountSpaceId, ladderSeed, was, mintController, mintGenerationDelegation, idStore, updateKeys, delegatedClients, invocation, logOnly, pinStore, published, now }: {
     account: Pick<PublishedWebvhLog, 'did' | 'doc' | 'log'>;
     wasServerUrl: string;
     accountSpaceId: string;
@@ -253,12 +272,14 @@ export declare function ensurePointedClientAnnexGeneration({ account, wasServerU
     };
     logOnly?: boolean;
     pinStore?: ResourceLogPinStore;
+    published?: PublishedWebvhLog;
     now?: number;
 }): Promise<{
     clientAnnexDid: string;
     generationDelegation?: IZcap;
     generationMinted: boolean;
     spaceMinted: boolean;
+    accountLog?: PublishedWebvhLog;
 }>;
 /**
  * Runs the whole credential-anchored establishment for one unlock credential
@@ -279,10 +300,12 @@ export declare function ensurePointedClientAnnexGeneration({ account, wasServerU
  * @param options.bindRecord {CredentialAnchoredBindRecordHook}   REQUIRED:
  *   the unlock-record codec closure (see its type doc for the hook's
  *   standing-layout and freshness-floor obligations)
- * @param options.rosterStoreFor {Function}   REQUIRED: `({ did }) =>
+ * @param options.rosterStoreFor {Function}   REQUIRED: `({ did, log }) =>
  *   EncryptionDescriptorStore` -- the user-key roster's store, with a
  *   LADDER-signed log signer (the ceremony-tail license's first-entry
- *   shape), invoked as the bootstrap did:key
+ *   shape), invoked as the bootstrap did:key. `log` is the account log this
+ *   run adopted or published, so a store resolving its controller view reads
+ *   it out of this run's own head instead of fetching `did.jsonl` again
  * @param options.bootstrapWasFor {Function}   REQUIRED:
  *   `({ keyAgent }) => WasClient` -- the storage client wiring, signing as
  *   the ladder VM's bare did:key (the agent is derived here from the seed)
@@ -308,10 +331,15 @@ export declare function ensurePointedClientAnnexGeneration({ account, wasServerU
  *   delegation, when the caller holds one -- threaded into stage 3's Space
  *   resolution; under this ceremony's bootstrap-only authority a
  *   sibling-named Space it can no longer write falls back to a fresh mint
- * @param [options.provideDidWebKeys] {Function}   `() =>
- *   Promise<DidWebKeyMapV2 | undefined>` -- the caller's opaque best-effort
- *   KMS/did:web thunk, run inside stage 2 (the caller owns its body and its
- *   timeout); a throw is the collected non-fatal `didWebKeys` failure
+ * @param [options.provideKmsAuthentication] {Function}   `({ spaceReady }) =>
+ *   Promise<KmsAuthenticationBinding | undefined>` -- the caller's opaque
+ *   best-effort KMS thunk, started in stage 2 alongside the Space
+ *   provisioning it reports through `spaceReady` (the caller owns its body
+ *   and its timeout); a throw is the collected non-fatal `kmsAuthentication`
+ *   failure. The thunk's obligation, since the genesis takes
+ *   `authentication.vmId` verbatim into the world-readable entry: it adopts a
+ *   served `keys.json` only after checking that `vmId`'s multibase against
+ *   its own keystore listing, and mints otherwise
  * @param [options.promoteKeystore] {Function}   `({ did }) => Promise<void>`
  *   -- the best-effort keystore-controller promotion, called after the
  *   Space's own promotion; the caller's closure no-ops when its KMS stage
@@ -326,15 +354,16 @@ export declare function ensurePointedClientAnnexGeneration({ account, wasServerU
  *   client-local one when a remembered caller seeds its own pin)
  * @param [options.now] {number}   epoch milliseconds, for tests
  * @param [options.onStage] {StageNotifier}   observational: called as each
- *   stage finishes, so a caller can time them. In order:
- *   `interim-bind` (skipped with `priorCreatedAt`), `space-provisioning`,
- *   `webvh-genesis`, `roster-genesis`, `collection-epochs`,
- *   `roster-delivered-epochs` (only on the adopted-roster arm),
- *   `account-log-read`, `annex-generation`, `record-rebind`,
- *   `controller-promotion`. The three stages whose body is the caller's own
- *   closure -- the KMS thunk, `beforePromotion`, `promoteKeystore` -- are
- *   left for the caller to mark inside them, since only the caller can name
- *   what its closure does
+ *   stage finishes, so a caller can time them, in the order of
+ *   `CREDENTIAL_ANCHORED_ESTABLISHMENT_STAGES` (`clientAnnex/stages.ts`).
+ *   `interim-bind` is skipped with `priorCreatedAt`; `account-log-read` is
+ *   kept as the stage-3 preamble's name, its span near-zero whenever the
+ *   genesis's own head is reused instead of read; and the adopted-roster arm
+ *   reports `roster-delivered-epochs` in place of `collection-epochs` (see
+ *   `CREDENTIAL_ANCHORED_ESTABLISHMENT_STAGE_ALIASES` beside it). The two
+ *   stages whose body is the caller's own closure -- `beforePromotion` and
+ *   `promoteKeystore` -- are left for the caller to mark inside them, since
+ *   only the caller can name what its closure does
  * @returns {Promise<CredentialAnchoredEstablishment>}
  * @throws {TypeError}   synchronously, when a required hook is missing
  * @throws {Error}   when the genesis's roster or epoch stage did not land
@@ -354,6 +383,7 @@ export declare function establishCredentialAnchoredAccount(options: {
     bindRecord: CredentialAnchoredBindRecordHook;
     rosterStoreFor: (options: {
         did: string;
+        log: DIDLog;
     }) => EncryptionDescriptorStore;
     bootstrapWasFor: (options: {
         keyAgent: ICapabilityAgent;
@@ -363,7 +393,9 @@ export declare function establishCredentialAnchoredAccount(options: {
     lowEntropy: boolean;
     priorCreatedAt?: string;
     delegatedClients?: IZcap;
-    provideDidWebKeys?: () => Promise<DidWebKeyMapV2 | undefined>;
+    provideKmsAuthentication?: (options: {
+        spaceReady: Promise<unknown>;
+    }) => Promise<KmsAuthenticationBinding | undefined>;
     promoteKeystore?: (options: {
         did: string;
     }) => Promise<void>;
@@ -379,23 +411,75 @@ export declare function establishCredentialAnchoredAccount(options: {
     onStage?: StageNotifier;
 }): Promise<CredentialAnchoredEstablishment>;
 /**
- * The current `updateKeys` / `nextKeyHashes` view of a published log, for
- * the bind-time rung attribution.
+ * The re-bind every credential-anchored path ends on (the establishment's
+ * stage 4, and the mend's record-downgrade re-bind): the ladder-VM-signed
+ * bridge and `delegatedClients` sibling delegations, then the record
+ * re-bound through the caller's `bindRecord` hook with the full pointer, both
+ * delegations, and the management delegation to the account DID. The
+ * delegations are ladder-VM-signed because they must survive promotion,
+ * which the interim did:key-signed bridge cannot.
  *
- * @param published {PublishedWebvhLog}
- * @returns {object}
+ * @param options {object}
+ * @param options.accountDid {string}   the published account DID
+ * @param options.pointer {AccountPointer}   the full pointer, naming that DID
+ * @param options.ladderSeed {Uint8Array}
+ * @param options.standingClientDid {string}   the credential's standing
+ *   client did:key, the delegations' controller
+ * @param options.clientAnnexSpaceId {string}   the pointed generation's Space
+ *   (the sibling delegation's target)
+ * @param options.bindRecord {CredentialAnchoredBindRecordHook}
+ * @param options.stage {string}   the bind's name in the result assertion
+ * @param [options.priorCreatedAt] {string}   the earlier bind's stamp, when
+ *   one stands
+ * @param [options.now] {number}   epoch milliseconds, for tests
+ * @returns {Promise<{ bridge: IZcap, sibling: IZcap,
+ *   rebind: CredentialAnchoredBindResult }>}
  */
-export declare function currentLogParameters(published: Pick<PublishedWebvhLog, 'log'>): {
-    updateKeys: string[];
-    nextKeyHashes: string[];
-};
+export declare function rebindCredentialAnchoredRecord({ accountDid, pointer, ladderSeed, standingClientDid, clientAnnexSpaceId, bindRecord, stage, priorCreatedAt, now }: {
+    accountDid: string;
+    pointer: AccountPointer;
+    ladderSeed: Uint8Array;
+    standingClientDid: string;
+    clientAnnexSpaceId: string;
+    bindRecord: CredentialAnchoredBindRecordHook;
+    stage: string;
+    priorCreatedAt?: string;
+    now?: number;
+}): Promise<{
+    bridge: IZcap;
+    sibling: IZcap;
+    rebind: CredentialAnchoredBindResult;
+}>;
 /**
- * A delegation's `expires` caveat, when it carries one.
+ * The one builder of the standing fields a registry entry records, shared
+ * by the establishment (from the delegations it just minted and the re-bind
+ * it just ran) and the mend's registry arm (from the caller's standing
+ * record). Optional members are present iff their source is.
  *
- * @param zcap {IZcap}
- * @returns {string | undefined}
+ * @param options {object}
+ * @param options.standing {object}   the credential's standing client:
+ *   `clientDid`, `keyAgreementKeyMultibase`, `recipientKid`
+ * @param options.updateKeyMultibase {string}   the attributed revealed rung
+ * @param [options.bridge] {IZcap}   the record's bridge delegation
+ * @param [options.sibling] {IZcap}   the record's `delegatedClients` sibling
+ * @param [options.unlock] {object}   the unlock key-agreement members, from
+ *   the bind result or the standing record
+ * @returns {CredentialAnchoredStandingFields}
  */
-export declare function zcapExpires(zcap: IZcap): string | undefined;
+export declare function credentialAnchoredStandingFields({ standing, updateKeyMultibase, bridge, sibling, unlock }: {
+    standing: {
+        clientDid: string;
+        keyAgreementKeyMultibase: string;
+        recipientKid: string;
+    };
+    updateKeyMultibase: string;
+    bridge?: IZcap;
+    sibling?: IZcap;
+    unlock?: {
+        unlockKeyAgreementKeyId?: string;
+        unlockKeyAgreementKeyMultibase?: string;
+    };
+}): CredentialAnchoredStandingFields;
 /**
  * Asserts a `bindRecord` result carries the members the ceremony reads --
  * the observable half of the hook's standing-layout obligation (the sealed

package/dist/clientAnnex/establish.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"establish.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/establish.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoFG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AAC3E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AACnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,8BAA8B,CAAA;AAMrC,OAAO,KAAK,EACV,qBAAqB,EACrB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACb,MAAM,sBAAsB,CAAA;AAG7B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAExD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAK1D,OAAO,EAAe,KAAK,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAmB5D,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,WAAW,CAAA;AAE7D;;;;;;;GAOG;AACH,MAAM,WAAW,gCAAgC;IAC/C,SAAS,EAAE,MAAM,CAAA;IACjB,wBAAwB,EAAE,MAAM,CAAA;IAChC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,eAAe,EAAE,MAAM,CAAA;IACvB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,8BAA8B,CAAC,EAAE,MAAM,CAAA;CACxC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,+BAA+B;IAC9C,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,CAAC,EAAE,KAAK,CAAA;IACxB,cAAc,EAAE,gCAAgC,CAAA;IAChD,aAAa,CAAC,EAAE,oBAAoB,CAAC,eAAe,CAAC,CAAA;IACrD,MAAM,EAAE,KAAK,CAAC;QACZ,KAAK,EAAE,YAAY,GAAG,mBAAmB,CAAA;QACzC,KAAK,EAAE,OAAO,CAAA;KACf,CAAC,CAAA;CACH;AAED;;;;;GAKG;AACH,MAAM,WAAW,4BAA4B;IAC3C,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,CAAC,EAAE,KAAK,CAAA;IACxB,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,8BAA8B,CAAC,EAAE,MAAM,CAAA;CACxC;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,gCAAgC,GAAG,CAAC,OAAO,EAAE;IACvD,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,cAAc,CAAA;IACvB,UAAU,EAAE,KAAK,CAAA;IACjB,gBAAgB,CAAC,EAAE,KAAK,CAAA;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,KAAK,OAAO,CAAC,4BAA4B,CAAC,CAAA;AAE3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AACH,wBAAsB,kCAAkC,CAAC,EACvD,OAAO,EACP,YAAY,EACZ,cAAc,EACd,UAAU,EACV,GAAG,EACH,cAAc,EACd,wBAAwB,EACxB,OAAO,EACP,UAAU,EACV,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,QAAQ,EACR,GAAG,EACJ,EAAE;IACD,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,CAAA;IACvD,YAAY,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,EAAE,UAAU,CAAA;IACtB,GAAG,EAAE,SAAS,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,wBAAwB,EAAE,CAAC,OAAO,EAAE;QAClC,cAAc,EAAE,MAAM,CAAA;KACvB,KAAK,OAAO,CAAC,KAAK,CAAC,CAAA;IACpB,OAAO,EAAE,YAAY,CAAA;IACrB,UAAU,CAAC,EAAE,qBAAqB,CAAA;IAClC,gBAAgB,CAAC,EAAE,KAAK,CAAA;IACxB,UAAU,CAAC,EAAE;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,UAAU,EAAE,KAAK,CAAA;KAAE,CAAA;IAClD,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAAC;IACV,cAAc,EAAE,MAAM,CAAA;IACtB,oBAAoB,CAAC,EAAE,KAAK,CAAA;IAC5B,gBAAgB,EAAE,OAAO,CAAA;IACzB,WAAW,EAAE,OAAO,CAAA;CACrB,CAAC,CAuJD;AAsCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgFG;AACH,wBAAgB,kCAAkC,CAAC,OAAO,EAAE;IAC1D,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,QAAQ,EAAE;QACR,SAAS,EAAE,MAAM,CAAA;QACjB,wBAAwB,EAAE,MAAM,CAAA;QAChC,YAAY,EAAE,MAAM,CAAA;QACpB,eAAe,EAAE,gBAAgB,CAAA;KAClC,CAAA;IACD,UAAU,EAAE,gCAAgC,CAAA;IAC5C,cAAc,EAAE,CAAC,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,KAAK,yBAAyB,CAAA;IACvE,eAAe,EAAE,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,gBAAgB,CAAA;KAAE,KAAK,SAAS,CAAA;IACvE,OAAO,EAAE,YAAY,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,OAAO,CAAA;IACnB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,gBAAgB,CAAC,EAAE,KAAK,CAAA;IACxB,iBAAiB,CAAC,EAAE,MAAM,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAA;IAC7D,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7D,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE;QAC1B,GAAG,EAAE,SAAS,CAAA;QACd,UAAU,EAAE,UAAU,CAAA;QACtB,GAAG,EAAE,MAAM,CAAA;QACX,OAAO,EAAE,OAAO,CAAA;QAChB,aAAa,EAAE,+BAA+B,CAAA;KAC/C,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,aAAa,CAAA;CACxB,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAuB3C;AA6SD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,GACxC;IACD,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,aAAa,EAAE,MAAM,EAAE,CAAA;CACxB,CAGA;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAE3D;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,IAAI,EACJ,KAAK,EACN,EAAE;IACD,IAAI,EAAE,4BAA4B,CAAA;IAClC,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,IAAI,CAgBP"}
+{"version":3,"file":"establish.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/establish.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqFG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAA;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AAC3E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AACnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,8BAA8B,CAAA;AAMrC,OAAO,KAAK,EACV,qBAAqB,EACrB,wBAAwB,EACxB,iBAAiB,EACjB,YAAY,EACb,MAAM,sBAAsB,CAAA;AAG7B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAExD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAK1D,OAAO,EAAe,KAAK,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAoB5D,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,WAAW,CAAA;AAE7D;;;;;;;GAOG;AACH,MAAM,WAAW,gCAAgC;IAC/C,SAAS,EAAE,MAAM,CAAA;IACjB,wBAAwB,EAAE,MAAM,CAAA;IAChC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,eAAe,EAAE,MAAM,CAAA;IACvB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,8BAA8B,CAAC,EAAE,MAAM,CAAA;CACxC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,+BAA+B;IAC9C,GAAG,EAAE,MAAM,CAAA;IACX;;;;;;;OAOG;IACH,UAAU,EAAE,iBAAiB,CAAA;IAC7B,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,CAAC,EAAE,KAAK,CAAA;IACxB,cAAc,EAAE,gCAAgC,CAAA;IAChD,aAAa,CAAC,EAAE,oBAAoB,CAAC,eAAe,CAAC,CAAA;IACrD,MAAM,EAAE,KAAK,CAAC;QACZ,KAAK,EAAE,mBAAmB,GAAG,mBAAmB,CAAA;QAChD,KAAK,EAAE,OAAO,CAAA;KACf,CAAC,CAAA;CACH;AAED;;;;;GAKG;AACH,MAAM,WAAW,4BAA4B;IAC3C,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,CAAC,EAAE,KAAK,CAAA;IACxB,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,8BAA8B,CAAC,EAAE,MAAM,CAAA;CACxC;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,gCAAgC,GAAG,CAAC,OAAO,EAAE;IACvD,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,cAAc,CAAA;IACvB,UAAU,EAAE,KAAK,CAAA;IACjB,gBAAgB,CAAC,EAAE,KAAK,CAAA;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,KAAK,OAAO,CAAC,4BAA4B,CAAC,CAAA;AAE3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2EG;AACH,wBAAsB,kCAAkC,CAAC,EACvD,OAAO,EACP,YAAY,EACZ,cAAc,EACd,UAAU,EACV,GAAG,EACH,cAAc,EACd,wBAAwB,EACxB,OAAO,EACP,UAAU,EACV,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,QAAQ,EACR,SAAS,EACT,GAAG,EACJ,EAAE;IACD,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,CAAA;IACvD,YAAY,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,EAAE,UAAU,CAAA;IACtB,GAAG,EAAE,SAAS,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,wBAAwB,EAAE,CAAC,OAAO,EAAE;QAClC,cAAc,EAAE,MAAM,CAAA;KACvB,KAAK,OAAO,CAAC,KAAK,CAAC,CAAA;IACpB,OAAO,EAAE,YAAY,CAAA;IACrB,UAAU,CAAC,EAAE,qBAAqB,CAAA;IAClC,gBAAgB,CAAC,EAAE,KAAK,CAAA;IACxB,UAAU,CAAC,EAAE;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,UAAU,EAAE,KAAK,CAAA;KAAE,CAAA;IAClD,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,SAAS,CAAC,EAAE,iBAAiB,CAAA;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAAC;IACV,cAAc,EAAE,MAAM,CAAA;IACtB,oBAAoB,CAAC,EAAE,KAAK,CAAA;IAC5B,gBAAgB,EAAE,OAAO,CAAA;IACzB,WAAW,EAAE,OAAO,CAAA;IACpB,UAAU,CAAC,EAAE,iBAAiB,CAAA;CAC/B,CAAC,CAsID;AAsCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwFG;AACH,wBAAgB,kCAAkC,CAAC,OAAO,EAAE;IAC1D,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,QAAQ,EAAE;QACR,SAAS,EAAE,MAAM,CAAA;QACjB,wBAAwB,EAAE,MAAM,CAAA;QAChC,YAAY,EAAE,MAAM,CAAA;QACpB,eAAe,EAAE,gBAAgB,CAAA;KAClC,CAAA;IACD,UAAU,EAAE,gCAAgC,CAAA;IAC5C,cAAc,EAAE,CAAC,OAAO,EAAE;QACxB,GAAG,EAAE,MAAM,CAAA;QACX,GAAG,EAAE,MAAM,CAAA;KACZ,KAAK,yBAAyB,CAAA;IAC/B,eAAe,EAAE,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,gBAAgB,CAAA;KAAE,KAAK,SAAS,CAAA;IACvE,OAAO,EAAE,YAAY,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,OAAO,CAAA;IACnB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,gBAAgB,CAAC,EAAE,KAAK,CAAA;IACxB,wBAAwB,CAAC,EAAE,CAAC,OAAO,EAAE;QACnC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;KAC7B,KAAK,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAA;IACnD,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7D,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE;QAC1B,GAAG,EAAE,SAAS,CAAA;QACd,UAAU,EAAE,UAAU,CAAA;QACtB,GAAG,EAAE,MAAM,CAAA;QACX,OAAO,EAAE,OAAO,CAAA;QAChB,aAAa,EAAE,+BAA+B,CAAA;KAC/C,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,aAAa,CAAA;CACxB,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAuB3C;AA2SD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,8BAA8B,CAAC,EACnD,UAAU,EACV,OAAO,EACP,UAAU,EACV,iBAAiB,EACjB,kBAAkB,EAClB,UAAU,EACV,KAAK,EACL,cAAc,EACd,GAAG,EACJ,EAAE;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,cAAc,CAAA;IACvB,UAAU,EAAE,UAAU,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,UAAU,EAAE,gCAAgC,CAAA;IAC5C,KAAK,EAAE,MAAM,CAAA;IACb,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAAC;IACV,MAAM,EAAE,KAAK,CAAA;IACb,OAAO,EAAE,KAAK,CAAA;IACd,MAAM,EAAE,4BAA4B,CAAA;CACrC,CAAC,CA2BD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gCAAgC,CAAC,EAC/C,QAAQ,EACR,kBAAkB,EAClB,MAAM,EACN,OAAO,EACP,MAAM,EACP,EAAE;IACD,QAAQ,EAAE;QACR,SAAS,EAAE,MAAM,CAAA;QACjB,wBAAwB,EAAE,MAAM,CAAA;QAChC,YAAY,EAAE,MAAM,CAAA;KACrB,CAAA;IACD,kBAAkB,EAAE,MAAM,CAAA;IAC1B,MAAM,CAAC,EAAE,KAAK,CAAA;IACd,OAAO,CAAC,EAAE,KAAK,CAAA;IACf,MAAM,CAAC,EAAE;QACP,uBAAuB,CAAC,EAAE,MAAM,CAAA;QAChC,8BAA8B,CAAC,EAAE,MAAM,CAAA;KACxC,CAAA;CACF,GAAG,gCAAgC,CAmBnC;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,IAAI,EACJ,KAAK,EACN,EAAE;IACD,IAAI,EAAE,4BAA4B,CAAA;IAClC,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,IAAI,CAgBP"}