@interop/wallet-core 0.62.0 → 0.66.0

package/dist/keys/userKeyRosterCascade.js

@@ -1,7 +1,7 @@
 import { webvhResourceLogController } from '../resourceLog/index.js';
 import { cascadeCollectionsToUserKey } from './userKeyCascade.js';
 import { isSealableDescriptorStore } from './rosterLogStore.js';
-import { convergeUserKeyRosterToDocument, readUserKeyRoster } from './userKeyRoster.js';
+import { convergeUserKeyRosterToDocument, readUserKeyRoster, rosterWrapsRecipient, rotateUserKeyRoster } from './userKeyRoster.js';
 /**
  * Resolves the collection ids the fan-out covers, whether they are a fixed set
  * or a listing the app performs.
@@ -16,6 +16,94 @@ async function collectionIdsOf({ collections }) {
         ? await collectionIds()
         : collectionIds;
 }
+/**
+ * The post-edit anchoring guarantee, shared by both entry points: the roster
+ * appends -- and the seal backstop's removal detection -- must run under a
+ * controller view that includes the log the ceremony is anchoring at, or the
+ * rotation anchors before it (a revocation's rotation leaves the log
+ * unsealed with the seal blind to the removal; the last-client transition's
+ * ladder-signed rotation lands before its reinstall version and the
+ * ceremony-tail license refuses it). Rather than leaving that to the
+ * injected store's own controller wiring, the view built from the ceremony's
+ * log is set as the store's minimum controller version; a fresher resolved
+ * view still wins. A store that is not log-governed has no controller view
+ * to anchor and is left alone. Exported for the one caller that reads the
+ * roster before its anchoring entry exists (the last-client transition's
+ * pre-pair probe, anchored at the pre-transition head it verified).
+ *
+ * @param options {object}
+ * @param options.rosterStore {EncryptionDescriptorStore}
+ * @param options.did {string}
+ * @param options.log {DIDLog}
+ */
+export function anchorRosterStoreAt({ rosterStore, did, log }) {
+    if (isSealableDescriptorStore(rosterStore)) {
+        rosterStore.setMinimumControllerVersion({
+            controller: webvhResourceLogController({ did, log })
+        });
+    }
+}
+/**
+ * The adopting read after a rotation: the roster read on the threaded
+ * descriptor (the continuity and possession checks still run on it), then
+ * the caller's `onUserKeyAdopted` when the key rotated on this run.
+ *
+ * @param options {object}
+ * @param options.rosterStore {EncryptionDescriptorStore}
+ * @param options.descriptor {CollectionEncryption}   the rotation's own
+ *   verified result, so one run acquires the roster once for both halves
+ * @param [options.userKey] {UserKey}
+ * @param options.readBackKeyAgreementKey {IKeyAgreementKey}
+ * @param [options.pinnedEpochId] {string}
+ * @param [options.onUserKeyAdopted] {Function}
+ * @returns {Promise<object>}
+ */
+async function adoptRotatedUserKey({ rosterStore, descriptor, userKey, readBackKeyAgreementKey, pinnedEpochId, onUserKeyAdopted }) {
+    const read = await readUserKeyRoster({
+        store: rosterStore,
+        descriptor,
+        ...(userKey ? { userKey } : {}),
+        clientKeyAgreementKey: readBackKeyAgreementKey,
+        pinnedEpochId
+    });
+    if (read.rotated) {
+        await onUserKeyAdopted?.({
+            userKey: read.userKey,
+            latestEpochId: read.latestEpochId,
+            descriptor: read.descriptor
+        });
+    }
+    return {
+        rotated: read.rotated,
+        userKey: read.userKey,
+        descriptor: read.descriptor
+    };
+}
+/**
+ * The collection fan-out, in parallel -- run even when the roster was found
+ * already rotated (a re-run after a crash), because the staleness rule finds
+ * exactly the stranded collections.
+ *
+ * @param options {object}
+ * @param options.collections {CascadeCollections}
+ * @param options.rosterDescriptor {CollectionEncryption}
+ * @param options.clientKeyAgreementKey {IKeyAgreementKey}   the key that
+ *   unwraps the roster's generations for the per-collection re-epoch
+ * @param options.userKey {UserKey}
+ * @returns {Promise<UserKeyCascadeResult>}
+ */
+async function fanOutToCollections({ collections, rosterDescriptor, clientKeyAgreementKey, userKey }) {
+    return cascadeCollectionsToUserKey({
+        collectionIds: await collectionIdsOf({ collections }),
+        storeFor: collections.storeFor,
+        ...(collections.isEncrypted
+            ? { isEncrypted: collections.isEncrypted }
+            : {}),
+        rosterDescriptor,
+        clientKeyAgreementKey,
+        userKey
+    });
+}
 /**
  * Runs the roster rotation (with its seal backstop) and the collection
  * fan-out over the document a ceremony's own edit just published. See the
@@ -26,32 +114,20 @@ async function collectionIdsOf({ collections }) {
  *   `key-map/user-key.jsonl` roster store
  * @param options.did {string}   the account's did:webvh
  * @param options.doc {DIDDoc}   the document as the ceremony's edit left it
- * @param options.log {DIDLog}   the post-edit log, which the controller floor
- *   is built from
+ * @param options.log {DIDLog}   the post-edit log, which the minimum
+ *   controller version is built from
  * @param [options.userKey] {UserKey}   this client's cached user key
  * @param options.clientKeyAgreementKey {IKeyAgreementKey}   this client's own
  *   (identity) key-agreement key -- its roster entry
  * @param [options.pinnedEpochId] {string}   the locally pinned latest-seen
  *   roster epoch
- * @param [options.onUserKeyAdopted] {Function}   persists a rotated key:
- *   called with `{ userKey, latestEpochId, descriptor }` after the roster read
- *   and BEFORE the fan-out. The key and the epoch pin must persist atomically
+ * @param [options.onUserKeyAdopted] {UserKeyAdoptedHook}   persists a
+ *   rotated key
  * @param options.collections {CascadeCollections}   the fan-out's work
  * @returns {Promise<RosterCascadeResult>}
  */
 export async function rotateRosterToDocumentAndCascade({ rosterStore, did, doc, log, userKey, clientKeyAgreementKey, pinnedEpochId, onUserKeyAdopted, collections }) {
-    // The post-edit anchoring guarantee: the roster appends -- and the seal
-    // backstop's removal detection -- must run under a controller view that
-    // includes the edit the ceremony just published, or the rotation anchors
-    // pre-edit and the log stays unsealed with the seal blind to the removal.
-    // Rather than leaving that to the injected store's own controller wiring,
-    // the view built from the edit's post-edit log is set as the store's floor;
-    // a fresher resolved view still wins.
-    if (isSealableDescriptorStore(rosterStore)) {
-        rosterStore.setControllerFloor({
-            controller: webvhResourceLogController({ did, log })
-        });
-    }
+    anchorRosterStoreAt({ rosterStore, did, log });
     // The roster rotation, recipients resolved from that same document.
     // Whether there IS a roster is settled BY the convergence call itself: a
     // `null` descriptor back means the account has no `key-map/user-key.jsonl`
@@ -64,28 +140,20 @@ export async function rotateRosterToDocumentAndCascade({ rosterStore, did, doc,
     // run left behind, in one rotation.
     const converged = await convergeUserKeyRosterToDocument({
         store: rosterStore,
-        document: doc
+        document: doc,
+        ownerKeyAgreementKey: clientKeyAgreementKey
     });
     if (converged.descriptor === null) {
         return { rotated: false, collections: { outcomes: {}, failed: [] } };
     }
-    // The rotation's own verified result is threaded into the adopting read, so
-    // one run acquires the roster once for both halves of the stage (the
-    // continuity and possession checks still run on the threaded descriptor).
-    const read = await readUserKeyRoster({
-        store: rosterStore,
+    const read = await adoptRotatedUserKey({
+        rosterStore,
         descriptor: converged.descriptor,
-        ...(userKey ? { userKey } : {}),
-        clientKeyAgreementKey,
-        pinnedEpochId
+        userKey,
+        readBackKeyAgreementKey: clientKeyAgreementKey,
+        pinnedEpochId,
+        onUserKeyAdopted
     });
-    if (read.rotated) {
-        await onUserKeyAdopted?.({
-            userKey: read.userKey,
-            latestEpochId: read.latestEpochId,
-            descriptor: read.descriptor
-        });
-    }
     // The seal backstop: an ordinary rotation is the sealing append by
     // construction, but a rotation that no-op'd (the removed party held no
     // current-epoch wrap -- an orphan entry, or any re-run) appended nothing,
@@ -101,15 +169,8 @@ export async function rotateRosterToDocumentAndCascade({ rosterStore, did, doc,
             rosterSeal = { outcome: 'failed', error: err };
         }
     }
-    // The collection fan-out, in parallel -- run even when this call found the
-    // roster already rotated (a re-run after a crash), because the staleness
-    // rule finds exactly the stranded collections.
-    const cascade = await cascadeCollectionsToUserKey({
-        collectionIds: await collectionIdsOf({ collections }),
-        storeFor: collections.storeFor,
-        ...(collections.isEncrypted
-            ? { isEncrypted: collections.isEncrypted }
-            : {}),
+    const cascade = await fanOutToCollections({
+        collections,
         rosterDescriptor: read.descriptor,
         clientKeyAgreementKey,
         userKey: read.userKey
@@ -122,4 +183,84 @@ export async function rotateRosterToDocumentAndCascade({ rosterStore, did, doc,
         rosterDescriptor: read.descriptor
     };
 }
+/**
+ * The recipient-naming entry point: retires ONE named roster recipient and
+ * runs the collection fan-out, for a ceremony that rotates BEFORE its own
+ * document edit (see the module doc). The document handed in still keys the
+ * retiring recipient, so the rotation names its kid explicitly; the fresh key
+ * is read back through `readBackKeyAgreementKey`, a recipient whose wrap
+ * survives the rotation (the standing credential's, on both forgets). No
+ * seal backstop runs here.
+ *
+ * Every stage detects its own completion from durable state: a recipient the
+ * current epoch no longer wraps to skips the append (so a re-run of a
+ * torn-after-rotation ceremony attempts no second append at the same anchor,
+ * which on a ladder-signed roster the one-shot license would refuse), the
+ * read-back adopts whatever the roster now delivers, and the fan-out is
+ * staleness-driven. An account with no roster yet reports `rotated: false`
+ * with an empty fan-out and no key.
+ *
+ * @param options {object}
+ * @param options.rosterStore {EncryptionDescriptorStore}   the
+ *   `key-map/user-key.jsonl` roster store
+ * @param options.did {string}   the account's did:webvh
+ * @param options.doc {DIDDoc}   the document the rotation's recipients are
+ *   resolved from -- the one `log` resolves to
+ * @param options.log {DIDLog}   the log the rotation anchors at, which the
+ *   minimum controller version is built from: the pre-edit head for a plain
+ *   forget, the post-reinstall head for the last-client transition
+ * @param options.retireRecipientId {string}   the roster kid to retire
+ * @param [options.userKey] {UserKey}   this client's cached user key
+ * @param options.readBackKeyAgreementKey {IKeyAgreementKey}   the recipient
+ *   whose wrap survives the rotation, reading the fresh key back and
+ *   unwrapping the generations for the fan-out
+ * @param [options.pinnedEpochId] {string}   the locally pinned latest-seen
+ *   roster epoch
+ * @param [options.onUserKeyAdopted] {UserKeyAdoptedHook}   persists a
+ *   rotated key
+ * @param options.collections {CascadeCollections}   the fan-out's work
+ * @returns {Promise<RosterCascadeResult>}   `rotated` says whether THIS run
+ *   retired the recipient's wrap; `rosterSeal` is never present
+ * @throws {UserKeyRosterIntegrityError}   the roster's `currentEpoch` names
+ *   no epoch in its own list
+ */
+export async function retireRosterRecipientAndCascade({ rosterStore, did, doc, log, retireRecipientId, userKey, readBackKeyAgreementKey, pinnedEpochId, onUserKeyAdopted, collections }) {
+    anchorRosterStoreAt({ rosterStore, did, log });
+    const current = await rosterStore.read();
+    if (current === null) {
+        return { rotated: false, collections: { outcomes: {}, failed: [] } };
+    }
+    let descriptor = current.descriptor;
+    let rotated = false;
+    if (rosterWrapsRecipient({ descriptor, recipientId: retireRecipientId })) {
+        descriptor = await rotateUserKeyRoster({
+            store: rosterStore,
+            document: doc,
+            retireRecipientId
+        });
+        rotated = true;
+    }
+    // The fresh key comes back through the surviving recipient's wrap -- the
+    // retired one is gone from the current epoch.
+    const read = await adoptRotatedUserKey({
+        rosterStore,
+        descriptor,
+        userKey,
+        readBackKeyAgreementKey,
+        pinnedEpochId,
+        onUserKeyAdopted
+    });
+    const cascade = await fanOutToCollections({
+        collections,
+        rosterDescriptor: read.descriptor,
+        clientKeyAgreementKey: readBackKeyAgreementKey,
+        userKey: read.userKey
+    });
+    return {
+        rotated,
+        collections: cascade,
+        userKey: read.userKey,
+        rosterDescriptor: read.descriptor
+    };
+}
 //# sourceMappingURL=userKeyRosterCascade.js.map

package/dist/keys/userKeyRosterCascade.js.map

@@ -1 +1 @@
-{"version":3,"file":"userKeyRosterCascade.js","sourceRoot":"","sources":["../../src/keys/userKeyRosterCascade.ts"],"names":[],"mappings":"AA0CA,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,OAAO,EACL,2BAA2B,EAE5B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,EACL,+BAA+B,EAC/B,iBAAiB,EAClB,MAAM,oBAAoB,CAAA;AA4C3B;;;;;;;GAOG;AACH,KAAK,UAAU,eAAe,CAAC,EAC7B,WAAW,EAGZ;IACC,MAAM,EAAE,aAAa,EAAE,GAAG,WAAW,CAAA;IACrC,OAAO,OAAO,aAAa,KAAK,UAAU;QACxC,CAAC,CAAC,MAAM,aAAa,EAAE;QACvB,CAAC,CAAC,aAAa,CAAA;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,EACrD,WAAW,EACX,GAAG,EACH,GAAG,EACH,GAAG,EACH,OAAO,EACP,qBAAqB,EACrB,aAAa,EACb,gBAAgB,EAChB,WAAW,EAeZ;IACC,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,0EAA0E;IAC1E,0EAA0E;IAC1E,4EAA4E;IAC5E,sCAAsC;IACtC,IAAI,yBAAyB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3C,WAAW,CAAC,kBAAkB,CAAC;YAC7B,UAAU,EAAE,0BAA0B,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SACrD,CAAC,CAAA;IACJ,CAAC;IAED,oEAAoE;IACpE,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,4EAA4E;IAC5E,wEAAwE;IACxE,yEAAyE;IACzE,yEAAyE;IACzE,6EAA6E;IAC7E,oCAAoC;IACpC,MAAM,SAAS,GAAG,MAAM,+BAA+B,CAAC;QACtD,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,GAAG;KACd,CAAC,CAAA;IACF,IAAI,SAAS,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAA;IACtE,CAAC;IACD,4EAA4E;IAC5E,qEAAqE;IACrE,0EAA0E;IAC1E,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC;QACnC,KAAK,EAAE,WAAW;QAClB,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,qBAAqB;QACrB,aAAa;KACd,CAAC,CAAA;IACF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,gBAAgB,EAAE,CAAC;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAA;IACJ,CAAC;IAED,mEAAmE;IACnE,uEAAuE;IACvE,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,UAAwC,CAAA;IAC5C,IAAI,yBAAyB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,UAAU,GAAG,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,CAAA;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAA;QAChD,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,yEAAyE;IACzE,+CAA+C;IAC/C,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC;QAChD,aAAa,EAAE,MAAM,eAAe,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,QAAQ,EAAE,WAAW,CAAC,QAAQ;QAC9B,GAAG,CAAC,WAAW,CAAC,WAAW;YACzB,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;YAC1C,CAAC,CAAC,EAAE,CAAC;QACP,gBAAgB,EAAE,IAAI,CAAC,UAAU;QACjC,qBAAqB;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAA;IAEF,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,gBAAgB,EAAE,IAAI,CAAC,UAAU;KAClC,CAAA;AACH,CAAC"}
+{"version":3,"file":"userKeyRosterCascade.js","sourceRoot":"","sources":["../../src/keys/userKeyRosterCascade.ts"],"names":[],"mappings":"AAyDA,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,OAAO,EACL,2BAA2B,EAE5B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,EACL,+BAA+B,EAC/B,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,oBAAoB,CAAA;AA+C3B;;;;;;;GAOG;AACH,KAAK,UAAU,eAAe,CAAC,EAC7B,WAAW,EAGZ;IACC,MAAM,EAAE,aAAa,EAAE,GAAG,WAAW,CAAA;IACrC,OAAO,OAAO,aAAa,KAAK,UAAU;QACxC,CAAC,CAAC,MAAM,aAAa,EAAE;QACvB,CAAC,CAAC,aAAa,CAAA;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,WAAW,EACX,GAAG,EACH,GAAG,EAKJ;IACC,IAAI,yBAAyB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3C,WAAW,CAAC,2BAA2B,CAAC;YACtC,UAAU,EAAE,0BAA0B,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SACrD,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,mBAAmB,CAAC,EACjC,WAAW,EACX,UAAU,EACV,OAAO,EACP,uBAAuB,EACvB,aAAa,EACb,gBAAgB,EAQjB;IAKC,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC;QACnC,KAAK,EAAE,WAAW;QAClB,UAAU;QACV,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,qBAAqB,EAAE,uBAAuB;QAC9C,aAAa;KACd,CAAC,CAAA;IACF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,gBAAgB,EAAE,CAAC;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAA;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,mBAAmB,CAAC,EACjC,WAAW,EACX,gBAAgB,EAChB,qBAAqB,EACrB,OAAO,EAMR;IACC,OAAO,2BAA2B,CAAC;QACjC,aAAa,EAAE,MAAM,eAAe,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,QAAQ,EAAE,WAAW,CAAC,QAAQ;QAC9B,GAAG,CAAC,WAAW,CAAC,WAAW;YACzB,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;YAC1C,CAAC,CAAC,EAAE,CAAC;QACP,gBAAgB;QAChB,qBAAqB;QACrB,OAAO;KACR,CAAC,CAAA;AACJ,CAAC;AAaD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,EACrD,WAAW,EACX,GAAG,EACH,GAAG,EACH,GAAG,EACH,OAAO,EACP,qBAAqB,EACrB,aAAa,EACb,gBAAgB,EAChB,WAAW,EAWZ;IACC,mBAAmB,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;IAE9C,oEAAoE;IACpE,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,4EAA4E;IAC5E,wEAAwE;IACxE,yEAAyE;IACzE,yEAAyE;IACzE,6EAA6E;IAC7E,oCAAoC;IACpC,MAAM,SAAS,GAAG,MAAM,+BAA+B,CAAC;QACtD,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,GAAG;QACb,oBAAoB,EAAE,qBAAqB;KAC5C,CAAC,CAAA;IACF,IAAI,SAAS,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAA;IACtE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC;QACrC,WAAW;QACX,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,OAAO;QACP,uBAAuB,EAAE,qBAAqB;QAC9C,aAAa;QACb,gBAAgB;KACjB,CAAC,CAAA;IAEF,mEAAmE;IACnE,uEAAuE;IACvE,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,UAAwC,CAAA;IAC5C,IAAI,yBAAyB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,UAAU,GAAG,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,CAAA;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAA;QAChD,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;QACxC,WAAW;QACX,gBAAgB,EAAE,IAAI,CAAC,UAAU;QACjC,qBAAqB;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAA;IAEF,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,gBAAgB,EAAE,IAAI,CAAC,UAAU;KAClC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,EACpD,WAAW,EACX,GAAG,EACH,GAAG,EACH,GAAG,EACH,iBAAiB,EACjB,OAAO,EACP,uBAAuB,EACvB,aAAa,EACb,gBAAgB,EAChB,WAAW,EAYZ;IACC,mBAAmB,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;IAE9C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAA;IACxC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAA;IACtE,CAAC;IACD,IAAI,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;IACnC,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,oBAAoB,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;QACzE,UAAU,GAAG,MAAM,mBAAmB,CAAC;YACrC,KAAK,EAAE,WAAW;YAClB,QAAQ,EAAE,GAAG;YACb,iBAAiB;SAClB,CAAC,CAAA;QACF,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC;IACD,yEAAyE;IACzE,8CAA8C;IAC9C,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC;QACrC,WAAW;QACX,UAAU;QACV,OAAO;QACP,uBAAuB;QACvB,aAAa;QACb,gBAAgB;KACjB,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;QACxC,WAAW;QACX,gBAAgB,EAAE,IAAI,CAAC,UAAU;QACjC,qBAAqB,EAAE,uBAAuB;QAC9C,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAA;IACF,OAAO;QACL,OAAO;QACP,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,gBAAgB,EAAE,IAAI,CAAC,UAAU;KAClC,CAAA;AACH,CAAC"}

package/dist/keys/wasLabelsStore.d.ts

@@ -8,6 +8,7 @@
  * collection the wrap-set roster lives in. Every wallet app on the account
  * shares this one implementation, so they share one record.
  */
+import type { IZcap } from '@interop/data-integrity-core';
 import type { WasClient } from '@interop/was-client';
 import type { ClientLabelsStore } from './clientLabels.js';
 /**
@@ -15,12 +16,18 @@ import type { ClientLabelsStore } from './clientLabels.js';
  *
  * @param options {object}
  * @param options.was {WasClient}   the account's storage client, signing as an
- *   enrolled client
+ *   enrolled client or, under a delegated capability, as the annex
+ *   verification method
  * @param options.spaceId {string}   the data Space id
+ * @param [options.capability] {IZcap}   an invocation capability the read and
+ *   the write both ride (a delegated Space-subtree zcap -- a transient
+ *   session's generation delegation); absent, both invoke the root capability
+ *   as before
  * @returns {ClientLabelsStore}
  */
-export declare function wasClientLabelsStore({ was, spaceId }: {
+export declare function wasClientLabelsStore({ was, spaceId, capability }: {
     was: WasClient;
     spaceId: string;
+    capability?: IZcap;
 }): ClientLabelsStore;
 //# sourceMappingURL=wasLabelsStore.d.ts.map

package/dist/keys/wasLabelsStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wasLabelsStore.d.ts","sourceRoot":"","sources":["../../src/keys/wasLabelsStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAKpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAE1D;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,GAAG,EACH,OAAO,EACR,EAAE;IACD,GAAG,EAAE,SAAS,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;CAChB,GAAG,iBAAiB,CAepB"}
+{"version":3,"file":"wasLabelsStore.d.ts","sourceRoot":"","sources":["../../src/keys/wasLabelsStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAMpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAE1D;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,GAAG,EACH,OAAO,EACP,UAAU,EACX,EAAE;IACD,GAAG,EAAE,SAAS,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,KAAK,CAAA;CACnB,GAAG,iBAAiB,CAiBpB"}

package/dist/keys/wasLabelsStore.js

@@ -1,18 +1,26 @@
 import { CLIENT_LABELS_RESOURCE, KEY_MAP_COLLECTION } from '../space/collections.js';
+import { plaintextCollection } from '../space/plaintextCollection.js';
 /**
  * Builds the labels store over `key-map/client-labels.json` in a data Space.
  *
  * @param options {object}
  * @param options.was {WasClient}   the account's storage client, signing as an
- *   enrolled client
+ *   enrolled client or, under a delegated capability, as the annex
+ *   verification method
  * @param options.spaceId {string}   the data Space id
+ * @param [options.capability] {IZcap}   an invocation capability the read and
+ *   the write both ride (a delegated Space-subtree zcap -- a transient
+ *   session's generation delegation); absent, both invoke the root capability
+ *   as before
  * @returns {ClientLabelsStore}
  */
-export function wasClientLabelsStore({ was, spaceId }) {
-    const resource = was
-        .space(spaceId)
-        .collection(KEY_MAP_COLLECTION.id, { encryption: 'plaintext' })
-        .resource(CLIENT_LABELS_RESOURCE);
+export function wasClientLabelsStore({ was, spaceId, capability }) {
+    const resource = plaintextCollection({
+        was,
+        spaceId,
+        collectionId: KEY_MAP_COLLECTION.id,
+        capability
+    }).resource(CLIENT_LABELS_RESOURCE);
     return {
         async get() {
             const result = await resource.get();

package/dist/keys/wasLabelsStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"wasLabelsStore.js","sourceRoot":"","sources":["../../src/keys/wasLabelsStore.ts"],"names":[],"mappings":"AAWA,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,yBAAyB,CAAA;AAGhC;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACnC,GAAG,EACH,OAAO,EAIR;IACC,MAAM,QAAQ,GAAG,GAAG;SACjB,KAAK,CAAC,OAAO,CAAC;SACd,UAAU,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;SAC9D,QAAQ,CAAC,sBAAsB,CAAC,CAAA;IACnC,OAAO;QACL,KAAK,CAAC,GAAG;YACP,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAA;YACnC,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAA;QAC7C,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAuB;YACxC,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;YAC9D,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAC/D,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"wasLabelsStore.js","sourceRoot":"","sources":["../../src/keys/wasLabelsStore.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAA;AAGrE;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACnC,GAAG,EACH,OAAO,EACP,UAAU,EAKX;IACC,MAAM,QAAQ,GAAG,mBAAmB,CAAC;QACnC,GAAG;QACH,OAAO;QACP,YAAY,EAAE,kBAAkB,CAAC,EAAE;QACnC,UAAU;KACX,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAA;IACnC,OAAO;QACL,KAAK,CAAC,GAAG;YACP,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAA;YACnC,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAA;QAC7C,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAuB;YACxC,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;YAC9D,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAC/D,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/log.d.ts

@@ -46,10 +46,15 @@ export type StageNotifier = (stage: string) => void;
  * one is swallowed with a warn: telemetry must never tear a ceremony, which
  * would leave exactly the half-run state the notifier exists to observe.
  *
+ * The optional type parameter narrows what the RETURNED notifier accepts. A
+ * ceremony passes its own stage-name union (its exported stage tuple's
+ * element type), so a mistyped `stage('...')` call fails the type check
+ * instead of emitting a name no consumer displays.
+ *
  * @param [onStage] {StageNotifier}
- * @returns {StageNotifier}
+ * @returns {(stage: Stage) => void}
  */
-export declare function stageNotifier(onStage?: StageNotifier): StageNotifier;
+export declare function stageNotifier<Stage extends string = string>(onStage?: StageNotifier): (stage: Stage) => void;
 /**
  * Installs `next` as the logger every call site in this package logs
  * through, and returns the PREVIOUS logger -- so a test (or an app

package/dist/log.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"log.d.ts","sourceRoot":"","sources":["../src/log.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACxD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACvD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACvD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CACzD;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;AAEnD;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,aAAa,CAWpE;AAeD;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAI9C;AAED;;;;GAIG;AACH,eAAO,MAAM,GAAG,EAAE,MAKjB,CAAA"}
+{"version":3,"file":"log.d.ts","sourceRoot":"","sources":["../src/log.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACxD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACvD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACvD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CACzD;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;AAEnD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,KAAK,SAAS,MAAM,GAAG,MAAM,EACzD,OAAO,CAAC,EAAE,aAAa,GACtB,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAWxB;AAeD;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAI9C;AAED;;;;GAIG;AACH,eAAO,MAAM,GAAG,EAAE,MAKjB,CAAA"}

package/dist/log.js

@@ -25,8 +25,13 @@
  * one is swallowed with a warn: telemetry must never tear a ceremony, which
  * would leave exactly the half-run state the notifier exists to observe.
  *
+ * The optional type parameter narrows what the RETURNED notifier accepts. A
+ * ceremony passes its own stage-name union (its exported stage tuple's
+ * element type), so a mistyped `stage('...')` call fails the type check
+ * instead of emitting a name no consumer displays.
+ *
  * @param [onStage] {StageNotifier}
- * @returns {StageNotifier}
+ * @returns {(stage: Stage) => void}
  */
 export function stageNotifier(onStage) {
     if (onStage === undefined) {

package/dist/log.js.map

@@ -1 +1 @@
-{"version":3,"file":"log.js","sourceRoot":"","sources":["../src/log.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;GAiBG;AAyBH;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,OAAuB;IACnD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,GAAG,EAAE,CAAC,SAAS,CAAA;IACxB,CAAC;IACD,OAAO,SAAS,MAAM,CAAC,KAAa;QAClC,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,CAAA;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAC9D,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED,MAAM,eAAe,GAAW;IAC9B,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CACnB,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAClB,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAClB,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CACnB,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;CAC7E,CAAA;AAED,IAAI,MAAM,GAAW,eAAe,CAAA;AAEpC;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,QAAQ,GAAG,MAAM,CAAA;IACvB,MAAM,GAAG,IAAI,CAAA;IACb,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,GAAG,GAAW;IACzB,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;IAC7C,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;IAC3C,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;IAC3C,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;CAC9C,CAAA"}
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../src/log.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;GAiBG;AAyBH;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAuB;IAEvB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,GAAG,EAAE,CAAC,SAAS,CAAA;IACxB,CAAC;IACD,OAAO,SAAS,MAAM,CAAC,KAAY;QACjC,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,CAAA;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAC9D,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED,MAAM,eAAe,GAAW;IAC9B,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CACnB,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAClB,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAClB,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CACnB,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;CAC7E,CAAA;AAED,IAAI,MAAM,GAAW,eAAe,CAAA;AAEpC;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,QAAQ,GAAG,MAAM,CAAA;IACvB,MAAM,GAAG,IAAI,CAAA;IACb,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,GAAG,GAAW;IACzB,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;IAC7C,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;IAC3C,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;IAC3C,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;CAC9C,CAAA"}

package/dist/recovery/index.d.ts

@@ -3,20 +3,24 @@
  */
 /**
  * The `@interop/wallet-core/recovery` subpath: recovery codes on the roster
- * identity model -- a code as a minimal always-enrolled wallet client.
+ * identity model -- a code as a standing unlock credential that retires on
+ * spend.
  *
  * - `generateRecoveryCode` / `formatRecoveryCode` / `normalizeRecoveryCode` /
  *   `decodeRecoveryCode` / `RECOVERY_KDF` -- the format layer and the code's
  *   own unlock-derivation parameter set (its salt distinct from every other
  *   unlock method's).
- * - `recoveryClientFromCode` -- the deterministic client key set:
- *   unlock identity, client seed (signing + key-agreement pair), and the
- *   single did:webvh update key whose hash stands pre-committed.
+ * - `recoveryClientFromCode` -- the deterministic client key set: unlock
+ *   identity, client seed (signing + key-agreement pair), binding MAC key,
+ *   and the update-key ladder seed, whose rung 0 is the did:webvh update key
+ *   whose hash stands pre-committed and whose VM signs the code's own bridge.
  * - The record codec lives in `@interop/wallet-core/unlock` now
  *   (`wrapUnlockRecord` / `unwrapUnlockRecord`, re-exported here): a
- *   recovery record is an unlock record with no ladder member -- the account
- *   pointer plus the pre-minted PUT-on-`did.jsonl` bridge delegation (never
- *   a seed, never a user key wrap), signed under the mixed-signer policy
+ *   recovery record is an unlock record with no ladder member (the code's
+ *   ladder seed derives from the code bytes rather than riding the record) --
+ *   the account pointer plus the pre-minted PUT-on-`did.jsonl` bridge
+ *   delegation (never a seed, never a user key wrap), signed under the
+ *   mixed-signer policy
  *   (the code's unlock key at issuance, an enrolled client's account key on
  *   a re-mint), with the account core authenticated by a MAC under a
  *   code-derived key, so a storage host can never redirect recovery at
@@ -41,8 +45,8 @@ export { decodeRecoveryCode, formatRecoveryCode, generateRecoveryCode, normalize
 export type { RecoveryClient } from './recoveryCode.js';
 export { computeUnlockBinding, remintUnlockRecordDelegations, UnlockBindingError, unlockRecordBinding, unwrapUnlockRecord, wrapUnlockRecord } from '../unlock/unlockRecord.js';
 export type { SignedUnlockRecord, UnlockRecordContents, UnlockRecordProofState } from '../unlock/unlockRecord.js';
-export { delegateLogWrite, delegationProofKeyId, RECOVERY_DELEGATION_TTL_MS, remintRecoveryDelegations, ZCAP_RENEWAL_WINDOW_MS, zcapExpiring } from './recoveryDelegation.js';
+export { delegateLogWrite, delegationProofKeyId, RECOVERY_DELEGATION_TTL_MS, recordedDelegationFields, remintRecoveryDelegations, ZCAP_RENEWAL_WINDOW_MS, zcapExpiring } from './recoveryDelegation.js';
 export type { RecordRemintOutcome, RecoveryDelegationEntry } from './recoveryDelegation.js';
 export { publishRecoveryKey, recoverWebvhClient, RecoveryKeyNotCommittedError, recoveryVmId, removeRecoveryKey } from './recoveryWebvh.js';
-export type { RecoveryLogStore, RecoveryPublicKeys } from './recoveryWebvh.js';
+export type { RecoveryLogStore, RecoveryPublicKeys, ReplacementRecoveryPublicKeys } from './recoveryWebvh.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/recovery/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/recovery/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,YAAY,EACZ,wBAAwB,EACxB,sBAAsB,EACvB,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAEvD,OAAO,EACL,oBAAoB,EACpB,6BAA6B,EAC7B,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACvB,MAAM,2BAA2B,CAAA;AAElC,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,0BAA0B,EAC1B,yBAAyB,EACzB,sBAAsB,EACtB,YAAY,EACb,MAAM,yBAAyB,CAAA;AAChC,YAAY,EACV,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,4BAA4B,EAC5B,YAAY,EACZ,iBAAiB,EAClB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/recovery/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,YAAY,EACZ,wBAAwB,EACxB,sBAAsB,EACvB,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAEvD,OAAO,EACL,oBAAoB,EACpB,6BAA6B,EAC7B,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACvB,MAAM,2BAA2B,CAAA;AAElC,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,0BAA0B,EAC1B,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EACtB,YAAY,EACb,MAAM,yBAAyB,CAAA;AAChC,YAAY,EACV,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,4BAA4B,EAC5B,YAAY,EACZ,iBAAiB,EAClB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EACV,gBAAgB,EAChB,kBAAkB,EAClB,6BAA6B,EAC9B,MAAM,oBAAoB,CAAA"}

package/dist/recovery/index.js

@@ -3,20 +3,24 @@
  */
 /**
  * The `@interop/wallet-core/recovery` subpath: recovery codes on the roster
- * identity model -- a code as a minimal always-enrolled wallet client.
+ * identity model -- a code as a standing unlock credential that retires on
+ * spend.
  *
  * - `generateRecoveryCode` / `formatRecoveryCode` / `normalizeRecoveryCode` /
  *   `decodeRecoveryCode` / `RECOVERY_KDF` -- the format layer and the code's
  *   own unlock-derivation parameter set (its salt distinct from every other
  *   unlock method's).
- * - `recoveryClientFromCode` -- the deterministic client key set:
- *   unlock identity, client seed (signing + key-agreement pair), and the
- *   single did:webvh update key whose hash stands pre-committed.
+ * - `recoveryClientFromCode` -- the deterministic client key set: unlock
+ *   identity, client seed (signing + key-agreement pair), binding MAC key,
+ *   and the update-key ladder seed, whose rung 0 is the did:webvh update key
+ *   whose hash stands pre-committed and whose VM signs the code's own bridge.
  * - The record codec lives in `@interop/wallet-core/unlock` now
  *   (`wrapUnlockRecord` / `unwrapUnlockRecord`, re-exported here): a
- *   recovery record is an unlock record with no ladder member -- the account
- *   pointer plus the pre-minted PUT-on-`did.jsonl` bridge delegation (never
- *   a seed, never a user key wrap), signed under the mixed-signer policy
+ *   recovery record is an unlock record with no ladder member (the code's
+ *   ladder seed derives from the code bytes rather than riding the record) --
+ *   the account pointer plus the pre-minted PUT-on-`did.jsonl` bridge
+ *   delegation (never a seed, never a user key wrap), signed under the
+ *   mixed-signer policy
  *   (the code's unlock key at issuance, an enrolled client's account key on
  *   a re-mint), with the account core authenticated by a MAC under a
  *   code-derived key, so a storage host can never redirect recovery at
@@ -39,6 +43,6 @@
  */
 export { decodeRecoveryCode, formatRecoveryCode, generateRecoveryCode, normalizeRecoveryCode, RECOVERY_CODE_BYTES, RECOVERY_KDF, RecoveryCodeInvalidError, recoveryClientFromCode } from './recoveryCode.js';
 export { computeUnlockBinding, remintUnlockRecordDelegations, UnlockBindingError, unlockRecordBinding, unwrapUnlockRecord, wrapUnlockRecord } from '../unlock/unlockRecord.js';
-export { delegateLogWrite, delegationProofKeyId, RECOVERY_DELEGATION_TTL_MS, remintRecoveryDelegations, ZCAP_RENEWAL_WINDOW_MS, zcapExpiring } from './recoveryDelegation.js';
+export { delegateLogWrite, delegationProofKeyId, RECOVERY_DELEGATION_TTL_MS, recordedDelegationFields, remintRecoveryDelegations, ZCAP_RENEWAL_WINDOW_MS, zcapExpiring } from './recoveryDelegation.js';
 export { publishRecoveryKey, recoverWebvhClient, RecoveryKeyNotCommittedError, recoveryVmId, removeRecoveryKey } from './recoveryWebvh.js';
 //# sourceMappingURL=index.js.map

package/dist/recovery/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/recovery/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,YAAY,EACZ,wBAAwB,EACxB,sBAAsB,EACvB,MAAM,mBAAmB,CAAA;AAG1B,OAAO,EACL,oBAAoB,EACpB,6BAA6B,EAC7B,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,2BAA2B,CAAA;AAOlC,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,0BAA0B,EAC1B,yBAAyB,EACzB,sBAAsB,EACtB,YAAY,EACb,MAAM,yBAAyB,CAAA;AAMhC,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,4BAA4B,EAC5B,YAAY,EACZ,iBAAiB,EAClB,MAAM,oBAAoB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/recovery/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,YAAY,EACZ,wBAAwB,EACxB,sBAAsB,EACvB,MAAM,mBAAmB,CAAA;AAG1B,OAAO,EACL,oBAAoB,EACpB,6BAA6B,EAC7B,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,2BAA2B,CAAA;AAOlC,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,0BAA0B,EAC1B,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EACtB,YAAY,EACb,MAAM,yBAAyB,CAAA;AAMhC,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,4BAA4B,EAC5B,YAAY,EACZ,iBAAiB,EAClB,MAAM,oBAAoB,CAAA"}

package/dist/recovery/recoveryCode.d.ts

@@ -65,16 +65,27 @@ export declare function decodeRecoveryCode({ code }: {
     code: string;
 }): Uint8Array;
 /**
- * The code's full client identity, derived deterministically from
- * its bytes: the 32-byte client seed (behind the code's Ed25519 signing pair
- * and X25519 key-agreement twin), the single did:webvh update-key seed (one
- * key, no staged pair -- a code is spent on use, so it never self-rotates;
- * its recovery continuation commits whatever it needs next), the derived
- * agents, and the public multibases / ids the issuance and recovery flows
- * publish and look up.
+ * The code's full client identity, derived deterministically from its bytes:
+ * the 32-byte client seed (behind the code's Ed25519 signing pair and X25519
+ * key-agreement twin), the ladder seed behind its update authority, the
+ * derived agents, and the public multibases / ids the issuance and recovery
+ * flows publish and look up.
  */
 export interface RecoveryClient extends UnlockClientIdentity {
     codeBytes: Uint8Array;
+    /**
+     * The code's update-key ladder seed. Its VM is what signs the code's own
+     * bridge delegation, and its rung 0 is the code's committed update key, so
+     * the spend's reveal-and-commit entry is the ordinary ladder reveal. A code
+     * is spent on use and never self-rotates, so no rung past 0 is ever
+     * revealed; the ladder is what gives the code a verification method of its
+     * own beside that single rung.
+     */
+    ladderSeed: Uint8Array;
+    /**
+     * Rung 0's 32-byte update-key seed -- the key the code's committed hash
+     * stands for, and the one the reveal-and-commit entry signs with.
+     */
     updateSeed: Uint8Array;
     /**
      * The symmetric key that MACs the recovery record's account binding:
@@ -82,7 +93,16 @@ export interface RecoveryClient extends UnlockClientIdentity {
      * Derived from the code bytes, so the storage host never holds it.
      */
     bindingMacKey: Uint8Array;
+    /**
+     * Rung 0's public multibase: the code's `updateKeyMultibase` as the
+     * registry records it and the document commits its hash.
+     */
     updateKeyMultibase: string;
+    /**
+     * The ladder VM's public multibase, as the account document publishes it
+     * under `assertionMethod` and `capabilityDelegation`.
+     */
+    ladderVmKeyMultibase: string;
 }
 /**
  * Derives the code's whole client identity from a (possibly formatted) code.

package/dist/recovery/recoveryCode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recoveryCode.d.ts","sourceRoot":"","sources":["../../src/recovery/recoveryCode.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAElD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAGvE;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,KAAK,CAAA;AAErC;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,EAAE,SAM1B,CAAA;AAoBD;;;;;;GAMG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,OAAO,SAAuC;CAI3D;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAI7C;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,IAAI,EAAE,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAErE;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAE1E;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,IAAI,EAAE,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,UAAU,CAazE;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAe,SAAQ,oBAAoB;IAC1D,SAAS,EAAE,UAAU,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB;;;;OAIG;IACH,aAAa,EAAE,UAAU,CAAA;IACzB,kBAAkB,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAAC,EAC3C,IAAI,EACL,EAAE;IACD,IAAI,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAAC,cAAc,CAAC,CAgC1B"}
+{"version":3,"file":"recoveryCode.d.ts","sourceRoot":"","sources":["../../src/recovery/recoveryCode.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAElD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAMvE;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,KAAK,CAAA;AAErC;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,EAAE,SAM1B,CAAA;AAwBD;;;;;;GAMG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,OAAO,SAAuC;CAI3D;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAI7C;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,IAAI,EAAE,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAErE;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAE1E;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,IAAI,EAAE,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,UAAU,CAazE;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAe,SAAQ,oBAAoB;IAC1D,SAAS,EAAE,UAAU,CAAA;IACrB;;;;;;;OAOG;IACH,UAAU,EAAE,UAAU,CAAA;IACtB;;;OAGG;IACH,UAAU,EAAE,UAAU,CAAA;IACtB;;;;OAIG;IACH,aAAa,EAAE,UAAU,CAAA;IACzB;;;OAGG;IACH,kBAAkB,EAAE,MAAM,CAAA;IAC1B;;;OAGG;IACH,oBAAoB,EAAE,MAAM,CAAA;CAC7B;AAED;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAAC,EAC3C,IAAI,EACL,EAAE;IACD,IAAI,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAAC,cAAc,CAAC,CAqC1B"}