@interop/wallet-core 0.62.0 → 0.66.0

package/dist/clientAnnex/heal.d.ts

@@ -5,9 +5,10 @@
  * The client-annex generation ensure a TRANSIENT visit runs -- a session
  * holding nothing but a standing unlock credential (its ladder seed, its
  * `delegatedClients` sibling delegation, and the standing-client identity
- * derived from the typed secret). Five durable states cut such a visit off
+ * derived from the typed secret). Six durable states cut such a visit off
  * from the annex, or from the account log the annex is pointed at: the
  * account document carries no `#DelegatedClients` pointer; the pointed
+ * auxiliary Space is gone from the server; the pointed
  * generation's log is gone (GC'd, or never minted); the embedded generation
  * delegation is expired, inside its renewal window, or signed by a key the
  * document no longer lists; the record carries no sibling delegation, or its
@@ -36,10 +37,25 @@
  *   order minus its revoke stage (mint, install the delegation, re-point --
  *   no transient reach could invoke the old delegation's revocation; the
  *   pointer move retires it on a conforming server and it otherwise rots on
- *   its TTL); a fresh SPACE mirrors the credential-anchored genesis
- *   ordering exactly (Space under the ladder VM's bare did:key, mint
- *   controller-tier, delegation embed while the Space still answers to the
- *   bootstrap key, controller flip, then the pointer entry).
+ *   its TTL); a fresh SPACE is created under the ladder VM's bare did:key,
+ *   the one identity a create may name, and its controller is flipped to the
+ *   account DID in the next request, before anything publishes into it. The
+ *   stranding window is therefore one request wide: a run torn inside it
+ *   leaves a did:key-controlled Space no server orphan sweep can reap, and a
+ *   run torn past the flip leaves an account-controlled one that a sweep
+ *   can. The generation then mints in that Space exactly as it does in an
+ *   existing one, under the ladder-signed sibling delegation, which is why
+ *   the flip must precede the mint.
+ * - A POINTED SPACE THAT IS GONE is decided before any write, and by TWO
+ *   reads rather than one, since a storage server masks an unauthorized read
+ *   as the same 404 an absent Space answers: a ladder-signed GET-only child
+ *   of the Space's root, then a root invocation as the ladder VM's bare
+ *   did:key (the controller a torn establishment leaves behind). Only when
+ *   both answer a real 404 is the Space gone. Status alone decides, so a 2xx
+ *   is present whatever its body says and every other answer throws. The
+ *   first probe presupposes a server admitting the ladder delegation
+ *   clause's single-verb predicate; against an older one both reads are
+ *   refused alike and a live Space reads as gone.
  * - The BRIDGE RENEWAL PRECEDES EVERY ARM: the record's bridge delegation is
  *   the credential's one write path into the account log, so a stale one is
  *   replaced before any arm runs and the caller's account-log store is built
@@ -66,6 +82,7 @@ import { WasClient } from '@interop/was-client';
 import type { ResourceLogPinStore } from '@interop/vh-resource-log';
 import type { ClientWebvhUpdateKeys, PublishedWebvhLog, WebvhIdStore } from '../webvh/didWebvh.js';
 import type { ICapabilityAgent } from '../webvh/zcap.js';
+import { attributeLadderRung } from './ladder.js';
 /**
  * Why the visit cannot mend the annex.
  *
@@ -147,6 +164,12 @@ export interface ClientAnnexGenerationEnsureOutcome {
     delegatedClients: IZcap;
     generationMinted: boolean;
     spaceMinted: boolean;
+    /**
+     * Which arm minted the Space: set when the account document's pointer
+     * named an auxiliary Space the server no longer has, so a fresh one was
+     * minted and pointed at in its place. `spaceMinted` is set with it.
+     */
+    pointedSpaceMissing: boolean;
     delegationRenewed: boolean;
     siblingReminted: boolean;
     bridgeReminted: boolean;
@@ -156,6 +179,17 @@ export interface ClientAnnexGenerationEnsureOutcome {
      * visit re-mints.
      */
     bridgeResealError?: unknown;
+    /**
+     * The pointed generation's verified head, for the enrollment that follows
+     * to build its first attempt on rather than re-reading the same log.
+     *
+     * Present ONLY when this pass published nothing to that log -- a pure no-op
+     * report on a healthy account. A minted generation and a renewed delegation
+     * both leave the head this member would carry superseded, and the publish
+     * seam hands back no ETag for the post-write one, so the member is absent
+     * and the enrollment reads for itself.
+     */
+    generationLog?: PublishedWebvhLog;
 }
 /**
  * Ensures a transient visit can reach a live client-annex generation with a
@@ -256,15 +290,32 @@ export declare function resolveClientAnnexSpaceId({ doc, delegatedClients }: {
     annexSpaceId?: string;
 };
 /**
- * The pre-flight rung attribution: the `{ updateSeed, stagedSeed }` pair the
- * pointer entry signs with, recovered from the verified account log's
- * current parameters. The signer must be a REVEALED rung (the entry verifies
- * against the log's `updateKeys`), with the next rung staged per the
- * carry-over convention. No rung of this ladder standing -- or only a
- * committed hash, which cannot sign -- refuses with
- * {@link ClientAnnexGenerationUnavailableError} before anything is minted.
- * Exported for the establishment's stage-3 primitive, whose pointer entry
- * signs by the same attribution.
+ * The pre-flight rung attribution every pointer-moving arm runs before
+ * minting anything: this ladder has a rung the pointer entry will be able to
+ * sign with, either standing in `updateKeys` already (`revealed`) or
+ * committed in `nextKeyHashes` and revealable by {@link movePointerAsLadder}
+ * (`committed`). A ladder the log carries no rung of at all, and an
+ * ambiguous attribution, refuse with
+ * {@link ClientAnnexGenerationUnavailableError} before a generation or a
+ * Space is minted -- the one place the ladder's `LadderAttributionError`
+ * maps onto that refusal.
+ *
+ * @param options {object}
+ * @param options.ladderSeed {Uint8Array}
+ * @param options.log {DIDLog}   the VERIFIED account log
+ * @returns {Promise<{ rung: LadderRung, state: LadderRungState }>}
+ */
+export declare function attributePointerEntryRung({ ladderSeed, log }: {
+    ladderSeed: Uint8Array;
+    log: PublishedWebvhLog['log'];
+}): Promise<Awaited<ReturnType<typeof attributeLadderRung>>>;
+/**
+ * The `{ updateSeed, stagedSeed }` pair the pointer entry signs with, over
+ * {@link attributePointerEntryRung}. The signer must be a REVEALED rung (the
+ * entry verifies against the log's `updateKeys`), with the next rung staged
+ * per the carry-over convention; a rung standing only as a committed hash
+ * cannot sign and refuses the same way. Exported for the establishment's
+ * stage-3 primitive, whose pointer entry signs by the same attribution.
  *
  * @param options {object}
  * @param options.ladderSeed {Uint8Array}

package/dist/clientAnnex/heal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"heal.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/heal.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAOnE,OAAO,KAAK,EACV,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,EACb,MAAM,sBAAsB,CAAA;AAO7B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAqBxD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,sCAAsC,GAChD,wBAAwB,GAAG,6BAA6B,CAAA;AAE1D;;;;GAIG;AACH,qBAAa,qCAAsC,SAAQ,KAAK;IAC9D,QAAQ,CAAC,MAAM,EAAE,sCAAsC,CAAA;gBAE3C,EACV,MAAM,EACN,OAAO,EACR,EAAE;QACD,MAAM,EAAE,sCAAsC,CAAA;QAC9C,OAAO,EAAE,MAAM,CAAA;KAChB;CAKF;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,sCAAsC,CAAC,EACrD,UAAU,EACV,UAAU,EACV,YAAY,EACZ,OAAO,EACP,GAAG,EACJ,EAAE;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,GAAG,CAAC,OAAO,EAAE;IAAE,cAAc,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,KAAK,CAAC,CAW1D;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kCAAkC;IACjD,cAAc,EAAE,MAAM,CAAA;IACtB,oBAAoB,EAAE,KAAK,CAAA;IAC3B;;;OAGG;IACH,UAAU,EAAE,KAAK,CAAA;IACjB;;;OAGG;IACH,gBAAgB,EAAE,KAAK,CAAA;IACvB,gBAAgB,EAAE,OAAO,CAAA;IACzB,WAAW,EAAE,OAAO,CAAA;IACpB,iBAAiB,EAAE,OAAO,CAAA;IAC1B,eAAe,EAAE,OAAO,CAAA;IACxB,cAAc,EAAE,OAAO,CAAA;IACvB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,wBAAgB,qCAAqC,CAAC,OAAO,EAAE;IAC7D,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,CAAA;IACvD,UAAU,EAAE,UAAU,CAAA;IACtB,cAAc,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,UAAU,CAAA;KAAE,CAAA;IACvD,eAAe,EAAE,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,gBAAgB,CAAA;KAAE,KAAK,SAAS,CAAA;IACvE,UAAU,EAAE,KAAK,CAAA;IACjB,UAAU,EAAE,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,KAAK,CAAA;KAAE,KAAK,YAAY,CAAA;IAC5D,cAAc,EAAE,CAAC,OAAO,EAAE;QACxB,UAAU,EAAE,KAAK,CAAA;QACjB,gBAAgB,EAAE,KAAK,CAAA;KACxB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnB,gBAAgB,CAAC,EAAE,KAAK,CAAA;IACxB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAW9C;AAmaD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yBAAyB,CAAC,EACxC,GAAG,EACH,gBAAgB,EACjB,EAAE;IACD,GAAG,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAC7B,gBAAgB,CAAC,EAAE,KAAK,CAAA;CACzB,GAAG;IACF,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAeA;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,sBAAsB,CAAC,EAC3C,UAAU,EACV,GAAG,EACJ,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,GAAG,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAA;CAC9B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA8BjC"}
+{"version":3,"file":"heal.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/heal.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0EG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAE/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAQnE,OAAO,KAAK,EACV,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,EACb,MAAM,sBAAsB,CAAA;AAO7B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,EACL,mBAAmB,EAGpB,MAAM,aAAa,CAAA;AAiCpB;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,sCAAsC,GAChD,wBAAwB,GAAG,6BAA6B,CAAA;AAE1D;;;;GAIG;AACH,qBAAa,qCAAsC,SAAQ,KAAK;IAC9D,QAAQ,CAAC,MAAM,EAAE,sCAAsC,CAAA;gBAE3C,EACV,MAAM,EACN,OAAO,EACR,EAAE;QACD,MAAM,EAAE,sCAAsC,CAAA;QAC9C,OAAO,EAAE,MAAM,CAAA;KAChB;CAKF;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,sCAAsC,CAAC,EACrD,UAAU,EACV,UAAU,EACV,YAAY,EACZ,OAAO,EACP,GAAG,EACJ,EAAE;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,GAAG,CAAC,OAAO,EAAE;IAAE,cAAc,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,KAAK,CAAC,CAW1D;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kCAAkC;IACjD,cAAc,EAAE,MAAM,CAAA;IACtB,oBAAoB,EAAE,KAAK,CAAA;IAC3B;;;OAGG;IACH,UAAU,EAAE,KAAK,CAAA;IACjB;;;OAGG;IACH,gBAAgB,EAAE,KAAK,CAAA;IACvB,gBAAgB,EAAE,OAAO,CAAA;IACzB,WAAW,EAAE,OAAO,CAAA;IACpB;;;;OAIG;IACH,mBAAmB,EAAE,OAAO,CAAA;IAC5B,iBAAiB,EAAE,OAAO,CAAA;IAC1B,eAAe,EAAE,OAAO,CAAA;IACxB,cAAc,EAAE,OAAO,CAAA;IACvB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,iBAAiB,CAAA;CAClC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,wBAAgB,qCAAqC,CAAC,OAAO,EAAE;IAC7D,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,CAAA;IACvD,UAAU,EAAE,UAAU,CAAA;IACtB,cAAc,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,UAAU,CAAA;KAAE,CAAA;IACvD,eAAe,EAAE,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,gBAAgB,CAAA;KAAE,KAAK,SAAS,CAAA;IACvE,UAAU,EAAE,KAAK,CAAA;IACjB,UAAU,EAAE,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,KAAK,CAAA;KAAE,KAAK,YAAY,CAAA;IAC5D,cAAc,EAAE,CAAC,OAAO,EAAE;QACxB,UAAU,EAAE,KAAK,CAAA;QACjB,gBAAgB,EAAE,KAAK,CAAA;KACxB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnB,gBAAgB,CAAC,EAAE,KAAK,CAAA;IACxB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAW9C;AA8hBD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yBAAyB,CAAC,EACxC,GAAG,EACH,gBAAgB,EACjB,EAAE;IACD,GAAG,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAC7B,gBAAgB,CAAC,EAAE,KAAK,CAAA;CACzB,GAAG;IACF,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAeA;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,yBAAyB,CAAC,EAC9C,UAAU,EACV,GAAG,EACJ,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,GAAG,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAA;CAC9B,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAgB3D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,sBAAsB,CAAC,EAC3C,UAAU,EACV,GAAG,EACJ,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,GAAG,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAA;CAC9B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAejC"}