@interop/wallet-core 0.65.0 → 0.67.0

package/dist/unlock/unlockRecord.js

@@ -255,6 +255,24 @@ async function openMember({ member, keyAgreementKey, keyResolver }) {
     });
     return cipher.decrypt({ envelope: member.wrapped });
 }
+/**
+ * One member's plaintext out of a settled concurrent open: the value, or the
+ * open's own failure rethrown. The members open together, so their failures
+ * are claimed in the order the checks below them run rather than in the order
+ * the requests happened to fail.
+ *
+ * @param settled {PromiseSettledResult<unknown>}
+ * @returns {unknown}   the member plaintext
+ */
+function openedMember(settled) {
+    if (settled === undefined) {
+        return undefined;
+    }
+    if (settled.status === 'rejected') {
+        throw settled.reason;
+    }
+    return settled.value;
+}
 /**
  * Wraps an unlock record at bind time: the shell (controller, optional
  * email, pointer, timestamp) sealed to the credential's unlock KAK, the
@@ -295,32 +313,36 @@ export async function wrapUnlockRecord({ controller, email, pointer, delegation,
         pointer,
         ...(ladderSeed ? { ladderSeed } : {})
     });
-    const shell = await sealMember({
-        data: {
-            controller,
-            ...(email ? { email } : {}),
-            pointer: {
-                ...(pointer.did ? { did: pointer.did } : {}),
-                spaceId: pointer.spaceId,
-                host: pointer.host
+    // The four members seal independently, so they seal concurrently: nothing
+    // below reads one member's result to build another's.
+    const [shell, bridge, sealedDelegatedClients, ladder] = await Promise.all([
+        sealMember({
+            data: {
+                controller,
+                ...(email ? { email } : {}),
+                pointer: {
+                    ...(pointer.did ? { did: pointer.did } : {}),
+                    spaceId: pointer.spaceId,
+                    host: pointer.host
+                },
+                createdAt: recordCreatedAtStamp({ createdAt })
             },
-            createdAt: recordCreatedAtStamp({ createdAt })
-        },
-        keyAgreementKey
-    });
-    const bridge = await sealMember({ data: { delegation }, keyAgreementKey });
-    const sealedDelegatedClients = delegatedClients
-        ? await sealMember({
-            data: { delegation: delegatedClients },
-            keyAgreementKey
-        })
-        : undefined;
-    const ladder = ladderSeed
-        ? await sealMember({
-            data: { ladderSeed: base64urlnopad.encode(ladderSeed) },
             keyAgreementKey
-        })
-        : undefined;
+        }),
+        sealMember({ data: { delegation }, keyAgreementKey }),
+        delegatedClients
+            ? sealMember({
+                data: { delegation: delegatedClients },
+                keyAgreementKey
+            })
+            : undefined,
+        ladderSeed
+            ? sealMember({
+                data: { ladderSeed: base64urlnopad.encode(ladderSeed) },
+                keyAgreementKey
+            })
+            : undefined
+    ]);
     return (await signRecordFrame({
         version: KEYRING_RECORD_VERSION,
         encryption: shell.encryption,
@@ -408,11 +430,26 @@ export async function unwrapUnlockRecord({ record, keyAgreementKey, keyResolver,
         });
         proofState = 'verified';
     }
-    const shell = (await openMember({
-        member: { encryption, wrapped },
-        keyAgreementKey,
-        keyResolver
-    }));
+    // The members open independently, so they open concurrently -- started
+    // only here, after the proof state above is settled, so nothing is
+    // decrypted before the record's authenticity is checked. The checks below
+    // stay in their original order over the joined results, so which malformed
+    // member's refusal a caller sees is unchanged.
+    const [shellOpen, bridgeOpen, delegatedClientsOpen, ladderOpen] = await Promise.allSettled([
+        openMember({
+            member: { encryption, wrapped },
+            keyAgreementKey,
+            keyResolver
+        }),
+        openMember({ member: bridge, keyAgreementKey, keyResolver }),
+        delegatedClients
+            ? openMember({ member: delegatedClients, keyAgreementKey, keyResolver })
+            : undefined,
+        ladder
+            ? openMember({ member: ladder, keyAgreementKey, keyResolver })
+            : undefined
+    ]);
+    const shell = openedMember(shellOpen);
     if (typeof shell.controller !== 'string' || !shell.controller) {
         throw new Error('Unlock record is missing a controller.');
     }
@@ -424,22 +461,14 @@ export async function unwrapUnlockRecord({ record, keyAgreementKey, keyResolver,
         value: shell.createdAt,
         label: 'Unlock'
     });
-    const bridgePlaintext = (await openMember({
-        member: bridge,
-        keyAgreementKey,
-        keyResolver
-    }));
+    const bridgePlaintext = openedMember(bridgeOpen);
     if (bridgePlaintext.delegation === null ||
         typeof bridgePlaintext.delegation !== 'object') {
         throw new Error('Unlock record is missing its did.jsonl delegation.');
     }
     let delegatedClientsDelegation;
     if (delegatedClients) {
-        const plaintext = (await openMember({
-            member: delegatedClients,
-            keyAgreementKey,
-            keyResolver
-        }));
+        const plaintext = openedMember(delegatedClientsOpen);
         if (plaintext.delegation === null ||
             typeof plaintext.delegation !== 'object') {
             throw new Error('Unlock record has a malformed delegatedClients member.');
@@ -448,11 +477,7 @@ export async function unwrapUnlockRecord({ record, keyAgreementKey, keyResolver,
     }
     let ladderSeed;
     if (ladder) {
-        const ladderPlaintext = (await openMember({
-            member: ladder,
-            keyAgreementKey,
-            keyResolver
-        }));
+        const ladderPlaintext = openedMember(ladderOpen);
         if (typeof ladderPlaintext.ladderSeed !== 'string') {
             throw new Error('Unlock record has a malformed ladder member.');
         }

package/dist/unlock/unlockRecord.js.map

@@ -1 +1 @@
-{"version":3,"file":"unlockRecord.js","sourceRoot":"","sources":["../../src/unlock/unlockRecord.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAA;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAO9C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,oBAAoB,EACpB,uBAAuB,EACvB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EAClB,MAAM,sBAAsB,CAAA;AAM7B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAEnC;;;;;GAKG;AACH,MAAM,sBAAsB,GAAG,8BAA8B,CAAA;AAE7D;;;;;;;;GAQG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAA;IAClC,CAAC;CACF;AAuDD;;;;;GAKG;AACH,SAAS,eAAe,CAAC,EACvB,UAAU,EACV,OAAO,EACP,UAAU,EAKX;IACC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAC7B,IAAI,CAAC,SAAS,CAAC;QACb,sBAAsB;QACtB,UAAU;QACV,OAAO,CAAC,GAAG,IAAI,EAAE;QACjB,OAAO,CAAC,OAAO;QACf,OAAO,CAAC,IAAI;QACZ,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;KACpD,CAAC,CACH,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACnC,aAAa,EACb,UAAU,EACV,OAAO,EACP,UAAU,EAMX;IACC,OAAO,cAAc,CAAC,MAAM,CAC1B,IAAI,CACF,MAAM,EACN,aAAa,EACb,eAAe,CAAC;QACd,UAAU;QACV,OAAO;QACP,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtC,CAAC,CACH,CACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAE,MAAM,EAAuB;IACjE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAA0B,CAAA;IAC3D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5C,MAAM,IAAI,kBAAkB,CAC1B,gEAAgE;YAC9D,0CAA0C,CAC7C,CAAA;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CAAC,EACxC,MAAM,EAGP;IACC,MAAM,EAAE,UAAU,EAAE,GAAG,gBAAgB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IACpE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,UAAU,CAAC,YAAY,CACtD,CAAA;IACD,kEAAkE;IAClE,uEAAuE;IACvE,sEAAsE;IACtE,yEAAyE;IACzE,0CAA0C;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,iEAAiE;YAC/D,0DAA0D,CAC7D,CAAA;IACH,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;SAC5B,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC;SACxC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;SACzE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACnC,MAAM,EACN,wBAAwB,EAIzB;IACC,MAAM,SAAS,GACb,YAAY,CAAC,wBAAwB,CAAC,IAAI,wBAAwB,CAAA;IACpE,OAAO,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;AAClE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,EACzB,KAAK,EACL,IAAI,EAIL;IACC,MAAM,MAAM,GAAG,KAA2C,CAAA;IAC1D,IACE,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,CAAC,UAAU,KAAK,IAAI;QAC1B,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,MAAM,CAAC,OAAO,KAAK,SAAS;QAC5B,MAAM,CAAC,OAAO,KAAK,IAAI,EACvB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,uBAAuB,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,MAA4B,CAAA;AACrC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,UAAU,CAAC,EACxB,IAAI,EACJ,eAAe,EAIhB;IACC,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAA;IAClE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;IACrD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACxC,IAAI,EAAE,IAA+D;KACtE,CAAC,CAAA;IACF,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAA;AAC1C,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,UAAU,CAAC,EACxB,MAAM,EACN,eAAe,EACf,WAAW,EAKZ;IACC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;QAChC,eAAe;QACf,WAAW;QACX,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAgB,EAAE,CAAC,CAAA;AAC9D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,UAAU,EACV,KAAK,EACL,OAAO,EACP,UAAU,EACV,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,MAAM,EACN,aAAa,EACb,SAAS,EAYV;IACC,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IACtD,CAAC;IACD,MAAM,OAAO,GAAG,oBAAoB,CAAC;QACnC,aAAa;QACb,UAAU;QACV,OAAO;QACP,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtC,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC;QAC7B,IAAI,EAAE;YACJ,UAAU;YACV,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE;gBACP,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB;YACD,SAAS,EAAE,oBAAoB,CAAC,EAAE,SAAS,EAAE,CAAC;SAC/C;QACD,eAAe;KAChB,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,eAAe,EAAE,CAAC,CAAA;IAC1E,MAAM,sBAAsB,GAAG,gBAAgB;QAC7C,CAAC,CAAC,MAAM,UAAU,CAAC;YACf,IAAI,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;YACtC,eAAe;SAChB,CAAC;QACJ,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,MAAM,GAAG,UAAU;QACvB,CAAC,CAAC,MAAM,UAAU,CAAC;YACf,IAAI,EAAE,EAAE,UAAU,EAAE,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;YACvD,eAAe;SAChB,CAAC;QACJ,CAAC,CAAC,SAAS,CAAA;IACb,OAAO,CAAC,MAAM,eAAe,CAAC;QAC5B,OAAO,EAAE,sBAAsB;QAC/B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM;QACN,OAAO,EAAE;YACP,OAAO;YACP,MAAM;YACN,GAAG,CAAC,sBAAsB;gBACxB,CAAC,CAAC,EAAE,gBAAgB,EAAE,sBAAsB,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B;KACF,CAAC,CAAuB,CAAA;AAC3B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,MAAM,EACN,eAAe,EACf,WAAW,EACX,oBAAoB,EACpB,aAAa,EAOd;IAIC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC;QACtD,MAAM;QACN,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/C,MAAM,EACJ,MAAM,EAAE,SAAS,EACjB,gBAAgB,EAAE,mBAAmB,EACrC,MAAM,EAAE,SAAS,EAClB,GAAG,MAIH,CAAA;IACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,uEAAuE;YACrE,4CAA4C,CAC/C,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IACtE,MAAM,gBAAgB,GACpB,mBAAmB,KAAK,SAAS;QAC/B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,iBAAiB,CAAC;YAChB,KAAK,EAAE,mBAAmB;YAC1B,IAAI,EAAE,kBAAkB;SACzB,CAAC,CAAA;IACR,MAAM,MAAM,GACV,SAAS,KAAK,SAAS;QACrB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IAE7D,2EAA2E;IAC3E,sBAAsB;IACtB,MAAM,kBAAkB,GAAG,KAAM,CAAC,kBAAkB,CAAA;IACpD,MAAM,YAAY,GAAG,uBAAuB,CAAC;QAC3C,kBAAkB;QAClB,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAA;IACF,IAAI,UAAU,GAA2B;QACvC,OAAO,EAAE,EAAE,kBAAkB,EAAE,YAAY,EAAE;KAC9C,CAAA;IACD,IAAI,YAAY,KAAK,oBAAoB,EAAE,CAAC;QAC1C,MAAM,iBAAiB,CAAC;YACtB,MAAM;YACN,oBAAoB,EAAE,oBAAoB;YAC1C,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAA;QACF,UAAU,GAAG,UAAU,CAAA;IACzB,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,MAAM,UAAU,CAAC;QAC9B,MAAM,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE;QAC/B,eAAe;QACf,WAAW;KACZ,CAAC,CAKD,CAAA;IACD,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3D,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;IAClE,CAAC;IACD,MAAM,SAAS,GAAG,oBAAoB,CAAC;QACrC,KAAK,EAAE,KAAK,CAAC,SAAS;QACtB,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAA;IAEF,MAAM,eAAe,GAAG,CAAC,MAAM,UAAU,CAAC;QACxC,MAAM,EAAE,MAAM;QACd,eAAe;QACf,WAAW;KACZ,CAAC,CAA6B,CAAA;IAC/B,IACE,eAAe,CAAC,UAAU,KAAK,IAAI;QACnC,OAAO,eAAe,CAAC,UAAU,KAAK,QAAQ,EAC9C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,CAAC;IAED,IAAI,0BAA6C,CAAA;IACjD,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,CAAC,MAAM,UAAU,CAAC;YAClC,MAAM,EAAE,gBAAgB;YACxB,eAAe;YACf,WAAW;SACZ,CAAC,CAA6B,CAAA;QAC/B,IACE,SAAS,CAAC,UAAU,KAAK,IAAI;YAC7B,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ,EACxC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;QAC3E,CAAC;QACD,0BAA0B,GAAG,SAAS,CAAC,UAAmB,CAAA;IAC5D,CAAC;IAED,IAAI,UAAkC,CAAA;IACtC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,eAAe,GAAG,CAAC,MAAM,UAAU,CAAC;YACxC,MAAM,EAAE,MAAM;YACd,eAAe;YACf,WAAW;SACZ,CAAC,CAA6B,CAAA;QAC/B,IAAI,OAAO,eAAe,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACjE,CAAC;QACD,IAAI,CAAC;YACH,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAA;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACjE,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACjE,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CACtB,MAAM,EACN,aAAa,EACb,eAAe,CAAC;QACd,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO;QACP,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtC,CAAC,CACH,CAAA;IACD,IAAI,SAA4B,CAAA;IAChC,IAAI,CAAC;QACH,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,GAAG,IAAI,CAAA;IAClB,CAAC;IACD,0EAA0E;IAC1E,oDAAoD;IACpD,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,kBAAkB,CAC1B,iEAAiE;YAC/D,8CAA8C,CACjD,CAAA;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE;YACR,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK;gBAChD,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;gBACxB,CAAC,CAAC,EAAE,CAAC;YACP,OAAO;YACP,UAAU,EAAE,eAAe,CAAC,UAAmB;YAC/C,GAAG,CAAC,0BAA0B;gBAC5B,CAAC,CAAC,EAAE,gBAAgB,EAAE,0BAA0B,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,SAAS;SACV;QACD,UAAU;KACX,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,EAClD,MAAM,EACN,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,MAAM,EAOP;IACC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC;QAC/C,MAAM;QACN,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/C,MAAM,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,EAAE,SAAS,EAAE,GAChE,MAA0D,CAAA;IAC5D,MAAM,MAAM,GACV,SAAS,KAAK,SAAS;QACrB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC7D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,eAAe,EAAE,CAAC,CAAA;IAC1E,MAAM,sBAAsB,GAAG,gBAAgB;QAC7C,CAAC,CAAC,MAAM,UAAU,CAAC;YACf,IAAI,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;YACtC,eAAe;SAChB,CAAC;QACJ,CAAC,CAAC,mBAAmB,KAAK,SAAS;YACjC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,iBAAiB,CAAC;gBAChB,KAAK,EAAE,mBAAmB;gBAC1B,IAAI,EAAE,kBAAkB;aACzB,CAAC,CAAA;IACR,OAAO,CAAC,MAAM,eAAe,CAAC;QAC5B,OAAO,EAAE,sBAAsB;QAC/B,UAAU;QACV,OAAO;QACP,MAAM;QACN,OAAO,EAAE;YACP,OAAO;YACP,MAAM;YACN,GAAG,CAAC,sBAAsB;gBACxB,CAAC,CAAC,EAAE,gBAAgB,EAAE,sBAAsB,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B;KACF,CAAC,CAAuB,CAAA;AAC3B,CAAC"}
+{"version":3,"file":"unlockRecord.js","sourceRoot":"","sources":["../../src/unlock/unlockRecord.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAA;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAO9C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,oBAAoB,EACpB,uBAAuB,EACvB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EAClB,MAAM,sBAAsB,CAAA;AAM7B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAEnC;;;;;GAKG;AACH,MAAM,sBAAsB,GAAG,8BAA8B,CAAA;AAE7D;;;;;;;;GAQG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAA;IAClC,CAAC;CACF;AAuDD;;;;;GAKG;AACH,SAAS,eAAe,CAAC,EACvB,UAAU,EACV,OAAO,EACP,UAAU,EAKX;IACC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAC7B,IAAI,CAAC,SAAS,CAAC;QACb,sBAAsB;QACtB,UAAU;QACV,OAAO,CAAC,GAAG,IAAI,EAAE;QACjB,OAAO,CAAC,OAAO;QACf,OAAO,CAAC,IAAI;QACZ,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;KACpD,CAAC,CACH,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACnC,aAAa,EACb,UAAU,EACV,OAAO,EACP,UAAU,EAMX;IACC,OAAO,cAAc,CAAC,MAAM,CAC1B,IAAI,CACF,MAAM,EACN,aAAa,EACb,eAAe,CAAC;QACd,UAAU;QACV,OAAO;QACP,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtC,CAAC,CACH,CACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAE,MAAM,EAAuB;IACjE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAA0B,CAAA;IAC3D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5C,MAAM,IAAI,kBAAkB,CAC1B,gEAAgE;YAC9D,0CAA0C,CAC7C,CAAA;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CAAC,EACxC,MAAM,EAGP;IACC,MAAM,EAAE,UAAU,EAAE,GAAG,gBAAgB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IACpE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,UAAU,CAAC,YAAY,CACtD,CAAA;IACD,kEAAkE;IAClE,uEAAuE;IACvE,sEAAsE;IACtE,yEAAyE;IACzE,0CAA0C;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,iEAAiE;YAC/D,0DAA0D,CAC7D,CAAA;IACH,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;SAC5B,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC;SACxC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;SACzE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACnC,MAAM,EACN,wBAAwB,EAIzB;IACC,MAAM,SAAS,GACb,YAAY,CAAC,wBAAwB,CAAC,IAAI,wBAAwB,CAAA;IACpE,OAAO,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;AAClE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,EACzB,KAAK,EACL,IAAI,EAIL;IACC,MAAM,MAAM,GAAG,KAA2C,CAAA;IAC1D,IACE,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,CAAC,UAAU,KAAK,IAAI;QAC1B,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,MAAM,CAAC,OAAO,KAAK,SAAS;QAC5B,MAAM,CAAC,OAAO,KAAK,IAAI,EACvB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,uBAAuB,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,MAA4B,CAAA;AACrC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,UAAU,CAAC,EACxB,IAAI,EACJ,eAAe,EAIhB;IACC,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAA;IAClE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;IACrD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACxC,IAAI,EAAE,IAA+D;KACtE,CAAC,CAAA;IACF,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAA;AAC1C,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,UAAU,CAAC,EACxB,MAAM,EACN,eAAe,EACf,WAAW,EAKZ;IACC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;QAChC,eAAe;QACf,WAAW;QACX,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAgB,EAAE,CAAC,CAAA;AAC9D,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY,CACnB,OAAkD;IAElD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,OAAO,CAAC,MAAM,CAAA;IACtB,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAA;AACtB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,UAAU,EACV,KAAK,EACL,OAAO,EACP,UAAU,EACV,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,MAAM,EACN,aAAa,EACb,SAAS,EAYV;IACC,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IACtD,CAAC;IACD,MAAM,OAAO,GAAG,oBAAoB,CAAC;QACnC,aAAa;QACb,UAAU;QACV,OAAO;QACP,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtC,CAAC,CAAA;IACF,0EAA0E;IAC1E,sDAAsD;IACtD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxE,UAAU,CAAC;YACT,IAAI,EAAE;gBACJ,UAAU;gBACV,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3B,OAAO,EAAE;oBACP,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5C,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;iBACnB;gBACD,SAAS,EAAE,oBAAoB,CAAC,EAAE,SAAS,EAAE,CAAC;aAC/C;YACD,eAAe;SAChB,CAAC;QACF,UAAU,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,eAAe,EAAE,CAAC;QACrD,gBAAgB;YACd,CAAC,CAAC,UAAU,CAAC;gBACT,IAAI,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;gBACtC,eAAe;aAChB,CAAC;YACJ,CAAC,CAAC,SAAS;QACb,UAAU;YACR,CAAC,CAAC,UAAU,CAAC;gBACT,IAAI,EAAE,EAAE,UAAU,EAAE,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;gBACvD,eAAe;aAChB,CAAC;YACJ,CAAC,CAAC,SAAS;KACd,CAAC,CAAA;IACF,OAAO,CAAC,MAAM,eAAe,CAAC;QAC5B,OAAO,EAAE,sBAAsB;QAC/B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM;QACN,OAAO,EAAE;YACP,OAAO;YACP,MAAM;YACN,GAAG,CAAC,sBAAsB;gBACxB,CAAC,CAAC,EAAE,gBAAgB,EAAE,sBAAsB,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B;KACF,CAAC,CAAuB,CAAA;AAC3B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,MAAM,EACN,eAAe,EACf,WAAW,EACX,oBAAoB,EACpB,aAAa,EAOd;IAIC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC;QACtD,MAAM;QACN,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/C,MAAM,EACJ,MAAM,EAAE,SAAS,EACjB,gBAAgB,EAAE,mBAAmB,EACrC,MAAM,EAAE,SAAS,EAClB,GAAG,MAIH,CAAA;IACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,uEAAuE;YACrE,4CAA4C,CAC/C,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IACtE,MAAM,gBAAgB,GACpB,mBAAmB,KAAK,SAAS;QAC/B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,iBAAiB,CAAC;YAChB,KAAK,EAAE,mBAAmB;YAC1B,IAAI,EAAE,kBAAkB;SACzB,CAAC,CAAA;IACR,MAAM,MAAM,GACV,SAAS,KAAK,SAAS;QACrB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IAE7D,2EAA2E;IAC3E,sBAAsB;IACtB,MAAM,kBAAkB,GAAG,KAAM,CAAC,kBAAkB,CAAA;IACpD,MAAM,YAAY,GAAG,uBAAuB,CAAC;QAC3C,kBAAkB;QAClB,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAA;IACF,IAAI,UAAU,GAA2B;QACvC,OAAO,EAAE,EAAE,kBAAkB,EAAE,YAAY,EAAE;KAC9C,CAAA;IACD,IAAI,YAAY,KAAK,oBAAoB,EAAE,CAAC;QAC1C,MAAM,iBAAiB,CAAC;YACtB,MAAM;YACN,oBAAoB,EAAE,oBAAoB;YAC1C,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAA;QACF,UAAU,GAAG,UAAU,CAAA;IACzB,CAAC;IAED,uEAAuE;IACvE,mEAAmE;IACnE,0EAA0E;IAC1E,2EAA2E;IAC3E,+CAA+C;IAC/C,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,oBAAoB,EAAE,UAAU,CAAC,GAC7D,MAAM,OAAO,CAAC,UAAU,CAAC;QACvB,UAAU,CAAC;YACT,MAAM,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE;YAC/B,eAAe;YACf,WAAW;SACZ,CAAC;QACF,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC;QAC5D,gBAAgB;YACd,CAAC,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC;YACxE,CAAC,CAAC,SAAS;QACb,MAAM;YACJ,CAAC,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC;YAC9D,CAAC,CAAC,SAAS;KACd,CAAC,CAAA;IAEJ,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAKnC,CAAA;IACD,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3D,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;IAClE,CAAC;IACD,MAAM,SAAS,GAAG,oBAAoB,CAAC;QACrC,KAAK,EAAE,KAAK,CAAC,SAAS;QACtB,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAA;IAEF,MAAM,eAAe,GAAG,YAAY,CAAC,UAAU,CAA6B,CAAA;IAC5E,IACE,eAAe,CAAC,UAAU,KAAK,IAAI;QACnC,OAAO,eAAe,CAAC,UAAU,KAAK,QAAQ,EAC9C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,CAAC;IAED,IAAI,0BAA6C,CAAA;IACjD,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,YAAY,CAAC,oBAAoB,CAElD,CAAA;QACD,IACE,SAAS,CAAC,UAAU,KAAK,IAAI;YAC7B,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ,EACxC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;QAC3E,CAAC;QACD,0BAA0B,GAAG,SAAS,CAAC,UAAmB,CAAA;IAC5D,CAAC;IAED,IAAI,UAAkC,CAAA;IACtC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,eAAe,GAAG,YAAY,CAAC,UAAU,CAE9C,CAAA;QACD,IAAI,OAAO,eAAe,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACjE,CAAC;QACD,IAAI,CAAC;YACH,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAA;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACjE,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACjE,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CACtB,MAAM,EACN,aAAa,EACb,eAAe,CAAC;QACd,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO;QACP,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtC,CAAC,CACH,CAAA;IACD,IAAI,SAA4B,CAAA;IAChC,IAAI,CAAC;QACH,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,GAAG,IAAI,CAAA;IAClB,CAAC;IACD,0EAA0E;IAC1E,oDAAoD;IACpD,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,kBAAkB,CAC1B,iEAAiE;YAC/D,8CAA8C,CACjD,CAAA;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE;YACR,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK;gBAChD,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;gBACxB,CAAC,CAAC,EAAE,CAAC;YACP,OAAO;YACP,UAAU,EAAE,eAAe,CAAC,UAAmB;YAC/C,GAAG,CAAC,0BAA0B;gBAC5B,CAAC,CAAC,EAAE,gBAAgB,EAAE,0BAA0B,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,SAAS;SACV;QACD,UAAU;KACX,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,EAClD,MAAM,EACN,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,MAAM,EAOP;IACC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC;QAC/C,MAAM;QACN,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/C,MAAM,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,EAAE,SAAS,EAAE,GAChE,MAA0D,CAAA;IAC5D,MAAM,MAAM,GACV,SAAS,KAAK,SAAS;QACrB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC7D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,eAAe,EAAE,CAAC,CAAA;IAC1E,MAAM,sBAAsB,GAAG,gBAAgB;QAC7C,CAAC,CAAC,MAAM,UAAU,CAAC;YACf,IAAI,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;YACtC,eAAe;SAChB,CAAC;QACJ,CAAC,CAAC,mBAAmB,KAAK,SAAS;YACjC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,iBAAiB,CAAC;gBAChB,KAAK,EAAE,mBAAmB;gBAC1B,IAAI,EAAE,kBAAkB;aACzB,CAAC,CAAA;IACR,OAAO,CAAC,MAAM,eAAe,CAAC;QAC5B,OAAO,EAAE,sBAAsB;QAC/B,UAAU;QACV,OAAO;QACP,MAAM;QACN,OAAO,EAAE;YACP,OAAO;YACP,MAAM;YACN,GAAG,CAAC,sBAAsB;gBACxB,CAAC,CAAC,EAAE,gBAAgB,EAAE,sBAAsB,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B;KACF,CAAC,CAAuB,CAAA;AAC3B,CAAC"}

package/dist/webvh/accountEntry.d.ts

@@ -1,4 +1,4 @@
-import type { UpdateDIDInterface, UpdateDIDResult } from '@interop/did-method-webvh';
+import type { DIDDoc, DIDLog, UpdateDIDInterface, UpdateDIDResult } from '@interop/did-method-webvh';
 import type { ResourceLogPinStore } from '@interop/vh-resource-log';
 import type { ClientWebvhUpdateKeys, PublishedWebvhLog, WebvhIdStore } from './didWebvh.js';
 import type { LadderRung, LadderRungState } from '../clientAnnex/ladder.js';
@@ -6,8 +6,9 @@ import type { LadderRung, LadderRungState } from '../clientAnnex/ladder.js';
  * Who signs an account-log entry. The client arm carries an enrolled client's
  * own did:webvh update-key seeds; the ladder arm carries a standing unlock
  * credential's ladder seed, whose rungs sign through the credential's bridge
- * delegation. There is no third arm and no absence: every ceremony body that
- * extends the account log states which one it acts as.
+ * delegation. A ceremony body accepts no other arm and no absence: every one
+ * that extends the account log states which of the two it acts as. The
+ * seam's own committed-key arm is {@link AccountEntrySigner}'s.
  */
 export type AccountLogSigner = {
     kind: 'client';
@@ -16,6 +17,16 @@ export type AccountLogSigner = {
     kind: 'ladder';
     ladderSeed: Uint8Array;
 };
+/**
+ * Who may sign through {@link signAccountEntry} itself: the two ceremony arms
+ * plus the committed-key arm, a bare update-key seed whose key the published
+ * log commits or already authorizes. Kept apart from {@link AccountLogSigner}
+ * so no ceremony body widens what it accepts by taking the seam's type.
+ */
+export type AccountEntrySigner = AccountLogSigner | {
+    kind: 'committed';
+    updateSeed: Uint8Array;
+};
 /**
  * The store an account-log entry is read and published through: the public
  * log read and the `did.jsonl` PUT. A subset of {@link WebvhIdStore}, so both
@@ -69,6 +80,22 @@ export type AccountEntryOutcome = {
     updated?: UpdateDIDResult;
     etag?: string;
 };
+/**
+ * The head an entry leaves standing, assembled from what the entry's own
+ * `updateDID` already resolved plus the publish's validator when an entry was
+ * published, and the read the entry was built on verbatim when the build
+ * declined (the head is then provably unchanged by this call). No second read
+ * and no second resolve: the update-key parameters are the ones the entry
+ * itself stated, so a caller building its next entry on this head signs
+ * against exactly what it published.
+ *
+ * @param options {object}
+ * @param options.outcome {AccountEntryOutcome}
+ * @returns {PublishedWebvhLog}
+ */
+export declare function accountEntryHead({ outcome }: {
+    outcome: AccountEntryOutcome;
+}): PublishedWebvhLog;
 /**
  * Signs and publishes one account-log entry, preamble and postamble
  * included -- the pinned read, the signer arm's own preconditions, the
@@ -87,7 +114,7 @@ export type AccountEntryOutcome = {
  * @param options {object}
  * @param options.idStore {AccountLogStore}   the log read and the
  *   `did.jsonl` PUT
- * @param options.signer {AccountLogSigner}   who signs this entry
+ * @param options.signer {AccountEntrySigner}   who signs this entry
  * @param options.build {function}
  *   `({ published, rung, state }) => AccountEntryFields | undefined` -- the
  *   entry's own members, or `undefined` to decline
@@ -111,8 +138,12 @@ export type AccountEntryOutcome = {
  * @param [options.verb] {string}   what the caller is doing, for the client
  *   arm's pending-rotation refusal message (e.g. `'revoking a client'`)
  * @param [options.logOnly] {boolean}   publish `did.jsonl` without its
- *   `did:web` projection. Implied by the ladder arm, whose bridge reaches
- *   `did.jsonl` alone
+ *   `did:web` projection. Defaults per arm: `true` on the ladder arm, whose
+ *   bridge reaches `did.jsonl` alone, and `false` on the client arm, which
+ *   invokes as the controller. A ladder-signed entry written through a
+ *   root-invoking store (the establishment's stage 3) passes `false` to
+ *   republish the projection beside the entry; the committed arm states it,
+ *   since which store it signs through is the caller's
  * @param [options.beforePublish] {function}   `({ updated }) => Promise<void>`
  *   -- run on the built entry, AFTER `updateDID` and BEFORE the conditional
  *   publish. The seam exists for the `did:web` projection: a ladder-signed
@@ -125,7 +156,7 @@ export type AccountEntryOutcome = {
  */
 export declare function signAccountEntry({ idStore, signer, build, skip, published: alreadyRead, expectedDid, pinStore, logId, missingMessage, verb, logOnly, beforePublish }: {
     idStore: AccountLogStore;
-    signer: AccountLogSigner;
+    signer: AccountEntrySigner;
     build: (context: {
         published: PublishedWebvhLog;
         rung?: LadderRung;
@@ -143,4 +174,29 @@ export declare function signAccountEntry({ idStore, signer, build, skip, publish
         updated: UpdateDIDResult;
     }) => Promise<void>;
 }): Promise<AccountEntryOutcome>;
+/**
+ * The head a ceremony concludes on when its entry turns out to be
+ * unnecessary -- the client is already enrolled, the removal already landed.
+ * There is nothing to publish either way; what differs is the `did:web`
+ * projection. The client arm invokes as the account's controller, so it
+ * republishes the projection and heals a lag a torn earlier run of the same
+ * ceremony left behind. The ladder arm's bridge reaches `did.jsonl` alone, so
+ * it takes the read verbatim and leaves the projection to
+ * `ensureDidWebProjection`.
+ *
+ * @param options {object}
+ * @param options.idStore {WebvhIdStore}
+ * @param options.signer {AccountLogSigner}   the arm the ceremony acts as
+ * @param options.published {PublishedWebvhLog}   the read the build stood on
+ * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog }>}
+ */
+export declare function concludeUnchangedAccountEntry({ idStore, signer, published }: {
+    idStore: WebvhIdStore;
+    signer: AccountLogSigner;
+    published: PublishedWebvhLog;
+}): Promise<{
+    did: string;
+    doc: DIDDoc;
+    log: DIDLog;
+}>;
 //# sourceMappingURL=accountEntry.d.ts.map

package/dist/webvh/accountEntry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"accountEntry.d.ts","sourceRoot":"","sources":["../../src/webvh/accountEntry.ts"],"names":[],"mappings":"AA6CA,OAAO,KAAK,EACV,kBAAkB,EAClB,eAAe,EAChB,MAAM,2BAA2B,CAAA;AAClC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAWnE,OAAO,KAAK,EACV,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,EACb,MAAM,eAAe,CAAA;AAQtB,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAE3E;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,UAAU,EAAE,qBAAqB,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CAAA;AAE9C;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,IAAI,CAChC,YAAY,EACZ,kBAAkB,GAAG,eAAe,CACrC,CAAA;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,kBAAmB,SAAQ,IAAI,CAC9C,kBAAkB,EAClB,KAAK,GAAG,QAAQ,GAAG,gBAAgB,CACpC;IACC;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;CACxB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IACE,OAAO,EAAE,IAAI,CAAA;IACb,SAAS,EAAE,iBAAiB,CAAA;IAC5B,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,QAAQ,CAAC,EAAE,SAAS,CAAA;IACpB,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,OAAO,CAAC,EAAE,SAAS,CAAA;IACnB,IAAI,CAAC,EAAE,SAAS,CAAA;CACjB,GACD;IACE,OAAO,EAAE,KAAK,CAAA;IACd,SAAS,EAAE,iBAAiB,CAAA;IAC5B,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,eAAe,CAAA;IACvB,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,CAAA;AAEL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,OAAO,EACP,MAAM,EACN,KAAK,EACL,IAAI,EACJ,SAAS,EAAE,WAAW,EACtB,WAAW,EACX,QAAQ,EACR,KAAK,EACL,cAAc,EACd,IAAkC,EAClC,OAAe,EACf,aAAa,EACd,EAAE;IACD,OAAO,EAAE,eAAe,CAAA;IACxB,MAAM,EAAE,gBAAgB,CAAA;IACxB,KAAK,EAAE,CAAC,OAAO,EAAE;QACf,SAAS,EAAE,iBAAiB,CAAA;QAC5B,IAAI,CAAC,EAAE,UAAU,CAAA;QACjB,KAAK,CAAC,EAAE,eAAe,CAAA;KACxB,KAAK,kBAAkB,GAAG,SAAS,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAA;IAC9E,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,iBAAiB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnE,SAAS,CAAC,EAAE,iBAAiB,CAAA;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,eAAe,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACvE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAqG/B"}
+{"version":3,"file":"accountEntry.d.ts","sourceRoot":"","sources":["../../src/webvh/accountEntry.ts"],"names":[],"mappings":"AA0DA,OAAO,KAAK,EACV,MAAM,EACN,MAAM,EACN,kBAAkB,EAClB,eAAe,EAChB,MAAM,2BAA2B,CAAA;AAClC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAYnE,OAAO,KAAK,EACV,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,EACb,MAAM,eAAe,CAAA;AAQtB,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAE3E;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,UAAU,EAAE,qBAAqB,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CAAA;AAE9C;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAC5B,gBAAgB,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CAAA;AAElE;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,IAAI,CAChC,YAAY,EACZ,kBAAkB,GAAG,eAAe,CACrC,CAAA;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,kBAAmB,SAAQ,IAAI,CAC9C,kBAAkB,EAClB,KAAK,GAAG,QAAQ,GAAG,gBAAgB,CACpC;IACC;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;CACxB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IACE,OAAO,EAAE,IAAI,CAAA;IACb,SAAS,EAAE,iBAAiB,CAAA;IAC5B,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,QAAQ,CAAC,EAAE,SAAS,CAAA;IACpB,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,OAAO,CAAC,EAAE,SAAS,CAAA;IACnB,IAAI,CAAC,EAAE,SAAS,CAAA;CACjB,GACD;IACE,OAAO,EAAE,KAAK,CAAA;IACd,SAAS,EAAE,iBAAiB,CAAA;IAC5B,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,eAAe,CAAA;IACvB,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,CAAA;AAEL;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,OAAO,EACR,EAAE;IACD,OAAO,EAAE,mBAAmB,CAAA;CAC7B,GAAG,iBAAiB,CAepB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,OAAO,EACP,MAAM,EACN,KAAK,EACL,IAAI,EACJ,SAAS,EAAE,WAAW,EACtB,WAAW,EACX,QAAQ,EACR,KAAK,EACL,cAAc,EACd,IAAkC,EAClC,OAAkC,EAClC,aAAa,EACd,EAAE;IACD,OAAO,EAAE,eAAe,CAAA;IACxB,MAAM,EAAE,kBAAkB,CAAA;IAC1B,KAAK,EAAE,CAAC,OAAO,EAAE;QACf,SAAS,EAAE,iBAAiB,CAAA;QAC5B,IAAI,CAAC,EAAE,UAAU,CAAA;QACjB,KAAK,CAAC,EAAE,eAAe,CAAA;KACxB,KAAK,kBAAkB,GAAG,SAAS,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAA;IAC9E,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,iBAAiB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnE,SAAS,CAAC,EAAE,iBAAiB,CAAA;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,eAAe,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACvE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA8H/B;AAqDD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,6BAA6B,CAAC,EAClD,OAAO,EACP,MAAM,EACN,SAAS,EACV,EAAE;IACD,OAAO,EAAE,YAAY,CAAA;IACrB,MAAM,EAAE,gBAAgB,CAAA;IACxB,SAAS,EAAE,iBAAiB,CAAA;CAC7B,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAQrD"}

package/dist/webvh/accountEntry.js

@@ -6,7 +6,8 @@
  * extends `did.jsonl` writes through, so a ceremony body describes its
  * document delta once and the signing arm is a parameter.
  *
- * Two arms, discriminated by {@link AccountLogSigner}:
+ * Two arms, discriminated by {@link AccountLogSigner}, are what a ceremony
+ * body accepts:
  *
  * - **client** -- an enrolled client's did:webvh update keys. The active key
  *   is derived from the seed, the published log must authorize it, the
@@ -21,15 +22,27 @@
  *   publishes `did.jsonl` alone -- the bridge's whole reach. The projection is
  *   the ceremony's own pre-entry PUT, or the next visit's ensure.
  *
+ * A third arm is the seam's alone ({@link AccountEntrySigner}):
+ *
+ * - **committed** -- one bare update-key seed whose key stands committed in
+ *   `nextKeyHashes` (or already revealed in `updateKeys`), revealing itself:
+ *   the prerotation reveal with no attribution in front of it. The recovery
+ *   continuation's two entries are this arm -- the spent code's rung 0 signs
+ *   the reveal-and-commit entry, and the successor key the reveal committed
+ *   signs the add-and-retire entry. The reveal union and the carry-over
+ *   union are the ladder arm's. No ceremony body takes this arm as a
+ *   parameter, since a committed key carries no ceremony authority of its
+ *   own beyond the continuation that reveals it.
+ *
  * Four of those steps are load-bearing conventions rather than plumbing:
  * omitting the reveal union publishes a log whose next entry cannot resolve,
  * omitting the carry-over hash switches prerotation off, omitting the
  * carry-over precondition publishes an entry no resolver accepts, and omitting
  * the pin advance leaves a pin behind an entry this client itself published.
  *
- * One property both arms rest on: an entry keeps its own signer. The ladder
- * arm unions the acting rung back into `updateKeys` after the build runs, so
- * no entry can remove the key that signed it. A ceremony that must retire a
+ * One property every arm rests on: an entry keeps its own signer. The ladder
+ * and committed arms union the acting key back into `updateKeys` after the
+ * build runs, so no entry can remove the key that signed it. A ceremony that must retire a
  * rung therefore needs a second entry, signed by the successor (the
  * two-entry passphrase change, and the recovery spend's reveal-then-retire
  * pair). The same rule is why a rung is not consumed per ceremony: rung
@@ -44,7 +57,7 @@
  */
 import { updateDID } from '@interop/did-method-webvh';
 import { deriveNextKeyHash } from '@interop/did-method-webvh';
-import { assertCarryOverCommitments, assertPublishedLogDid, pinOfLog, putLogResource, readPublishedLogOrThrow, updateKeyMultibase, updateKeySigner } from './didWebvh.js';
+import { advanceLogPin, assertCarryOverCommitments, assertPublishedLogDid, concludeWithPublishedLog, putLogResource, readPublishedLogOrThrow, updateKeyMultibase, updateKeySigner } from './didWebvh.js';
 import { putDidWebProjection } from './didWebProjection.js';
 // The one deliberate dependency on the annex subpath, pinned as an exception
 // in the lint rule (beside `unlock/standingWebvh.ts` and
@@ -52,6 +65,35 @@ import { putDidWebProjection } from './didWebProjection.js';
 // the log through the shared attribution helper, and touches no annex log
 // machinery.
 import { attributeLadderRung } from '../clientAnnex/ladder.js';
+/**
+ * The head an entry leaves standing, assembled from what the entry's own
+ * `updateDID` already resolved plus the publish's validator when an entry was
+ * published, and the read the entry was built on verbatim when the build
+ * declined (the head is then provably unchanged by this call). No second read
+ * and no second resolve: the update-key parameters are the ones the entry
+ * itself stated, so a caller building its next entry on this head signs
+ * against exactly what it published.
+ *
+ * @param options {object}
+ * @param options.outcome {AccountEntryOutcome}
+ * @returns {PublishedWebvhLog}
+ */
+export function accountEntryHead({ outcome }) {
+    const { updated } = outcome;
+    if (!updated) {
+        return outcome.published;
+    }
+    return {
+        log: updated.log,
+        did: updated.did,
+        // Detached from the entry's own `state`, as every other producer of this
+        // type is, so a consumer editing the document cannot edit the log.
+        doc: structuredClone(updated.doc),
+        updateKeys: updated.meta.updateKeys,
+        nextKeyHashes: updated.meta.nextKeyHashes,
+        ...(outcome.etag !== undefined ? { etag: outcome.etag } : {})
+    };
+}
 /**
  * Signs and publishes one account-log entry, preamble and postamble
  * included -- the pinned read, the signer arm's own preconditions, the
@@ -70,7 +112,7 @@ import { attributeLadderRung } from '../clientAnnex/ladder.js';
  * @param options {object}
  * @param options.idStore {AccountLogStore}   the log read and the
  *   `did.jsonl` PUT
- * @param options.signer {AccountLogSigner}   who signs this entry
+ * @param options.signer {AccountEntrySigner}   who signs this entry
  * @param options.build {function}
  *   `({ published, rung, state }) => AccountEntryFields | undefined` -- the
  *   entry's own members, or `undefined` to decline
@@ -94,8 +136,12 @@ import { attributeLadderRung } from '../clientAnnex/ladder.js';
  * @param [options.verb] {string}   what the caller is doing, for the client
  *   arm's pending-rotation refusal message (e.g. `'revoking a client'`)
  * @param [options.logOnly] {boolean}   publish `did.jsonl` without its
- *   `did:web` projection. Implied by the ladder arm, whose bridge reaches
- *   `did.jsonl` alone
+ *   `did:web` projection. Defaults per arm: `true` on the ladder arm, whose
+ *   bridge reaches `did.jsonl` alone, and `false` on the client arm, which
+ *   invokes as the controller. A ladder-signed entry written through a
+ *   root-invoking store (the establishment's stage 3) passes `false` to
+ *   republish the projection beside the entry; the committed arm states it,
+ *   since which store it signs through is the caller's
  * @param [options.beforePublish] {function}   `({ updated }) => Promise<void>`
  *   -- run on the built entry, AFTER `updateDID` and BEFORE the conditional
  *   publish. The seam exists for the `did:web` projection: a ladder-signed
@@ -106,7 +152,7 @@ import { attributeLadderRung } from '../clientAnnex/ladder.js';
  *   and it must be idempotent
  * @returns {Promise<AccountEntryOutcome>}
  */
-export async function signAccountEntry({ idStore, signer, build, skip, published: alreadyRead, expectedDid, pinStore, logId, missingMessage, verb = 'extending the account log', logOnly = false, beforePublish }) {
+export async function signAccountEntry({ idStore, signer, build, skip, published: alreadyRead, expectedDid, pinStore, logId, missingMessage, verb = 'extending the account log', logOnly = signer.kind === 'ladder', beforePublish }) {
     // THE PREAMBLE: each attempt reads for itself unless the caller threaded a
     // read in, so the continuity check runs on the read the compare-and-swap
     // publish is conditioned on rather than only on an orchestrator's pre-read.
@@ -165,14 +211,36 @@ export async function signAccountEntry({ idStore, signer, build, skip, published
         signedHashes = [...new Set([...statedHashes, ...commitHashes])];
     }
     else {
-        entrySigner = await updateKeySigner({ seed: attributed.rung.seed });
-        // The acting rung reveals itself in the entry it signs (its hash stands
-        // committed, or the rung is already revealed), and its own hash is kept
+        // The revealing key: the attributed rung on the ladder arm, the bare seed's
+        // key on the committed arm, which must stand committed or already
+        // revealed -- the one precondition the ladder arm's attribution already
+        // proved.
+        let revealing;
+        if (signer.kind === 'ladder') {
+            revealing = {
+                seed: attributed.rung.seed,
+                keyMultibase: attributed.rung.keyMultibase,
+                hash: rungHash
+            };
+        }
+        else {
+            const keyMultibase = await updateKeyMultibase({ seed: signer.updateSeed });
+            const hash = await deriveNextKeyHash(keyMultibase);
+            if (!published.updateKeys.includes(keyMultibase) &&
+                !published.nextKeyHashes.includes(hash)) {
+                throw new Error('did:webvh: the published log neither authorizes this update key ' +
+                    `nor commits its hash; nothing licenses it to sign while ${verb}.`);
+            }
+            revealing = { seed: signer.updateSeed, keyMultibase, hash };
+        }
+        entrySigner = await updateKeySigner({ seed: revealing.seed });
+        // The acting key reveals itself in the entry it signs (its hash stands
+        // committed, or the key is already revealed), and its own hash is kept
         // committed so the carry-over convention holds for the next entry.
-        signedUpdateKeys = [
-            ...new Set([...statedKeys, attributed.rung.keyMultibase])
+        signedUpdateKeys = [...new Set([...statedKeys, revealing.keyMultibase])];
+        signedHashes = [
+            ...new Set([...statedHashes, revealing.hash, ...commitHashes])
         ];
-        signedHashes = [...new Set([...statedHashes, rungHash, ...commitHashes])];
     }
     await assertCarryOverCommitments({ published });
     const updated = await updateDID({
@@ -188,7 +256,7 @@ export async function signAccountEntry({ idStore, signer, build, skip, published
         idStore,
         updated,
         ifMatch: published.etag,
-        logOnly: logOnly || signer.kind === 'ladder',
+        logOnly,
         pinStore,
         logId
     });
@@ -231,9 +299,32 @@ async function publishAccountEntry({ idStore, updated, ifMatch, logOnly, pinStor
             webDoc: updated.webDoc
         });
     }
-    if (pinStore && logId !== undefined) {
-        await pinStore.write({ logId, pin: pinOfLog(updated.log) });
-    }
+    await advanceLogPin({ pinStore, logId, log: updated.log });
     return written;
 }
+/**
+ * The head a ceremony concludes on when its entry turns out to be
+ * unnecessary -- the client is already enrolled, the removal already landed.
+ * There is nothing to publish either way; what differs is the `did:web`
+ * projection. The client arm invokes as the account's controller, so it
+ * republishes the projection and heals a lag a torn earlier run of the same
+ * ceremony left behind. The ladder arm's bridge reaches `did.jsonl` alone, so
+ * it takes the read verbatim and leaves the projection to
+ * `ensureDidWebProjection`.
+ *
+ * @param options {object}
+ * @param options.idStore {WebvhIdStore}
+ * @param options.signer {AccountLogSigner}   the arm the ceremony acts as
+ * @param options.published {PublishedWebvhLog}   the read the build stood on
+ * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog }>}
+ */
+export async function concludeUnchangedAccountEntry({ idStore, signer, published }) {
+    if (signer.kind === 'client') {
+        return {
+            ...(await concludeWithPublishedLog({ idStore, published })),
+            log: published.log
+        };
+    }
+    return { did: published.did, doc: published.doc, log: published.log };
+}
 //# sourceMappingURL=accountEntry.js.map

package/dist/webvh/accountEntry.js.map

@@ -1 +1 @@
-{"version":3,"file":"accountEntry.js","sourceRoot":"","sources":["../../src/webvh/accountEntry.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAMrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,QAAQ,EACR,cAAc,EACd,uBAAuB,EACvB,kBAAkB,EAClB,eAAe,EAChB,MAAM,eAAe,CAAA;AAMtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,6EAA6E;AAC7E,yDAAyD;AACzD,6EAA6E;AAC7E,0EAA0E;AAC1E,aAAa;AACb,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AA8E9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,OAAO,EACP,MAAM,EACN,KAAK,EACL,IAAI,EACJ,SAAS,EAAE,WAAW,EACtB,WAAW,EACX,QAAQ,EACR,KAAK,EACL,cAAc,EACd,IAAI,GAAG,2BAA2B,EAClC,OAAO,GAAG,KAAK,EACf,aAAa,EAkBd;IACC,2EAA2E;IAC3E,yEAAyE;IACzE,4EAA4E;IAC5E,MAAM,SAAS,GACb,WAAW,KAAK,SAAS;QACvB,CAAC,CAAC,qBAAqB,CAAC;YACpB,SAAS,EAAE,WAAW;YACtB,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;QACJ,CAAC,CAAC,MAAM,uBAAuB,CAAC;YAC5B,OAAO;YACP,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC,CAAA;IACR,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IACrC,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,yDAAyD;IACzD,MAAM,UAAU,GACd,MAAM,CAAC,IAAI,KAAK,QAAQ;QACtB,CAAC,CAAC,MAAM,mBAAmB,CAAC;YACxB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS;SACV,CAAC;QACJ,CAAC,CAAC,SAAS,CAAA;IACf,MAAM,QAAQ,GACZ,UAAU,KAAK,SAAS;QACtB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAC3D,MAAM,WAAW,GACf,UAAU,KAAK,SAAS;QACtB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAS,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAA;IAE7E,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,WAAW,EAAE,CAAC,CAAA;IACxD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,WAAW,EAAE,CAAA;IACtD,CAAC;IAED,MAAM,EAAE,YAAY,GAAG,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,MAAM,EAAE,GAAG,KAAK,CAAA;IACzE,MAAM,UAAU,GAAG,UAAU,IAAI,SAAS,CAAC,UAAU,CAAA;IACrD,MAAM,YAAY,GAAG,aAAa,IAAI,SAAS,CAAC,aAAa,CAAA;IAC7D,IAAI,WAAW,CAAA;IACf,IAAI,gBAA0B,CAAA;IAC9B,IAAI,YAAsB,CAAA;IAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,0EAA0E;QAC1E,gEAAgE;QAChE,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC;YACzC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU;SACnC,CAAC,CAAA;QACF,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,gEAAgE;gBAC9D,2DAA2D,IAAI,GAAG,CACrE,CAAA;QACH,CAAC;QACD,WAAW,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;QAC3E,gBAAgB,GAAG,UAAU,CAAA;QAC7B,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAA;IACjE,CAAC;SAAM,CAAC;QACN,WAAW,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,UAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QACpE,wEAAwE;QACxE,wEAAwE;QACxE,mEAAmE;QACnE,gBAAgB,GAAG;YACjB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,EAAE,UAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;SAC3D,CAAA;QACD,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,QAAS,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAA;IAC5E,CAAC;IACD,MAAM,0BAA0B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAC/C,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;QAC9B,GAAG,MAAM;QACT,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,MAAM,EAAE,WAAW;QACnB,cAAc,EAAE,IAAI;QACpB,UAAU,EAAE,gBAAgB;QAC5B,aAAa,EAAE,YAAY;KAC5B,CAAC,CAAA;IACF,MAAM,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IAClC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;QACxC,OAAO;QACP,OAAO;QACP,OAAO,EAAE,SAAS,CAAC,IAAI;QACvB,OAAO,EAAE,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAC5C,QAAQ;QACR,KAAK;KACN,CAAC,CAAA;IACF,OAAO;QACL,OAAO,EAAE,KAAK;QACd,SAAS;QACT,GAAG,WAAW;QACd,OAAO;QACP,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,mBAAmB,CAAC,EACjC,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,QAAQ,EACR,KAAK,EAQN;IACC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAA;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC;QACnC,KAAK,EAAE,OAAO;QACd,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAA;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,mBAAmB,CAAC;YACxB,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,OAAO,CAAC,MAAgB;SACjC,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,QAAQ,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC"}
+{"version":3,"file":"accountEntry.js","sourceRoot":"","sources":["../../src/webvh/accountEntry.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAQrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,EACL,aAAa,EACb,0BAA0B,EAC1B,qBAAqB,EACrB,wBAAwB,EACxB,cAAc,EACd,uBAAuB,EACvB,kBAAkB,EAClB,eAAe,EAChB,MAAM,eAAe,CAAA;AAMtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,6EAA6E;AAC7E,yDAAyD;AACzD,6EAA6E;AAC7E,0EAA0E;AAC1E,aAAa;AACb,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAwF9D;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAC/B,OAAO,EAGR;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;IAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,OAAO,CAAC,SAAS,CAAA;IAC1B,CAAC;IACD,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,yEAAyE;QACzE,mEAAmE;QACnE,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC;QACjC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU;QACnC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa;QACzC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,OAAO,EACP,MAAM,EACN,KAAK,EACL,IAAI,EACJ,SAAS,EAAE,WAAW,EACtB,WAAW,EACX,QAAQ,EACR,KAAK,EACL,cAAc,EACd,IAAI,GAAG,2BAA2B,EAClC,OAAO,GAAG,MAAM,CAAC,IAAI,KAAK,QAAQ,EAClC,aAAa,EAkBd;IACC,2EAA2E;IAC3E,yEAAyE;IACzE,4EAA4E;IAC5E,MAAM,SAAS,GACb,WAAW,KAAK,SAAS;QACvB,CAAC,CAAC,qBAAqB,CAAC;YACpB,SAAS,EAAE,WAAW;YACtB,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;QACJ,CAAC,CAAC,MAAM,uBAAuB,CAAC;YAC5B,OAAO;YACP,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC,CAAA;IACR,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IACrC,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,yDAAyD;IACzD,MAAM,UAAU,GACd,MAAM,CAAC,IAAI,KAAK,QAAQ;QACtB,CAAC,CAAC,MAAM,mBAAmB,CAAC;YACxB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS;SACV,CAAC;QACJ,CAAC,CAAC,SAAS,CAAA;IACf,MAAM,QAAQ,GACZ,UAAU,KAAK,SAAS;QACtB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAC3D,MAAM,WAAW,GACf,UAAU,KAAK,SAAS;QACtB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAS,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAA;IAE7E,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,WAAW,EAAE,CAAC,CAAA;IACxD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,WAAW,EAAE,CAAA;IACtD,CAAC;IAED,MAAM,EAAE,YAAY,GAAG,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,MAAM,EAAE,GAAG,KAAK,CAAA;IACzE,MAAM,UAAU,GAAG,UAAU,IAAI,SAAS,CAAC,UAAU,CAAA;IACrD,MAAM,YAAY,GAAG,aAAa,IAAI,SAAS,CAAC,aAAa,CAAA;IAC7D,IAAI,WAAW,CAAA;IACf,IAAI,gBAA0B,CAAA;IAC9B,IAAI,YAAsB,CAAA;IAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,0EAA0E;QAC1E,gEAAgE;QAChE,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC;YACzC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU;SACnC,CAAC,CAAA;QACF,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,gEAAgE;gBAC9D,2DAA2D,IAAI,GAAG,CACrE,CAAA;QACH,CAAC;QACD,WAAW,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;QAC3E,gBAAgB,GAAG,UAAU,CAAA;QAC7B,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAA;IACjE,CAAC;SAAM,CAAC;QACN,4EAA4E;QAC5E,kEAAkE;QAClE,wEAAwE;QACxE,UAAU;QACV,IAAI,SAAmE,CAAA;QACvE,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,SAAS,GAAG;gBACV,IAAI,EAAE,UAAW,CAAC,IAAI,CAAC,IAAI;gBAC3B,YAAY,EAAE,UAAW,CAAC,IAAI,CAAC,YAAY;gBAC3C,IAAI,EAAE,QAAS;aAChB,CAAA;QACH,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAA;YAC1E,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,YAAY,CAAC,CAAA;YAClD,IACE,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAC5C,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EACvC,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,kEAAkE;oBAChE,2DAA2D,IAAI,GAAG,CACrE,CAAA;YACH,CAAC;YACD,SAAS,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;QAC7D,CAAC;QACD,WAAW,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAA;QAC7D,uEAAuE;QACvE,uEAAuE;QACvE,mEAAmE;QACnE,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACxE,YAAY,GAAG;YACb,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,SAAS,CAAC,IAAI,EAAE,GAAG,YAAY,CAAC,CAAC;SAC/D,CAAA;IACH,CAAC;IACD,MAAM,0BAA0B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAC/C,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;QAC9B,GAAG,MAAM;QACT,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,MAAM,EAAE,WAAW;QACnB,cAAc,EAAE,IAAI;QACpB,UAAU,EAAE,gBAAgB;QAC5B,aAAa,EAAE,YAAY;KAC5B,CAAC,CAAA;IACF,MAAM,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IAClC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;QACxC,OAAO;QACP,OAAO;QACP,OAAO,EAAE,SAAS,CAAC,IAAI;QACvB,OAAO;QACP,QAAQ;QACR,KAAK;KACN,CAAC,CAAA;IACF,OAAO;QACL,OAAO,EAAE,KAAK;QACd,SAAS;QACT,GAAG,WAAW;QACd,OAAO;QACP,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,mBAAmB,CAAC,EACjC,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,QAAQ,EACR,KAAK,EAQN;IACC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAA;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC;QACnC,KAAK,EAAE,OAAO;QACd,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAA;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,mBAAmB,CAAC;YACxB,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,OAAO,CAAC,MAAgB;SACjC,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAC1D,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,EAClD,OAAO,EACP,MAAM,EACN,SAAS,EAKV;IACC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO;YACL,GAAG,CAAC,MAAM,wBAAwB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YAC3D,GAAG,EAAE,SAAS,CAAC,GAAG;SACnB,CAAA;IACH,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAA;AACvE,CAAC"}

package/dist/webvh/delegatedLogStore.d.ts

@@ -8,7 +8,14 @@
  * through it: the unlock record's `did.jsonl` bridge into the account log
  * (world-readable, so its reads stay unauthenticated), and the client
  * annex sibling delegation into a generation's capability-gated `gen-`
- * collection (GET and PUT, so its reads invoke the same delegation).
+ * collection (GET and PUT, so its reads invoke the same delegation). Which
+ * read a store performs is decided here from the wallet Space layout, never
+ * by the caller: a world-readable roster collection (`isPublic` on its
+ * provisioning spec) is fetched unauthenticated, and every other collection
+ * -- an annex generation included, which the roster never lists -- is read
+ * through the delegation. An unauthenticated GET at a capability-gated
+ * resource, or a delegated GET under a PUT-only bridge, would each fail only
+ * at the server.
  *
  * URLs are built with was-client's paths helpers, so a sub-path deployment
  * addresses exactly the resource the delegation's target names -- the
@@ -37,31 +44,30 @@ export type DelegatedWebvhLogStore = Pick<WebvhIdStore, 'getIdResourceRaw' | 'pu
 /**
  * Builds a delegated log store over one collection of one Space.
  *
- * Reads: with `publicRead` the GET is an unauthenticated fetch of the
- * world-readable resource (the account-log case -- the bridge delegation
- * allows PUT only); without it the GET invokes the same delegation (the
- * annex inventory -- the collection is capability-gated and the sibling
- * delegation allows GET and PUT). Either way a 404 reads as "not published"
- * and the response's ETag rides back as the compare-and-swap token.
+ * Reads: on a world-readable collection (the `id` collection's account log
+ * -- the bridge delegation allows PUT only) the GET is an unauthenticated
+ * fetch; on every other collection it invokes the same delegation (the annex
+ * inventory -- the generation collection is capability-gated and the sibling
+ * delegation allows GET and PUT). The choice is read off the wallet Space
+ * roster (`isPublic`), so no caller states it. Either way a 404 reads as
+ * "not published" and the response's ETag rides back as the compare-and-swap
+ * token.
  *
  * @param options {object}
  * @param options.host {string}   the storage server's base URL
  * @param options.spaceId {string}   the Space holding the collection
  * @param options.collectionId {string}   the collection holding the log
  * @param options.delegation {IZcap}   the pre-minted delegation the writes
- *   (and, without `publicRead`, the reads) invoke
+ *   (and, on a capability-gated collection, the reads) invoke
  * @param options.zcapClient {ZcapClient}   the ezcap client holding the
  *   invoking signer
- * @param [options.publicRead] {boolean}   read with an unauthenticated fetch
- *   instead of invoking the delegation (default `false`)
  * @returns {DelegatedWebvhLogStore}
  */
-export declare function delegatedWebvhLogStore({ host, spaceId, collectionId, delegation, zcapClient, publicRead }: {
+export declare function delegatedWebvhLogStore({ host, spaceId, collectionId, delegation, zcapClient }: {
     host: string;
     spaceId: string;
     collectionId: string;
     delegation: IZcap;
     zcapClient: ZcapClient;
-    publicRead?: boolean;
 }): DelegatedWebvhLogStore;
 //# sourceMappingURL=delegatedLogStore.d.ts.map

package/dist/webvh/delegatedLogStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delegatedLogStore.d.ts","sourceRoot":"","sources":["../../src/webvh/delegatedLogStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAGhD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAEjD;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG,IAAI,CACvC,YAAY,EACZ,kBAAkB,GAAG,eAAe,CACrC,CAAA;AAaD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,IAAI,EACJ,OAAO,EACP,YAAY,EACZ,UAAU,EACV,UAAU,EACV,UAAkB,EACnB,EAAE;IACD,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,KAAK,CAAA;IACjB,UAAU,EAAE,UAAU,CAAA;IACtB,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB,GAAG,sBAAsB,CAwFzB"}
+{"version":3,"file":"delegatedLogStore.d.ts","sourceRoot":"","sources":["../../src/webvh/delegatedLogStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAIhD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAEjD;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG,IAAI,CACvC,YAAY,EACZ,kBAAkB,GAAG,eAAe,CACrC,CAAA;AAkCD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,IAAI,EACJ,OAAO,EACP,YAAY,EACZ,UAAU,EACV,UAAU,EACX,EAAE;IACD,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,KAAK,CAAA;IACjB,UAAU,EAAE,UAAU,CAAA;CACvB,GAAG,sBAAsB,CAgGzB"}