@interop/wallet-core 0.66.0 → 0.68.0

package/dist/clientAnnex/recoveryLadderAnchored.js

@@ -1,22 +1,7 @@
-/*!
- * Copyright (c) 2026 Interop Alliance. All rights reserved.
- */
-/**
- * The transient-recovery continuation -- the ladder-anchored variant of the
- * recovery subpath's `recoverWebvhClient`, split out beside the rest of the
- * annex-anchored ceremonies: a code spent on a non-remembered browser mints
- * no enrolled client, and the ladder VM the fresh credential's own bind
- * publishes is what anchors the account, so it lands client-less and
- * ladder-anchored. The enrolled-client
- * continuation and the recovery-key inventory edits stay in
- * `recovery/recoveryWebvh.ts`.
- */
-import { deriveNextKeyHash, updateDID } from '@interop/did-method-webvh';
-import { assertCarryOverCommitments, ladderVerificationMethod, MULTIKEY_VM_TYPE, publishEntryPinned, readPublishedLogOrThrow, updateKeySigner, withLogConflictRetry } from '../webvh/didWebvh.js';
-import { credentialKeyAgreementMethods, ladderVmIds, relationIds } from '../resourceLog/document.js';
+import { ladderVerificationMethod, withLogConflictRetry } from '../webvh/didWebvh.js';
 import { unlockKeyVerificationMethod, unlockKeyVmId } from '../unlock/standingWebvh.js';
-import { RecoveryKeyNotCommittedError, recoveryVmId, retiredCredentialVmIdsFromLog } from '../recovery/recoveryWebvh.js';
-import { assertNextKeyHashesRemain, attributeRetiredCredentialRungs, ladderRung, ladderVmKeyMultibase, retiredCredentialRungsBeforeKey } from './ladder.js';
+import { recoveryContinuationOnce } from '../recovery/continuation.js';
+import { ladderRung, ladderVmKeyMultibase } from './ladder.js';
 import { clientAnnexDidParts, servicesPointedAtClientAnnex } from './log.js';
 /**
  * THE TRANSIENT-RECOVERY CONTINUATION (run by the code-derived client through
@@ -88,8 +73,18 @@ import { clientAnnexDidParts, servicesPointedAtClientAnnex } from './log.js';
  * completed branch WITHOUT re-entering `onCommitted`, so it must be able to
  * treat an already-complete continuation as success on its own.
  *
+ * A fresh credential whose `keyAgreement` id already stands in the document
+ * (the same passphrase re-typed) is refused before the reveal entry with
+ * `RecoveryCredentialStandingError`: this entry retires every pre-recovery
+ * credential, and one it re-bound instead would keep its old rung
+ * commitments under a struck ladder VM.
+ *
  * @param options {object}
- * @param options.store {RecoveryLogStore}   public log read + delegated PUT
+ * @param options.store {RecoveryLogStore}   public log read + delegated PUT.
+ *   Every read both entries are built on is checked against the store's
+ *   chain-head pin (a served prefix is refused before the reveal entry lands,
+ *   not only by a verify that follows both entries), and the pin advances to
+ *   each entry as it publishes
  * @param options.recovery {object}   the spent code's update seed and public
  *   halves
  * @param options.recovery.updateSeed {Uint8Array}
@@ -113,14 +108,6 @@ import { clientAnnexDidParts, servicesPointedAtClientAnnex } from './log.js';
  *   REQUIRED: the add entry points the `#DelegatedClients` service entry at
  *   it, and a caller that named no generation would republish the stranding
  *   this ordering exists to prevent
- * @param [options.pinStore] {ResourceLogPinStore}   this caller's chain-head
- *   pins; every read both entries are built on is checked against the pinned
- *   head (a served prefix is refused before the reveal entry lands, not only
- *   by a verify that follows both entries), and the pin advances to each
- *   entry as it publishes
- * @param [options.logId] {string}   the account log's pin slot
- *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
- *   supplied
  * @returns {Promise<object>}   the account DID, the post-continuation
  *   document and log (the rotation's recipient source and anchor), the
  *   `keyAgreement` verification-method ids this entry struck for
@@ -141,285 +128,75 @@ export async function recoverWebvhLadderAnchored(options) {
             'code and the fresh credential record must be persisted before the ' +
             'add entry publishes the ladder VM.');
     }
-    return withLogConflictRetry(() => recoverWebvhLadderAnchoredOnce(options));
-}
-/**
- * One attempt of {@link recoverWebvhLadderAnchored}, re-invoked by the
- * conflict retry.
- *
- * @param options {object}   see {@link recoverWebvhLadderAnchored}
- * @returns {Promise<object>}   see {@link recoverWebvhLadderAnchored}
- */
-async function recoverWebvhLadderAnchoredOnce({ store, recovery, ladderSeed, credentialKeyAgreement, replacement, expectedDid, onCommitted, pinStore, logId }) {
-    // Each attempt's own read is what the CAS publish is built on, so the
-    // continuity check runs here -- and again on a conflict-retry re-run -- not
-    // only on the verify that follows both entries.
-    let published = await readPublishedLogOrThrow({
-        idStore: store,
-        expectedDid,
-        pinStore,
-        logId,
-        missingMessage: 'did:webvh: did.jsonl is missing; nothing to recover.'
-    });
-    const rung0 = await ladderRung({ ladderSeed, index: 0 });
-    const rung1 = await ladderRung({ ladderSeed, index: 1 });
-    const ladderVmKey = await ladderVmKeyMultibase({ ladderSeed });
-    // Derived before the completion check, because a resume recomputes the
-    // strike with the same protected sets the first run used.
-    const recoveryHash = await deriveNextKeyHash(recovery.updateKeyMultibase);
-    const rung0Hash = await deriveNextKeyHash(rung0.keyMultibase);
-    const rung1Hash = await deriveNextKeyHash(rung1.keyMultibase);
-    const replacementHash = await deriveNextKeyHash(replacement.updateKeyMultibase);
-    // Already complete (a torn earlier run finished the add entry): the fresh
-    // ladder's rung 0 is authorized, which only the add entry writes.
-    if (published.updateKeys.includes(rung0.keyMultibase)) {
-        // The add entry already struck the pre-recovery credentials, so the
-        // document names none of them any more. The report is derived from the
-        // log instead (`retiredCredentialVmIdsFromLog`), so a resume tells the
-        // caller exactly what the first run told it.
-        const retired = retiredCredentialVmIdsFromLog({
-            log: published.log,
-            did: published.did,
-            successorKeyMultibase: rung0.keyMultibase,
-            spentVmId: recoveryVmId({
-                did: published.did,
-                keyAgreementKeyMultibase: recovery.keyAgreementKeyMultibase
-            })
-        });
-        // The strike is recomputed by re-running it over the log as it stood just
-        // before the add entry, with the same protected sets, so a resume reports
-        // exactly what the first run reported rather than a second definition of
-        // the same question.
-        const strike = await retiredCredentialRungsBeforeKey({
-            log: published.log,
-            authorizedKeyMultibase: rung0.keyMultibase,
-            credentialVmIds: retired,
-            protectedHashes: [rung0Hash, rung1Hash, replacementHash],
-            protectedKeys: [rung0.keyMultibase]
-        });
-        return {
-            did: published.did,
-            doc: published.doc,
-            log: published.log,
-            retiredCredentialVmIds: retired,
-            struckRungHashes: strike.struckHashes,
-            unclaimedCredentialVmIds: strike.unclaimedCredentialVmIds
-        };
-    }
-    // The reveal-and-commit entry, skipped when a torn earlier run already
-    // published it (the revealed key authorized AND every needed hash
-    // committed).
-    const revealed = published.updateKeys.includes(recovery.updateKeyMultibase);
-    const committed = [rung0Hash, rung1Hash, replacementHash].every(hash => published.nextKeyHashes.includes(hash));
-    if (!revealed || !committed) {
-        if (!revealed && !published.nextKeyHashes.includes(recoveryHash)) {
-            throw new RecoveryKeyNotCommittedError();
-        }
-        await assertCarryOverCommitments({ published });
-        const signer = await updateKeySigner({ seed: recovery.updateSeed });
-        const updated = await updateDID({
-            log: published.log,
-            signer,
-            alsoKnownAsWeb: true,
-            updateKeys: [
-                ...new Set([...published.updateKeys, recovery.updateKeyMultibase])
-            ],
-            // The spent code's own hash is kept through this entry (so a resumed
-            // commit can re-state the revealed key); the add entry drops it.
-            nextKeyHashes: [
-                ...new Set([
-                    ...published.nextKeyHashes,
-                    recoveryHash,
-                    rung0Hash,
-                    rung1Hash,
-                    replacementHash
-                ])
-            ]
-        });
-        // The publish advances the pin to what the reveal entry just published,
-        // so the re-read below (and any read after a tear here) refuses a host
-        // that rolls the log back behind it.
-        await publishEntryPinned({
-            store,
-            log: updated.log,
-            ifMatch: published.etag,
-            pinStore,
-            logId
-        });
-        // The same account the reveal entry just extended, under the same pin.
-        published = await readPublishedLogOrThrow({
-            idStore: store,
-            expectedDid: published.did,
-            pinStore,
-            logId,
-            missingMessage: 'did:webvh: did.jsonl is missing; nothing to recover.'
-        });
-    }
-    // The persist-before-publish seam: the replacement code's record and the
-    // fresh credential's unlock record (the ladder seed inside) become durable
-    // HERE, before the add entry publishes the ladder VM that seed backs.
-    const persisted = await onCommitted();
-    // Refuses a malformed pointer target before the entry is built.
-    clientAnnexDidParts({ did: persisted.clientAnnexDid });
-    // The add-and-retire entry: the ladder VM, the fresh credential's
-    // keyAgreement inventory, and the replacement code's inventory in; the spent
-    // code's VM, update key, and hash out; every pre-recovery standing
-    // credential fully retired -- its ladder VM and its keyAgreement member
-    // both. Signed by rung 0, whose hash the commit entry just committed.
-    const { did, doc } = published;
-    const spentVmId = recoveryVmId({
-        did,
-        keyAgreementKeyMultibase: recovery.keyAgreementKeyMultibase
-    });
-    const replacementVmId = recoveryVmId({
-        did,
-        keyAgreementKeyMultibase: replacement.keyAgreementKeyMultibase
-    });
-    const ladderVms = ladderVmIds({ doc });
-    const ladderVm = ladderVerificationMethod({
-        controller: did,
-        publicKeyMultibase: ladderVmKey
-    });
-    const ladderVmId = `${did}#${ladderVmKey}`;
-    const credentialVm = unlockKeyVerificationMethod({
-        did,
-        keyAgreement: credentialKeyAgreement
-    });
-    const credentialVmId = unlockKeyVmId({
-        did,
-        keyAgreement: credentialKeyAgreement
-    });
-    // Every pre-recovery credential's keyAgreement member, by the account-DID
-    // controller (an enrolled client's carries the client marker instead), less
-    // the ids this entry itself adds. The spent code's own id is reported
-    // separately: the caller already retires that one by name.
-    // The replacement code's ladder VM, published beside its key-agreement
-    // member: a code is a standing credential with a ladder, and its own bridge
-    // delegation is signed by this VM, so a replacement without it could never
-    // spend (`decisions/0019`, `decisions/0020`). Its rung-0 hash is already
-    // committed by the reveal-and-commit entry, which this entry carries
-    // through.
-    const replacementLadderVmId = `${did}#${replacement.ladderVmKeyMultibase}`;
-    const addedVmIds = [
-        ladderVmId,
-        credentialVmId,
-        replacementVmId,
-        replacementLadderVmId
-    ];
-    const struckCredentialVmIds = credentialKeyAgreementMethods({ doc, did })
-        .map(method => method.id)
-        .filter((id) => typeof id === 'string')
-        .filter(id => !addedVmIds.includes(id));
-    const retiredCredentialVmIds = struckCredentialVmIds.filter(id => id !== spentVmId);
-    // Each retired credential's committed rungs and any revealed rung of its
-    // own go in the SAME entry. Striking the VM alone rots a ladder-signed
-    // bridge, but a bridge an enrolled client minted outlives the strike, and
-    // that client survives this entry -- so a committed rung left standing is a
-    // reveal the retired credential could still perform. The anchoring is
-    // log-only (this browser holds no registry), and an unanchorable credential
-    // is reported rather than struck.
-    const strike = await attributeRetiredCredentialRungs({
-        log: published.log,
-        credentialVmIds: retiredCredentialVmIds,
-        protectedHashes: [rung0Hash, rung1Hash, replacementHash],
-        protectedKeys: [rung0.keyMultibase]
-    });
-    const addedMethods = [
-        ladderVm,
-        credentialVm,
-        {
-            id: replacementVmId,
-            type: MULTIKEY_VM_TYPE,
-            controller: did,
-            publicKeyMultibase: replacement.keyAgreementKeyMultibase
+    const { ladderSeed, credentialKeyAgreement, onCommitted, expectedDid, ...shared } = options;
+    // The fresh ladder: rung 0 is the successor key the add entry authorizes
+    // and signs with, rung 1 its staged partner (the ladder-anchored genesis
+    // configuration), and the VM the stable sibling the entry installs.
+    const [rung0, rung1, ladderVmKey] = await Promise.all([
+        ladderRung({ ladderSeed, index: 0 }),
+        ladderRung({ ladderSeed, index: 1 }),
+        ladderVmKeyMultibase({ ladderSeed })
+    ]);
+    const outcome = await withLogConflictRetry(() => recoveryContinuationOnce({
+        ...shared,
+        successor: {
+            updateKeyMultibase: rung0.keyMultibase,
+            updateSeed: rung0.seed,
+            stagedKeyMultibase: rung1.keyMultibase
         },
-        ladderVerificationMethod({
-            controller: did,
-            publicKeyMultibase: replacement.ladderVmKeyMultibase
-        })
-    ];
-    const existingMethods = (doc.verificationMethod ?? []);
-    const verificationMethods = [
-        ...existingMethods.filter(method => method.id !== spentVmId &&
-            !addedMethods.some(added => added.id === method.id) &&
-            (method.id === undefined ||
-                (!ladderVms.includes(method.id) &&
-                    !struckCredentialVmIds.includes(method.id)))),
-        ...addedMethods
-    ];
-    // The retirement filter runs over the EXISTING relation ids only, and the
-    // added ids join afterwards: a resumed run's fresh ladder VM already stands
-    // in `doc.capabilityDelegation`, so filtering the union would strike the
-    // very method this entry is publishing.
-    const withoutRemoved = (relation, added) => [
-        ...new Set([
-            ...relationIds(relation).filter(referencedId => referencedId !== spentVmId &&
-                !ladderVms.includes(referencedId) &&
-                !struckCredentialVmIds.includes(referencedId)),
-            ...(added ?? [])
-        ])
-    ];
-    const signer = await updateKeySigner({ seed: rung0.seed });
-    const updated = await updateDID({
-        log: published.log,
-        signer,
-        alsoKnownAsWeb: true,
-        updateKeys: [
-            ...new Set([
-                ...published.updateKeys.filter(key => key !== recovery.updateKeyMultibase &&
-                    !strike.struckKeys.includes(key)),
-                rung0.keyMultibase
-            ])
+        // The persist-before-publish seam: the replacement code's record and
+        // the fresh credential's unlock record (the ladder seed inside) become
+        // durable HERE, before the add entry publishes the ladder VM that seed
+        // backs.
+        onCommitted,
+        // A passphrase the account already stands on is refused before the
+        // reveal entry: this continuation retires that credential, and
+        // re-binding it would leave its old rungs standing under a new VM.
+        credentialVmIds: did => [
+            unlockKeyVmId({ did, keyAgreement: credentialKeyAgreement })
         ],
-        nextKeyHashes: assertNextKeyHashesRemain({
-            nextKeyHashes: published.nextKeyHashes.filter(hash => hash !== recoveryHash && !strike.struckHashes.includes(hash)),
-            ceremony: 'the transient-recovery add-and-retire entry'
-        }),
-        verificationMethods,
-        // The ladder VM's relation asymmetry: `assertionMethod` and
+        // The ladder VM (under the relation asymmetry: `assertionMethod` and
         // `capabilityDelegation` only -- no `authentication`, no
         // `capabilityInvocation` -- which is also what keeps it out of every
-        // client listing.
-        authentication: withoutRemoved(doc.authentication),
-        assertionMethod: withoutRemoved(doc.assertionMethod, [
-            ladderVmId,
-            replacementLadderVmId
-        ]),
-        keyAgreement: withoutRemoved(doc.keyAgreement, [
-            credentialVmId,
-            replacementVmId
-        ]),
-        capabilityInvocation: withoutRemoved(doc.capabilityInvocation),
-        capabilityDelegation: withoutRemoved(doc.capabilityDelegation, [
-            ladderVmId,
-            replacementLadderVmId
-        ]),
-        // Atomic with the retirement above: the pointer and the ladder-VM set
-        // change in one entry, so no window exists in which the document points
-        // at a generation the surviving record cannot reach.
-        services: servicesPointedAtClientAnnex({
-            doc,
-            accountDid: did,
-            clientAnnexDid: persisted.clientAnnexDid
-        })
-    });
-    // Conditional on the read this entry was built on: the re-read above when
-    // the commit entry ran here, the first read when it was skipped.
-    await publishEntryPinned({
-        store,
-        log: updated.log,
-        ifMatch: published.etag,
-        pinStore,
-        logId
-    });
-    return {
-        did: updated.did,
-        doc: updated.doc,
-        log: updated.log,
-        retiredCredentialVmIds,
-        struckRungHashes: strike.struckHashes,
-        unclaimedCredentialVmIds: strike.unclaimedCredentialVmIds,
-        webDoc: updated.webDoc
-    };
+        // client listing) and the fresh credential's keyAgreement inventory in;
+        // the core appends the replacement code's after them. Atomic with the
+        // retirement: the `#DelegatedClients` pointer and the ladder-VM set
+        // change in one entry, so no window exists in which the document
+        // points at a generation the surviving record cannot reach.
+        added: ({ did, doc, persisted }) => {
+            // Refuses a malformed pointer target before the entry is built.
+            clientAnnexDidParts({ did: persisted.clientAnnexDid });
+            const ladderVmId = `${did}#${ladderVmKey}`;
+            const credentialVmId = unlockKeyVmId({
+                did,
+                keyAgreement: credentialKeyAgreement
+            });
+            return {
+                methods: [
+                    ladderVerificationMethod({
+                        controller: did,
+                        publicKeyMultibase: ladderVmKey
+                    }),
+                    unlockKeyVerificationMethod({
+                        did,
+                        keyAgreement: credentialKeyAgreement
+                    })
+                ],
+                assertionMethod: [ladderVmId],
+                keyAgreement: [credentialVmId],
+                capabilityDelegation: [ladderVmId],
+                services: servicesPointedAtClientAnnex({
+                    doc,
+                    accountDid: did,
+                    clientAnnexDid: persisted.clientAnnexDid
+                })
+            };
+        },
+        ...(expectedDid !== undefined ? { expectedDid } : {})
+    }));
+    // `committed` is the remembered variant's signal; this one has no
+    // cross-process resume for it to serve.
+    const { committed: _committed, ...rest } = outcome;
+    return rest;
 }
 //# sourceMappingURL=recoveryLadderAnchored.js.map

package/dist/clientAnnex/recoveryLadderAnchored.js.map

@@ -1 +1 @@
-{"version":3,"file":"recoveryLadderAnchored.js","sourceRoot":"","sources":["../../src/clientAnnex/recoveryLadderAnchored.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;GASG;AACH,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAMxE,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,EACrB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EACL,6BAA6B,EAC7B,WAAW,EACX,WAAW,EACZ,MAAM,4BAA4B,CAAA;AACnC,OAAO,EACL,2BAA2B,EAC3B,aAAa,EAEd,MAAM,4BAA4B,CAAA;AACnC,OAAO,EACL,4BAA4B,EAC5B,YAAY,EACZ,6BAA6B,EAI9B,MAAM,8BAA8B,CAAA;AACrC,OAAO,EACL,yBAAyB,EACzB,+BAA+B,EAC/B,UAAU,EACV,oBAAoB,EACpB,+BAA+B,EAChC,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,MAAM,UAAU,CAAA;AAE5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgHG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAUhD;IASC,uEAAuE;IACvE,wEAAwE;IACxE,oEAAoE;IACpE,6DAA6D;IAC7D,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC9C,MAAM,IAAI,SAAS,CACjB,mEAAmE;YACjE,oEAAoE;YACpE,oCAAoC,CACvC,CAAA;IACH,CAAC;IACD,OAAO,oBAAoB,CAAC,GAAG,EAAE,CAAC,8BAA8B,CAAC,OAAO,CAAC,CAAC,CAAA;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,8BAA8B,CAAC,EAC5C,KAAK,EACL,QAAQ,EACR,UAAU,EACV,sBAAsB,EACtB,WAAW,EACX,WAAW,EACX,WAAW,EACX,QAAQ,EACR,KAAK,EAWN;IASC,sEAAsE;IACtE,4EAA4E;IAC5E,gDAAgD;IAChD,IAAI,SAAS,GAAG,MAAM,uBAAuB,CAAC;QAC5C,OAAO,EAAE,KAAK;QACd,WAAW;QACX,QAAQ;QACR,KAAK;QACL,cAAc,EAAE,sDAAsD;KACvE,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;IACxD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;IACxD,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;IAC9D,uEAAuE;IACvE,0DAA0D;IAC1D,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IACzE,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IAC7D,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IAC7D,MAAM,eAAe,GAAG,MAAM,iBAAiB,CAC7C,WAAW,CAAC,kBAAkB,CAC/B,CAAA;IAED,0EAA0E;IAC1E,kEAAkE;IAClE,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACtD,oEAAoE;QACpE,uEAAuE;QACvE,uEAAuE;QACvE,6CAA6C;QAC7C,MAAM,OAAO,GAAG,6BAA6B,CAAC;YAC5C,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,qBAAqB,EAAE,KAAK,CAAC,YAAY;YACzC,SAAS,EAAE,YAAY,CAAC;gBACtB,GAAG,EAAE,SAAS,CAAC,GAAG;gBAClB,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;aAC5D,CAAC;SACH,CAAC,CAAA;QACF,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,qBAAqB;QACrB,MAAM,MAAM,GAAG,MAAM,+BAA+B,CAAC;YACnD,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,sBAAsB,EAAE,KAAK,CAAC,YAAY;YAC1C,eAAe,EAAE,OAAO;YACxB,eAAe,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC;YACxD,aAAa,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;SACpC,CAAC,CAAA;QACF,OAAO;YACL,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,sBAAsB,EAAE,OAAO;YAC/B,gBAAgB,EAAE,MAAM,CAAC,YAAY;YACrC,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;SAC1D,CAAA;IACH,CAAC;IAED,uEAAuE;IACvE,kEAAkE;IAClE,cAAc;IACd,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IAC3E,MAAM,SAAS,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CACrE,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CACvC,CAAA;IACD,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,4BAA4B,EAAE,CAAA;QAC1C,CAAC;QACD,MAAM,0BAA0B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;QACnE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;YAC9B,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,MAAM;YACN,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE;gBACV,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;aACnE;YACD,qEAAqE;YACrE,iEAAiE;YACjE,aAAa,EAAE;gBACb,GAAG,IAAI,GAAG,CAAC;oBACT,GAAG,SAAS,CAAC,aAAa;oBAC1B,YAAY;oBACZ,SAAS;oBACT,SAAS;oBACT,eAAe;iBAChB,CAAC;aACH;SACF,CAAC,CAAA;QACF,wEAAwE;QACxE,uEAAuE;QACvE,qCAAqC;QACrC,MAAM,kBAAkB,CAAC;YACvB,KAAK;YACL,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,OAAO,EAAE,SAAS,CAAC,IAAI;YACvB,QAAQ;YACR,KAAK;SACN,CAAC,CAAA;QACF,uEAAuE;QACvE,SAAS,GAAG,MAAM,uBAAuB,CAAC;YACxC,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,SAAS,CAAC,GAAG;YAC1B,QAAQ;YACR,KAAK;YACL,cAAc,EAAE,sDAAsD;SACvE,CAAC,CAAA;IACJ,CAAC;IAED,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,SAAS,GAAG,MAAM,WAAW,EAAE,CAAA;IACrC,gEAAgE;IAChE,mBAAmB,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,cAAc,EAAE,CAAC,CAAA;IAEtD,kEAAkE;IAClE,6EAA6E;IAC7E,mEAAmE;IACnE,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,CAAA;IAC9B,MAAM,SAAS,GAAG,YAAY,CAAC;QAC7B,GAAG;QACH,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;KAC5D,CAAC,CAAA;IACF,MAAM,eAAe,GAAG,YAAY,CAAC;QACnC,GAAG;QACH,wBAAwB,EAAE,WAAW,CAAC,wBAAwB;KAC/D,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IACtC,MAAM,QAAQ,GAAG,wBAAwB,CAAC;QACxC,UAAU,EAAE,GAAG;QACf,kBAAkB,EAAE,WAAW;KAChC,CAAC,CAAA;IACF,MAAM,UAAU,GAAG,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;IAC1C,MAAM,YAAY,GAAG,2BAA2B,CAAC;QAC/C,GAAG;QACH,YAAY,EAAE,sBAAsB;KACrC,CAAC,CAAA;IACF,MAAM,cAAc,GAAG,aAAa,CAAC;QACnC,GAAG;QACH,YAAY,EAAE,sBAAsB;KACrC,CAAC,CAAA;IACF,0EAA0E;IAC1E,4EAA4E;IAC5E,sEAAsE;IACtE,2DAA2D;IAC3D,uEAAuE;IACvE,4EAA4E;IAC5E,2EAA2E;IAC3E,yEAAyE;IACzE,qEAAqE;IACrE,WAAW;IACX,MAAM,qBAAqB,GAAG,GAAG,GAAG,IAAI,WAAW,CAAC,oBAAoB,EAAE,CAAA;IAC1E,MAAM,UAAU,GAAG;QACjB,UAAU;QACV,cAAc;QACd,eAAe;QACf,qBAAqB;KACtB,CAAA;IACD,MAAM,qBAAqB,GAAG,6BAA6B,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SACtE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;SACxB,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC;SACpD,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IACzC,MAAM,sBAAsB,GAAG,qBAAqB,CAAC,MAAM,CACzD,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,SAAS,CACvB,CAAA;IACD,yEAAyE;IACzE,uEAAuE;IACvE,0EAA0E;IAC1E,4EAA4E;IAC5E,sEAAsE;IACtE,4EAA4E;IAC5E,kCAAkC;IAClC,MAAM,MAAM,GAAG,MAAM,+BAA+B,CAAC;QACnD,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,eAAe,EAAE,sBAAsB;QACvC,eAAe,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC;QACxD,aAAa,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;KACpC,CAAC,CAAA;IACF,MAAM,YAAY,GAAyB;QACzC,QAAQ;QACR,YAAY;QACZ;YACE,EAAE,EAAE,eAAe;YACnB,IAAI,EAAE,gBAAgB;YACtB,UAAU,EAAE,GAAG;YACf,kBAAkB,EAAE,WAAW,CAAC,wBAAwB;SACzD;QACD,wBAAwB,CAAC;YACvB,UAAU,EAAE,GAAG;YACf,kBAAkB,EAAE,WAAW,CAAC,oBAAoB;SACrD,CAAC;KACH,CAAA;IACD,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAyB,CAAA;IAC9E,MAAM,mBAAmB,GAAG;QAC1B,GAAG,eAAe,CAAC,MAAM,CACvB,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,EAAE,KAAK,SAAS;YACvB,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC;YACnD,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS;gBACtB,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC7B,CAAC,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CACnD;QACD,GAAG,YAAY;KAChB,CAAA;IACD,0EAA0E;IAC1E,4EAA4E;IAC5E,yEAAyE;IACzE,wCAAwC;IACxC,MAAM,cAAc,GAAG,CACrB,QAAqD,EACrD,KAAgB,EAChB,EAAE,CAAC;QACH,GAAG,IAAI,GAAG,CAAC;YACT,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAC7B,YAAY,CAAC,EAAE,CACb,YAAY,KAAK,SAAS;gBAC1B,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACjC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAChD;YACD,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;SACjB,CAAC;KACH,CAAA;IAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;IAC1D,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;QAC9B,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,MAAM;QACN,cAAc,EAAE,IAAI;QACpB,UAAU,EAAE;YACV,GAAG,IAAI,GAAG,CAAC;gBACT,GAAG,SAAS,CAAC,UAAU,CAAC,MAAM,CAC5B,GAAG,CAAC,EAAE,CACJ,GAAG,KAAK,QAAQ,CAAC,kBAAkB;oBACnC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CACnC;gBACD,KAAK,CAAC,YAAY;aACnB,CAAC;SACH;QACD,aAAa,EAAE,yBAAyB,CAAC;YACvC,aAAa,EAAE,SAAS,CAAC,aAAa,CAAC,MAAM,CAC3C,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CACrE;YACD,QAAQ,EAAE,6CAA6C;SACxD,CAAC;QACF,mBAAmB;QACnB,4DAA4D;QAC5D,yDAAyD;QACzD,qEAAqE;QACrE,kBAAkB;QAClB,cAAc,EAAE,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC;QAClD,eAAe,EAAE,cAAc,CAAC,GAAG,CAAC,eAAe,EAAE;YACnD,UAAU;YACV,qBAAqB;SACtB,CAAC;QACF,YAAY,EAAE,cAAc,CAAC,GAAG,CAAC,YAAY,EAAE;YAC7C,cAAc;YACd,eAAe;SAChB,CAAC;QACF,oBAAoB,EAAE,cAAc,CAAC,GAAG,CAAC,oBAAoB,CAAC;QAC9D,oBAAoB,EAAE,cAAc,CAAC,GAAG,CAAC,oBAAoB,EAAE;YAC7D,UAAU;YACV,qBAAqB;SACtB,CAAC;QACF,sEAAsE;QACtE,wEAAwE;QACxE,qDAAqD;QACrD,QAAQ,EAAE,4BAA4B,CAAC;YACrC,GAAG;YACH,UAAU,EAAE,GAAG;YACf,cAAc,EAAE,SAAS,CAAC,cAAc;SACzC,CAAC;KACH,CAAC,CAAA;IACF,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,kBAAkB,CAAC;QACvB,KAAK;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,SAAS,CAAC,IAAI;QACvB,QAAQ;QACR,KAAK;KACN,CAAC,CAAA;IACF,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,sBAAsB;QACtB,gBAAgB,EAAE,MAAM,CAAC,YAAY;QACrC,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;QACzD,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAA;AACH,CAAC"}
+{"version":3,"file":"recoveryLadderAnchored.js","sourceRoot":"","sources":["../../src/clientAnnex/recoveryLadderAnchored.ts"],"names":[],"mappings":"AAcA,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACrB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,2BAA2B,EAC3B,aAAa,EAEd,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAA;AAMtE,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAC9D,OAAO,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,MAAM,UAAU,CAAA;AAE5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkHG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAQhD;IASC,uEAAuE;IACvE,wEAAwE;IACxE,oEAAoE;IACpE,6DAA6D;IAC7D,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC9C,MAAM,IAAI,SAAS,CACjB,mEAAmE;YACjE,oEAAoE;YACpE,oCAAoC,CACvC,CAAA;IACH,CAAC;IACD,MAAM,EACJ,UAAU,EACV,sBAAsB,EACtB,WAAW,EACX,WAAW,EACX,GAAG,MAAM,EACV,GAAG,OAAO,CAAA;IACX,yEAAyE;IACzE,yEAAyE;IACzE,oEAAoE;IACpE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpD,UAAU,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACpC,UAAU,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACpC,oBAAoB,CAAC,EAAE,UAAU,EAAE,CAAC;KACrC,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,CAC9C,wBAAwB,CAAC;QACvB,GAAG,MAAM;QACT,SAAS,EAAE;YACT,kBAAkB,EAAE,KAAK,CAAC,YAAY;YACtC,UAAU,EAAE,KAAK,CAAC,IAAI;YACtB,kBAAkB,EAAE,KAAK,CAAC,YAAY;SACvC;QACD,qEAAqE;QACrE,uEAAuE;QACvE,uEAAuE;QACvE,SAAS;QACT,WAAW;QACX,mEAAmE;QACnE,+DAA+D;QAC/D,mEAAmE;QACnE,eAAe,EAAE,GAAG,CAAC,EAAE,CAAC;YACtB,aAAa,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,sBAAsB,EAAE,CAAC;SAC7D;QACD,qEAAqE;QACrE,yDAAyD;QACzD,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,iEAAiE;QACjE,4DAA4D;QAC5D,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE;YACjC,gEAAgE;YAChE,mBAAmB,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,cAAc,EAAE,CAAC,CAAA;YACtD,MAAM,UAAU,GAAG,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;YAC1C,MAAM,cAAc,GAAG,aAAa,CAAC;gBACnC,GAAG;gBACH,YAAY,EAAE,sBAAsB;aACrC,CAAC,CAAA;YACF,OAAO;gBACL,OAAO,EAAE;oBACP,wBAAwB,CAAC;wBACvB,UAAU,EAAE,GAAG;wBACf,kBAAkB,EAAE,WAAW;qBAChC,CAAC;oBACF,2BAA2B,CAAC;wBAC1B,GAAG;wBACH,YAAY,EAAE,sBAAsB;qBACrC,CAAC;iBACH;gBACD,eAAe,EAAE,CAAC,UAAU,CAAC;gBAC7B,YAAY,EAAE,CAAC,cAAc,CAAC;gBAC9B,oBAAoB,EAAE,CAAC,UAAU,CAAC;gBAClC,QAAQ,EAAE,4BAA4B,CAAC;oBACrC,GAAG;oBACH,UAAU,EAAE,GAAG;oBACf,cAAc,EAAE,SAAS,CAAC,cAAc;iBACzC,CAAC;aACH,CAAA;QACH,CAAC;QACD,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC,CACH,CAAA;IACD,kEAAkE;IAClE,wCAAwC;IACxC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAA;IAClD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/clientAnnex/rosterDeliveredEpochs.d.ts

@@ -6,8 +6,12 @@
  * roster delivers after the ensure, not the minted candidate**. The ensure
  * adopts a roster another run landed first, and epoch[0] is create-if-absent,
  * so installing under this run's candidate would key a collection to a key
- * nobody holds. One function, two callers: the credential-anchored
- * establishment's adopted-roster arm, and the mend entry point's roster arm.
+ * nobody holds. The key-versus-roster test itself is `ensureWalletSpaceEpochs`'s
+ * mint gate, which this stage hands the settled descriptor; what this stage
+ * owns is the ensure-then-re-read order around it and the mint guard. One
+ * function, two callers: the credential-anchored establishment's
+ * adopted-roster arm, and the mend entry point's roster arm, each supplying
+ * the mint preconditions through the required `beforeMint` seam.
  *
  * The stage order: ensure the roster (create-if-absent with the supplied
  * candidate; the entry proof rides the caller's store signer -- the ladder VM
@@ -93,12 +97,16 @@ export type RosterDeliveredEpochsResult = {
  *   delegation); absent, requests invoke the root capability
  * @param [options.collectionIds] {string[]}   the fan-out's collection set
  *   override, threaded through to `ensureWalletSpaceEpochs`
- * @param [options.beforeMint] {Function}   `() => Promise<void>` -- the mint
+ * @param options.beforeMint {Function}   `() => Promise<void>` -- the mint
  *   guard, awaited exactly when THIS run's own decide-read observed the
  *   roster absent and is about to install the candidate as epoch[0]. A
  *   throw refuses the mint and propagates unchanged (never folded into the
  *   create-race adoption), so a caller's mint preconditions run against the
- *   same observation the mint acts on
+ *   same observation the mint acts on. Required: a served absent roster is
+ *   the one observation that can turn this stage into a single-recipient
+ *   roster genesis evicting every other standing credential, so no caller
+ *   gets the mint without stating what licenses it. A call without the seam
+ *   is refused with a `TypeError` before any read
  * @returns {Promise<RosterDeliveredEpochsResult>}
  */
 export declare function ensureRosterDeliveredEpochs({ store, candidateUserKey, clientKeyAgreementKey, was, spaceId, capability, collectionIds, beforeMint }: {
@@ -109,6 +117,6 @@ export declare function ensureRosterDeliveredEpochs({ store, candidateUserKey, c
     spaceId: string;
     capability?: IZcap;
     collectionIds?: string[];
-    beforeMint?: () => Promise<void>;
+    beforeMint: () => Promise<void>;
 }): Promise<RosterDeliveredEpochsResult>;
 //# sourceMappingURL=rosterDeliveredEpochs.d.ts.map

package/dist/clientAnnex/rosterDeliveredEpochs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rosterDeliveredEpochs.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/rosterDeliveredEpochs.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AACpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC1E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,EAIL,KAAK,OAAO,EACZ,KAAK,uBAAuB,EAC7B,MAAM,kBAAkB,CAAA;AAczB;;;;;;;GAOG;AACH,MAAM,MAAM,2BAA2B,GACnC;IACE,OAAO,EAAE,WAAW,GAAG,qBAAqB,CAAA;IAC5C;;OAEG;IACH,OAAO,EAAE,OAAO,CAAA;IAChB,gBAAgB,EAAE,oBAAoB,CAAA;IACtC;;OAEG;IACH,MAAM,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,uBAAuB,CAAA;CAChC,GACD;IACE,OAAO,EAAE,SAAS,CAAA;IAClB,gBAAgB,EAAE,oBAAoB,CAAA;IACtC;;OAEG;IACH,KAAK,EAAE,OAAO,CAAA;CACf,CAAA;AAEL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,2BAA2B,CAAC,EAChD,KAAK,EACL,gBAAgB,EAChB,qBAAqB,EACrB,GAAG,EACH,OAAO,EACP,UAAU,EACV,aAAa,EACb,UAAU,EACX,EAAE;IACD,KAAK,EAAE,yBAAyB,CAAA;IAChC,gBAAgB,EAAE,OAAO,CAAA;IACzB,qBAAqB,EAAE,gBAAgB,CAAA;IACvC,GAAG,EAAE,SAAS,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CACjC,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAuEvC"}
+{"version":3,"file":"rosterDeliveredEpochs.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/rosterDeliveredEpochs.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AACpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC1E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,EAIL,KAAK,OAAO,EACZ,KAAK,uBAAuB,EAC7B,MAAM,kBAAkB,CAAA;AAczB;;;;;;;GAOG;AACH,MAAM,MAAM,2BAA2B,GACnC;IACE,OAAO,EAAE,WAAW,GAAG,qBAAqB,CAAA;IAC5C;;OAEG;IACH,OAAO,EAAE,OAAO,CAAA;IAChB,gBAAgB,EAAE,oBAAoB,CAAA;IACtC;;OAEG;IACH,MAAM,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,uBAAuB,CAAA;CAChC,GACD;IACE,OAAO,EAAE,SAAS,CAAA;IAClB,gBAAgB,EAAE,oBAAoB,CAAA;IACtC;;OAEG;IACH,KAAK,EAAE,OAAO,CAAA;CACf,CAAA;AAEL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAsB,2BAA2B,CAAC,EAChD,KAAK,EACL,gBAAgB,EAChB,qBAAqB,EACrB,GAAG,EACH,OAAO,EACP,UAAU,EACV,aAAa,EACb,UAAU,EACX,EAAE;IACD,KAAK,EAAE,yBAAyB,CAAA;IAChC,gBAAgB,EAAE,OAAO,CAAA;IACzB,qBAAqB,EAAE,gBAAgB,CAAA;IACvC,GAAG,EAAE,SAAS,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,UAAU,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAChC,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAoFvC"}

package/dist/clientAnnex/rosterDeliveredEpochs.js

@@ -34,15 +34,23 @@ const CREATE_RACE_ERROR_NAMES = new Set([
  *   delegation); absent, requests invoke the root capability
  * @param [options.collectionIds] {string[]}   the fan-out's collection set
  *   override, threaded through to `ensureWalletSpaceEpochs`
- * @param [options.beforeMint] {Function}   `() => Promise<void>` -- the mint
+ * @param options.beforeMint {Function}   `() => Promise<void>` -- the mint
  *   guard, awaited exactly when THIS run's own decide-read observed the
  *   roster absent and is about to install the candidate as epoch[0]. A
  *   throw refuses the mint and propagates unchanged (never folded into the
  *   create-race adoption), so a caller's mint preconditions run against the
- *   same observation the mint acts on
+ *   same observation the mint acts on. Required: a served absent roster is
+ *   the one observation that can turn this stage into a single-recipient
+ *   roster genesis evicting every other standing credential, so no caller
+ *   gets the mint without stating what licenses it. A call without the seam
+ *   is refused with a `TypeError` before any read
  * @returns {Promise<RosterDeliveredEpochsResult>}
  */
 export async function ensureRosterDeliveredEpochs({ store, candidateUserKey, clientKeyAgreementKey, was, spaceId, capability, collectionIds, beforeMint }) {
+    if (typeof beforeMint !== 'function') {
+        throw new TypeError('ensureRosterDeliveredEpochs requires a beforeMint seam: the mint ' +
+            'preconditions that license installing the candidate as epoch[0].');
+    }
     // The ensure: create-if-absent with the candidate, the mint guard fired
     // on this run's own absent observation. A read failure is a transport
     // error and rethrows unchanged; only the guarded create's lost race is
@@ -55,9 +63,7 @@ export async function ensureRosterDeliveredEpochs({ store, candidateUserKey, cli
             descriptor = current.descriptor;
         }
         else {
-            if (beforeMint !== undefined) {
-                await beforeMint();
-            }
+            await beforeMint();
             descriptor = await ensureUserKeyRoster({
                 store,
                 userKey: candidateUserKey,
@@ -66,7 +72,7 @@ export async function ensureRosterDeliveredEpochs({ store, candidateUserKey, cli
         }
     }
     catch (err) {
-        if (!CREATE_RACE_ERROR_NAMES.has(err.name ?? '')) {
+        if (!CREATE_RACE_ERROR_NAMES.has(err?.name ?? '')) {
             throw err;
         }
         const reread = await store.read();
@@ -91,19 +97,22 @@ export async function ensureRosterDeliveredEpochs({ store, candidateUserKey, cli
         userKey = read.userKey;
     }
     catch (err) {
-        if (err.name === 'UserKeyRosterUnwrapError') {
+        if (err?.name === 'UserKeyRosterUnwrapError') {
             return { outcome: 'no-wrap', rosterDescriptor: descriptor, error: err };
         }
         throw err;
     }
     // The fan-out, under the DELIVERED key -- create-if-absent per collection,
     // so this call is also the completion test's re-entry on an epoch-less
-    // encrypted collection behind a present roster. Per-collection failures
-    // ride the result's `failed` list to the caller.
+    // encrypted collection behind a present roster. The settled descriptor
+    // rides along so the fan-out's own mint gate stands between the key and
+    // the install. Per-collection failures ride the result's `failed` list to
+    // the caller.
     const epochs = await ensureWalletSpaceEpochs({
         was,
         spaceId,
         userKey,
+        rosterDescriptor: descriptor,
         ...(capability !== undefined ? { capability } : {}),
         ...(collectionIds !== undefined ? { collectionIds } : {})
     });

package/dist/clientAnnex/rosterDeliveredEpochs.js.map

@@ -1 +1 @@
-{"version":3,"file":"rosterDeliveredEpochs.js","sourceRoot":"","sources":["../../src/clientAnnex/rosterDeliveredEpochs.ts"],"names":[],"mappings":"AA0CA,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,iBAAiB,EAGlB,MAAM,kBAAkB,CAAA;AAEzB;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,yBAAyB;IACzB,uBAAuB;CACxB,CAAC,CAAA;AAiCF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,EAChD,KAAK,EACL,gBAAgB,EAChB,qBAAqB,EACrB,GAAG,EACH,OAAO,EACP,UAAU,EACV,aAAa,EACb,UAAU,EAUX;IACC,wEAAwE;IACxE,sEAAsE;IACtE,uEAAuE;IACvE,gCAAgC;IAChC,IAAI,UAAgC,CAAA;IACpC,IAAI,kBAAkB,GAAG,KAAK,CAAA;IAC9B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;QAClC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;QACjC,CAAC;aAAM,CAAC;YACN,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,UAAU,EAAE,CAAA;YACpB,CAAC;YACD,UAAU,GAAG,MAAM,mBAAmB,CAAC;gBACrC,KAAK;gBACL,OAAO,EAAE,gBAAgB;gBACzB,qBAAqB;aACtB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAE,GAAyB,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YACxE,MAAM,GAAG,CAAA;QACX,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;QACjC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,GAAG,CAAA;QACX,CAAC;QACD,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;QAC9B,kBAAkB,GAAG,IAAI,CAAA;IAC3B,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,KAAK,gBAAgB,CAAC,EAAE,CAAA;IAE9D,+DAA+D;IAC/D,sEAAsE;IACtE,kCAAkC;IAClC,IAAI,OAAgB,CAAA;IACpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC;YACnC,KAAK;YACL,UAAU;YACV,OAAO,EAAE,gBAAgB;YACzB,qBAAqB;SACtB,CAAC,CAAA;QACF,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAAyB,CAAC,IAAI,KAAK,0BAA0B,EAAE,CAAC;YACnE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CAAA;QACzE,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;IAED,2EAA2E;IAC3E,uEAAuE;IACvE,wEAAwE;IACxE,iDAAiD;IACjD,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC;QAC3C,GAAG;QACH,OAAO;QACP,OAAO;QACP,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC,CAAA;IACF,OAAO;QACL,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW;QACjE,OAAO;QACP,gBAAgB,EAAE,UAAU;QAC5B,MAAM;QACN,MAAM;KACP,CAAA;AACH,CAAC"}
+{"version":3,"file":"rosterDeliveredEpochs.js","sourceRoot":"","sources":["../../src/clientAnnex/rosterDeliveredEpochs.ts"],"names":[],"mappings":"AA8CA,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,iBAAiB,EAGlB,MAAM,kBAAkB,CAAA;AAEzB;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,yBAAyB;IACzB,uBAAuB;CACxB,CAAC,CAAA;AAiCF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,EAChD,KAAK,EACL,gBAAgB,EAChB,qBAAqB,EACrB,GAAG,EACH,OAAO,EACP,UAAU,EACV,aAAa,EACb,UAAU,EAUX;IACC,IAAI,OAAO,UAAU,KAAK,UAAU,EAAE,CAAC;QACrC,MAAM,IAAI,SAAS,CACjB,mEAAmE;YACjE,kEAAkE,CACrE,CAAA;IACH,CAAC;IACD,wEAAwE;IACxE,sEAAsE;IACtE,uEAAuE;IACvE,gCAAgC;IAChC,IAAI,UAAgC,CAAA;IACpC,IAAI,kBAAkB,GAAG,KAAK,CAAA;IAC9B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;QAClC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;QACjC,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,EAAE,CAAA;YAClB,UAAU,GAAG,MAAM,mBAAmB,CAAC;gBACrC,KAAK;gBACL,OAAO,EAAE,gBAAgB;gBACzB,qBAAqB;aACtB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IACE,CAAC,uBAAuB,CAAC,GAAG,CACzB,GAAgC,EAAE,IAAI,IAAI,EAAE,CAC9C,EACD,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;QACjC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,GAAG,CAAA;QACX,CAAC;QACD,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;QAC9B,kBAAkB,GAAG,IAAI,CAAA;IAC3B,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,KAAK,gBAAgB,CAAC,EAAE,CAAA;IAE9D,+DAA+D;IAC/D,sEAAsE;IACtE,kCAAkC;IAClC,IAAI,OAAgB,CAAA;IACpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC;YACnC,KAAK;YACL,UAAU;YACV,OAAO,EAAE,gBAAgB;YACzB,qBAAqB;SACtB,CAAC,CAAA;QACF,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IACG,GAAgC,EAAE,IAAI,KAAK,0BAA0B,EACtE,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CAAA;QACzE,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;IAED,2EAA2E;IAC3E,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,0EAA0E;IAC1E,cAAc;IACd,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC;QAC3C,GAAG;QACH,OAAO;QACP,OAAO;QACP,gBAAgB,EAAE,UAAU;QAC5B,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC,CAAA;IACF,OAAO;QACL,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW;QACjE,OAAO;QACP,gBAAgB,EAAE,UAAU;QAC5B,MAAM;QACN,MAAM;KACP,CAAA;AACH,CAAC"}

package/dist/clientAnnex/selfEnroll.d.ts

@@ -44,7 +44,6 @@
 import type { IKeyAgreementKey } from '@interop/data-integrity-core';
 import type { UserKey } from '../keys/userKey.js';
 import type { AccountPointer } from '../keyring/record.js';
-import { type ResourceLogPinStore } from '@interop/vh-resource-log';
 import type { ClientWebvhUpdateKeys } from '../webvh/didWebvh.js';
 import type { UnlockLogStore } from '../unlock/standingWebvh.js';
 /**
@@ -65,13 +64,11 @@ import type { UnlockLogStore } from '../unlock/standingWebvh.js';
  *   with
  * @param options.logStore {UnlockLogStore}   the public log read plus the
  *   delegated `did.jsonl` PUT, built by the app around the record's bridge
- *   delegation
- * @param [options.accountLogPinStore] {ResourceLogPinStore}   this client's
- *   chain-head pin for the account log, checked on every read the two log
- *   entries are built on and advanced as each publishes, then checked again
- *   by the verify that follows. A fresh browser normally has none (this is
- *   its first contact), which is exactly the pin's trust-on-first-use
- *   establishment
+ *   delegation. It carries this client's chain-head pin for the account log,
+ *   checked on every read the two log entries are built on and advanced as
+ *   each publishes, then checked again by the verify that follows. A fresh
+ *   browser normally holds no pin yet (this is its first contact), which is
+ *   exactly the pin's trust-on-first-use establishment
  * @param options.onCommitted {function}
  *   `(committed: { builtOnHead, clientSeed, webvhUpdateKeys }) =>
  *   Promise<void>` -- the REQUIRED persist-before-publish seam. The caller
@@ -111,12 +108,11 @@ import type { UnlockLogStore } from '../unlock/standingWebvh.js';
  *   cleared. The member exists so a build skew that dropped it surfaces
  *   instead of reading as `false`
  */
-export declare function selfEnrollClientCore({ pointer, ladderSeed, credentialKeyAgreementKey, logStore, accountLogPinStore, onCommitted, resume }: {
+export declare function selfEnrollClientCore({ pointer, ladderSeed, credentialKeyAgreementKey, logStore, onCommitted, resume }: {
     pointer: AccountPointer;
     ladderSeed: Uint8Array;
     credentialKeyAgreementKey: IKeyAgreementKey;
     logStore: UnlockLogStore;
-    accountLogPinStore?: ResourceLogPinStore;
     onCommitted: (committed: {
         builtOnHead: {
             scid: string;

package/dist/clientAnnex/selfEnroll.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"selfEnroll.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/selfEnroll.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AASpE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAA;AAMjC,OAAO,KAAK,EACV,qBAAqB,EAEtB,MAAM,sBAAsB,CAAA;AAW7B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,OAAO,EACP,UAAU,EACV,yBAAyB,EACzB,QAAQ,EACR,kBAAkB,EAClB,WAAW,EACX,MAAM,EACP,EAAE;IACD,OAAO,EAAE,cAAc,CAAA;IACvB,UAAU,EAAE,UAAU,CAAA;IACtB,yBAAyB,EAAE,gBAAgB,CAAA;IAC3C,QAAQ,EAAE,cAAc,CAAA;IACxB,kBAAkB,CAAC,EAAE,mBAAmB,CAAA;IACxC,WAAW,EAAE,CAAC,SAAS,EAAE;QACvB,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;QAChD,UAAU,EAAE,UAAU,CAAA;QACtB,eAAe,EAAE,qBAAqB,CAAA;KACvC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnB,MAAM,CAAC,EAAE;QACP,UAAU,EAAE,UAAU,CAAA;QACtB,eAAe,EAAE,qBAAqB,CAAA;QACtC,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACjD,CAAA;CACF,GAAG,OAAO,CAAC;IACV,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,qBAAqB,CAAA;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,OAAO,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,OAAO,CAAA;CACnB,CAAC,CA8ID"}
+{"version":3,"file":"selfEnroll.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/selfEnroll.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AASpE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAO1D,OAAO,KAAK,EACV,qBAAqB,EAEtB,MAAM,sBAAsB,CAAA;AAW7B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,OAAO,EACP,UAAU,EACV,yBAAyB,EACzB,QAAQ,EACR,WAAW,EACX,MAAM,EACP,EAAE;IACD,OAAO,EAAE,cAAc,CAAA;IACvB,UAAU,EAAE,UAAU,CAAA;IACtB,yBAAyB,EAAE,gBAAgB,CAAA;IAC3C,QAAQ,EAAE,cAAc,CAAA;IACxB,WAAW,EAAE,CAAC,SAAS,EAAE;QACvB,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;QAChD,UAAU,EAAE,UAAU,CAAA;QACtB,eAAe,EAAE,qBAAqB,CAAA;KACvC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnB,MAAM,CAAC,EAAE;QACP,UAAU,EAAE,UAAU,CAAA;QACtB,eAAe,EAAE,qBAAqB,CAAA;QACtC,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACjD,CAAA;CACF,GAAG,OAAO,CAAC;IACV,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,qBAAqB,CAAA;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,OAAO,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,OAAO,CAAA;CACnB,CAAC,CA2ID"}