@interop/wallet-core 0.68.0 → 0.69.0

package/dist/keys/rosterStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rosterStore.d.ts","sourceRoot":"","sources":["../../src/keys/rosterStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;GAWG;AACH,OAAO,EAAa,KAAK,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAEhD,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACvB,MAAM,0BAA0B,CAAA;AACjC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AAMzE,OAAO,EAEL,KAAK,iCAAiC,EACvC,MAAM,qBAAqB,CAAA;AAE5B;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,OAAO,EAAE,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAM3E;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,4BAA4B,CAAC,EAC3C,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,iBAAiB,EACjB,QAAQ,EACR,MAAM,EACN,UAAU,EACX,EAAE;IACD,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,EAAE,UAAU,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,iBAAiB,EAAE,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAA;IAC5D,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,MAAM,EAAE,iBAAiB,CAAA;IACzB,UAAU,CAAC,EAAE,KAAK,CAAA;CACnB,GAAG,iCAAiC,CAiBpC"}
+{"version":3,"file":"rosterStore.d.ts","sourceRoot":"","sources":["../../src/keys/rosterStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;GAWG;AACH,OAAO,EAAa,KAAK,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAEhD,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACvB,MAAM,0BAA0B,CAAA;AACjC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AAMzE,OAAO,EAEL,KAAK,iCAAiC,EACvC,MAAM,qBAAqB,CAAA;AAE5B;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,OAAO,EAAE,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAM3E;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,4BAA4B,CAAC,EAC3C,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,iBAAiB,EACjB,QAAQ,EACR,MAAM,EACN,UAAU,EACX,EAAE;IACD,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,EAAE,UAAU,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,iBAAiB,EAAE,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAA;IAC5D,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,MAAM,EAAE,iBAAiB,CAAA;IACzB,UAAU,CAAC,EAAE,KAAK,CAAA;CACnB,GAAG,iCAAiC,CAkBpC"}

package/dist/keys/rosterStore.js

@@ -74,7 +74,8 @@ export function userKeyRosterDescriptorStore({ storageServerUrl, zcapClient, spa
         resolveController,
         pinStore,
         logId: userKeyRosterPinId({ spaceId }),
-        signer
+        signer,
+        logClass: 'user-key-roster'
     });
 }
 //# sourceMappingURL=rosterStore.js.map

package/dist/keys/rosterStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"rosterStore.js","sourceRoot":"","sources":["../../src/keys/rosterStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,SAAS,EAAc,MAAM,qBAAqB,CAAA;AAE3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EACL,gBAAgB,EAGjB,MAAM,0BAA0B,CAAA;AAEjC,OAAO,EACL,kBAAkB,EAClB,4BAA4B,EAC7B,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAA;AACrE,OAAO,EACL,0BAA0B,EAE3B,MAAM,qBAAqB,CAAA;AAE5B;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAE,OAAO,EAAuB;IACjE,OAAO,gBAAgB,CAAC;QACtB,OAAO;QACP,YAAY,EAAE,kBAAkB,CAAC,EAAE;QACnC,UAAU,EAAE,4BAA4B;KACzC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,4BAA4B,CAAC,EAC3C,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,iBAAiB,EACjB,QAAQ,EACR,MAAM,EACN,UAAU,EASX;IACC,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAA;IACtE,MAAM,UAAU,GAAG,mBAAmB,CAAC;QACrC,GAAG;QACH,OAAO;QACP,YAAY,EAAE,kBAAkB,CAAC,EAAE;QACnC,UAAU;KACX,CAAC,CAAA;IACF,OAAO,0BAA0B,CAAC;QAChC,GAAG,EAAE,gBAAgB,CAAC;YACpB,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,4BAA4B,CAAC;SAC5D,CAAC;QACF,iBAAiB;QACjB,QAAQ;QACR,KAAK,EAAE,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAC;QACtC,MAAM;KACP,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"rosterStore.js","sourceRoot":"","sources":["../../src/keys/rosterStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,SAAS,EAAc,MAAM,qBAAqB,CAAA;AAE3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EACL,gBAAgB,EAGjB,MAAM,0BAA0B,CAAA;AAEjC,OAAO,EACL,kBAAkB,EAClB,4BAA4B,EAC7B,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAA;AACrE,OAAO,EACL,0BAA0B,EAE3B,MAAM,qBAAqB,CAAA;AAE5B;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAE,OAAO,EAAuB;IACjE,OAAO,gBAAgB,CAAC;QACtB,OAAO;QACP,YAAY,EAAE,kBAAkB,CAAC,EAAE;QACnC,UAAU,EAAE,4BAA4B;KACzC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,4BAA4B,CAAC,EAC3C,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,iBAAiB,EACjB,QAAQ,EACR,MAAM,EACN,UAAU,EASX;IACC,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAA;IACtE,MAAM,UAAU,GAAG,mBAAmB,CAAC;QACrC,GAAG;QACH,OAAO;QACP,YAAY,EAAE,kBAAkB,CAAC,EAAE;QACnC,UAAU;KACX,CAAC,CAAA;IACF,OAAO,0BAA0B,CAAC;QAChC,GAAG,EAAE,gBAAgB,CAAC;YACpB,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,4BAA4B,CAAC;SAC5D,CAAC;QACF,iBAAiB;QACjB,QAAQ;QACR,KAAK,EAAE,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAC;QACtC,MAAM;QACN,QAAQ,EAAE,iBAAiB;KAC5B,CAAC,CAAA;AACJ,CAAC"}

package/dist/keys/spaceEpochs.d.ts

@@ -5,13 +5,21 @@
  * Provision-time key-epoch install for the wallet Space's encrypted
  * collections: every encrypted collection's descriptor carries an epoch roster
  * from birth (epoch[0] a fresh random epoch key, never a user-key generation),
- * and reads/writes are refused fail-closed until it does. `provisionWalletSpace`
- * (the crypto-free container ensure in `space`) declares the collections; this
- * EDV-bearing second step installs each one's epoch[0], wrapped to the user key
- * (recipient zero). It lives in `keys` rather than `space` so the root barrel,
- * which re-exports `space`, stays free of the EDV crypto graph -- the same
- * split was-client makes between `ensureSpaceAndCollection` and
- * `ensureFirstEpoch`.
+ * and reads/writes are refused fail-closed until it does.
+ * `provisionWalletSpace` (the crypto-free container ensure in `space`) creates
+ * the collections bare; this EDV-bearing second step is where each one is both
+ * DECLARED encrypted and given its epoch[0], wrapped to the user key
+ * (recipient zero). On a governed collection the install is the genesis of the
+ * collection's own history log -- one guarded create whose head state is the
+ * descriptor -- so the declaration and the first epoch land as one write. It
+ * lives in `keys` rather than `space` so the root barrel, which re-exports
+ * `space`, stays free of the EDV crypto graph -- the same split was-client
+ * makes between `ensureSpaceAndCollection` and `ensureFirstEpoch`.
+ *
+ * The install is store-shaped rather than handle-shaped: the caller supplies
+ * a `storeFor` lookup, exactly as the cascade's `CascadeCollections.storeFor`
+ * does, so the same fan-out drives a log-governed store and a
+ * Description-backed one with no branch here.
  *
  * The install is re-provisioning, never a content migration: `ensureFirstEpoch`
  * installs a fresh epoch[0] onto ANY epoch-less descriptor, with no check for
@@ -24,8 +32,8 @@
  * the supported answer for them, as it is for a pre-release keyring or recovery
  * record.
  */
-import type { Collection, CollectionEncryption, IZcap, WasClient } from '@interop/was-client';
-import { type RecipientPublicKey } from '@interop/was-client/edv';
+import type { CollectionEncryption, WasClient } from '@interop/was-client';
+import { type EncryptionDescriptorStore, type RecipientPublicKey } from '@interop/was-client/edv';
 import type { UserKey } from './userKey.js';
 /**
  * What the epoch[0] fan-out did, per collection id: the settled epoch-bearing
@@ -61,6 +69,13 @@ export interface WalletSpaceEpochsResult {
  * key, so an encrypted collection is indexable at birth: the HMAC key is minted
  * alongside the epoch and wrapped to the same initial recipients.
  *
+ * On a log-governed store this install IS the collection's governing-log
+ * genesis: the guarded create (`If-None-Match: *`) that both declares the
+ * Collection governed and lands the first epoch. A re-run over a log that
+ * already exists adopts its head untouched (`installed: false`), and a lost
+ * create race resolves the winner's descriptor the same way, so exactly one
+ * epoch[0] ever exists per collection.
+ *
  * The blinded-index key is installed at provisioning or never. A collection
  * provisioned before blind-index support carries an epoch roster with no `hmac`
  * member, and asking for one there is refused (`EncryptionError`); such a
@@ -69,8 +84,9 @@ export interface WalletSpaceEpochsResult {
  * rethrown unchanged.
  *
  * @param options {object}
- * @param options.collection {Collection}   the (already declared encrypted)
- *   collection whose Description hosts the descriptor
+ * @param options.store {EncryptionDescriptorStore}   the collection's
+ *   descriptor store -- the log-governed one
+ *   (`collectionDescriptorLogStore`) on a governed collection
  * @param options.recipients {RecipientPublicKey[]}   the initial readers'
  *   public key-agreement keys, recipients of epoch[0] and of the blinded-index
  *   key alike
@@ -78,8 +94,8 @@ export interface WalletSpaceEpochsResult {
  *   the collection's epoch-bearing descriptor, and whether this call installed
  *   its epoch[0]
  */
-export declare function ensureIndexedFirstEpoch({ collection, recipients }: {
-    collection: Collection;
+export declare function ensureIndexedFirstEpoch({ store, recipients }: {
+    store: EncryptionDescriptorStore;
     recipients: RecipientPublicKey[];
 }): Promise<{
     descriptor: CollectionEncryption;
@@ -92,9 +108,11 @@ export declare function ensureIndexedFirstEpoch({ collection, recipients }: {
  * `ensureIndexedFirstEpoch`: create-if-absent through the
  * descriptor-store seam, adopting (never overwriting) a roster another
  * provisioner already landed -- so re-running after a tear converges, and
- * exactly one epoch[0] ever exists per collection. Run it after
- * `provisionWalletSpace` has declared the collections; the wallet Space's
- * provisioning is complete only once both steps have.
+ * exactly one epoch[0] ever exists per collection. On a governed collection
+ * that install is also the DECLARATION: the genesis of the collection's own
+ * history log, from which the server derives its Description's `encryption`
+ * member. Run it after `provisionWalletSpace` has created the collections;
+ * the wallet Space's provisioning is complete only once both steps have.
  *
  * Run both steps from the sync engine's `ensureProvisioned` seam
  * ({@link walletSpaceProvisioner} builds that closure) or, for a driver of its
@@ -107,6 +125,18 @@ export declare function ensureIndexedFirstEpoch({ collection, recipients }: {
  * full re-run converges, since the collections that did settle are adopted
  * untouched.
  *
+ * **A verified-log refusal is a failure entry, carried verbatim.** A
+ * collection whose governing log is fabricated or forked
+ * (`isResourceLogRefusal`: a `ResourceLogIntegrityError`, or a
+ * `ResourceLogContinuityError` whose reason is not `rollback`) lands in
+ * `failed` like any other collection, but its `error` is the refusal itself
+ * rather than the wrapped per-collection message, so a caller reading the
+ * report tells it by `err.name`. The fan-out never throws for it: the
+ * collections that did settle are still reported (and still reach
+ * `walletSpaceProvisioner`'s `onSettled`), and the geneses' resumable-success
+ * contract holds. A retry against the same served log cannot help that one
+ * collection, and the report says so.
+ *
  * **Re-minting after adoption.** `installed: false` is not on its own the eager
  * minter's re-mint trigger: it is equally the steady state of every re-run,
  * where nothing changed. The returned `descriptor` is what matters -- an eager
@@ -131,8 +161,11 @@ export declare function ensureIndexedFirstEpoch({ collection, recipients }: {
  * login just adopted from the roster) runs ungated.
  *
  * @param options {object}
- * @param options.was {WasClient}
- * @param options.spaceId {string}
+ * @param options.storeFor {function}   `(collectionId) =>
+ *   EncryptionDescriptorStore` -- each collection's descriptor store, the
+ *   same lookup shape the cascade's `CascadeCollections.storeFor` takes. The
+ *   caller's wiring decides the authority every request rides and, on a
+ *   governed collection, the log signer its genesis append is proved by
  * @param options.userKey {UserKey}   the account's user key, epoch[0]'s one
  *   initial recipient
  * @param [options.rosterDescriptor] {CollectionEncryption}   the settled
@@ -141,22 +174,20 @@ export declare function ensureIndexedFirstEpoch({ collection, recipients }: {
  * @param [options.collectionIds] {string[]}   the encrypted collections to
  *   cover; defaults to the wallet Space roster's encrypted collections. A
  *   caller naming its own ids (e.g. `contacts`) must name only collections
- *   declared encrypted
- * @param [options.capability] {IZcap}   an invocation capability attached to
- *   every collection request (a delegated Space-subtree zcap -- the transient
- *   session's generation delegation, for the tear heal on a promoted
- *   ladder-anchored account); absent, requests invoke the root capability
+ *   the wallet stores EDV envelopes in
+ * @param [options.spaceId] {string}   the account Space id, named in the
+ *   per-collection failure messages
  * @returns {Promise<WalletSpaceEpochsResult>}   per collection id, the settled
  *   descriptor and whether this call installed its epoch[0] (`false` means an
  *   existing roster was adopted), plus the collections that failed
+ * @throws {TypeError}   when `storeFor` is not a function, before any write
  */
-export declare function ensureWalletSpaceEpochs({ was, spaceId, userKey, rosterDescriptor, collectionIds, capability }: {
-    was: WasClient;
-    spaceId: string;
+export declare function ensureWalletSpaceEpochs({ storeFor, userKey, rosterDescriptor, collectionIds, spaceId }: {
+    storeFor: (collectionId: string) => EncryptionDescriptorStore;
     userKey: UserKey;
     rosterDescriptor?: CollectionEncryption;
     collectionIds?: string[];
-    capability?: IZcap;
+    spaceId?: string;
 }): Promise<WalletSpaceEpochsResult>;
 /**
  * Thrown by a {@link walletSpaceProvisioner} closure when the epoch[0] install
@@ -172,9 +203,10 @@ export declare class WalletSpaceProvisioningError extends Error {
 }
 /**
  * Builds the sync engine's `ensureProvisioned` closure for a wallet Space: the
- * provisioning two-step as one call -- `provisionWalletSpace` declares the
- * roster, then {@link ensureWalletSpaceEpochs} installs epoch[0] on every
- * encrypted collection -- with the memoization the engine adds on top.
+ * provisioning two-step as one call -- `provisionWalletSpace` creates the
+ * roster's collections, then {@link ensureWalletSpaceEpochs} declares each
+ * encrypted one and installs its epoch[0] -- with the memoization the engine
+ * adds on top.
  *
  * The closure is single-flight: one app runs one engine per synced
  * collection, and every engine's first cycle asks for the same provisioning,
@@ -199,22 +231,23 @@ export declare class WalletSpaceProvisioningError extends Error {
  *   the Space does not exist yet
  * @param options.userKey {UserKey}   the account's user key, epoch[0]'s one
  *   initial recipient
+ * @param options.storeFor {function}   `(collectionId) =>
+ *   EncryptionDescriptorStore` -- each encrypted collection's descriptor
+ *   store, threaded to {@link ensureWalletSpaceEpochs}
  * @param [options.collectionIds] {string[]}   the encrypted collections to
  *   cover; defaults to the wallet Space roster's encrypted collections
- * @param [options.capability] {IZcap}   an invocation capability attached to
- *   every epoch-install request (see {@link ensureWalletSpaceEpochs})
  * @param [options.onSettled] {function}
  *   `(result: WalletSpaceEpochsResult) => void | Promise<void>`, called after
  *   each run's epoch install with its report, before a partial run's refusal
  * @returns {() => Promise<void>}   the engine's `ensureProvisioned` seam
  */
-export declare function walletSpaceProvisioner({ was, spaceId, controllerDid, userKey, collectionIds, capability, onSettled }: {
+export declare function walletSpaceProvisioner({ was, spaceId, controllerDid, userKey, storeFor, collectionIds, onSettled }: {
     was: WasClient;
     spaceId: string;
     controllerDid: string;
     userKey: UserKey;
+    storeFor: (collectionId: string) => EncryptionDescriptorStore;
     collectionIds?: string[];
-    capability?: IZcap;
     onSettled?: (result: WalletSpaceEpochsResult) => void | Promise<void>;
 }): () => Promise<void>;
 //# sourceMappingURL=spaceEpochs.d.ts.map

package/dist/keys/spaceEpochs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spaceEpochs.d.ts","sourceRoot":"","sources":["../../src/keys/spaceEpochs.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EACV,UAAU,EACV,oBAAoB,EACpB,KAAK,EACL,SAAS,EACV,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAA;AAKhC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAE3C;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CACd,MAAM,EACN;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,oBAAoB,CAAA;KAAE,CACzD,CAAA;IACD,MAAM,EAAE,KAAK,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IACvD;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACrC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,uBAAuB,CAAC,EAC5C,UAAU,EACV,UAAU,EACX,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,UAAU,EAAE,kBAAkB,EAAE,CAAA;CACjC,GAAG,OAAO,CAAC;IAAE,UAAU,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAepE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AACH,wBAAsB,uBAAuB,CAAC,EAC5C,GAAG,EACH,OAAO,EACP,OAAO,EACP,gBAAgB,EAChB,aAAa,EACb,UAAU,EACX,EAAE;IACD,GAAG,EAAE,SAAS,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,OAAO,CAAA;IAChB,gBAAgB,CAAC,EAAE,oBAAoB,CAAA;IACvC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,UAAU,CAAC,EAAE,KAAK,CAAA;CACnB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAqCnC;AAED;;;;;GAKG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,MAAM,EAAE,uBAAuB,CAAC,QAAQ,CAAC,CAAA;gBAC7B,EAAE,MAAM,EAAE,EAAE;QAAE,MAAM,EAAE,uBAAuB,CAAC,QAAQ,CAAC,CAAA;KAAE;CAUtE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,GAAG,EACH,OAAO,EACP,aAAa,EACb,OAAO,EACP,aAAa,EACb,UAAU,EACV,SAAS,EACV,EAAE;IACD,GAAG,EAAE,SAAS,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,OAAO,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACtE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAwBtB"}
+{"version":3,"file":"spaceEpochs.d.ts","sourceRoot":"","sources":["../../src/keys/spaceEpochs.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC1E,OAAO,EAEL,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAA;AAMhC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAE3C;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CACd,MAAM,EACN;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,oBAAoB,CAAA;KAAE,CACzD,CAAA;IACD,MAAM,EAAE,KAAK,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IACvD;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACrC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,uBAAuB,CAAC,EAC5C,KAAK,EACL,UAAU,EACX,EAAE;IACD,KAAK,EAAE,yBAAyB,CAAA;IAChC,UAAU,EAAE,kBAAkB,EAAE,CAAA;CACjC,GAAG,OAAO,CAAC;IAAE,UAAU,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAepE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgFG;AACH,wBAAsB,uBAAuB,CAAC,EAC5C,QAAQ,EACR,OAAO,EACP,gBAAgB,EAChB,aAAa,EACb,OAAO,EACR,EAAE;IACD,QAAQ,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,yBAAyB,CAAA;IAC7D,OAAO,EAAE,OAAO,CAAA;IAChB,gBAAgB,CAAC,EAAE,oBAAoB,CAAA;IACvC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA2CnC;AAwBD;;;;;GAKG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,MAAM,EAAE,uBAAuB,CAAC,QAAQ,CAAC,CAAA;gBAC7B,EAAE,MAAM,EAAE,EAAE;QAAE,MAAM,EAAE,uBAAuB,CAAC,QAAQ,CAAC,CAAA;KAAE;CAUtE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,GAAG,EACH,OAAO,EACP,aAAa,EACb,OAAO,EACP,QAAQ,EACR,aAAa,EACb,SAAS,EACV,EAAE;IACD,GAAG,EAAE,SAAS,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,yBAAyB,CAAA;IAC7D,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACtE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAwBtB"}

package/dist/keys/spaceEpochs.js

@@ -1,4 +1,5 @@
 import { ensureFirstEpoch } from '@interop/was-client/edv';
+import { isResourceLogRefusal } from '../resourceLog/errors.js';
 import { encryptedWalletCollectionIds } from '../space/collections.js';
 import { provisionWalletSpace } from '../space/provisioning.js';
 import { userKeyAsRecipient } from './userKeyCascade.js';
@@ -7,6 +8,13 @@ import { userKeyAsRecipient } from './userKeyCascade.js';
  * key, so an encrypted collection is indexable at birth: the HMAC key is minted
  * alongside the epoch and wrapped to the same initial recipients.
  *
+ * On a log-governed store this install IS the collection's governing-log
+ * genesis: the guarded create (`If-None-Match: *`) that both declares the
+ * Collection governed and lands the first epoch. A re-run over a log that
+ * already exists adopts its head untouched (`installed: false`), and a lost
+ * create race resolves the winner's descriptor the same way, so exactly one
+ * epoch[0] ever exists per collection.
+ *
  * The blinded-index key is installed at provisioning or never. A collection
  * provisioned before blind-index support carries an epoch roster with no `hmac`
  * member, and asking for one there is refused (`EncryptionError`); such a
@@ -15,8 +23,9 @@ import { userKeyAsRecipient } from './userKeyCascade.js';
  * rethrown unchanged.
  *
  * @param options {object}
- * @param options.collection {Collection}   the (already declared encrypted)
- *   collection whose Description hosts the descriptor
+ * @param options.store {EncryptionDescriptorStore}   the collection's
+ *   descriptor store -- the log-governed one
+ *   (`collectionDescriptorLogStore`) on a governed collection
  * @param options.recipients {RecipientPublicKey[]}   the initial readers'
  *   public key-agreement keys, recipients of epoch[0] and of the blinded-index
  *   key alike
@@ -24,10 +33,10 @@ import { userKeyAsRecipient } from './userKeyCascade.js';
  *   the collection's epoch-bearing descriptor, and whether this call installed
  *   its epoch[0]
  */
-export async function ensureIndexedFirstEpoch({ collection, recipients }) {
+export async function ensureIndexedFirstEpoch({ store, recipients }) {
     try {
         return await ensureFirstEpoch({
-            collection,
+            store,
             recipients,
             blindedIndex: true
         });
@@ -38,7 +47,7 @@ export async function ensureIndexedFirstEpoch({ collection, recipients }) {
         if (err?.name !== 'EncryptionError') {
             throw err;
         }
-        return await ensureFirstEpoch({ collection, recipients });
+        return await ensureFirstEpoch({ store, recipients });
     }
 }
 /**
@@ -48,9 +57,11 @@ export async function ensureIndexedFirstEpoch({ collection, recipients }) {
  * `ensureIndexedFirstEpoch`: create-if-absent through the
  * descriptor-store seam, adopting (never overwriting) a roster another
  * provisioner already landed -- so re-running after a tear converges, and
- * exactly one epoch[0] ever exists per collection. Run it after
- * `provisionWalletSpace` has declared the collections; the wallet Space's
- * provisioning is complete only once both steps have.
+ * exactly one epoch[0] ever exists per collection. On a governed collection
+ * that install is also the DECLARATION: the genesis of the collection's own
+ * history log, from which the server derives its Description's `encryption`
+ * member. Run it after `provisionWalletSpace` has created the collections;
+ * the wallet Space's provisioning is complete only once both steps have.
  *
  * Run both steps from the sync engine's `ensureProvisioned` seam
  * ({@link walletSpaceProvisioner} builds that closure) or, for a driver of its
@@ -63,6 +74,18 @@ export async function ensureIndexedFirstEpoch({ collection, recipients }) {
  * full re-run converges, since the collections that did settle are adopted
  * untouched.
  *
+ * **A verified-log refusal is a failure entry, carried verbatim.** A
+ * collection whose governing log is fabricated or forked
+ * (`isResourceLogRefusal`: a `ResourceLogIntegrityError`, or a
+ * `ResourceLogContinuityError` whose reason is not `rollback`) lands in
+ * `failed` like any other collection, but its `error` is the refusal itself
+ * rather than the wrapped per-collection message, so a caller reading the
+ * report tells it by `err.name`. The fan-out never throws for it: the
+ * collections that did settle are still reported (and still reach
+ * `walletSpaceProvisioner`'s `onSettled`), and the geneses' resumable-success
+ * contract holds. A retry against the same served log cannot help that one
+ * collection, and the report says so.
+ *
  * **Re-minting after adoption.** `installed: false` is not on its own the eager
  * minter's re-mint trigger: it is equally the steady state of every re-run,
  * where nothing changed. The returned `descriptor` is what matters -- an eager
@@ -87,8 +110,11 @@ export async function ensureIndexedFirstEpoch({ collection, recipients }) {
  * login just adopted from the roster) runs ungated.
  *
  * @param options {object}
- * @param options.was {WasClient}
- * @param options.spaceId {string}
+ * @param options.storeFor {function}   `(collectionId) =>
+ *   EncryptionDescriptorStore` -- each collection's descriptor store, the
+ *   same lookup shape the cascade's `CascadeCollections.storeFor` takes. The
+ *   caller's wiring decides the authority every request rides and, on a
+ *   governed collection, the log signer its genesis append is proved by
  * @param options.userKey {UserKey}   the account's user key, epoch[0]'s one
  *   initial recipient
  * @param [options.rosterDescriptor] {CollectionEncryption}   the settled
@@ -97,16 +123,16 @@ export async function ensureIndexedFirstEpoch({ collection, recipients }) {
  * @param [options.collectionIds] {string[]}   the encrypted collections to
  *   cover; defaults to the wallet Space roster's encrypted collections. A
  *   caller naming its own ids (e.g. `contacts`) must name only collections
- *   declared encrypted
- * @param [options.capability] {IZcap}   an invocation capability attached to
- *   every collection request (a delegated Space-subtree zcap -- the transient
- *   session's generation delegation, for the tear heal on a promoted
- *   ladder-anchored account); absent, requests invoke the root capability
+ *   the wallet stores EDV envelopes in
+ * @param [options.spaceId] {string}   the account Space id, named in the
+ *   per-collection failure messages
  * @returns {Promise<WalletSpaceEpochsResult>}   per collection id, the settled
  *   descriptor and whether this call installed its epoch[0] (`false` means an
  *   existing roster was adopted), plus the collections that failed
+ * @throws {TypeError}   when `storeFor` is not a function, before any write
  */
-export async function ensureWalletSpaceEpochs({ was, spaceId, userKey, rosterDescriptor, collectionIds, capability }) {
+export async function ensureWalletSpaceEpochs({ storeFor, userKey, rosterDescriptor, collectionIds, spaceId }) {
+    assertStoreFor(storeFor);
     if (rosterDescriptor && rosterDescriptor.currentEpoch !== userKey.id) {
         return {
             outcomes: {},
@@ -122,23 +148,45 @@ export async function ensureWalletSpaceEpochs({ was, spaceId, userKey, rosterDes
     await Promise.all(ids.map(async (collectionId) => {
         try {
             const { installed, descriptor } = await ensureIndexedFirstEpoch({
-                collection: was
-                    .space(spaceId, { capability })
-                    .collection(collectionId),
+                store: storeFor(collectionId),
                 recipients: [userKeyAsRecipient({ userKey })]
             });
             outcomes[collectionId] = { installed, descriptor };
         }
         catch (err) {
+            if (isResourceLogRefusal(err)) {
+                // Verbatim, so the report carries the refusal's own `name`.
+                failed.push({ collectionId, error: err });
+                return;
+            }
             failed.push({
                 collectionId,
                 error: new Error(`Error installing the first key epoch for collection ` +
-                    `"${collectionId}" in space "${spaceId}".`, { cause: err })
+                    `"${collectionId}"` +
+                    (spaceId === undefined ? '' : ` in space "${spaceId}"`) +
+                    '.', { cause: err })
             });
         }
     }));
     return { outcomes, failed };
 }
+/**
+ * Refuses a missing store lookup with a synchronous `TypeError`, the way the
+ * geneses and the mend refuse a missing `collectionStoreFor`: a caller on the
+ * former handle-shaped signature would otherwise see every collection land in
+ * `failed` and a resolving call, which an app that stamps its profile
+ * provisioned on return would never re-run.
+ *
+ * @param storeFor {unknown}
+ * @returns {void}
+ */
+function assertStoreFor(storeFor) {
+    if (typeof storeFor !== 'function') {
+        throw new TypeError('ensureWalletSpaceEpochs requires storeFor: ' +
+            '(collectionId) => EncryptionDescriptorStore, each encrypted ' +
+            "collection's descriptor store.");
+    }
+}
 /**
  * Thrown by a {@link walletSpaceProvisioner} closure when the epoch[0] install
  * left any collection behind: the collections that did settle are adopted, and
@@ -158,9 +206,10 @@ export class WalletSpaceProvisioningError extends Error {
 }
 /**
  * Builds the sync engine's `ensureProvisioned` closure for a wallet Space: the
- * provisioning two-step as one call -- `provisionWalletSpace` declares the
- * roster, then {@link ensureWalletSpaceEpochs} installs epoch[0] on every
- * encrypted collection -- with the memoization the engine adds on top.
+ * provisioning two-step as one call -- `provisionWalletSpace` creates the
+ * roster's collections, then {@link ensureWalletSpaceEpochs} declares each
+ * encrypted one and installs its epoch[0] -- with the memoization the engine
+ * adds on top.
  *
  * The closure is single-flight: one app runs one engine per synced
  * collection, and every engine's first cycle asks for the same provisioning,
@@ -185,25 +234,26 @@ export class WalletSpaceProvisioningError extends Error {
  *   the Space does not exist yet
  * @param options.userKey {UserKey}   the account's user key, epoch[0]'s one
  *   initial recipient
+ * @param options.storeFor {function}   `(collectionId) =>
+ *   EncryptionDescriptorStore` -- each encrypted collection's descriptor
+ *   store, threaded to {@link ensureWalletSpaceEpochs}
  * @param [options.collectionIds] {string[]}   the encrypted collections to
  *   cover; defaults to the wallet Space roster's encrypted collections
- * @param [options.capability] {IZcap}   an invocation capability attached to
- *   every epoch-install request (see {@link ensureWalletSpaceEpochs})
  * @param [options.onSettled] {function}
  *   `(result: WalletSpaceEpochsResult) => void | Promise<void>`, called after
  *   each run's epoch install with its report, before a partial run's refusal
  * @returns {() => Promise<void>}   the engine's `ensureProvisioned` seam
  */
-export function walletSpaceProvisioner({ was, spaceId, controllerDid, userKey, collectionIds, capability, onSettled }) {
+export function walletSpaceProvisioner({ was, spaceId, controllerDid, userKey, storeFor, collectionIds, onSettled }) {
+    assertStoreFor(storeFor);
     let inFlight = null;
     const run = async () => {
         await provisionWalletSpace({ was, spaceId, controllerDid });
         const result = await ensureWalletSpaceEpochs({
-            was,
-            spaceId,
+            storeFor,
             userKey,
-            collectionIds,
-            capability
+            spaceId,
+            collectionIds
         });
         await onSettled?.(result);
         if (result.failed.length > 0) {

package/dist/keys/spaceEpochs.js.map

@@ -1 +1 @@
-{"version":3,"file":"spaceEpochs.js","sourceRoot":"","sources":["../../src/keys/spaceEpochs.ts"],"names":[],"mappings":"AAgCA,OAAO,EACL,gBAAgB,EAEjB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAA;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AA4BxD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,EAC5C,UAAU,EACV,UAAU,EAIX;IACC,IAAI,CAAC;QACH,OAAO,MAAM,gBAAgB,CAAC;YAC5B,UAAU;YACV,UAAU;YACV,YAAY,EAAE,IAAI;SACnB,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sEAAsE;QACtE,sCAAsC;QACtC,IAAK,GAAoB,EAAE,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACtD,MAAM,GAAG,CAAA;QACX,CAAC;QACD,OAAO,MAAM,gBAAgB,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAA;IAC3D,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,EAC5C,GAAG,EACH,OAAO,EACP,OAAO,EACP,gBAAgB,EAChB,aAAa,EACb,UAAU,EAQX;IACC,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,YAAY,KAAK,OAAO,CAAC,EAAE,EAAE,CAAC;QACrE,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;YACV,OAAO,EACL,gBAAgB,CAAC,YAAY,KAAK,SAAS;gBACzC,CAAC,CAAC,EAAE,aAAa,EAAE,gBAAgB,CAAC,YAAY,EAAE;gBAClD,CAAC,CAAC,EAAE;SACT,CAAA;IACH,CAAC;IACD,MAAM,GAAG,GAAG,aAAa,IAAI,4BAA4B,EAAE,CAAA;IAC3D,MAAM,QAAQ,GAAwC,EAAE,CAAA;IACxD,MAAM,MAAM,GAAoD,EAAE,CAAA;IAClE,MAAM,OAAO,CAAC,GAAG,CACf,GAAG,CAAC,GAAG,CAAC,KAAK,EAAC,YAAY,EAAC,EAAE;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,uBAAuB,CAAC;gBAC9D,UAAU,EAAE,GAAG;qBACZ,KAAK,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC;qBAC9B,UAAU,CAAC,YAAY,CAAC;gBAC3B,UAAU,EAAE,CAAC,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;aAC9C,CAAC,CAAA;YACF,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC;gBACV,YAAY;gBACZ,KAAK,EAAE,IAAI,KAAK,CACd,sDAAsD;oBACpD,IAAI,YAAY,eAAe,OAAO,IAAI,EAC5C,EAAE,KAAK,EAAE,GAAG,EAAE,CACf;aACF,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,CAAC,CACH,CAAA;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,MAAM,CAAmC;IACzC,YAAY,EAAE,MAAM,EAAiD;QACnE,KAAK,CACH,kCAAkC,MAAM,CAAC,MAAM,iBAAiB;YAC9D,iCAAiC;YACjC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACzD,GAAG,CACN,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAA;QAC1C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,UAAU,sBAAsB,CAAC,EACrC,GAAG,EACH,OAAO,EACP,aAAa,EACb,OAAO,EACP,aAAa,EACb,UAAU,EACV,SAAS,EASV;IACC,IAAI,QAAQ,GAAyB,IAAI,CAAA;IACzC,MAAM,GAAG,GAAG,KAAK,IAAmB,EAAE;QACpC,MAAM,oBAAoB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAA;QAC3D,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC;YAC3C,GAAG;YACH,OAAO;YACP,OAAO;YACP,aAAa;YACb,UAAU;SACX,CAAC,CAAA;QACF,MAAM,SAAS,EAAE,CAAC,MAAM,CAAC,CAAA;QACzB,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,4BAA4B,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;QACnE,CAAC;IACH,CAAC,CAAA;IACD,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,QAAQ,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC5B,QAAQ,GAAG,IAAI,CAAA;YACjB,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC,CAAA;AACH,CAAC"}
+{"version":3,"file":"spaceEpochs.js","sourceRoot":"","sources":["../../src/keys/spaceEpochs.ts"],"names":[],"mappings":"AAmCA,OAAO,EACL,gBAAgB,EAGjB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAC/D,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAA;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AA4BxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,EAC5C,KAAK,EACL,UAAU,EAIX;IACC,IAAI,CAAC;QACH,OAAO,MAAM,gBAAgB,CAAC;YAC5B,KAAK;YACL,UAAU;YACV,YAAY,EAAE,IAAI;SACnB,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sEAAsE;QACtE,sCAAsC;QACtC,IAAK,GAAoB,EAAE,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACtD,MAAM,GAAG,CAAA;QACX,CAAC;QACD,OAAO,MAAM,gBAAgB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAA;IACtD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgFG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,EAC5C,QAAQ,EACR,OAAO,EACP,gBAAgB,EAChB,aAAa,EACb,OAAO,EAOR;IACC,cAAc,CAAC,QAAQ,CAAC,CAAA;IACxB,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,YAAY,KAAK,OAAO,CAAC,EAAE,EAAE,CAAC;QACrE,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;YACV,OAAO,EACL,gBAAgB,CAAC,YAAY,KAAK,SAAS;gBACzC,CAAC,CAAC,EAAE,aAAa,EAAE,gBAAgB,CAAC,YAAY,EAAE;gBAClD,CAAC,CAAC,EAAE;SACT,CAAA;IACH,CAAC;IACD,MAAM,GAAG,GAAG,aAAa,IAAI,4BAA4B,EAAE,CAAA;IAC3D,MAAM,QAAQ,GAAwC,EAAE,CAAA;IACxD,MAAM,MAAM,GAAoD,EAAE,CAAA;IAClE,MAAM,OAAO,CAAC,GAAG,CACf,GAAG,CAAC,GAAG,CAAC,KAAK,EAAC,YAAY,EAAC,EAAE;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,uBAAuB,CAAC;gBAC9D,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC;gBAC7B,UAAU,EAAE,CAAC,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;aAC9C,CAAC,CAAA;YACF,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,4DAA4D;gBAC5D,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;gBACzC,OAAM;YACR,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,YAAY;gBACZ,KAAK,EAAE,IAAI,KAAK,CACd,sDAAsD;oBACpD,IAAI,YAAY,GAAG;oBACnB,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,OAAO,GAAG,CAAC;oBACvD,GAAG,EACL,EAAE,KAAK,EAAE,GAAG,EAAE,CACf;aACF,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,CAAC,CACH,CAAA;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;AAC7B,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,cAAc,CACrB,QAAiB;IAEjB,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;QACnC,MAAM,IAAI,SAAS,CACjB,6CAA6C;YAC3C,8DAA8D;YAC9D,gCAAgC,CACnC,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,MAAM,CAAmC;IACzC,YAAY,EAAE,MAAM,EAAiD;QACnE,KAAK,CACH,kCAAkC,MAAM,CAAC,MAAM,iBAAiB;YAC9D,iCAAiC;YACjC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACzD,GAAG,CACN,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAA;QAC1C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,UAAU,sBAAsB,CAAC,EACrC,GAAG,EACH,OAAO,EACP,aAAa,EACb,OAAO,EACP,QAAQ,EACR,aAAa,EACb,SAAS,EASV;IACC,cAAc,CAAC,QAAQ,CAAC,CAAA;IACxB,IAAI,QAAQ,GAAyB,IAAI,CAAA;IACzC,MAAM,GAAG,GAAG,KAAK,IAAmB,EAAE;QACpC,MAAM,oBAAoB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAA;QAC3D,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC;YAC3C,QAAQ;YACR,OAAO;YACP,OAAO;YACP,aAAa;SACd,CAAC,CAAA;QACF,MAAM,SAAS,EAAE,CAAC,MAAM,CAAC,CAAA;QACzB,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,4BAA4B,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;QACnE,CAAC;IACH,CAAC,CAAA;IACD,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,QAAQ,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC5B,QAAQ,GAAG,IAAI,CAAA;YACjB,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC,CAAA;AACH,CAAC"}

package/dist/keys/userKeyCascade.d.ts

@@ -36,6 +36,7 @@
 import type { IKeyAgreementKey } from '@interop/data-integrity-core';
 import type { CollectionEncryption } from '@interop/was-client';
 import { type EncryptionDescriptorStore, type RecipientPublicKey } from '@interop/was-client/edv';
+import type { WebvhResourceLogController } from '../resourceLog/index.js';
 import { type UserKey } from './userKey.js';
 /**
  * A user key presented as an epoch-roster recipient: the kid is the
@@ -145,6 +146,20 @@ export interface UserKeyCascadeResult {
  * standing backstop, and the staleness rule makes a naive full re-run
  * converge with zero redundant epochs).
  *
+ * **A verified-log refusal is a failure entry, carried verbatim.** A
+ * collection whose governing log is fabricated or forked
+ * ({@link isResourceLogRefusal}: a `ResourceLogIntegrityError`, or a
+ * `ResourceLogContinuityError` whose reason is not `rollback`) lands in
+ * `failed` like any other collection, with the refusal as its `error`
+ * unwrapped, so a caller reading the report can tell it by `err.name`. The
+ * fan-out never throws for it: every caller here is a ceremony past its pivot
+ * (a client revoked, a credential retired, a client forgotten), whose later
+ * stages -- the generation delegation re-mint, the session's adoption of the
+ * fresh key -- must still run, and whose contract is that a fan-out failure
+ * is a resumable success. A retry against the same served log cannot help
+ * that one collection, and the report says so; it must not cost the account
+ * the stages that follow.
+ *
  * @param options {object}
  * @param options.collectionIds {string[]}   the encrypted collections to
  *   cover, deduplicated by the caller
@@ -159,14 +174,24 @@ export interface UserKeyCascadeResult {
  * @param options.clientKeyAgreementKey {IKeyAgreementKey}   this client's own
  *   (identity) key-agreement key, unwrapping the generations
  * @param options.userKey {UserKey}   the roster's current user key
+ * @param [options.controller] {WebvhResourceLogController}   the ceremony's
+ *   post-edit controller view, set as each log-governed collection store's
+ *   minimum controller version before that collection's first append. A
+ *   collection's governing log takes the same post-edit anchoring the roster
+ *   log does: a store resolving a stale cached view would anchor its rotation
+ *   before the document edit, so a ladder-signed append would be refused and
+ *   a no-op rotation's seal would be blind to the membership change. Absent
+ *   (a caller with no post-edit log in hand -- the login sweep), the injected
+ *   resolver's own freshness is what the appends anchor at
  * @returns {Promise<UserKeyCascadeResult>}
  */
-export declare function cascadeCollectionsToUserKey({ collectionIds, storeFor, isEncrypted, rosterDescriptor, clientKeyAgreementKey, userKey }: {
+export declare function cascadeCollectionsToUserKey({ collectionIds, storeFor, isEncrypted, rosterDescriptor, clientKeyAgreementKey, userKey, controller }: {
     collectionIds: string[];
     storeFor: (collectionId: string) => EncryptionDescriptorStore;
     isEncrypted?: (collectionId: string) => Promise<boolean>;
     rosterDescriptor: CollectionEncryption;
     clientKeyAgreementKey: IKeyAgreementKey;
     userKey: UserKey;
+    controller?: WebvhResourceLogController;
 }): Promise<UserKeyCascadeResult>;
 //# sourceMappingURL=userKeyCascade.d.ts.map

package/dist/keys/userKeyCascade.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"userKeyCascade.d.ts","sourceRoot":"","sources":["../../src/keys/userKeyCascade.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AACpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,EAML,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAA;AAGhC,OAAO,EAAoB,KAAK,OAAO,EAAE,MAAM,cAAc,CAAA;AAE7D;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,EACjC,OAAO,EACR,EAAE;IACD,OAAO,EAAE,OAAO,CAAA;CACjB,GAAG,kBAAkB,CAKrB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,wBAAwB,CAAC,EAC7C,UAAU,EACV,qBAAqB,EACtB,EAAE;IACD,UAAU,EAAE,oBAAoB,CAAA;IAChC,qBAAqB,EAAE,gBAAgB,CAAA;CACxC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAkBrB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,gCAAgC,GAC1C,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAA;AAE5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAsB,+BAA+B,CAAC,EACpD,KAAK,EACL,OAAO,EACP,WAAW,EACZ,EAAE;IACD,KAAK,EAAE,yBAAyB,CAAA;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,WAAW,EAAE,OAAO,EAAE,CAAA;CACvB,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAoG5C;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAA;IAC1D,MAAM,EAAE,KAAK,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;CACxD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,2BAA2B,CAAC,EAChD,aAAa,EACb,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,qBAAqB,EACrB,OAAO,EACR,EAAE;IACD,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,QAAQ,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,yBAAyB,CAAA;IAC7D,WAAW,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACxD,gBAAgB,EAAE,oBAAoB,CAAA;IACtC,qBAAqB,EAAE,gBAAgB,CAAA;IACvC,OAAO,EAAE,OAAO,CAAA;CACjB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAwBhC"}
+{"version":3,"file":"userKeyCascade.d.ts","sourceRoot":"","sources":["../../src/keys/userKeyCascade.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AACpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,EAML,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAA;AAChC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AAGzE,OAAO,EAAoB,KAAK,OAAO,EAAE,MAAM,cAAc,CAAA;AAE7D;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,EACjC,OAAO,EACR,EAAE;IACD,OAAO,EAAE,OAAO,CAAA;CACjB,GAAG,kBAAkB,CAKrB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,wBAAwB,CAAC,EAC7C,UAAU,EACV,qBAAqB,EACtB,EAAE;IACD,UAAU,EAAE,oBAAoB,CAAA;IAChC,qBAAqB,EAAE,gBAAgB,CAAA;CACxC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAkBrB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,gCAAgC,GAC1C,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAA;AAE5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAsB,+BAA+B,CAAC,EACpD,KAAK,EACL,OAAO,EACP,WAAW,EACZ,EAAE;IACD,KAAK,EAAE,yBAAyB,CAAA;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,WAAW,EAAE,OAAO,EAAE,CAAA;CACvB,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAoG5C;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAA;IAC1D,MAAM,EAAE,KAAK,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;CACxD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,wBAAsB,2BAA2B,CAAC,EAChD,aAAa,EACb,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,qBAAqB,EACrB,OAAO,EACP,UAAU,EACX,EAAE;IACD,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,QAAQ,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,yBAAyB,CAAA;IAC7D,WAAW,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACxD,gBAAgB,EAAE,oBAAoB,CAAA;IACtC,qBAAqB,EAAE,gBAAgB,CAAA;IACvC,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,CAAC,EAAE,0BAA0B,CAAA;CACxC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA4BhC"}

package/dist/keys/userKeyCascade.js

@@ -176,6 +176,20 @@ export async function rotateCollectionEpochsToUserKey({ store, userKey, generati
  * standing backstop, and the staleness rule makes a naive full re-run
  * converge with zero redundant epochs).
  *
+ * **A verified-log refusal is a failure entry, carried verbatim.** A
+ * collection whose governing log is fabricated or forked
+ * ({@link isResourceLogRefusal}: a `ResourceLogIntegrityError`, or a
+ * `ResourceLogContinuityError` whose reason is not `rollback`) lands in
+ * `failed` like any other collection, with the refusal as its `error`
+ * unwrapped, so a caller reading the report can tell it by `err.name`. The
+ * fan-out never throws for it: every caller here is a ceremony past its pivot
+ * (a client revoked, a credential retired, a client forgotten), whose later
+ * stages -- the generation delegation re-mint, the session's adoption of the
+ * fresh key -- must still run, and whose contract is that a fan-out failure
+ * is a resumable success. A retry against the same served log cannot help
+ * that one collection, and the report says so; it must not cost the account
+ * the stages that follow.
+ *
  * @param options {object}
  * @param options.collectionIds {string[]}   the encrypted collections to
  *   cover, deduplicated by the caller
@@ -190,9 +204,18 @@ export async function rotateCollectionEpochsToUserKey({ store, userKey, generati
  * @param options.clientKeyAgreementKey {IKeyAgreementKey}   this client's own
  *   (identity) key-agreement key, unwrapping the generations
  * @param options.userKey {UserKey}   the roster's current user key
+ * @param [options.controller] {WebvhResourceLogController}   the ceremony's
+ *   post-edit controller view, set as each log-governed collection store's
+ *   minimum controller version before that collection's first append. A
+ *   collection's governing log takes the same post-edit anchoring the roster
+ *   log does: a store resolving a stale cached view would anchor its rotation
+ *   before the document edit, so a ladder-signed append would be refused and
+ *   a no-op rotation's seal would be blind to the membership change. Absent
+ *   (a caller with no post-edit log in hand -- the login sweep), the injected
+ *   resolver's own freshness is what the appends anchor at
  * @returns {Promise<UserKeyCascadeResult>}
  */
-export async function cascadeCollectionsToUserKey({ collectionIds, storeFor, isEncrypted, rosterDescriptor, clientKeyAgreementKey, userKey }) {
+export async function cascadeCollectionsToUserKey({ collectionIds, storeFor, isEncrypted, rosterDescriptor, clientKeyAgreementKey, userKey, controller }) {
     const generations = await unwrapUserKeyGenerations({
         descriptor: rosterDescriptor,
         clientKeyAgreementKey
@@ -204,8 +227,12 @@ export async function cascadeCollectionsToUserKey({ collectionIds, storeFor, isE
             if (isEncrypted && !(await isEncrypted(collectionId))) {
                 return;
             }
+            const store = storeFor(collectionId);
+            if (controller !== undefined && isSealableDescriptorStore(store)) {
+                store.setMinimumControllerVersion({ controller });
+            }
             outcomes[collectionId] = await rotateCollectionEpochsToUserKey({
-                store: storeFor(collectionId),
+                store,
                 userKey,
                 generations
             });

package/dist/keys/userKeyCascade.js.map

@@ -1 +1 @@
-{"version":3,"file":"userKeyCascade.js","sourceRoot":"","sources":["../../src/keys/userKeyCascade.ts"],"names":[],"mappings":"AAqCA,OAAO,EACL,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EAGlB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAgB,MAAM,cAAc,CAAA;AAE7D;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,EACjC,OAAO,EAGR;IACC,OAAO;QACL,EAAE,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,kBAAkB,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE;KAC9C,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,EAC7C,UAAU,EACV,qBAAqB,EAItB;IACC,MAAM,WAAW,GAAc,EAAE,CAAA;IACjC,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CACjC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,KAAK,qBAAqB,CAAC,EAAE,CAC/D,CAAA;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,SAAQ;QACV,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,KAAK;YACL,eAAe,EAAE,qBAAqB;SACvC,CAAC,CAAA;QACF,IAAI,MAAM,EAAE,CAAC;YACX,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAA;AACpB,CAAC;AAaD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,EACpD,KAAK,EACL,OAAO,EACP,WAAW,EAKZ;IACC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;IAClC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,MAAM,CAAA;IACf,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;IACrC,MAAM,gBAAgB,GAAG,WAAW,CAAC,MAAM,CACzC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAC3C,CAAA;IAED,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,mEAAmE;YACjE,4DAA4D;YAC5D,0DAA0D;YAC1D,+CAA+C,CAClD,CAAA;IACH,CAAC;IAED,MAAM,YAAY,GAAG,cAAc,CAAC;QAClC,UAAU;QACV,KAAK,EAAE,2BAA2B;KACnC,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CACvD,CAAA;IACD,MAAM,SAAS,GAAG,gBAAgB;SAC/B,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;SAC/C,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IACtC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAE5C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,cAAc,GAAG,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAC7D,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,UAAU,CAAC,CAChE,CAAA;QACD,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,cAAc,EAAE,CAAC;YAClD,IAAI,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAA;YAC9D,CAAC;YACD,OAAO,MAAM,CAAA;QACf,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,mEAAmE;QACnE,uEAAuE;QACvE,4EAA4E;QAC5E,MAAM,eAAe,GAAG,CAAC,GAAG,gBAAgB,CAAC;aAC1C,OAAO,EAAE;aACT,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAE,CAAA;QACrE,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAA;QAC5D,MAAM,gBAAgB,CAAC;YACrB,KAAK;YACL,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAC;YAC1C,KAAK,EAAE,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE;YACjD,IAAI,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;SACrB,CAAC,CAAA;QACF,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,6EAA6E;QAC7E,yEAAyE;QACzE,uEAAuE;QACvE,yCAAyC;QACzC,MAAM,IAAI,KAAK,CACb,wEAAwE;YACtE,sEAAsE,CACzE,CAAA;IACH,CAAC;IAED,gFAAgF;IAChF,uEAAuE;IACvE,0EAA0E;IAC1E,SAAS;IACT,MAAM,UAAU,GAAG,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CACjD,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,UAAU,CAAC,CAC1E,CAAA;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,WAAW,CAAC;SACjC,OAAO,EAAE;SACT,IAAI,CAAC,UAAU,CAAC,EAAE,CACjB,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CACvB,KAAK,CAAC,UAAU,CAAC,IAAI,CACnB,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC,CAC3D,CACF,CACF,CAAA;IACH,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,0EAA0E;YACxE,uEAAuE,CAC1E,CAAA;IACH,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;IACxD,MAAM,YAAY,CAAC;QACjB,KAAK;QACL,SAAS,EAAE,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAC;QAC1C,KAAK,EAAE,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE;KAClD,CAAC,CAAA;IACF,OAAO,UAAU,CAAA;AACnB,CAAC;AAYD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,EAChD,aAAa,EACb,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,qBAAqB,EACrB,OAAO,EAQR;IACC,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC;QACjD,UAAU,EAAE,gBAAgB;QAC5B,qBAAqB;KACtB,CAAC,CAAA;IACF,MAAM,QAAQ,GAAqD,EAAE,CAAA;IACrE,MAAM,MAAM,GAAoD,EAAE,CAAA;IAClE,MAAM,OAAO,CAAC,GAAG,CACf,aAAa,CAAC,GAAG,CAAC,KAAK,EAAC,YAAY,EAAC,EAAE;QACrC,IAAI,CAAC;YACH,IAAI,WAAW,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;gBACtD,OAAM;YACR,CAAC;YACD,QAAQ,CAAC,YAAY,CAAC,GAAG,MAAM,+BAA+B,CAAC;gBAC7D,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC;gBAC7B,OAAO;gBACP,WAAW;aACZ,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC,CAAC,CACH,CAAA;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;AAC7B,CAAC"}
+{"version":3,"file":"userKeyCascade.js","sourceRoot":"","sources":["../../src/keys/userKeyCascade.ts"],"names":[],"mappings":"AAqCA,OAAO,EACL,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EAGlB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAgB,MAAM,cAAc,CAAA;AAE7D;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,EACjC,OAAO,EAGR;IACC,OAAO;QACL,EAAE,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,kBAAkB,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE;KAC9C,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,EAC7C,UAAU,EACV,qBAAqB,EAItB;IACC,MAAM,WAAW,GAAc,EAAE,CAAA;IACjC,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CACjC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,KAAK,qBAAqB,CAAC,EAAE,CAC/D,CAAA;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,SAAQ;QACV,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,KAAK;YACL,eAAe,EAAE,qBAAqB;SACvC,CAAC,CAAA;QACF,IAAI,MAAM,EAAE,CAAC;YACX,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAA;AACpB,CAAC;AAaD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,EACpD,KAAK,EACL,OAAO,EACP,WAAW,EAKZ;IACC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;IAClC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,MAAM,CAAA;IACf,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;IACrC,MAAM,gBAAgB,GAAG,WAAW,CAAC,MAAM,CACzC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAC3C,CAAA;IAED,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,mEAAmE;YACjE,4DAA4D;YAC5D,0DAA0D;YAC1D,+CAA+C,CAClD,CAAA;IACH,CAAC;IAED,MAAM,YAAY,GAAG,cAAc,CAAC;QAClC,UAAU;QACV,KAAK,EAAE,2BAA2B;KACnC,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CACvD,CAAA;IACD,MAAM,SAAS,GAAG,gBAAgB;SAC/B,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;SAC/C,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IACtC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAE5C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,cAAc,GAAG,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAC7D,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,UAAU,CAAC,CAChE,CAAA;QACD,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,cAAc,EAAE,CAAC;YAClD,IAAI,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAA;YAC9D,CAAC;YACD,OAAO,MAAM,CAAA;QACf,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,mEAAmE;QACnE,uEAAuE;QACvE,4EAA4E;QAC5E,MAAM,eAAe,GAAG,CAAC,GAAG,gBAAgB,CAAC;aAC1C,OAAO,EAAE;aACT,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAE,CAAA;QACrE,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAA;QAC5D,MAAM,gBAAgB,CAAC;YACrB,KAAK;YACL,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAC;YAC1C,KAAK,EAAE,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE;YACjD,IAAI,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;SACrB,CAAC,CAAA;QACF,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,6EAA6E;QAC7E,yEAAyE;QACzE,uEAAuE;QACvE,yCAAyC;QACzC,MAAM,IAAI,KAAK,CACb,wEAAwE;YACtE,sEAAsE,CACzE,CAAA;IACH,CAAC;IAED,gFAAgF;IAChF,uEAAuE;IACvE,0EAA0E;IAC1E,SAAS;IACT,MAAM,UAAU,GAAG,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CACjD,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,UAAU,CAAC,CAC1E,CAAA;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,WAAW,CAAC;SACjC,OAAO,EAAE;SACT,IAAI,CAAC,UAAU,CAAC,EAAE,CACjB,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CACvB,KAAK,CAAC,UAAU,CAAC,IAAI,CACnB,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC,CAC3D,CACF,CACF,CAAA;IACH,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,0EAA0E;YACxE,uEAAuE,CAC1E,CAAA;IACH,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;IACxD,MAAM,YAAY,CAAC;QACjB,KAAK;QACL,SAAS,EAAE,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAC;QAC1C,KAAK,EAAE,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE;KAClD,CAAC,CAAA;IACF,OAAO,UAAU,CAAA;AACnB,CAAC;AAYD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,EAChD,aAAa,EACb,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,qBAAqB,EACrB,OAAO,EACP,UAAU,EASX;IACC,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC;QACjD,UAAU,EAAE,gBAAgB;QAC5B,qBAAqB;KACtB,CAAC,CAAA;IACF,MAAM,QAAQ,GAAqD,EAAE,CAAA;IACrE,MAAM,MAAM,GAAoD,EAAE,CAAA;IAClE,MAAM,OAAO,CAAC,GAAG,CACf,aAAa,CAAC,GAAG,CAAC,KAAK,EAAC,YAAY,EAAC,EAAE;QACrC,IAAI,CAAC;YACH,IAAI,WAAW,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;gBACtD,OAAM;YACR,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAA;YACpC,IAAI,UAAU,KAAK,SAAS,IAAI,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjE,KAAK,CAAC,2BAA2B,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;YACnD,CAAC;YACD,QAAQ,CAAC,YAAY,CAAC,GAAG,MAAM,+BAA+B,CAAC;gBAC7D,KAAK;gBACL,OAAO;gBACP,WAAW;aACZ,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC,CAAC,CACH,CAAA;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;AAC7B,CAAC"}