@interop/wallet-core 0.71.0 → 0.72.0

package/dist/clientAnnex/gc.js

@@ -102,11 +102,13 @@ export function generationQuiet({ log, now = Date.now() }) {
  * See the module header for the stage order and its load-bearing constraints.
  *
  * Convergence: every stage detects completion from durable state. A re-run
- * after a tear re-POSTs the revocation blind (400 already-revoked reads as
- * success), re-writes the digest (the deterministic payload id collapses the
- * second row at read time), and re-runs the idempotent delete; a swap torn
- * before its re-point leaves an unpointed fresh generation the same fan-out
- * collects.
+ * after a tear re-POSTs the revocation blind (a genuine `AlreadyRevokedError`
+ * reads as success; a delegation expired beyond the clock-skew margin is
+ * skipped locally before any POST, and a refusal inside the skew band or of
+ * a chain whose signer has left the document is read as that), re-writes
+ * the digest (the deterministic payload id collapses the second row at read
+ * time), and re-runs the idempotent delete; a swap torn before its re-point
+ * leaves an unpointed fresh generation the same fan-out collects.
  *
  * @param options {object}
  * @param options.was {WasClient}   the storage client, signing as an
@@ -174,7 +176,7 @@ export async function runClientAnnexGc({ was, wasServerUrl, accountSpaceId, acco
                             // read as quiet.
                             return old === undefined ? 'failed' : 'deferred-live';
                         }
-                        currentDid = (await replaceClientAnnexGeneration({
+                        const swapped = await replaceClientAnnexGeneration({
                             was,
                             wasServerUrl,
                             accountSpaceId,
@@ -184,8 +186,14 @@ export async function runClientAnnexGc({ was, wasServerUrl, accountSpaceId, acco
                             zcapClient,
                             ladderSeed,
                             clientAnnexSpaceId: spaceId,
-                            oldGeneration: old
-                        })).clientAnnexDid;
+                            oldGeneration: old,
+                            now
+                        });
+                        // A `refused` revoke is not reported here: the swap
+                        // completed, the old generation is now unpointed, and the
+                        // fan-out below re-attempts its revocation in this same pass,
+                        // reporting the failure under its id if it fails again.
+                        currentDid = swapped.clientAnnexDid;
                         return 'replaced';
                     }
                     catch (err) {
@@ -221,7 +229,9 @@ export async function runClientAnnexGc({ was, wasServerUrl, accountSpaceId, acco
                 generationId,
                 pinStore,
                 recordDigest,
-                onCollected
+                onCollected,
+                now,
+                accountDoc: account.doc
             });
             collected.push(generationId);
         }
@@ -270,10 +280,12 @@ async function readClientAnnexGeneration({ was, spaceId, generationId, pinStore,
  *   off-cadence swap whose pointed log does not exist), the revoke stage is
  *   skipped and the old generation's delegation dies with the re-point on a
  *   conforming server
+ * @param options.now {number}   epoch milliseconds, read against the old
+ *   delegation's own `expires`
  * @returns {Promise<ClientAnnexGenerationSwap>}   the fresh annex DID and
  *   what the revoke stage did
  */
-async function replaceClientAnnexGeneration({ was, wasServerUrl, accountSpaceId, account, idStore, signer, zcapClient, ladderSeed, clientAnnexSpaceId, oldGeneration }) {
+async function replaceClientAnnexGeneration({ was, wasServerUrl, accountSpaceId, account, idStore, signer, zcapClient, ladderSeed, clientAnnexSpaceId, oldGeneration, now }) {
     const pinStore = idStore.pin.store;
     // 1. Mint + genesis: a fresh generation in the existing auxiliary Space
     // (the typed-Space ensure no-ops on it; the controller argument is only
@@ -312,10 +324,12 @@ async function replaceClientAnnexGeneration({ was, wasServerUrl, accountSpaceId,
             zcapClient,
             wasServerUrl,
             spaceId: accountSpaceId,
-            clientAnnexDid
+            clientAnnexDid,
+            now
         }),
         expectedDid: minted.did,
-        ...(minted.etag !== undefined ? { published: minted } : {})
+        ...(minted.etag !== undefined ? { published: minted } : {}),
+        now
     });
     // 3. Revoke the old generation's delegation, before the re-point (the
     // revocation POST verifies against the currently resolved document, so it
@@ -324,27 +338,48 @@ async function replaceClientAnnexGeneration({ was, wasServerUrl, accountSpaceId,
     const oldDelegation = oldGeneration === undefined
         ? undefined
         : embeddedGenerationDelegation({ doc: oldGeneration.doc });
-    let revoke = 'revoked';
+    let revoke;
+    let revokeError;
     if (oldDelegation !== undefined) {
-        await revokeTreatingAlreadyRevokedAsSuccess({
-            revoke: zcap => was.revoke(zcap),
-            delegation: oldDelegation
-        });
+        try {
+            const outcome = await revokeTreatingAlreadyRevokedAsSuccess({
+                revoke: zcap => was.revoke(zcap),
+                delegation: oldDelegation,
+                now,
+                accountDoc: account.doc
+            });
+            revoke =
+                outcome === 'revoked' || outcome === 'already-revoked'
+                    ? 'revoked'
+                    : outcome;
+        }
+        catch (err) {
+            // Reported, not thrown: the fresh generation already stands, and a
+            // swap that halts here re-mints an orphan at every due login while
+            // the old generation is never superseded. The collect fan-out owns
+            // the retry, keeping the old generation's bytes while it fails.
+            revoke = 'refused';
+            revokeError = err;
+        }
     }
     else {
         revoke = oldGeneration === undefined ? 'log-absent' : 'no-delegation';
     }
     // 4. Re-point the account document at the fresh generation. On a
     // conforming server the pointer equality itself kills the old
-    // generation's delegations; the explicit revoke above covered the
-    // fail-open case.
+    // generation's ladder-signed delegations; the explicit revoke above
+    // covered the fail-open case and the enrolled-client-signed ones.
     await setDelegatedClientsPointer({
         idStore,
         signer,
         clientAnnexDid: minted.did,
         expectedDid: account.did
     });
-    return { clientAnnexDid: minted.did, revoke };
+    return {
+        clientAnnexDid: minted.did,
+        revoke,
+        ...(revoke === 'refused' ? { revokeError } : {})
+    };
 }
 /**
  * AN OFF-CADENCE GENERATION SWAP: replaces the pointed annex generation
@@ -365,16 +400,21 @@ async function replaceClientAnnexGeneration({ was, wasServerUrl, accountSpaceId,
  * the revoke is skipped and reported as `log-absent`, and pointer equality
  * retires the old delegation on a conforming server; a served log that fails
  * verification or falls behind this client's pin throws, since a swap over a
- * log this client cannot trust would skip a revoke it may owe.
+ * log this client cannot trust would skip a revoke it may owe. This is the
+ * arm credential retirement calls, and the standing delegation there is
+ * often signed by a ladder VM a PRIOR retirement already struck: the server
+ * refuses that chain, and the revoke stage reads the refusal against the
+ * caller's `account.doc` and reports `signer-gone`.
  *
  * @param options {object}   see {@link runClientAnnexGc} for the shared
  *   members ({ was, wasServerUrl, accountSpaceId, account, idStore,
  *   updateKeys, zcapClient }); `ladderSeed` here is the SURVIVING
  *   credential's seed the fresh generation is minted from
+ * @param [options.now] {number}   epoch milliseconds, for tests
  * @returns {Promise<ClientAnnexGenerationSwap>}   the fresh annex DID and
  *   what the revoke stage did
  */
-export async function swapClientAnnexGeneration({ was, wasServerUrl, accountSpaceId, account, idStore, signer, zcapClient, ladderSeed }) {
+export async function swapClientAnnexGeneration({ was, wasServerUrl, accountSpaceId, account, idStore, signer, zcapClient, ladderSeed, now = Date.now() }) {
     const pointedDid = delegatedClientsPointer({ doc: account.doc });
     if (pointedDid === undefined) {
         throw new Error('clientAnnex: the account document carries no delegated-clients ' +
@@ -398,17 +438,21 @@ export async function swapClientAnnexGeneration({ was, wasServerUrl, accountSpac
         zcapClient,
         ladderSeed,
         clientAnnexSpaceId: spaceId,
-        ...(oldGeneration !== undefined ? { oldGeneration } : {})
+        ...(oldGeneration !== undefined ? { oldGeneration } : {}),
+        now
     });
 }
 /**
  * Collects one non-pointed generation: revoke its embedded delegation
- * (blind; the server's 400 already-revoked answer reads as success), write
- * the digest from its verified log, delete the collection, then the
- * caller's local cleanup. A generation whose `did.jsonl` does not exist
- * held no visits and is deleted without a digest row; one whose log exists
- * but fails verification is kept and reported (deleting it would destroy
- * the evidence of tampering).
+ * (blind; a genuine `AlreadyRevokedError` reads as success, a delegation
+ * expired beyond the clock-skew margin skips the POST, and a refusal the
+ * helper cannot read as expiry or signer death throws, keeping the
+ * generation and its delegation bytes for the next pass), write the
+ * digest from its verified log, delete the collection, then the caller's
+ * local cleanup. A generation whose `did.jsonl` does not exist held no
+ * visits and is deleted without a digest row; one whose log exists but fails
+ * verification is kept and reported (deleting it would destroy the evidence
+ * of tampering).
  *
  * @param options {object}
  * @param options.was {WasClient}
@@ -418,9 +462,14 @@ export async function swapClientAnnexGeneration({ was, wasServerUrl, accountSpac
  *   pin store
  * @param options.recordDigest {Function}   see {@link runClientAnnexGc}
  * @param [options.onCollected] {Function}   see {@link runClientAnnexGc}
+ * @param options.now {number}   epoch milliseconds, read against the
+ *   embedded delegation's own `expires`
+ * @param options.accountDoc {PublishedKeyDocument}   the locally VERIFIED
+ *   account document, read against the embedded delegation's proof key when
+ *   the server refuses the revocation
  * @returns {Promise<void>}
  */
-async function collectOneGeneration({ was, spaceId, generationId, pinStore, recordDigest, onCollected }) {
+async function collectOneGeneration({ was, spaceId, generationId, pinStore, recordDigest, onCollected, now, accountDoc }) {
     // No expectedDid: an orphan was possibly never pointed from this client.
     // The read runs under the store's own chain-head pin; the slot it
     // establishes is the caller's to drop (`onCollected`) with the generation.
@@ -437,7 +486,9 @@ async function collectOneGeneration({ was, spaceId, generationId, pinStore, reco
         if (oldDelegation !== undefined) {
             await revokeTreatingAlreadyRevokedAsSuccess({
                 revoke: zcap => was.revoke(zcap),
-                delegation: oldDelegation
+                delegation: oldDelegation,
+                now,
+                accountDoc
             });
         }
         // The digest, strictly before the delete: the delete destroys the

package/dist/clientAnnex/gc.js.map

@@ -1 +1 @@
-{"version":3,"file":"gc.js","sourceRoot":"","sources":["../../src/clientAnnex/gc.ts"],"names":[],"mappings":"AAwDA,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,4BAA4B,EAC5B,iCAAiC,EACjC,oBAAoB,EACpB,mCAAmC,EACnC,wBAAwB,EACxB,0BAA0B,EAC1B,qCAAqC,EACrC,0BAA0B,EAC3B,MAAM,UAAU,CAAA;AAQjB;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAE/D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAE5D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAEvD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oCAAoC,CAAC,EACnD,GAAG,EAGJ;IACC,IAAI,aAAiC,CAAA;IACrC,IAAI,QAA4B,CAAA;IAChC,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,uBAAuB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;QAC7D,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YAClD,aAAa,GAAG,KAAK,CAAC,WAAW,CAAA;QACnC,CAAC;QACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,mEAAmE;YACnE,oCAAoC;YACpC,aAAa,GAAG,SAAS,CAAA;QAC3B,CAAC;QACD,QAAQ,GAAG,OAAO,CAAA;IACpB,CAAC;IACD,OAAO,aAAa,CAAA;AACtB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAC/B,GAAG,EACH,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAIjB;IACC,MAAM,aAAa,GAAG,oCAAoC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IACnE,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IAC/C,OAAO,CACL,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC9B,GAAG,GAAG,aAAa,IAAI,uBAAuB,CAC/C,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,EAC9B,GAAG,EACH,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAIjB;IACC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,WAAW,CAAA;IAC/C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACnC,OAAO,CACL,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACzB,GAAG,GAAG,QAAQ,IAAI,yBAAyB,GAAG,yBAAyB,CACxE,CAAA;AACH,CAAC;AAiDD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,GAAG,EACH,YAAY,EACZ,cAAc,EACd,OAAO,EACP,OAAO,EACP,UAAU,EACV,UAAU,EACV,UAAU,EACV,YAAY,EACZ,WAAW,EACX,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAkBjB;IACC,MAAM,UAAU,GAAG,uBAAuB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAChE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;IAC1D,CAAC;IACD,qEAAqE;IACrE,oEAAoE;IACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAA;IAClC,MAAM,EAAE,OAAO,EAAE,GAAG,mBAAmB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAA;IAC5D,MAAM,MAAM,GAAkC,EAAE,CAAA;IAEhD,qEAAqE;IACrE,uEAAuE;IACvE,yEAAyE;IACzE,4DAA4D;IAC5D,IAAI,IAAI,GAA6B,SAAS,CAAA;IAC9C,IAAI,UAAU,GAAG,UAAU,CAAA;IAC3B,IAAI,gBAAgB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QAChD,IAAI;YACF,UAAU,KAAK,SAAS;gBACtB,CAAC,CAAC,gBAAgB;gBAClB,CAAC,CAAC,MAAM,CAAC,KAAK,IAAuC,EAAE;oBACnD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAA;oBACzD,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC;4BAC1C,GAAG;4BACH,OAAO;4BACP,YAAY,EAAE,QAAQ,CAAC,YAAY;4BACnC,QAAQ;4BACR,WAAW,EAAE,UAAU;yBACxB,CAAC,CAAA;wBACF,IACE,GAAG,KAAK,SAAS;4BACjB,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EACvC,CAAC;4BACD,sDAAsD;4BACtD,2DAA2D;4BAC3D,yDAAyD;4BACzD,iBAAiB;4BACjB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAA;wBACvD,CAAC;wBACD,UAAU,GAAG,CACX,MAAM,4BAA4B,CAAC;4BACjC,GAAG;4BACH,YAAY;4BACZ,cAAc;4BACd,OAAO;4BACP,OAAO;4BACP,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE;4BACtC,UAAU;4BACV,UAAU;4BACV,kBAAkB,EAAE,OAAO;4BAC3B,aAAa,EAAE,GAAG;yBACnB,CAAC,CACH,CAAC,cAAc,CAAA;wBAChB,OAAO,UAAU,CAAA;oBACnB,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;wBAChE,OAAO,QAAQ,CAAA;oBACjB,CAAC;gBACH,CAAC,CAAC,EAAE,CAAA;IACZ,CAAC;IAED,uEAAuE;IACvE,2EAA2E;IAC3E,qEAAqE;IACrE,qEAAqE;IACrE,8DAA8D;IAC9D,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;QAC9C,GAAG,EAAE,UAAU;KAChB,CAAC,CAAC,YAAY,CAAA;IACf,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAChC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,KAAK,CAAC,gBAAgB,EAAE,EAAE,CAAC;QAClD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IACE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC;gBACxC,IAAI,CAAC,EAAE,KAAK,mBAAmB,EAC/B,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAa,EAAE,CAAA;IAC9B,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,YAAY,EAAC,EAAE;QAC7B,IAAI,CAAC;YACH,MAAM,oBAAoB,CAAC;gBACzB,GAAG;gBACH,OAAO;gBACP,YAAY;gBACZ,QAAQ;gBACR,YAAY;gBACZ,WAAW;aACZ,CAAC,CAAA;YACF,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC,CAAC,CACH,CAAA;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,CAAA;AAC5D,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,KAAK,UAAU,yBAAyB,CAAC,EACvC,GAAG,EACH,OAAO,EACP,YAAY,EACZ,QAAQ,EACR,WAAW,EAOZ;IACC,OAAO,0BAA0B,CAAC;QAChC,KAAK,EAAE,mBAAmB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;QACpE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,KAAK,UAAU,4BAA4B,CAAC,EAC1C,GAAG,EACH,YAAY,EACZ,cAAc,EACd,OAAO,EACP,OAAO,EACP,MAAM,EACN,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,aAAa,EAYd;IACC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAA;IAClC,wEAAwE;IACxE,wEAAwE;IACxE,uEAAuE;IACvE,wDAAwD;IACxD,MAAM,MAAM,GAAG,MAAM,mCAAmC,CAAC;QACvD,GAAG;QACH,YAAY;QACZ,OAAO,EAAE,kBAAkB;QAC3B,UAAU,EAAE,OAAO,CAAC,GAAG;QACvB,UAAU;QACV,QAAQ;KACT,CAAC,CAAA;IAEF,kEAAkE;IAClE,mEAAmE;IACnE,2EAA2E;IAC3E,qDAAqD;IACrD,EAAE;IACF,qEAAqE;IACrE,4EAA4E;IAC5E,0EAA0E;IAC1E,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,2BAA2B;IAC3B,MAAM,iCAAiC,CAAC;QACtC,KAAK,EAAE,mBAAmB,CAAC;YACzB,GAAG;YACH,OAAO,EAAE,kBAAkB;YAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ;SACT,CAAC;QACF,UAAU;QACV,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,wBAAwB,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CACrD,wBAAwB,CAAC;YACvB,UAAU;YACV,YAAY;YACZ,OAAO,EAAE,cAAc;YACvB,cAAc;SACf,CAAC;QACJ,WAAW,EAAE,MAAM,CAAC,GAAG;QACvB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC,CAAA;IAEF,sEAAsE;IACtE,0EAA0E;IAC1E,oEAAoE;IACpE,gEAAgE;IAChE,MAAM,aAAa,GACjB,aAAa,KAAK,SAAS;QACzB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,4BAA4B,CAAC,EAAE,GAAG,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC,CAAA;IAC9D,IAAI,MAAM,GAAwC,SAAS,CAAA;IAC3D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,qCAAqC,CAAC;YAC1C,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YAChC,UAAU,EAAE,aAAa;SAC1B,CAAC,CAAA;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAA;IACvE,CAAC;IAED,iEAAiE;IACjE,8DAA8D;IAC9D,kEAAkE;IAClE,kBAAkB;IAClB,MAAM,0BAA0B,CAAC;QAC/B,OAAO;QACP,MAAM;QACN,cAAc,EAAE,MAAM,CAAC,GAAG;QAC1B,WAAW,EAAE,OAAO,CAAC,GAAG;KACzB,CAAC,CAAA;IACF,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,CAAA;AAC/C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAC9C,GAAG,EACH,YAAY,EACZ,cAAc,EACd,OAAO,EACP,OAAO,EACP,MAAM,EACN,UAAU,EACV,UAAU,EAUX;IACC,MAAM,UAAU,GAAG,uBAAuB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAChE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,iEAAiE;YAC/D,8CAA8C,CACjD,CAAA;IACH,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,mBAAmB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAA;IAC1E,MAAM,aAAa,GAAG,MAAM,yBAAyB,CAAC;QACpD,GAAG;QACH,OAAO;QACP,YAAY;QACZ,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK;QAC3B,WAAW,EAAE,UAAU;KACxB,CAAC,CAAA;IACF,OAAO,4BAA4B,CAAC;QAClC,GAAG;QACH,YAAY;QACZ,cAAc;QACd,OAAO;QACP,OAAO;QACP,MAAM;QACN,UAAU;QACV,UAAU;QACV,kBAAkB,EAAE,OAAO;QAC3B,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,KAAK,UAAU,oBAAoB,CAAC,EAClC,GAAG,EACH,OAAO,EACP,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,WAAW,EAaZ;IACC,yEAAyE;IACzE,kEAAkE;IAClE,2EAA2E;IAC3E,0EAA0E;IAC1E,iDAAiD;IACjD,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC;QAChD,GAAG;QACH,OAAO;QACP,YAAY;QACZ,QAAQ;KACT,CAAC,CAAA;IAEF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,aAAa,GAAG,4BAA4B,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAA;QAC1E,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,qCAAqC,CAAC;gBAC1C,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;gBAChC,UAAU,EAAE,aAAa;aAC1B,CAAC,CAAA;QACJ,CAAC;QACD,kEAAkE;QAClE,oEAAoE;QACpE,iEAAiE;QACjE,MAAM,YAAY,CAAC;YACjB,YAAY;YACZ,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW;YACzC,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,WAAW;YAC/D,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,MAAM;SACjC,CAAC,CAAA;IACJ,CAAC;IAED,2EAA2E;IAC3E,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAA;IAC1D,MAAM,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,CAAA;AACvC,CAAC"}
+{"version":3,"file":"gc.js","sourceRoot":"","sources":["../../src/clientAnnex/gc.ts"],"names":[],"mappings":"AAwDA,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,4BAA4B,EAC5B,iCAAiC,EACjC,oBAAoB,EACpB,mCAAmC,EACnC,wBAAwB,EACxB,0BAA0B,EAC1B,qCAAqC,EACrC,0BAA0B,EAC3B,MAAM,UAAU,CAAA;AAUjB;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAE/D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAE5D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAEvD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oCAAoC,CAAC,EACnD,GAAG,EAGJ;IACC,IAAI,aAAiC,CAAA;IACrC,IAAI,QAA4B,CAAA;IAChC,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,uBAAuB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;QAC7D,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YAClD,aAAa,GAAG,KAAK,CAAC,WAAW,CAAA;QACnC,CAAC;QACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,mEAAmE;YACnE,oCAAoC;YACpC,aAAa,GAAG,SAAS,CAAA;QAC3B,CAAC;QACD,QAAQ,GAAG,OAAO,CAAA;IACpB,CAAC;IACD,OAAO,aAAa,CAAA;AACtB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAC/B,GAAG,EACH,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAIjB;IACC,MAAM,aAAa,GAAG,oCAAoC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IACnE,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IAC/C,OAAO,CACL,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC9B,GAAG,GAAG,aAAa,IAAI,uBAAuB,CAC/C,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,EAC9B,GAAG,EACH,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAIjB;IACC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,WAAW,CAAA;IAC/C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACnC,OAAO,CACL,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACzB,GAAG,GAAG,QAAQ,IAAI,yBAAyB,GAAG,yBAAyB,CACxE,CAAA;AACH,CAAC;AAqED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,GAAG,EACH,YAAY,EACZ,cAAc,EACd,OAAO,EACP,OAAO,EACP,UAAU,EACV,UAAU,EACV,UAAU,EACV,YAAY,EACZ,WAAW,EACX,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAkBjB;IACC,MAAM,UAAU,GAAG,uBAAuB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAChE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;IAC1D,CAAC;IACD,qEAAqE;IACrE,oEAAoE;IACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAA;IAClC,MAAM,EAAE,OAAO,EAAE,GAAG,mBAAmB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAA;IAC5D,MAAM,MAAM,GAAkC,EAAE,CAAA;IAEhD,qEAAqE;IACrE,uEAAuE;IACvE,yEAAyE;IACzE,4DAA4D;IAC5D,IAAI,IAAI,GAA6B,SAAS,CAAA;IAC9C,IAAI,UAAU,GAAG,UAAU,CAAA;IAC3B,IAAI,gBAAgB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QAChD,IAAI;YACF,UAAU,KAAK,SAAS;gBACtB,CAAC,CAAC,gBAAgB;gBAClB,CAAC,CAAC,MAAM,CAAC,KAAK,IAAuC,EAAE;oBACnD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAA;oBACzD,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC;4BAC1C,GAAG;4BACH,OAAO;4BACP,YAAY,EAAE,QAAQ,CAAC,YAAY;4BACnC,QAAQ;4BACR,WAAW,EAAE,UAAU;yBACxB,CAAC,CAAA;wBACF,IACE,GAAG,KAAK,SAAS;4BACjB,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EACvC,CAAC;4BACD,sDAAsD;4BACtD,2DAA2D;4BAC3D,yDAAyD;4BACzD,iBAAiB;4BACjB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAA;wBACvD,CAAC;wBACD,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC;4BACjD,GAAG;4BACH,YAAY;4BACZ,cAAc;4BACd,OAAO;4BACP,OAAO;4BACP,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE;4BACtC,UAAU;4BACV,UAAU;4BACV,kBAAkB,EAAE,OAAO;4BAC3B,aAAa,EAAE,GAAG;4BAClB,GAAG;yBACJ,CAAC,CAAA;wBACF,oDAAoD;wBACpD,0DAA0D;wBAC1D,8DAA8D;wBAC9D,wDAAwD;wBACxD,UAAU,GAAG,OAAO,CAAC,cAAc,CAAA;wBACnC,OAAO,UAAU,CAAA;oBACnB,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;wBAChE,OAAO,QAAQ,CAAA;oBACjB,CAAC;gBACH,CAAC,CAAC,EAAE,CAAA;IACZ,CAAC;IAED,uEAAuE;IACvE,2EAA2E;IAC3E,qEAAqE;IACrE,qEAAqE;IACrE,8DAA8D;IAC9D,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;QAC9C,GAAG,EAAE,UAAU;KAChB,CAAC,CAAC,YAAY,CAAA;IACf,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAChC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,KAAK,CAAC,gBAAgB,EAAE,EAAE,CAAC;QAClD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IACE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC;gBACxC,IAAI,CAAC,EAAE,KAAK,mBAAmB,EAC/B,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAa,EAAE,CAAA;IAC9B,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,YAAY,EAAC,EAAE;QAC7B,IAAI,CAAC;YACH,MAAM,oBAAoB,CAAC;gBACzB,GAAG;gBACH,OAAO;gBACP,YAAY;gBACZ,QAAQ;gBACR,YAAY;gBACZ,WAAW;gBACX,GAAG;gBACH,UAAU,EAAE,OAAO,CAAC,GAAG;aACxB,CAAC,CAAA;YACF,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC,CAAC,CACH,CAAA;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,CAAA;AAC5D,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,KAAK,UAAU,yBAAyB,CAAC,EACvC,GAAG,EACH,OAAO,EACP,YAAY,EACZ,QAAQ,EACR,WAAW,EAOZ;IACC,OAAO,0BAA0B,CAAC;QAChC,KAAK,EAAE,mBAAmB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;QACpE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,KAAK,UAAU,4BAA4B,CAAC,EAC1C,GAAG,EACH,YAAY,EACZ,cAAc,EACd,OAAO,EACP,OAAO,EACP,MAAM,EACN,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,GAAG,EAaJ;IACC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAA;IAClC,wEAAwE;IACxE,wEAAwE;IACxE,uEAAuE;IACvE,wDAAwD;IACxD,MAAM,MAAM,GAAG,MAAM,mCAAmC,CAAC;QACvD,GAAG;QACH,YAAY;QACZ,OAAO,EAAE,kBAAkB;QAC3B,UAAU,EAAE,OAAO,CAAC,GAAG;QACvB,UAAU;QACV,QAAQ;KACT,CAAC,CAAA;IAEF,kEAAkE;IAClE,mEAAmE;IACnE,2EAA2E;IAC3E,qDAAqD;IACrD,EAAE;IACF,qEAAqE;IACrE,4EAA4E;IAC5E,0EAA0E;IAC1E,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,2BAA2B;IAC3B,MAAM,iCAAiC,CAAC;QACtC,KAAK,EAAE,mBAAmB,CAAC;YACzB,GAAG;YACH,OAAO,EAAE,kBAAkB;YAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ;SACT,CAAC;QACF,UAAU;QACV,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,wBAAwB,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CACrD,wBAAwB,CAAC;YACvB,UAAU;YACV,YAAY;YACZ,OAAO,EAAE,cAAc;YACvB,cAAc;YACd,GAAG;SACJ,CAAC;QACJ,WAAW,EAAE,MAAM,CAAC,GAAG;QACvB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG;KACJ,CAAC,CAAA;IAEF,sEAAsE;IACtE,0EAA0E;IAC1E,oEAAoE;IACpE,gEAAgE;IAChE,MAAM,aAAa,GACjB,aAAa,KAAK,SAAS;QACzB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,4BAA4B,CAAC,EAAE,GAAG,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC,CAAA;IAC9D,IAAI,MAA2C,CAAA;IAC/C,IAAI,WAAoB,CAAA;IACxB,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,qCAAqC,CAAC;gBAC1D,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;gBAChC,UAAU,EAAE,aAAa;gBACzB,GAAG;gBACH,UAAU,EAAE,OAAO,CAAC,GAAG;aACxB,CAAC,CAAA;YACF,MAAM;gBACJ,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,iBAAiB;oBACpD,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,OAAO,CAAA;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mEAAmE;YACnE,mEAAmE;YACnE,mEAAmE;YACnE,gEAAgE;YAChE,MAAM,GAAG,SAAS,CAAA;YAClB,WAAW,GAAG,GAAG,CAAA;QACnB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAA;IACvE,CAAC;IAED,iEAAiE;IACjE,8DAA8D;IAC9D,oEAAoE;IACpE,kEAAkE;IAClE,MAAM,0BAA0B,CAAC;QAC/B,OAAO;QACP,MAAM;QACN,cAAc,EAAE,MAAM,CAAC,GAAG;QAC1B,WAAW,EAAE,OAAO,CAAC,GAAG;KACzB,CAAC,CAAA;IACF,OAAO;QACL,cAAc,EAAE,MAAM,CAAC,GAAG;QAC1B,MAAM;QACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjD,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAC9C,GAAG,EACH,YAAY,EACZ,cAAc,EACd,OAAO,EACP,OAAO,EACP,MAAM,EACN,UAAU,EACV,UAAU,EACV,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAWjB;IACC,MAAM,UAAU,GAAG,uBAAuB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAChE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,iEAAiE;YAC/D,8CAA8C,CACjD,CAAA;IACH,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,mBAAmB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAA;IAC1E,MAAM,aAAa,GAAG,MAAM,yBAAyB,CAAC;QACpD,GAAG;QACH,OAAO;QACP,YAAY;QACZ,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK;QAC3B,WAAW,EAAE,UAAU;KACxB,CAAC,CAAA;IACF,OAAO,4BAA4B,CAAC;QAClC,GAAG;QACH,YAAY;QACZ,cAAc;QACd,OAAO;QACP,OAAO;QACP,MAAM;QACN,UAAU;QACV,UAAU;QACV,kBAAkB,EAAE,OAAO;QAC3B,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG;KACJ,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,KAAK,UAAU,oBAAoB,CAAC,EAClC,GAAG,EACH,OAAO,EACP,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,GAAG,EACH,UAAU,EAeX;IACC,yEAAyE;IACzE,kEAAkE;IAClE,2EAA2E;IAC3E,0EAA0E;IAC1E,iDAAiD;IACjD,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC;QAChD,GAAG;QACH,OAAO;QACP,YAAY;QACZ,QAAQ;KACT,CAAC,CAAA;IAEF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,aAAa,GAAG,4BAA4B,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAA;QAC1E,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,qCAAqC,CAAC;gBAC1C,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;gBAChC,UAAU,EAAE,aAAa;gBACzB,GAAG;gBACH,UAAU;aACX,CAAC,CAAA;QACJ,CAAC;QACD,kEAAkE;QAClE,oEAAoE;QACpE,iEAAiE;QACjE,MAAM,YAAY,CAAC;YACjB,YAAY;YACZ,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW;YACzC,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,WAAW;YAC/D,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,MAAM;SACjC,CAAC,CAAA;IACJ,CAAC;IAED,2EAA2E;IAC3E,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAA;IAC1D,MAAM,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,CAAA;AACvC,CAAC"}

package/dist/clientAnnex/grantRevocation.d.ts

@@ -0,0 +1,137 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * Revoking a recorded app or agent grant, and reading the server's answer
+ * against the verified account document: the connected-apps counterpart of
+ * {@link revokeTreatingAlreadyRevokedAsSuccess}, with the same policy. The
+ * one local skip is a grant expired beyond the revocation clock-skew margin.
+ * Everything else is POSTed, since a revocation the server accepts is the
+ * only proof the grant is off the account, and a plain refusal is then
+ * classified on what the client can check.
+ *
+ * What the client can check differs by how the grant was delegated. A grant
+ * delegated straight under the Space root is signed by an enrolled client's
+ * key, and dies with that client's document entry (the current-key-set
+ * rule): the same reading `deriveGrantSignerState` (`/clients`) marks a
+ * listing row with, over this one grant. A grant a transient session minted
+ * is signed by a client-annex per-visit key the account document never
+ * lists, and chains under the generation delegation embedded as the last
+ * link of its `proof.capabilityChain`; it dies when that delegation's signer
+ * leaves the document, or when the account document's delegated-clients
+ * pointer moves to another generation.
+ */
+import type { IDelegatedZcap, IZcap } from '@interop/data-integrity-core';
+import { type PublishedKeyDocument } from '../webvh/index.js';
+/**
+ * What a recorded grant is read against, off the session's verified account
+ * document: the account DID an enrolled client's promoted verification-method
+ * id is under, the enrolled clients' signing-key multibases (the two as
+ * `deriveGrantSignerState` takes them), the verified document itself (what an
+ * embedded generation delegation's proof key is checked against), and the
+ * annex DID the document's delegated-clients pointer currently names, absent
+ * when it names none. The first two settle the orphaned reading; the last two
+ * settle whether an annex-signed grant's generation delegation still stands.
+ */
+export interface AccountSignerCheck {
+    accountDid: string;
+    currentSigningKeys: Set<string>;
+    doc: PublishedKeyDocument;
+    clientAnnexDid?: string;
+}
+/**
+ * How a server refusal of a grant's revocation is read, when the client can
+ * read it: `expired` (`now` is inside the skew band around the grant's own
+ * `expires`, or past it, {@link delegationAtExpiry}), `orphaned` (a grant
+ * delegated straight under the Space root whose signer has left the verified
+ * document), `signer-gone` (a grant chained under an embedded parent
+ * delegation whose own proof key has checkably left the verified document
+ * under `capabilityDelegation`, {@link delegationSignerGone}, which catches
+ * a generation delegation replaced within its generation as well as one
+ * struck with its signer), or `generation-swapped` (a parent that is provably
+ * a generation delegation, its `controller` parsing as an annex DID, naming
+ * a generation other than the one the account document currently points
+ * at).
+ */
+export type GrantRevocationRefusal = 'expired' | 'orphaned' | 'signer-gone' | 'generation-swapped';
+/**
+ * What {@link revokeRecordedGrant} did: `revoked` (the POST landed),
+ * `already-revoked` (the server's genuine `AlreadyRevokedError`), `expired`
+ * with no POST sent (the grant is past its `expires` by more than the skew
+ * margin), or one of the {@link GrantRevocationRefusal} readings of a plain
+ * refusal.
+ */
+export type GrantRevocationOutcome = 'revoked' | 'already-revoked' | GrantRevocationRefusal;
+/**
+ * Reads a plain server refusal of a recorded grant's revocation against the
+ * verified account document, and says why the chain no longer verifies when
+ * the client can tell. Without a `signerCheck` only the expiry reading
+ * applies. Every uncheckable case reads as undefined, so the refusal is
+ * rethrown rather than counted: a parent whose proof key is absent or
+ * fragment-less, a parent of some other shape, a document that currently
+ * points at no generation, and a legacy grant that recorded no signer.
+ *
+ * The chain reading walks `proof.capabilityChain`, where the delegation
+ * suite writes it: a grant a transient session minted embeds its parent, the
+ * generation delegation, as the chain's last link; a grant delegated under
+ * the Space root carries only the root's id string there.
+ *
+ * @param options {object}
+ * @param options.zcap {IZcap}   the recorded full capability
+ * @param [options.signerCheck] {AccountSignerCheck}
+ * @param options.now {number}   epoch milliseconds
+ * @returns {GrantRevocationRefusal | undefined}   undefined when the client
+ *   cannot say why the server refused
+ */
+export declare function classifyGrantRevocationRefusal({ zcap, signerCheck, now }: {
+    zcap: IZcap;
+    signerCheck?: AccountSignerCheck;
+    now: number;
+}): GrantRevocationRefusal | undefined;
+/**
+ * Submits the revocation of one recorded grant and classifies the server's
+ * answer, the policy {@link revokeTreatingAlreadyRevokedAsSuccess} states
+ * for a generation delegation. The one local skip is a grant whose own
+ * `expires` is past by more than the revocation clock-skew margin
+ * ({@link delegationExpired}). Everything else is POSTed, whatever the
+ * caller's document says about the signer: the document a login read is a
+ * snapshot. was-client's `AlreadyRevokedError` is success. A plain
+ * `ValidationError` is read through {@link classifyGrantRevocationRefusal},
+ * and rethrown when the client cannot say why. Every other failure is
+ * rethrown. Errors are matched on `err.name`, since error classes do not
+ * survive crossing package copies.
+ *
+ * @param options {object}
+ * @param options.revoke {Function}   `(zcap) => Promise<void>` -- POSTs the
+ *   revocation (`was.revoke`)
+ * @param options.zcap {IZcap}   the recorded full capability
+ * @param [options.signerCheck] {AccountSignerCheck}   read against the grant
+ *   when the server refuses the POST
+ * @param options.now {number}   epoch milliseconds
+ * @returns {Promise<GrantRevocationOutcome>}
+ */
+export declare function revokeRecordedGrant({ revoke, zcap, signerCheck, now }: {
+    revoke: (zcap: IDelegatedZcap) => Promise<void>;
+    zcap: IZcap;
+    signerCheck?: AccountSignerCheck;
+    now: number;
+}): Promise<GrantRevocationOutcome>;
+/**
+ * The parent capability a delegation embeds as the last link of its
+ * `proof.capabilityChain`, when the chain embeds one (an object rather than
+ * an id string). A delegated zcap carries exactly one `capabilityDelegation`
+ * proof, but the wire shape allows an array; the first proof is read.
+ *
+ * @param zcap {IZcap}
+ * @returns {IZcap | undefined}
+ */
+export declare function embeddedParentCapability(zcap: IZcap): IZcap | undefined;
+/**
+ * Whether a DID string is a client annex did:webvh, by the same parse
+ * {@link clientAnnexDidParts} applies.
+ *
+ * @param did {string}
+ * @returns {boolean}
+ */
+export declare function isClientAnnexDid(did: string): boolean;
+//# sourceMappingURL=grantRevocation.d.ts.map

package/dist/clientAnnex/grantRevocation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grantRevocation.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/grantRevocation.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AAEzE,OAAO,EAKL,KAAK,oBAAoB,EAC1B,MAAM,mBAAmB,CAAA;AAG1B;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAC/B,GAAG,EAAE,oBAAoB,CAAA;IACzB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,sBAAsB,GAChC,SAAS,GAAG,UAAU,GAAG,aAAa,GAAG,oBAAoB,CAAA;AAE/D;;;;;;GAMG;AACH,MAAM,MAAM,sBAAsB,GAChC,SAAS,GAAG,iBAAiB,GAAG,sBAAsB,CAAA;AAExD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,8BAA8B,CAAC,EAC7C,IAAI,EACJ,WAAW,EACX,GAAG,EACJ,EAAE;IACD,IAAI,EAAE,KAAK,CAAA;IACX,WAAW,CAAC,EAAE,kBAAkB,CAAA;IAChC,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,sBAAsB,GAAG,SAAS,CA6BrC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,MAAM,EACN,IAAI,EACJ,WAAW,EACX,GAAG,EACJ,EAAE;IACD,MAAM,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/C,IAAI,EAAE,KAAK,CAAA;IACX,WAAW,CAAC,EAAE,kBAAkB,CAAA;IAChC,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAoBlC;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,CAYvE;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOrD"}

package/dist/clientAnnex/grantRevocation.js

@@ -0,0 +1,135 @@
+import { deriveGrantSignerState } from '../clients/grantState.js';
+import { delegationAtExpiry, delegationExpired, delegationProofKeyId, delegationSignerGone } from '../webvh/index.js';
+import { clientAnnexDidParts } from './log.js';
+/**
+ * Reads a plain server refusal of a recorded grant's revocation against the
+ * verified account document, and says why the chain no longer verifies when
+ * the client can tell. Without a `signerCheck` only the expiry reading
+ * applies. Every uncheckable case reads as undefined, so the refusal is
+ * rethrown rather than counted: a parent whose proof key is absent or
+ * fragment-less, a parent of some other shape, a document that currently
+ * points at no generation, and a legacy grant that recorded no signer.
+ *
+ * The chain reading walks `proof.capabilityChain`, where the delegation
+ * suite writes it: a grant a transient session minted embeds its parent, the
+ * generation delegation, as the chain's last link; a grant delegated under
+ * the Space root carries only the root's id string there.
+ *
+ * @param options {object}
+ * @param options.zcap {IZcap}   the recorded full capability
+ * @param [options.signerCheck] {AccountSignerCheck}
+ * @param options.now {number}   epoch milliseconds
+ * @returns {GrantRevocationRefusal | undefined}   undefined when the client
+ *   cannot say why the server refused
+ */
+export function classifyGrantRevocationRefusal({ zcap, signerCheck, now }) {
+    if (delegationAtExpiry({ zcap, now })) {
+        return 'expired';
+    }
+    if (!signerCheck) {
+        return undefined;
+    }
+    const parent = embeddedParentCapability(zcap);
+    if (parent === undefined) {
+        const state = deriveGrantSignerState({
+            signerKeyIds: [delegationProofKeyId(zcap)],
+            accountDid: signerCheck.accountDid,
+            currentSigningKeys: signerCheck.currentSigningKeys
+        });
+        return state === 'orphaned' ? 'orphaned' : undefined;
+    }
+    if (delegationSignerGone({ zcap: parent, doc: signerCheck.doc })) {
+        return 'signer-gone';
+    }
+    const { controller } = parent;
+    if (signerCheck.clientAnnexDid !== undefined &&
+        typeof controller === 'string' &&
+        isClientAnnexDid(controller) &&
+        controller !== signerCheck.clientAnnexDid) {
+        return 'generation-swapped';
+    }
+    return undefined;
+}
+/**
+ * Submits the revocation of one recorded grant and classifies the server's
+ * answer, the policy {@link revokeTreatingAlreadyRevokedAsSuccess} states
+ * for a generation delegation. The one local skip is a grant whose own
+ * `expires` is past by more than the revocation clock-skew margin
+ * ({@link delegationExpired}). Everything else is POSTed, whatever the
+ * caller's document says about the signer: the document a login read is a
+ * snapshot. was-client's `AlreadyRevokedError` is success. A plain
+ * `ValidationError` is read through {@link classifyGrantRevocationRefusal},
+ * and rethrown when the client cannot say why. Every other failure is
+ * rethrown. Errors are matched on `err.name`, since error classes do not
+ * survive crossing package copies.
+ *
+ * @param options {object}
+ * @param options.revoke {Function}   `(zcap) => Promise<void>` -- POSTs the
+ *   revocation (`was.revoke`)
+ * @param options.zcap {IZcap}   the recorded full capability
+ * @param [options.signerCheck] {AccountSignerCheck}   read against the grant
+ *   when the server refuses the POST
+ * @param options.now {number}   epoch milliseconds
+ * @returns {Promise<GrantRevocationOutcome>}
+ */
+export async function revokeRecordedGrant({ revoke, zcap, signerCheck, now }) {
+    if (delegationExpired({ zcap, now })) {
+        return 'expired';
+    }
+    try {
+        await revoke(zcap);
+    }
+    catch (err) {
+        const name = err?.name;
+        if (name === 'AlreadyRevokedError') {
+            return 'already-revoked';
+        }
+        if (name === 'ValidationError') {
+            const refusal = classifyGrantRevocationRefusal({ zcap, signerCheck, now });
+            if (refusal !== undefined) {
+                return refusal;
+            }
+        }
+        throw err;
+    }
+    return 'revoked';
+}
+/**
+ * The parent capability a delegation embeds as the last link of its
+ * `proof.capabilityChain`, when the chain embeds one (an object rather than
+ * an id string). A delegated zcap carries exactly one `capabilityDelegation`
+ * proof, but the wire shape allows an array; the first proof is read.
+ *
+ * @param zcap {IZcap}
+ * @returns {IZcap | undefined}
+ */
+export function embeddedParentCapability(zcap) {
+    const { proof } = zcap;
+    const single = Array.isArray(proof) ? proof[0] : proof;
+    if (!single || typeof single !== 'object') {
+        return undefined;
+    }
+    const chain = single.capabilityChain;
+    if (!Array.isArray(chain) || chain.length === 0) {
+        return undefined;
+    }
+    const last = chain[chain.length - 1];
+    return last !== null && typeof last === 'object' ? last : undefined;
+}
+/**
+ * Whether a DID string is a client annex did:webvh, by the same parse
+ * {@link clientAnnexDidParts} applies.
+ *
+ * @param did {string}
+ * @returns {boolean}
+ */
+export function isClientAnnexDid(did) {
+    try {
+        clientAnnexDidParts({ did });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=grantRevocation.js.map

package/dist/clientAnnex/grantRevocation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grantRevocation.js","sourceRoot":"","sources":["../../src/clientAnnex/grantRevocation.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAA;AACjE,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EAErB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AA8C9C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,8BAA8B,CAAC,EAC7C,IAAI,EACJ,WAAW,EACX,GAAG,EAKJ;IACC,IAAI,kBAAkB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACtC,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAA;IAC7C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,sBAAsB,CAAC;YACnC,YAAY,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC1C,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;SACnD,CAAC,CAAA;QACF,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;IACtD,CAAC;IACD,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QACjE,OAAO,aAAa,CAAA;IACtB,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAkC,CAAA;IACzD,IACE,WAAW,CAAC,cAAc,KAAK,SAAS;QACxC,OAAO,UAAU,KAAK,QAAQ;QAC9B,gBAAgB,CAAC,UAAU,CAAC;QAC5B,UAAU,KAAK,WAAW,CAAC,cAAc,EACzC,CAAC;QACD,OAAO,oBAAoB,CAAA;IAC7B,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EACxC,MAAM,EACN,IAAI,EACJ,WAAW,EACX,GAAG,EAMJ;IACC,IAAI,iBAAiB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACrC,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAiC,CAAC,CAAA;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAAgC,EAAE,IAAI,CAAA;QACpD,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACnC,OAAO,iBAAiB,CAAA;QAC1B,CAAC;QACD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,8BAA8B,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,OAAO,CAAA;YAChB,CAAC;QACH,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAW;IAClD,MAAM,EAAE,KAAK,EAAE,GAAG,IAA2B,CAAA;IAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACtD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,KAAK,GAAI,MAAwC,CAAC,eAAe,CAAA;IACvE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,IAAI,GAAY,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC7C,OAAO,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAc,CAAC,CAAC,CAAC,SAAS,CAAA;AAChF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,CAAC;QACH,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5B,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC"}

package/dist/clientAnnex/index.d.ts

@@ -49,7 +49,9 @@
 export { attributeLadderInventory, attributeLadderRung, clientAnnexRung, clientAnnexRungSeed, generateLadderSeed, LADDER_MAX_SCAN, LadderAttributionError, ladderRung, ladderRungSeed, ladderVmKeyMultibase, ladderVmSeed } from './ladder.js';
 export type { LadderRung, LadderRungState, LadderStandingInventory } from './ladder.js';
 export { assertGenerationId, clampGrantExpires, CLIENT_ANNEX_SPACE_TYPE, clientAnnexDidParts, clientAnnexLogStore, ClientAnnexRungUncommittedError, commitClientAnnexRung, createClientAnnexLog, DELEGATED_CLIENTS_DELEGATION_ACTIONS, DELEGATED_CLIENTS_DELEGATION_TTL_MS, DELEGATED_CLIENTS_SERVICE_TYPE, delegatedClientsDelegationMinter, delegatedClientsDelegationSpaceId, delegatedClientsPointer, delegatedClientsServiceEntry, delegatedClientsSpaceHistory, embeddedGenerationDelegation, enrollClientAnnexTransientClient, enrollTransientClient, ensureClientAnnexSpace, ensureGenerationDelegationCurrent, GENERATION_DELEGATION_ACTIONS, GENERATION_DELEGATION_SERVICE_TYPE, GENERATION_DELEGATION_TTL_MS, GENERATION_ID_PREFIX, generationDelegationHistory, generationDelegationServiceEntry, mintClientAnnexGeneration, mintCredentialClientAnnexGeneration, mintDelegatedClientsDelegation, mintGenerationDelegation, mintGenerationId, mintPointedClientAnnexGeneration, readClientAnnexLogOrAbsent, retireClientAnnexRung, revokeTreatingAlreadyRevokedAsSuccess, servicesPointedAtClientAnnex, setDelegatedClientsPointer, setDelegatedClientsPointerOnce } from './log.js';
-export type { ClientAnnexWriteStore, PointerEntryOutcome } from './log.js';
+export type { ClientAnnexWriteStore, PointerEntryOutcome, RevokeGenerationDelegationOutcome } from './log.js';
+export { classifyGrantRevocationRefusal, embeddedParentCapability, isClientAnnexDid, revokeRecordedGrant } from './grantRevocation.js';
+export type { AccountSignerCheck, GrantRevocationOutcome, GrantRevocationRefusal } from './grantRevocation.js';
 export { clientAnnexGcDue, delegatedClientsPointerEstablishedAt, GENERATION_GC_PERIOD_MS, GENERATION_QUIET_BOUND_MS, GENERATION_QUIET_GRACE_MS, generationQuiet, runClientAnnexGc, swapClientAnnexGeneration } from './gc.js';
 export type { ClientAnnexGcReport, ClientAnnexGcSwapOutcome, ClientAnnexGenerationSwap } from './gc.js';
 export { ladderVmAgent, ladderVmSigners, ladderVmZcapClient } from './zcap.js';
@@ -66,7 +68,7 @@ export { ensureRosterDeliveredEpochs } from './rosterDeliveredEpochs.js';
 export type { RosterDeliveredEpochsResult } from './rosterDeliveredEpochs.js';
 export { mendCredentialAnchoredAccount } from './mend.js';
 export type { CredentialAnchoredAccountCore, CredentialAnchoredMendReport, CredentialAnchoredRegistryContext } from './mend.js';
-export { BuiltOnHeadNotReachedError, createLadderAnchoredAccountLog, ensureLadderAnchoredDidWebvh, forgetWebvhClient, installLadderVmWebvh, isSoleEnrolledClient, ladderSignedAccountEntry, LastEnrolledClientForgetError, revealLadderRungWebvh, selfEnrollWebvhClient, strikeLadderVmWebvh } from './ladderAnchored.js';
+export { BuiltOnHeadNotReachedError, createLadderAnchoredAccountLog, ensureLadderAnchoredDidWebvh, forgetWebvhClient, installLadderVmWebvh, ladderSignedAccountEntry, LastEnrolledClientForgetError, revealLadderRungWebvh, selfEnrollWebvhClient, strikeLadderVmWebvh } from './ladderAnchored.js';
 export type { LadderSignedEntry, LadderSignedEntryOutcome } from './ladderAnchored.js';
 export { signAccountEntry } from '../webvh/accountEntry.js';
 export type { AccountEntryFields, AccountEntryOutcome, AccountLogSigner, AccountLogStore } from '../webvh/accountEntry.js';

package/dist/clientAnnex/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACb,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,UAAU,EACV,eAAe,EACf,uBAAuB,EACxB,MAAM,aAAa,CAAA;AAEpB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,+BAA+B,EAC/B,qBAAqB,EACrB,oBAAoB,EACpB,oCAAoC,EACpC,mCAAmC,EACnC,8BAA8B,EAC9B,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,4BAA4B,EAC5B,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,kCAAkC,EAClC,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,gCAAgC,EAChC,0BAA0B,EAC1B,qBAAqB,EACrB,qCAAqC,EACrC,4BAA4B,EAC5B,0BAA0B,EAC1B,8BAA8B,EAC/B,MAAM,UAAU,CAAA;AACjB,YAAY,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AAE1E,OAAO,EACL,gBAAgB,EAChB,oCAAoC,EACpC,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAChB,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAEhB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAE9E,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACxB,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAK/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAEnE,OAAO,EACL,yBAAyB,EACzB,qCAAqC,EACrC,qCAAqC,EACrC,sCAAsC,EACtC,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,WAAW,CAAA;AAClB,YAAY,EACV,kCAAkC,EAClC,sCAAsC,EACvC,MAAM,WAAW,CAAA;AAElB,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,kCAAkC,EAClC,8BAA8B,EAC/B,MAAM,gBAAgB,CAAA;AACvB,YAAY,EACV,gCAAgC,EAChC,4BAA4B,EAC5B,+BAA+B,EAC/B,gCAAgC,EACjC,MAAM,gBAAgB,CAAA;AAKvB,OAAO,EACL,0BAA0B,EAC1B,+CAA+C,EAC/C,wCAAwC,EACxC,kCAAkC,EAClC,wBAAwB,EACzB,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,oCAAoC,EACpC,wCAAwC,EACxC,8BAA8B,EAC/B,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AACxE,YAAY,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AAE7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAA;AACzD,YAAY,EACV,6BAA6B,EAC7B,4BAA4B,EAC5B,iCAAiC,EAClC,MAAM,WAAW,CAAA;AAElB,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,4BAA4B,EAC5B,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EACxB,6BAA6B,EAC7B,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,qBAAqB,CAAA;AAK5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAC3D,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EAChB,MAAM,0BAA0B,CAAA;AAEjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAEtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,YAAY,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAA;AAE7D,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACtB,MAAM,iBAAiB,CAAA;AACxB,YAAY,EACV,8BAA8B,EAC9B,8BAA8B,EAC/B,MAAM,iBAAiB,CAAA;AAExB,OAAO,EACL,sCAAsC,EACtC,mCAAmC,EACpC,MAAM,gCAAgC,CAAA;AAEvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAOxE,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,sBAAsB,CAAA;AAO7B,YAAY,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAM7D,YAAY,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACb,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,UAAU,EACV,eAAe,EACf,uBAAuB,EACxB,MAAM,aAAa,CAAA;AAEpB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,+BAA+B,EAC/B,qBAAqB,EACrB,oBAAoB,EACpB,oCAAoC,EACpC,mCAAmC,EACnC,8BAA8B,EAC9B,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,4BAA4B,EAC5B,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,kCAAkC,EAClC,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,gCAAgC,EAChC,0BAA0B,EAC1B,qBAAqB,EACrB,qCAAqC,EACrC,4BAA4B,EAC5B,0BAA0B,EAC1B,8BAA8B,EAC/B,MAAM,UAAU,CAAA;AACjB,YAAY,EACV,qBAAqB,EACrB,mBAAmB,EACnB,iCAAiC,EAClC,MAAM,UAAU,CAAA;AAEjB,OAAO,EACL,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EACV,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACvB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EACL,gBAAgB,EAChB,oCAAoC,EACpC,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAChB,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAEhB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAE9E,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACxB,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAK/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAEnE,OAAO,EACL,yBAAyB,EACzB,qCAAqC,EACrC,qCAAqC,EACrC,sCAAsC,EACtC,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,WAAW,CAAA;AAClB,YAAY,EACV,kCAAkC,EAClC,sCAAsC,EACvC,MAAM,WAAW,CAAA;AAElB,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,kCAAkC,EAClC,8BAA8B,EAC/B,MAAM,gBAAgB,CAAA;AACvB,YAAY,EACV,gCAAgC,EAChC,4BAA4B,EAC5B,+BAA+B,EAC/B,gCAAgC,EACjC,MAAM,gBAAgB,CAAA;AAKvB,OAAO,EACL,0BAA0B,EAC1B,+CAA+C,EAC/C,wCAAwC,EACxC,kCAAkC,EAClC,wBAAwB,EACzB,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,oCAAoC,EACpC,wCAAwC,EACxC,8BAA8B,EAC/B,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AACxE,YAAY,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AAE7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAA;AACzD,YAAY,EACV,6BAA6B,EAC7B,4BAA4B,EAC5B,iCAAiC,EAClC,MAAM,WAAW,CAAA;AAElB,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,4BAA4B,EAC5B,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,6BAA6B,EAC7B,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,qBAAqB,CAAA;AAK5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAC3D,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EAChB,MAAM,0BAA0B,CAAA;AAEjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAEtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,YAAY,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAA;AAE7D,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACtB,MAAM,iBAAiB,CAAA;AACxB,YAAY,EACV,8BAA8B,EAC9B,8BAA8B,EAC/B,MAAM,iBAAiB,CAAA;AAExB,OAAO,EACL,sCAAsC,EACtC,mCAAmC,EACpC,MAAM,gCAAgC,CAAA;AAEvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAOxE,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,sBAAsB,CAAA;AAO7B,YAAY,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAM7D,YAAY,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAA"}

package/dist/clientAnnex/index.js

@@ -48,6 +48,7 @@
  */
 export { attributeLadderInventory, attributeLadderRung, clientAnnexRung, clientAnnexRungSeed, generateLadderSeed, LADDER_MAX_SCAN, LadderAttributionError, ladderRung, ladderRungSeed, ladderVmKeyMultibase, ladderVmSeed } from './ladder.js';
 export { assertGenerationId, clampGrantExpires, CLIENT_ANNEX_SPACE_TYPE, clientAnnexDidParts, clientAnnexLogStore, ClientAnnexRungUncommittedError, commitClientAnnexRung, createClientAnnexLog, DELEGATED_CLIENTS_DELEGATION_ACTIONS, DELEGATED_CLIENTS_DELEGATION_TTL_MS, DELEGATED_CLIENTS_SERVICE_TYPE, delegatedClientsDelegationMinter, delegatedClientsDelegationSpaceId, delegatedClientsPointer, delegatedClientsServiceEntry, delegatedClientsSpaceHistory, embeddedGenerationDelegation, enrollClientAnnexTransientClient, enrollTransientClient, ensureClientAnnexSpace, ensureGenerationDelegationCurrent, GENERATION_DELEGATION_ACTIONS, GENERATION_DELEGATION_SERVICE_TYPE, GENERATION_DELEGATION_TTL_MS, GENERATION_ID_PREFIX, generationDelegationHistory, generationDelegationServiceEntry, mintClientAnnexGeneration, mintCredentialClientAnnexGeneration, mintDelegatedClientsDelegation, mintGenerationDelegation, mintGenerationId, mintPointedClientAnnexGeneration, readClientAnnexLogOrAbsent, retireClientAnnexRung, revokeTreatingAlreadyRevokedAsSuccess, servicesPointedAtClientAnnex, setDelegatedClientsPointer, setDelegatedClientsPointerOnce } from './log.js';
+export { classifyGrantRevocationRefusal, embeddedParentCapability, isClientAnnexDid, revokeRecordedGrant } from './grantRevocation.js';
 export { clientAnnexGcDue, delegatedClientsPointerEstablishedAt, GENERATION_GC_PERIOD_MS, GENERATION_QUIET_BOUND_MS, GENERATION_QUIET_GRACE_MS, generationQuiet, runClientAnnexGc, swapClientAnnexGeneration } from './gc.js';
 export { ladderVmAgent, ladderVmSigners, ladderVmZcapClient } from './zcap.js';
 export { DELETION_ZCAP_TTL_MS, ExpiredParentCapabilityError, mintSpaceRootVerbCapability, mintSpaceVerbCapability } from './spaceCapability.js';
@@ -63,7 +64,7 @@ export { credentialAnchoredStandingFields, ensurePointedClientAnnexGeneration, e
 export { CONTROLLER_PROMOTION_STAGE, CREDENTIAL_ANCHORED_ESTABLISHMENT_STAGE_ALIASES, CREDENTIAL_ANCHORED_ESTABLISHMENT_STAGES, CREDENTIAL_ANCHORED_GENESIS_STAGES, KMS_AUTHENTICATION_STAGE } from './stages.js';
 export { ensureRosterDeliveredEpochs } from './rosterDeliveredEpochs.js';
 export { mendCredentialAnchoredAccount } from './mend.js';
-export { BuiltOnHeadNotReachedError, createLadderAnchoredAccountLog, ensureLadderAnchoredDidWebvh, forgetWebvhClient, installLadderVmWebvh, isSoleEnrolledClient, ladderSignedAccountEntry, LastEnrolledClientForgetError, revealLadderRungWebvh, selfEnrollWebvhClient, strikeLadderVmWebvh } from './ladderAnchored.js';
+export { BuiltOnHeadNotReachedError, createLadderAnchoredAccountLog, ensureLadderAnchoredDidWebvh, forgetWebvhClient, installLadderVmWebvh, ladderSignedAccountEntry, LastEnrolledClientForgetError, revealLadderRungWebvh, selfEnrollWebvhClient, strikeLadderVmWebvh } from './ladderAnchored.js';
 // The account-entry seam, re-exported here beside the ladder ceremonies that
 // spend it: a caller binding the ladder branch of an account-management
 // ceremony reaches for both from this subpath.

package/dist/clientAnnex/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/clientAnnex/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACb,MAAM,aAAa,CAAA;AAOpB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,+BAA+B,EAC/B,qBAAqB,EACrB,oBAAoB,EACpB,oCAAoC,EACpC,mCAAmC,EACnC,8BAA8B,EAC9B,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,4BAA4B,EAC5B,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,kCAAkC,EAClC,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,gCAAgC,EAChC,0BAA0B,EAC1B,qBAAqB,EACrB,qCAAqC,EACrC,4BAA4B,EAC5B,0BAA0B,EAC1B,8BAA8B,EAC/B,MAAM,UAAU,CAAA;AAGjB,OAAO,EACL,gBAAgB,EAChB,oCAAoC,EACpC,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAOhB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAE9E,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACxB,MAAM,sBAAsB,CAAA;AAG7B,2EAA2E;AAC3E,wEAAwE;AACxE,2DAA2D;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAEnE,OAAO,EACL,yBAAyB,EACzB,qCAAqC,EACrC,qCAAqC,EACrC,sCAAsC,EACtC,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,WAAW,CAAA;AAMlB,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,kCAAkC,EAClC,8BAA8B,EAC/B,MAAM,gBAAgB,CAAA;AAQvB,8EAA8E;AAC9E,sEAAsE;AACtE,6BAA6B;AAC7B,OAAO,EACL,0BAA0B,EAC1B,+CAA+C,EAC/C,wCAAwC,EACxC,kCAAkC,EAClC,wBAAwB,EACzB,MAAM,aAAa,CAAA;AAOpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AAGxE,OAAO,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAA;AAOzD,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,4BAA4B,EAC5B,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EACxB,6BAA6B,EAC7B,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAM5B,6EAA6E;AAC7E,wEAAwE;AACxE,+CAA+C;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAQ3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAEtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAGlD,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACtB,MAAM,iBAAiB,CAAA;AAMxB,OAAO,EACL,sCAAsC,EACtC,mCAAmC,EACpC,MAAM,gCAAgC,CAAA;AAEvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAExE,4EAA4E;AAC5E,qEAAqE;AACrE,6EAA6E;AAC7E,4EAA4E;AAC5E,wBAAwB;AACxB,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,sBAAsB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/clientAnnex/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACb,MAAM,aAAa,CAAA;AAOpB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,+BAA+B,EAC/B,qBAAqB,EACrB,oBAAoB,EACpB,oCAAoC,EACpC,mCAAmC,EACnC,8BAA8B,EAC9B,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,4BAA4B,EAC5B,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,kCAAkC,EAClC,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,gCAAgC,EAChC,0BAA0B,EAC1B,qBAAqB,EACrB,qCAAqC,EACrC,4BAA4B,EAC5B,0BAA0B,EAC1B,8BAA8B,EAC/B,MAAM,UAAU,CAAA;AAOjB,OAAO,EACL,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,sBAAsB,CAAA;AAO7B,OAAO,EACL,gBAAgB,EAChB,oCAAoC,EACpC,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAOhB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAE9E,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACxB,MAAM,sBAAsB,CAAA;AAG7B,2EAA2E;AAC3E,wEAAwE;AACxE,2DAA2D;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAEnE,OAAO,EACL,yBAAyB,EACzB,qCAAqC,EACrC,qCAAqC,EACrC,sCAAsC,EACtC,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,WAAW,CAAA;AAMlB,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,kCAAkC,EAClC,8BAA8B,EAC/B,MAAM,gBAAgB,CAAA;AAQvB,8EAA8E;AAC9E,sEAAsE;AACtE,6BAA6B;AAC7B,OAAO,EACL,0BAA0B,EAC1B,+CAA+C,EAC/C,wCAAwC,EACxC,kCAAkC,EAClC,wBAAwB,EACzB,MAAM,aAAa,CAAA;AAOpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AAGxE,OAAO,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAA;AAOzD,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,4BAA4B,EAC5B,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,6BAA6B,EAC7B,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAM5B,6EAA6E;AAC7E,wEAAwE;AACxE,+CAA+C;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAQ3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAEtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAGlD,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACtB,MAAM,iBAAiB,CAAA;AAMxB,OAAO,EACL,sCAAsC,EACtC,mCAAmC,EACpC,MAAM,gCAAgC,CAAA;AAEvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAExE,4EAA4E;AAC5E,qEAAqE;AACrE,6EAA6E;AAC7E,4EAA4E;AAC5E,wBAAwB;AACxB,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,sBAAsB,CAAA"}