@interop/wallet-core 0.89.0 → 0.91.0

package/dist/clientAnnex/grantRevocation.d.ts

@@ -8,7 +8,10 @@
  * one local skip is a grant expired beyond the revocation clock-skew margin.
  * Everything else is POSTed, since a revocation the server accepts is the
  * only proof the grant is off the account, and a plain refusal is then
- * classified on what the client can check.
+ * classified on what the client can check. A plain refusal is a
+ * `ValidationError` or a `NotFoundError`: the server answers a dead grant's
+ * revocation with the masked 404, since the invocation is denied before the
+ * chain is validated.
  *
  * What the client can check differs by how the grant was delegated. A grant
  * delegated straight under the Space root is signed by an enrolled client's
@@ -96,9 +99,11 @@ export declare function classifyGrantRevocationRefusal({ zcap, signerCheck, now
  * ({@link delegationExpired}). Everything else is POSTed, whatever the
  * caller's document says about the signer: the document a login read is a
  * snapshot. was-client's `AlreadyRevokedError` is success. A plain
- * `ValidationError` is read through {@link classifyGrantRevocationRefusal},
- * and rethrown when the client cannot say why. Every other failure is
- * rethrown. Errors are matched on `err.name`, since error classes do not
+ * refusal, a `ValidationError` or a `NotFoundError` by exact name, is read
+ * through {@link classifyGrantRevocationRefusal}, and rethrown when the
+ * client cannot say why. A dead grant is refused with the 404, since the
+ * server denies an invocation whose chain does not verify before it
+ * validates the chain. Every other failure is rethrown. Errors are matched on `err.name`, since error classes do not
  * survive crossing package copies.
  *
  * @param options {object}

package/dist/clientAnnex/grantRevocation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grantRevocation.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/grantRevocation.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AAEzE,OAAO,EAKL,KAAK,oBAAoB,EAC1B,MAAM,mBAAmB,CAAA;AAG1B;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAC/B,GAAG,EAAE,oBAAoB,CAAA;IACzB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,sBAAsB,GAChC,SAAS,GAAG,UAAU,GAAG,aAAa,GAAG,oBAAoB,CAAA;AAE/D;;;;;;GAMG;AACH,MAAM,MAAM,sBAAsB,GAChC,SAAS,GAAG,iBAAiB,GAAG,sBAAsB,CAAA;AAExD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,8BAA8B,CAAC,EAC7C,IAAI,EACJ,WAAW,EACX,GAAG,EACJ,EAAE;IACD,IAAI,EAAE,KAAK,CAAA;IACX,WAAW,CAAC,EAAE,kBAAkB,CAAA;IAChC,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,sBAAsB,GAAG,SAAS,CA6BrC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,MAAM,EACN,IAAI,EACJ,WAAW,EACX,GAAG,EACJ,EAAE;IACD,MAAM,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/C,IAAI,EAAE,KAAK,CAAA;IACX,WAAW,CAAC,EAAE,kBAAkB,CAAA;IAChC,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAoBlC;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,CAYvE;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOrD"}
+{"version":3,"file":"grantRevocation.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/grantRevocation.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AAEzE,OAAO,EAKL,KAAK,oBAAoB,EAC1B,MAAM,mBAAmB,CAAA;AAG1B;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAC/B,GAAG,EAAE,oBAAoB,CAAA;IACzB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,sBAAsB,GAChC,SAAS,GAAG,UAAU,GAAG,aAAa,GAAG,oBAAoB,CAAA;AAE/D;;;;;;GAMG;AACH,MAAM,MAAM,sBAAsB,GAChC,SAAS,GAAG,iBAAiB,GAAG,sBAAsB,CAAA;AAExD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,8BAA8B,CAAC,EAC7C,IAAI,EACJ,WAAW,EACX,GAAG,EACJ,EAAE;IACD,IAAI,EAAE,KAAK,CAAA;IACX,WAAW,CAAC,EAAE,kBAAkB,CAAA;IAChC,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,sBAAsB,GAAG,SAAS,CA6BrC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,MAAM,EACN,IAAI,EACJ,WAAW,EACX,GAAG,EACJ,EAAE;IACD,MAAM,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/C,IAAI,EAAE,KAAK,CAAA;IACX,WAAW,CAAC,EAAE,kBAAkB,CAAA;IAChC,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAsBlC;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,CAYvE;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOrD"}

package/dist/clientAnnex/grantRevocation.js

@@ -58,9 +58,11 @@ export function classifyGrantRevocationRefusal({ zcap, signerCheck, now }) {
  * ({@link delegationExpired}). Everything else is POSTed, whatever the
  * caller's document says about the signer: the document a login read is a
  * snapshot. was-client's `AlreadyRevokedError` is success. A plain
- * `ValidationError` is read through {@link classifyGrantRevocationRefusal},
- * and rethrown when the client cannot say why. Every other failure is
- * rethrown. Errors are matched on `err.name`, since error classes do not
+ * refusal, a `ValidationError` or a `NotFoundError` by exact name, is read
+ * through {@link classifyGrantRevocationRefusal}, and rethrown when the
+ * client cannot say why. A dead grant is refused with the 404, since the
+ * server denies an invocation whose chain does not verify before it
+ * validates the chain. Every other failure is rethrown. Errors are matched on `err.name`, since error classes do not
  * survive crossing package copies.
  *
  * @param options {object}
@@ -84,7 +86,9 @@ export async function revokeRecordedGrant({ revoke, zcap, signerCheck, now }) {
         if (name === 'AlreadyRevokedError') {
             return 'already-revoked';
         }
-        if (name === 'ValidationError') {
+        // Exact names only: `CapabilityRevokedError` and `CapabilityExpiredError`
+        // subclass `NotFoundError` under their own names and are rethrown.
+        if (name === 'ValidationError' || name === 'NotFoundError') {
             const refusal = classifyGrantRevocationRefusal({ zcap, signerCheck, now });
             if (refusal !== undefined) {
                 return refusal;

package/dist/clientAnnex/grantRevocation.js.map

@@ -1 +1 @@
-{"version":3,"file":"grantRevocation.js","sourceRoot":"","sources":["../../src/clientAnnex/grantRevocation.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAA;AACjE,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EAErB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AA8C9C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,8BAA8B,CAAC,EAC7C,IAAI,EACJ,WAAW,EACX,GAAG,EAKJ;IACC,IAAI,kBAAkB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACtC,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAA;IAC7C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,sBAAsB,CAAC;YACnC,YAAY,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC1C,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;SACnD,CAAC,CAAA;QACF,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;IACtD,CAAC;IACD,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QACjE,OAAO,aAAa,CAAA;IACtB,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAkC,CAAA;IACzD,IACE,WAAW,CAAC,cAAc,KAAK,SAAS;QACxC,OAAO,UAAU,KAAK,QAAQ;QAC9B,gBAAgB,CAAC,UAAU,CAAC;QAC5B,UAAU,KAAK,WAAW,CAAC,cAAc,EACzC,CAAC;QACD,OAAO,oBAAoB,CAAA;IAC7B,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EACxC,MAAM,EACN,IAAI,EACJ,WAAW,EACX,GAAG,EAMJ;IACC,IAAI,iBAAiB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACrC,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAiC,CAAC,CAAA;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAAgC,EAAE,IAAI,CAAA;QACpD,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACnC,OAAO,iBAAiB,CAAA;QAC1B,CAAC;QACD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,8BAA8B,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,OAAO,CAAA;YAChB,CAAC;QACH,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAW;IAClD,MAAM,EAAE,KAAK,EAAE,GAAG,IAA2B,CAAA;IAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACtD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,KAAK,GAAI,MAAwC,CAAC,eAAe,CAAA;IACvE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,IAAI,GAAY,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC7C,OAAO,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAc,CAAC,CAAC,CAAC,SAAS,CAAA;AAChF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,CAAC;QACH,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5B,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"grantRevocation.js","sourceRoot":"","sources":["../../src/clientAnnex/grantRevocation.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAA;AACjE,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EAErB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AA8C9C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,8BAA8B,CAAC,EAC7C,IAAI,EACJ,WAAW,EACX,GAAG,EAKJ;IACC,IAAI,kBAAkB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACtC,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAA;IAC7C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,sBAAsB,CAAC;YACnC,YAAY,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC1C,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;SACnD,CAAC,CAAA;QACF,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;IACtD,CAAC;IACD,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QACjE,OAAO,aAAa,CAAA;IACtB,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAkC,CAAA;IACzD,IACE,WAAW,CAAC,cAAc,KAAK,SAAS;QACxC,OAAO,UAAU,KAAK,QAAQ;QAC9B,gBAAgB,CAAC,UAAU,CAAC;QAC5B,UAAU,KAAK,WAAW,CAAC,cAAc,EACzC,CAAC;QACD,OAAO,oBAAoB,CAAA;IAC7B,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EACxC,MAAM,EACN,IAAI,EACJ,WAAW,EACX,GAAG,EAMJ;IACC,IAAI,iBAAiB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACrC,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAiC,CAAC,CAAA;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAAgC,EAAE,IAAI,CAAA;QACpD,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACnC,OAAO,iBAAiB,CAAA;QAC1B,CAAC;QACD,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC3D,MAAM,OAAO,GAAG,8BAA8B,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,OAAO,CAAA;YAChB,CAAC;QACH,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAW;IAClD,MAAM,EAAE,KAAK,EAAE,GAAG,IAA2B,CAAA;IAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACtD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,KAAK,GAAI,MAAwC,CAAC,eAAe,CAAA;IACvE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,IAAI,GAAY,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC7C,OAAO,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAc,CAAC,CAAC,CAAC,SAAS,CAAA;AAChF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,CAAC;QACH,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5B,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC"}

package/dist/clientAnnex/index.d.ts

@@ -76,7 +76,7 @@ export { ensureRosterDeliveredEpochs } from './rosterDeliveredEpochs.js';
 export type { RosterDeliveredEpochsResult } from './rosterDeliveredEpochs.js';
 export { mendCredentialAnchoredAccount } from './mend.js';
 export type { CredentialAnchoredAccountCore, CredentialAnchoredMendReport, CredentialAnchoredRegistryContext } from './mend.js';
-export { BuiltOnHeadNotReachedError, createLadderAnchoredAccountLog, ensureLadderAnchoredDidWebvh, forgetWebvhClient, installLadderVmWebvh, ladderSignedAccountEntry, LastEnrolledClientForgetError, revealLadderRungWebvh, selfEnrollWebvhClient, strikeLadderVmWebvh } from './ladderAnchored.js';
+export { createLadderAnchoredAccountLog, ensureLadderAnchoredDidWebvh, forgetWebvhClient, installLadderVmWebvh, ladderSignedAccountEntry, LastEnrolledClientForgetError, revealLadderRungWebvh, selfEnrollWebvhClient, strikeLadderVmWebvh } from './ladderAnchored.js';
 export type { LadderSignedEntry, LadderSignedEntryOutcome } from './ladderAnchored.js';
 export { signAccountEntry } from '../webvh/accountEntry.js';
 export type { AccountEntryFields, AccountEntryOutcome, AccountLogSigner, AccountLogStore } from '../webvh/accountEntry.js';

package/dist/clientAnnex/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACb,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,UAAU,EACV,eAAe,EACf,uBAAuB,EACxB,MAAM,aAAa,CAAA;AAEpB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,+BAA+B,EAC/B,qBAAqB,EACrB,oBAAoB,EACpB,oCAAoC,EACpC,mCAAmC,EACnC,8BAA8B,EAC9B,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,4BAA4B,EAC5B,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,kCAAkC,EAClC,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,gCAAgC,EAChC,uBAAuB,EACvB,0BAA0B,EAC1B,qBAAqB,EACrB,qCAAqC,EACrC,4BAA4B,EAC5B,0BAA0B,EAC1B,8BAA8B,EAC/B,MAAM,UAAU,CAAA;AACjB,YAAY,EACV,qBAAqB,EACrB,mBAAmB,EACnB,iCAAiC,EAClC,MAAM,UAAU,CAAA;AAEjB,OAAO,EACL,kCAAkC,EAClC,+BAA+B,EAC/B,6BAA6B,EAC7B,4BAA4B,EAC7B,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EACL,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EACV,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACvB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EACL,gBAAgB,EAChB,oCAAoC,EACpC,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAChB,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAEhB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAE9E,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACvB,+BAA+B,EAC/B,eAAe,EAChB,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAK/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAEnE,OAAO,EACL,yBAAyB,EACzB,qCAAqC,EACrC,qCAAqC,EACrC,sCAAsC,EACtC,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,WAAW,CAAA;AAClB,YAAY,EACV,kCAAkC,EAClC,sCAAsC,EACvC,MAAM,WAAW,CAAA;AAElB,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,kCAAkC,EAClC,8BAA8B,EAC/B,MAAM,gBAAgB,CAAA;AACvB,YAAY,EACV,gCAAgC,EAChC,4BAA4B,EAC5B,+BAA+B,EAC/B,gCAAgC,EACjC,MAAM,gBAAgB,CAAA;AAKvB,OAAO,EACL,0BAA0B,EAC1B,+CAA+C,EAC/C,wCAAwC,EACxC,kCAAkC,EAClC,wBAAwB,EACzB,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,oCAAoC,EACpC,wCAAwC,EACxC,8BAA8B,EAC/B,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AACxE,YAAY,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AAE7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAA;AACzD,YAAY,EACV,6BAA6B,EAC7B,4BAA4B,EAC5B,iCAAiC,EAClC,MAAM,WAAW,CAAA;AAElB,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,4BAA4B,EAC5B,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,6BAA6B,EAC7B,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,qBAAqB,CAAA;AAK5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAC3D,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EAChB,MAAM,0BAA0B,CAAA;AAEjC,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACrB,MAAM,iBAAiB,CAAA;AACxB,YAAY,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAE/D,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAC9E,YAAY,EACV,0BAA0B,EAC1B,sBAAsB,EACvB,MAAM,aAAa,CAAA;AAEpB,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,mCAAmC,EACpC,MAAM,iBAAiB,CAAA;AACxB,YAAY,EACV,8BAA8B,EAC9B,8BAA8B,EAC9B,8BAA8B,EAC/B,MAAM,iBAAiB,CAAA;AAExB,OAAO,EACL,sCAAsC,EACtC,mCAAmC,EACpC,MAAM,gCAAgC,CAAA;AAEvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAOxE,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,sBAAsB,CAAA;AAO7B,YAAY,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAM7D,YAAY,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACb,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,UAAU,EACV,eAAe,EACf,uBAAuB,EACxB,MAAM,aAAa,CAAA;AAEpB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,+BAA+B,EAC/B,qBAAqB,EACrB,oBAAoB,EACpB,oCAAoC,EACpC,mCAAmC,EACnC,8BAA8B,EAC9B,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,4BAA4B,EAC5B,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,kCAAkC,EAClC,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,gCAAgC,EAChC,uBAAuB,EACvB,0BAA0B,EAC1B,qBAAqB,EACrB,qCAAqC,EACrC,4BAA4B,EAC5B,0BAA0B,EAC1B,8BAA8B,EAC/B,MAAM,UAAU,CAAA;AACjB,YAAY,EACV,qBAAqB,EACrB,mBAAmB,EACnB,iCAAiC,EAClC,MAAM,UAAU,CAAA;AAEjB,OAAO,EACL,kCAAkC,EAClC,+BAA+B,EAC/B,6BAA6B,EAC7B,4BAA4B,EAC7B,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EACL,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EACV,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACvB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EACL,gBAAgB,EAChB,oCAAoC,EACpC,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAChB,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAEhB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAE9E,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACvB,+BAA+B,EAC/B,eAAe,EAChB,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAK/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAEnE,OAAO,EACL,yBAAyB,EACzB,qCAAqC,EACrC,qCAAqC,EACrC,sCAAsC,EACtC,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,WAAW,CAAA;AAClB,YAAY,EACV,kCAAkC,EAClC,sCAAsC,EACvC,MAAM,WAAW,CAAA;AAElB,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,kCAAkC,EAClC,8BAA8B,EAC/B,MAAM,gBAAgB,CAAA;AACvB,YAAY,EACV,gCAAgC,EAChC,4BAA4B,EAC5B,+BAA+B,EAC/B,gCAAgC,EACjC,MAAM,gBAAgB,CAAA;AAKvB,OAAO,EACL,0BAA0B,EAC1B,+CAA+C,EAC/C,wCAAwC,EACxC,kCAAkC,EAClC,wBAAwB,EACzB,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,oCAAoC,EACpC,wCAAwC,EACxC,8BAA8B,EAC/B,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AACxE,YAAY,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AAE7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAA;AACzD,YAAY,EACV,6BAA6B,EAC7B,4BAA4B,EAC5B,iCAAiC,EAClC,MAAM,WAAW,CAAA;AAElB,OAAO,EACL,8BAA8B,EAC9B,4BAA4B,EAC5B,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,6BAA6B,EAC7B,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,qBAAqB,CAAA;AAK5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAC3D,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EAChB,MAAM,0BAA0B,CAAA;AAEjC,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACrB,MAAM,iBAAiB,CAAA;AACxB,YAAY,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAE/D,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAC9E,YAAY,EACV,0BAA0B,EAC1B,sBAAsB,EACvB,MAAM,aAAa,CAAA;AAEpB,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,mCAAmC,EACpC,MAAM,iBAAiB,CAAA;AACxB,YAAY,EACV,8BAA8B,EAC9B,8BAA8B,EAC9B,8BAA8B,EAC/B,MAAM,iBAAiB,CAAA;AAExB,OAAO,EACL,sCAAsC,EACtC,mCAAmC,EACpC,MAAM,gCAAgC,CAAA;AAEvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAOxE,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,sBAAsB,CAAA;AAO7B,YAAY,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAM7D,YAAY,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAA"}

package/dist/clientAnnex/index.js

@@ -72,7 +72,7 @@ export { credentialAnchoredStandingFields, ensurePointedClientAnnexGeneration, e
 export { CONTROLLER_PROMOTION_STAGE, CREDENTIAL_ANCHORED_ESTABLISHMENT_STAGE_ALIASES, CREDENTIAL_ANCHORED_ESTABLISHMENT_STAGES, CREDENTIAL_ANCHORED_GENESIS_STAGES, KMS_AUTHENTICATION_STAGE } from './stages.js';
 export { ensureRosterDeliveredEpochs } from './rosterDeliveredEpochs.js';
 export { mendCredentialAnchoredAccount } from './mend.js';
-export { BuiltOnHeadNotReachedError, createLadderAnchoredAccountLog, ensureLadderAnchoredDidWebvh, forgetWebvhClient, installLadderVmWebvh, ladderSignedAccountEntry, LastEnrolledClientForgetError, revealLadderRungWebvh, selfEnrollWebvhClient, strikeLadderVmWebvh } from './ladderAnchored.js';
+export { createLadderAnchoredAccountLog, ensureLadderAnchoredDidWebvh, forgetWebvhClient, installLadderVmWebvh, ladderSignedAccountEntry, LastEnrolledClientForgetError, revealLadderRungWebvh, selfEnrollWebvhClient, strikeLadderVmWebvh } from './ladderAnchored.js';
 // The account-entry seam, re-exported here beside the ladder ceremonies that
 // spend it: a caller binding the ladder branch of an account-management
 // ceremony reaches for both from this subpath.

package/dist/clientAnnex/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/clientAnnex/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACb,MAAM,aAAa,CAAA;AAOpB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,+BAA+B,EAC/B,qBAAqB,EACrB,oBAAoB,EACpB,oCAAoC,EACpC,mCAAmC,EACnC,8BAA8B,EAC9B,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,4BAA4B,EAC5B,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,kCAAkC,EAClC,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,gCAAgC,EAChC,uBAAuB,EACvB,0BAA0B,EAC1B,qBAAqB,EACrB,qCAAqC,EACrC,4BAA4B,EAC5B,0BAA0B,EAC1B,8BAA8B,EAC/B,MAAM,UAAU,CAAA;AAOjB,OAAO,EACL,kCAAkC,EAClC,+BAA+B,EAC/B,6BAA6B,EAC7B,4BAA4B,EAC7B,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EACL,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,sBAAsB,CAAA;AAO7B,OAAO,EACL,gBAAgB,EAChB,oCAAoC,EACpC,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAOhB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAE9E,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACvB,+BAA+B,EAC/B,eAAe,EAChB,MAAM,sBAAsB,CAAA;AAG7B,2EAA2E;AAC3E,wEAAwE;AACxE,2DAA2D;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAEnE,OAAO,EACL,yBAAyB,EACzB,qCAAqC,EACrC,qCAAqC,EACrC,sCAAsC,EACtC,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,WAAW,CAAA;AAMlB,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,kCAAkC,EAClC,8BAA8B,EAC/B,MAAM,gBAAgB,CAAA;AAQvB,8EAA8E;AAC9E,sEAAsE;AACtE,6BAA6B;AAC7B,OAAO,EACL,0BAA0B,EAC1B,+CAA+C,EAC/C,wCAAwC,EACxC,kCAAkC,EAClC,wBAAwB,EACzB,MAAM,aAAa,CAAA;AAOpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AAGxE,OAAO,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAA;AAOzD,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,4BAA4B,EAC5B,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,6BAA6B,EAC7B,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAM5B,6EAA6E;AAC7E,wEAAwE;AACxE,+CAA+C;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAQ3D,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACrB,MAAM,iBAAiB,CAAA;AAGxB,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAM9E,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,mCAAmC,EACpC,MAAM,iBAAiB,CAAA;AAOxB,OAAO,EACL,sCAAsC,EACtC,mCAAmC,EACpC,MAAM,gCAAgC,CAAA;AAEvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAExE,4EAA4E;AAC5E,qEAAqE;AACrE,6EAA6E;AAC7E,4EAA4E;AAC5E,wBAAwB;AACxB,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,sBAAsB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/clientAnnex/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACb,MAAM,aAAa,CAAA;AAOpB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,+BAA+B,EAC/B,qBAAqB,EACrB,oBAAoB,EACpB,oCAAoC,EACpC,mCAAmC,EACnC,8BAA8B,EAC9B,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,4BAA4B,EAC5B,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,kCAAkC,EAClC,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,gCAAgC,EAChC,uBAAuB,EACvB,0BAA0B,EAC1B,qBAAqB,EACrB,qCAAqC,EACrC,4BAA4B,EAC5B,0BAA0B,EAC1B,8BAA8B,EAC/B,MAAM,UAAU,CAAA;AAOjB,OAAO,EACL,kCAAkC,EAClC,+BAA+B,EAC/B,6BAA6B,EAC7B,4BAA4B,EAC7B,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EACL,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,sBAAsB,CAAA;AAO7B,OAAO,EACL,gBAAgB,EAChB,oCAAoC,EACpC,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAOhB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAE9E,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACvB,+BAA+B,EAC/B,eAAe,EAChB,MAAM,sBAAsB,CAAA;AAG7B,2EAA2E;AAC3E,wEAAwE;AACxE,2DAA2D;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAEnE,OAAO,EACL,yBAAyB,EACzB,qCAAqC,EACrC,qCAAqC,EACrC,sCAAsC,EACtC,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,WAAW,CAAA;AAMlB,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,kCAAkC,EAClC,8BAA8B,EAC/B,MAAM,gBAAgB,CAAA;AAQvB,8EAA8E;AAC9E,sEAAsE;AACtE,6BAA6B;AAC7B,OAAO,EACL,0BAA0B,EAC1B,+CAA+C,EAC/C,wCAAwC,EACxC,kCAAkC,EAClC,wBAAwB,EACzB,MAAM,aAAa,CAAA;AAOpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AAGxE,OAAO,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAA;AAOzD,OAAO,EACL,8BAA8B,EAC9B,4BAA4B,EAC5B,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,6BAA6B,EAC7B,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAM5B,6EAA6E;AAC7E,wEAAwE;AACxE,+CAA+C;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAQ3D,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACrB,MAAM,iBAAiB,CAAA;AAGxB,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAM9E,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,mCAAmC,EACpC,MAAM,iBAAiB,CAAA;AAOxB,OAAO,EACL,sCAAsC,EACtC,mCAAmC,EACpC,MAAM,gCAAgC,CAAA;AAEvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAExE,4EAA4E;AAC5E,qEAAqE;AACrE,6EAA6E;AAC7E,4EAA4E;AAC5E,wBAAwB;AACxB,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,sBAAsB,CAAA"}

package/dist/clientAnnex/ladder.d.ts

@@ -289,6 +289,50 @@ export declare function standingCredentialLatentHashes({ log, maxScan }: {
     hashes: string[];
     unclaimedCredentialVmIds: string[];
 }>;
+/**
+ * The commitments an ABANDONED attempt of a recovery continuation left
+ * standing: every hash a reveal-and-commit entry of this spend added to
+ * `nextKeyHashes` that the current attempt does not carry forward. A
+ * continuation torn at its seam and re-run with a different successor (a
+ * transient re-run mints a fresh ladder seed, and a re-run under a different
+ * passphrase persists a second unlock record) publishes a second reveal entry.
+ * The first attempt's successor pair, and the first replacement's hash when
+ * the replacement changed too, would otherwise stand committed with no member
+ * behind them. Any of them whose key is derivable from a record the first
+ * attempt persisted is a latent update key nothing would ever retire.
+ *
+ * The spend's reveal entries are the entries signed by the spent code's
+ * rung 0 after the entry that last newly committed its hash. That bound is
+ * what keeps an earlier spend of the same code out: a spent code issued again
+ * signs with the same rung 0, and the earlier spend's reveal entries committed
+ * the hashes of the client it enrolled. The successor's own hashes
+ * (`protectedHashes`) and anything the head no longer carries are left out.
+ *
+ * The candidates then pass the same structural guard a credential strike does
+ * ({@link survivingClientKeyProtection}): a surviving enrolled client's active
+ * key hash, carry-over hash, and staged hash are never struck. An abandoned
+ * hash rarely belongs to an enrolled client (a first attempt's successor
+ * enrolled later by an ordinary enrollment is the one case), so a hash the
+ * guard drops is warned about. When a listed client's active update key
+ * cannot be attributed, nothing is struck. The abandoned hashes then stay
+ * committed, and one whose key derives from a record the abandoned attempt
+ * persisted remains a latent update key that no mender retires.
+ *
+ * @param options {object}
+ * @param options.log {DIDLog}   a resolved, caller-verified log, read BEFORE
+ *   the add-and-retire entry
+ * @param options.spentKeyMultibase {string}   the spent code's rung 0, the
+ *   key every reveal entry of this spend is signed by
+ * @param options.protectedHashes {string[]}   the hashes the current attempt
+ *   committed, never struck
+ * @returns {Promise<string[]>}   the abandoned commitments standing at the
+ *   head, in the order they were committed
+ */
+export declare function abandonedSpendCommitments({ log, spentKeyMultibase, protectedHashes }: {
+    log: DIDLog;
+    spentKeyMultibase: string;
+    protectedHashes: string[];
+}): Promise<string[]>;
 /**
  * The strike a retirement entry ALREADY published, recomputed by re-running
  * {@link attributeRetiredCredentialRungs} over the log as it stood just before
@@ -433,19 +477,17 @@ export declare function attributeRetiredCredentialRungs({ log, credentialVmIds,
  *   publishes its successor's -- leaves the replacement credential's
  *   commitment in that position instead, and striking that would leave the
  *   replacement unusable and unhealable;
- * - the entry a still-standing revealed rung signs while authorizing a key
- *   whose hash sits among its claims is a TRANSFER without a completion: the
- *   ladder-arm enrollment approval's add entry, where the rung that
- *   committed the enrollee's two hashes in the commit entry authorizes the
- *   enrollee's update key and keeps itself in `updateKeys` (an entry never
- *   removes its own signer). The hash and the claim committed immediately
- *   after it transfer to the client as at a completion, and the key is not
- *   read as a second rung reveal. A hash the ladder knows a priori, one the
- *   handover recovered, or one committed last among its entry's additions
- *   (the position a ladder's own next commitment takes under
- *   `decisions/0007` outside the handover) is never transferred this way, so
- *   a rung-signed entry authorizing the ladder's own next rung while the
- *   current one stands still fails closed, seeded or not;
+ * - an entry authorizing a key whose hash sits among the claims while no
+ *   pending rung leaves is a TRANSFER without a completion, whoever signs
+ *   it: the ladder-arm enrollment approval's add entry. The hash and the one
+ *   committed immediately after it in its committing entry transfer to the
+ *   client as at a completion, and the key is not read as a rung reveal. A
+ *   hash the ladder knows a priori, one the handover recovered, or one
+ *   committed last among its entry's additions (the position a ladder's own
+ *   next commitment takes under `decisions/0007` outside the handover) is
+ *   never transferred this way, so an entry authorizing the ladder's own
+ *   next rung while the current one stands still fails closed, seeded or
+ *   not;
  * - a claim or revealed key that later leaves the parameters without a
  *   completion was struck by some other edit and simply stops standing;
  * - a ladder VM standing in the final document belongs to this ladder on

package/dist/clientAnnex/ladder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ladder.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/ladder.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,MAAM,EAAe,MAAM,2BAA2B,CAAA;AAepE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AAE/D,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACb,MAAM,+BAA+B,CAAA;AACtC,YAAY,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AAE/D;;;;;GAKG;AACH,eAAO,MAAM,eAAe,MAAM,CAAA;AAElC;;;;;;GAMG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,UAAU,CAE/C;AA6BD;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CAAC,EACpC,UAAU,EACV,YAAY,EACb,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAGtD;AAED;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,UAAU,CAAA;AAEtD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,UAAU,EACV,SAAS,EACT,OAAyB,EAC1B,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,SAAS,EAAE;QAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QAAC,aAAa,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,CAAC,CA6BxD;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB;AA6ZD;;;;;;GAMG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,EACxC,aAAa,EACb,QAAQ,EACT,EAAE;IACD,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,QAAQ,EAAE,MAAM,CAAA;CACjB,GAAG,MAAM,EAAE,CAQX;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,GAAG,EACH,cAAc,EACf,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;CACvB,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAQrC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CAAC,EACzC,GAAG,EACH,cAAc,EACf,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;CACvB,GACG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,GAC5E,SAAS,CAqDZ;AA0CD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,wBAAsB,mCAAmC,CAAC,EACxD,GAAG,EACH,cAAc,EACd,kBAAkB,EAClB,UAAU,EACX,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA6CpB;AAwFD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,8BAA8B,CAAC,EACnD,GAAG,EACH,OAAyB,EAC1B,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,wBAAwB,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CA8BpE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAsB,+BAA+B,CAAC,EACpD,GAAG,EACH,sBAAsB,EACtB,eAAe,EACf,eAAoB,EACpB,aAAkB,EAClB,OAAyB,EAC1B,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,sBAAsB,EAAE,MAAM,CAAA;IAC9B,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,OAAO,CAAC;IACV,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,wBAAwB,EAAE,MAAM,EAAE,CAAA;CACnC,CAAC,CAmBD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,wBAAsB,+BAA+B,CAAC,EACpD,GAAG,EACH,eAAe,EACf,eAAoB,EACpB,aAAkB,EAClB,OAAyB,EAC1B,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,OAAO,CAAC;IACV,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,wBAAwB,EAAE,MAAM,EAAE,CAAA;CACnC,CAAC,CA2ED;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuJG;AACH,wBAAsB,wBAAwB,CAAC,EAC7C,GAAG,EACH,kBAAkB,EAClB,UAAU,EAAE,kBAAkB,EAC9B,UAAU,EACV,cAAc,EACd,OAAyB,EAC1B,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA6YnC"}
+{"version":3,"file":"ladder.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/ladder.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,MAAM,EAAe,MAAM,2BAA2B,CAAA;AAepE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AAE/D,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACb,MAAM,+BAA+B,CAAA;AACtC,YAAY,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AAE/D;;;;;GAKG;AACH,eAAO,MAAM,eAAe,MAAM,CAAA;AAElC;;;;;;GAMG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,UAAU,CAE/C;AA6BD;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CAAC,EACpC,UAAU,EACV,YAAY,EACb,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAGtD;AAED;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,UAAU,CAAA;AAEtD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,UAAU,EACV,SAAS,EACT,OAAyB,EAC1B,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,SAAS,EAAE;QAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QAAC,aAAa,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,CAAC,CA6BxD;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB;AA6ZD;;;;;;GAMG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,EACxC,aAAa,EACb,QAAQ,EACT,EAAE;IACD,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,QAAQ,EAAE,MAAM,CAAA;CACjB,GAAG,MAAM,EAAE,CAQX;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,GAAG,EACH,cAAc,EACf,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;CACvB,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAQrC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CAAC,EACzC,GAAG,EACH,cAAc,EACf,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;CACvB,GACG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,GAC5E,SAAS,CAqDZ;AA0CD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,wBAAsB,mCAAmC,CAAC,EACxD,GAAG,EACH,cAAc,EACd,kBAAkB,EAClB,UAAU,EACX,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA6CpB;AA2FD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,8BAA8B,CAAC,EACnD,GAAG,EACH,OAAyB,EAC1B,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,wBAAwB,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CA8BpE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAsB,yBAAyB,CAAC,EAC9C,GAAG,EACH,iBAAiB,EACjB,eAAe,EAChB,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,iBAAiB,EAAE,MAAM,CAAA;IACzB,eAAe,EAAE,MAAM,EAAE,CAAA;CAC1B,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA8CpB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAsB,+BAA+B,CAAC,EACpD,GAAG,EACH,sBAAsB,EACtB,eAAe,EACf,eAAoB,EACpB,aAAkB,EAClB,OAAyB,EAC1B,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,sBAAsB,EAAE,MAAM,CAAA;IAC9B,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,OAAO,CAAC;IACV,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,wBAAwB,EAAE,MAAM,EAAE,CAAA;CACnC,CAAC,CAmBD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,wBAAsB,+BAA+B,CAAC,EACpD,GAAG,EACH,eAAe,EACf,eAAoB,EACpB,aAAkB,EAClB,OAAyB,EAC1B,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,OAAO,CAAC;IACV,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,wBAAwB,EAAE,MAAM,EAAE,CAAA;CACnC,CAAC,CA2ED;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqJG;AACH,wBAAsB,wBAAwB,CAAC,EAC7C,GAAG,EACH,kBAAkB,EAClB,UAAU,EAAE,kBAAkB,EAC9B,UAAU,EACV,cAAc,EACd,OAAyB,EAC1B,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAoYnC"}

package/dist/clientAnnex/ladder.js

@@ -734,12 +734,15 @@ export async function ladderVmIdsIntroducedWithCredential({ log, credentialVmId,
  * The earlier attempts behind a RESUMED reveal entry: one that appended
  * exactly two hashes, the successor's and its staged partner's, because the
  * replacement's was already committed by an earlier attempt. A transient
- * continuation torn at its seam and re-run mints a fresh ladder seed while
- * reusing the replacement (both as its contract asks), so every reveal entry
- * after the first dedups the replacement's hash away. Such an entry's own
- * last addition is the ladder's rung 1, not a handover; the replacement's
- * hash is the last addition of a three-addition entry the same retired
- * signer wrote earlier.
+ * continuation torn at its seam and re-run with a freshly minted ladder seed
+ * and the same replacement wrote one: every reveal entry after the first
+ * dedups the replacement's hash away. An emitter on the resume contract no
+ * longer produces the shape -- a resumed transient spend hands the persisted
+ * ladder seed back and finds its reveal entry standing -- but logs written
+ * by one that minted a seed per call carry it, so the readers keep
+ * recognizing it. Such an entry's own last addition is the ladder's rung 1,
+ * not a handover; the replacement's hash is the last addition of a
+ * three-addition entry the same retired signer wrote earlier.
  *
  * Every earlier entry that signer wrote is read. A two-addition one is
  * another resumed reveal, walked past (a continuation torn at its seam twice
@@ -852,6 +855,78 @@ export async function standingCredentialLatentHashes({ log, maxScan = LADDER_MAX
     }
     return { hashes: [...hashes], unclaimedCredentialVmIds };
 }
+/**
+ * The commitments an ABANDONED attempt of a recovery continuation left
+ * standing: every hash a reveal-and-commit entry of this spend added to
+ * `nextKeyHashes` that the current attempt does not carry forward. A
+ * continuation torn at its seam and re-run with a different successor (a
+ * transient re-run mints a fresh ladder seed, and a re-run under a different
+ * passphrase persists a second unlock record) publishes a second reveal entry.
+ * The first attempt's successor pair, and the first replacement's hash when
+ * the replacement changed too, would otherwise stand committed with no member
+ * behind them. Any of them whose key is derivable from a record the first
+ * attempt persisted is a latent update key nothing would ever retire.
+ *
+ * The spend's reveal entries are the entries signed by the spent code's
+ * rung 0 after the entry that last newly committed its hash. That bound is
+ * what keeps an earlier spend of the same code out: a spent code issued again
+ * signs with the same rung 0, and the earlier spend's reveal entries committed
+ * the hashes of the client it enrolled. The successor's own hashes
+ * (`protectedHashes`) and anything the head no longer carries are left out.
+ *
+ * The candidates then pass the same structural guard a credential strike does
+ * ({@link survivingClientKeyProtection}): a surviving enrolled client's active
+ * key hash, carry-over hash, and staged hash are never struck. An abandoned
+ * hash rarely belongs to an enrolled client (a first attempt's successor
+ * enrolled later by an ordinary enrollment is the one case), so a hash the
+ * guard drops is warned about. When a listed client's active update key
+ * cannot be attributed, nothing is struck. The abandoned hashes then stay
+ * committed, and one whose key derives from a record the abandoned attempt
+ * persisted remains a latent update key that no mender retires.
+ *
+ * @param options {object}
+ * @param options.log {DIDLog}   a resolved, caller-verified log, read BEFORE
+ *   the add-and-retire entry
+ * @param options.spentKeyMultibase {string}   the spent code's rung 0, the
+ *   key every reveal entry of this spend is signed by
+ * @param options.protectedHashes {string[]}   the hashes the current attempt
+ *   committed, never struck
+ * @returns {Promise<string[]>}   the abandoned commitments standing at the
+ *   head, in the order they were committed
+ */
+export async function abandonedSpendCommitments({ log, spentKeyMultibase, protectedHashes }) {
+    const { params, facts } = indexedLadderLog(log);
+    const spentHash = await deriveNextKeyHash(spentKeyMultibase);
+    const issuedAt = facts.reduce((last, entry, index) => entry.addedHashes.includes(spentHash) ? index : last, -1);
+    if (issuedAt === -1) {
+        return [];
+    }
+    const standing = params[params.length - 1]?.nextKeyHashes ?? [];
+    const candidates = [
+        ...new Set(facts
+            .slice(issuedAt + 1)
+            .filter(entry => entry.signers.includes(spentKeyMultibase))
+            .flatMap(entry => entry.addedHashes)
+            .filter(hash => !protectedHashes.includes(hash) && standing.includes(hash)))
+    ];
+    if (candidates.length === 0) {
+        return [];
+    }
+    const surviving = await survivingClientKeyProtection({
+        log,
+        derivedLatentHashes: candidates
+    });
+    if (surviving.ambiguous.length > 0) {
+        logger.warn('Withholding an abandoned spend strike: an enrolled client whose ' +
+            'active update key the log cannot attribute would be unprotected', { clients: surviving.ambiguous });
+        return [];
+    }
+    const kept = candidates.filter(hash => surviving.hashes.has(hash));
+    if (kept.length > 0) {
+        logger.warn('Keeping abandoned spend commitments a surviving enrolled client holds', { count: kept.length });
+    }
+    return candidates.filter(hash => !surviving.hashes.has(hash));
+}
 /**
  * The strike a retirement entry ALREADY published, recomputed by re-running
  * {@link attributeRetiredCredentialRungs} over the log as it stood just before
@@ -1058,19 +1133,17 @@ export async function attributeRetiredCredentialRungs({ log, credentialVmIds, pr
  *   publishes its successor's -- leaves the replacement credential's
  *   commitment in that position instead, and striking that would leave the
  *   replacement unusable and unhealable;
- * - the entry a still-standing revealed rung signs while authorizing a key
- *   whose hash sits among its claims is a TRANSFER without a completion: the
- *   ladder-arm enrollment approval's add entry, where the rung that
- *   committed the enrollee's two hashes in the commit entry authorizes the
- *   enrollee's update key and keeps itself in `updateKeys` (an entry never
- *   removes its own signer). The hash and the claim committed immediately
- *   after it transfer to the client as at a completion, and the key is not
- *   read as a second rung reveal. A hash the ladder knows a priori, one the
- *   handover recovered, or one committed last among its entry's additions
- *   (the position a ladder's own next commitment takes under
- *   `decisions/0007` outside the handover) is never transferred this way, so
- *   a rung-signed entry authorizing the ladder's own next rung while the
- *   current one stands still fails closed, seeded or not;
+ * - an entry authorizing a key whose hash sits among the claims while no
+ *   pending rung leaves is a TRANSFER without a completion, whoever signs
+ *   it: the ladder-arm enrollment approval's add entry. The hash and the one
+ *   committed immediately after it in its committing entry transfer to the
+ *   client as at a completion, and the key is not read as a rung reveal. A
+ *   hash the ladder knows a priori, one the handover recovered, or one
+ *   committed last among its entry's additions (the position a ladder's own
+ *   next commitment takes under `decisions/0007` outside the handover) is
+ *   never transferred this way, so an entry authorizing the ladder's own
+ *   next rung while the current one stands still fails closed, seeded or
+ *   not;
  * - a claim or revealed key that later leaves the parameters without a
  *   completion was struck by some other edit and simply stops standing;
  * - a ladder VM standing in the final document belongs to this ladder on
@@ -1254,6 +1327,9 @@ export async function attributeLadderInventory({ log, anchorKeyMultibase, anchor
         // update-key hash as its staged hash (the reveal entry's append order, a
         // ratified convention).
         const { addedKeys, removedKeys, addedHashes } = facts[index];
+        // Each added key's hash, once per entry: the completion, the transfer,
+        // and the reveal reading below all ask for it.
+        const addedKeyHashes = await Promise.all(addedKeys.map(key => deriveNextKeyHash(key)));
         // What this entry introduces, resolved before the reveal branch because
         // the hash claims below turn on it: the ladder VMs it publishes that were
         // not standing before, and the credential-class `keyAgreement` members it
@@ -1290,8 +1366,8 @@ export async function attributeLadderInventory({ log, anchorKeyMultibase, anchor
         // struck, and its claims simply stop standing.
         if (pending && !currentUpdateKeys.has(pending.key)) {
             const transferred = new Set();
-            for (const key of addedKeys) {
-                const at = pending.claims.indexOf(await deriveNextKeyHash(key));
+            for (const keyHash of addedKeyHashes) {
+                const at = pending.claims.indexOf(keyHash);
                 if (at === -1) {
                     continue;
                 }
@@ -1321,65 +1397,57 @@ export async function attributeLadderInventory({ log, anchorKeyMultibase, anchor
             }
             pending = undefined;
         }
-        // A TRANSFER while the rung stands: the pending rung stayed in
-        // `updateKeys` and signed this entry, which authorizes a key whose hash
-        // sits among the rung's claims. That is the ladder-arm enrollment
-        // approval's add entry (`enrollWebvhClient` with a ladder signer): the
-        // commit entry the rung signed committed the enrollee's update-key and
-        // staged hashes, and the add entry, signed by the same rung and keeping
-        // it, authorizes the enrollee's update key. The key is the client's
-        // rather than a rung of this ladder, so the hash and the claim committed
-        // immediately after it (the staged hash, the adjacency of
+        // A TRANSFER without a completion: this entry authorizes a key whose
+        // hash the ladder claims, while no pending rung leaves `updateKeys`. That
+        // is the ladder-arm enrollment approval's add entry (`enrollWebvhClient`
+        // with a ladder signer): the commit entry a rung signed committed the
+        // enrollee's update-key and staged hashes, and the add entry authorizes
+        // the enrollee's update key. The key is the client's rather than a rung
+        // of this ladder, so the hash and the one committed immediately after it
+        // in the same entry (the staged hash, the adjacency of
         // `decisions/0007-ladder-reveal-hash-order.md`) transfer to the client,
-        // as the completion above transfers them when the rung leaves. Three
-        // hashes never transfer: one the ladder knows a priori (seed-derived,
-        // the anchor's, or recovered), one the handover recovered (the
-        // continuation commits the fresh ladder's `hash(rung 1)` in the middle
-        // of the spent code's additions), and one committed LAST among its
-        // committing entry's additions, the position a ladder's own next
-        // commitment takes everywhere else (`decisions/0007`: the
-        // ladder-anchored genesis, the reveal-and-commit entries, the pointer
-        // move all put it there, while the approval's commit puts the
-        // enrollee's update-key hash first of two). The last two rules are what
-        // hold on the seedless walk, whose a-priori set stops at the anchor: no
-        // ceremony authorizes the ladder's own next rung while the current one
-        // stands and signs, so that stays the double reveal the tests refuse.
-        if (pending &&
-            currentUpdateKeys.has(pending.key) &&
-            ladderSigned({ entry: log[index], ladderKeys })) {
-            for (const key of addedKeys) {
-                const hash = await deriveNextKeyHash(key);
-                const at = pending.claims.indexOf(hash);
-                if (at === -1 || derivedHashes.has(hash) || handedOver.has(hash)) {
-                    continue;
-                }
-                const origin = commitIndex.get(hash);
-                const originFacts = origin === undefined ? undefined : facts[origin.entryIndex];
-                if (originFacts === undefined ||
-                    origin.at === originFacts.addedHashes.length - 1) {
-                    continue;
-                }
-                const staged = pending.claims[at + 1];
-                const transferred = new Set([hash]);
-                if (staged !== undefined &&
-                    !derivedHashes.has(staged) &&
-                    !handedOver.has(staged)) {
-                    transferred.add(staged);
-                }
-                for (const claim of transferred) {
-                    ladderHashes.delete(claim);
-                }
+        // as the completion above transfers them when the rung leaves. No signer
+        // check gates this: who signs the add entry does not change whose key it
+        // authorizes, and the signer is a later rung of the same ladder when a
+        // self-enrollment climbed between the approval's two entries (keeping
+        // the approval's hashes as residue claims) and an enrolled client when
+        // one resumed a torn ladder-arm approval. Three hashes never transfer:
+        // one the ladder knows a priori (seed-derived, the anchor's, or
+        // recovered), one the handover recovered (the continuation commits the
+        // fresh ladder's `hash(rung 1)` in the middle of the spent code's
+        // additions), and one committed LAST among its committing entry's
+        // additions, the position a ladder's own next commitment takes
+        // everywhere else (`decisions/0007`: the ladder-anchored genesis, the
+        // reveal-and-commit entries, the pointer move all put it there, while
+        // the approval's commit puts the enrollee's update-key hash first of
+        // two). The last two rules are what hold on the seedless walk, whose
+        // a-priori set stops at the anchor.
+        const transferable = (hash) => ladderHashes.has(hash) &&
+            !derivedHashes.has(hash) &&
+            !handedOver.has(hash);
+        for (const hash of addedKeyHashes) {
+            if (!transferable(hash)) {
+                continue;
+            }
+            const origin = commitIndex.get(hash);
+            const committed = origin && facts[origin.entryIndex]?.addedHashes;
+            if (!origin || !committed || origin.at === committed.length - 1) {
+                continue;
+            }
+            const staged = committed[origin.at + 1];
+            const transferred = new Set([hash]);
+            if (staged !== undefined && transferable(staged)) {
+                transferred.add(staged);
+            }
+            for (const claim of transferred) {
+                ladderHashes.delete(claim);
+            }
+            if (pending) {
                 pending.claims = pending.claims.filter(claim => !transferred.has(claim));
             }
         }
         // A newly authorized key matching a known ladder commitment is a reveal.
-        const reveals = [];
-        for (const key of addedKeys) {
-            if (ladderKeys.has(key) ||
-                ladderHashes.has(await deriveNextKeyHash(key))) {
-                reveals.push(key);
-            }
-        }
+        const reveals = addedKeys.filter((key, at) => ladderKeys.has(key) || ladderHashes.has(addedKeyHashes[at]));
         if (reveals.length > 1 || (reveals.length === 1 && pending)) {
             throw new LadderAttributionError('The published log reveals more than one rung of this ladder at ' +
                 'once; refusing to attribute an ambiguous history.');