@interop/wallet-core 0.93.0 → 0.95.0

package/dist/connections/writers.js

@@ -0,0 +1,485 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The directory's writer arm: the `writers` list on a wallet client's entry,
+ * one member per `writerId` the client has written under. Lazy registration
+ * with its throttled liveness touch, the pull-path touch, the per-entry sweep
+ * with its two-phase expiry, and the join a history view resolves a
+ * revision's `writerId` through.
+ *
+ * Orphaning is a writer's normal end: a cleared browser profile cannot
+ * deregister. So no cleanup here depends on the dying writer. Any replica
+ * that reads the directory sweeps it, every sweep write is conditional on the
+ * ETag it read, and a lost race is skipped, so concurrent sweepers converge.
+ * Registration waits until the writer is encountered in a second session
+ * under the same account, which keeps one-shot writers (an incognito window,
+ * a cleared profile) off the entry altogether.
+ *
+ * Every field is advisory display data. A pulled revision's `writerId` is
+ * not verified, so a host can replay a registered one and keep its member
+ * active. Nothing here is an input to an authorization decision.
+ */
+import { normalizeDisplayName } from '../labelText.js';
+import { signingKeyMultibaseOfDid } from './didKey.js';
+import { connectionWriterPolicy, isJsonObject, isWritableConnectionEntry, newConnectionEntry } from './entry.js';
+import { connectionResourceId } from './resourceId.js';
+import { isLostConnectionRace, writeConnection } from './upsert.js';
+/**
+ * A writer member's `lastSeen` as a time no later than `now`. A writer whose
+ * clock runs fast would otherwise keep its member newest, ahead of every
+ * eviction.
+ *
+ * @param options {object}
+ * @param options.writer {ConnectionWriter}
+ * @param options.now {Date}
+ * @returns {number}
+ */
+function effectiveLastSeen({ writer, now }) {
+    return Math.min(Date.parse(writer.lastSeen), now.getTime());
+}
+/**
+ * Writer members ordered newest-`lastSeen` first, ties broken by `writerId`,
+ * so every sweeper drops the same ones.
+ *
+ * @param options {object}
+ * @param options.writers {ConnectionWriter[]}
+ * @param options.now {Date}
+ * @returns {ConnectionWriter[]}
+ */
+function newestFirst({ writers, now }) {
+    return [...writers].sort((left, right) => effectiveLastSeen({ writer: right, now }) -
+        effectiveLastSeen({ writer: left, now }) ||
+        (left.writerId < right.writerId ? -1 : 1));
+}
+/**
+ * Reads the writer first-seen record, or `undefined` when it is missing or
+ * malformed.
+ *
+ * @param body {unknown}
+ * @returns {WriterFirstSeenRecord | undefined}
+ */
+function parseFirstSeenRecord(body) {
+    if (!isJsonObject(body)) {
+        return undefined;
+    }
+    const { accountDid, writerId, firstSessionAt, lastTouchedAt } = body;
+    if (typeof accountDid !== 'string' ||
+        typeof writerId !== 'string' ||
+        typeof firstSessionAt !== 'string' ||
+        Number.isNaN(Date.parse(firstSessionAt)) ||
+        (lastTouchedAt !== undefined &&
+            (typeof lastTouchedAt !== 'string' ||
+                Number.isNaN(Date.parse(lastTouchedAt))))) {
+        return undefined;
+    }
+    return {
+        accountDid,
+        writerId,
+        firstSessionAt,
+        ...(lastTouchedAt !== undefined && { lastTouchedAt })
+    };
+}
+/**
+ * The entry's writers with one member's `lastSeen` moved to `now` and the
+ * member marked active.
+ *
+ * @param options {object}
+ * @param options.writers {ConnectionWriter[]}
+ * @param options.member {ConnectionWriter}   one of `writers`
+ * @param options.now {Date}
+ * @returns {ConnectionWriter[]}
+ */
+function touchedWriters({ writers, member, now }) {
+    const lastSeen = now.toISOString();
+    return writers.map(writer => writer === member ? { ...writer, lastSeen, active: true } : writer);
+}
+/**
+ * The change {@link registerConnectionWriter} applies: create the entry, or
+ * add or touch this client's member, or stop with the outcome that forbids
+ * the write. A new member first makes room under the cap, dropping the
+ * oldest-`lastSeen` members. `added` says whether the body carries a new
+ * member rather than a touched one.
+ *
+ * @param options {object}
+ * @param [options.current] {WritableConnection}
+ * @param options.did {string}
+ * @param options.writerId {string}
+ * @param options.label {string}
+ * @param options.listedInDocument {boolean}
+ * @param options.now {Date}
+ * @param options.policy {ConnectionWriterPolicy}
+ * @returns {object}
+ */
+function withOwnWriter({ current, did, writerId, label, listedInDocument, now, policy }) {
+    const lastSeen = now.toISOString();
+    const ownMember = { writerId, label, lastSeen, active: true };
+    if (current === undefined) {
+        if (!listedInDocument) {
+            return { stop: 'unlisted' };
+        }
+        return {
+            body: {
+                ...newConnectionEntry({ kind: 'wallet-client', did, now }),
+                name: label,
+                writers: [ownMember]
+            },
+            added: true
+        };
+    }
+    const { entry } = current;
+    if (entry.kind !== 'wallet-client') {
+        return { stop: 'kind-mismatch' };
+    }
+    if (entry.retired !== undefined && !listedInDocument) {
+        return { stop: 'retired' };
+    }
+    const existing = entry.writers.find(writer => writer.writerId === writerId);
+    let writers;
+    if (existing !== undefined) {
+        writers = touchedWriters({ writers: entry.writers, member: existing, now });
+    }
+    else {
+        const kept = newestFirst({ writers: entry.writers, now }).slice(0, Math.max(policy.maxWriters - 1, 0));
+        writers = [
+            ...entry.writers.filter(writer => kept.includes(writer)),
+            ownMember
+        ];
+    }
+    const body = {
+        ...current.body,
+        lastSeen,
+        writers
+    };
+    // A retired entry this client still stands in the document for is a
+    // forget torn after its retirement: un-retire it.
+    delete body.retired;
+    return { body, added: existing === undefined };
+}
+/**
+ * Registers this client's writer on its own `wallet-client` entry once the
+ * writer is encountered in a second session under the account, and touches
+ * the member's `lastSeen` at most once per touch interval after that. Call it
+ * on the wallet's connect or sync path; calls within the interval cost no
+ * I/O. The interval runs from the last settled call, whatever its outcome,
+ * so an entry this client cannot write (`unlisted`, `retired`,
+ * `kind-mismatch`, `refused`) is re-read once per interval and not on every
+ * call. Only `raced` leaves the next call to try again at once.
+ *
+ * An absent entry is created (`kind: 'wallet-client'`, `id` this client's
+ * did:key, `name` the platform label), which converges a lost
+ * enrollment-time write, but only while the verified account document lists
+ * this client. A retired entry is un-retired while the document lists this
+ * client (a forget torn after its retirement) and left alone otherwise. A
+ * new member first makes room under the per-entry writer cap.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}   the collection's blinded-index
+ *   key
+ * @param options.local {WriterFirstSeenStore}
+ * @param options.accountDid {string}   the account the first-seen record is
+ *   kept under
+ * @param options.did {string}   this client's did:key
+ * @param options.writerId {string}   this client's writer
+ * @param options.label {string}   the coarse platform self-description a new
+ *   member (and a new entry's `name`) takes; held to the display-name rule,
+ *   and refused with a `TypeError` outside it
+ * @param options.listedInDocument {boolean}   whether the verified account
+ *   document lists this client
+ * @param options.sessionStartedAt {Date}   when the current session began; a
+ *   first-seen record written at or after it is this session's own
+ * @param [options.now] {Date}
+ * @param [options.policy] {Partial<ConnectionWriterPolicy>}
+ * @returns {Promise<WriterRegistrationOutcome>}
+ */
+export async function registerConnectionWriter({ store, hmacKey, local, accountDid, did, writerId, label, listedInDocument, sessionStartedAt, now = new Date(), policy }) {
+    const resolved = connectionWriterPolicy(policy);
+    const name = normalizeDisplayName({ value: label });
+    if (name === undefined) {
+        throw new TypeError('A writer label is 1 to 64 code points once control and bidi ' +
+            'characters are stripped.');
+    }
+    const firstSeen = parseFirstSeenRecord(await local.get());
+    if (firstSeen === undefined ||
+        firstSeen.accountDid !== accountDid ||
+        firstSeen.writerId !== writerId) {
+        await local.put({
+            accountDid,
+            writerId,
+            firstSessionAt: sessionStartedAt.toISOString()
+        });
+        return 'deferred';
+    }
+    if (Date.parse(firstSeen.firstSessionAt) >= sessionStartedAt.getTime()) {
+        return 'deferred';
+    }
+    if (firstSeen.lastTouchedAt !== undefined &&
+        now.getTime() - Date.parse(firstSeen.lastTouchedAt) <
+            resolved.touchIntervalMs) {
+        return 'fresh';
+    }
+    let written = 'touched';
+    const outcome = await racedAs('raced', async () => writeConnection({
+        store,
+        hmacKey,
+        resourceId: await connectionResourceId({ hmacKey, did }),
+        unwritable: 'refused',
+        change(current) {
+            const next = withOwnWriter({
+                current,
+                did,
+                writerId,
+                label: name,
+                listedInDocument,
+                now,
+                policy: resolved
+            });
+            written = next.added === true ? 'registered' : 'touched';
+            return next;
+        }
+    }));
+    if (outcome !== 'raced') {
+        await local.put({ ...firstSeen, lastTouchedAt: now.toISOString() });
+    }
+    return outcome === 'created' || outcome === 'updated' ? written : outcome;
+}
+/**
+ * Runs one {@link writeConnection} and turns the lost race it throws after
+ * its last attempt into `raced`. Every other throw propagates.
+ *
+ * @param raced {Raced}   the outcome a lost race resolves to
+ * @param write {Function}
+ * @returns {Promise<object>}   the write's outcome, or `raced`
+ */
+async function racedAs(raced, write) {
+    try {
+        return (await write()).outcome;
+    }
+    catch (err) {
+        if (isLostConnectionRace(err)) {
+            return raced;
+        }
+        throw err;
+    }
+}
+/**
+ * Touches a registered writer's member from a pulled revision's `writerId`:
+ * the remembered session's pull path, throttled like the client's own touch.
+ * The writer is found in a listing already read, so the call costs no extra
+ * listing read, and a member the listing shows as fresh costs no I/O at all.
+ * An unregistered `writerId` is ignored, and so is a writer on a retired
+ * entry, so a replayed revision cannot keep a departed client's writer
+ * alive.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.listing {ConnectionsListing}   the latest listing read
+ * @param options.writerId {string}   the pulled revision's `writerId`
+ * @param [options.now] {Date}
+ * @param [options.policy] {Partial<ConnectionWriterPolicy>}
+ * @returns {Promise<WriterTouchOutcome>}
+ */
+export async function touchConnectionWriter({ store, hmacKey, listing, writerId, now = new Date(), policy }) {
+    const resolved = connectionWriterPolicy(policy);
+    const found = listing.entries.find(item => item.entry.writers.some(writer => writer.writerId === writerId));
+    if (found === undefined) {
+        return 'unregistered';
+    }
+    // Decided from the listing first, so the common fresh member costs no read.
+    const listed = memberToTouch({
+        entry: found.entry,
+        writerId,
+        now,
+        policy: resolved
+    });
+    if ('stop' in listed) {
+        return listed.stop;
+    }
+    const outcome = await racedAs('raced', () => writeConnection({
+        store,
+        hmacKey,
+        resourceId: found.resourceId,
+        unwritable: 'refused',
+        change(current) {
+            if (current === undefined) {
+                return { stop: 'unregistered' };
+            }
+            const next = memberToTouch({
+                entry: current.entry,
+                writerId,
+                now,
+                policy: resolved
+            });
+            if ('stop' in next) {
+                return next;
+            }
+            return {
+                body: {
+                    ...current.body,
+                    writers: touchedWriters({
+                        writers: current.entry.writers,
+                        member: next.member,
+                        now
+                    })
+                }
+            };
+        }
+    }));
+    return outcome === 'created' || outcome === 'updated' ? 'touched' : outcome;
+}
+/**
+ * The member a touch advances on an entry, or the outcome that stops the
+ * touch: a retired entry, a `writerId` the entry does not carry, or a member
+ * touched within the interval.
+ *
+ * @param options {object}
+ * @param options.entry {ConnectionEntry}
+ * @param options.writerId {string}
+ * @param options.now {Date}
+ * @param options.policy {ConnectionWriterPolicy}
+ * @returns {object}
+ */
+function memberToTouch({ entry, writerId, now, policy }) {
+    if (entry.retired !== undefined) {
+        return { stop: 'retired' };
+    }
+    const member = entry.writers.find(writer => writer.writerId === writerId);
+    if (member === undefined) {
+        return { stop: 'unregistered' };
+    }
+    if (now.getTime() - effectiveLastSeen({ writer: member, now }) <
+        policy.touchIntervalMs) {
+        return { stop: 'fresh' };
+    }
+    return { member };
+}
+/**
+ * The two-phase expiry over one entry's writers, or `undefined` when it
+ * changes nothing. Past the cap, the oldest-`lastSeen` members are dropped.
+ * Among the members kept, an active one past the inactivity window is marked
+ * inactive.
+ *
+ * @param options {object}
+ * @param options.entry {ConnectionEntry}
+ * @param options.now {Date}
+ * @param options.policy {ConnectionWriterPolicy}
+ * @returns {object | undefined}
+ */
+function sweptWriters({ entry, now, policy }) {
+    const kept = new Set(newestFirst({ writers: entry.writers, now }).slice(0, Math.max(policy.maxWriters, 0)));
+    const markedInactive = [];
+    const dropped = [];
+    const writers = [];
+    for (const writer of entry.writers) {
+        if (!kept.has(writer)) {
+            dropped.push(writer.writerId);
+            continue;
+        }
+        const expired = now.getTime() - effectiveLastSeen({ writer, now }) >
+            policy.inactiveAfterMs;
+        if (writer.active && expired) {
+            markedInactive.push(writer.writerId);
+            writers.push({ ...writer, active: false });
+            continue;
+        }
+        writers.push(writer);
+    }
+    if (markedInactive.length === 0 && dropped.length === 0) {
+        return undefined;
+    }
+    return { writers, markedInactive, dropped };
+}
+/**
+ * Sweeps every entry of a listing already read: the per-entry two-phase
+ * expiry of `writers`, run at the directory listing read on both session
+ * kinds. Safe to run from any replica, and concurrently. Every write is
+ * conditional on the ETag the listing read, and a lost race is skipped: the
+ * entry as read still labels its revisions. Any other failed write is skipped
+ * the same way and reported in `failed`, so one unreachable entry does not
+ * fail the listing read the sweep rides on; the next sweep converges it. An
+ * entry this build cannot write (a newer `version`), or one read without an
+ * ETag, is left alone.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.listing {ConnectionsListing}
+ * @param [options.now] {Date}
+ * @param [options.policy] {Partial<ConnectionWriterPolicy>}
+ * @returns {Promise<ConnectionWritersSweep>}
+ */
+export async function sweepConnectionWriters({ store, listing, now = new Date(), policy }) {
+    const resolved = connectionWriterPolicy(policy);
+    const markedInactive = [];
+    const dropped = [];
+    const failed = [];
+    const entries = [];
+    for (const item of listing.entries) {
+        const swept = isWritableConnectionEntry(item.entry)
+            ? sweptWriters({ entry: item.entry, now, policy: resolved })
+            : undefined;
+        if (swept === undefined || item.etag === undefined) {
+            entries.push(item);
+            continue;
+        }
+        const body = { ...item.body, writers: swept.writers };
+        try {
+            const { etag } = await store.put({
+                resourceId: item.resourceId,
+                body,
+                ifMatch: item.etag
+            });
+            markedInactive.push(...swept.markedInactive);
+            dropped.push(...swept.dropped);
+            entries.push({
+                resourceId: item.resourceId,
+                ...(etag !== undefined && { etag }),
+                entry: { ...item.entry, writers: swept.writers },
+                body
+            });
+        }
+        catch (err) {
+            if (!isLostConnectionRace(err)) {
+                failed.push({ resourceId: item.resourceId, err });
+            }
+            entries.push(item);
+        }
+    }
+    return {
+        listing: { ...listing, entries },
+        markedInactive,
+        dropped,
+        failed
+    };
+}
+/**
+ * Resolves a revision's `writerId` against the directory's entries.
+ *
+ * @param options {object}
+ * @param options.writerId {string}
+ * @param options.entries {ConnectionEntry[]}   the listed entries
+ * @param options.enrolledSigningKeys {ReadonlySet<string>}   the signing-key
+ *   multibases of the enrolled clients in the verified account document
+ * @returns {ResolvedWriter | undefined}
+ */
+export function resolveWriter({ writerId, entries, enrolledSigningKeys }) {
+    for (const entry of entries) {
+        const member = entry.writers.find(writer => writer.writerId === writerId);
+        if (member === undefined) {
+            continue;
+        }
+        const multibase = entry.id === undefined
+            ? undefined
+            : signingKeyMultibaseOfDid({ did: entry.id });
+        const linked = multibase !== undefined && enrolledSigningKeys.has(multibase);
+        return {
+            label: entry.label ?? entry.name ?? member.label,
+            active: member.active,
+            retired: entry.retired !== undefined,
+            ...(linked && { clientSigningKeyMultibase: multibase })
+        };
+    }
+    return undefined;
+}
+//# sourceMappingURL=writers.js.map

package/dist/connections/writers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writers.js","sourceRoot":"","sources":["../../src/connections/writers.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA;AACtD,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,yBAAyB,EACzB,kBAAkB,EACnB,MAAM,YAAY,CAAA;AAOnB,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAGtD,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AA+DnE;;;;;;;;;GASG;AACH,SAAS,iBAAiB,CAAC,EACzB,MAAM,EACN,GAAG,EAIJ;IACC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;AAC7D,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,WAAW,CAAC,EACnB,OAAO,EACP,GAAG,EAIJ;IACC,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CACtB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACvC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QAC1C,CAAC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC5C,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAC3B,IAAa;IAEb,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,IAAI,CAAA;IACpE,IACE,OAAO,UAAU,KAAK,QAAQ;QAC9B,OAAO,QAAQ,KAAK,QAAQ;QAC5B,OAAO,cAAc,KAAK,QAAQ;QAClC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACxC,CAAC,aAAa,KAAK,SAAS;YAC1B,CAAC,OAAO,aAAa,KAAK,QAAQ;gBAChC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAC7C,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO;QACL,UAAU;QACV,QAAQ;QACR,cAAc;QACd,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,CAAC;KACtD,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,cAAc,CAAC,EACtB,OAAO,EACP,MAAM,EACN,GAAG,EAKJ;IACC,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;IAClC,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAC1B,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CACnE,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,aAAa,CAAC,EACrB,OAAO,EACP,GAAG,EACH,QAAQ,EACR,KAAK,EACL,gBAAgB,EAChB,GAAG,EACH,MAAM,EASP;IACC,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;IAClC,MAAM,SAAS,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IAC7D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;QAC7B,CAAC;QACD,OAAO;YACL,IAAI,EAAE;gBACJ,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;gBAC1D,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,CAAC,SAAS,CAAC;aACrB;YACD,KAAK,EAAE,IAAI;SACZ,CAAA;IACH,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IACzB,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAA;IAClC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IAC5B,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAA;IAC3E,IAAI,OAA2B,CAAA;IAC/B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,GAAG,cAAc,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAA;IAC7E,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAC7D,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC,CAAC,CACnC,CAAA;QACD,OAAO,GAAG;YACR,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxD,SAAS;SACV,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAA4B;QACpC,GAAG,OAAO,CAAC,IAAI;QACf,QAAQ;QACR,OAAO;KACR,CAAA;IACD,oEAAoE;IACpE,kDAAkD;IAClD,OAAO,IAAI,CAAC,OAAO,CAAA;IACnB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,KAAK,SAAS,EAAE,CAAA;AAChD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,EAC7C,KAAK,EACL,OAAO,EACP,KAAK,EACL,UAAU,EACV,GAAG,EACH,QAAQ,EACR,KAAK,EACL,gBAAgB,EAChB,gBAAgB,EAChB,GAAG,GAAG,IAAI,IAAI,EAAE,EAChB,MAAM,EAaP;IACC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;IAC/C,MAAM,IAAI,GAAG,oBAAoB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACnD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,SAAS,CACjB,8DAA8D;YAC5D,0BAA0B,CAC7B,CAAA;IACH,CAAC;IACD,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,CAAA;IACzD,IACE,SAAS,KAAK,SAAS;QACvB,SAAS,CAAC,UAAU,KAAK,UAAU;QACnC,SAAS,CAAC,QAAQ,KAAK,QAAQ,EAC/B,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,CAAC;YACd,UAAU;YACV,QAAQ;YACR,cAAc,EAAE,gBAAgB,CAAC,WAAW,EAAE;SAC/C,CAAC,CAAA;QACF,OAAO,UAAU,CAAA;IACnB,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;QACvE,OAAO,UAAU,CAAA;IACnB,CAAC;IACD,IACE,SAAS,CAAC,aAAa,KAAK,SAAS;QACrC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC;YACjD,QAAQ,CAAC,eAAe,EAC1B,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,IAAI,OAAO,GAA8B,SAAS,CAAA;IAClD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAChD,eAAe,CAA4B;QACzC,KAAK;QACL,OAAO;QACP,UAAU,EAAE,MAAM,oBAAoB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QACxD,UAAU,EAAE,SAAS;QACrB,MAAM,CAAC,OAAO;YACZ,MAAM,IAAI,GAAG,aAAa,CAAC;gBACzB,OAAO;gBACP,GAAG;gBACH,QAAQ;gBACR,KAAK,EAAE,IAAI;gBACX,gBAAgB;gBAChB,GAAG;gBACH,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAA;YACF,OAAO,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAA;YACxD,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAC,CACH,CAAA;IACD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,SAAS,EAAE,aAAa,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAA;AAC3E,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,OAAO,CACpB,KAAY,EACZ,KAA0C;IAE1C,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,OAAO,CAAA;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC;AAeD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,EAC1C,KAAK,EACL,OAAO,EACP,OAAO,EACP,QAAQ,EACR,GAAG,GAAG,IAAI,IAAI,EAAE,EAChB,MAAM,EAQP;IACC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAChE,CAAA;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,cAAc,CAAA;IACvB,CAAC;IACD,4EAA4E;IAC5E,MAAM,MAAM,GAAG,aAAa,CAAC;QAC3B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ;QACR,GAAG;QACH,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAA;IACF,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;QACrB,OAAO,MAAM,CAAC,IAAI,CAAA;IACpB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAC1C,eAAe,CAAqB;QAClC,KAAK;QACL,OAAO;QACP,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,SAAS;QACrB,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAA;YACjC,CAAC;YACD,MAAM,IAAI,GAAG,aAAa,CAAC;gBACzB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ;gBACR,GAAG;gBACH,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAA;YACF,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gBACnB,OAAO,IAAI,CAAA;YACb,CAAC;YACD,OAAO;gBACL,IAAI,EAAE;oBACJ,GAAG,OAAO,CAAC,IAAI;oBACf,OAAO,EAAE,cAAc,CAAC;wBACtB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;wBAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,GAAG;qBACJ,CAAC;iBACH;aACF,CAAA;QACH,CAAC;KACF,CAAC,CACH,CAAA;IACD,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAA;AAC7E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,aAAa,CAAC,EACrB,KAAK,EACL,QAAQ,EACR,GAAG,EACH,MAAM,EAMP;IACC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IAC5B,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAA;IACzE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAA;IACjC,CAAC;IACD,IACE,GAAG,CAAC,OAAO,EAAE,GAAG,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAC1D,MAAM,CAAC,eAAe,EACtB,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IAC1B,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,CAAA;AACnB,CAAC;AAeD;;;;;;;;;;;GAWG;AACH,SAAS,YAAY,CAAC,EACpB,KAAK,EACL,GAAG,EACH,MAAM,EAKP;IAGC,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,WAAW,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAChD,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAC/B,CACF,CAAA;IACD,MAAM,cAAc,GAAa,EAAE,CAAA;IACnC,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,MAAM,OAAO,GAAuB,EAAE,CAAA;IACtC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAC7B,SAAQ;QACV,CAAC;QACD,MAAM,OAAO,GACX,GAAG,CAAC,OAAO,EAAE,GAAG,iBAAiB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YAClD,MAAM,CAAC,eAAe,CAAA;QACxB,IAAI,MAAM,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YACpC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;YAC1C,SAAQ;QACV,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACtB,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,CAAA;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,EAC3C,KAAK,EACL,OAAO,EACP,GAAG,GAAG,IAAI,IAAI,EAAE,EAChB,MAAM,EAMP;IACC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;IAC/C,MAAM,cAAc,GAAa,EAAE,CAAA;IACnC,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,MAAM,MAAM,GAAgD,EAAE,CAAA;IAC9D,MAAM,OAAO,GAAqB,EAAE,CAAA;IACpC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;YACjD,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAC5D,CAAC,CAAC,SAAS,CAAA;QACb,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAClB,SAAQ;QACV,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;QACrD,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC;gBAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,IAAI;gBACJ,OAAO,EAAE,IAAI,CAAC,IAAI;aACnB,CAAC,CAAA;YACF,cAAc,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,CAAA;YAC5C,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAA;YAC9B,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;gBACnC,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;gBAChD,IAAI;aACL,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAA;YACnD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpB,CAAC;IACH,CAAC;IACD,OAAO;QACL,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE;QAChC,cAAc;QACd,OAAO;QACP,MAAM;KACP,CAAA;AACH,CAAC;AA0BD;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,EAC5B,QAAQ,EACR,OAAO,EACP,mBAAmB,EAKpB;IACC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAA;QACzE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,SAAQ;QACV,CAAC;QACD,MAAM,SAAS,GACb,KAAK,CAAC,EAAE,KAAK,SAAS;YACpB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,wBAAwB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAA;QACjD,MAAM,MAAM,GAAG,SAAS,KAAK,SAAS,IAAI,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC5E,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK;YAChD,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,SAAS;YACpC,GAAG,CAAC,MAAM,IAAI,EAAE,yBAAyB,EAAE,SAAS,EAAE,CAAC;SACxD,CAAA;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/enrollment/onboardingResponse.d.ts

@@ -12,9 +12,9 @@
  * string it receives straight to `approveEnrollment`; the connect-code payload
  * version is deliberately NOT bumped by this transport. Beside it rides an
  * optional display label the enrollee suggests for itself. The label lives in
- * the envelope rather than in the code because its durable home is the
- * account's client-labels record, which the approving client writes -- the
- * code stays the ceremony's own artifact.
+ * the envelope rather than in the code because its durable home is the new
+ * client's `connections` directory entry, whose `name` the approving client
+ * writes -- the code stays the ceremony's own artifact.
  *
  * The label is attacker-adjacent free text that renders on the approver's
  * consent screen, so it is stripped of control characters, trimmed, and

package/dist/enrollment/onboardingResponse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"onboardingResponse.d.ts","sourceRoot":"","sources":["../../src/enrollment/onboardingResponse.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAEL,2BAA2B,EAC5B,MAAM,iBAAiB,CAAA;AAExB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAExD;;GAEG;AACH,eAAO,MAAM,2BAA2B,IAAI,CAAA;AAE5C,OAAO,EAAE,2BAA2B,EAAE,CAAA;AAEtC;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,gBAAgB,EAAE;QAChB,CAAC,EAAE,MAAM,CAAA;QACT,IAAI,EAAE,MAAM,CAAA;QACZ,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAA;CACF,CAAA;AAoCD;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,IAAI,EACJ,KAAK,EACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,wBAAwB,CAU3B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,EAAE,IAAI,EAAE,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IACpE,OAAO,EAAE,iBAAiB,CAAA;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAsBA"}
+{"version":3,"file":"onboardingResponse.d.ts","sourceRoot":"","sources":["../../src/enrollment/onboardingResponse.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAEL,2BAA2B,EAE5B,MAAM,iBAAiB,CAAA;AAExB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAExD;;GAEG;AACH,eAAO,MAAM,2BAA2B,IAAI,CAAA;AAE5C,OAAO,EAAE,2BAA2B,EAAE,CAAA;AAEtC;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,gBAAgB,EAAE;QAChB,CAAC,EAAE,MAAM,CAAA;QACT,IAAI,EAAE,MAAM,CAAA;QACZ,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAA;CACF,CAAA;AAwCD;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,IAAI,EACJ,KAAK,EACN,EAAE;IACD,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,wBAAwB,CAU3B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,EAAE,IAAI,EAAE,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IACpE,OAAO,EAAE,iBAAiB,CAAA;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAsBA"}

package/dist/enrollment/onboardingResponse.js

@@ -12,9 +12,9 @@
  * string it receives straight to `approveEnrollment`; the connect-code payload
  * version is deliberately NOT bumped by this transport. Beside it rides an
  * optional display label the enrollee suggests for itself. The label lives in
- * the envelope rather than in the code because its durable home is the
- * account's client-labels record, which the approving client writes -- the
- * code stays the ceremony's own artifact.
+ * the envelope rather than in the code because its durable home is the new
+ * client's `connections` directory entry, whose `name` the approving client
+ * writes -- the code stays the ceremony's own artifact.
  *
  * The label is attacker-adjacent free text that renders on the approver's
  * consent screen, so it is stripped of control characters, trimmed, and
@@ -22,7 +22,7 @@
  * truncated: a truncated label would be a silently different name for a client
  * the person is about to authorize, where a refusal costs only a fresh code.
  */
-import { LABEL_STRIPPED_CHARACTERS, ONBOARDING_LABEL_MAX_LENGTH } from '../labelText.js';
+import { normalizeDisplayName, ONBOARDING_LABEL_MAX_LENGTH, strippedDisplayText } from '../labelText.js';
 import { parseEnrollmentRequest } from './enrollment.js';
 /**
  * The onboarding-response envelope version this build mints and accepts.
@@ -30,10 +30,13 @@ import { parseEnrollmentRequest } from './enrollment.js';
 export const ONBOARDING_RESPONSE_VERSION = 1;
 export { ONBOARDING_LABEL_MAX_LENGTH };
 /**
- * Sanitizes a suggested display label: strips the control and bidi characters
- * above, trims surrounding whitespace, and refuses anything still longer than
+ * Sanitizes a suggested display label by the shared display-name rule
+ * (`normalizeDisplayName`): strips the control and bidi characters above,
+ * trims surrounding whitespace, and refuses anything still longer than
  * {@link ONBOARDING_LABEL_MAX_LENGTH}. A label that sanitizes to nothing at
  * all is absent rather than empty, so no consent screen renders a blank name.
+ * The directory codec bounds a stored `name` by the same rule, so a label
+ * this accepts is one the approver can store.
  *
  * @param options {object}
  * @param options.label {unknown}   the envelope's `label` member, if any
@@ -46,15 +49,16 @@ function sanitizedOnboardingLabel({ label }) {
     if (typeof label !== 'string') {
         throw new Error('An onboarding response label must be a string.');
     }
-    const sanitized = label.replace(LABEL_STRIPPED_CHARACTERS, '').trim();
-    if (sanitized.length === 0) {
-        return undefined;
+    const sanitized = normalizeDisplayName({ value: label });
+    if (sanitized !== undefined) {
+        return sanitized;
     }
-    if ([...sanitized].length > ONBOARDING_LABEL_MAX_LENGTH) {
-        throw new Error(`An onboarding response label may be at most ` +
-            `${ONBOARDING_LABEL_MAX_LENGTH} characters.`);
+    // Refused: a blank label is absent, and only a too-long one is an error.
+    if (strippedDisplayText({ value: label }).length === 0) {
+        return undefined;
     }
-    return sanitized;
+    throw new Error(`An onboarding response label may be at most ` +
+        `${ONBOARDING_LABEL_MAX_LENGTH} characters.`);
 }
 /**
  * ENROLLEE: builds the response envelope for a connect code it just minted.

package/dist/enrollment/onboardingResponse.js.map

@@ -1 +1 @@
-{"version":3,"file":"onboardingResponse.js","sourceRoot":"","sources":["../../src/enrollment/onboardingResponse.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC5B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAA;AAGxD;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAA;AAE5C,OAAO,EAAE,2BAA2B,EAAE,CAAA;AActC;;;;;;;;;GASG;AACH,SAAS,wBAAwB,CAAC,EAChC,KAAK,EAGN;IACC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IACnE,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACrE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,GAAG,2BAA2B,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,8CAA8C;YAC5C,GAAG,2BAA2B,cAAc,CAC/C,CAAA;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CAAC,EACvC,IAAI,EACJ,KAAK,EAIN;IACC,sBAAsB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IAChC,MAAM,SAAS,GAAG,wBAAwB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,OAAO;QACL,gBAAgB,EAAE;YAChB,CAAC,EAAE,2BAA2B;YAC9B,IAAI;YACJ,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;SACrD;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAE,IAAI,EAAqB;IAKjE,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,EAAE,gBAAgB,EAAE,GAAG,IAA+B,CAAA;IAC5D,IAAI,gBAAgB,KAAK,IAAI,IAAI,OAAO,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;IACzE,CAAC;IACD,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,gBAA2C,CAAA;IACtE,IAAI,CAAC,KAAK,2BAA2B,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,4CAA4C,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC5E,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;IACrE,CAAC;IACD,MAAM,OAAO,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IAChD,MAAM,SAAS,GAAG,wBAAwB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,OAAO;QACL,OAAO;QACP,IAAI;QACJ,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;KACrD,CAAA;AACH,CAAC"}
+{"version":3,"file":"onboardingResponse.js","sourceRoot":"","sources":["../../src/enrollment/onboardingResponse.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACpB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAA;AAGxD;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAA;AAE5C,OAAO,EAAE,2BAA2B,EAAE,CAAA;AActC;;;;;;;;;;;;GAYG;AACH,SAAS,wBAAwB,CAAC,EAChC,KAAK,EAGN;IACC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IACnE,CAAC;IACD,MAAM,SAAS,GAAG,oBAAoB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACxD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,yEAAyE;IACzE,IAAI,mBAAmB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,IAAI,KAAK,CACb,8CAA8C;QAC5C,GAAG,2BAA2B,cAAc,CAC/C,CAAA;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CAAC,EACvC,IAAI,EACJ,KAAK,EAIN;IACC,sBAAsB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IAChC,MAAM,SAAS,GAAG,wBAAwB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,OAAO;QACL,gBAAgB,EAAE;YAChB,CAAC,EAAE,2BAA2B;YAC9B,IAAI;YACJ,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;SACrD;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAE,IAAI,EAAqB;IAKjE,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,EAAE,gBAAgB,EAAE,GAAG,IAA+B,CAAA;IAC5D,IAAI,gBAAgB,KAAK,IAAI,IAAI,OAAO,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;IACzE,CAAC;IACD,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,gBAA2C,CAAA;IACtE,IAAI,CAAC,KAAK,2BAA2B,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,4CAA4C,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC5E,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;IACrE,CAAC;IACD,MAAM,OAAO,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IAChD,MAAM,SAAS,GAAG,wBAAwB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,OAAO;QACL,OAAO;QACP,IAAI;QACJ,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;KACrD,CAAA;AACH,CAAC"}

package/dist/keys/index.d.ts

@@ -62,10 +62,6 @@
  *   escrowed into every epoch.
  * - `enrolledClientRosterRecipients` -- the enrolled clients a document keys,
  *   as roster recipients; the escrow direction's candidate list.
- * - `readClientLabels` / `setClientLabel` / `removeClientLabel` /
- *   `wasClientLabelsStore` -- the enrolled-client display labels
- *   (`key-map/client-labels.json`), the record a "your wallets" surface names
- *   clients from, and the WAS-backed store they run through.
  * - `rotateUserKeyRoster` / `unwrapUserKeyGenerations` /
  *   `rotateCollectionEpochsToUserKey`
  *   / `cascadeCollectionsToUserKey` / `userKeyAsRecipient` -- the user key rotation
@@ -116,7 +112,4 @@ export { isSealableDescriptorStore } from './rosterLogStore.js';
 export type { SealableEncryptionDescriptorStore } from './rosterLogStore.js';
 export { ensureIndexedFirstEpoch, ensureWalletSpaceEpochs, WalletSpaceProvisioningError, walletSpaceProvisioner } from './spaceEpochs.js';
 export type { WalletSpaceEpochsResult } from './spaceEpochs.js';
-export { readClientLabels, removeClientLabel, setClientLabel } from './clientLabels.js';
-export type { ClientLabelsRecord, ClientLabelsStore } from './clientLabels.js';
-export { wasClientLabelsStore } from './wasLabelsStore.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/keys/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/keys/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6FG;AACH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC3E,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,kBAAkB,EACnB,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAE3C,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EACrB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,0BAA0B,EAC3B,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EACV,eAAe,EACf,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EACL,yBAAyB,EACzB,+BAA+B,EAC/B,cAAc,EACd,8BAA8B,EAC9B,mBAAmB,EACnB,4BAA4B,EAC5B,2BAA2B,EAC3B,wBAAwB,EACxB,sBAAsB,EACtB,8BAA8B,EAC9B,iBAAiB,EACjB,8BAA8B,EAC9B,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EACL,2BAA2B,EAC3B,+BAA+B,EAChC,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EACnB,MAAM,yBAAyB,CAAA;AAChC,YAAY,EACV,gCAAgC,EAChC,oBAAoB,EACrB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,mBAAmB,EACnB,+BAA+B,EAC/B,gCAAgC,EACjC,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EACnB,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AAEtE,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,0BAA0B,EAC3B,MAAM,yBAAyB,CAAA;AAChC,YAAY,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,EACL,4BAA4B,EAC5B,kBAAkB,EACnB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,YAAY,EAAE,iCAAiC,EAAE,MAAM,qBAAqB,CAAA;AAE5E,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,4BAA4B,EAC5B,sBAAsB,EACvB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AAE/D,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACf,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAE9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/keys/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyFG;AACH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC3E,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,kBAAkB,EACnB,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAE3C,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EACrB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,0BAA0B,EAC3B,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EACV,eAAe,EACf,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EACL,yBAAyB,EACzB,+BAA+B,EAC/B,cAAc,EACd,8BAA8B,EAC9B,mBAAmB,EACnB,4BAA4B,EAC5B,2BAA2B,EAC3B,wBAAwB,EACxB,sBAAsB,EACtB,8BAA8B,EAC9B,iBAAiB,EACjB,8BAA8B,EAC9B,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EACL,2BAA2B,EAC3B,+BAA+B,EAChC,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EACnB,MAAM,yBAAyB,CAAA;AAChC,YAAY,EACV,gCAAgC,EAChC,oBAAoB,EACrB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,mBAAmB,EACnB,+BAA+B,EAC/B,gCAAgC,EACjC,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EACnB,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AAEtE,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,0BAA0B,EAC3B,MAAM,yBAAyB,CAAA;AAChC,YAAY,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,EACL,4BAA4B,EAC5B,kBAAkB,EACnB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,YAAY,EAAE,iCAAiC,EAAE,MAAM,qBAAqB,CAAA;AAE5E,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,4BAA4B,EAC5B,sBAAsB,EACvB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA"}

package/dist/keys/index.js

@@ -62,10 +62,6 @@
  *   escrowed into every epoch.
  * - `enrolledClientRosterRecipients` -- the enrolled clients a document keys,
  *   as roster recipients; the escrow direction's candidate list.
- * - `readClientLabels` / `setClientLabel` / `removeClientLabel` /
- *   `wasClientLabelsStore` -- the enrolled-client display labels
- *   (`key-map/client-labels.json`), the record a "your wallets" surface names
- *   clients from, and the WAS-backed store they run through.
  * - `rotateUserKeyRoster` / `unwrapUserKeyGenerations` /
  *   `rotateCollectionEpochsToUserKey`
  *   / `cascadeCollectionsToUserKey` / `userKeyAsRecipient` -- the user key rotation
@@ -107,6 +103,4 @@ export { accountCollectionStores, collectionDescriptorLogStore, collectionDescri
 export { userKeyRosterDescriptorStore, userKeyRosterPinId } from './rosterStore.js';
 export { isSealableDescriptorStore } from './rosterLogStore.js';
 export { ensureIndexedFirstEpoch, ensureWalletSpaceEpochs, WalletSpaceProvisioningError, walletSpaceProvisioner } from './spaceEpochs.js';
-export { readClientLabels, removeClientLabel, setClientLabel } from './clientLabels.js';
-export { wasClientLabelsStore } from './wasLabelsStore.js';
 //# sourceMappingURL=index.js.map

package/dist/keys/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/keys/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6FG;AACH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC3E,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,kBAAkB,EACnB,MAAM,qBAAqB,CAAA;AAG5B,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EACrB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,0BAA0B,EAC3B,MAAM,sBAAsB,CAAA;AAQ7B,OAAO,EACL,yBAAyB,EACzB,+BAA+B,EAC/B,cAAc,EACd,8BAA8B,EAC9B,mBAAmB,EACnB,4BAA4B,EAC5B,2BAA2B,EAC3B,wBAAwB,EACxB,sBAAsB,EACtB,8BAA8B,EAC9B,iBAAiB,EACjB,8BAA8B,EAC9B,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EACL,2BAA2B,EAC3B,+BAA+B,EAChC,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EACnB,MAAM,yBAAyB,CAAA;AAKhC,OAAO,EACL,mBAAmB,EACnB,+BAA+B,EAC/B,gCAAgC,EACjC,MAAM,2BAA2B,CAAA;AAalC,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,0BAA0B,EAC3B,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EACL,4BAA4B,EAC5B,kBAAkB,EACnB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAG/D,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,4BAA4B,EAC5B,sBAAsB,EACvB,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACf,MAAM,mBAAmB,CAAA;AAG1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/keys/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyFG;AACH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC3E,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,kBAAkB,EACnB,MAAM,qBAAqB,CAAA;AAG5B,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EACrB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,0BAA0B,EAC3B,MAAM,sBAAsB,CAAA;AAQ7B,OAAO,EACL,yBAAyB,EACzB,+BAA+B,EAC/B,cAAc,EACd,8BAA8B,EAC9B,mBAAmB,EACnB,4BAA4B,EAC5B,2BAA2B,EAC3B,wBAAwB,EACxB,sBAAsB,EACtB,8BAA8B,EAC9B,iBAAiB,EACjB,8BAA8B,EAC9B,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EACL,2BAA2B,EAC3B,+BAA+B,EAChC,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EACnB,MAAM,yBAAyB,CAAA;AAKhC,OAAO,EACL,mBAAmB,EACnB,+BAA+B,EAC/B,gCAAgC,EACjC,MAAM,2BAA2B,CAAA;AAalC,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,0BAA0B,EAC3B,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EACL,4BAA4B,EAC5B,kBAAkB,EACnB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAG/D,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,4BAA4B,EAC5B,sBAAsB,EACvB,MAAM,kBAAkB,CAAA"}